./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2704274045 <...> Warning: Permanently added '10.128.1.162' (ECDSA) to the list of known hosts. execve("./syz-executor2704274045", ["./syz-executor2704274045"], 0x7fff0c7b4900 /* 10 vars */) = 0 brk(NULL) = 0x555555d5f000 brk(0x555555d5fc40) = 0x555555d5fc40 arch_prctl(ARCH_SET_FS, 0x555555d5f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2704274045", 4096) = 28 brk(0x555555d80c40) = 0x555555d80c40 brk(0x555555d81000) = 0x555555d81000 mprotect(0x7fbbfdc61000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d5f5d0) = 5010 ./strace-static-x86_64: Process 5010 attached [pid 5010] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5010] setsid() = 1 [pid 5010] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5010] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5010] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5010] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5010] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5010] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5010] unshare(CLONE_NEWNS) = 0 [pid 5010] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5010] unshare(CLONE_NEWIPC) = 0 [pid 5010] unshare(CLONE_NEWCGROUP) = 0 [pid 5010] unshare(CLONE_NEWUTS) = 0 [pid 5010] unshare(CLONE_SYSVSEM) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "16777216", 8) = 8 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "536870912", 9) = 9 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "1024", 4) = 4 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "8192", 4) = 4 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "1024", 4) = 4 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "1024", 4) = 4 [pid 5010] close(3) = 0 [pid 5010] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5010] close(3) = 0 [pid 5010] getpid() = 1 [pid 5010] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 147.756249][ T5037] dump_stack_lvl+0x1c8/0x260 [ 147.761067][ T5037] dump_stack+0x1a/0x20 [ 147.765318][ T5037] panic+0x4d3/0xc70 [ 147.769401][ T5037] ? add_taint+0x104/0x1a0 [ 147.774011][ T5037] kmsan_report+0x2cc/0x2d0 [ 147.778669][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 147.784632][ T5037] ? call_rcu+0x7e/0xcc0 [ 147.789038][ T5037] ? __msan_warning+0x92/0x110 [ 147.793908][ T5037] ? ip_tunnel_rcv+0xedc/0x2f60 [ 147.798907][ T5037] ? gre_rcv+0x1647/0x1a30 [ 147.803418][ T5037] ? gre_rcv+0x2a0/0x390 [ 147.807741][ T5037] ? ip_protocol_deliver_rcu+0x260/0x1320 [ 147.813625][ T5037] ? ip_local_deliver_finish+0x2a5/0x3a0 [ 147.819438][ T5037] ? ip_local_deliver+0x278/0x4a0 [ 147.824612][ T5037] ? ip_rcv+0x527/0x7c0 [ 147.828924][ T5037] ? __netif_receive_skb+0x1b3/0x5d0 [ 147.834328][ T5037] ? netif_receive_skb_internal+0x53/0x340 [ 147.840319][ T5037] ? netif_receive_skb+0x35/0x350 [ 147.845496][ T5037] ? tun_rx_batched+0x837/0x930 [ 147.850504][ T5037] ? tun_get_user+0x3b07/0x4090 [ 147.855465][ T5037] ? tun_chr_write_iter+0x3ab/0x5d0 [ 147.860809][ T5037] ? vfs_write+0x830/0x1570 [ 147.865420][ T5037] ? ksys_write+0x21b/0x4e0 [ 147.870067][ T5037] ? __x64_sys_write+0x8f/0xd0 [ 147.874958][ T5037] ? do_syscall_64+0x3d/0xb0 [ 147.879686][ T5037] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 147.885929][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 147.891899][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 147.897880][ T5037] ? call_rcu+0x60e/0xcc0 [ 147.902383][ T5037] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 147.908778][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 147.914690][ T5037] __msan_warning+0x92/0x110 [ 147.919383][ T5037] ip_tunnel_rcv+0xedc/0x2f60 [ 147.924231][ T5037] ? __iptunnel_pull_header+0x81f/0x980 [ 147.929914][ T5037] gre_rcv+0x1647/0x1a30 [ 147.934262][ T5037] ? raw_local_deliver+0x1326/0x1380 [ 147.939690][ T5037] ? erspan_build_header_v2+0x4f0/0x4f0 [ 147.945327][ T5037] gre_rcv+0x2a0/0x390 [ 147.949466][ T5037] ? gre_parse_header+0x1a00/0x1a00 [ 147.954746][ T5037] ip_protocol_deliver_rcu+0x260/0x1320 [ 147.960443][ T5037] ip_local_deliver_finish+0x2a5/0x3a0 [ 147.966079][ T5037] ip_local_deliver+0x278/0x4a0 [ 147.971092][ T5037] ? ip_local_deliver+0x4a0/0x4a0 [ 147.976244][ T5037] ? ip_protocol_deliver_rcu+0x1320/0x1320 [ 147.982158][ T5037] ip_rcv+0x527/0x7c0 [ 147.986241][ T5037] ? ip_rcv_core+0x1550/0x1550 [ 147.991129][ T5037] __netif_receive_skb+0x1b3/0x5d0 [ 147.996409][ T5037] ? ip_local_deliver_finish+0x3a0/0x3a0 [ 148.002215][ T5037] netif_receive_skb_internal+0x53/0x340 [ 148.008017][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 148.013979][ T5037] netif_receive_skb+0x35/0x350 [ 148.018998][ T5037] tun_rx_batched+0x837/0x930 [ 148.023801][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 148.029773][ T5037] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 148.035747][ T5037] tun_get_user+0x3b07/0x4090 [ 148.040589][ T5037] ? perf_trace_kmsan_exceed_max_origin_depth+0x70/0xb0 [ 148.047719][ T5037] tun_chr_write_iter+0x3ab/0x5d0 [ 148.052908][ T5037] ? tun_chr_read_iter+0x670/0x670 [ 148.058171][ T5037] vfs_write+0x830/0x1570 [ 148.062642][ T5037] ksys_write+0x21b/0x4e0 [ 148.067147][ T5037] __x64_sys_write+0x8f/0xd0 [ 148.071898][ T5037] do_syscall_64+0x3d/0xb0 [ 148.076454][ T5037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.082518][ T5037] RIP: 0033:0x7fbbfdbaeb43 [ 148.087048][ T5037] Code: ff ff bf 01 00 00 00 e8 ab 6f 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 148.106820][ T5037] RSP: 002b:00007ffcd6e46d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.115364][ T5037] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007fbbfdbaeb43 [ 148.123421][ T5037] RDX: 0000000000000034 RSI: 0000000020000180 RDI: 00000000000000c8 [ 148.131485][ T5037] RBP: 00007ffcd6e46da0 R08: 0000000000000000 R09: 00007ffcd6e467c0 [ 148.139556][ T5037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd6e46dc0 [ 148.147642][ T5037] R13: 0000000000000000 R14: 00007ffcd6e46d80 R15: 00007ffcd6e46df0 [ 148.155762][ T5037] [ 148.159028][ T5037] Kernel Offset: disabled [ 148.163409][ T5037] Rebooting in 86400 seconds..