./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1081492580
<...>
forked to background, child pid 4614
[ 105.013502][ T4615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.044369][ T4615] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 106.344894][ T7] cfg80211: failed to load regulatory.db
OK
syzkaller
Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts.
execve("./syz-executor1081492580", ["./syz-executor1081492580"], 0x7ffeaacfa0b0 /* 10 vars */) = 0
brk(NULL) = 0x555555f67000
brk(0x555555f67c40) = 0x555555f67c40
arch_prctl(ARCH_SET_FS, 0x555555f67300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1081492580", 4096) = 28
brk(0x555555f88c40) = 0x555555f88c40
brk(0x555555f89000) = 0x555555f89000
mprotect(0x7fcf001c4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f675d0) = 4961
./strace-static-x86_64: Process 4961 attached
[pid 4961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 4961] setpgid(0, 0) = 0
[pid 4961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 4961] write(3, "1000", 4) = 4
[pid 4961] close(3) = 0
[pid 4961] openat(AT_FDCWD, "/sys/kernel/profiling", O_WRONLY|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME) = 3
syzkaller login: [ 153.970059][ T4961] kernel profiling enabled (shift: 0)
[ 154.501586][ C1] =====================================================
[ 154.508806][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1a8/0x1b0
[ 154.515865][ C1] profile_tick+0x1a8/0x1b0
[ 154.520575][ C1] tick_sched_timer+0x595/0x690
[ 154.525596][ C1] __hrtimer_run_queues+0x570/0x1110
[ 154.531086][ C1] hrtimer_interrupt+0x47b/0x14a0
[ 154.536334][ C1] __sysvec_apic_timer_interrupt+0xcd/0x480
[ 154.542535][ C1] sysvec_apic_timer_interrupt+0x75/0x90
[ 154.548386][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 154.554586][ C1] _raw_read_lock+0x3f/0x60
[ 154.559297][ C1] ptrace_check_attach+0x30/0x5f0
[ 154.564513][ C1] __se_sys_ptrace+0x269/0x750
[ 154.569501][ C1] __x64_sys_ptrace+0xbd/0x110
[ 154.574443][ C1] do_syscall_64+0x41/0xc0
[ 154.579009][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 154.585109][ C1]
[ 154.587524][ C1] Local variable heads created at:
[ 154.592734][ C1] __run_timers+0x43/0xf60
[ 154.597330][ C1] run_timer_softirq+0x3a/0x40
[ 154.602282][ C1]
[ 154.604694][ C1] CPU: 1 PID: 4957 Comm: strace-static-x Not tainted 6.4.0-syzkaller-g257152fe29be #0
[ 154.614393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 154.624571][ C1] =====================================================
[ 154.631615][ C1] Disabling lock debugging due to kernel taint
[ 154.637882][ C1] Kernel panic - not syncing: kmsan.panic set ...
[ 154.644418][ C1] CPU: 1 PID: 4957 Comm: strace-static-x Tainted: G B 6.4.0-syzkaller-g257152fe29be #0
[ 154.655606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 154.665802][ C1] Call Trace:
[ 154.669197][ C1]
[ 154.672153][ C1] dump_stack_lvl+0x1bf/0x240
[ 154.677004][ C1] dump_stack+0x1e/0x20
[ 154.681313][ C1] panic+0x4d5/0xc70
[ 154.685441][ C1] ? add_taint+0x108/0x1a0
[ 154.690054][ C1] kmsan_report+0x2d0/0x2d0
[ 154.694739][ C1] ? update_load_avg+0x1c6f/0x2560
[ 154.700056][ C1] ? __msan_warning+0x96/0x110
[ 154.704985][ C1] ? profile_tick+0x1a8/0x1b0
[ 154.709880][ C1] ? tick_sched_timer+0x595/0x690
[ 154.715081][ C1] ? __hrtimer_run_queues+0x570/0x1110
[ 154.720752][ C1] ? hrtimer_interrupt+0x47b/0x14a0
