./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2490226342 <...> Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. execve("./syz-executor2490226342", ["./syz-executor2490226342"], 0x7ffefd8b64a0 /* 10 vars */) = 0 brk(NULL) = 0x555564cdb000 brk(0x555564cdbd00) = 0x555564cdbd00 arch_prctl(ARCH_SET_FS, 0x555564cdb380) = 0 set_tid_address(0x555564cdb650) = 5070 set_robust_list(0x555564cdb660, 24) = 0 rseq(0x555564cdbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2490226342", 4096) = 28 getrandom("\xf6\x8f\xf1\x5d\x04\x8c\x68\x22", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555564cdbd00 brk(0x555564cfcd00) = 0x555564cfcd00 brk(0x555564cfd000) = 0x555564cfd000 mprotect(0x7f6d3a463000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000040, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 close(3) = 0 socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000000, value=0x20000080, flags=BPF_ANY}, 32) = 0 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 75.104474][ T5070] ------------[ cut here ]------------ [ 75.111468][ T5070] WARNING: CPU: 1 PID: 5070 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 75.122123][ T5070] Modules linked in: [ 75.128498][ T5070] CPU: 1 PID: 5070 Comm: syz-executor249 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 75.139749][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 75.151602][ T5070] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 75.157603][ T5070] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 75.177517][ T5070] RSP: 0018:ffffc900042bf340 EFLAGS: 00010046 [ 75.183610][ T5070] RAX: 0000000000000000 RBX: 1ffff92000857e6c RCX: 0000000000000001 [ 75.191703][ T5070] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ff9a1 [ 75.199680][ T5070] RBP: ffffc900042bf3e8 R08: ffff88802a8c127b R09: 1ffff1100551824f [ 75.207657][ T5070] R10: dffffc0000000000 R11: ffffed1005518250 R12: dffffc0000000000 [ 75.215752][ T5070] R13: 0000000000000000 R14: ffffc900042bf380 R15: 0000000000000201 [ 75.223741][ T5070] FS: 0000555564cdb380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 75.232680][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.239290][ T5070] CR2: 0000000000000000 CR3: 000000007ae5e000 CR4: 00000000003506f0 [ 75.247732][ T5070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.256006][ T5070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.264041][ T5070] Call Trace: [ 75.267339][ T5070] [ 75.270277][ T5070] ? __warn+0x163/0x4b0 [ 75.274450][ T5070] ? __local_bh_enable_ip+0x1be/0x200 [ 75.279839][ T5070] ? report_bug+0x2b3/0x500 [ 75.284394][ T5070] ? __local_bh_enable_ip+0x1be/0x200 [ 75.289780][ T5070] ? handle_bug+0x3e/0x70 [ 75.294125][ T5070] ? exc_invalid_op+0x1a/0x50 [ 75.298815][ T5070] ? asm_exc_invalid_op+0x1a/0x20 [ 75.303870][ T5070] ? sock_map_unref+0x401/0x5e0 [ 75.308737][ T5070] ? __local_bh_enable_ip+0x1be/0x200 [ 75.314123][ T5070] ? sock_map_unref+0x401/0x5e0 [ 75.318984][ T5070] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 75.324710][ T5070] ? do_raw_spin_unlock+0x13c/0x8b0 [ 75.329928][ T5070] ? sock_map_unref+0x3ac/0x5e0 [ 75.334794][ T5070] sock_map_unref+0x401/0x5e0 [ 75.339493][ T5070] sock_map_delete_elem+0xc0/0x140 [ 75.344692][ T5070] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 75.350189][ T5070] bpf_trace_run2+0x204/0x420 [ 75.354881][ T5070] ? bpf_trace_run2+0x114/0x420 [ 75.359735][ T5070] ? __pfx_bpf_trace_run2+0x10/0x10 [ 75.365549][ T5070] ? trace_tlb_flush+0x59/0x120 [ 75.370977][ T5070] trace_tlb_flush+0xfa/0x120 [ 75.375729][ T5070] switch_mm_irqs_off+0x7cb/0xae0 [ 75.380918][ T5070] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 75.389134][ T5070] ? text_poke_memcpy+0x25/0x30 [ 75.395073][ T5070] ? __asan_memcpy+0x40/0x70 [ 75.401005][ T5070] __text_poke+0x8f7/0xd30 [ 75.405610][ T5070] ? trace_tlb_flush+0x6/0x120 [ 75.411661][ T5070] ? __pfx_text_poke_memcpy+0x10/0x10 [ 75.417086][ T5070] ? __pfx___text_poke+0x10/0x10 [ 75.422158][ T5070] ? __pfx___might_resched+0x10/0x10 [ 75.427533][ T5070] ? __mutex_trylock_common+0x183/0x2e0 [ 75.433314][ T5070] ? __pfx___might_resched+0x10/0x10 [ 75.438661][ T5070] ? trace_tlb_flush+0x6/0x120 [ 75.444068][ T5070] text_poke_bp_batch+0x265/0xb30 [ 75.450031][ T5070] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 75.455902][ T5070] ? __pfx___mutex_lock+0x10/0x10 [ 75.461348][ T5070] ? arch_jump_label_transform_queue+0x9b/0x100 [ 75.468403][ T5070] text_poke_finish+0x30/0x50 [ 75.473217][ T5070] arch_jump_label_transform_apply+0x1c/0x30 [ 75.479342][ T5070] static_key_enable_cpuslocked+0x136/0x260 [ 75.485280][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 75.491130][ T5070] static_key_enable+0x1a/0x20 [ 75.495926][ T5070] tracepoint_add_func+0x953/0x9e0 [ 75.501207][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 75.507076][ T5070] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 75.514785][ T5070] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 75.522374][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 75.528204][ T5070] ? anon_inode_getfile+0xff/0x180 [ 75.533332][ T5070] ? bpf_probe_register+0x117/0x1d0 [ 75.538541][ T5070] bpf_raw_tp_link_attach+0x470/0x6d0 [ 75.543943][ T5070] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 75.549872][ T5070] bpf_raw_tracepoint_open+0x19d/0x210 [ 75.555353][ T5070] __sys_bpf+0x3c0/0x810 [ 75.559605][ T5070] ? __pfx___sys_bpf+0x10/0x10 [ 75.564412][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.570763][ T5070] ? do_syscall_64+0x10a/0x240 [ 75.575536][ T5070] __x64_sys_bpf+0x7c/0x90 [ 75.579974][ T5070] do_syscall_64+0xfb/0x240 [ 75.584491][ T5070] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 75.590394][ T5070] RIP: 0033:0x7f6d3a3ef9e9 [ 75.594809][ T5070] Code: Unable to access opcode bytes at 0x7f6d3a3ef9bf. [ 75.601922][ T5070] RSP: 002b:00007ffd8f5c7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.610338][ T5070] RAX: ffffffffffffffda RBX: 00007ffd8f5c7718 RCX: 00007f6d3a3ef9e9 [ 75.618332][ T5070] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 75.626507][ T5070] RBP: 00007f6d3a463610 R08: 00007ffd8f5c7718 R09: 00007ffd8f5c7718 [ 75.634851][ T5070] R10: 00007ffd8f5c7718 R11: 0000000000000246 R12: 0000000000000001 [ 75.645303][ T5070] R13: 00007ffd8f5c7708 R14: 0000000000000001 R15: 0000000000000001 [ 75.654539][ T5070] [ 75.657598][ T5070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.664919][ T5070] CPU: 1 PID: 5070 Comm: syz-executor249 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 75.674998][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 75.685077][ T5070] Call Trace: [ 75.688363][ T5070] [ 75.691304][ T5070] dump_stack_lvl+0x1e7/0x2e0 [ 75.696003][ T5070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.701212][ T5070] ? __pfx__printk+0x10/0x10 [ 75.705818][ T5070] ? vscnprintf+0x5d/0x90 [ 75.710164][ T5070] panic+0x349/0x860 [ 75.714072][ T5070] ? __warn+0x172/0x4b0 [ 75.718241][ T5070] ? __pfx_panic+0x10/0x10 [ 75.722775][ T5070] __warn+0x31e/0x4b0 [ 75.726790][ T5070] ? __local_bh_enable_ip+0x1be/0x200 [ 75.732177][ T5070] report_bug+0x2b3/0x500 [ 75.736531][ T5070] ? __local_bh_enable_ip+0x1be/0x200 [ 75.741916][ T5070] handle_bug+0x3e/0x70 [ 75.746083][ T5070] exc_invalid_op+0x1a/0x50 [ 75.750602][ T5070] asm_exc_invalid_op+0x1a/0x20 [ 75.755462][ T5070] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 75.761448][ T5070] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 75.781081][ T5070] RSP: 0018:ffffc900042bf340 EFLAGS: 00010046 [ 75.787156][ T5070] RAX: 0000000000000000 RBX: 1ffff92000857e6c RCX: 0000000000000001 [ 75.795154][ T5070] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ff9a1 [ 75.803147][ T5070] RBP: ffffc900042bf3e8 R08: ffff88802a8c127b R09: 1ffff1100551824f [ 75.811151][ T5070] R10: dffffc0000000000 R11: ffffed1005518250 R12: dffffc0000000000 [ 75.819139][ T5070] R13: 0000000000000000 R14: ffffc900042bf380 R15: 0000000000000201 [ 75.827594][ T5070] ? sock_map_unref+0x401/0x5e0 [ 75.832463][ T5070] ? sock_map_unref+0x401/0x5e0 [ 75.837339][ T5070] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 75.843079][ T5070] ? do_raw_spin_unlock+0x13c/0x8b0 [ 75.848310][ T5070] ? sock_map_unref+0x3ac/0x5e0 [ 75.853439][ T5070] sock_map_unref+0x401/0x5e0 [ 75.858243][ T5070] sock_map_delete_elem+0xc0/0x140 [ 75.863500][ T5070] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 75.869083][ T5070] bpf_trace_run2+0x204/0x420 [ 75.874038][ T5070] ? bpf_trace_run2+0x114/0x420 [ 75.880543][ T5070] ? __pfx_bpf_trace_run2+0x10/0x10 [ 75.886018][ T5070] ? trace_tlb_flush+0x59/0x120 [ 75.890937][ T5070] trace_tlb_flush+0xfa/0x120 [ 75.895694][ T5070] switch_mm_irqs_off+0x7cb/0xae0 [ 75.900866][ T5070] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 75.906450][ T5070] ? text_poke_memcpy+0x25/0x30 [ 75.911348][ T5070] ? __asan_memcpy+0x40/0x70 [ 75.915966][ T5070] __text_poke+0x8f7/0xd30 [ 75.920409][ T5070] ? trace_tlb_flush+0x6/0x120 [ 75.925218][ T5070] ? __pfx_text_poke_memcpy+0x10/0x10 [ 75.931045][ T5070] ? __pfx___text_poke+0x10/0x10 [ 75.936026][ T5070] ? __pfx___might_resched+0x10/0x10 [ 75.941321][ T5070] ? __mutex_trylock_common+0x183/0x2e0 [ 75.946882][ T5070] ? __pfx___might_resched+0x10/0x10 [ 75.952192][ T5070] ? trace_tlb_flush+0x6/0x120 [ 75.956980][ T5070] text_poke_bp_batch+0x265/0xb30 [ 75.962034][ T5070] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 75.967608][ T5070] ? __pfx___mutex_lock+0x10/0x10 [ 75.972662][ T5070] ? arch_jump_label_transform_queue+0x9b/0x100 [ 75.978915][ T5070] text_poke_finish+0x30/0x50 [ 75.983718][ T5070] arch_jump_label_transform_apply+0x1c/0x30 [ 75.989721][ T5070] static_key_enable_cpuslocked+0x136/0x260 [ 75.995633][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.001442][ T5070] static_key_enable+0x1a/0x20 [ 76.006207][ T5070] tracepoint_add_func+0x953/0x9e0 [ 76.011331][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.017147][ T5070] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 76.024111][ T5070] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 76.031576][ T5070] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.037408][ T5070] ? anon_inode_getfile+0xff/0x180 [ 76.042538][ T5070] ? bpf_probe_register+0x117/0x1d0 [ 76.047762][ T5070] bpf_raw_tp_link_attach+0x470/0x6d0 [ 76.053284][ T5070] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 76.059221][ T5070] bpf_raw_tracepoint_open+0x19d/0x210 [ 76.064724][ T5070] __sys_bpf+0x3c0/0x810 [ 76.068973][ T5070] ? __pfx___sys_bpf+0x10/0x10 [ 76.073846][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.080295][ T5070] ? do_syscall_64+0x10a/0x240 [ 76.085072][ T5070] __x64_sys_bpf+0x7c/0x90 [ 76.089501][ T5070] do_syscall_64+0xfb/0x240 [ 76.094125][ T5070] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 76.100059][ T5070] RIP: 0033:0x7f6d3a3ef9e9 [ 76.104498][ T5070] Code: Unable to access opcode bytes at 0x7f6d3a3ef9bf. [ 76.111533][ T5070] RSP: 002b:00007ffd8f5c7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.120223][ T5070] RAX: ffffffffffffffda RBX: 00007ffd8f5c7718 RCX: 00007f6d3a3ef9e9 [ 76.128884][ T5070] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 76.139322][ T5070] RBP: 00007f6d3a463610 R08: 00007ffd8f5c7718 R09: 00007ffd8f5c7718 [ 76.151401][ T5070] R10: 00007ffd8f5c7718 R11: 0000000000000246 R12: 0000000000000001 [ 76.160196][ T5070] R13: 00007ffd8f5c7708 R14: 0000000000000001 R15: 0000000000000001 [ 76.170213][ T5070] [ 76.173825][ T5070] Kernel Offset: disabled [ 76.178754][ T5070] Rebooting in 86400 seconds..