./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3894973864
<...>
Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts.
execve("./syz-executor3894973864", ["./syz-executor3894973864"], 0x7ffc3874bf80 /* 10 vars */) = 0
brk(NULL) = 0x555590a38000
brk(0x555590a38d00) = 0x555590a38d00
arch_prctl(ARCH_SET_FS, 0x555590a38380) = 0
set_tid_address(0x555590a38650) = 5227
set_robust_list(0x555590a38660, 24) = 0
rseq(0x555590a38ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3894973864", 4096) = 28
getrandom("\xc2\x3b\x4c\x10\xe7\xae\x95\x64", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555590a38d00
brk(0x555590a59d00) = 0x555590a59d00
brk(0x555590a5a000) = 0x555590a5a000
mprotect(0x7f7bfb583000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555590a38650) = 5228
./strace-static-x86_64: Process 5228 attached
[pid 5228] set_robust_list(0x555590a38660, 24) = 0
[pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5228] setpgid(0, 0) = 0
[pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5228] write(3, "1000", 4) = 4
[pid 5228] close(3) = 0
[pid 5228] write(1, "executing program\n", 18executing program
) = 18
[ 81.984531][ T29] audit: type=1400 audit(1722776663.865:88): avc: denied { execmem } for pid=5227 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid 5228] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_ARRAY, key_size=4, value_size=4095, max_entries=7, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[pid 5228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address)
[ 82.027849][ T29] audit: type=1400 audit(1722776663.915:89): avc: denied { map_create } for pid=5228 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 82.048117][ T29] audit: type=1400 audit(1722776663.915:90): avc: denied { perfmon } for pid=5228 comm="syz-executor389" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 82.048329][ T5228] ------------[ cut here ]------------
[pid 5228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SYSCALL, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_ANY_ALIGNMENT|BPF_F_TEST_STATE_FREQ|BPF_F_SLEEPABLE, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4
[ 82.070111][ T29] audit: type=1400 audit(1722776663.915:91): avc: denied { map_read map_write } for pid=5228 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 82.074907][ T5228] WARNING: CPU: 0 PID: 5228 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.105790][ T5228] Modules linked in:
[ 82.109814][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz-executor389 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[ 82.121175][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 82.122291][ T29] audit: type=1400 audit(1722776663.925:92): avc: denied { prog_load } for pid=5228 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 82.131478][ T5228] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.152007][ T29] audit: type=1400 audit(1722776663.925:93): avc: denied { bpf } for pid=5228 comm="syz-executor389" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 82.157581][ T5228] Code: 41 5c 41 5d ff e0 cc 66 90 e8 c4 24 e5 ff e8 af 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 a9 24 e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4b 42 00 eb 93 e8 a4 4b 42 00 eb ae
[ 82.178982][ T29] audit: type=1400 audit(1722776663.935:94): avc: denied { prog_run } for pid=5228 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 82.198182][ T5228] RSP: 0018:ffffc90003237a80 EFLAGS: 00010293
[ 82.223696][ T5228] RAX: 0000000000000000 RBX: ffff88802fee5800 RCX: ffffffff81a5567d
[ 82.231711][ T5228] RDX: ffff888021655a00 RSI: ffffffff81a55687 RDI: 0000000000000005
[ 82.240203][ T5228] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 82.248324][ T5228] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 82.256308][ T5228] R13: ffffc90003237b38 R14: 0000000000000000 R15: 0000000000000000
[ 82.264360][ T5228] FS: 0000555590a38380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 82.273375][ T5228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 82.280043][ T5228] CR2: 000055bed38650c8 CR3: 00000000257b8000 CR4: 00000000003506f0
[ 82.288074][ T5228] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 82.296075][ T5228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 82.304115][ T5228] Call Trace:
[ 82.307433][ T5228]
[ 82.310378][ T5228] ? show_regs+0x8c/0xa0
[ 82.314634][ T5228] ? __warn+0xe5/0x3c0
[ 82.318950][ T5228] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.324699][ T5228] ? report_bug+0x3c0/0x580
[ 82.329262][ T5228] ? handle_bug+0x3d/0x70
[ 82.333612][ T5228] ? exc_invalid_op+0x17/0x50
[ 82.338360][ T5228] ? asm_exc_invalid_op+0x1a/0x20
[ 82.343423][ T5228] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 82.349205][ T5228] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 82.354943][ T5228] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.360733][ T5228] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 82.367025][ T5228] ___bpf_prog_run+0x3e51/0xabd0
[ 82.371968][ T5228] __bpf_prog_run32+0xc1/0x100
[ 82.376814][ T5228] ? __pfx___bpf_prog_run32+0x10/0x10
[ 82.382213][ T5228] ? __pfx_lock_acquire+0x10/0x10
[ 82.387309][ T5228] ? __pfx___cant_migrate+0x10/0x10
[ 82.392535][ T5228] ? migrate_disable+0x106/0x160
[ 82.397560][ T5228] bpf_prog_test_run_syscall+0x3ae/0x770
[ 82.403217][ T5228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 82.409472][ T5228] ? __fget_light+0x173/0x210
