./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor620315398
<...>
Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts.
execve("./syz-executor620315398", ["./syz-executor620315398"], 0x7ffcbd93f820 /* 10 vars */) = 0
brk(NULL) = 0x5555791f8000
brk(0x5555791f8d00) = 0x5555791f8d00
arch_prctl(ARCH_SET_FS, 0x5555791f8380) = 0
set_tid_address(0x5555791f8650) = 5230
set_robust_list(0x5555791f8660, 24) = 0
rseq(0x5555791f8ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor620315398", 4096) = 27
getrandom("\x62\x5b\x9a\x5d\x9a\xa3\x15\x50", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555791f8d00
brk(0x555579219d00) = 0x555579219d00
brk(0x55557921a000) = 0x55557921a000
mprotect(0x7f432a81c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18) = 18
bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_XDP, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3
[ 54.298326][ T5230] ==================================================================
[ 54.306404][ T5230] BUG: KASAN: out-of-bounds in copy_from_kernel_nofault+0x7a/0x2f0
[ 54.314310][ T5230] Read of size 6 at addr fffffffffffffffd by task syz-executor620/5230
[ 54.322539][ T5230]
[ 54.324855][ T5230] CPU: 1 UID: 0 PID: 5230 Comm: syz-executor620 Not tainted 6.12.0-rc1-next-20240930-syzkaller #0
[ 54.335421][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 54.345466][ T5230] Call Trace:
[ 54.348725][ T5230]
[ 54.351635][ T5230] dump_stack_lvl+0x241/0x360
[ 54.356304][ T5230] ? __pfx_dump_stack_lvl+0x10/0x10
[ 54.361482][ T5230] ? __pfx__printk+0x10/0x10
[ 54.366052][ T5230] ? _printk+0xd5/0x120
[ 54.370190][ T5230] print_report+0x169/0x550
[ 54.374674][ T5230] ? timekeeping_get_ns+0x5c/0x420
[ 54.379769][ T5230] ? __virt_addr_valid+0x4bd/0x530
[ 54.384861][ T5230] ? copy_from_kernel_nofault+0x7a/0x2f0
[ 54.390472][ T5230] kasan_report+0x143/0x180
[ 54.394959][ T5230] ? copy_from_kernel_nofault+0x7a/0x2f0
[ 54.400573][ T5230] kasan_check_range+0x282/0x290
[ 54.405513][ T5230] copy_from_kernel_nofault+0x7a/0x2f0
[ 54.410954][ T5230] bpf_probe_read_kernel+0x2a/0x70
[ 54.416050][ T5230] bpf_prog_fe7b69aea4fa28bf+0x43/0x45
[ 54.421491][ T5230] bpf_test_run+0x4b1/0xa90
[ 54.425981][ T5230] ? bpf_dispatcher_change_prog+0xd8b/0xf10
[ 54.431855][ T5230] ? bpf_test_run+0x370/0xa90
[ 54.436535][ T5230] ? __pfx_bpf_test_run+0x10/0x10
[ 54.441545][ T5230] ? _copy_from_user+0xa6/0xe0
[ 54.446293][ T5230] ? bpf_test_init+0x15a/0x180
[ 54.451041][ T5230] ? xdp_convert_md_to_buff+0x5b/0x330
[ 54.456498][ T5230] bpf_prog_test_run_xdp+0x7da/0x11e0
[ 54.461869][ T5230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 54.467658][ T5230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 54.473439][ T5230] bpf_prog_test_run+0x2e4/0x360
[ 54.478384][ T5230] __sys_bpf+0x48d/0x810
[ 54.482608][ T5230] ? __pfx___sys_bpf+0x10/0x10
[ 54.487359][ T5230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 54.493671][ T5230] ? do_syscall_64+0x100/0x230
[ 54.498433][ T5230] __x64_sys_bpf+0x7c/0x90
[ 54.502831][ T5230] do_syscall_64+0xf3/0x230
[ 54.507318][ T5230] ? clear_bhb_loop+0x35/0x90
[ 54.511972][ T5230] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 54.517849][ T5230] RIP: 0033:0x7f432a7a94e9
[ 54.522243][ T5230] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.541828][ T5230] RSP: 002b:00007ffcda274578 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 54.550220][ T5230] RAX: ffffffffffffffda RBX: 00007ffcda274748 RCX: 00007f432a7a94e9
[ 54.558172][ T5230] RDX: 000000000000003b RSI: 0000000020000240 RDI: 000000000000000a
[ 54.566122][ T5230] RBP: 00007f432a81c610 R08: 0000000000000000 R09: 00007ffcda274748
[ 54.574076][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 54.582030][ T5230] R13: 00007ffcda274738 R14: 0000000000000001 R15: 0000000000000001
[ 54.589986][ T5230]
[ 54.592984][ T5230]
[ 54.595288][ T5230] Memory state around the buggy address:
[ 54.600894][ T5230] fffffffffffffe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.608932][ T5230] ffffffffffffff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.616973][ T5230] >ffffffffffffff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.625052][ T5230] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
[ 54.637612][ T5230] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 54.646017][ T5230] CPU: 1 UID: 0 PID: 5230 Comm: syz-executor620 Not tainted 6.12.0-rc1-next-20240930-syzkaller #0
[ 54.656597][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 54.666636][ T5230] RIP: 0010:kasan_metadata_fetch_row+0x12/0x30
[ 54.672869][ T5230] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <48> 8b 0c 06 48 8b 44 06 08 48 89 47 08 48 89 0f c3 cc cc cc cc 66
[ 54.692461][ T5230] RSP: 0018:ffffc9000349f6d8 EFLAGS: 00010046
