./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1354863240 <...> Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. execve("./syz-executor1354863240", ["./syz-executor1354863240"], 0x7ffd7ec4f730 /* 10 vars */) = 0 brk(NULL) = 0x555556cf8000 brk(0x555556cf8d00) = 0x555556cf8d00 arch_prctl(ARCH_SET_FS, 0x555556cf8380) = 0 set_tid_address(0x555556cf8650) = 4999 set_robust_list(0x555556cf8660, 24) = 0 rseq(0x555556cf8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1354863240", 4096) = 28 getrandom("\x04\xeb\x1f\x9d\xe0\x65\xb8\x1a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556cf8d00 brk(0x555556d19d00) = 0x555556d19d00 brk(0x555556d1a000) = 0x555556d1a000 mprotect(0x7f402d7c5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556cf8650) = 5000 ./strace-static-x86_64: Process 5000 attached [pid 5000] set_robust_list(0x555556cf8660, 24) = 0 [pid 5000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] setpgid(0, 0) = 0 [pid 5000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] write(3, "1000", 4) = 4 [pid 5000] close(3) = 0 [pid 5000] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_DSYNC|O_CLOEXEC) = 3 [ 167.157928][ T5000] kernel profiling enabled (shift: 0) [ 167.332635][ C1] ===================================================== [ 167.339913][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1a8/0x1b0 [ 167.347079][ C1] profile_tick+0x1a8/0x1b0 [ 167.351794][ C1] tick_nohz_highres_handler+0x595/0x690 [ 167.357667][ C1] __hrtimer_run_queues+0x570/0x1110 [ 167.364609][ C1] hrtimer_interrupt+0x47b/0x14a0 [ 167.369993][ C1] __sysvec_apic_timer_interrupt+0x9f/0x390 [ 167.376136][ C1] sysvec_apic_timer_interrupt+0x75/0x90 [ 167.382165][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 167.388666][ C1] _raw_spin_unlock_irq+0x25/0x50 [ 167.393937][ C1] ptrace_check_attach+0x493/0x5f0 [ 167.399285][ C1] __se_sys_ptrace+0x269/0x750 [ 167.404280][ C1] __x64_sys_ptrace+0xbd/0x110 [ 167.409264][ C1] do_syscall_64+0x44/0x110 [ 167.413976][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 167.420211][ C1] [ 167.422659][ C1] Local variable pp_stack.i created at: [ 167.428427][ C1] process_vm_rw+0x42f/0x1a60 [ 167.434330][ C1] __x64_sys_process_vm_readv+0x11f/0x1a0 [ 167.441107][ C1] [ 167.443573][ C1] CPU: 1 PID: 4996 Comm: strace-static-x Not tainted 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 167.454650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 167.464890][ C1] ===================================================== [ 167.472064][ C1] Disabling lock debugging due to kernel taint [ 167.478369][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 167.484947][ C1] CPU: 1 PID: 4996 Comm: strace-static-x Tainted: G B 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 167.497066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 167.512189][ C1] Call Trace: [ 167.515801][ C1] [ 167.518798][ C1] dump_stack_lvl+0x1bf/0x240 [ 167.524545][ C1] dump_stack+0x1e/0x20 [ 167.528925][ C1] panic+0x4de/0xc90 [ 167.533248][ C1] ? add_taint+0x108/0x1a0 [ 167.538008][ C1] kmsan_report+0x2d0/0x2d0 [ 167.543730][ C1] ? __msan_warning+0x96/0x110 [ 167.548845][ C1] ? profile_tick+0x1a8/0x1b0 [ 167.553739][ C1] ? tick_nohz_highres_handler+0x595/0x690 [ 167.559885][ C1] ? __hrtimer_run_queues+0x570/0x1110 [ 167.565801][ C1] ? hrtimer_interrupt+0x47b/0x14a0 [ 167.571244][ C1] ? __sysvec_apic_timer_interrupt+0x9f/0x390 [ 