./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2138976060
<...>
Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
execve("./syz-executor2138976060", ["./syz-executor2138976060"], 0x7ffc35ce49f0 /* 10 vars */) = 0
brk(NULL) = 0x555566e8d000
brk(0x555566e8dd00) = 0x555566e8dd00
arch_prctl(ARCH_SET_FS, 0x555566e8d380) = 0
set_tid_address(0x555566e8d650) = 5220
set_robust_list(0x555566e8d660, 24) = 0
rseq(0x555566e8dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2138976060", 4096) = 28
getrandom("\x8b\xa7\xa7\x4f\x3d\xed\x3e\xe7", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555566e8dd00
brk(0x555566eaed00) = 0x555566eaed00
brk(0x555566eaf000) = 0x555566eaf000
mprotect(0x7fae06cd3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566e8d650) = 5221
./strace-static-x86_64: Process 5221 attached
[pid 5221] set_robust_list(0x555566e8d660, 24) = 0
[pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5221] setpgid(0, 0) = 0
[pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5221] write(3, "1000", 4) = 4
[pid 5221] close(3) = 0
[ 78.931622][ T29] audit: type=1400 audit(1722772898.798:88): avc: denied { execmem } for pid=5220 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid 5221] write(1, "executing program\n", 18executing program
) = 18
[pid 5221] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_ARRAY, key_size=4, value_size=4095, max_entries=7, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[pid 5221] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address)
[ 79.008560][ T29] audit: type=1400 audit(1722772898.878:89): avc: denied { map_create } for pid=5221 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 79.028043][ T29] audit: type=1400 audit(1722772898.878:90): avc: denied { perfmon } for pid=5221 comm="syz-executor213" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[pid 5221] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SYSCALL, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_ANY_ALIGNMENT|BPF_F_TEST_STATE_FREQ|BPF_F_SLEEPABLE, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4
[ 79.050436][ T29] audit: type=1400 audit(1722772898.888:91): avc: denied { map_read map_write } for pid=5221 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 79.071225][ T29] audit: type=1400 audit(1722772898.898:92): avc: denied { prog_load } for pid=5221 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 79.082491][ T5221] ------------[ cut here ]------------
[ 79.091324][ T29] audit: type=1400 audit(1722772898.898:93): avc: denied { bpf } for pid=5221 comm="syz-executor213" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 79.096168][ T5221] WARNING: CPU: 0 PID: 5221 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.117944][ T29] audit: type=1400 audit(1722772898.948:94): avc: denied { prog_run } for pid=5221 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 79.127339][ T5221] Modules linked in:
[ 79.150347][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor213 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[ 79.161496][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 79.171650][ T5221] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.177980][ T5221] Code: 41 5c 41 5d ff e0 cc 66 90 e8 c4 24 e5 ff e8 af 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 a9 24 e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4b 42 00 eb 93 e8 a4 4b 42 00 eb ae
[ 79.197631][ T5221] RSP: 0018:ffffc90003207a80 EFLAGS: 00010293
[ 79.203783][ T5221] RAX: 0000000000000000 RBX: ffff8880222f8800 RCX: ffffffff81a5567d
[ 79.211811][ T5221] RDX: ffff88802b9d1e00 RSI: ffffffff81a55687 RDI: 0000000000000005
[ 79.219835][ T5221] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 79.227828][ T5221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 79.235860][ T5221] R13: ffffc90003207b38 R14: 0000000000000000 R15: 0000000000000000
[ 79.243881][ T5221] FS: 0000555566e8d380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 79.252857][ T5221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.259482][ T5221] CR2: 000055913211a0c8 CR3: 0000000029de8000 CR4: 00000000003506f0
[ 79.267448][ T5221] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.275460][ T5221] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.283472][ T5221] Call Trace:
[ 79.286740][ T5221]
[ 79.289705][ T5221] ? show_regs+0x8c/0xa0
[ 79.293979][ T5221] ? __warn+0xe5/0x3c0
[ 79.298036][ T5221] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.303792][ T5221] ? report_bug+0x3c0/0x580
[ 79.308320][ T5221] ? handle_bug+0x3d/0x70
[ 79.312695][ T5221] ? exc_invalid_op+0x17/0x50
[ 79.317389][ T5221] ? asm_exc_invalid_op+0x1a/0x20
[ 79.322451][ T5221] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 79.328182][ T5221] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 79.333949][ T5221] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.339732][ T5221] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 79.345993][ T5221] ___bpf_prog_run+0x3e51/0xabd0
[ 79.350980][ T5221] __bpf_prog_run32+0xc1/0x100
[ 79.355774][ T5221] ? __pfx___bpf_prog_run32+0x10/0x10
[ 79.361214][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 79.366246][ T5221] ? __pfx___cant_migrate+0x10/0x10
[ 79.371479][ T5221] ? migrate_disable+0x106/0x160
[ 79.376434][ T5221] bpf_prog_test_run_syscall+0x3ae/0x770
[ 79.382103][ T5221] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 79.388270][ T5221] ? __fget_light+0x173/0x210