[ 154.726146][ C1] ? __sysvec_apic_timer_interrupt+0xcd/0x480
[ 154.732434][ C1] ? sysvec_apic_timer_interrupt+0x75/0x90
[ 154.738525][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 154.744897][ C1] ? _raw_read_lock+0x3f/0x60
[ 154.749772][ C1] ? ptrace_check_attach+0x30/0x5f0
[ 154.755179][ C1] ? __se_sys_ptrace+0x269/0x750
[ 154.760319][ C1] ? __x64_sys_ptrace+0xbd/0x110
[ 154.765443][ C1] ? do_syscall_64+0x41/0xc0
[ 154.770185][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 154.776487][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 154.782487][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 154.788479][ C1] ? run_posix_cpu_timers+0x4f9/0x8a0
[ 154.794057][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 154.800062][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 154.806087][ C1] __msan_warning+0x96/0x110
[ 154.810844][ C1] profile_tick+0x1a8/0x1b0
[ 154.815546][ C1] ? ptrace_check_attach+0x30/0x5f0
[ 154.820953][ C1] tick_sched_timer+0x595/0x690
[ 154.825985][ C1] ? tick_setup_sched_timer+0x650/0x650
[ 154.831732][ C1] __hrtimer_run_queues+0x570/0x1110
[ 154.837251][ C1] hrtimer_interrupt+0x47b/0x14a0
[ 154.842494][ C1] ? hrtimer_init+0x3a0/0x3a0
[ 154.847367][ C1] ? hrtimer_init+0x3a0/0x3a0
[ 154.852320][ C1] __sysvec_apic_timer_interrupt+0xcd/0x480
[ 154.858438][ C1] sysvec_apic_timer_interrupt+0x75/0x90
[ 154.864270][ C1]
[ 154.867308][ C1]
[ 154.870340][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 154.876548][ C1] RIP: 0010:_raw_read_lock+0x3f/0x60
[ 154.882041][ C1] Code: 00 48 c7 c7 48 40 0a 00 e8 1e 05 be f3 65 ff 05 3f a7 99 71 be 04 00 00 00 48 89 df e8 0a 05 be f3 b8 00 02 00 00 f0 0f c1 03 ff 01 00 00 75 03 5b 5d c3 48 89 df e8 5f 11 00 00 eb f3 66 2e
[ 154.901837][ C1] RSP: 0018:ffff88811a62bdb0 EFLAGS: 00000206
[ 154.908145][ C1] RAX: 0000000000000000 RBX: ffffffff8fa06040 RCX: 0000000000000001
[ 154.916273][ C1] RDX: 000000023e8c2040 RSI: 00000000004e21e0 RDI: ffffea000000000f
[ 154.924386][ C1] RBP: ffff88811a62bdb8 R08: 0000000000000000 R09: 0000000000000000
[ 154.932501][ C1] R10: ffff88823f1dc040 R11: ffff8881169ca080 R12: 0000000000000018
[ 154.940623][ C1] R13: 0000000000000000 R14: ffff8881207f0000 R15: ffff8881169cabb0
[ 154.948780][ C1] ptrace_check_attach+0x30/0x5f0
[ 154.954054][ C1] ? find_get_task_by_vpid+0x28d/0x300
[ 154.959730][ C1] __se_sys_ptrace+0x269/0x750
[ 154.964706][ C1] __x64_sys_ptrace+0xbd/0x110
[ 154.969676][ C1] do_syscall_64+0x41/0xc0
[ 154.974264][ C1] ? sysvec_apic_timer_interrupt+0x4d/0x90
[ 154.980277][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 154.986391][ C1] RIP: 0033:0x4e987a
[ 154.990412][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 54
[ 155.010216][ C1] RSP: 002b:00007ffeaacf9c50 EFLAGS: 00000206 ORIG_RAX: 0000000000000065
[ 155.018800][ C1] RAX: ffffffffffffffda RBX: 000000000095e368 RCX: 00000000004e987a
[ 155.026923][ C1] RDX: 0000000000000000 RSI: 0000000000001360 RDI: 0000000000000018
[ 155.035033][ C1] RBP: 0000000000000018 R08: 0000000000000017 R09: 0000000000000360
[ 155.043140][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000095fb90
[ 155.051261][ C1] R13: 0000000000000000 R14: 000000000095fb90 R15: 000000000063f160
[ 155.059392][ C1]
[ 155.062736][ C1] Kernel Offset: disabled
[ 155.067121][ C1] Rebooting in 86400 seconds..