./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1838226983 <...> Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. execve("./syz-executor1838226983", ["./syz-executor1838226983"], 0x7ffd1d534f90 /* 10 vars */) = 0 brk(NULL) = 0x555557dfb000 brk(0x555557dfbd00) = 0x555557dfbd00 arch_prctl(ARCH_SET_FS, 0x555557dfb380) = 0 set_tid_address(0x555557dfb650) = 5044 set_robust_list(0x555557dfb660, 24) = 0 rseq(0x555557dfbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1838226983", 4096) = 28 getrandom("\x7c\x50\xae\x47\x06\x17\x83\xde", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557dfbd00 brk(0x555557e1cd00) = 0x555557e1cd00 brk(0x555557e1d000) = 0x555557e1d000 mprotect(0x7fb0c8174000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557dfb650) = 5045 ./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x555557dfb660, 24) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_FLOW_DISSECTOR, insn_cnt=11, insns=0x200009c0, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [ 166.912080][ T5045] ===================================================== [ 166.919243][ T5045] BUG: KMSAN: uninit-value in ___bpf_prog_run+0xd874/0xe0f0 [ 166.926825][ T5045] ___bpf_prog_run+0xd874/0xe0f0 [ 166.932045][ T5045] __bpf_prog_run512+0xb5/0xe0 [ 166.936966][ T5045] bpf_flow_dissect+0x12a/0x4c0 [ 166.942177][ T5045] bpf_prog_test_run_flow_dissector+0x6f8/0xa30 [ 166.948626][ T5045] bpf_prog_test_run+0x6b7/0xad0 [ 166.953781][ T5045] __sys_bpf+0x6aa/0xd90 [ 166.958191][ T5045] __x64_sys_bpf+0xa0/0xe0 [ 166.962952][ T5045] x64_sys_call+0x96b/0x3b50 [ 166.967773][ T5045] do_syscall_64+0xcf/0x1e0 [ 166.972597][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.978704][ T5045] [ 166.981257][ T5045] Local variable stack created at: [ 166.986503][ T5045] __bpf_prog_run512+0x45/0xe0 [ 166.991674][ T5045] bpf_flow_dissect+0x12a/0x4c0 [ 166.996729][ T5045] [ 166.999098][ T5045] CPU: 0 PID: 5045 Comm: syz-executor183 Not tainted 6.9.0-rc6-syzkaller-00046-g18daea77cca6 #0 [ 167.009732][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 167.019984][ T5045] ===================================================== [ 167.027145][ T5045] Disabling lock debugging due to kernel taint [ 167.033583][ T5045] Kernel panic - not syncing: kmsan.panic set ... [ 167.040088][ T5045] CPU: 0 PID: 5045 Comm: syz-executor183 Tainted: G B 6.9.0-rc6-syzkaller-00046-g18daea77cca6 #0 [ 167.052129][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 167.062325][ T5045] Call Trace: [ 167.065748][ T5045] [ 167.068766][ T5045] dump_stack_lvl+0x216/0x2d0 [ 167.073665][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.079675][ T5045] dump_stack+0x1e/0x30 [ 167.084053][ T5045] panic+0x4e2/0xcd0 [ 167.088141][ T5045] ? kmsan_get_metadata+0x51/0x1d0 [ 167.093464][ T5045] kmsan_report+0x2d5/0x2e0 [ 167.098197][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.103616][ T5045] ? __msan_warning+0x95/0x120 [ 167.108631][ T5045] ? ___bpf_prog_run+0xd874/0xe0f0 [ 167.113943][ T5045] ? __bpf_prog_run512+0xb5/0xe0 [ 167.119113][ T5045] ? bpf_flow_dissect+0x12a/0x4c0 [ 167.124422][ T5045] ? bpf_prog_test_run_flow_dissector+0x6f8/0xa30 [ 167.131078][ T5045] ? bpf_prog_test_run+0x6b7/0xad0 [ 167.136416][ T5045] ? __sys_bpf+0x6aa/0xd90 [ 167.141019][ T5045] ? __x64_sys_bpf+0xa0/0xe0 [ 167.145788][ T5045] ? x64_sys_call+0x96b/0x3b50 [ 167.150784][ T5045] ? do_syscall_64+0xcf/0x1e0 [ 167.155662][ T5045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.161947][ T5045] ? __update_load_avg_cfs_rq+0x969/0x10e0 [ 167.168000][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.173399][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.178828][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.184902][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.190299][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.195687][ T5045] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 167.202193][ T5045] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 167.208532][ T5045] __msan_warning+0x95/0x120 [ 167.213360][ T5045] ___bpf_prog_run+0xd874/0xe0f0 [ 167.218543][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.223951][ T5045] __bpf_prog_run512+0xb5/0xe0 [ 167.228961][ T5045] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 167.235575][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.240980][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.246992][ T5045] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 167.253063][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.258460][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.263849][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.269842][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.275220][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.281225][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 167.286609][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.292643][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 167.298670][ T5045] ? __pfx___bpf_prog_run512+0x10/0x10 [ 167.304369][ T5045] ? __pfx___bpf_prog_run512+0x10/0x10 [ 167.310061][ T5045] bpf_flow_dissect+0x12a/0x4c0 [ 167.315201][ T5045] bpf_prog_test_run_flow_dissector+0x6f8/0xa30 [ 167.321756][ T5045] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 167.328770][ T5045] bpf_prog_test_run+0x6b7/0xad0 [ 167.333951][ T5045] __sys_bpf+0x6aa/0xd90 [ 167.338446][ T5045] __x64_sys_bpf+0xa0/0xe0 [ 167.343054][ T5045] x64_sys_call+0x96b/0x3b50 [ 167.347884][ T5045] do_syscall_64+0xcf/0x1e0 [ 167.352599][ T5045] ? clear_bhb_loop+0x25/0x80 [ 167.357498][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.363610][ T5045] RIP: 0033:0x7fb0c8101bb9 [ 167.368186][ T5045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 167.388018][ T5045] RSP: 002b:00007ffdb68a8be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.396638][ T5045] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb0c8101bb9 [ 167.404784][ T5045] RDX: 0000000000000050 RSI: 0000000020000280 RDI: 000000000000000a [ 167.412938][ T5045] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 167.421084][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.429224][ T5045] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 167.437379][ T5045] [ 167.440899][ T5045] Kernel Offset: disabled [ 167.445292][ T5045] Rebooting in 86400 seconds..