./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor883027289 <...> Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. execve("./syz-executor883027289", ["./syz-executor883027289"], 0x7fff43eed330 /* 10 vars */) = 0 brk(NULL) = 0x555581756000 brk(0x555581756e00) = 0x555581756e00 arch_prctl(ARCH_SET_FS, 0x555581756480) = 0 set_tid_address(0x555581756750) = 5065 set_robust_list(0x555581756760, 24) = 0 rseq(0x555581756da0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor883027289", 4096) = 27 getrandom("\x4c\xb7\xb1\x19\x35\x0f\xe3\x8d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555581756e00 brk(0x555581777e00) = 0x555581777e00 brk(0x555581778000) = 0x555581778000 mprotect(0x7f2c42e4e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f2c42daad60, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c42db1f40}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f2c42daad60, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c42db1f40}, NULL, 8) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_HASH, key_size=4, value_size=4095, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_XDP, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 write(5, "8", 1) = 1 [ 54.901370][ T5065] FAULT_INJECTION: forcing a failure. [ 54.901370][ T5065] name failslab, interval 1, probability 0, space 0, times 1 [ 54.914138][ T5065] CPU: 1 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 54.924206][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 54.934250][ T5065] Call Trace: [ 54.937520][ T5065] [ 54.940442][ T5065] dump_stack_lvl+0x1e7/0x2e0 [ 54.945140][ T5065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 54.950330][ T5065] ? __pfx__printk+0x10/0x10 [ 54.954915][ T5065] ? __pfx___might_resched+0x10/0x10 [ 54.960197][ T5065] should_fail_ex+0x3b0/0x4e0 [ 54.964867][ T5065] ? __xdp_reg_mem_model+0x149/0x650 [ 54.970148][ T5065] should_failslab+0x9/0x20 [ 54.974646][ T5065] kmalloc_trace+0x76/0x360 [ 54.979151][ T5065] __xdp_reg_mem_model+0x149/0x650 [ 54.984257][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 54.989470][ T5065] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 54.995108][ T5065] ? page_pool_list+0x232/0x280 [ 54.999954][ T5065] xdp_reg_mem_model+0x22/0x40 [ 55.004714][ T5065] bpf_test_run_xdp_live+0x365/0x1e90 [ 55.010079][ T5065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 55.016396][ T5065] ? stack_trace_save+0x118/0x1d0 [ 55.021419][ T5065] ? stack_depot_save_flags+0x37d/0x860 [ 55.026960][ T5065] ? mark_lock+0x9a/0x350 [ 55.031283][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 55.036300][ T5065] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.042123][ T5065] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.048015][ T5065] ? rcu_is_watching+0x15/0xb0 [ 55.052779][ T5065] ? __might_fault+0xaa/0x120 [ 55.057447][ T5065] ? __might_fault+0xc6/0x120 [ 55.062112][ T5065] ? _copy_from_user+0xa6/0xe0 [ 55.066866][ T5065] ? bpf_test_init+0x15a/0x180 [ 55.071622][ T5065] ? xdp_convert_md_to_buff+0x5b/0x330 [ 55.077075][ T5065] bpf_prog_test_run_xdp+0x813/0x11b0 [ 55.082454][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.088267][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.094066][ T5065] bpf_prog_test_run+0x33a/0x3b0 [ 55.099011][ T5065] __sys_bpf+0x48d/0x810 [ 55.103247][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 55.108013][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 55.114338][ T5065] ? do_syscall_64+0x10a/0x240 [ 55.119103][ T5065] __x64_sys_bpf+0x7c/0x90 [ 55.123515][ T5065] do_syscall_64+0xfb/0x240 [ 55.128020][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 55.133909][ T5065] RIP: 0033:0x7f2c42ddb279 [ 55.138316][ T5065] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.157910][ T5065] RSP: 002b:00007ffebb32f748 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.166313][ T5065] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f2c42ddb279 [ 55.174274][ T5065] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 55.182247][ T5065] RBP: 00007ffebb32f750 R08: 00007ffebb32f4e7 R09: 00007f2c42da0038 [ 55.190214][ T5065] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 55.198173][ T5065] R13: 00007ffebb32f9b8 R14: 0000000000000001 R15: 0000000000000001 [ 55.206158][ T5065] [ 55.210258][ T5065] ------------[ cut here ]------------ [ 55.215886][ T5065] WARNING: CPU: 0 PID: 5065 at net/core/xdp.c:299 __xdp_reg_mem_model+0x2d9/0x650 [ 55.225167][ T5065] Modules linked in: [ 55.229063][ T5065] CPU: 0 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 55.239160][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 