./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1542276867 <...> Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. execve("./syz-executor1542276867", ["./syz-executor1542276867"], 0x7ffe85bc7910 /* 10 vars */) = 0 brk(NULL) = 0x5555567d0000 brk(0x5555567d0d00) = 0x5555567d0d00 arch_prctl(ARCH_SET_FS, 0x5555567d0380) = 0 set_tid_address(0x5555567d0650) = 294 set_robust_list(0x5555567d0660, 24) = 0 rseq(0x5555567d0ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1542276867", 4096) = 28 getrandom("\x5f\xd6\xc1\xdd\x6c\x5f\x83\xc4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555567d0d00 brk(0x5555567f1d00) = 0x5555567f1d00 brk(0x5555567f2000) = 0x5555567f2000 mprotect(0x7f6a57092000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567d0650) = 295 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x5555567d0660, 24) = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] setpgid(0, 0) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [ 20.745862][ T28] audit: type=1400 audit(1705964998.273:66): avc: denied { execmem } for pid=294 comm="syz-executor154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.753084][ T28] audit: type=1400 audit(1705964998.283:67): avc: denied { bpf } for pid=295 comm="syz-executor154" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 20.756825][ T28] audit: type=1400 audit(1705964998.283:68): avc: denied { prog_load } for pid=295 comm="syz-executor154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 20.759761][ T28] audit: type=1400 audit(1705964998.283:69): avc: denied { perfmon } for pid=295 comm="syz-executor154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 20.763699][ T295] BUG: unable to handle page fault for address: ffffffffff600000 [ 20.765327][ T295] #PF: supervisor read access in kernel mode [ 20.768268][ T295] #PF: error_code(0x0000) - not-present page [ 20.774083][ T295] PGD 6c12067 P4D 6c12067 PUD 6c14067 PMD 6c16067 PTE 0 [ 20.780851][ T295] Oops: 0000 [#1] PREEMPT SMP KASAN [ 20.785887][ T295] CPU: 1 PID: 295 Comm: syz-executor154 Not tainted 6.1.57-syzkaller-00059-g21c71a7d0e96 #0 [ 20.795780][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 20.805676][ T295] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 20.812012][ T295] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 20.831635][ T295] RSP: 0018:ffffc90000dd7a68 EFLAGS: 00010046 [ 20.837536][ T295] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff88811c913cc0 [ 20.845434][ T295] RDX: ffffc90000dd7b08 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 20.853243][ T295] RBP: ffffc90000dd7ab0 R08: ffffffff8138c709 R09: ffffed1023922799 [ 20.861079][ T295] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 20.868867][ T295] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 20.876679][ T295] FS: 00005555567d0380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 20.885445][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.891958][ T295] CR2: ffffffffff600000 CR3: 00000001214fe000 CR4: 00000000003506a0 [ 20.899771][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.907578][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.915393][ T295] Call Trace: [ 20.918516][ T295] [ 20.921291][ T295] ? __die_body+0x62/0xb0 [ 20.925458][ T295] ? __die+0x7e/0x90 [ 20.929190][ T295] ? 0xffffffffff600000 [ 20.933192][ T295] ? page_fault_oops+0x7f9/0xa90 [ 20.937965][ T295] ? 0xffffffffff600000 [ 20.942043][ T295] ? kernelmode_fixup_or_oops+0x270/0x270 [ 20.947593][ T295] ? cpudl_cleanup+0x40/0x40 [ 20.952024][ T295] ? ttwu_do_wakeup+0xe5/0x430 [ 20.956620][ T295] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 20.962088][ T295] ? 0xffffffffff600000 [ 20.966078][ T295] ? exc_page_fault+0x537/0x700 [ 20.970764][ T295] ? 0xffffffffff600000 [ 20.974759][ T295] ? asm_exc_page_fault+0x27/0x30 [ 20.979616][ T295] ? 0xffffffffff600000 [ 20.983608][ T295] ? 0xffffffffff600000 [ 20.987601][ T295] ? copy_from_kernel_nofault_allowed+0x79/0xe0 [ 20.993674][ T295] ? 0xffffffffff600000 [ 20.997668][ T295] ? 0xffffffffff600000 [ 21.001667][ T295] ? strncpy_from_kernel_nofault+0x92/0x1e0 [ 21.007393][ T295] ? strncpy_from_kernel_nofault+0x41/0x1e0 [ 21.013119][ T295] ? 