./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2552482526 <...> Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. execve("./syz-executor2552482526", ["./syz-executor2552482526"], 0x7ffcf083e380 /* 10 vars */) = 0 brk(NULL) = 0x55555720a000 brk(0x55555720ad00) = 0x55555720ad00 arch_prctl(ARCH_SET_FS, 0x55555720a380) = 0 set_tid_address(0x55555720a650) = 5045 set_robust_list(0x55555720a660, 24) = 0 rseq(0x55555720aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2552482526", 4096) = 28 getrandom("\x3b\x52\x56\x74\x76\x44\x9d\xfe", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555720ad00 brk(0x55555722bd00) = 0x55555722bd00 brk(0x55555722c000) = 0x55555722c000 mprotect(0x7fd456859000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555720a650) = 5046 ./strace-static-x86_64: Process 5046 attached [pid 5046] set_robust_list(0x55555720a660, 24) = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] write(1, "executing program\n", 18executing program ) = 18 [pid 5046] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_NOFOLLOW|FASYNC, 000) = 3 [ 182.555258][ T5046] kernel profiling enabled (shift: 0) [ 182.702081][ C1] ===================================================== [ 182.709410][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1ae/0x1b0 [ 182.716534][ C1] profile_tick+0x1ae/0x1b0 [ 182.721304][ C1] tick_nohz_handler+0x588/0x690 [ 182.726486][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 182.731939][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 182.737186][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 182.743344][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 182.749234][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 182.755488][ C1] _raw_spin_unlock_irqrestore+0x33/0x60 [ 182.761341][ C1] do_notify_parent_cldstop+0x790/0x810 [ 182.767138][ C1] ptrace_stop+0x672/0xd60 [ 182.771791][ C1] ptrace_notify+0x234/0x320 [ 182.776644][ C1] syscall_trace_enter+0xe2/0x600 [ 182.781924][ C1] do_syscall_64+0xa6/0x1e0 [ 182.786658][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.792820][ C1] [ 182.795267][ C1] Local variable ewq created at: [ 182.800335][ C1] userfaultfd_unmap_complete+0x41/0x540 [ 182.806231][ C1] vm_mmap_pgoff+0x2cf/0x4e0 [ 182.811139][ C1] [ 182.813603][ C1] CPU: 1 PID: 5045 Comm: syz-executor255 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 182.823987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 182.834223][ C1] ===================================================== [ 182.841387][ C1] Disabling lock debugging due to kernel taint [ 182.847701][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 182.854271][ C1] CPU: 1 PID: 5045 Comm: syz-executor255 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 182.866152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 182.876440][ C1] Call Trace: [ 182.879889][ C1] [ 182.882882][ C1] dump_stack_lvl+0x216/0x2d0 [ 182.887819][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 182.893883][ C1] dump_stack+0x1e/0x30 [ 182.898294][ C1] panic+0x4e2/0xcd0 [ 182.902455][ C1] ? kmsan_get_metadata+0xf1/0x1d0 [ 182.907841][ C1] kmsan_report+0x2d5/0x2e0 [ 182.912621][ C1] ? stack_depot_save_flags+0x2c/0x6e0 [ 182.918345][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 182.923908][ C1] ? __msan_warning+0x95/0x120 [ 182.928877][ C1] ? profile_tick+0x1ae/0x1b0 [ 182.933832][ C1] ? tick_nohz_handler+0x588/0x690 [ 182.939191][ C1] ? __hrtimer_run_queues+0x56f/0xe40 [ 182.944829][ C1] ? hrtimer_interrupt+0x3ab/0x1490 [ 182.950379][ C1] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 182.956713][ C1] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 182.962815][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 182.969257][ C1] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 182.975314][ C1] ? do_notify_parent_cldstop+0x790/0x810 [ 182.981285][ C1] ? ptrace_stop+0x672/0xd60 [ 182.986102][ C1] ? ptrace_notify+0x234/0x320 [ 182.991111][ C1] ? syscall_trace_enter+0xe2/0x600 [ 182.996578][ C1] ? do_syscall_64+0xa6/0x1e0 [ 183.001550][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.007896][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 183.013346][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.019427][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 183.024890][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.030953][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 183.036402][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.042456][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 183.047918][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.054082][ C1] __msan_warning+0x95/0x120 [ 183.058912][ C1] profile_tick+0x1ae/0x1b0 [ 183.063722][ C1] ? do_notify_parent_cldstop+0x790/0x810 [ 183.069714][ C1] tick_nohz_handler+0x588/0x690 [ 183.074939][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 183.080680][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 183.086167][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 183.091465][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 183.097181][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 183.102898][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 183.109088][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 183.115005][ C1] [ 183.118091][ C1] [ 183.121168][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 183.127450][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 183.134181][ C1] Code: 56 53 49 89 f6 48 89 fb e8 ca 48 bf f2 48 89 df e8 d2 3a bf f2 c6 00 00 c6 03 00 41 f7 c6 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 08 5d 0a 00 e8 e1 3c bf f2 65 ff 0d 92 95 85 70 74 09 5b [ 183.154251][ C1] RSP: 0018:ffff8881253c7c68 EFLAGS: 00000206 [ 183.160577][ C1] RAX: ffff8881170c9080 RBX: ffff8881178c9080 RCX: 00000001174c9080 [ 183.168761][ C1] RDX: ffff8881174c9080 RSI: 0000000000000004 RDI: ffff8881178c9080 [ 183.176949][ C1] RBP: ffff8881253c7c78 R08: ffffea000000000f R09: 0000000000000000 [ 183.185134][ C1] R10: ffff888117df0000 R11: ffffffff81735990 R12: 0000000000000292 [ 183.193309][ C1] R13: ffff8881185f0000 R14: 0000000000000292 R15: 0000000000000000 [ 183.201488][ C1] ? __pfx_check_preempt_wakeup_fair+0x10/0x10 [ 183.208002][ C1] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 183.214051][ C1] do_notify_parent_cldstop+0x790/0x810 [ 183.219896][ C1] ptrace_stop+0x672/0xd60 [ 183.224556][ C1] ptrace_notify+0x234/0x320 [ 183.229422][ C1] syscall_trace_enter+0xe2/0x600 [ 183.234688][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 183.240131][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 183.246670][ C1] do_syscall_64+0xa6/0x1e0 [ 183.251456][ C1] ? clear_bhb_loop+0x25/0x80 [ 183.256427][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.262597][ C1] RIP: 0033:0x7fd4567e4573 [ 183.267249][ C1] Code: fe ff e9 41 ff ff ff 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d f1 9a 07 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 [ 183.287147][ C1] RSP: 002b:00007fff75efd8a8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 183.295845][ C1] RAX: ffffffffffffffda RBX: 00000000000013b6 RCX: 00007fd4567e4573 [ 183.304026][ C1] RDX: 0000000040000001 RSI: 00007fff75efd8bc RDI: 00000000ffffffff [ 183.312193][ C1] RBP: 000000000002c8ed R08: 0000000028879558 R09: 7fffffffffffffff [ 183.320454][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff75efd8bc [ 183.328620][ C1] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 183.336805][ C1] [ 183.340380][ C1] Kernel Offset: disabled [ 183.344793][ C1] Rebooting in 86400 seconds..