./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2977558091 <...> Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. execve("./syz-executor2977558091", ["./syz-executor2977558091"], 0x7fff30a29630 /* 10 vars */) = 0 brk(NULL) = 0x555556d0c000 brk(0x555556d0cd40) = 0x555556d0cd40 arch_prctl(ARCH_SET_FS, 0x555556d0c3c0) = 0 set_tid_address(0x555556d0c690) = 5008 set_robust_list(0x555556d0c6a0, 24) = 0 rseq(0x555556d0cce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2977558091", 4096) = 28 getrandom("\x7a\xcc\x4a\xf9\xfb\x84\xa8\xe7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d0cd40 brk(0x555556d2dd40) = 0x555556d2dd40 brk(0x555556d2e000) = 0x555556d2e000 mprotect(0x7fd52da8c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5009 attached , child_tidptr=0x555556d0c690) = 5009 [pid 5009] set_robust_list(0x555556d0c6a0, 24) = 0 [pid 5009] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5009] setsid() = 1 [pid 5009] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5009] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5009] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5009] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5009] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5009] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5009] unshare(CLONE_NEWNS) = 0 [pid 5009] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5009] unshare(CLONE_NEWIPC) = 0 [pid 5009] unshare(CLONE_NEWCGROUP) = 0 [pid 5009] unshare(CLONE_NEWUTS) = 0 [pid 5009] unshare(CLONE_SYSVSEM) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "16777216", 8) = 8 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "536870912", 9) = 9 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1024", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "8192", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1024", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1024", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5009] close(3) = 0 [pid 5009] getpid() = 1 [pid 5009] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5036] rseq(0x7fd52d9c3fe0, 0x20, 0, 0x53053053 [pid 5035] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5036] <... rseq resumed>) = 0 [pid 5035] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5035] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] set_robust_list(0x7fd52d9c39a0, 24) = 0 [pid 5036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5036] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5036] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5036] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5036] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL) [pid 5035] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] <... socket resumed>) = 4 [pid 5036] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5035] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] dup(4 [pid 5035] <... futex resumed>) = 0 [pid 5036] <... dup resumed>) = 5 [pid 5035] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 0 [pid 5035] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] read(5, [pid 5035] <... futex resumed>) = 0 [pid 5035] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\x3c\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3c\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc3\x90\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\x3c\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 8224) = 110 [pid 5035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5035] futex(0x7fd52da9241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5036] <... futex resumed>) = 0 [pid 5036] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd52d982000 [pid 