./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2470406507 <...> Warning: Permanently added '10.128.0.100' (ED25519) to the list of known hosts. execve("./syz-executor2470406507", ["./syz-executor2470406507"], 0x7ffd24adcf30 /* 10 vars */) = 0 brk(NULL) = 0x55559428a000 brk(0x55559428ad00) = 0x55559428ad00 arch_prctl(ARCH_SET_FS, 0x55559428a380) = 0 set_tid_address(0x55559428a650) = 5071 set_robust_list(0x55559428a660, 24) = 0 rseq(0x55559428aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2470406507", 4096) = 28 getrandom("\xc2\x21\xb6\xa1\xb4\x1c\x40\x18", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55559428ad00 brk(0x5555942abd00) = 0x5555942abd00 brk(0x5555942ac000) = 0x5555942ac000 mprotect(0x7f9214377000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000040, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 close(3) = 0 socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000000, value=0x20000080, flags=BPF_ANY}, 32) = 0 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 76.241656][ T5071] ------------[ cut here ]------------ [ 76.247361][ T5071] WARNING: CPU: 1 PID: 5071 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 76.256875][ T5071] Modules linked in: [ 76.260793][ T5071] CPU: 1 PID: 5071 Comm: syz-executor247 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 76.270874][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 76.281054][ T5071] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 76.287141][ T5071] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 76.306862][ T5071] RSP: 0018:ffffc900039bf340 EFLAGS: 00010046 [ 76.312964][ T5071] RAX: 0000000000000000 RBX: 1ffff92000737e6c RCX: 0000000000000001 [ 76.320944][ T5071] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ffd51 [ 76.328921][ T5071] RBP: ffffc900039bf3e8 R08: ffff8880217b627b R09: 1ffff110042f6c4f [ 76.336989][ T5071] R10: dffffc0000000000 R11: ffffed10042f6c50 R12: dffffc0000000000 [ 76.344969][ T5071] R13: 0000000000000000 R14: ffffc900039bf380 R15: 0000000000000201 [ 76.352962][ T5071] FS: 000055559428a380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 76.361911][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.368511][ T5071] CR2: 000000000066c7e0 CR3: 000000002d338000 CR4: 00000000003506f0 [ 76.376515][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.384498][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.392488][ T5071] Call Trace: [ 76.395774][ T5071] [ 76.398710][ T5071] ? __warn+0x163/0x4b0 [ 76.402888][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 76.408280][ T5071] ? report_bug+0x2b3/0x500 [ 76.412809][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 76.418201][ T5071] ? handle_bug+0x3e/0x70 [ 76.422540][ T5071] ? exc_invalid_op+0x1a/0x50 [ 76.427250][ T5071] ? asm_exc_invalid_op+0x1a/0x20 [ 76.432329][ T5071] ? sock_map_unref+0x401/0x5e0 [ 76.437204][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 76.442591][ T5071] ? sock_map_unref+0x401/0x5e0 [ 76.447549][ T5071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 76.453280][ T5071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.458518][ T5071] ? sock_map_unref+0x3ac/0x5e0 [ 76.463395][ T5071] sock_map_unref+0x401/0x5e0 [ 76.468123][ T5071] sock_map_delete_elem+0xc0/0x140 [ 76.473250][ T5071] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 76.478727][ T5071] bpf_trace_run2+0x204/0x420 [ 76.483460][ T5071] ? bpf_trace_run2+0x114/0x420 [ 76.488315][ T5071] ? __pfx_bpf_trace_run2+0x10/0x10 [ 76.493517][ T5071] ? trace_tlb_flush+0x59/0x120 [ 76.498406][ T5071] trace_tlb_flush+0xfa/0x120 [ 76.503098][ T5071] switch_mm_irqs_off+0x7cb/0xae0 [ 76.508144][ T5071] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 76.514145][ T5071] ? text_poke_memcpy+0x25/0x30 [ 76.519125][ T5071] ? __asan_memcpy+0x40/0x70 [ 76.523725][ T5071] __text_poke+0x8f7/0xd30 [ 76.528167][ T5071] ? trace_tlb_flush+0x6/0x120 [ 76.532955][ T5071] ? __pfx_text_poke_memcpy+0x10/0x10 [ 76.538387][ T5071] ? __pfx___text_poke+0x10/0x10 [ 76.543370][ T5071] ? __pfx___might_resched+0x10/0x10 [ 76.548714][ T5071] ? __mutex_trylock_common+0x183/0x2e0 [ 76.554302][ T5071] ? __pfx___might_resched+0x10/0x10 [ 76.559623][ T5071] ? trace_tlb_flush+0x6/0x120 [ 76.564496][ T5071] text_poke_bp_batch+0x265/0xb30 [ 76.569649][ T5071] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 76.575239][ T5071] ? __pfx___mutex_lock+0x10/0x10 [ 76.580305][ T5071] ? arch_jump_label_transform_queue+0x9b/0x100 [ 76.586675][ T5071] text_poke_finish+0x30/0x50 [ 76.591475][ T5071] arch_jump_label_transform_apply+0x1c/0x30 [ 76.597482][ T5071] static_key_enable_cpuslocked+0x136/0x260 [ 76.603403][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.609310][ T5071] static_key_enable+0x1a/0x20 [ 76.614101][ T5071] tracepoint_add_func+0x953/0x9e0 [ 76.619337][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.625272][ T5071] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 76.632397][ T5071] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 76.639903][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 76.645766][ T5071] ? anon_inode_getfile+0xff/0x180 [ 76.651086][ T5071] ? bpf_probe_register+0x117/0x1d0 [ 76.656346][ T5071] bpf_raw_tp_link_attach+0x470/0x6d0 [ 76.661838][ T5071] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 76.667773][ T5071] bpf_raw_tracepoint_open+0x19d/0x210 [ 76.673250][ T5071] __sys_bpf+0x3c0/0x810 [ 76.677569][ T5071] ? __pfx___sys_bpf+0x10/0x10 [ 76.682378][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.688843][ T5071] ? do_syscall_64+0x10a/0x240 [ 76.693629][ T5071] __x64_sys_bpf+0x7c/0x90 [ 76.698076][ T5071] do_syscall_64+0xfb/0x240 [ 76.702719][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 76.708633][ T5071] RIP: 0033:0x7f92143039e9 [ 76.713081][ T5071] Code: Unable to access opcode bytes at 0x7f92143039bf. [ 76.720152][ T5071] RSP: 002b:00007fff9eec35d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.728658][ T5071] RAX: ffffffffffffffda RBX: 00007fff9eec37a8 RCX: 00007f92143039e9 [ 76.736635][ T5071] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 76.744614][ T5071] RBP: 00007f9214377610 R08: 00007fff9eec37a8 R09: 00007fff9eec37a8 [ 76.752769][ T5071] R10: 00007fff9eec37a8 R11: 0000000000000246 R12: 0000000000000001 [ 76.760840][ T5071] R13: 00007fff9eec3798 R14: 0000000000000001 R15: 0000000000000001 [ 76.768839][ T5071] [ 76.771887][ T5071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.779171][ T5071] CPU: 1 PID: 5071 Comm: syz-executor247 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 76.789253][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 76.799509][ T5071] Call Trace: [ 76.802811][ T5071] [ 76.805838][ T5071] dump_stack_lvl+0x1e7/0x2e0 [ 76.810657][ T5071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.815934][ T5071] ? __pfx__printk+0x10/0x10 [ 76.820582][ T5071] ? vscnprintf+0x5d/0x90 [ 76.824948][ T5071] panic+0x349/0x860 [ 76.828864][ T5071] ? __warn+0x172/0x4b0 [ 76.833119][ T5071] ? __pfx_panic+0x10/0x10 [ 76.837602][ T5071] __warn+0x31e/0x4b0 [ 76.841629][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 76.847040][ T5071] report_bug+0x2b3/0x500 [ 76.851399][ T5071] ? __local_bh_enable_ip+0x1be/0x200 [ 76.856980][ T5071] handle_bug+0x3e/0x70 [ 76.861177][ T5071] exc_invalid_op+0x1a/0x50 [ 76.865708][ T5071] asm_exc_invalid_op+0x1a/0x20 [ 76.870574][ T5071] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 76.876576][ T5071] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 76.896293][ T5071] RSP: 0018:ffffc900039bf340 EFLAGS: 00010046 [ 76.902465][ T5071] RAX: 0000000000000000 RBX: 1ffff92000737e6c RCX: 0000000000000001 [ 76.910445][ T5071] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895ffd51 [ 76.918434][ T5071] RBP: ffffc900039bf3e8 R08: ffff8880217b627b R09: 1ffff110042f6c4f [ 76.926420][ T5071] R10: dffffc0000000000 R11: ffffed10042f6c50 R12: dffffc0000000000 [ 76.934412][ T5071] R13: 0000000000000000 R14: ffffc900039bf380 R15: 0000000000000201 [ 76.942418][ T5071] ? sock_map_unref+0x401/0x5e0 [ 76.948683][ T5071] ? sock_map_unref+0x401/0x5e0 [ 76.953909][ T5071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 76.959662][ T5071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.964889][ T5071] ? sock_map_unref+0x3ac/0x5e0 [ 76.969823][ T5071] sock_map_unref+0x401/0x5e0 [ 76.974536][ T5071] sock_map_delete_elem+0xc0/0x140 [ 76.979679][ T5071] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 76.985155][ T5071] bpf_trace_run2+0x204/0x420 [ 76.989850][ T5071] ? bpf_trace_run2+0x114/0x420 [ 76.994882][ T5071] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.000094][ T5071] ? trace_tlb_flush+0x59/0x120 [ 77.004980][ T5071] trace_tlb_flush+0xfa/0x120 [ 77.009672][ T5071] switch_mm_irqs_off+0x7cb/0xae0 [ 77.014719][ T5071] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 77.020282][ T5071] ? text_poke_memcpy+0x25/0x30 [ 77.025149][ T5071] ? __asan_memcpy+0x40/0x70 [ 77.029748][ T5071] __text_poke+0x8f7/0xd30 [ 77.034191][ T5071] ? trace_tlb_flush+0x6/0x120 [ 77.038969][ T5071] ? __pfx_text_poke_memcpy+0x10/0x10 [ 77.044352][ T5071] ? __pfx___text_poke+0x10/0x10 [ 77.049345][ T5071] ? __pfx___might_resched+0x10/0x10 [ 77.054684][ T5071] ? __mutex_trylock_common+0x183/0x2e0 [ 77.060424][ T5071] ? __pfx___might_resched+0x10/0x10 [ 77.065753][ T5071] ? trace_tlb_flush+0x6/0x120 [ 77.070557][ T5071] text_poke_bp_batch+0x265/0xb30 [ 77.075626][ T5071] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 77.081192][ T5071] ? __pfx___mutex_lock+0x10/0x10 [ 77.086240][ T5071] ? arch_jump_label_transform_queue+0x9b/0x100 [ 77.092540][ T5071] text_poke_finish+0x30/0x50 [ 77.097233][ T5071] arch_jump_label_transform_apply+0x1c/0x30 [ 77.103321][ T5071] static_key_enable_cpuslocked+0x136/0x260 [ 77.109228][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 77.115048][ T5071] static_key_enable+0x1a/0x20 [ 77.119840][ T5071] tracepoint_add_func+0x953/0x9e0 [ 77.124971][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 77.130796][ T5071] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 77.137761][ T5071] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 77.145329][ T5071] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 77.151191][ T5071] ? anon_inode_getfile+0xff/0x180 [ 77.156327][ T5071] ? bpf_probe_register+0x117/0x1d0 [ 77.162091][ T5071] bpf_raw_tp_link_attach+0x470/0x6d0 [ 77.167509][ T5071] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 77.173552][ T5071] bpf_raw_tracepoint_open+0x19d/0x210 [ 77.179140][ T5071] __sys_bpf+0x3c0/0x810 [ 77.183502][ T5071] ? __pfx___sys_bpf+0x10/0x10 [ 77.188409][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.194758][ T5071] ? do_syscall_64+0x10a/0x240 [ 77.199567][ T5071] __x64_sys_bpf+0x7c/0x90 [ 77.203990][ T5071] do_syscall_64+0xfb/0x240 [ 77.208612][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 77.214559][ T5071] RIP: 0033:0x7f92143039e9 [ 77.219029][ T5071] Code: Unable to access opcode bytes at 0x7f92143039bf. [ 77.226048][ T5071] RSP: 002b:00007fff9eec35d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.234473][ T5071] RAX: ffffffffffffffda RBX: 00007fff9eec37a8 RCX: 00007f92143039e9 [ 77.242624][ T5071] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 77.250605][ T5071] RBP: 00007f9214377610 R08: 00007fff9eec37a8 R09: 00007fff9eec37a8 [ 77.258581][ T5071] R10: 00007fff9eec37a8 R11: 0000000000000246 R12: 0000000000000001 [ 77.266615][ T5071] R13: 00007fff9eec3798 R14: 0000000000000001 R15: 0000000000000001 [ 77.274919][ T5071] [ 77.278194][ T5071] Kernel Offset: disabled [ 77.282659][ T5071] Rebooting in 86400 seconds..