./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1809538505 <...> Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. execve("./syz-executor1809538505", ["./syz-executor1809538505"], 0x7ffeb693a740 /* 10 vars */) = 0 brk(NULL) = 0x55557908f000 brk(0x55557908fd00) = 0x55557908fd00 arch_prctl(ARCH_SET_FS, 0x55557908f380) = 0 set_tid_address(0x55557908f650) = 5020 set_robust_list(0x55557908f660, 24) = 0 rseq(0x55557908fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1809538505", 4096) = 28 getrandom("\x3f\x41\x98\x54\xdd\xb3\x6d\x64", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557908fd00 brk(0x5555790b0d00) = 0x5555790b0d00 brk(0x5555790b1000) = 0x5555790b1000 mprotect(0x7febad691000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557908f650) = 5021 ./strace-static-x86_64: Process 5021 attached [pid 5021] set_robust_list(0x55557908f660, 24) = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setpgid(0, 0) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1000", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_HASH, key_size=4, value_size=4095, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5021] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5021] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=4}}, 16) = 5 [ 183.137031][ T5021] ===================================================== [ 183.144587][ T5021] BUG: KMSAN: uninit-value in htab_percpu_map_lookup_elem+0x3eb/0x4f0 [ 183.153269][ T5021] htab_percpu_map_lookup_elem+0x3eb/0x4f0 [ 183.159340][ T5021] bpf_map_lookup_elem+0x5c/0x80 [ 183.164677][ T5021] ___bpf_prog_run+0x13fe/0xe0f0 [ 183.169851][ T5021] __bpf_prog_run32+0xb2/0xe0 [ 183.174861][ T5021] bpf_trace_run4+0x150/0x340 [ 183.179754][ T5021] __bpf_trace_mm_page_alloc+0x37/0x50 [ 183.185584][ T5021] __alloc_pages+0xdc0/0xe70 [ 183.190388][ T5021] alloc_pages_mpol+0x299/0x990 [ 183.195645][ T5021] vma_alloc_folio+0x418/0x680 [ 183.200609][ T5021] do_wp_page+0x196c/0x66e0 [ 183.205496][ T5021] handle_mm_fault+0x5b76/0xce00 [ 183.210689][ T5021] exc_page_fault+0x419/0x730 [ 183.215812][ T5021] asm_exc_page_fault+0x2b/0x30 [ 183.220958][ T5021] [ 183.223494][ T5021] Local variable stack created at: [ 183.228738][ T5021] __bpf_prog_run32+0x43/0xe0 [ 183.233780][ T5021] bpf_trace_run4+0x150/0x340 [ 183.238680][ T5021] [ 183.241129][ T5021] CPU: 0 PID: 5021 Comm: syz-executor180 Not tainted 6.9.0-rc3-syzkaller-00023-g2c71fdf02a95 #0 [ 183.251953][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 183.262435][ T5021] ===================================================== [ 183.269484][ T5021] Disabling lock debugging due to kernel taint [ 183.275870][ T5021] Kernel panic - not syncing: kmsan.panic set ... [ 183.282556][ T5021] CPU: 0 PID: 5021 Comm: syz-executor180 Tainted: G B 6.9.0-rc3-syzkaller-00023-g2c71fdf02a95 #0 [ 183.294949][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 183.305161][ T5021] Call Trace: [ 183.308542][ T5021] [ 183.311575][ T5021] dump_stack_lvl+0x216/0x2d0 [ 183.316414][ T5021] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.322389][ T5021] dump_stack+0x1e/0x30 [ 183.326717][ T5021] panic+0x4e2/0xcd0 [ 183.330827][ T5021] ? kmsan_get_metadata+0x51/0x1d0 [ 183.336127][ T5021] kmsan_report+0x2d5/0x2e0 [ 183.340795][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.346145][ T5021] ? __msan_warning+0x95/0x120 [ 183.351089][ T5021] ? htab_percpu_map_lookup_elem+0x3eb/0x4f0 [ 183.357257][ T5021] ? bpf_map_lookup_elem+0x5c/0x80 [ 183.362536][ T5021] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 183.367828][ T5021] ? __bpf_prog_run32+0xb2/0xe0 [ 183.372866][ T5021] ? bpf_trace_run4+0x150/0x340 [ 183.377955][ T5021] ? __bpf_trace_mm_page_alloc+0x37/0x50 [ 183.383797][ T5021] ? __alloc_pages+0xdc0/0xe70 [ 183.388746][ T5021] ? alloc_pages_mpol+0x299/0x990 [ 183.393952][ T5021] ? vma_alloc_folio+0x418/0x680 [ 183.399047][ T5021] ? do_wp_page+0x196c/0x66e0 [ 183.403881][ T5021] ? handle_mm_fault+0x5b76/0xce00 [ 183.409243][ T5021] ? exc_page_fault+0x419/0x730 [ 183.414289][ T5021] ? asm_exc_page_fault+0x2b/0x30 [ 183.419536][ T5021] ? __rmqueue_pcplist+0x4e53/0x5600 [ 183.425030][ T5021] ? filter_irq_stacks+0x164/0x1a0 [ 183.430327][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.435696][ T5021] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.441659][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.447026][ T5021] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.452985][ T5021] __msan_warning+0x95/0x120 [ 183.457757][ T5021] htab_percpu_map_lookup_elem+0x3eb/0x4f0 [ 183.463740][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.469095][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.474570][ T5021] ? __pfx_htab_percpu_map_lookup_elem+0x10/0x10 [ 183.481137][ T5021] bpf_map_lookup_elem+0x5c/0x80 [ 183.486278][ T5021] ___bpf_prog_run+0x13fe/0xe0f0 [ 183.491381][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.496754][ T5021] __bpf_prog_run32+0xb2/0xe0 [ 183.501605][ T5021] ? __pfx___bpf_prog_run32+0x10/0x10 [ 183.507139][ T5021] ? __pfx___bpf_prog_run32+0x10/0x10 [ 183.512669][ T5021] bpf_trace_run4+0x150/0x340 [ 183.517508][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.522862][ T5021] __bpf_trace_mm_page_alloc+0x37/0x50 [ 183.528484][ T5021] __alloc_pages+0xdc0/0xe70 [ 183.533236][ T5021] alloc_pages_mpol+0x299/0x990 [ 183.538260][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.543637][ T5021] vma_alloc_folio+0x418/0x680 [ 183.548583][ T5021] ? kmsan_get_metadata+0x146/0x1d0 [ 183.554048][ T5021] do_wp_page+0x196c/0x66e0 [ 183.558878][ T5021] ? handle_mm_fault+0x48ba/0xce00 [ 183.564191][ T5021] ? filter_irq_stacks+0x60/0x1a0 [ 183.569438][ T5021] handle_mm_fault+0x5b76/0xce00 [ 183.574600][ T5021] exc_page_fault+0x419/0x730 [ 183.579469][ T5021] asm_exc_page_fault+0x2b/0x30 [ 183.584510][ T5021] RIP: 0033:0x7febad5f4fb0 [ 183.589043][ T5021] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 3d 00 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 30 2d 0a 00 0f 85 0f 02 00 00 4c 8d 25 23 2d 0a 00 4c [ 183.608926][ T5021] RSP: 002b:00007ffc6aff1ee0 EFLAGS: 00010246 [ 183.615135][ T5021] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 183.623250][ T5021] RDX: 0000000000000001 RSI: 00007febad695118 RDI: 0000000000000000 [ 183.631432][ T5021] RBP: 00007febad695118 R08: 0000000000000006 R09: 0000000000000006 [ 183.639531][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.647619][ T5021] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 183.655720][ T5021] [ 185.110638][ T5021] Shutting down cpus with NMI [ 185.115809][ T5021] Kernel Offset: disabled [ 185.120217][ T5021] Rebooting in 86400 seconds..