5035] mprotect(0x7fd52d983000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5035] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5035] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd52d9a2990, parent_tid=0x7fd52d9a2990, exit_signal=0, stack=0x7fd52d982000, stack_size=0x20300, tls=0x7fd52d9a26c0} => {parent_tid=[4]}, 88) = 4 ./strace-static-x86_64: Process 5037 attached [pid 5035] rt_sigprocmask(SIG_SETMASK, [], [pid 5037] rseq(0x7fd52d9a2fe0, 0x20, 0, 0x53053053 [pid 5035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5035] futex(0x7fd52da92418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] <... rseq resumed>) = 0 [pid 5035] futex(0x7fd52da9241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] set_robust_list(0x7fd52d9a29a0, 24) = 0 [pid 5037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5037] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x0c\x0f\x00\x00\x64\x00\x31\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xff\xff\xff\x00\x00\x00\x00\x08\x00\x01\x00\x62\x70\x66\x00\xe0\x0e\x02\x00\x4c\x0e\x01\x00\xe0\x0c\x09\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\xb4\x0c\x02\x80\x0c\x00\x08\x00\x00\x04\x00\x00\x00\x00\x00\x00\x0c\x00\x08\x00\xff\xff\xff\xff\xff\xff\xff\xff\x04\x04\x03\x00"..., iov_len=3852}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 3852 [pid 5037] futex(0x7fd52da9241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5037] futex(0x7fd52da92418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] <... futex resumed>) = 0 [pid 5035] close(3) = 0 [pid 5035] close(4) = 0 [pid 5035] close(5) = 0 [pid 5035] close(6) = -1 EBADF (Bad file descriptor) [pid 5035] close(7) = -1 EBADF (Bad file descriptor) [pid 5035] close(8) = -1 EBADF (Bad file descriptor) [pid 5035] close(9) = -1 EBADF (Bad file descriptor) [pid 5035] close(10) = -1 EBADF (Bad file descriptor) [pid 5035] close(11) = -1 EBADF (Bad file descriptor) [pid 5035] close(12) = -1 EBADF (Bad file descriptor) [pid 5035] close(13) = -1 EBADF (Bad file descriptor) [pid 5035] close(14) = -1 EBADF (Bad file descriptor) [pid 5035] close(15) = -1 EBADF (Bad file descriptor) [pid 5035] close(16) = -1 EBADF (Bad file descriptor) [pid 5035] close(17) = -1 EBADF (Bad file descriptor) [pid 5035] close(18) = -1 EBADF (Bad file descriptor) [pid 5035] close(19) = -1 EBADF (Bad file descriptor) [pid 5035] close(20) = -1 EBADF (Bad file descriptor) [pid 5035] close(21) = -1 EBADF (Bad file descriptor) [pid 5035] close(22) = -1 EBADF (Bad file descriptor) [pid 5035] close(23) = -1 EBADF (Bad file descriptor) [pid 5035] close(24) = -1 EBADF (Bad file descriptor) [pid 5035] close(25) = -1 EBADF (Bad file descriptor) [pid 5035] close(26) = -1 EBADF (Bad file descriptor) [pid 5035] close(27) = -1 EBADF (Bad file descriptor) [pid 5035] close(28) = -1 EBADF (Bad file descriptor) [pid 5035] close(29) = -1 EBADF (Bad file descriptor) [pid 5035] exit_group(0) = ? [pid 5037] <... futex resumed>) = ? [pid 5036] <... futex resumed>) = ? [pid 5036] +++ exited with 0 +++ [pid 5037] +++ exited with 0 +++ [pid 5035] +++ exited with 0 +++ [pid 5009] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5009] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d0c690) = 5 ./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x555556d0c6a0, 24) = 0 [pid 5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5038] setpgid(0, 0) = 0 [pid 5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5038] write(3, "1000", 4) = 4 [pid 5038] close(3) = 0 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] rt_sigaction(SIGRT_1, {sa_handler=0x7fd52da30e60, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd52da224e0}, NULL, 8) = 0 [pid 5038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd52d9a3000 [pid 5038] mprotect(0x7fd52d9a4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd52d9c3990, parent_tid=0x7fd52d9c3990, exit_signal=0, stack=0x7fd52d9a3000, stack_size=0x20300, tls=0x7fd52d9c36c0} => {parent_tid=[6]}, 88) = 