./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1675645410
<...>
Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts.
execve("./syz-executor1675645410", ["./syz-executor1675645410"], 0x7ffd2bc7fc40 /* 10 vars */) = 0
brk(NULL) = 0x555555f0f000
brk(0x555555f0fc40) = 0x555555f0fc40
arch_prctl(ARCH_SET_FS, 0x555555f0f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1675645410", 4096) = 28
brk(0x555555f30c40) = 0x555555f30c40
brk(0x555555f31000) = 0x555555f31000
mprotect(0x7ff79fba4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [3, 4]) = 0
setsockopt(4, SOL_SOCKET, SO_ATTACH_FILTER, {len=2, filter=0x20000080}, 16) = 0
syzkaller login: [ 49.892820][ T3607] ------------[ cut here ]------------
[ 49.898573][ T3607] WARNING: CPU: 1 PID: 3607 at include/linux/skbuff.h:2785 bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 49.910483][ T3607] Modules linked in:
[ 49.914401][ T3607] CPU: 1 PID: 3607 Comm: syz-executor167 Not tainted 5.19.0-rc4-syzkaller-00865-g4874fb9484be #0
[ 49.924945][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 49.935098][ T3607] RIP: 0010:bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 49.942536][ T3607] Code: ff ff 45 31 f6 e9 5a ff ff ff e8 aa 27 40 00 e9 3b ff ff ff e8 90 27 40 00 e9 df fe ff ff e8 86 27 40 00 eb 9e e8 2f 2c f3 ff <0f> 0b eb b1 e8 96 27 40 00 e9 79 fe ff ff 90 41 57 41 56 41 55 41
[ 49.962188][ T3607] RSP: 0018:ffffc90002f8f668 EFLAGS: 00010293
[ 49.968295][ T3607] RAX: 0000000000000000 RBX: ffffffffffeff00c RCX: 0000000000000000
[ 49.976279][ T3607] RDX: ffff888022748000 RSI: ffffffff81873f21 RDI: 0000000000000003
[ 49.984298][ T3607] RBP: ffff888073066000 R08: 0000000000000003 R09: 000000000000ffff
[ 49.992337][ T3607] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000004
[ 50.000351][ T3607] R13: ffff88807d4ed800 R14: 000000000000ffff R15: dffffc0000000000
[ 50.008369][ T3607] FS: 0000555555f0f300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.017567][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.024205][ T3607] CR2: 00007ffcb12173e0 CR3: 0000000077210000 CR4: 00000000003506e0
[ 50.032231][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.040297][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.048345][ T3607] Call Trace:
[ 50.051647][ T3607]
[ 50.054605][ T3607] bpf_skb_load_helper_32+0x191/0x220
[ 50.060064][ T3607] ? bpf_xdp_store_bytes+0xa0/0xa0
[ 50.065202][ T3607] ? skb_set_owner_w+0x269/0x420
[ 50.070204][ T3607] ? sk_filter_trim_cap+0x27c/0x9a0
[ 50.075427][ T3607] ? sock_wmalloc+0x120/0x120
[ 50.080157][ T3607] ? bpf_xdp_redirect+0x160/0x160
[ 50.085196][ T3607] ? do_raw_spin_lock+0x120/0x2a0
[ 50.090266][ T3607] ? skb_copy_datagram_from_iter+0x474/0x6c0
[ 50.096270][ T3607] ? unix_dgram_sendmsg+0xa46/0x1b60
[ 50.101618][ T3607] ? unix_stream_sendpage+0xcc0/0xcc0
[ 50.107014][ T3607] ? unix_seqpacket_sendmsg+0x111/0x1a0
[ 50.112842][ T3607] ? unix_dgram_sendmsg+0x1b60/0x1b60
[ 50.118273][ T3607] ? sock_sendmsg+0xcf/0x120
[ 50.122902][ T3607] ? ____sys_sendmsg+0x334/0x810
[ 50.127841][ T3607] ? kernel_sendmsg+0x50/0x50
[ 50.132566][ T3607] ? do_recvmmsg+0x6d0/0x6d0
[ 50.137172][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.143218][ T3607] ? ___sys_sendmsg+0xf3/0x170
[ 50.148105][ T3607] ? sendmsg_copy_msghdr+0x160/0x160
[ 50.153521][ T3607] ? __lock_acquire+0x163e/0x5660
[ 50.158664][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.164688][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.170773][ T3607] ? __switch_to+0x5cc/0x1060
[ 50.175498][ T3607] ? __fget_light+0x20a/0x270
[ 50.180243][ T3607] ? __sys_sendmmsg+0x195/0x470
[ 50.185113][ T3607] ? __ia32_sys_sendmsg+0x220/0x220
[ 50.190368][ T3607] ? _raw_spin_lock_irq+0x41/0x50
[ 50.195430][ T3607] ? find_held_lock+0x2d/0x110
[ 50.200360][ T3607] ? ptrace_notify+0xfa/0x140
[ 50.205062][ T3607] ? lock_downgrade+0x6e0/0x6e0
[ 50.209963][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.215195][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.220461][ T3607] ? lockdep_hardirqs_on+0x79/0x100
