./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor533671695 <...> DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d forked to background, child pid 3183 [ 23.518582][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.527706][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.87' (ECDSA) to the list of known hosts. execve("./syz-executor533671695", ["./syz-executor533671695"], 0x7ffc4f3ec550 /* 10 vars */) = 0 brk(NULL) = 0x555555641000 brk(0x555555641c40) = 0x555555641c40 arch_prctl(ARCH_SET_FS, 0x555555641300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555556415d0) = 3604 set_robust_list(0x5555556415e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f8cd91f3100, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f8cd91f37d0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f8cd91f31a0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8cd91f37d0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor533671695", 4096) = 27 brk(0x555555662c40) = 0x555555662c40 brk(0x555555663000) = 0x555555663000 mprotect(0x7f8cd92b4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 chmod("/dev/raw-gadget", 0666) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=680, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3604}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x25\x00\x00\x00\x48\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 680 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 access("/proc/net", R_OK) = 0 access("/proc/net/unix", R_OK) = 0 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556415d0) = 3607 ./strace-static-x86_64: Process 3607 attached [pid 3607] set_robust_list(0x5555556415e0, 24) = 0 [pid 3607] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3607] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 3607] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 3607] dup2(4, 202) = 202 [pid 3607] close(4) = 0 [pid 3607] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 3607] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8cd8800000 [pid 3607] mprotect(0x7f8cd8801000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 3607] clone(child_stack=0x7f8cd90003f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[2], tls=0x7f8cd9000700, child_tidptr=0x7f8cd90009d0) = 2 [pid 3607] ioctl(3, HCIDEVUP./strace-static-x86_64: Process 3610 attached [pid 3610] set_robust_list(0x7f8cd90009e0, 24) = 0 [pid 3610] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 3610] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 3610] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 syzkaller login: [ 39.877001][ T3611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.884788][ T3611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.892582][ T3611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.901190][ T3611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.909511][ T3611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.917309][ T3611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 3610] read(202, [pid 3607] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 3607] ioctl(3, HCISETSCAN [pid 3610] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 3610] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 3610] madvise(0x7f8cd8800000, 8372224, MADV_DONTNEED) = 0 [pid 3607] <... ioctl resumed>, 0x7ffe975e1b7c) = 0 [pid 3610] exit(0) = ? [pid 3607] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 3610] +++ exited with 0 +++ [pid 3607] <... writev resumed>) = 13 [pid 3607] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3) = 14 [pid 3607] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14 [pid 3607] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 3607] close(3) = 0 [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setsid() = 1 [pid 3607] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3607] unshare(CLONE_NEWNS) = 0 [pid 3607] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3607] unshare(CLONE_NEWIPC) = 0 [pid 3607] unshare(CLONE_NEWCGROUP) = 0 [pid 3607] unshare(CLONE_NEWUTS) = 0 [pid 3607] unshare(CLONE_SYSVSEM) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "16777216", 8) = 8 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "536870912", 9) = 9 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "8192", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3607] close(3) = 0 [pid 3607] getpid() = 1 [pid 3607] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 3607] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556415d0) = 4 ./strace-static-x86_64: Process 3613 attached [pid 3613] set_robust_list(0x5555556415e0, 24) = 0 [pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3613] setpgid(0, 0) = 0 [pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1000", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=8, insns=0x20002740, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 [pid 3613] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="contention_begin", prog_fd=3}}, 16) = 4 [pid 3613] close(3) = 0 [pid 3613] close(4) = 0 [pid 3613] close(5) = -1 EBADF (Bad file descriptor) [pid 3613] close(6) = -1 EBADF (Bad file descriptor) [pid 3613] close(7) = -1 EBADF (Bad file descriptor) [pid 3613] close(8) = -1 EBADF (Bad file descriptor) [pid 3613] close(9) = -1 EBADF (Bad file descriptor) [pid 3613] close(10) = -1 EBADF (Bad file descriptor) [pid 3613] close(11) = -1 EBADF (Bad file descriptor) [pid 3613] close(12) = -1 EBADF (Bad file descriptor) [pid 3613] close(13) = -1 EBADF (Bad file descriptor) [pid 3613] close(14) = -1 EBADF (Bad file descriptor) [pid 3613] close(15) = -1 EBADF (Bad file descriptor) [pid 3613] close(16) = -1 EBADF (Bad file descriptor) [pid 3613] close(17) = -1 EBADF (Bad file descriptor) [pid 3613] close(18) = -1 EBADF (Bad file descriptor) [pid 3613] close(19) = -1 EBADF (Bad file descriptor) [pid 3613] close(20) = -1 EBADF (Bad file descriptor) [pid 3613] close(21) = -1 EBADF (Bad file descriptor) [pid 3613] close(22) = -1 EBADF (Bad file descriptor) [pid 3613] close(23) = -1 EBADF (Bad file descriptor) [pid 3613] close(24) = -1 EBADF (Bad file descriptor) [pid 3613] close(25) = -1 EBADF (Bad file descriptor) [pid 3613] close(26) = -1 EBADF (Bad file descriptor) [pid 3613] close(27) = -1 EBADF (Bad file descriptor) [pid 3613] close(28) = -1 EBADF (Bad file descriptor) [pid 3613] close(29) = -1 EBADF (Bad file descriptor) [pid 3613] exit_group(0) = ? [pid 3613] +++ exited with 0 +++ [pid 3607] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3607] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3607] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556415d0) = 5 ./strace-static-x86_64: Process 3614 attached [pid 3614] set_robust_list(0x5555556415e0, 24) = 0 [pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3614] setpgid(0, 0) = 0 [pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3614] write(3, "1000", 4) = 4 [pid 3614] close(3) = 0 [pid 3614] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=8, insns=0x20002740, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 [ 40.012225][ T3601] ------------[ cut here ]------------ [ 40.017734][ T3601] WARNING: CPU: 1 PID: 3601 at kernel/bpf/helpers.c:769 bpf_bprintf_prepare+0xf31/0x11a0 [ 40.027643][ T3601] Modules linked in: [ 40.031584][ T3601] CPU: 1 PID: 3601 Comm: strace-static-x Not tainted 6.0.0-rc3-next-20220831-syzkaller #0 [ 40.041489][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 40.051729][ T3601] RIP: 0010:bpf_bprintf_prepare+0xf31/0x11a0 [ 40.057717][ T3601] Code: ff e8 93 9f ea ff 48 83 7c 24 08 00 41 bd 04 00 