0xffffffffff600000 [ 21.017120][ T295] bpf_probe_read_compat_str+0x112/0x180 [ 21.022582][ T295] bpf_prog_f17ebaf3f5f7baf8+0x3a/0x3c [ 21.027873][ T295] bpf_trace_run4+0x18d/0x2f0 [ 21.032391][ T295] ? bpf_trace_run3+0x2e0/0x2e0 [ 21.037078][ T295] ? psi_task_switch+0x586/0x880 [ 21.041850][ T295] __bpf_trace_sched_switch+0xe/0x10 [ 21.046972][ T295] __schedule+0x12f7/0x1540 [ 21.051321][ T295] ? __sched_text_start+0x8/0x8 [ 21.055994][ T295] ? __kasan_check_read+0x11/0x20 [ 21.060855][ T295] ? cgroup_update_frozen+0x15f/0x980 [ 21.066061][ T295] ? bpf_obj_get_info_by_fd+0x3e60/0x3e60 [ 21.071614][ T295] schedule+0xc3/0x180 [ 21.075521][ T295] ptrace_stop+0x54f/0x930 [ 21.079776][ T295] ptrace_notify+0x225/0x350 [ 21.084201][ T295] ? do_notify_parent+0xa20/0xa20 [ 21.089060][ T295] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.094963][ T295] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.100429][ T295] syscall_exit_to_user_mode+0xa2/0x140 [ 21.105809][ T295] do_syscall_64+0x49/0xb0 [ 21.110067][ T295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 21.115792][ T295] RIP: 0033:0x7f6a5701fb39 [ 21.120227][ T295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.139688][ T295] RSP: 002b:00007fff6cc658d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 21.147915][ T295] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00007f6a5701fb39 [ 21.155725][ T295] RDX: 0000000000000010 RSI: 0000000020000280 RDI: 0000000000000011 [ 21.163538][ T295] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 21.171346][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000003a28 [ 21.179163][ T295] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 21.186974][ T295] [ 21.189834][ T295] Modules linked in: [ 21.193567][ T295] CR2: ffffffffff600000 [ 21.197570][ T295] ---[ end trace 0000000000000000 ]--- [ 21.197605][ T28] BUG: unable to handle page fault for address: ffffffffff600000 [ 21.202853][ T295] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 21.210403][ T28] #PF: supervisor read access in kernel mode [ 21.216744][ T295] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 21.222557][ T28] #PF: error_code(0x0000) - not-present page [ 21.242255][ T295] RSP: 0018:ffffc90000dd7a68 EFLAGS: 00010046 [ 21.248078][ T28] PGD 6c12067 P4D 6c12067 PUD 6c14067 [ 21.253974][ T295] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff88811c913cc0 [ 21.253989][ T295] RDX: ffffc90000dd7b08 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 21.259271][ T28] PMD 6c16067 PTE 0 [ 21.267081][ T295] RBP: ffffc90000dd7ab0 R08: ffffffff8138c709 R09: ffffed1023922799 [ 21.274893][ T28] [ 21.274899][ T28] Oops: 0000 [#2] PREEMPT SMP KASAN [ 21.278540][ T295] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 21.286354][ T28] CPU: 0 PID: 28 Comm: kauditd Tainted: G D 6.1.57-syzkaller-00059-g21c71a7d0e96 #0 [ 21.288516][ T295] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 21.293552][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 21.301476][ T295] FS: 00005555567d0380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.312052][ T28] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 21.319859][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.329758][ T28] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 21.338519][ T295] CR2: ffffffffff600000 CR3: 00000001214fe000 CR4: 00000000003506a0 [ 21.344855][ T28] RSP: 0018:ffffc900001df708 EFLAGS: 00010046 [ 21.351285][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.370723][ T28] [ 21.370728][ T28] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff888100b89440 [ 21.378539][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.384434][ T28] RDX: ffffc900001df7a8 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 21.392333][ T295] Kernel panic - not syncing: Fatal exception [ 21.394510][ T28] RBP: ffffc900001df750 R08: ffffffff8138c709 R09: ffffed1020171289 [ 21.394524][ T28] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 21.394535][ T28] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 21.394548][ T28] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.394562][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.394574][ T28] CR2: ffffffffff600000 CR3: 000000012146a000 CR4: 00000000003506b0 [ 21.394590][ T28] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.394600][ T28] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.394611][ T28] Call Trace: [ 21.394616][ T28] [ 21.394624][ T28] ? __die_body+0x62/0xb0 [ 21.394643][ T28] ? __die+0x7e/0x90 [ 21.394659][ T28] ? 