./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4043378699 <...> Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. execve("./syz-executor4043378699", ["./syz-executor4043378699"], 0x7ffe5a48c260 /* 10 vars */) = 0 brk(NULL) = 0x55558c140000 brk(0x55558c140d00) = 0x55558c140d00 arch_prctl(ARCH_SET_FS, 0x55558c140380) = 0 set_tid_address(0x55558c140650) = 5783 set_robust_list(0x55558c140660, 24) = 0 rseq(0x55558c140ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4043378699", 4096) = 28 getrandom("\x49\x05\x1e\x73\xfc\x0c\xdb\x93", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558c140d00 brk(0x55558c161d00) = 0x55558c161d00 brk(0x55558c162000) = 0x55558c162000 mprotect(0x7efdb204f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558c140650) = 5784 ./strace-static-x86_64: Process 5784 attached [pid 5784] set_robust_list(0x55558c140660, 24) = 0 [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5784] getppid() = 0 [pid 5784] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5784] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5784] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5784] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5784] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5784] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5784] unshare(CLONE_NEWNS) = 0 [pid 5784] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5784] unshare(CLONE_NEWIPC) = 0 [pid 5784] unshare(CLONE_NEWCGROUP) = 0 [pid 5784] unshare(CLONE_NEWUTS) = 0 [pid 5784] unshare(CLONE_SYSVSEM) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "16777216", 8) = 8 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "536870912", 9) = 9 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1024", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "8192", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1024", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1024", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5784] close(3) = 0 [pid 5784] getpid() = 1 [pid 5784] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 199.015055][ T5811] __dump_stack+0x26/0x30 [ 199.019606][ T5811] dump_stack_lvl+0x53/0x270 [ 199.024339][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 199.030349][ T5811] dump_stack+0x1e/0x25 [ 199.034745][ T5811] panic+0x4bd/0xd50 [ 199.038849][ T5811] kmsan_report+0x29d/0x2a0 [ 199.043495][ T5811] ? filter_irq_stacks+0x49/0x190 [ 199.048665][ T5811] ? __msan_warning+0x96/0x120 [ 199.053580][ T5811] ? pptp_xmit+0xc34/0x2720 [ 199.058217][ T5811] ? ppp_input+0x1d6/0xe60 [ 199.062772][ T5811] ? pppoe_rcv_core+0x1e8/0x760 [ 199.067761][ T5811] ? sk_backlog_rcv+0x13f/0x420 [ 199.072848][ T5811] ? __release_sock+0x1d3/0x330 [ 199.077834][ T5811] ? release_sock+0x6b/0x270 [ 199.082570][ T5811] ? pppoe_sendmsg+0x15d/0xcb0 [ 199.087453][ T5811] ? __sock_sendmsg+0x330/0x3d0 [ 199.092479][ T5811] ? ____sys_sendmsg+0x893/0xd80 [ 199.097598][ T5811] ? ___sys_sendmsg+0x271/0x3b0 [ 199.102619][ T5811] ? __sys_sendmmsg+0x2dc/0x7d0 [ 199.107615][ T5811] ? __x64_sys_sendmmsg+0xc6/0x150 [ 199.112844][ T5811] ? x64_sys_call+0x3ce7/0x3db0 [ 199.117849][ T5811] ? do_syscall_64+0xd9/0x1b0 [ 199.122667][ T5811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.128964][ T5811] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 199.135432][ T5811] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 199.141657][ T5811] ? kmem_cache_free+0x3de/0xf00 [ 199.146752][ T5811] ? __kfree_skb+0x20b/0x260 [ 199.151563][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.156987][ T5811] __msan_warning+0x96/0x120 [ 199.161749][ T5811] pptp_xmit+0xc34/0x2720 [ 199.166250][ T5811] ? __pfx_pptp_xmit+0x10/0x10 [ 199.171138][ T5811] ppp_input+0x1d6/0xe60 [ 199.175619][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.181048][ T5811] pppoe_rcv_core+0x1e8/0x760 [ 199.185858][ T5811] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 199.191217][ T5811] sk_backlog_rcv+0x13f/0x420 [ 199.196047][ T5811] __release_sock+0x1d3/0x330 [ 199.200878][ T5811] release_sock+0x6b/0x270 [ 199.205529][ T5811] pppoe_sendmsg+0x15d/0xcb0 [ 199.210270][ T5811] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 199.215538][ T5811] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 199.220783][ T5811] __sock_sendmsg+0x330/0x3d0 [ 199.225636][ T5811] ____sys_sendmsg+0x893/0xd80 [ 199.230641][ T5811] ___sys_sendmsg+0x271/0x3b0 [ 199.235590][ T5811] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 199.241633][ T5811] ? stack_depot_save_flags+0x60f/0x7c0 [ 199.247399][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.252933][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.258307][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 199.264354][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.269727][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 199.275765][ T5811] __sys_sendmmsg+0x2dc/0x7d0 [ 199.280563][ T5811] ? kmsan_get_metadata+0x105/0x1b0 [ 199.285910][ T5811] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 199.292473][ T5811] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 199.298748][ T5811] __x64_sys_sendmmsg+0xc6/0x150 [ 199.303857][ T5811] x64_sys_call+0x3ce7/0x3db0 [ 199.308737][ T5811] do_syscall_64+0xd9/0x1b0 [ 199.313396][ T5811] ? irqentry_exit+0x16/0x60 [ 199.318156][ T5811] ? clear_bhb_loop+0x25/0x80 [ 199.323041][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.329122][ T5811] RIP: 0033:0x7efdb1fd6f69 [ 199.333710][ T5811] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 199.353506][ T5811] RSP: 002b:00007ffd21cccc28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.362152][ T5811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007efdb1fd6f69 [ 199.370239][ T5811] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 199.378330][ T5811] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 199.386406][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21cccc80 [ 199.394499][ T5811] R13: 00007efdb20243fe R14: 0000000000000003 R15: 00007ffd21cccc60 [ 199.402610][ T5811] [ 199.406106][ T5811] Kernel Offset: disabled [ 199.410528][ T5811] Rebooting in 86400 seconds..