./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3606815763 <...> Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 97.360788][ T23] cfg80211: failed to load regulatory.db execve("./syz-executor3606815763", ["./syz-executor3606815763"], 0x7fff82e2d3a0 /* 10 vars */) = 0 brk(NULL) = 0x55555669e000 brk(0x55555669ed00) = 0x55555669ed00 arch_prctl(ARCH_SET_FS, 0x55555669e380) = 0 set_tid_address(0x55555669e650) = 5073 set_robust_list(0x55555669e660, 24) = 0 rseq(0x55555669eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3606815763", 4096) = 28 getrandom("\xfd\x08\x06\xc5\x71\x11\xa4\x6b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555669ed00 brk(0x5555566bfd00) = 0x5555566bfd00 brk(0x5555566c0000) = 0x5555566c0000 mprotect(0x7f1c8f471000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_UNIX, SOCK_STREAM, 0) = 3 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [ 97.674764][ T5073] ================================================================== [ 97.682883][ T5073] BUG: KASAN: null-ptr-deref in unix_stream_bpf_update_proto+0x72/0x430 [ 97.691269][ T5073] Write of size 4 at addr 0000000000000080 by task syz-executor360/5073 [ 97.700249][ T5073] [ 97.702879][ T5073] CPU: 1 PID: 5073 Comm: syz-executor360 Not tainted 6.7.0-rc2-syzkaller-00143-g300fbb247eb3 #0 [ 97.713444][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 97.723510][ T5073] Call Trace: [ 97.726801][ T5073] [ 97.729853][ T5073] dump_stack_lvl+0xd9/0x1b0 [ 97.734468][ T5073] kasan_report+0xda/0x110 [ 97.739054][ T5073] ? unix_stream_bpf_update_proto+0x72/0x430 [ 97.745124][ T5073] ? unix_stream_bpf_update_proto+0x72/0x430 [ 97.751169][ T5073] kasan_check_range+0xef/0x190 [ 97.756132][ T5073] unix_stream_bpf_update_proto+0x72/0x430 [ 97.762068][ T5073] sock_map_link+0xb87/0x1100 [ 97.766942][ T5073] ? sock_map_close+0x8c0/0x8c0 [ 97.771926][ T5073] sock_map_update_common+0xf6/0x870 [ 97.777253][ T5073] sock_map_update_elem_sys+0x5b6/0x640 [ 97.782948][ T5073] ? sock_map_prog_detach+0x3d0/0x3d0 [ 97.788359][ T5073] bpf_map_update_value+0x3af/0x820 [ 97.793580][ T5073] map_update_elem+0x622/0x890 [ 97.798572][ T5073] ? bpf_map_update_value+0x820/0x820 [ 97.803987][ T5073] ? bpf_lsm_bpf+0x9/0x10 [ 97.808372][ T5073] __sys_bpf+0x1bfb/0x4920 [ 97.812817][ T5073] ? bpf_perf_link_attach+0x540/0x540 [ 97.818208][ T5073] ? cgroup_update_frozen+0x144/0x6b0 [ 97.823638][ T5073] ? recalc_sigpending_tsk+0x187/0x1d0 [ 97.829213][ T5073] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 97.834462][ T5073] ? find_held_lock+0x2d/0x110 [ 97.839364][ T5073] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.844722][ T5073] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.849966][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50 [ 97.855202][ T5073] ? ptrace_notify+0xf4/0x130 [ 97.859930][ T5073] __x64_sys_bpf+0x78/0xc0 [ 97.864395][ T5073] ? syscall_enter_from_user_mode+0x107/0x120 [ 97.870632][ T5073] do_syscall_64+0x40/0x110 [ 97.875186][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 97.881223][ T5073] RIP: 0033:0x7f1c8f3fe369 [ 97.885656][ T5073] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.905383][ T5073] RSP: 002b:00007ffd877e4a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.913838][ T5073] RAX: ffffffffffffffda RBX: 00007ffd877e4c28 RCX: 00007f1c8f3fe369 [ 97.922026][ T5073] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000002 [ 97.930123][ T5073] RBP: 00007f1c8f471610 R08: 00007ffd877e4c28 R09: 00007ffd877e4c28 [ 97.938118][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.946106][ T5073] R13: 00007ffd877e4c18 R14: 0000000000000001 R15: 0000000000000001 [ 97.954285][ T5073] [ 97.957337][ T5073] ================================================================== [ 97.966454][ T5073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.973705][ T5073] CPU: 1 PID: 5073 Comm: syz-executor360 Not tainted 6.7.0-rc2-syzkaller-00143-g300fbb247eb3 #0 [ 97.984196][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 97.994280][ T5073] Call Trace: [ 97.997584][ T5073] [ 98.000548][ T5073] dump_stack_lvl+0xd9/0x1b0 [ 98.005327][ T5073] panic+0x6dc/0x790 [ 98.009271][ T5073] ? panic_smp_self_stop+0xa0/0xa0 [ 98.014426][ T5073] ? preempt_schedule_thunk+0x1a/0x30 [ 98.019848][ T5073] ? preempt_schedule_common+0x45/0xc0 [ 98.025356][ T5073] ? check_panic_on_warn+0x1f/0xb0 [ 98.030505][ T5073] check_panic_on_warn+0xab/0xb0 [ 98.035520][ T5073] end_report+0x108/0x150 [ 98.039903][ T5073] kasan_report+0xea/0x110 [ 98.044390][ T5073] ? unix_stream_bpf_update_proto+0x72/0x430 [ 98.050436][ T5073] ? unix_stream_bpf_update_proto+0x72/0x430 [ 98.056741][ T5073] kasan_check_range+0xef/0x190 [ 98.061645][ T5073] unix_stream_bpf_update_proto+0x72/0x430 [ 98.067549][ T5073] sock_map_link+0xb87/0x1100 [ 98.072268][ T5073] ? sock_map_close+0x8c0/0x8c0 [ 98.077153][ T5073] sock_map_update_common+0xf6/0x870 [ 98.082475][ T5073] sock_map_update_elem_sys+0x5b6/0x640 [ 98.088148][ T5073] ? sock_map_prog_detach+0x3d0/0x3d0 [ 98.093560][ T5073] bpf_map_update_value+0x3af/0x820 [ 98.098811][ T5073] map_update_elem+0x622/0x890 [ 98.103621][ T5073] ? bpf_map_update_value+0x820/0x820 [ 98.109060][ T5073] ? bpf_lsm_bpf+0x9/0x10 [ 98.113467][ T5073] __sys_bpf+0x1bfb/0x4920 [ 98.118083][ T5073] ? bpf_perf_link_attach+0x540/0x540 [ 98.123501][ T5073] ? cgroup_update_frozen+0x144/0x6b0 [ 98.128924][ T5073] ? recalc_sigpending_tsk+0x187/0x1d0 [ 98.134417][ T5073] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 98.139656][ T5073] ? find_held_lock+0x2d/0x110 [ 98.144475][ T5073] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.149707][ T5073] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.155058][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.160310][ T5073] ? ptrace_notify+0xf4/0x130 [ 98.165197][ T5073] __x64_sys_bpf+0x78/0xc0 [ 98.169753][ T5073] ? syscall_enter_from_user_mode+0x107/0x120 [ 98.175897][ T5073] do_syscall_64+0x40/0x110 [ 98.180457][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 98.186445][ T5073] RIP: 0033:0x7f1c8f3fe369 [ 98.190886][ T5073] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.210957][ T5073] RSP: 002b:00007ffd877e4a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.219490][ T5073] RAX: ffffffffffffffda RBX: 00007ffd877e4c28 RCX: 00007f1c8f3fe369 [ 98.227486][ T5073] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000002 [ 98.235509][ T5073] RBP: 00007f1c8f471610 R08: 00007ffd877e4c28 R09: 00007ffd877e4c28 [ 98.243520][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.251623][ T5073] R13: 00007ffd877e4c18 R14: 0000000000000001 R15: 0000000000000001 [ 98.259851][ T5073] [ 98.263244][ T5073] Kernel Offset: disabled [ 98.267676][ T5073] Rebooting in 86400 seconds..