./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1699564316 <...> Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. execve("./syz-executor1699564316", ["./syz-executor1699564316"], 0x7ffd164c8430 /* 10 vars */) = 0 brk(NULL) = 0x555555649000 brk(0x555555649d00) = 0x555555649d00 arch_prctl(ARCH_SET_FS, 0x555555649380) = 0 set_tid_address(0x555555649650) = 355 set_robust_list(0x555555649660, 24) = 0 rseq(0x555555649ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1699564316", 4096) = 28 getrandom("\x5c\x8d\x38\xeb\xba\x35\xa8\xb5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555649d00 brk(0x55555566ad00) = 0x55555566ad00 brk(0x55555566b000) = 0x55555566b000 mprotect(0x7f3032d14000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SCHED_ACT, insn_cnt=14, insns=0x20000840, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 [ 22.984916][ T23] audit: type=1400 audit(1713570492.390:66): avc: denied { execmem } for pid=355 comm="syz-executor169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.006050][ T23] audit: type=1400 audit(1713570492.420:67): avc: denied { prog_load } for pid=355 comm="syz-executor169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.025944][ T23] audit: type=1400 audit(1713570492.440:68): avc: denied { prog_run } for pid=355 comm="syz-executor169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.045292][ T355] kasan: CONFIG_KASAN_INLINE enabled [ 23.050417][ T355] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 23.058375][ T355] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 23.065054][ T355] CPU: 1 PID: 355 Comm: syz-executor169 Not tainted 5.4.268-syzkaller-00003-g2d5d8240a7cb #0 [ 23.075144][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 23.085127][ T355] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 23.091435][ T355] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 0d 59 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 23.110876][ T355] RSP: 0018:ffff8881dbf5f4b8 EFLAGS: 00010203 [ 23.116779][ T355] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000000 [ 23.124591][ T355] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000000011c [ 23.132396][ T355] RBP: 0000000000000080 R08: ffffffff8387c1da R09: ffff8881dbf5f760 [ 23.140216][ T355] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.148024][ T355] R13: fffffffaa3eb72b9 R14: 0000000000000000 R15: ffff8881ddd23012 [ 23.155833][ T355] FS: 0000555555649380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.164605][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.171019][ T355] CR2: 00007fb549b7ab10 CR3: 00000001ddcea000 CR4: 00000000003406a0 [ 23.178833][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.186639][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.194447][ T355] Call Trace: [ 23.197589][ T355] ? __die+0xb4/0x100 [ 23.201397][ T355] ? die+0x26/0x50 [ 23.205045][ T355] ? do_general_protection+0x266/0x3c0 [ 23.210343][ T355] ? stack_trace_save+0x1c0/0x1c0 [ 23.215196][ T355] ? do_trap+0x340/0x340 [ 23.219277][ T355] ? arch_stack_walk+0x111/0x140 [ 23.224050][ T355] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 23.229344][ T355] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.235246][ T355] ? general_protection+0x28/0x30 [ 23.240110][ T355] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 23.245768][ T355] ? bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 23.251480][ T355] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 23.257144][ T355] ? __kasan_kmalloc+0x171/0x210 [ 23.261890][ T355] ? kmem_cache_alloc+0xd9/0x250 [ 23.266663][ T355] ? build_skb+0x26/0x440 [ 23.270832][ T355] ? bpf_prog_test_run_skb+0x302/0xf00 [ 23.276126][ T355] ? __se_sys_bpf+0x2e37/0xbcb0 [ 23.280811][ T355] ? do_syscall_64+0xca/0x1c0 [ 23.285326][ T355] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.291254][ T355] ? ktime_get+0xf9/0x130 [ 23.295400][ T355] ? bpf_test_run+0x2ae/0x6c0 [ 23.299909][ T355] ? bpf_ctx_init+0x1a0/0x1a0 [ 23.304420][ T355] ? bpf_prog_test_run_skb+0x73c/0xf00 [ 23.309720][ T355] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 23.315355][ T355] ? __bpf_prog_get+0x287/0x310 [ 23.320044][ T355] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 23.325686][ T355] ? __se_sys_bpf+0x2e37/0xbcb0 [ 23.330369][ T355] ? _raw_spin_trylock_bh+0x190/0x190 [ 23.335580][ T355] ? newidle_balance+0x761/0x930 [ 23.340353][ T355] ? check_preemption_disabled+0x9f/0x320 [ 23.345908][ T355] ? check_preemption_disabled+0x9f/0x320 [ 23.351460][ T355] ? debug_smp_processor_id+0x20/0x20 [ 23.356758][ T355] ? debug_smp_processor_id+0x20/0x20 [ 23.361974][ T355] ? __x64_sys_bpf+0x80/0x80 [ 23.366475][ T355] ? find_next_bit+0x7b/0x100 [ 23.370987][ T355] ? _raw_spin_unlock_irq+0x4a/0x60 [ 23.376023][ T355] ? finish_task_switch+0x130/0x590 [ 23.381056][ T355] ? __schedule+0xb0d/0x1320 [ 23.385484][ T355] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 23.390431][ T355] ? _raw_spin_lock_irqsave+0x210/0x210 [ 23.395812][ T355] ? cgroup_update_frozen+0x157/0xab0 [ 23.401019][ T355] ? cgroup_update_frozen+0x157/0xab0 [ 23.406227][ T355] ? cgroup_leave_frozen+0x13c/0x290 [ 23.411348][ T355] ? ptrace_stop+0x6ee/0xa30 [ 23.415776][ T355] ? _raw_spin_unlock_irq+0x4a/0x60 [ 23.420831][ T355] ? ptrace_notify+0x24c/0x350 [ 23.425407][ T355] ? do_notify_parent+0xa10/0xa10 [ 23.430271][ T355] ? check_preemption_disabled+0x153/0x320 [ 23.435908][ T355] ? syscall_trace_enter+0x650/0x940 [ 23.441050][ T355] ? do_syscall_64+0xca/0x1c0 [ 23.445542][ T355] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.451439][ T355] Modules linked in: [ 23.455270][ T355] ---[ end trace f12432470426d8e5 ]--- [ 23.460550][ T355] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 23.466838][ T355] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 0d 59 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 23.486271][ T355] RSP: 0018:ffff8881dbf5f4b8 EFLAGS: 00010203 [ 23.492146][ T355] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000000 [ 23.500002][ T355] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000000011c [ 23.507792][ T355] RBP: 0000000000000080 R08: ffffffff8387c1da R09: ffff8881dbf5f760 [ 23.515613][ T355] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.523394][ T355] R13: fffffffaa3eb72b9 R14: 0000000000000000 R15: ffff8881ddd23012 [ 23.531275][ T355] FS: 0000555555649380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.539993][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.546420][ T355] CR2: 00007fb549b7ab10 CR3: 00000001ddcea000 CR4: 00000000003406a0 [ 23.554206][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.562044][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.569844][ T355] Kernel panic - not syncing: Fatal exception [ 23.575808][ T355] Kernel Offset: disabled [ 23.579893][ T355] Rebooting in 86400 seconds..