./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3286254284 <...> Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. execve("./syz-executor3286254284", ["./syz-executor3286254284"], 0x7ffd917c6b40 /* 10 vars */) = 0 brk(NULL) = 0x555557430000 brk(0x555557430d00) = 0x555557430d00 arch_prctl(ARCH_SET_FS, 0x555557430380) = 0 set_tid_address(0x555557430650) = 5008 set_robust_list(0x555557430660, 24) = 0 rseq(0x555557430ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3286254284", 4096) = 28 getrandom("\x5b\x31\xa6\x1e\xa1\x3a\x21\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557430d00 brk(0x555557451d00) = 0x555557451d00 brk(0x555557452000) = 0x555557452000 mprotect(0x7f0583dfd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557430650) = 5009 ./strace-static-x86_64: Process 5009 attached [pid 5009] set_robust_list(0x555557430660, 24) = 0 [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5009] setpgid(0, 0) = 0 [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1000", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_DSYNC|O_CLOEXEC) = 3 [ 142.962296][ T5009] kernel profiling enabled (shift: 0) [ 143.179843][ C1] ===================================================== [ 143.187062][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1a8/0x1b0 [ 143.194074][ C1] profile_tick+0x1a8/0x1b0 [ 143.198719][ C1] tick_nohz_highres_handler+0x595/0x690 [ 143.204541][ C1] __hrtimer_run_queues+0x570/0x1110 [ 143.210020][ C1] hrtimer_interrupt+0x47b/0x14a0 [ 143.215240][ C1] __sysvec_apic_timer_interrupt+0x9f/0x390 [ 143.221404][ C1] sysvec_apic_timer_interrupt+0x75/0x90 [ 143.227459][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 143.233611][ C1] _raw_spin_unlock_irq+0x25/0x50 [ 143.238819][ C1] ptrace_stop+0x60a/0xd50 [ 143.243370][ C1] ptrace_notify+0x233/0x310 [ 143.248127][ C1] syscall_enter_from_user_mode+0x73/0x1a0 [ 143.254119][ C1] do_syscall_64+0x25/0x110 [ 143.258772][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 143.264828][ C1] [ 143.267305][ C1] Local variable pflags created at: [ 143.272591][ C1] mem_cgroup_handle_over_high+0x3b/0x630 [ 143.278507][ C1] exit_to_user_mode_loop+0x196/0x320 [ 143.284059][ C1] [ 143.286456][ C1] CPU: 1 PID: 5008 Comm: syz-executor328 Not tainted 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 143.297024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 143.307199][ C1] ===================================================== [ 143.314222][ C1] Disabling lock debugging due to kernel taint [ 143.320465][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 143.326977][ C1] CPU: 1 PID: 5008 Comm: syz-executor328 Tainted: G B 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 143.339027][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 143.349201][ C1] Call Trace: [ 143.352585][ C1] [ 143.355523][ C1] dump_stack_lvl+0x1bf/0x240 [ 143.360368][ C1] dump_stack+0x1e/0x20 [ 143.364675][ C1] panic+0x4de/0xc90 [ 143.368768][ C1] ? add_taint+0x108/0x1a0 [ 143.373341][ C1] kmsan_report+0x2d0/0x2d0 [ 143.378027][ C1] ? __msan_warning+0x96/0x110 [ 143.382957][ C1] ? profile_tick+0x1a8/0x1b0 [ 143.387801][ C1] ? tick_nohz_highres_handler+0x595/0x690 [ 143.393805][ C1] ? __hrtimer_run_queues+0x570/0x1110 [ 143.399458][ C1] ? hrtimer_interrupt+0x47b/0x14a0 [ 143.404885][ C1] ? __sysvec_apic_timer_interrupt+0x9f/0x390 [ 143.411125][ C1] ? sysvec_apic_timer_interrupt+0x75/0x90 [ 143.417114][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 143.423425][ C1] ? _raw_spin_unlock_irq+0x25/0x50 [ 143.428847][ C1] ? ptrace_stop+0x60a/0xd50 [ 143.433586][ C1] ? ptrace_notify+0x233/0x310 [ 143.438524][ C1] ? syscall_enter_from_user_mode+0x73/0x1a0 [ 143.444699][ C1] ? do_syscall_64+0x25/0x110 [ 143.449510][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 143.455745][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.461769][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.467801][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.473805][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.479798][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.485805][ C1] __msan_warning+0x96/0x110 [ 143.490564][ C1] profile_tick+0x1a8/0x1b0 [ 143.495225][ C1] ? ptrace_stop+0x60a/0xd50 [ 143.499987][ C1] tick_nohz_highres_handler+0x595/0x690 [ 143.505813][ C1] ? tick_setup_sched_timer+0x650/0x650 [ 143.511521][ C1] __hrtimer_run_queues+0x570/0x1110 [ 143.517032][ C1] hrtimer_interrupt+0x47b/0x14a0 [ 143.522255][ C1] ? kmsan_report+0x270/0x2d0 [ 143.527139][ C1] ? hrtimer_init+0x3a0/0x3a0 [ 143.531984][ C1] ? hrtimer_init+0x3a0/0x3a0 [ 143.536845][ C1] __sysvec_apic_timer_interrupt+0x9f/0x390 [ 143.542923][ C1] sysvec_apic_timer_interrupt+0x75/0x90 [ 143.548750][ C1] [ 143.551764][ C1] [ 143.554783][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 143.560938][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x50 [ 143.566936][ C1] Code: 00 00 00 66 90 f3 0f 1e fa 55 48 89 e5 53 48 89 fb e8 df 65 8f f3 48 89 df e8 47 59 8f f3 c6 00 00 c6 03 00 fb be 04 00 00 00 <48> c7 c7 88 42 0a 00 e8 ef 5a 8f f3 65 ff 0d 60 44 63 71 74 03 5b [ 143.586726][ C1] RSP: 0018:ffff888115fd3dc0 EFLAGS: 00000282 [ 143.592942][ C1] RAX: ffff888112792940 RBX: ffff888112f92940 RCX: 000000000055d9da [ 143.601060][ C1] RDX: ffff888112b92940 RSI: 0000000000000004 RDI: ffffea000000000f [ 143.609347][ C1] RBP: ffff888115fd3dc8 R08: ffffffff816083b9 R09: 0000000000000004 [ 143.617462][ C1] R10: ffff888113fc290c R11: 0000000000000000 R12: 0000000000000000 [ 143.625573][ C1] R13: ffff8881147c2ba0 R14: ffff8881147c2080 R15: 0000000000000000 [ 143.633699][ C1] ? ptrace_stop+0x5b9/0xd50 [ 143.638447][ C1] ptrace_stop+0x60a/0xd50 [ 143.643020][ C1] ptrace_notify+0x233/0x310 [ 143.647804][ C1] syscall_enter_from_user_mode+0x73/0x1a0 [ 143.653799][ C1] do_syscall_64+0x25/0x110 [ 143.658443][ C1] ? sysvec_apic_timer_interrupt+0x4d/0x90 [ 143.664432][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 143.670495][ C1] RIP: 0033:0x7f0583d88573 [ 143.675028][ C1] Code: fe ff e9 41 ff ff ff 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d f1 9a 07 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 [ 143.694904][ C1] RSP: 002b:00007ffecdf79a08 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 143.703476][ C1] RAX: ffffffffffffffda RBX: 0000000000001391 RCX: 00007f0583d88573 [ 143.711592][ C1] RDX: 0000000040000001 RSI: 00007ffecdf79a1c RDI: 00000000ffffffff [ 143.719715][ C1] RBP: 0000000000022e4c R08: 0000000000000010 R09: 00007ffecdff10b0 [ 143.727815][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffecdf79a1c [ 143.735924][ C1] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 143.744037][ C1] [ 143.747569][ C1] Kernel Offset: disabled [ 143.751942][ C1] Rebooting in 86400 seconds..