./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2735524661 <...> forked to background, child pid 3063 no interfaces have a carrier [ 98.675329][ T3064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.695522][ T3064] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 105.374455][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. execve("./syz-executor2735524661", ["./syz-executor2735524661"], 0x7ffd267bdc30 /* 10 vars */) = 0 brk(NULL) = 0x555555ff2000 brk(0x555555ff2c40) = 0x555555ff2c40 arch_prctl(ARCH_SET_FS, 0x555555ff2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2735524661", 4096) = 28 brk(0x555556013c40) = 0x555556013c40 brk(0x555556014000) = 0x555556014000 mprotect(0x7fe4dd78a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ff25d0) = 3486 ./strace-static-x86_64: Process 3486 attached [pid 3486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3486] setpgid(0, 0) = 0 [pid 3486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3486] write(3, "1000", 4) = 4 [pid 3486] close(3) = 0 [pid 3486] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR) = 3 [ 138.527578][ T3486] kernel profiling enabled (shift: 0) [ 138.621724][ C1] ===================================================== [ 138.628925][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1ca/0x1d0 [ 138.635941][ C1] profile_tick+0x1ca/0x1d0 [ 138.640615][ C1] tick_sched_timer+0x5e4/0x700 [ 138.645602][ C1] __run_hrtimer+0x298/0x910 [ 138.650350][ C1] hrtimer_interrupt+0x78d/0x1440 [ 138.655522][ C1] __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 138.661652][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 138.667465][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.673597][ C1] _raw_spin_unlock_irqrestore+0x2f/0x50 [ 138.679424][ C1] __se_sys_ptrace+0x6fd/0x780 [ 138.684359][ C1] __x64_sys_ptrace+0xb9/0x110 [ 138.689292][ C1] do_syscall_64+0x3d/0xb0 [ 138.693844][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.699881][ C1] [ 138.702277][ C1] Local variable pp_stack.i created at: [ 138.707895][ C1] process_vm_rw+0x41b/0xf80 [ 138.712631][ C1] __x64_sys_process_vm_readv+0x11b/0x1a0 [ 138.718515][ C1] [ 138.720906][ C1] CPU: 1 PID: 3481 Comm: strace-static-x Not tainted 6.1.0-rc6-syzkaller-63555-ga472f15b3d1e #0 [ 138.731456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 138.741621][ C1] ===================================================== [ 138.748641][ C1] Disabling lock debugging due to kernel taint [ 138.754874][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 138.761393][ C1] CPU: 1 PID: 3481 Comm: strace-static-x Tainted: G B 6.1.0-rc6-syzkaller-63555-ga472f15b3d1e #0 [ 138.773429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 138.783593][ C1] Call Trace: [ 138.786961][ C1] [ 138.789885][ C1] dump_stack_lvl+0x1c8/0x256 [ 138.794724][ C1] dump_stack+0x1a/0x1d [ 138.799023][ C1] panic+0x4d3/0xc64 [ 138.803099][ C1] ? add_taint+0x104/0x1a0 [ 138.807685][ C1] kmsan_report+0x2ca/0x2d0 [ 138.812366][ C1] ? __stack_depot_save+0x21/0x4b0 [ 138.817646][ C1] ? __msan_warning+0x92/0x110 [ 138.822572][ C1] ? profile_tick+0x1ca/0x1d0 [ 138.827408][ C1] ? tick_sched_timer+0x5e4/0x700 [ 138.832568][ C1] ? __run_hrtimer+0x298/0x910 [ 138.837488][ C1] ? hrtimer_interrupt+0x78d/0x1440 [ 138.842847][ C1] ? __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 138.849157][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 138.855136][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.861450][ C1] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 138.867438][ C1] ? __se_sys_ptrace+0x6fd/0x780 [ 138.872535][ C1] ? __x64_sys_ptrace+0xb9/0x110 [ 138.877642][ C1] ? do_syscall_64+0x3d/0xb0 [ 138.882377][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.888602][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 138.894584][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 138.900586][ C1] ? run_posix_cpu_timers+0x4f4/0x8a0 [ 138.906135][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 138.912119][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 138.918104][ C1] __msan_warning+0x92/0x110 [ 138.922845][ C1] profile_tick+0x1ca/0x1d0 [ 138.927509][ C1] ? __se_sys_ptrace+0x6fd/0x780 [ 138.932612][ C1] tick_sched_timer+0x5e4/0x700 [ 138.937615][ C1] ? tick_setup_sched_timer+0x790/0x790 [ 138.943312][ C1] __run_hrtimer+0x298/0x910 [ 138.948074][ C1] hrtimer_interrupt+0x78d/0x1440 [ 138.953294][ C1] ? hrtimer_init+0x370/0x370 [ 138.958133][ C1] ? hrtimer_init+0x370/0x370 [ 138.962965][ C1] __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 138.969094][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 138.974908][ C1] [ 138.977943][ C1] [ 138.980951][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.987093][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x2f/0x50 [ 138.993701][ C1] Code: 56 53 49 89 f6 48 89 fb e8 4e c8 e0 f3 48 89 df e8 e6 bb e0 f3 c6 00 00 c6 03 00 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 4c 84 23 f3 65 8b 05 4d a1 bc 71 85 c0 74 05 5b 41 5e 5d c3 0f [ 139.013482][ C1] RSP: 0018:ffff88810f85be18 EFLAGS: 00000206 [ 139.019688][ C1] RAX: ffff88811745dac0 RBX: ffff888117c5dac0 RCX: 00000000005759d1 [ 139.027807][ C1] RDX: ffff88811785dac0 RSI: 000000000576dd10 RDI: 0000000000000001 [ 139.035902][ C1] RBP: ffff88810f85be28 R08: ffffffff815c0c16 R09: ffff88811745dac0 [ 139.044097][ C1] R10: ffff88810f85bd38 R11: ffff88812569a080 R12: 0000000000000000 [ 139.052193][ C1] R13: 0000000000000282 R14: 0000000000000282 R15: ffff88812569abb0 [ 139.060302][ C1] ? __se_sys_ptrace+0x496/0x780 [ 139.065434][ C1] ? _raw_spin_unlock_irqrestore+0x1a/0x50 [ 139.071446][ C1] __se_sys_ptrace+0x6fd/0x780 [ 139.076414][ C1] __x64_sys_ptrace+0xb9/0x110 [ 139.081369][ C1] do_syscall_64+0x3d/0xb0 [ 139.085939][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.091980][ C1] RIP: 0033:0x4e6c1a [ 139.095976][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 4c [ 139.115750][ C1] RSP: 002b:00007ffd267bd7b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000065 [ 139.124319][ C1] RAX: ffffffffffffffda RBX: 0000000002376a50 RCX: 00000000004e6c1a [ 139.132423][ C1] RDX: 0000000000000058 RSI: 0000000000000d9d RDI: 000000000000420e [ 139.140510][ C1] RBP: 00007ffd267bd8b0 R08: 000000000000420d R09: 0000000000000000 [ 139.148604][ C1] R10: 000000000063c820 R11: 0000000000000206 R12: 0000000002376a50 [ 139.156709][ C1] R13: 00007ffd267bd90c R14: 000000000000857f R15: 0000000000617180 [ 139.164834][ C1] [ 139.168134][ C1] Kernel Offset: disabled [ 139.172513][ C1] Rebooting in 86400 seconds..