6 [pid 5038] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5039 attached NULL, 8) = 0 [pid 5038] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] rseq(0x7fd52d9c3fe0, 0x20, 0, 0x53053053 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... rseq resumed>) = 0 [pid 5039] set_robust_list(0x7fd52d9c39a0, 24) = 0 [pid 5039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5039] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5039] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] <... futex resumed>) = 0 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5038] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL) [pid 5038] <... futex resumed>) = 0 [pid 5039] <... socket resumed>) = 4 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5039] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5038] <... futex resumed>) = 0 [pid 5039] dup(4 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... dup resumed>) = 5 [pid 5039] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] <... futex resumed>) = 0 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] read(5, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\x30\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x30\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc3\xb4\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\x30\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 8224) = 110 [pid 5039] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5039] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5038] <... futex resumed>) = 0 [pid 5039] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x0c\x0f\x00\x00\x64\x00\x31\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xff\xff\xff\x00\x00\x00\x00\x08\x00\x01\x00\x62\x70\x66\x00\xe0\x0e\x02\x00\x4c\x0e\x01\x00\xe0\x0c\x09\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\xb4\x0c\x02\x80\x0c\x00\x08\x00\x00\x04\x00\x00\x00\x00\x00\x00\x0c\x00\x08\x00\xff\xff\xff\xff\xff\xff\xff\xff\x04\x04\x03\x00"..., iov_len=3852}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5038] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... sendmsg resumed>) = 3852 [pid 5039] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5039] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] close(3) = 0 [pid 5038] close(4) = 0 [pid 5038] close(5) = 0 [pid 5038] close(6) = -1 EBADF (Bad file descriptor) [pid 5038] close(7) = -1 EBADF (Bad file descriptor) [pid 5038] close(8) = -1 EBADF (Bad file descriptor) [pid 5038] close(9) = -1 EBADF (Bad file descriptor) [pid 5038] close(10) = -1 EBADF (Bad file descriptor) [pid 5038] close(11) = -1 EBADF (Bad file descriptor) [pid 5038] close(12) = -1 EBADF (Bad file descriptor) [pid 5038] close(13) = -1 EBADF (Bad file descriptor) [pid 5038] close(14) = -1 EBADF (Bad file descriptor) [pid 5038] close(15) = -1 EBADF (Bad file descriptor) [pid 5038] close(16) = -1 EBADF (Bad file descriptor) [pid 5038] close(17) = -1 EBADF (Bad file descriptor) [pid 5038] close(18) = -1 EBADF (Bad file descriptor) [pid 5038] close(19) = -1 EBADF (Bad file descriptor) [pid 5038] close(20) = -1 EBADF (Bad file descriptor) [pid 5038] close(21) = -1 EBADF (Bad file descriptor) [pid 5038] close(22) = -1 EBADF (Bad file descriptor) [pid 5038] close(23) = -1 EBADF (Bad file descriptor) [pid 5038] close(24) = -1 EBADF (Bad file descriptor) [pid 5038] close(25) = -1 EBADF (Bad file descriptor) [pid 5038] close(26) = -1 EBADF (Bad file descriptor) [pid 5038] close(27) = -1 EBADF (Bad file descriptor) [pid 5038] close(28) = -1 EBADF (Bad file descriptor) [pid 5038] close(29) = -1 EBADF (Bad file descriptor) [pid 5038] exit_group(0 [pid 5039] <... futex resumed>) = ? [pid 5038] <... exit_group resumed>) = ? [pid 5039] +++ exited with 0 +++ [pid 5038] +++ exited with 0 +++ [pid 