[ 82.414184][ T5228] ? __bpf_prog_get+0xa0/0x2f0
[ 82.419030][ T5228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 82.425217][ T5228] __sys_bpf+0x10d2/0x4a20
[ 82.429800][ T5228] ? __pfx_lock_acquire+0x10/0x10
[ 82.434848][ T5228] ? ptrace_stop.part.0+0x400/0x940
[ 82.440143][ T5228] ? __pfx___sys_bpf+0x10/0x10
[ 82.444931][ T5228] ? do_raw_spin_lock+0x12d/0x2c0
[ 82.450006][ T5228] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 82.455399][ T5228] ? cgroup_update_frozen+0x14d/0x6a0
[ 82.460860][ T5228] ? ptrace_stop.part.0+0x723/0x940
[ 82.466191][ T5228] ? _raw_spin_unlock_irq+0x23/0x50
[ 82.471531][ T5228] ? lockdep_hardirqs_on+0x7c/0x110
[ 82.476811][ T5228] __x64_sys_bpf+0x78/0xc0
[ 82.481326][ T5228] do_syscall_64+0xcd/0x250
[ 82.485846][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.491798][ T5228] RIP: 0033:0x7f7bfb50fd39
[ 82.496255][ T5228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 82.516034][ T5228] RSP: 002b:00007ffea8cad6a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 82.524519][ T5228] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7bfb50fd39
[ 82.533082][ T5228] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 82.541128][ T5228] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006
[ 82.549189][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 82.557216][ T5228] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[ 82.565242][ T5228]
[ 82.568370][ T5228] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 82.575660][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz-executor389 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[ 82.586756][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 82.596811][ T5228] Call Trace:
[ 82.600268][ T5228]
[ 82.603197][ T5228] dump_stack_lvl+0x3d/0x1f0
[ 82.607790][ T5228] panic+0x6f5/0x7a0
[ 82.611681][ T5228] ? __pfx_panic+0x10/0x10
[ 82.616086][ T5228] ? show_trace_log_lvl+0x363/0x500
[ 82.621292][ T5228] ? check_panic_on_warn+0x1f/0xb0
[ 82.626399][ T5228] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.632112][ T5228] check_panic_on_warn+0xab/0xb0
[ 82.637045][ T5228] __warn+0xf1/0x3c0
[ 82.641019][ T5228] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.646727][ T5228] report_bug+0x3c0/0x580
[ 82.651059][ T5228] handle_bug+0x3d/0x70
[ 82.655223][ T5228] exc_invalid_op+0x17/0x50
[ 82.659750][ T5228] asm_exc_invalid_op+0x1a/0x20
[ 82.664638][ T5228] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 82.670986][ T5228] Code: 41 5c 41 5d ff e0 cc 66 90 e8 c4 24 e5 ff e8 af 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 a9 24 e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4b 42 00 eb 93 e8 a4 4b 42 00 eb ae
[ 82.690890][ T5228] RSP: 0018:ffffc90003237a80 EFLAGS: 00010293
[ 82.697172][ T5228] RAX: 0000000000000000 RBX: ffff88802fee5800 RCX: ffffffff81a5567d
[ 82.705410][ T5228] RDX: ffff888021655a00 RSI: ffffffff81a55687 RDI: 0000000000000005
[ 82.713488][ T5228] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 82.721452][ T5228] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 82.729435][ T5228] R13: ffffc90003237b38 R14: 0000000000000000 R15: 0000000000000000
[ 82.737410][ T5228] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 82.743138][ T5228] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 82.748862][ T5228] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 82.755102][ T5228] ___bpf_prog_run+0x3e51/0xabd0
[ 82.760047][ T5228] __bpf_prog_run32+0xc1/0x100
[ 82.764817][ T5228] ? __pfx___bpf_prog_run32+0x10/0x10
[ 82.770193][ T5228] ? __pfx_lock_acquire+0x10/0x10
[ 82.775217][ T5228] ? __pfx___cant_migrate+0x10/0x10
[ 82.780420][ T5228] ? migrate_disable+0x106/0x160
[ 82.785369][ T5228] bpf_prog_test_run_syscall+0x3ae/0x770
[ 82.791006][ T5228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 82.797160][ T5228] ? __fget_light+0x173/0x210
[ 82.801849][ T5228] ? __bpf_prog_get+0xa0/0x2f0
[ 82.806615][ T5228] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 82.812769][ T5228] __sys_bpf+0x10d2/0x4a20
[ 82.817190][ T5228] ? __pfx_lock_acquire+0x10/0x10
[ 82.822217][ T5228] ? ptrace_stop.part.0+0x400/0x940
[ 82.827435][ T5228] ? __pfx___sys_bpf+0x10/0x10
[ 82.832201][ T5228] ? do_raw_spin_lock+0x12d/0x2c0
[ 82.837229][ T5228] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 82.842603][ T5228] ? cgroup_update_frozen+0x14d/0x6a0
[ 82.847981][ T5228] ? ptrace_stop.part.0+0x723/0x940
[ 82.853188][ T5228] ? _raw_spin_unlock_irq+0x23/0x50
[ 82.858404][ T5228] ? lockdep_hardirqs_on+0x7c/0x110
[ 82.863618][ T5228] __x64_sys_bpf+0x78/0xc0
[ 82.868047][ T5228] do_syscall_64+0xcd/0x250
[ 82.872554][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.878459][ T5228] RIP: 0033:0x7f7bfb50fd39
[ 82.882869][ T5228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 82.902482][ T5228] RSP: 002b:00007ffea8cad6a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 82.910928][ T5228] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7bfb50fd39
[ 82.918915][ T5228] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 82.926914][ T5228] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006
[ 82.934901][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 82.942896][ T5228] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[ 82.950872][ T5228]
[ 82.954284][ T5228] Kernel Offset: disabled
[ 82.958636][ T5228] Rebooting in 86400 seconds..