./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1024947914 <...> Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. execve("./syz-executor1024947914", ["./syz-executor1024947914"], 0x7ffca628fb70 /* 10 vars */) = 0 brk(NULL) = 0x55557d4db000 brk(0x55557d4dbd00) = 0x55557d4dbd00 arch_prctl(ARCH_SET_FS, 0x55557d4db380) = 0 set_tid_address(0x55557d4db650) = 5006 set_robust_list(0x55557d4db660, 24) = 0 rseq(0x55557d4dbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1024947914", 4096) = 28 getrandom("\xd1\x74\xec\x87\xc2\x85\x5b\xba", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557d4dbd00 brk(0x55557d4fcd00) = 0x55557d4fcd00 brk(0x55557d4fd000) = 0x55557d4fd000 mprotect(0x7fbb98dbb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557d4db650) = 5007 ./strace-static-x86_64: Process 5007 attached [pid 5007] set_robust_list(0x55557d4db660, 24) = 0 [pid 5007] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5007] setsid() = 1 [pid 5007] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5007] dup2(3, 201) = 201 [pid 5007] close(3) = 0 [pid 5007] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5007] unshare(CLONE_NEWNS) = 0 [pid 5007] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5007] unshare(CLONE_NEWIPC) = 0 [pid 5007] unshare(CLONE_NEWCGROUP) = 0 [pid 5007] unshare(CLONE_NEWUTS) = 0 [pid 5007] unshare(CLONE_SYSVSEM) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "16777216", 8) = 8 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "536870912", 9) = 9 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "8192", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5007] close(3) = 0 [pid 5007] getpid() = 1 [pid 5007] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5033] set_robust_list(0x55557d4db660, 24 [pid 5007] <... clone resumed>, child_tidptr=0x55557d4db650) = 2 [pid 5033] <... set_robust_list resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5033] setns(201, 0) = 0 [pid 5033] socket(AF_IEEE802154, SOCK_RAW, 0) = 4 [pid 5033] setns(3, 0) = 0 [pid 5033] close(3) = 0 [pid 5033] setsockopt(4, SOL_SOCKET, SO_BINDTODEVICE, "\x6e\x72\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 0 [ 192.663996][ T5033] ===================================================== [ 192.671504][ T5033] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470 [ 192.678355][ T5033] ax25cmp+0x3a5/0x470 [ 192.682685][ T5033] nr_dev_get+0x20e/0x450 [ 192.687557][ T5033] nr_route_frame+0x1a2/0xfe0 [ 192.692478][ T5033] nr_xmit+0x5a/0x1c0 [ 192.697035][ T5033] dev_hard_start_xmit+0x247/0xa20 [ 192.702444][ T5033] __dev_queue_xmit+0x348d/0x52c0 [ 192.707951][ T5033] raw_sendmsg+0x64e/0xc10 [ 192.712613][ T5033] ieee802154_sock_sendmsg+0x96/0xd0 [ 192.718460][ T5033] __sock_sendmsg+0x30f/0x380 [ 192.723387][ T5033] ____sys_sendmsg+0x903/0xb60 [ 192.728589][ T5033] ___sys_sendmsg+0x28d/0x3c0 [ 192.733544][ T5033] __sys_sendmmsg+0x3c4/0x950 [ 192.738720][ T5033] __x64_sys_sendmmsg+0xbc/0x120 [ 192.743971][ T5033] do_syscall_64+0xd5/0x1f0 [ 192.748876][ T5033] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 192.755149][ T5033] [ 192.757573][ T5033] Uninit was created at: [ 192.762122][ T5033] kmem_cache_alloc_node+0x613/0xc50 [ 192.767848][ T5033] kmalloc_reserve+0x13d/0x4a0 [ 192.772852][ T5033] __alloc_skb+0x35b/0x7a0 [ 192.777645][ T5033] alloc_skb_with_frags+0xc8/0xbf0 [ 192.783018][ T5033] sock_alloc_send_pskb+0xa81/0xbf0 [ 192.788639][ T5033] raw_sendmsg+0x367/0xc10 [ 192.793309][ T5033] ieee802154_sock_sendmsg+0x96/0xd0 [ 192.799062][ T5033] __sock_sendmsg+0x30f/0x380 [ 192.803987][ T5033] ____sys_sendmsg+0x903/0xb60 [ 192.809249][ T5033] ___sys_sendmsg+0x28d/0x3c0 [ 192.814199][ T5033] __sys_sendmmsg+0x3c4/0x950 [ 192.819356][ T5033] __x64_sys_sendmmsg+0xbc/0x120 [ 192.824791][ T5033] do_syscall_64+0xd5/0x1f0 [ 192.829566][ T5033] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 192.835857][ T5033] [ 192.838312][ T5033] CPU: 1 PID: 5033 Comm: syz-executor102 Not tainted 6.9.0-rc2-syzkaller-00194-g8cb4a9a82b21 #0 [ 192.849174][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 192.859555][ T5033] ===================================================== [ 192.866871][ T5033] Disabling lock debugging due to kernel taint [ 192.873483][ T5033] Kernel panic - not syncing: kmsan.panic set ... [ 192.880089][ T5033] CPU: 1 PID: 5033 Comm: syz-executor102 Tainted: G B 6.9.0-rc2-syzkaller-00194-g8cb4a9a82b21 #0 [ 192.892248][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 192.902519][ T5033] Call Trace: [ 192.905963][ T5033] [ 192.909018][ T5033] dump_stack_lvl+0x216/0x2d0 [ 192.913906][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 192.919912][ T5033] dump_stack+0x1e/0x30 [ 192.924322][ T5033] panic+0x4e2/0xcd0 [ 192.928430][ T5033] ? kmsan_get_metadata+0xe1/0x1d0 [ 192.933815][ T5033] kmsan_report+0x2d5/0x2e0 [ 192.938562][ T5033] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 192.944628][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 192.950061][ T5033] ? __msan_warning+0x95/0x120 [ 192.955116][ T5033] ? ax25cmp+0x3a5/0x470 [ 192.959564][ T5033] ? nr_dev_get+0x20e/0x450 [ 192.964251][ T5033] ? nr_route_frame+0x1a2/0xfe0 [ 192.969267][ T5033] ? nr_xmit+0x5a/0x1c0 [ 192.973645][ T5033] ? dev_hard_start_xmit+0x247/0xa20 [ 192.979208][ T5033] ? __dev_queue_xmit+0x348d/0x52c0 [ 192.984683][ T5033] ? raw_sendmsg+0x64e/0xc10 [ 192.989528][ T5033] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 192.995276][ T5033] ? __sock_sendmsg+0x30f/0x380 [ 193.000369][ T5033] ? ____sys_sendmsg+0x903/0xb60 [ 193.005601][ T5033] ? ___sys_sendmsg+0x28d/0x3c0 [ 193.010826][ T5033] ? __sys_sendmmsg+0x3c4/0x950 [ 193.015970][ T5033] ? __x64_sys_sendmmsg+0xbc/0x120 [ 193.021410][ T5033] ? do_syscall_64+0xd5/0x1f0 [ 193.026624][ T5033] ? entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 193.032993][ T5033] ? __alloc_skb+0x35b/0x7a0 [ 193.037847][ T5033] ? alloc_skb_with_frags+0xc8/0xbf0 [ 193.043499][ T5033] ? sock_alloc_send_pskb+0xa81/0xbf0 [ 193.049217][ T5033] ? raw_sendmsg+0x367/0xc10 [ 193.054021][ T5033] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 193.059743][ T5033] ? __sock_sendmsg+0x30f/0x380 [ 193.064778][ T5033] ? ____sys_sendmsg+0x903/0xb60 [ 193.069911][ T5033] ? ___sys_sendmsg+0x28d/0x3c0 [ 193.074979][ T5033] ? __sys_sendmmsg+0x3c4/0x950 [ 193.080124][ T5033] ? __x64_sys_sendmmsg+0xbc/0x120 [ 193.085528][ T5033] ? do_syscall_64+0xd5/0x1f0 [ 193.090489][ T5033] ? entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 