5009] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5009] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5040 attached , child_tidptr=0x555556d0c690) = 7 [pid 5040] set_robust_list(0x555556d0c6a0, 24) = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3) = 0 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5040] rt_sigaction(SIGRT_1, {sa_handler=0x7fd52da30e60, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd52da224e0}, NULL, 8) = 0 [pid 5040] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd52d9a3000 [pid 5040] mprotect(0x7fd52d9a4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5040] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd52d9c3990, parent_tid=0x7fd52d9c3990, exit_signal=0, stack=0x7fd52d9a3000, stack_size=0x20300, tls=0x7fd52d9c36c0}./strace-static-x86_64: Process 5041 attached => {parent_tid=[8]}, 88) = 8 [pid 5041] rseq(0x7fd52d9c3fe0, 0x20, 0, 0x53053053 [pid 5040] rt_sigprocmask(SIG_SETMASK, [], [pid 5041] <... rseq resumed>) = 0 [pid 5040] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5041] set_robust_list(0x7fd52d9c39a0, 24 [pid 5040] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... set_robust_list resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5041] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL) [pid 5040] <... futex resumed>) = 0 [pid 5041] <... socket resumed>) = 4 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] dup(4 [pid 5040] <... futex resumed>) = 0 [pid 5041] <... dup resumed>) = 5 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5040] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] read(5, [pid 5040] <... futex resumed>) = 0 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... read resumed>"\x60\x00\x00\x00\x00\x20\x3a\xff\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x85\x00\x7c\x09\x00\x00\x00\x00\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8224) = 72 [pid 5041] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 0 [pid 5040] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 1 [pid 5041] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x0c\x0f\x00\x00\x64\x00\x31\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xff\xff\xff\x00\x00\x00\x00\x08\x00\x01\x00\x62\x70\x66\x00\xe0\x0e\x02\x00\x4c\x0e\x01\x00\xe0\x0c\x09\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\xb4\x0c\x02\x80\x0c\x00\x08\x00\x00\x04\x00\x00\x00\x00\x00\x00\x0c\x00\x08\x00\xff\xff\xff\xff\xff\xff\xff\xff\x04\x04\x03\x00"..., iov_len=3852}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5040] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... sendmsg resumed>) = 3852 [pid 5041] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 0 [pid 5040] close(3) = 0 [pid 5040] close(4) = 0 [pid 5040] close(5) = 0 [pid 5040] close(6) = -1 EBADF (Bad file descriptor) [pid 5040] close(7) = -1 EBADF (Bad file descriptor) [pid 5040] close(8) = -1 EBADF (Bad file descriptor) [pid 5040] close(9) = -1 EBADF (Bad file descriptor) [pid 5040] close(10) = -1 EBADF (Bad file descriptor) [pid 5040] close(11) = -1 EBADF (Bad file descriptor) [pid 5040] close(12) = -1 EBADF (Bad file descriptor) [pid 5040] close(13) = -1 EBADF (Bad file descriptor) [pid 5040] close(14) = -1 EBADF (Bad file descriptor) [pid 5040] close(15) = -1 EBADF (Bad file descriptor) [pid 5040] close(16) = -1 EBADF (Bad file descriptor) [pid 5040] close(17) = -1 EBADF (Bad file descriptor) [pid 5040] close(18) = -1 EBADF (Bad file descriptor) [pid 5040] close(19) = -1 EBADF (Bad file descriptor) [pid 5040] close(20) = -1 EBADF (Bad file descriptor) [pid 5040] close(21) = -1 EBADF (Bad file descriptor) [pid 5040] close(22) = -1 EBADF (Bad file descriptor) [pid 5040] close(23) = -1 EBADF (Bad file descriptor) [pid 5040] close(24) = -1 EBADF (Bad file descriptor) [pid 5040] close(25) = -1 EBADF (Bad file descriptor) [pid 5040] close(26) = -1 EBADF (Bad file