./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3835559958 <...> Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. execve("./syz-executor3835559958", ["./syz-executor3835559958"], 0x7fffc64def30 /* 10 vars */) = 0 brk(NULL) = 0x5555730c0000 brk(0x5555730c0d00) = 0x5555730c0d00 arch_prctl(ARCH_SET_FS, 0x5555730c0380) = 0 set_tid_address(0x5555730c0650) = 5071 set_robust_list(0x5555730c0660, 24) = 0 rseq(0x5555730c0ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3835559958", 4096) = 28 getrandom("\xce\xab\xfc\xbd\x66\x7c\x7f\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555730c0d00 brk(0x5555730e1d00) = 0x5555730e1d00 brk(0x5555730e2000) = 0x5555730e2000 mprotect(0x7fb601b9d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000040, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 close(3) = 0 socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000000, value=0x20000080, flags=BPF_ANY}, 32) = 0 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 77.797113][ T5071] ------------[ cut here ]------------ [ 77.803029][ T5071] WARNING: CPU: 1 PID: 5071 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 77.813127][ T5071] Modules linked in: [ 77.817228][ T5071] CPU: 1 PID: 5071 Comm: syz-executor383 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 77.827599][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 77.838302][ T5071] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 77.844399][ T5071] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 77.864386][ T5071] RSP: 0018:ffffc90004207340 EFLAGS: 00010046 [ 77.870485][ T5071] RAX: 0000000000000000 RBX: 1ffff92000840e6c RCX: 0000000000000001 [ 77.878566][ T5071] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ff9a1 [ 77.886580][ T5071] RBP: ffffc900042073e8 R08: ffff88801cedd27b R09: 1ffff110039dba4f [ 77.895999][ T5071] R10: dffffc0000000000 R11: ffffed10039dba50 R12: dffffc0000000000 [ 77.904394][ T5071] R13: 0000000000000000 R14: ffffc90004207380 R15: 0000000000000201 [ 77.913274][ T5071] FS: 00005555730c0380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 77.922577][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.929255][ T5071] CR2: 0000000000000000 CR3: 000000002091c000 CR4: 00000000003506f0 [ 77.937525][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.945631][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.953736][ T5071] Call Trace: [ 77.957197][ T5071] [ 77.960162][ T5071] ? __warn+0x163/0x4b0 [ 77.964366][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 77.969767][ T5071] ? report_bug+0x2b3/0x500 [ 77.974336][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 77.979852][ T5071] ? handle_bug+0x3e/0x70 [ 77.984228][ T5071] ? exc_invalid_op+0x1a/0x50 [ 77.988973][ T5071] ? asm_exc_invalid_op+0x1a/0x20 [ 77.994059][ T5071] ? sock_map_unref+0x401/0x5e0 [ 77.999211][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 78.004737][ T5071] ? sock_map_unref+0x401/0x5e0 [ 78.010515][ T5071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 78.016376][ T5071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.021608][ T5071] ? sock_map_unref+0x3ac/0x5e0 [ 78.026517][ T5071] sock_map_unref+0x401/0x5e0 [ 78.031605][ T5071] sock_map_delete_elem+0xc0/0x140 [ 78.037518][ T5071] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 78.043375][ T5071] bpf_trace_run2+0x204/0x420 [ 78.048220][ T5071] ? bpf_trace_run2+0x114/0x420 [ 78.053317][ T5071] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.058685][ T5071] ? trace_tlb_flush+0x59/0x120 [ 78.063689][ T5071] trace_tlb_flush+0xfa/0x120 [ 78.068549][ T5071] switch_mm_irqs_off+0x7cb/0xae0 [ 78.073811][ T5071] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 78.079449][ T5071] ? text_poke_memcpy+0x25/0x30 [ 78.084693][ T5071] ? __asan_memcpy+0x40/0x70 [ 78.089702][ T5071] __text_poke+0x8f7/0xd30 [ 78.094373][ T5071] ? trace_tlb_flush+0x6/0x120 [ 78.099415][ T5071] ? __pfx_text_poke_memcpy+0x10/0x10 [ 78.105107][ T5071] ? __pfx___text_poke+0x10/0x10 [ 78.110331][ T5071] ? __pfx___might_resched+0x10/0x10 [ 78.115706][ T5071] ? __mutex_trylock_common+0x183/0x2e0 [ 78.121283][ T5071] ? __pfx___might_resched+0x10/0x10 [ 78.126595][ T5071] ? trace_tlb_flush+0x6/0x120 [ 78.131640][ T5071] text_poke_bp_batch+0x265/0xb30 [ 78.136698][ T5071] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 78.142258][ T5071] ? __pfx___mutex_lock+0x10/0x10 [ 78.147771][ T5071] ? arch_jump_label_transform_queue+0x9b/0x100 [ 78.154058][ T5071] text_poke_finish+0x30/0x50 [ 78.158853][ T5071] arch_jump_label_transform_apply+0x1c/0x30 [ 78.164850][ T5071] static_key_enable_cpuslocked+0x136/0x260 [ 78.170877][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.177084][ T5071] static_key_enable+0x1a/0x20 [ 78.181890][ T5071] tracepoint_add_func+0x953/0x9e0 [ 78.187168][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.193020][ T5071] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 78.199997][ T5071] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 78.207499][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.213442][ T5071] ? anon_inode_getfile+0xff/0x180 [ 78.218618][ T5071] ? bpf_probe_register+0x117/0x1d0 [ 78.224295][ T5071] bpf_raw_tp_link_attach+0x470/0x6d0 [ 78.229701][ T5071] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 78.235662][ T5071] bpf_raw_tracepoint_open+0x19d/0x210 [ 78.241300][ T5071] __sys_bpf+0x3c0/0x810 [ 78.245571][ T5071] ? __pfx___sys_bpf+0x10/0x10 [ 78.250459][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.256805][ T5071] ? do_syscall_64+0x10a/0x240 [ 78.261592][ T5071] __x64_sys_bpf+0x7c/0x90 [ 78.266132][ T5071] do_syscall_64+0xfb/0x240 [ 78.270859][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 78.276802][ T5071] RIP: 0033:0x7fb601b299e9 [ 78.281587][ T5071] Code: Unable to access opcode bytes at 0x7fb601b299bf. [ 78.288724][ T5071] RSP: 002b:00007ffdf7533478 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.297151][ T5071] RAX: ffffffffffffffda RBX: 00007ffdf7533648 RCX: 00007fb601b299e9 [ 78.305137][ T5071] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 78.313191][ T5071] RBP: 00007fb601b9d610 R08: 00007ffdf7533648 R09: 00007ffdf7533648 [ 78.321172][ T5071] R10: 00007ffdf7533648 R11: 0000000000000246 R12: 0000000000000001 [ 78.329154][ T5071] R13: 00007ffdf7533638 R14: 0000000000000001 R15: 0000000000000001 [ 78.337231][ T5071] [ 78.340463][ T5071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.347906][ T5071] CPU: 1 PID: 5071 Comm: syz-executor383 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 78.358249][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 78.368539][ T5071] Call Trace: [ 78.371919][ T5071] [ 78.374883][ T5071] dump_stack_lvl+0x1e7/0x2e0 [ 78.379607][ T5071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.384819][ T5071] ? __pfx__printk+0x10/0x10 [ 78.389512][ T5071] ? vscnprintf+0x5d/0x90 [ 78.393857][ T5071] panic+0x349/0x860 [ 78.397765][ T5071] ? __warn+0x172/0x4b0 [ 78.401976][ T5071] ? __pfx_panic+0x10/0x10 [ 78.406438][ T5071] __warn+0x31e/0x4b0 [ 78.410498][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 78.415944][ T5071] report_bug+0x2b3/0x500 [ 78.420329][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 78.425725][ T5071] handle_bug+0x3e/0x70 [ 78.429925][ T5071] exc_invalid_op+0x1a/0x50 [ 78.434445][ T5071] asm_exc_invalid_op+0x1a/0x20 [ 78.440529][ T5071] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 78.446637][ T5071] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 78.466377][ T5071] RSP: 0018:ffffc90004207340 EFLAGS: 00010046 [ 78.472595][ T5071] RAX: 0000000000000000 RBX: 1ffff92000840e6c RCX: 0000000000000001 [ 78.480614][ T5071] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ff9a1 [ 78.488801][ T5071] RBP: ffffc900042073e8 R08: ffff88801cedd27b R09: 1ffff110039dba4f [ 78.497062][ T5071] R10: dffffc0000000000 R11: ffffed10039dba50 R12: dffffc0000000000 [ 78.505158][ T5071] R13: 0000000000000000 R14: ffffc90004207380 R15: 0000000000000201 [ 78.513187][ T5071] ? sock_map_unref+0x401/0x5e0 [ 78.518461][ T5071] ? sock_map_unref+0x401/0x5e0 [ 78.523419][ T5071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 78.529304][ T5071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.535073][ T5071] ? sock_map_unref+0x3ac/0x5e0 [ 78.540140][ T5071] sock_map_unref+0x401/0x5e0 [ 78.545189][ T5071] sock_map_delete_elem+0xc0/0x140 [ 78.550971][ T5071] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 78.556585][ T5071] bpf_trace_run2+0x204/0x420 [ 78.561299][ T5071] ? bpf_trace_run2+0x114/0x420 [ 78.566440][ T5071] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.571789][ T5071] ? trace_tlb_flush+0x59/0x120 [ 78.576693][ T5071] trace_tlb_flush+0xfa/0x120 [ 78.582104][ T5071] switch_mm_irqs_off+0x7cb/0xae0 [ 78.587913][ T5071] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 78.593628][ T5071] ? text_poke_memcpy+0x25/0x30 [ 78.598547][ T5071] ? __asan_memcpy+0x40/0x70 [ 78.603277][ T5071] __text_poke+0x8f7/0xd30 [ 78.608469][ T5071] ? trace_tlb_flush+0x6/0x120 [ 78.615121][ T5071] ? __pfx_text_poke_memcpy+0x10/0x10 [ 78.623067][ T5071] ? __pfx___text_poke+0x10/0x10 [ 78.628488][ T5071] ? __pfx___might_resched+0x10/0x10 [ 78.634122][ T5071] ? __mutex_trylock_common+0x183/0x2e0 [ 78.640278][ T5071] ? __pfx___might_resched+0x10/0x10 [ 78.646290][ T5071] ? trace_tlb_flush+0x6/0x120 [ 78.651297][ T5071] text_poke_bp_batch+0x265/0xb30 [ 78.656873][ T5071] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 78.662914][ T5071] ? __pfx___mutex_lock+0x10/0x10 [ 78.668100][ T5071] ? arch_jump_label_transform_queue+0x9b/0x100 [ 78.674495][ T5071] text_poke_finish+0x30/0x50 [ 78.679216][ T5071] arch_jump_label_transform_apply+0x1c/0x30 [ 78.685345][ T5071] static_key_enable_cpuslocked+0x136/0x260 [ 78.691962][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.697954][ T5071] static_key_enable+0x1a/0x20 [ 78.702753][ T5071] tracepoint_add_func+0x953/0x9e0 [ 78.707950][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.713817][ T5071] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 78.720789][ T5071] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 78.728451][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 78.734314][ T5071] ? anon_inode_getfile+0xff/0x180 [ 78.739713][ T5071] ? bpf_probe_register+0x117/0x1d0 [ 78.744933][ T5071] bpf_raw_tp_link_attach+0x470/0x6d0 [ 78.750534][ T5071] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 78.757068][ T5071] bpf_raw_tracepoint_open+0x19d/0x210 [ 78.762680][ T5071] __sys_bpf+0x3c0/0x810 [ 78.767123][ T5071] ? __pfx___sys_bpf+0x10/0x10 [ 78.771990][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.778434][ T5071] ? do_syscall_64+0x10a/0x240 [ 78.783405][ T5071] __x64_sys_bpf+0x7c/0x90 [ 78.788113][ T5071] do_syscall_64+0xfb/0x240 [ 78.792645][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 78.798816][ T5071] RIP: 0033:0x7fb601b299e9 [ 78.803324][ T5071] Code: Unable to access opcode bytes at 0x7fb601b299bf. [ 78.810668][ T5071] RSP: 002b:00007ffdf7533478 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.819300][ T5071] RAX: ffffffffffffffda RBX: 00007ffdf7533648 RCX: 00007fb601b299e9 [ 78.827717][ T5071] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 78.836073][ T5071] RBP: 00007fb601b9d610 R08: 00007ffdf7533648 R09: 00007ffdf7533648 [ 78.844199][ T5071] R10: 00007ffdf7533648 R11: 0000000000000246 R12: 0000000000000001 [ 78.852240][ T5071] R13: 00007ffdf7533638 R14: 0000000000000001 R15: 0000000000000001 [ 78.860256][ T5071] [ 78.863460][ T5071] Kernel Offset: disabled [ 78.868188][ T5071] Rebooting in 86400 seconds..