193.096832][ T5033] ? kmem_cache_alloc_node+0x613/0xc50 [ 193.102781][ T5033] ? __alloc_skb+0x1e9/0x7a0 [ 193.108256][ T5033] ? alloc_skb_with_frags+0xc8/0xbf0 [ 193.113845][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.119282][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.125290][ T5033] ? kmem_cache_alloc_node+0x8e/0xc50 [ 193.130973][ T5033] ? filter_irq_stacks+0x60/0x1a0 [ 193.136312][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.141707][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.147716][ T5033] __msan_warning+0x95/0x120 [ 193.152611][ T5033] ax25cmp+0x3a5/0x470 [ 193.156891][ T5033] nr_dev_get+0x20e/0x450 [ 193.161485][ T5033] nr_route_frame+0x1a2/0xfe0 [ 193.166405][ T5033] ? validate_xmit_xfrm+0x8b/0x1bb0 [ 193.171877][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.178018][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.183528][ T5033] nr_xmit+0x5a/0x1c0 [ 193.187746][ T5033] ? __pfx_nr_xmit+0x10/0x10 [ 193.192795][ T5033] dev_hard_start_xmit+0x247/0xa20 [ 193.198317][ T5033] __dev_queue_xmit+0x348d/0x52c0 [ 193.203617][ T5033] ? __dev_queue_xmit+0x352/0x52c0 [ 193.209008][ T5033] ? _copy_from_iter+0x974/0x24e0 [ 193.214327][ T5033] raw_sendmsg+0x64e/0xc10 [ 193.219000][ T5033] ? __pfx_raw_sendmsg+0x10/0x10 [ 193.224211][ T5033] ieee802154_sock_sendmsg+0x96/0xd0 [ 193.229767][ T5033] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 193.236326][ T5033] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 193.242619][ T5033] __sock_sendmsg+0x30f/0x380 [ 193.247749][ T5033] ____sys_sendmsg+0x903/0xb60 [ 193.253338][ T5033] ___sys_sendmsg+0x28d/0x3c0 [ 193.258287][ T5033] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 193.264313][ T5033] ? stack_depot_save_flags+0x66d/0x6e0 [ 193.270138][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.275626][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.282314][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.288456][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.294628][ T5033] __sys_sendmmsg+0x3c4/0x950 [ 193.299633][ T5033] ? kmsan_get_metadata+0x146/0x1d0 [ 193.305082][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.311227][ T5033] ? ieee802154_llsec_add_dev+0x990/0xa20 [ 193.317393][ T5033] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 193.323411][ T5033] __x64_sys_sendmmsg+0xbc/0x120 [ 193.328726][ T5033] do_syscall_64+0xd5/0x1f0 [ 193.333623][ T5033] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 193.339734][ T5033] RIP: 0033:0x7fbb98d42b19 [ 193.344372][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 193.364610][ T5033] RSP: 002b:00007ffd099bd8a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.373284][ T5033] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbb98d42b19 [ 193.381861][ T5033] RDX: 0000000000000001 RSI: 00000000200020c0 RDI: 0000000000000004 [ 193.390025][ T5033] RBP: 0000000000000003 R08: 0000000100000000 R09: 0000000100000000 [ 193.398336][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 000055557d4db338 [ 193.406563][ T5033] R13: 0000000000000013 R14: 0000000000000001 R15: 0000000000000003 [ 193.415081][ T5033] [ 193.418571][ T5033] Kernel Offset: disabled [ 193.422991][ T5033] Rebooting in 86400 seconds..