descriptor) [pid 5040] close(27) = -1 EBADF (Bad file descriptor) [pid 5040] close(28) = -1 EBADF (Bad file descriptor) [pid 5040] close(29) = -1 EBADF (Bad file descriptor) [pid 5040] exit_group(0 [pid 5041] <... futex resumed>) = ? [pid 5040] <... exit_group resumed>) = ? [pid 5041] +++ exited with 0 +++ [pid 5040] +++ exited with 0 +++ [pid 5009] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5009] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached [pid 5042] set_robust_list(0x555556d0c6a0, 24) = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] rt_sigaction(SIGRT_1, {sa_handler=0x7fd52da30e60, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd52da224e0}, NULL, 8) = 0 [pid 5009] <... clone resumed>, child_tidptr=0x555556d0c690) = 9 [pid 5042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd52d9a3000 [pid 5042] mprotect(0x7fd52d9a4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd52d9c3990, parent_tid=0x7fd52d9c3990, exit_signal=0, stack=0x7fd52d9a3000, stack_size=0x20300, tls=0x7fd52d9c36c0}./strace-static-x86_64: Process 5043 attached [pid 5043] rseq(0x7fd52d9c3fe0, 0x20, 0, 0x53053053 [pid 5042] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5043] <... rseq resumed>) = 0 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], [pid 5043] set_robust_list(0x7fd52d9c39a0, 24 [pid 5042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5043] <... set_robust_list resumed>) = 0 [pid 5042] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] rt_sigprocmask(SIG_SETMASK, [], [pid 5042] <... futex resumed>) = 0 [pid 5043] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5042] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5043] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5043] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5042] <... futex resumed>) = 0 [pid 5043] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL) [pid 5042] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... socket resumed>) = 4 [pid 5043] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5043] futex(0x7fd52da92408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5042] <... futex resumed>) = 0 [pid 5043] dup(4 [pid 5042] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... dup resumed>) = 5 [pid 5043] futex(0x7fd52da9240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd52da92408, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] read(5, [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd52da9240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fd52da9241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd52d982000 [pid 5042] mprotect(0x7fd52d983000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd52d9a2990, parent_tid=0x7fd52d9a2990, exit_signal=0, stack=0x7fd52d982000, stack_size=0x20300, tls=0x7fd52d9a26c0}./strace-static-x86_64: Process 5044 attached [pid 5044] rseq(0x7fd52d9a2fe0, 0x20, 0, 0x53053053 [pid 5042] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5044] <... rseq resumed>) = 0 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], [pid 5044] set_robust_list(0x7fd52d9a29a0, 24 [pid 5042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5044] <... set_robust_list resumed>) = 0 [pid 5044] rt_sigprocmask(SIG_SETMASK, [], [pid 5042] futex(0x7fd52da92418, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5044] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x0c\x0f\x00\x00\x64\x00\x31\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xff\xff\xff\x00\x00\x00\x00\x08\x00\x01\x00\x62\x70\x66\x00\xe0\x0e\x02\x00\x4c\x0e\x01\x00\xe0\x0c\x09\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\xb4\x0c\x02\x80\x0c\x00\x08\x00\x00\x04\x00\x00\x00\x00\x00\x00\x0c\x00\x08\x00\xff\xff\xff\xff\xff\xff\xff\xff\x04\x04\x03\x00"..., iov_len=3852}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd52da9241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... sendmsg