167.577554][ C1] ? sysvec_apic_timer_interrupt+0x75/0x90 [ 167.583612][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 167.590002][ C1] ? _raw_spin_unlock_irq+0x25/0x50 [ 167.595569][ C1] ? ptrace_check_attach+0x493/0x5f0 [ 167.601099][ C1] ? __se_sys_ptrace+0x269/0x750 [ 167.606550][ C1] ? __x64_sys_ptrace+0xbd/0x110 [ 167.611715][ C1] ? do_syscall_64+0x44/0x110 [ 167.616624][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 167.622975][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 167.629067][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 167.635408][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 167.641565][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 167.648876][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 167.654949][ C1] __msan_warning+0x96/0x110 [ 167.659800][ C1] profile_tick+0x1a8/0x1b0 [ 167.665406][ C1] ? ptrace_check_attach+0x493/0x5f0 [ 167.671038][ C1] tick_nohz_highres_handler+0x595/0x690 [ 167.677461][ C1] ? tick_setup_sched_timer+0x650/0x650 [ 167.683520][ C1] __hrtimer_run_queues+0x570/0x1110 [ 167.689226][ C1] hrtimer_interrupt+0x47b/0x14a0 [ 167.694705][ C1] ? kmsan_report+0x270/0x2d0 [ 167.699641][ C1] ? hrtimer_init+0x3a0/0x3a0 [ 167.704867][ C1] ? hrtimer_init+0x3a0/0x3a0 [ 167.709994][ C1] __sysvec_apic_timer_interrupt+0x9f/0x390 [ 167.716262][ C1] sysvec_apic_timer_interrupt+0x75/0x90 [ 167.722177][ C1] [ 167.725281][ C1] [ 167.728703][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 167.735010][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x50 [ 167.741067][ C1] Code: 00 00 00 66 90 f3 0f 1e fa 55 48 89 e5 53 48 89 fb e8 df 65 8f f3 48 89 df e8 47 59 8f f3 c6 00 00 c6 03 00 fb be 04 00 00 00 <48> c7 c7 88 42 0a 00 e8 ef 5a 8f f3 65 ff 0d 60 44 63 71 74 03 5b [ 167.762677][ C1] RSP: 0018:ffff8881182b3db0 EFLAGS: 00000282 [ 167.769124][ C1] RAX: ffff888116178840 RBX: ffff888116978840 RCX: 000000000056fb58 [ 167.777994][ C1] RDX: ffff888116578840 RSI: 0000000000000004 RDI: ffffea000000000f [ 167.786293][ C1] RBP: ffff8881182b3db8 R08: ffffffff815db56e R09: 0000000000000000 [ 167.794670][ C1] R10: ffff888116178840 R11: ffff888112c2a080 R12: ffff888116978840 [ 167.803062][ C1] R13: ffff888112ccc601 R14: 0000000000000000 R15: 0000000000000000 [ 167.812450][ C1] ? ptrace_check_attach+0x3fe/0x5f0 [ 167.818363][ C1] ptrace_check_attach+0x493/0x5f0 [ 167.823740][ C1] ? find_get_task_by_vpid+0x28d/0x300 [ 167.829445][ C1] __se_sys_ptrace+0x269/0x750 [ 167.839056][ C1] __x64_sys_ptrace+0xbd/0x110 [ 167.844104][ C1] do_syscall_64+0x44/0x110 [ 167.848797][ C1] ? sysvec_apic_timer_interrupt+0x4d/0x90 [ 167.854841][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 167.860979][ C1] RIP: 0033:0x4e987a [ 167.865045][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 54 [ 167.885942][ C1] RSP: 002b:00007ffd7ec4f250 EFLAGS: 00000206 ORIG_RAX: 0000000000000065 [ 167.894741][ C1] RAX: ffffffffffffffda RBX: 00000000017f6b90 RCX: 00000000004e987a [ 167.903437][ C1] RDX: 0000000000000058 RSI: 0000000000001387 RDI: 000000000000420e [ 167.911675][ C1] RBP: 0000000000664740 R08: 000000000000420d R09: 0000000000000387 [ 167.920063][ C1] R10: 0000000000664740 R11: 0000000000000206 R12: 00007ffd7ec4f39c [ 167.928268][ C1] R13: 000000000000857f R14: 00000000017f6b90 R15: 000000000063f160 [ 167.936702][ C1] [ 167.940419][ C1] Kernel Offset: disabled [ 167.944842][ C1] Rebooting in 86400 seconds..