0xffffffffff600000 [ 21.394671][ T28] ? page_fault_oops+0x7f9/0xa90 [ 21.394695][ T28] ? 0xffffffffff600000 [ 21.394708][ T28] ? kernelmode_fixup_or_oops+0x270/0x270 [ 21.394743][ T28] ? cpudl_cleanup+0x40/0x40 [ 21.394768][ T28] ? 0xffffffffff600000 [ 21.394779][ T28] ? exc_page_fault+0x537/0x700 [ 21.394805][ T28] ? 0xffffffffff600000 [ 21.394818][ T28] ? asm_exc_page_fault+0x27/0x30 [ 21.394839][ T28] ? 0xffffffffff600000 [ 21.394850][ T28] ? 0xffffffffff600000 [ 21.394861][ T28] ? copy_from_kernel_nofault_allowed+0x79/0xe0 [ 21.394891][ T28] ? 0xffffffffff600000 [ 21.394902][ T28] ? 0xffffffffff600000 [ 21.394921][ T28] ? strncpy_from_kernel_nofault+0x92/0x1e0 [ 21.394948][ T28] ? strncpy_from_kernel_nofault+0x41/0x1e0 [ 21.394975][ T28] ? 0xffffffffff600000 [ 21.394987][ T28] bpf_probe_read_compat_str+0x112/0x180 [ 21.395014][ T28] bpf_prog_f17ebaf3f5f7baf8+0x3a/0x3c [ 21.395030][ T28] bpf_trace_run4+0x18d/0x2f0 [ 21.395058][ T28] ? bpf_trace_run3+0x2e0/0x2e0 [ 21.395084][ T28] ? psi_task_switch+0x4f/0x880 [ 21.395108][ T28] __bpf_trace_sched_switch+0xe/0x10 [ 21.395126][ T28] __schedule+0x12f7/0x1540 [ 21.395152][ T28] ? __sched_text_start+0x8/0x8 [ 21.395175][ T28] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 21.395195][ T28] ? preempt_schedule+0xd9/0xe0 [ 21.395218][ T28] preempt_schedule_common+0x9b/0xf0 [ 21.395243][ T28] preempt_schedule+0xd9/0xe0 [ 21.395266][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 21.395290][ T28] ? vprintk_emit+0x450/0x450 [ 21.395307][ T28] ? console_trylock+0x233/0x2e0 [ 21.395325][ T28] ? resume_console+0x50/0x50 [ 21.395344][ T28] preempt_schedule_thunk+0x16/0x18 [ 21.395367][ T28] ? vprintk_emit+0x1ae/0x450 [ 21.395383][ T28] ? vprintk_emit+0x3e8/0x450 [ 21.395401][ T28] vprintk_emit+0x3ed/0x450 [ 21.395419][ T28] ? printk_sprint+0x430/0x430 [ 21.395436][ T28] ? __kasan_check_write+0x14/0x20 [ 21.395460][ T28] ? _raw_spin_trylock+0xcd/0x1a0 [ 21.395478][ T28] ? __lock_text_start+0x8/0x8 [ 21.395494][ T28] ? debug_smp_processor_id+0x17/0x20 [ 21.395522][ T28] vprintk_default+0x26/0x30 [ 21.395539][ T28] vprintk+0x74/0x80 [ 21.395558][ T28] _printk+0xd1/0x111 [ 21.395575][ T28] ? kauditd_hold_skb+0xf1/0x210 [ 21.395599][ T28] ? panic+0x660/0x660 [ 21.395618][ T28] kauditd_hold_skb+0x1c0/0x210 [ 21.395641][ T28] ? auditd_conn_free+0xe0/0xe0 [ 21.395664][ T28] ? auditd_conn_free+0xe0/0xe0 [ 21.395686][ T28] ? kauditd_send_queue+0x2e0/0x2e0 [ 21.395710][ T28] kauditd_send_queue+0x28d/0x2e0 [ 21.395739][ T28] ? auditd_conn_free+0xe0/0xe0 [ 21.395761][ T28] ? kauditd_send_queue+0x2e0/0x2e0 [ 21.395786][ T28] kauditd_thread+0x4f1/0x740 [ 21.395808][ T28] ? __kasan_check_write+0x14/0x20 [ 21.395833][ T28] ? _raw_spin_lock+0x1b0/0x1b0 [ 21.395851][ T28] ? audit_log+0x150/0x150 [ 21.395872][ T28] ? wake_bit_function+0x230/0x230 [ 21.395893][ T28] ? __kthread_parkme+0x12d/0x180 [ 21.395913][ T28] kthread+0x26d/0x300 [ 21.395930][ T28] ? audit_log+0x150/0x150 [ 21.395952][ T28] ? kthread_blkcg+0xd0/0xd0 [ 21.395971][ T28] ret_from_fork+0x1f/0x30 [ 21.395994][ T28] [ 21.395999][ T28] Modules linked in: [ 21.396008][ T28] CR2: ffffffffff600000 [ 21.403778][ T28] ---[ end trace 0000000000000000 ]--- [ 21.403786][ T28] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 21.403815][ T28] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 21.403829][ T28] RSP: 0018:ffffc90000dd7a68 EFLAGS: 00010046 [ 21.403843][ T28] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff88811c913cc0 [ 21.403855][ T28] RDX: ffffc90000dd7b08 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 21.403868][ T28] RBP: ffffc90000dd7ab0 R08: ffffffff8138c709 R09: ffffed1023922799 [ 21.403881][ T28] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 21.403891][ T28] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 21.403904][ T28] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.403918][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.403930][ T28] CR2: ffffffffff600000 CR3: 000000012146a000 CR4: 00000000003506b0 [ 21.403945][ T28] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.403955][ T28] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.587389][ T295] Shutting down cpus with NMI [ 23.114961][ T295] Kernel Offset: disabled [ 23.119088][ T295] Rebooting in 86400 seconds..