[ 50.225683][ T3607] ? __x64_sys_sendmmsg+0x99/0x100
[ 50.230851][ T3607] ? do_syscall_64+0x35/0xb0
[ 50.235461][ T3607] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.241593][ T3607]
[ 50.244621][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 50.251196][ T3607] CPU: 1 PID: 3607 Comm: syz-executor167 Not tainted 5.19.0-rc4-syzkaller-00865-g4874fb9484be #0
[ 50.261684][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.271746][ T3607] Call Trace:
[ 50.275016][ T3607]
[ 50.277937][ T3607] dump_stack_lvl+0xcd/0x134
[ 50.282545][ T3607] panic+0x2d7/0x636
[ 50.286456][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.292477][ T3607] ? __warn.cold+0x1d1/0x2c5
[ 50.297087][ T3607] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.303871][ T3607] __warn.cold+0x1e2/0x2c5
[ 50.308296][ T3607] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.315074][ T3607] report_bug+0x1bc/0x210
[ 50.319415][ T3607] handle_bug+0x3c/0x60
[ 50.323588][ T3607] exc_invalid_op+0x14/0x40
[ 50.328097][ T3607] asm_exc_invalid_op+0x1b/0x20
[ 50.332958][ T3607] RIP: 0010:bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.340349][ T3607] Code: ff ff 45 31 f6 e9 5a ff ff ff e8 aa 27 40 00 e9 3b ff ff ff e8 90 27 40 00 e9 df fe ff ff e8 86 27 40 00 eb 9e e8 2f 2c f3 ff <0f> 0b eb b1 e8 96 27 40 00 e9 79 fe ff ff 90 41 57 41 56 41 55 41
[ 50.359965][ T3607] RSP: 0018:ffffc90002f8f668 EFLAGS: 00010293
[ 50.366078][ T3607] RAX: 0000000000000000 RBX: ffffffffffeff00c RCX: 0000000000000000
[ 50.374053][ T3607] RDX: ffff888022748000 RSI: ffffffff81873f21 RDI: 0000000000000003
[ 50.382032][ T3607] RBP: ffff888073066000 R08: 0000000000000003 R09: 000000000000ffff
[ 50.390013][ T3607] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000004
[ 50.397990][ T3607] R13: ffff88807d4ed800 R14: 000000000000ffff R15: dffffc0000000000
[ 50.406002][ T3607] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.412797][ T3607] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.419577][ T3607] bpf_skb_load_helper_32+0x191/0x220
[ 50.425137][ T3607] ? bpf_xdp_store_bytes+0xa0/0xa0
[ 50.430352][ T3607] ? skb_set_owner_w+0x269/0x420
[ 50.435322][ T3607] ? sk_filter_trim_cap+0x27c/0x9a0
[ 50.440533][ T3607] ? sock_wmalloc+0x120/0x120
[ 50.445223][ T3607] ? bpf_xdp_redirect+0x160/0x160
[ 50.450255][ T3607] ? do_raw_spin_lock+0x120/0x2a0
[ 50.455289][ T3607] ? skb_copy_datagram_from_iter+0x474/0x6c0
[ 50.461316][ T3607] ? unix_dgram_sendmsg+0xa46/0x1b60
[ 50.466647][ T3607] ? unix_stream_sendpage+0xcc0/0xcc0
[ 50.472050][ T3607] ? unix_seqpacket_sendmsg+0x111/0x1a0
[ 50.477603][ T3607] ? unix_dgram_sendmsg+0x1b60/0x1b60
[ 50.482990][ T3607] ? sock_sendmsg+0xcf/0x120
[ 50.487596][ T3607] ? ____sys_sendmsg+0x334/0x810
[ 50.492548][ T3607] ? kernel_sendmsg+0x50/0x50
[ 50.497240][ T3607] ? do_recvmmsg+0x6d0/0x6d0
[ 50.501838][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.507848][ T3607] ? ___sys_sendmsg+0xf3/0x170
[ 50.512625][ T3607] ? sendmsg_copy_msghdr+0x160/0x160
[ 50.517921][ T3607] ? __lock_acquire+0x163e/0x5660
[ 50.523053][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.529044][ T3607] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.535068][ T3607] ? __switch_to+0x5cc/0x1060
[ 50.539789][ T3607] ? __fget_light+0x20a/0x270
[ 50.544502][ T3607] ? __sys_sendmmsg+0x195/0x470
[ 50.549379][ T3607] ? __ia32_sys_sendmsg+0x220/0x220
[ 50.554602][ T3607] ? _raw_spin_lock_irq+0x41/0x50
[ 50.559648][ T3607] ? find_held_lock+0x2d/0x110
[ 50.564428][ T3607] ? ptrace_notify+0xfa/0x140
[ 50.569110][ T3607] ? lock_downgrade+0x6e0/0x6e0
[ 50.574029][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.579238][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.584445][ T3607] ? lockdep_hardirqs_on+0x79/0x100
[ 50.589658][ T3607] ? __x64_sys_sendmmsg+0x99/0x100
[ 50.594776][ T3607] ? do_syscall_64+0x35/0xb0
[ 50.599374][ T3607] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.605469][ T3607]
[ 50.608685][ T3607] Kernel Offset: disabled
[ 50.613077][ T3607] Rebooting in 86400 seconds..