./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1746937019 <...> syzkaller login: [ 100.263004][ T116] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. execve("./syz-executor1746937019", ["./syz-executor1746937019"], 0x7ffdf625c690 /* 10 vars */) = 0 brk(NULL) = 0x555555950000 brk(0x555555950c40) = 0x555555950c40 arch_prctl(ARCH_SET_FS, 0x555555950300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1746937019", 4096) = 28 brk(0x555555971c40) = 0x555555971c40 brk(0x555555972000) = 0x555555972000 mprotect(0x7f986736c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559505d0) = 3490 ./strace-static-x86_64: Process 3490 attached [pid 3490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3490] setpgid(0, 0) = 0 [pid 3490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3490] write(3, "1000", 4) = 4 [pid 3490] close(3) = 0 [pid 3490] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_LARGEFILE|O_CLOEXEC, 000) = 3 [ 103.359714][ T3490] kernel profiling enabled (shift: 0) [ 103.811769][ C1] ===================================================== [ 103.811853][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1ca/0x1d0 [ 103.811907][ C1] profile_tick+0x1ca/0x1d0 [ 103.811954][ C1] tick_sched_timer+0x5e4/0x700 [ 103.812008][ C1] __run_hrtimer+0x298/0x910 [ 103.812061][ C1] hrtimer_interrupt+0x78d/0x1440 [ 103.812104][ C1] __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 103.812146][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 103.812192][ C1] asm_sysvec_apic_timer_interrupt+0x20/0x30 [ 103.812247][ C1] _raw_spin_unlock_irqrestore+0x2f/0x50 [ 103.812294][ C1] wait_task_inactive+0x25a/0x560 [ 103.812344][ C1] ptrace_check_attach+0x521/0x5f0 [ 103.812395][ C1] __se_sys_ptrace+0x276/0x780 [ 103.812442][ C1] __x64_sys_ptrace+0xb9/0x110 [ 103.812491][ C1] do_syscall_64+0x3d/0xb0 [ 103.812546][ C1] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 103.812601][ C1] [ 103.812609][ C1] Local variable iovstack_r created at: [ 103.812622][ C1] process_vm_rw+0x88/0xf80 [ 103.812661][ C1] __x64_sys_process_vm_readv+0x11b/0x1a0 [ 103.812704][ C1] [ 103.812712][ C1] CPU: 1 PID: 3486 Comm: strace-static-x Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 103.812757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.812779][ C1] ===================================================== [ 103.812790][ C1] Disabling lock debugging due to kernel taint [ 103.812803][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 103.959527][ C1] CPU: 1 PID: 3486 Comm: strace-static-x Tainted: G B 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 103.971487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.981593][ C1] Call Trace: [ 103.984903][ C1] [ 103.987775][ C1] dump_stack_lvl+0x1c8/0x256 [ 103.992534][ C1] dump_stack+0x1a/0x1c [ 103.996763][ C1] panic+0x4d3/0xc7d [ 104.000719][ C1] ? print_tainted+0x1d1/0x1e0 [ 104.005568][ C1] ? add_taint+0x104/0x1a0 [ 104.010061][ C1] ? printk_sprint+0x29b/0x4d0 [ 104.014898][ C1] kmsan_report+0x2cc/0x2d0 [ 104.019479][ C1] ? __stack_depot_save+0x21/0x4b0 [ 104.024699][ C1] ? __msan_warning+0x92/0x110 [ 104.029514][ C1] ? profile_tick+0x1ca/0x1d0 [ 104.034253][ C1] ? tick_sched_timer+0x5e4/0x700 [ 104.039342][ C1] ? __run_hrtimer+0x298/0x910 [ 104.044159][ C1] ? hrtimer_interrupt+0x78d/0x1440 [ 104.049410][ C1] ? __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 104.055619][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 104.061490][ C1] ? asm_sysvec_apic_timer_interrupt+0x20/0x30 [ 104.067721][ C1] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 104.073590][ C1] ? wait_task_inactive+0x25a/0x560 [ 104.078852][ C1] ? ptrace_check_attach+0x521/0x5f0 [ 104.084206][ C1] ? __se_sys_ptrace+0x276/0x780 [ 104.089212][ C1] ? __x64_sys_ptrace+0xb9/0x110 [ 104.094207][ C1] ? do_syscall_64+0x3d/0xb0 [ 104.098859][ C1] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 104.104995][ C1] ? kmsan_get_metadata+0x33/0x220 [ 104.110168][ C1] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 104.116139][ C1] ? kmsan_get_metadata+0x33/0x220 [ 104.121312][ C1] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 104.127183][ C1] ? run_posix_cpu_timers+0x4f4/0x8a0 [ 104.132613][ C1] ? kmsan_get_metadata+0x33/0x220 [ 104.137786][ C1] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 104.143666][ C1] ? kmsan_get_metadata+0x33/0x220 [ 104.148837][ C1] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 104.154985][ C1] __msan_warning+0x92/0x110 [ 104.159626][ C1] profile_tick+0x1ca/0x1d0 [ 104.164189][ C1] ? wait_task_inactive+0x25a/0x560 [ 104.169460][ C1] tick_sched_timer+0x5e4/0x700 [ 104.174397][ C1] ? tick_setup_sched_timer+0x750/0x750 [ 104.180056][ C1] __run_hrtimer+0x298/0x910 [ 104.184716][ C1] hrtimer_interrupt+0x78d/0x1440 [ 104.189826][ C1] ? hrtimer_init+0x370/0x370 [ 104.194559][ C1] ? hrtimer_init+0x370/0x370 [ 104.199287][ C1] __sysvec_apic_timer_interrupt+0x14b/0x5b0 [ 104.205327][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 104.211027][ C1] [ 104.213992][ C1] [ 104.216956][ C1] asm_sysvec_apic_timer_interrupt+0x20/0x30 [ 104.223010][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x2f/0x50 [ 104.229499][ C1] Code: 56 53 49 89 f6 48 89 fb e8 0e d4 72 f4 48 89 df e8 46 c8 72 f4 c6 00 00 c6 03 00 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 8c d1 b4 f3 65 8b 05 ad 53 4d 72 85 c0 74 05 5b 41 5e 5d c3 0f [ 104.249187][ C1] RSP: 0018:ffff888109e27cd8 EFLAGS: 00000206 [ 104.255303][ C1] RAX: ffff888113c22964 RBX: ffff888114422964 RCX: 00000000005640aa [ 104.263321][ C1] RDX: ffff888114022964 RSI: 0000000005654aa0 RDI: 0000000000000001 [ 104.271347][ C1] RBP: ffff888109e27ce8 R08: 0000000000000000 R09: ffff88823fd70480 [ 104.279374][ C1] R10: ffff888109e27bf8 R11: ffff88810e4bc180 R12: ffff8881144220f4 [ 104.287391][ C1] R13: ffff8881144220d8 R14: 0000000000000292 R15: 0000000000000292 [ 104.295423][ C1] ? _raw_spin_unlock_irqrestore+0x1a/0x50 [ 104.301305][ C1] wait_task_inactive+0x25a/0x560 [ 104.306501][ C1] ptrace_check_attach+0x521/0x5f0 [ 104.311697][ C1] __se_sys_ptrace+0x276/0x780 [ 104.316532][ C1] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 104.322429][ C1] ? kmsan_get_metadata+0x33/0x220 [ 104.327620][ C1] __x64_sys_ptrace+0xb9/0x110 [ 104.332454][ C1] do_syscall_64+0x3d/0xb0 [ 104.336963][ C1] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 104.342931][ C1] RIP: 0033:0x4e6c1a [ 104.346863][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 4c [ 104.366544][ C1] RSP: 002b:00007ffdf625c210 EFLAGS: 00000206 ORIG_RAX: 0000000000000065 [ 104.375023][ C1] RAX: ffffffffffffffda RBX: 000000000175da50 RCX: 00000000004e6c1a [ 104.383056][ C1] RDX: 0000000000000058 RSI: 0000000000000da1 RDI: 000000000000420e [ 104.391086][ C1] RBP: 00007ffdf625c310 R08: 000000000000420d R09: 0000000000000000 [ 104.399118][ C1] R10: 000000000063c820 R11: 0000000000000206 R12: 000000000175da50 [ 104.407163][ C1] R13: 00007ffdf625c36c R14: 000000000000857f R15: 0000000000617180 [ 104.415201][ C1] [ 104.418853][ C1] Kernel Offset: disabled [ 104.423225][ C1] Rebooting in 86400 seconds..