[ 79.392981][ T5221] ? __bpf_prog_get+0xa0/0x2f0
[ 79.397757][ T5221] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 79.404320][ T5221] __sys_bpf+0x10d2/0x4a20
[ 79.408756][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 79.413820][ T5221] ? ptrace_stop.part.0+0x400/0x940
[ 79.419038][ T5221] ? __pfx___sys_bpf+0x10/0x10
[ 79.423839][ T5221] ? do_raw_spin_lock+0x12d/0x2c0
[ 79.428880][ T5221] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 79.434284][ T5221] ? cgroup_update_frozen+0x14d/0x6a0
[ 79.439692][ T5221] ? ptrace_stop.part.0+0x723/0x940
[ 79.444887][ T5221] ? _raw_spin_unlock_irq+0x23/0x50
[ 79.450110][ T5221] ? lockdep_hardirqs_on+0x7c/0x110
[ 79.455320][ T5221] __x64_sys_bpf+0x78/0xc0
[ 79.459771][ T5221] do_syscall_64+0xcd/0x250
[ 79.464287][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.470224][ T5221] RIP: 0033:0x7fae06c5fd39
[ 79.474659][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.494312][ T5221] RSP: 002b:00007ffcad2b6ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 79.502957][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae06c5fd39
[ 79.510987][ T5221] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 79.518977][ T5221] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006
[ 79.526995][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.535004][ T5221] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[ 79.543006][ T5221]
[ 79.546028][ T5221] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.553289][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor213 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[ 79.564377][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 79.574415][ T5221] Call Trace:
[ 79.577675][ T5221]
[ 79.580589][ T5221] dump_stack_lvl+0x3d/0x1f0
[ 79.585175][ T5221] panic+0x6f5/0x7a0
[ 79.589055][ T5221] ? __pfx_panic+0x10/0x10
[ 79.593455][ T5221] ? show_trace_log_lvl+0x363/0x500
[ 79.598647][ T5221] ? check_panic_on_warn+0x1f/0xb0
[ 79.603833][ T5221] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.609545][ T5221] check_panic_on_warn+0xab/0xb0
[ 79.614470][ T5221] __warn+0xf1/0x3c0
[ 79.618357][ T5221] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.624064][ T5221] report_bug+0x3c0/0x580
[ 79.628381][ T5221] handle_bug+0x3d/0x70
[ 79.632526][ T5221] exc_invalid_op+0x17/0x50
[ 79.637017][ T5221] asm_exc_invalid_op+0x1a/0x20
[ 79.641861][ T5221] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 79.648177][ T5221] Code: 41 5c 41 5d ff e0 cc 66 90 e8 c4 24 e5 ff e8 af 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 a9 24 e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4b 42 00 eb 93 e8 a4 4b 42 00 eb ae
[ 79.667773][ T5221] RSP: 0018:ffffc90003207a80 EFLAGS: 00010293
[ 79.673839][ T5221] RAX: 0000000000000000 RBX: ffff8880222f8800 RCX: ffffffff81a5567d
[ 79.681813][ T5221] RDX: ffff88802b9d1e00 RSI: ffffffff81a55687 RDI: 0000000000000005
[ 79.689778][ T5221] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 79.697742][ T5221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 79.705966][ T5221] R13: ffffc90003207b38 R14: 0000000000000000 R15: 0000000000000000
[ 79.713943][ T5221] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 79.719669][ T5221] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 79.725391][ T5221] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 79.731628][ T5221] ___bpf_prog_run+0x3e51/0xabd0
[ 79.736573][ T5221] __bpf_prog_run32+0xc1/0x100
[ 79.741344][ T5221] ? __pfx___bpf_prog_run32+0x10/0x10
[ 79.746733][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 79.751760][ T5221] ? __pfx___cant_migrate+0x10/0x10
[ 79.756962][ T5221] ? migrate_disable+0x106/0x160
[ 79.761896][ T5221] bpf_prog_test_run_syscall+0x3ae/0x770
[ 79.767528][ T5221] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 79.773688][ T5221] ? __fget_light+0x173/0x210
[ 79.778373][ T5221] ? __bpf_prog_get+0xa0/0x2f0
[ 79.783138][ T5221] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 79.789293][ T5221] __sys_bpf+0x10d2/0x4a20
[ 79.793717][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 79.798740][ T5221] ? ptrace_stop.part.0+0x400/0x940
[ 79.803949][ T5221] ? __pfx___sys_bpf+0x10/0x10
[ 79.808716][ T5221] ? do_raw_spin_lock+0x12d/0x2c0
[ 79.813742][ T5221] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 79.819116][ T5221] ? cgroup_update_frozen+0x14d/0x6a0
[ 79.824487][ T5221] ? ptrace_stop.part.0+0x723/0x940
[ 79.829696][ T5221] ? _raw_spin_unlock_irq+0x23/0x50
[ 79.834893][ T5221] ? lockdep_hardirqs_on+0x7c/0x110
[ 79.840088][ T5221] __x64_sys_bpf+0x78/0xc0
[ 79.844509][ T5221] do_syscall_64+0xcd/0x250
[ 79.849010][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.854907][ T5221] RIP: 0033:0x7fae06c5fd39
[ 79.859315][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.878921][ T5221] RSP: 002b:00007ffcad2b6ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 79.887333][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae06c5fd39
[ 79.895296][ T5221] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 79.903274][ T5221] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006
[ 79.911244][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.919215][ T5221] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[ 79.927192][ T5221]
[ 79.930407][ T5221] Kernel Offset: disabled
[ 79.934748][ T5221] Rebooting in 86400 seconds..