./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3233450845
<...>
Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts.
execve("./syz-executor3233450845", ["./syz-executor3233450845"], 0x7ffcfc2162b0 /* 10 vars */) = 0
brk(NULL) = 0x5555571f5000
brk(0x5555571f5d00) = 0x5555571f5d00
arch_prctl(ARCH_SET_FS, 0x5555571f5380) = 0
set_tid_address(0x5555571f5650) = 295
set_robust_list(0x5555571f5660, 24) = 0
rseq(0x5555571f5ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3233450845", 4096) = 28
getrandom("\x55\x51\xc9\x84\xd1\xff\x61\x04", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555571f5d00
brk(0x555557216d00) = 0x555557216d00
brk(0x555557217000) = 0x555557217000
mprotect(0x7fe48127e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571f5650) = 296
./strace-static-x86_64: Process 296 attached
[pid 296] set_robust_list(0x5555571f5660, 24) = 0
[pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 296] setpgid(0, 0) = 0
[pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 296] write(3, "1000", 4) = 4
[pid 296] close(3) = 0
[ 24.039374][ T30] audit: type=1400 audit(1707171744.621:66): avc: denied { execmem } for pid=295 comm="syz-executor323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 24.063779][ T30] audit: type=1400 audit(1707171744.641:67): avc: denied { prog_load } for pid=296 comm="syz-executor323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 24.083196][ T30] audit: type=1400 audit(1707171744.641:68): avc: denied { bpf } for pid=296 comm="syz-executor323" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 24.104150][ T30] audit: type=1400 audit(1707171744.641:69): avc: denied { perfmon } for pid=296 comm="syz-executor323" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x200006c0, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3
[ 24.288475][ T30] audit: type=1400 audit(1707171744.861:70): avc: denied { confidentiality } for pid=296 comm="syz-executor323" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1
[ 24.312972][ T30] audit: type=1400 audit(1707171744.891:71): avc: denied { prog_run } for pid=296 comm="syz-executor323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 24.332219][ C1] BUG: unable to handle page fault for address: ffffffffff600000
[ 24.339747][ C1] #PF: supervisor read access in kernel mode
[ 24.345561][ C1] #PF: error_code(0x0001) - permissions violation
[ 24.351813][ C1] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165
[ 24.359970][ C1] Oops: 0001 [#1] PREEMPT SMP KASAN
[ 24.365002][ C1] CPU: 1 PID: 89 Comm: klogd Not tainted 5.15.148-syzkaller-00704-g3802b45594e1 #0
[ 24.374223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 24.384160][ C1] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0
[ 24.390452][ C1] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 24.409892][ C1] RSP: 0018:ffffc900001cf9d8 EFLAGS: 00010246
[ 24.415795][ C1] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff88810c7e13c0
[ 24.423607][ C1] RDX: ffffc900001cfa60 RSI: ffffffffff600000 RDI: ffffffffff600000
[ 24.431790][ C1] RBP: ffffc900001cfa20 R08: ffffffff8135f3ed R09: fffff940008edbc7
[ 24.439575][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 24.447386][ C1] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000005
[ 24.455199][ C1] FS: 00007fcc167e9380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 24.463964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 24.470402][ C1] CR2: ffffffffff600000 CR3: 000000010c72e000 CR4: 00000000003506a0
[ 24.478204][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 24.486008][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 24.493819][ C1] Call Trace:
[ 24.496954][ C1]
[ 24.499726][ C1] ? __die_body+0x62/0xb0