00 00 0f 85 8a fa ff ff e8 7c 9f ea ff 8d 6b 03 e9 f7 f6 ff ff e8 6f 9f ea ff <0f> 0b 65 ff 0d 8e ba 71 7e bf 01 00 00 00 41 bc f0 ff ff ff e8 16 [ 40.077338][ T3601] RSP: 0018:ffffc90003cfeb70 EFLAGS: 00010093 [ 40.083406][ T3601] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 40.091374][ T3601] RDX: ffff8880219b3a80 RSI: ffffffff819186b1 RDI: 0000000000000005 [ 40.099439][ T3601] RBP: ffffc90003cfeca0 R08: 0000000000000005 R09: 0000000000000003 [ 40.107409][ T3601] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000003 [ 40.115375][ T3601] R13: 0000000000000004 R14: ffffc90003cfed58 R15: 0000000000000003 [ 40.123345][ T3601] FS: 0000000001655340(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 40.132286][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.138882][ T3601] CR2: 0000000020003000 CR3: 0000000074d58000 CR4: 00000000003506e0 [ 40.146885][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.154948][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.162936][ T3601] Call Trace: [ 40.166228][ T3601] [ 40.169159][ T3601] ? dev_hard_start_xmit+0x311/0x880 [ 40.174462][ T3601] ? bpf_bprintf_cleanup+0x60/0x60 [ 40.179667][ T3601] ? do_raw_spin_unlock+0x171/0x230 [ 40.184874][ T3601] ? _raw_spin_unlock+0x24/0x40 [ 40.189728][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.195193][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.200655][ T3601] ? lock_release+0x560/0x780 [ 40.205365][ T3601] bpf_trace_printk+0xab/0x170 [ 40.210148][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 40.215710][ T3601] ? lock_release+0x780/0x780 [ 40.220403][ T3601] ? __dev_queue_xmit+0x1a0c/0x3ad0 [ 40.225615][ T3601] ? __local_bh_enable_ip+0xa0/0x120 [ 40.230930][ T3601] ? __dev_queue_xmit+0xb14/0x3ad0 [ 40.236051][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 40.241529][ T3601] bpf_trace_run2+0x110/0x340 [ 40.246216][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 40.252122][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.257613][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 40.263356][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 40.268235][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.273703][ T3601] ? lock_release+0x560/0x780 [ 40.278395][ T3601] ? is_bpf_text_address+0x77/0x170 [ 40.283701][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 40.290079][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 40.296429][ T3601] ? is_bpf_text_address+0x99/0x170 [ 40.301648][ T3601] ? .slowpath+0xe/0xe [ 40.305736][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.311199][ T3601] ? lock_acquire+0x480/0x570 [ 40.315882][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 40.320959][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 40.325928][ T3601] ? kmem_cache_free+0xe7/0x5b0 [ 40.330884][ T3601] ? stack_trace_save+0x8c/0xc0 [ 40.335909][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 40.341300][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 40.346248][ T3601] bpf_trace_printk+0xcf/0x170 [ 40.351037][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 40.356590][ T3601] ? kasan_set_track+0x21/0x30 [ 40.361899][ T3601] ? kasan_set_free_info+0x20/0x30 [ 40.367008][ T3601] ? ____kasan_slab_free+0x166/0x1c0 [ 40.372305][ T3601] ? tcp_rcv_established+0x1477/0x20e0 [ 40.377766][ T3601] ? tcp_v4_do_rcv+0x66c/0x9b0 [ 40.382543][ T3601] ? tcp_v4_rcv+0x3438/0x3930 [ 40.387245][ T3601] ? ip_protocol_deliver_rcu+0x9b/0x7c0 [ 40.392809][ T3601] ? ip_local_deliver_finish+0x2e8/0x4c0 [ 40.398466][ T3601] ? ip_local_deliver+0x1aa/0x200 [ 40.403505][ T3601] ? ip_sublist_rcv_finish+0x9a/0x2c0 [ 40.408903][ T3601] ? ip_sublist_rcv+0x533/0x980 [ 40.413772][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 40.419251][ T3601] bpf_trace_run2+0x110/0x340 [ 40.423937][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 40.429930][ T3601] ? lock_release+0x560/0x780 [ 40.434630][ T3601] ? debug_check_no_obj_freed+0x20c/0x420 [ 40.440383][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 40.446119][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 40.451000][ T3601] ? trace_hardirqs_on+0x2d/0x120 [ 40.456036][ T3601] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 40.461863][ T3601] ? debug_check_no_obj_freed+0x20c/0x420 [ 40.467586][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 40.473923][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 40.479996][ T3601] ? is_bpf_text_address+0x77/0x170 [ 40.485210][ T3601] ? .slowpath+0xe/0xe [ 40.489296][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.494773][ T3601] ? lock_acquire+0x480/0x570 [ 40.499479][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 40.504353][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 40.509299][ T3601] ? __kernel_text_address+0x9/0x30 [ 40.514500][ T3601] ? unwind_get_return_address+0x51/0x90 [ 40.520145][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 40.525348][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 40.530320][ T3601] bpf_trace_printk+0xcf/0x170 [ 40.535103][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 40.540665][ T3601] ? __rb_reserve_next+0x71d/0x16c0 [ 40.545877][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 40.551338][ T3601] bpf_trace_run2+0x110/0x340 [ 40.556040][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 40.561944][ T3601] ? ring_buffer_lock_reserve+0x470/0xfa0 [ 40.567677][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 40.573414][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 40.578290][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 40.584626][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 40.590699][ T3601] ? trace_event_buffer_commit+0x200/0xaa0 [ 40.596515][ T3601] ? .slowpath+0xe/0xe [ 40.600583][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.606065][ T3601] ? lock_acquire+0x480/0x570 [ 40.610751][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 40.615610][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 40.620560][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 40.625765][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 40.630726][ T3601] bpf_trace_printk+0xcf/0x170 [ 40.635502][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 40.641521][ T3601] ? bpf_trace_run2+0x12d/0x340 [ 40.646390][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.651856][ T3601] ? lock_acquire+0x480/0x570 [ 40.656539][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 40.662012][ T3601] bpf_trace_run2+0x110/0x340 [ 40.666733][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 40.672645][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 40.678415][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 40.683314][ T3601] ? finish_task_switch.isra.0+0x2b0/0xc80 [ 40.689143][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 40.694007][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.699488][ T3601] trace_contention_begin+0xc0/0x150 [ 40.704796][ T3601] __mutex_lock+0x13c/0x1350 [ 40.709402][ T3601] ? pipe_write+0x132/0x1be0 [ 40.714003][ T3601] ? aa_file_perm+0x56b/0x1230 [ 40.718780][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 40.723636][ T3601] ? pipe_write+0x132/0x1be0 [ 40.728238][ T3601] ? mutex_lock_io_nested+0x1190/0x1190 [ 40.733795][ T3601] ? aa_file_perm+0x595/0x1230 [ 40.738574][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.744068][ T3601] pipe_write+0x132/0x1be0 [ 40.748498][ T3601] ? _copy_to_user+0x12b/0x140 [ 40.753268][ T3601] ? ptrace_get_syscall_info+0x252/0x4f0 [ 40.758926][ T3601] ? ptrace_get_syscall_info_entry+0x4b0/0x4b0 [ 40.765102][ T3601] ? do_proc_dopipe_max_size_conv+0x1c0/0x1c0 [ 40.771182][ T3601] ? apparmor_file_permission+0x264/0x4e0 [ 40.776914][ T3601] ? bpf_lsm_file_permission+0x5/0x10 [ 40.782296][ T3601] ? security_file_permission+0xab/0xd0 [ 40.787855][ T3601] vfs_write+0x9e9/0xdd0 [ 40.792110][ T3601] ? vfs_read+0x930/0x930 [ 40.796450][ T3601] ? lock_acquire+0x480/0x570 [ 40.801133][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.806595][ T3601] ? __ct_user_exit+0xff/0x150 [ 40.811374][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 40.816233][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 40.821089][ T3601] ? __fget_light+0x20a/0x270 [ 40.825776][ T3601] ksys_write+0x1e8/0x250 [ 40.830119][ T3601] ? __ia32_sys_read+0xb0/0xb0 [ 40.834909][ T3601] ? trace_hardirqs_on+0x2d/0x120 [ 40.840028][ T3601] do_syscall_64+0x35/0xb0 [ 40.844452][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.850354][ T3601] RIP: 0033:0x4e5c73 [ 40.854248][ T3601] Code: c7 c0 b8 ff ff ff 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 40.873947][ T3601] RSP: 002b:00007ffc4f3ec0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.882887][ T3601] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004e5c73 [ 40.890960][ T3601] RDX: 0000000000000019 RSI: 0000000001658000 RDI: 0000000000000002 [ 40.898933][ T3601] RBP: 0000000001658000 R08: 0000000000000000 R09: 0000000000000003 [ 40.906902][ T3601] R10: 00007ffc4f3ec087 R11: 0000000000000246 R12: 0000000000000019 [ 40.914889][ T3601] R13: 0000000000617480 R14: 0000000000000019 R15: 0000000000000001 [ 40.922870][ T3601] [ 40.925974][ T3601] Kernel panic - not syncing: panic_on_warn set ... [ 40.932554][ T3601] CPU: 1 PID: 3601 Comm: strace-static-x Not tainted 6.0.0-rc3-next-20220831-syzkaller #0 [ 40.942459][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 40.952595][ T3601] Call Trace: [ 40.955873][ T3601] [ 40.958803][ T3601] dump_stack_lvl+0xcd/0x134 [ 40.963488][ T3601] panic+0x2c8/0x627 [ 40.967397][ T3601] ? panic_print_sys_info.part.0+0x10b/0x10b [ 40.973397][ T3601] ? __warn.cold+0x248/0x2c4 [ 40.978018][ T3601] ? bpf_bprintf_prepare+0xf31/0x11a0 [ 40.983405][ T3601] __warn.cold+0x259/0x2c4 [ 40.987926][ T3601] ? bpf_bprintf_prepare+0xf31/0x11a0 [ 40.993319][ T3601] report_bug+0x1bc/0x210 [ 40.997668][ T3601] handle_bug+0x3c/0x60 [ 41.001853][ T3601] exc_invalid_op+0x14/0x40 [ 41.006459][ T3601] asm_exc_invalid_op+0x16/0x20 [ 41.011321][ T3601] RIP: 0010:bpf_bprintf_prepare+0xf31/0x11a0 [ 41.017314][ T3601] Code: ff e8 93 9f ea ff 48 83 7c 24 08 00 41 bd 04 00 00 00 0f 85 8a fa ff ff e8 7c 9f ea ff 8d 6b 03 e9 f7 f6 ff ff e8 6f 9f ea ff <0f> 0b 65 ff 0d 8e ba 71 7e bf 01 00 00 00 41 bc f0 ff ff ff e8 16 [ 41.037010][ T3601] RSP: 0018:ffffc90003cfeb70 EFLAGS: 00010093 [ 41.043083][ T3601] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 41.051056][ T3601] RDX: ffff8880219b3a80 RSI: ffffffff819186b1 RDI: 0000000000000005 [ 41.059065][ T3601] RBP: ffffc90003cfeca0 R08: 0000000000000005 R09: 0000000000000003 [ 41.067075][ T3601] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000003 [ 41.075063][ T3601] R13: 0000000000000004 R14: ffffc90003cfed58 R15: 0000000000000003 [ 41.083057][ T3601] ? bpf_bprintf_prepare+0xf31/0x11a0 [ 41.088451][ T3601] ? dev_hard_start_xmit+0x311/0x880 [ 41.093834][ T3601] ? bpf_bprintf_cleanup+0x60/0x60 [ 41.098996][ T3601] ? do_raw_spin_unlock+0x171/0x230 [ 41.104213][ T3601] ? _raw_spin_unlock+0x24/0x40 [ 41.109077][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.114539][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.120104][ T3601] ? lock_release+0x560/0x780 [ 41.124817][ T3601] bpf_trace_printk+0xab/0x170 [ 41.129665][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 41.135276][ T3601] ? lock_release+0x780/0x780 [ 41.139974][ T3601] ? __dev_queue_xmit+0x1a0c/0x3ad0 [ 41.145185][ T3601] ? __local_bh_enable_ip+0xa0/0x120 [ 41.150505][ T3601] ? __dev_queue_xmit+0xb14/0x3ad0 [ 41.155633][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 41.161099][ T3601] bpf_trace_run2+0x110/0x340 [ 41.167213][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 41.173120][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.178585][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 41.184423][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 41.189296][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.194757][ T3601] ? lock_release+0x560/0x780 [ 41.199445][ T3601] ? is_bpf_text_address+0x77/0x170 [ 41.204662][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 41.211107][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 41.217183][ T3601] ? is_bpf_text_address+0x99/0x170 [ 41.222400][ T3601] ? .slowpath+0xe/0xe [ 41.226482][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.231942][ T3601] ? lock_acquire+0x480/0x570 [ 41.236917][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 41.241873][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 41.246820][ T3601] ? kmem_cache_free+0xe7/0x5b0 [ 41.251690][ T3601] ? stack_trace_save+0x8c/0xc0 [ 41.256544][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 41.261836][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 41.266891][ T3601] bpf_trace_printk+0xcf/0x170 [ 41.271836][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 41.277391][ T3601] ? kasan_set_track+0x21/0x30 [ 41.282164][ T3601] ? kasan_set_free_info+0x20/0x30 [ 41.287273][ T3601] ? ____kasan_slab_free+0x166/0x1c0 [ 41.292575][ T3601] ? tcp_rcv_established+0x1477/0x20e0 [ 41.298036][ T3601] ? tcp_v4_do_rcv+0x66c/0x9b0 [ 41.302807][ T3601] ? tcp_v4_rcv+0x3438/0x3930 [ 41.307609][ T3601] ? ip_protocol_deliver_rcu+0x9b/0x7c0 [ 41.313179][ T3601] ? ip_local_deliver_finish+0x2e8/0x4c0 [ 41.318832][ T3601] ? ip_local_deliver+0x1aa/0x200 [ 41.323869][ T3601] ? ip_sublist_rcv_finish+0x9a/0x2c0 [ 41.329263][ T3601] ? ip_sublist_rcv+0x533/0x980 [ 41.334129][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 41.339598][ T3601] bpf_trace_run2+0x110/0x340 [ 41.344284][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 41.350237][ T3601] ? lock_release+0x560/0x780 [ 41.354927][ T3601] ? debug_check_no_obj_freed+0x20c/0x420 [ 41.360666][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 41.366416][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 41.371303][ T3601] ? trace_hardirqs_on+0x2d/0x120 [ 41.376368][ T3601] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 41.382204][ T3601] ? debug_check_no_obj_freed+0x20c/0x420 [ 41.387958][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 41.394387][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 41.400475][ T3601] ? is_bpf_text_address+0x77/0x170 [ 41.405688][ T3601] ? .slowpath+0xe/0xe [ 41.409782][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.415256][ T3601] ? lock_acquire+0x480/0x570 [ 41.419952][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 41.424822][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 41.429775][ T3601] ? __kernel_text_address+0x9/0x30 [ 41.435077][ T3601] ? unwind_get_return_address+0x51/0x90 [ 41.440727][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 41.445930][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 41.450885][ T3601] bpf_trace_printk+0xcf/0x170 [ 41.455654][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 41.461221][ T3601] ? __rb_reserve_next+0x71d/0x16c0 [ 41.466434][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 41.471892][ T3601] bpf_trace_run2+0x110/0x340 [ 41.476577][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 41.482491][ T3601] ? ring_buffer_lock_reserve+0x470/0xfa0 [ 41.488223][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 41.493963][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 41.498917][ T3601] trace_contention_begin.constprop.0+0xda/0x1b0 [ 41.505251][ T3601] __pv_queued_spin_lock_slowpath+0x103/0xb50 [ 41.511332][ T3601] ? trace_event_buffer_commit+0x200/0xaa0 [ 41.517236][ T3601] ? .slowpath+0xe/0xe [ 41.521325][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.526869][ T3601] ? lock_acquire+0x480/0x570 [ 41.531574][ T3601] do_raw_spin_lock+0x200/0x2a0 [ 41.536435][ T3601] ? rwlock_bug.part.0+0x90/0x90 [ 41.541395][ T3601] _raw_spin_lock_irqsave+0x41/0x50 [ 41.546765][ T3601] ? bpf_trace_printk+0xcf/0x170 [ 41.551724][ T3601] bpf_trace_printk+0xcf/0x170 [ 41.556496][ T3601] ? trace_bpf_trace_printk+0x220/0x220 [ 41.562058][ T3601] ? bpf_trace_run2+0x12d/0x340 [ 41.566921][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.572385][ T3601] ? lock_acquire+0x480/0x570 [ 41.577067][ T3601] bpf_prog_0605f9f479290f07+0x2f/0x33 [ 41.582524][ T3601] bpf_trace_run2+0x110/0x340 [ 41.587213][ T3601] ? __bpf_trace_bpf_trace_printk+0xc0/0xc0 [ 41.593207][ T3601] __bpf_trace_contention_begin+0xb5/0xf0 [ 41.599041][ T3601] ? __bpf_trace_lock+0xe0/0xe0 [ 41.603907][ T3601] ? finish_task_switch.isra.0+0x2b0/0xc80 [ 41.609715][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 41.614567][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.620027][ T3601] trace_contention_begin+0xc0/0x150 [ 41.625326][ T3601] __mutex_lock+0x13c/0x1350 [ 41.629928][ T3601] ? pipe_write+0x132/0x1be0 [ 41.634528][ T3601] ? aa_file_perm+0x56b/0x1230 [ 41.639333][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 41.644361][ T3601] ? pipe_write+0x132/0x1be0 [ 41.648977][ T3601] ? mutex_lock_io_nested+0x1190/0x1190 [ 41.654535][ T3601] ? aa_file_perm+0x595/0x1230 [ 41.659313][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.664779][ T3601] pipe_write+0x132/0x1be0 [ 41.669217][ T3601] ? _copy_to_user+0x12b/0x140 [ 41.673991][ T3601] ? ptrace_get_syscall_info+0x252/0x4f0 [ 41.679650][ T3601] ? ptrace_get_syscall_info_entry+0x4b0/0x4b0 [ 41.685906][ T3601] ? do_proc_dopipe_max_size_conv+0x1c0/0x1c0 [ 41.691986][ T3601] ? apparmor_file_permission+0x264/0x4e0 [ 41.697805][ T3601] ? bpf_lsm_file_permission+0x5/0x10 [ 41.703181][ T3601] ? security_file_permission+0xab/0xd0 [ 41.708737][ T3601] vfs_write+0x9e9/0xdd0 [ 41.713077][ T3601] ? vfs_read+0x930/0x930 [ 41.717413][ T3601] ? lock_acquire+0x480/0x570 [ 41.722106][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.727653][ T3601] ? __ct_user_exit+0xff/0x150 [ 41.732429][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 41.737296][ T3601] ? lock_downgrade+0x6e0/0x6e0 [ 41.742151][ T3601] ? __fget_light+0x20a/0x270 [ 41.746859][ T3601] ksys_write+0x1e8/0x250 [ 41.751202][ T3601] ? __ia32_sys_read+0xb0/0xb0 [ 41.755999][ T3601] ? trace_hardirqs_on+0x2d/0x120 [ 41.761025][ T3601] do_syscall_64+0x35/0xb0 [ 41.765449][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.771345][ T3601] RIP: 0033:0x4e5c73 [ 41.775234][ T3601] Code: c7 c0 b8 ff ff ff 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 41.794846][ T3601] RSP: 002b:00007ffc4f3ec0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.803260][ T3601] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004e5c73 [ 41.811227][ T3601] RDX: 0000000000000019 RSI: 0000000001658000 RDI: 0000000000000002 [ 41.819284][ T3601] RBP: 0000000001658000 R08: 0000000000000000 R09: 0000000000000003 [ 41.827266][ T3601] R10: 00007ffc4f3ec087 R11: 0000000000000246 R12: 0000000000000019 [ 41.835271][ T3601] R13: 0000000000617480 R14: 0000000000000019 R15: 0000000000000001 [ 41.843254][ T3601] [ 41.846437][ T3601] Kernel Offset: disabled [ 41.850760][ T3601] Rebooting in 86400 seconds..