./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2139936758 <...> Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. execve("./syz-executor2139936758", ["./syz-executor2139936758"], 0x7ffdc61230b0 /* 10 vars */) = 0 brk(NULL) = 0x555588db6000 brk(0x555588db6d00) = 0x555588db6d00 arch_prctl(ARCH_SET_FS, 0x555588db6380) = 0 set_tid_address(0x555588db6650) = 5057 set_robust_list(0x555588db6660, 24) = 0 rseq(0x555588db6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2139936758", 4096) = 28 getrandom("\x0d\x9e\x73\x70\x5a\x75\x2b\x1a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555588db6d00 brk(0x555588dd7d00) = 0x555588dd7d00 brk(0x555588dd8000) = 0x555588dd8000 mprotect(0x7fd5cc026000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000040, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 close(3) = 0 socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000000, value=0x20000080, flags=BPF_ANY}, 32) = 0 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 60.830882][ T5057] ------------[ cut here ]------------ [ 60.836680][ T5057] WARNING: CPU: 1 PID: 5057 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 60.846264][ T5057] Modules linked in: [ 60.850191][ T5057] CPU: 1 PID: 5057 Comm: syz-executor213 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 60.860564][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.871314][ T5057] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 60.877288][ T5057] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 0c 41 86 8f 80 e1 07 80 c1 03 38 [ 60.898127][ T5057] RSP: 0018:ffffc900039ef340 EFLAGS: 00010046 [ 60.904633][ T5057] RAX: 0000000000000000 RBX: 1ffff9200073de6c RCX: 0000000000000001 [ 60.912885][ T5057] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895b9cb1 [ 60.921305][ T5057] RBP: ffffc900039ef3e8 R08: ffff88801b69727b R09: 1ffff110036d2e4f [ 60.929654][ T5057] R10: dffffc0000000000 R11: ffffed10036d2e50 R12: dffffc0000000000 [ 60.937649][ T5057] R13: 0000000000000000 R14: ffffc900039ef380 R15: 0000000000000201 [ 60.945624][ T5057] FS: 0000555588db6380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 60.954634][ T5057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.961554][ T5057] CR2: 000000000066c7e0 CR3: 00000000239e8000 CR4: 00000000003506f0 [ 60.969524][ T5057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.977922][ T5057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.985903][ T5057] Call Trace: [ 60.989217][ T5057] [ 60.992149][ T5057] ? __warn+0x163/0x4b0 [ 60.996308][ T5057] ? __local_bh_enable_ip+0x1be/0x200 [ 61.001704][ T5057] ? report_bug+0x2b3/0x500 [ 61.006517][ T5057] ? __local_bh_enable_ip+0x1be/0x200 [ 61.012297][ T5057] ? handle_bug+0x3e/0x70 [ 61.016662][ T5057] ? exc_invalid_op+0x1a/0x50 [ 61.021364][ T5057] ? asm_exc_invalid_op+0x1a/0x20 [ 61.026721][ T5057] ? sock_map_unref+0x401/0x5e0 [ 61.031678][ T5057] ? __local_bh_enable_ip+0x1be/0x200 [ 61.037151][ T5057] ? sock_map_unref+0x401/0x5e0 [ 61.042270][ T5057] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 61.047999][ T5057] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.053229][ T5057] ? sock_map_unref+0x3ac/0x5e0 [ 61.058132][ T5057] sock_map_unref+0x401/0x5e0 [ 61.062811][ T5057] sock_map_delete_elem+0xc0/0x140 [ 61.068003][ T5057] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 61.073546][ T5057] bpf_trace_run2+0x204/0x420 [ 61.078248][ T5057] ? bpf_trace_run2+0x114/0x420 [ 61.083263][ T5057] ? __pfx_bpf_trace_run2+0x10/0x10 [ 61.089006][ T5057] ? trace_tlb_flush+0x59/0x120 [ 61.093952][ T5057] trace_tlb_flush+0xfa/0x120 [ 61.098981][ T5057] switch_mm_irqs_off+0x7cb/0xae0 [ 61.104092][ T5057] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 61.109714][ T5057] ? text_poke_memcpy+0x25/0x30 [ 61.114713][ T5057] ? __asan_memcpy+0x40/0x70 [ 61.119314][ T5057] __text_poke+0x8f7/0xd30 [ 61.123898][ T5057] ? trace_tlb_flush+0x6/0x120 [ 61.128758][ T5057] ? __pfx_text_poke_memcpy+0x10/0x10 [ 61.134146][ T5057] ? __pfx___text_poke+0x10/0x10 [ 61.139350][ T5057] ? __pfx___might_resched+0x10/0x10 [ 61.144706][ T5057] ? __mutex_trylock_common+0x183/0x2e0 [ 61.150434][ T5057] ? __pfx___might_resched+0x10/0x10 [ 61.155759][ T5057] ? trace_tlb_flush+0x6/0x120 [ 61.161332][ T5057] text_poke_bp_batch+0x265/0xb30 [ 61.166397][ T5057] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 61.171956][ T5057] ? __pfx___mutex_lock+0x10/0x10 [ 61.177158][ T5057] ? arch_jump_label_transform_queue+0x9b/0x100 [ 61.183661][ T5057] text_poke_finish+0x30/0x50 [ 61.188442][ T5057] arch_jump_label_transform_apply+0x1c/0x30 [ 61.194429][ T5057] static_key_enable_cpuslocked+0x136/0x260 [ 61.200331][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.206145][ T5057] static_key_enable+0x1a/0x20 [ 61.210972][ T5057] tracepoint_add_func+0x953/0x9e0 [ 61.216368][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.222208][ T5057] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 61.229340][ T5057] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 61.237377][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.243232][ T5057] ? anon_inode_getfile+0xff/0x180 [ 61.248624][ T5057] ? bpf_probe_register+0x117/0x1d0 [ 61.253825][ T5057] bpf_raw_tp_link_attach+0x470/0x6d0 [ 61.259234][ T5057] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 61.265140][ T5057] bpf_raw_tracepoint_open+0x19d/0x210 [ 61.270767][ T5057] __sys_bpf+0x3c0/0x810 [ 61.275182][ T5057] ? __pfx___sys_bpf+0x10/0x10 [ 61.280122][ T5057] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.286515][ T5057] ? do_syscall_64+0x10a/0x240 [ 61.291406][ T5057] __x64_sys_bpf+0x7c/0x90 [ 61.295908][ T5057] do_syscall_64+0xfb/0x240 [ 61.300522][ T5057] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 61.306468][ T5057] RIP: 0033:0x7fd5cbfb29e9 [ 61.311152][ T5057] Code: Unable to access opcode bytes at 0x7fd5cbfb29bf. [ 61.318362][ T5057] RSP: 002b:00007ffec162c628 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.327022][ T5057] RAX: ffffffffffffffda RBX: 00007ffec162c7f8 RCX: 00007fd5cbfb29e9 [ 61.335005][ T5057] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 61.343432][ T5057] RBP: 00007fd5cc026610 R08: 00007ffec162c7f8 R09: 00007ffec162c7f8 [ 61.351517][ T5057] R10: 00007ffec162c7f8 R11: 0000000000000246 R12: 0000000000000001 [ 61.359667][ T5057] R13: 00007ffec162c7e8 R14: 0000000000000001 R15: 0000000000000001 [ 61.368207][ T5057] [ 61.371342][ T5057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.378798][ T5057] CPU: 1 PID: 5057 Comm: syz-executor213 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 61.389328][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 61.399583][ T5057] Call Trace: [ 61.403078][ T5057] [ 61.406106][ T5057] dump_stack_lvl+0x241/0x360 [ 61.410841][ T5057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.416458][ T5057] ? __pfx__printk+0x10/0x10 [ 61.421331][ T5057] ? vscnprintf+0x5d/0x90 [ 61.425695][ T5057] panic+0x349/0x860 [ 61.430222][ T5057] ? __warn+0x172/0x4b0 [ 61.434506][ T5057] ? __pfx_panic+0x10/0x10 [ 61.439041][ T5057] __warn+0x31e/0x4b0 [ 61.443317][ T5057] ? __local_bh_enable_ip+0x1be/0x200 [ 61.448683][ T5057] report_bug+0x2b3/0x500 [ 61.453298][ T5057] ? __local_bh_enable_ip+0x1be/0x200 [ 61.458788][ T5057] handle_bug+0x3e/0x70 [ 61.462963][ T5057] exc_invalid_op+0x1a/0x50 [ 61.467703][ T5057] asm_exc_invalid_op+0x1a/0x20 [ 61.472672][ T5057] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 61.478671][ T5057] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 0c 41 86 8f 80 e1 07 80 c1 03 38 [ 61.498565][ T5057] RSP: 0018:ffffc900039ef340 EFLAGS: 00010046 [ 61.505151][ T5057] RAX: 0000000000000000 RBX: 1ffff9200073de6c RCX: 0000000000000001 [ 61.513232][ T5057] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895b9cb1 [ 61.521307][ T5057] RBP: ffffc900039ef3e8 R08: ffff88801b69727b R09: 1ffff110036d2e4f [ 61.529733][ T5057] R10: dffffc0000000000 R11: ffffed10036d2e50 R12: dffffc0000000000 [ 61.537716][ T5057] R13: 0000000000000000 R14: ffffc900039ef380 R15: 0000000000000201 [ 61.545737][ T5057] ? sock_map_unref+0x401/0x5e0 [ 61.550706][ T5057] ? sock_map_unref+0x401/0x5e0 [ 61.555668][ T5057] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 61.561415][ T5057] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.566626][ T5057] ? sock_map_unref+0x3ac/0x5e0 [ 61.571625][ T5057] sock_map_unref+0x401/0x5e0 [ 61.576365][ T5057] sock_map_delete_elem+0xc0/0x140 [ 61.581597][ T5057] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 61.587462][ T5057] bpf_trace_run2+0x204/0x420 [ 61.592231][ T5057] ? bpf_trace_run2+0x114/0x420 [ 61.597352][ T5057] ? __pfx_bpf_trace_run2+0x10/0x10 [ 61.602650][ T5057] ? trace_tlb_flush+0x59/0x120 [ 61.607957][ T5057] trace_tlb_flush+0xfa/0x120 [ 61.612658][ T5057] switch_mm_irqs_off+0x7cb/0xae0 [ 61.617683][ T5057] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 61.623267][ T5057] ? text_poke_memcpy+0x25/0x30 [ 61.628398][ T5057] ? __asan_memcpy+0x40/0x70 [ 61.633112][ T5057] __text_poke+0x8f7/0xd30 [ 61.637566][ T5057] ? trace_tlb_flush+0x6/0x120 [ 61.642422][ T5057] ? __pfx_text_poke_memcpy+0x10/0x10 [ 61.647875][ T5057] ? __pfx___text_poke+0x10/0x10 [ 61.652832][ T5057] ? __pfx___might_resched+0x10/0x10 [ 61.658141][ T5057] ? __mutex_trylock_common+0x183/0x2e0 [ 61.664052][ T5057] ? __pfx___might_resched+0x10/0x10 [ 61.669365][ T5057] ? trace_tlb_flush+0x6/0x120 [ 61.674134][ T5057] text_poke_bp_batch+0x265/0xb30 [ 61.679233][ T5057] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 61.685165][ T5057] ? __pfx___mutex_lock+0x10/0x10 [ 61.690313][ T5057] ? arch_jump_label_transform_queue+0x9b/0x100 [ 61.696856][ T5057] text_poke_finish+0x30/0x50 [ 61.701808][ T5057] arch_jump_label_transform_apply+0x1c/0x30 [ 61.707787][ T5057] static_key_enable_cpuslocked+0x136/0x260 [ 61.713777][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.719595][ T5057] static_key_enable+0x1a/0x20 [ 61.724359][ T5057] tracepoint_add_func+0x953/0x9e0 [ 61.729658][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.735459][ T5057] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 61.742570][ T5057] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 61.750019][ T5057] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 61.755995][ T5057] ? anon_inode_getfile+0xff/0x180 [ 61.761104][ T5057] ? bpf_probe_register+0x117/0x1d0 [ 61.766393][ T5057] bpf_raw_tp_link_attach+0x470/0x6d0 [ 61.772484][ T5057] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 61.778579][ T5057] bpf_raw_tracepoint_open+0x19d/0x210 [ 61.784343][ T5057] __sys_bpf+0x3c0/0x810 [ 61.788724][ T5057] ? __pfx___sys_bpf+0x10/0x10 [ 61.793723][ T5057] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.800328][ T5057] ? do_syscall_64+0x10a/0x240 [ 61.805458][ T5057] __x64_sys_bpf+0x7c/0x90 [ 61.809874][ T5057] do_syscall_64+0xfb/0x240 [ 61.814382][ T5057] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 61.820269][ T5057] RIP: 0033:0x7fd5cbfb29e9 [ 61.824699][ T5057] Code: Unable to access opcode bytes at 0x7fd5cbfb29bf. [ 61.832065][ T5057] RSP: 002b:00007ffec162c628 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.840471][ T5057] RAX: ffffffffffffffda RBX: 00007ffec162c7f8 RCX: 00007fd5cbfb29e9 [ 61.848628][ T5057] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 61.856872][ T5057] RBP: 00007fd5cc026610 R08: 00007ffec162c7f8 R09: 00007ffec162c7f8 [ 61.865135][ T5057] R10: 00007ffec162c7f8 R11: 0000000000000246 R12: 0000000000000001 [ 61.873098][ T5057] R13: 00007ffec162c7e8 R14: 0000000000000001 R15: 0000000000000001 [ 61.881141][ T5057] [ 61.884303][ T5057] Kernel Offset: disabled [ 61.889108][ T5057] Rebooting in 86400 seconds..