resumed>) = 3852 [pid 5044] futex(0x7fd52da9241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [ 150.676178][ T5043] ===================================================== [ 150.684185][ T5043] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_iter+0x364/0x2520 [ 150.694207][ T5043] _copy_to_iter+0x364/0x2520 [ 150.699056][ T5043] simple_copy_to_iter+0x68/0xa0 [ 150.704338][ T5043] __skb_datagram_iter+0x123/0xdc0 [ 150.709608][ T5043] skb_copy_datagram_iter+0x5c/0x200 [ 150.715163][ T5043] packet_recvmsg+0xd9c/0x2000 [ 150.720099][ T5043] sock_read_iter+0x467/0x580 [ 150.725127][ T5043] vfs_read+0x8f6/0xe00 [ 150.729472][ T5043] ksys_read+0x20f/0x4c0 [ 150.733987][ T5043] __x64_sys_read+0x93/0xd0 [ 150.738640][ T5043] do_syscall_64+0x44/0x110 [ 150.743422][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 150.749477][ T5043] [ 150.751997][ T5043] Uninit was stored to memory at: [ 150.757374][ T5043] __netlink_deliver_tap+0x5be/0xc90 [ 150.762982][ T5043] netlink_unicast+0x10f1/0x1250 [ 150.768097][ T5043] netlink_sendmsg+0x1238/0x13d0 [ 150.773396][ T5043] ____sys_sendmsg+0x9c2/0xd60 [ 150.778344][ T5043] ___sys_sendmsg+0x28d/0x3c0 [ 150.783376][ T5043] __x64_sys_sendmsg+0x307/0x490 [ 150.788499][ T5043] do_syscall_64+0x44/0x110 [ 150.793332][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 150.799424][ T5043] [ 150.801980][ T5043] Uninit was created at: [ 150.806454][ T5043] free_unref_page_prepare+0xb0/0xa40 [ 150.812179][ T5043] free_unref_page_list+0xeb/0x1100 [ 150.817571][ T5043] release_pages+0x23d3/0x2410 [ 150.822680][ T5043] free_pages_and_swap_cache+0xd9/0xf0 [ 150.828312][ T5043] tlb_flush_mmu+0x6f5/0x980 [ 150.833309][ T5043] tlb_finish_mmu+0x101/0x260 [ 150.838171][ T5043] exit_mmap+0x49e/0xd30 [ 150.842739][ T5043] __mmput+0x13f/0x530 [ 150.847028][ T5043] mmput+0x8a/0xa0 [ 150.851093][ T5043] exit_mm+0x1b8/0x360 [ 150.855330][ T5043] do_exit+0xd57/0x4080 [ 150.859651][ T5043] do_group_exit+0x2fd/0x390 [ 150.864577][ T5043] __x64_sys_exit_group+0x3c/0x50 [ 150.869775][ T5043] do_syscall_64+0x44/0x110 [pid 5044] futex(0x7fd52da92418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] close(3) = 0 [pid 5042] close(4) = 0 [pid 5042] close(5) = 0 [pid 5042] close(6) = -1 EBADF (Bad file descriptor) [pid 5042] close(7) = -1 EBADF (Bad file descriptor) [pid 5042] close(8) = -1 EBADF (Bad file descriptor) [pid 5042] close(9) = -1 EBADF (Bad file descriptor) [pid 5042] close(10) = -1 EBADF (Bad file descriptor) [pid 5042] close(11) = -1 EBADF (Bad file descriptor) [pid 5042] close(12) = -1 EBADF (Bad file descriptor) [pid 5042] close(13) = -1 EBADF (Bad file descriptor) [pid 5042] close(14) = -1 EBADF (Bad file descriptor) [pid 5042] close(15) = -1 EBADF (Bad file descriptor) [pid 5042] close(16) = -1 EBADF (Bad file descriptor) [pid 5042] close(17) = -1 EBADF (Bad file descriptor) [pid 5042] close(18) = -1 EBADF (Bad file descriptor) [pid 5042] close(19) = -1 EBADF (Bad file descriptor) [pid 5042] close(20) = -1 EBADF (Bad file descriptor) [pid 5042] close(21) = -1 EBADF (Bad file descriptor) [ 150.874573][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 150.880638][ T5043] [ 150.883143][ T5043] Bytes 3852-3903 of 3904 are uninitialized [ 150.889138][ T5043] Memory access of size 3904 starts at ffff88812ea1e000 [ 150.896412][ T5043] Data copied to user address 0000000020003280 [ 150.903914][ T5043] [ 150.907032][ T5043] CPU: 1 PID: 5043 Comm: syz-executor297 Not tainted 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [pid 5042] close(22) = -1 EBADF (Bad file descriptor) [pid 5042] close(23) = -1 EBADF (Bad file descriptor) [pid 5042] close(24) = -1 EBADF (Bad file descriptor) [pid 5042] close(25) = -1 EBADF (Bad file descriptor) [pid 5042] close(26) = -1 EBADF (Bad file