[ 24.503889][ C1] ? __die+0x7e/0x90
[ 24.507707][ C1] ? page_fault_oops+0x7f9/0xa90
[ 24.512486][ C1] ? kernelmode_fixup_or_oops+0x270/0x270
[ 24.518034][ C1] ? __kernel_text_address+0x9b/0x110
[ 24.523245][ C1] ? unwind_get_return_address+0x4d/0x90
[ 24.528828][ C1] ? arch_stack_walk+0xf3/0x140
[ 24.533513][ C1] ? exc_page_fault+0x521/0x830
[ 24.538206][ C1] ? stack_trace_save+0x113/0x1c0
[ 24.543064][ C1] ? asm_exc_page_fault+0x27/0x30
[ 24.548009][ C1] ? copy_from_kernel_nofault_allowed+0x8d/0x100
[ 24.554255][ C1] ? strncpy_from_kernel_nofault+0x92/0x1e0
[ 24.559988][ C1] ? strncpy_from_kernel_nofault+0x41/0x1e0
[ 24.565711][ C1] ? skb_release_data+0x8a9/0xa80
[ 24.570573][ C1] bpf_probe_read_kernel_str+0x2a/0x70
[ 24.575869][ C1] bpf_prog_ef3a4661c9d1378e+0x42/0x4b4
[ 24.581251][ C1] bpf_trace_run2+0xec/0x210
[ 24.585676][ C1] ? bpf_trace_run1+0x1c0/0x1c0
[ 24.590368][ C1] ? skb_release_data+0x8a9/0xa80
[ 24.595223][ C1] ? skb_release_data+0x8a9/0xa80
[ 24.600082][ C1] __bpf_trace_kfree+0x6f/0x90
[ 24.604682][ C1] ? skb_release_data+0x8a9/0xa80
[ 24.609542][ C1] kfree+0x1f3/0x220
[ 24.613363][ C1] skb_release_data+0x8a9/0xa80
[ 24.618053][ C1] __kfree_skb+0x50/0x70
[ 24.622142][ C1] tcp_rtx_queue_unlink_and_free+0x203/0x720
[ 24.628222][ C1] tcp_ack+0x23e0/0x68a0
[ 24.632478][ C1] ? tcp_rcv_established+0x1ac0/0x1ac0
[ 24.637759][ C1] ? stack_trace_save+0x113/0x1c0
[ 24.642621][ C1] ? save_stack+0x11a/0x1e0
[ 24.646958][ C1] ? ktime_get+0x12f/0x160
[ 24.651211][ C1] tcp_rcv_established+0xcd6/0x1ac0
[ 24.656351][ C1] ? tcp_check_space+0x9d0/0x9d0
[ 24.661482][ C1] ? __kasan_check_read+0x11/0x20
[ 24.666341][ C1] ? ipv4_dst_check+0xe3/0x150
[ 24.670940][ C1] tcp_v4_do_rcv+0x3d7/0xa00
[ 24.675369][ C1] tcp_v4_rcv+0x23dd/0x2a70
[ 24.679711][ C1] ? get_stack_info+0x3b/0x100
[ 24.684311][ C1] ? __kasan_check_write+0x14/0x20
[ 24.689256][ C1] ? tcp_filter+0x90/0x90
[ 24.693421][ C1] ip_protocol_deliver_rcu+0x32f/0x710
[ 24.698717][ C1] ip_local_deliver+0x2c6/0x590
[ 24.703402][ C1] ? ip_protocol_deliver_rcu+0x710/0x710
[ 24.708869][ C1] ? ip_rcv_finish_core+0xb0d/0x1490
[ 24.713992][ C1] ip_sublist_rcv+0x7e2/0x980
[ 24.718503][ C1] ? packet_rcv+0x160/0x1150
[ 24.722933][ C1] ? ip_list_rcv+0x470/0x470
[ 24.727355][ C1] ? memset+0x35/0x40
[ 24.731180][ C1] ? ip_rcv_core+0x736/0xb50
[ 24.735603][ C1] ip_list_rcv+0x422/0x470
[ 24.739857][ C1] ? ip_rcv_finish+0xd0/0xd0
[ 24.744369][ C1] ? ip_rcv_finish+0xd0/0xd0
[ 24.748792][ C1] __netif_receive_skb_list_core+0x6b1/0x890
[ 24.754610][ C1] ? __netif_receive_skb+0x530/0x530
[ 24.759748][ C1] ? receive_buf+0x37ce/0x5720
[ 24.764335][ C1] netif_receive_skb_list_internal+0x967/0xcc0
[ 24.770321][ C1] ? virtnet_poll_tx+0x500/0x500
[ 24.775095][ C1] ? netif_receive_skb_list+0x2d0/0x2d0
[ 24.780475][ C1] ? irqtime_account_irq+0xdc/0x3c0
[ 24.785509][ C1] ? detach_buf_split+0x71a/0xae0
[ 24.790368][ C1] ? __irq_exit_rcu+0x5c/0xf0
[ 24.794880][ C1] napi_complete_done+0x344/0x770
[ 24.799742][ C1] ? __napi_schedule_irqoff+0x280/0x280
[ 24.805133][ C1] ? virtqueue_enable_cb_prepare+0x2c6/0x5b0
[ 24.810936][ C1] virtnet_poll+0xbee/0x1260
[ 24.815371][ C1] ? refill_work+0x220/0x220
[ 24.819895][ C1] ? activate_task+0x20/0xb0
[ 24.825122][ C1] __napi_poll+0xc4/0x5a0
[ 24.829394][ C1] net_rx_action+0x47d/0xc50
[ 24.833819][ C1] ? net_tx_action+0x550/0x550
[ 24.838417][ C1] ? native_sched_clock_from_tsc+0xb0/0x130
[ 24.844147][ C1] ? irqtime_account_irq+0x79/0x3c0
[ 24.849182][ C1] __do_softirq+0x26d/0x5bf
[ 24.853520][ C1] __irq_exit_rcu+0x50/0xf0
[ 24.857858][ C1] irq_exit_rcu+0x9/0x10
[ 24.861937][ C1] sysvec_call_function_single+0x97/0xb0
[ 24.867405][ C1]
[ 24.870187][ C1]
[ 24.873394][ C1] asm_sysvec_call_function_single+0x1b/0x20