[ 54.698530][ T5230] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 2bdda03a32158100
[ 54.706485][ T5230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000349f710
[ 54.714437][ T5230] RBP: ffffc9000349f758 R08: ffffffff8bc0f2d3 R09: 0000000000000020
[ 54.722395][ T5230] R10: dffffc0000000000 R11: fffff52000693ee1 R12: ffffc9000349f710
[ 54.730431][ T5230] R13: 0000000000000080 R14: ffffffffffffff80 R15: ffffc9000349f6f0
[ 54.738415][ T5230] FS: 00005555791f8380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 54.747325][ T5230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.753888][ T5230] CR2: 00000000179cd398 CR3: 0000000032bd2000 CR4: 00000000003526f0
[ 54.762103][ T5230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.770054][ T5230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.778006][ T5230] Call Trace:
[ 54.781288][ T5230]
[ 54.784197][ T5230] ? __die_body+0x5f/0xb0
[ 54.788507][ T5230] ? die_addr+0xb0/0xe0
[ 54.792640][ T5230] ? exc_general_protection+0x3dd/0x5d0
[ 54.798176][ T5230] ? asm_exc_general_protection+0x26/0x30
[ 54.803876][ T5230] ? vsnprintf+0x1cc3/0x1da0
[ 54.808447][ T5230] ? kasan_metadata_fetch_row+0x12/0x30
[ 54.814095][ T5230] print_report+0x4df/0x550
[ 54.818601][ T5230] ? __virt_addr_valid+0x4bd/0x530
[ 54.823705][ T5230] ? copy_from_kernel_nofault+0x7a/0x2f0
[ 54.829323][ T5230] kasan_report+0x143/0x180
[ 54.833813][ T5230] ? copy_from_kernel_nofault+0x7a/0x2f0
[ 54.839453][ T5230] kasan_check_range+0x282/0x290
[ 54.844390][ T5230] copy_from_kernel_nofault+0x7a/0x2f0
[ 54.850007][ T5230] bpf_probe_read_kernel+0x2a/0x70
[ 54.855105][ T5230] bpf_prog_fe7b69aea4fa28bf+0x43/0x45
[ 54.860540][ T5230] bpf_test_run+0x4b1/0xa90
[ 54.865028][ T5230] ? bpf_dispatcher_change_prog+0xd8b/0xf10
[ 54.870916][ T5230] ? bpf_test_run+0x370/0xa90
[ 54.875576][ T5230] ? __pfx_bpf_test_run+0x10/0x10
[ 54.880583][ T5230] ? _copy_from_user+0xa6/0xe0
[ 54.885325][ T5230] ? bpf_test_init+0x15a/0x180
[ 54.890063][ T5230] ? xdp_convert_md_to_buff+0x5b/0x330
[ 54.895505][ T5230] bpf_prog_test_run_xdp+0x7da/0x11e0
[ 54.900857][ T5230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 54.906642][ T5230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 54.912427][ T5230] bpf_prog_test_run+0x2e4/0x360
[ 54.917349][ T5230] __sys_bpf+0x48d/0x810
[ 54.921570][ T5230] ? __pfx___sys_bpf+0x10/0x10
[ 54.926314][ T5230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 54.932652][ T5230] ? do_syscall_64+0x100/0x230
[ 54.937409][ T5230] __x64_sys_bpf+0x7c/0x90
[ 54.941809][ T5230] do_syscall_64+0xf3/0x230
[ 54.946297][ T5230] ? clear_bhb_loop+0x35/0x90
[ 54.950955][ T5230] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 54.956830][ T5230] RIP: 0033:0x7f432a7a94e9
[ 54.961239][ T5230] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.980845][ T5230] RSP: 002b:00007ffcda274578 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 54.989244][ T5230] RAX: ffffffffffffffda RBX: 00007ffcda274748 RCX: 00007f432a7a94e9
[ 54.997198][ T5230] RDX: 000000000000003b RSI: 0000000020000240 RDI: 000000000000000a
[ 55.005240][ T5230] RBP: 00007f432a81c610 R08: 0000000000000000 R09: 00007ffcda274748
[ 55.013200][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 55.021162][ T5230] R13: 00007ffcda274738 R14: 0000000000000001 R15: 0000000000000001
[ 55.029126][ T5230]
[ 55.032130][ T5230] Modules linked in:
[ 55.036021][ T5230] ---[ end trace 0000000000000000 ]---
[ 55.041499][ T5230] RIP: 0010:kasan_metadata_fetch_row+0x12/0x30
[ 55.047645][ T5230] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <48> 8b 0c 06 48 8b 44 06 08 48 89 47 08 48 89 0f c3 cc cc cc cc 66
[ 55.067239][ T5230] RSP: 0018:ffffc9000349f6d8 EFLAGS: 00010046
[ 55.073286][ T5230] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 2bdda03a32158100
[ 55.081239][ T5230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000349f710
[ 55.089191][ T5230] RBP: ffffc9000349f758 R08: ffffffff8bc0f2d3 R09: 0000000000000020
[ 55.097149][ T5230] R10: dffffc0000000000 R11: fffff52000693ee1 R12: ffffc9000349f710
[ 55.105100][ T5230] R13: 0000000000000080 R14: ffffffffffffff80 R15: ffffc9000349f6f0
[ 55.113049][ T5230] FS: 00005555791f8380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 55.121955][ T5230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.128517][ T5230] CR2: 00000000179cd398 CR3: 0000000032bd2000 CR4: 00000000003526f0
[ 55.136488][ T5230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.144437][ T5230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.152390][ T5230] Kernel panic - not syncing: Fatal exception in interrupt
[ 55.159805][ T5230] Kernel Offset: disabled
[ 55.164113][ T5230] Rebooting in 86400 seconds..