descriptor) [pid 5042] close(27) = -1 EBADF (Bad file descriptor) [pid 5042] close(28) = -1 EBADF (Bad file descriptor) [pid 5042] close(29) = -1 EBADF (Bad file descriptor) [pid 5042] exit_group(0) = ? [pid 5044] <... futex resumed>) = ? [pid 5044] +++ exited with 0 +++ [ 150.920971][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 150.931363][ T5043] ===================================================== [ 150.939224][ T5043] Disabling lock debugging due to kernel taint [ 150.946356][ T5043] Kernel panic - not syncing: kmsan.panic set ... [ 150.952885][ T5043] CPU: 1 PID: 5043 Comm: syz-executor297 Tainted: G B 6.7.0-rc5-syzkaller-00047-g5bd7ef53ffe5 #0 [ 150.964966][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 150.975148][ T5043] Call Trace: [ 150.978500][ T5043] [ 150.981504][ T5043] dump_stack_lvl+0x1bf/0x240 [ 150.986295][ T5043] dump_stack+0x1e/0x20 [ 150.990602][ T5043] panic+0x4de/0xc90 [ 150.994649][ T5043] ? add_taint+0x108/0x1a0 [ 150.999193][ T5043] kmsan_report+0x2d0/0x2d0 [ 151.003832][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 151.009854][ T5043] ? kmsan_internal_check_memory+0x476/0x530 [ 151.016128][ T5043] ? kmsan_copy_to_user+0xd3/0xf0 [ 151.021332][ T5043] ? _copy_to_iter+0x364/0x2520 [ 151.026352][ T5043] ? simple_copy_to_iter+0x68/0xa0 [ 151.031648][ T5043] ? __skb_datagram_iter+0x123/0xdc0 [ 151.037069][ T5043] ? skb_copy_datagram_iter+0x5c/0x200 [ 151.042696][ T5043] ? packet_recvmsg+0xd9c/0x2000 [ 151.047761][ T5043] ? sock_read_iter+0x467/0x580 [ 151.052820][ T5043] ? vfs_read+0x8f6/0xe00 [ 151.057342][ T5043] ? ksys_read+0x20f/0x4c0 [ 151.061838][ T5043] ? __x64_sys_read+0x93/0xd0 [ 151.066625][ T5043] ? do_syscall_64+0x44/0x110 [ 151.071425][ T5043] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 151.077699][ T5043] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 151.084145][ T5043] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 151.090435][ T5043] ? finish_task_switch+0x299/0x8d0 [ 151.095792][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 151.101899][ T5043] kmsan_internal_check_memory+0x476/0x530 [ 151.107887][ T5043] kmsan_copy_to_user+0xd3/0xf0 [ 151.112971][ T5043] ? should_fail_usercopy+0x2e/0x40 [ 151.118441][ T5043] _copy_to_iter+0x364/0x2520 [ 151.123296][ T5043] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 151.129227][ T5043] ? __skb_try_recv_from_queue+0x62f/0xcd0 [ 151.135166][ T5043] simple_copy_to_iter+0x68/0xa0 [ 151.140251][ T5043] __skb_datagram_iter+0x123/0xdc0 [ 151.145473][ T5043] ? skb_copy_datagram_iter+0x200/0x200 [ 151.151219][ T5043] skb_copy_datagram_iter+0x5c/0x200 [ 151.156655][ T5043] packet_recvmsg+0xd9c/0x2000 [ 151.161531][ T5043] ? packet_sendmsg+0x9f30/0x9f30 [ 151.166675][ T5043] sock_read_iter+0x467/0x580 [ 151.171562][ T5043] ? kernel_sock_ip_overhead+0x320/0x320 [ 151.177393][ T5043] vfs_read+0x8f6/0xe00 [ 151.181761][ T5043] ksys_read+0x20f/0x4c0 [ 151.186155][ T5043] __x64_sys_read+0x93/0xd0 [ 151.190809][ T5043] do_syscall_64+0x44/0x110 [ 151.195481][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 151.201647][ T5043] RIP: 0033:0x7fd52da09259 [ 151.206227][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 151.225969][ T5043] RSP: 002b:00007fd52d9c3218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.234632][ T5043] RAX: ffffffffffffffda RBX: 00007fd52da92408 RCX: 00007fd52da09259 [ 151.242727][ T5043] RDX: 0000000000002020 RSI: 0000000020003280 RDI: 0000000000000005 [ 151.250796][ T5043] RBP: 00007fd52da92400 R08: 0000000000000000 R09: 0000000000000000 [ 151.258894][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd52da9240c [ 151.266996][ T5043] R13: 00007fd52da5f4f4 R14: 0030656c69662f2e R15: 6b72616d6e6e6f63 [ 151.275107][ T5043] [ 151.278362][ T5043] Kernel Offset: disabled [ 151.282909][ T5043] Rebooting in 86400 seconds..