[ 24.879248][ C1] RIP: 0010:__ksize+0x4d/0xe0
[ 24.883741][ C1] Code: 09 48 8b 15 45 fc cf 04 eb 0a 48 ba 00 00 00 80 7f 77 00 00 48 01 d0 48 2d 00 00 00 80 48 c1 e8 0c 48 c1 e0 06 48 8b 7c 08 08 <40> f6 c7 01 75 51 48 01 c1 48 89 cf 48 8b 47 08 48 89 f9 a8 01 75
[ 24.903565][ C1] RSP: 0018:ffffc900009d7860 EFLAGS: 00000206
[ 24.909580][ C1] RAX: 0000000004773cc0 RBX: ffff88811dcf3800 RCX: ffffea0000000000
[ 24.917377][ C1] RDX: 0000777f80000000 RSI: fffffffeddde5800 RDI: ffffea0004773c01
[ 24.925277][ C1] RBP: ffffc900009d7860 R08: ffffffff81b24141 R09: 000000000000000b
[ 24.933097][ C1] R10: ffffc900009d7550 R11: dffffc0000000001 R12: 0000000000400cc0
[ 24.940901][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811dcf3800
[ 24.948830][ C1] ? kfence_ksize+0x31/0xa0
[ 24.953167][ C1] ksize+0x35/0x50
[ 24.956724][ C1] ? alloc_skb_with_frags+0xa6/0x680
[ 24.961945][ C1] __alloc_skb+0x168/0x550
[ 24.966295][ C1] alloc_skb_with_frags+0xa6/0x680
[ 24.971252][ C1] ? memcpy+0x56/0x70
[ 24.975066][ C1] sock_alloc_send_pskb+0x915/0xa50
[ 24.980104][ C1] ? sock_kzfree_s+0x60/0x60
[ 24.984525][ C1] ? __kasan_check_write+0x14/0x20
[ 24.989474][ C1] ? _raw_spin_lock+0xa4/0x1b0
[ 24.994075][ C1] ? _raw_spin_trylock_bh+0x190/0x190
[ 24.999282][ C1] unix_dgram_sendmsg+0x6fd/0x2090
[ 25.004234][ C1] ? unix_dgram_poll+0x710/0x710
[ 25.009005][ C1] ? avc_has_perm_noaudit+0x430/0x430
[ 25.014380][ C1] ? security_socket_sendmsg+0x82/0xb0
[ 25.019797][ C1] ? unix_dgram_poll+0x710/0x710
[ 25.024553][ C1] __sys_sendto+0x564/0x720
[ 25.028895][ C1] ? __ia32_sys_getpeername+0x90/0x90
[ 25.034213][ C1] ? fpu_flush_thread+0xf0/0xf0
[ 25.038897][ C1] ? __kasan_check_read+0x11/0x20
[ 25.043755][ C1] __x64_sys_sendto+0xe5/0x100
[ 25.048357][ C1] do_syscall_64+0x3d/0xb0
[ 25.052610][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 25.058337][ C1] RIP: 0033:0x7fcc1694b9b5
[ 25.062591][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83
[ 25.082703][ C1] RSP: 002b:00007ffd0f975728 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 25.090943][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc1694b9b5
[ 25.098844][ C1] RDX: 000000000000012f RSI: 000055b177ae98a0 RDI: 0000000000000003
[ 25.106653][ C1] RBP: 000055b177ae42c0 R08: 0000000000000000 R09: 0000000000000000
[ 25.114471][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
[ 25.122273][ C1] R13: 00007fcc16ad9212 R14: 00007ffd0f975828 R15: 0000000000000000
[ 25.130099][ C1]
[ 25.132950][ C1] Modules linked in:
[ 25.136781][ C1] CR2: ffffffffff600000
[ 25.140774][ C1] ---[ end trace 6d987446d3744679 ]---
[ 25.146057][ C1] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0
[ 25.152652][ C1] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 25.172095][ C1] RSP: 0018:ffffc900001cf9d8 EFLAGS: 00010246
[ 25.178002][ C1] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff88810c7e13c0
[ 25.185805][ C1] RDX: ffffc900001cfa60 RSI: ffffffffff600000 RDI: ffffffffff600000
[ 25.193619][ C1] RBP: ffffc900001cfa20 R08: ffffffff8135f3ed R09: fffff940008edbc7
[ 25.201516][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 25.209389][ C1] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000005
[ 25.217141][ C1] FS: 00007fcc167e9380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 25.225990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 25.232502][ C1] CR2: ffffffffff600000 CR3: 000000010c72e000 CR4: 00000000003506a0
[ 25.240405][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 25.248241][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 25.256199][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 25.263447][ C1] Kernel Offset: disabled
[ 25.267573][ C1] Rebooting in 86400 seconds..