55.249272][ T5065] RIP: 0010:__xdp_reg_mem_model+0x2d9/0x650 [ 55.255233][ T5065] Code: 89 c5 85 c0 79 62 e8 c6 b4 3e f8 eb a5 e8 bf b4 3e f8 4c 89 ff e8 97 a9 96 f8 4d 63 fd 48 c7 c7 80 27 39 8f e8 a8 36 23 02 90 <0f> 0b 90 e9 f8 01 00 00 e8 9a b4 3e f8 48 8d 7c 24 60 48 89 f8 48 [ 55.274894][ T5065] RSP: 0018:ffffc90003d0f640 EFLAGS: 00010246 [ 55.280943][ T5065] RAX: 1158ab1705932a00 RBX: dffffc0000000000 RCX: ffffffff8b7974ad [ 55.288941][ T5065] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90003d0f5c0 [ 55.296952][ T5065] RBP: ffffc90003d0f710 R08: ffffc90003d0f5c7 R09: 1ffff920007a1eb8 [ 55.305027][ T5065] R10: dffffc0000000000 R11: fffff520007a1eb9 R12: 0000000000000002 [ 55.313080][ T5065] R13: ffff88802ead6000 R14: 1ffff920007a1ed0 R15: fffffffffffffff4 [ 55.321038][ T5065] FS: 0000555581756480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 55.329995][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.336662][ T5065] CR2: 000000000066c7e0 CR3: 0000000020174000 CR4: 00000000003506f0 [ 55.344678][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.352658][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.360721][ T5065] Call Trace: [ 55.364042][ T5065] [ 55.366971][ T5065] ? __warn+0x163/0x4b0 [ 55.371112][ T5065] ? __xdp_reg_mem_model+0x2d9/0x650 [ 55.376448][ T5065] ? report_bug+0x2b3/0x500 [ 55.380965][ T5065] ? __xdp_reg_mem_model+0x2d9/0x650 [ 55.386306][ T5065] ? handle_bug+0x3e/0x70 [ 55.390641][ T5065] ? exc_invalid_op+0x1a/0x50 [ 55.395375][ T5065] ? asm_exc_invalid_op+0x1a/0x20 [ 55.400412][ T5065] ? __mutex_unlock_slowpath+0x21d/0x750 [ 55.406098][ T5065] ? __xdp_reg_mem_model+0x2d9/0x650 [ 55.411393][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 55.416648][ T5065] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 55.422292][ T5065] ? page_pool_list+0x232/0x280 [ 55.427177][ T5065] xdp_reg_mem_model+0x22/0x40 [ 55.431951][ T5065] bpf_test_run_xdp_live+0x365/0x1e90 [ 55.437375][ T5065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 55.443742][ T5065] ? stack_trace_save+0x118/0x1d0 [ 55.448768][ T5065] ? stack_depot_save_flags+0x37d/0x860 [ 55.454371][ T5065] ? mark_lock+0x9a/0x350 [ 55.458703][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 55.463756][ T5065] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.469583][ T5065] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.475554][ T5065] ? rcu_is_watching+0x15/0xb0 [ 55.480340][ T5065] ? __might_fault+0xaa/0x120 [ 55.485068][ T5065] ? __might_fault+0xc6/0x120 [ 55.489760][ T5065] ? _copy_from_user+0xa6/0xe0 [ 55.494613][ T5065] ? bpf_test_init+0x15a/0x180 [ 55.499380][ T5065] ? xdp_convert_md_to_buff+0x5b/0x330 [ 55.504872][ T5065] bpf_prog_test_run_xdp+0x813/0x11b0 [ 55.510260][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.516137][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.521949][ T5065] bpf_prog_test_run+0x33a/0x3b0 [ 55.526927][ T5065] __sys_bpf+0x48d/0x810 [ 55.531175][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 55.536003][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 55.542333][ T5065] ? do_syscall_64+0x10a/0x240 [ 55.547131][ T5065] __x64_sys_bpf+0x7c/0x90 [ 55.551553][ T5065] do_syscall_64+0xfb/0x240 [ 55.556118][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 55.562017][ T5065] RIP: 0033:0x7f2c42ddb279 [ 55.566460][ T5065] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.586150][ T5065] RSP: 002b:00007ffebb32f748 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.594619][ T5065] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f2c42ddb279 [ 55.602600][ T5065] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 55.610642][ T5065] RBP: 00007ffebb32f750 R08: 00007ffebb32f4e7 R09: 00007f2c42da0038 [ 55.618660][ T5065] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 55.626705][ T5065] R13: 00007ffebb32f9b8 R14: 0000000000000001 R15: 0000000000000001 [ 55.634710][ T5065] [ 55.637715][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.644984][ T5065] CPU: 0 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 55.655042][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 55.665080][ T5065] Call Trace: [ 55.668343][ T5065] [ 55.671258][ T5065] dump_stack_lvl+0x1e7/0x2e0 [ 55.675920][ T5065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 55.681096][ T5065] ? __pfx__printk+0x10/0x10 [ 55.685671][ T5065] ? vscnprintf+0x5d/0x90 [ 55.689995][ T5065] panic+0x349/0x860 [ 55.693869][ T5065] ? __warn+0x172/0x4b0 [ 55.698004][ T5065] ? __pfx_panic+0x10/0x10 [ 55.702407][ T5065] __warn+0x31e/0x4b0 [ 55.706372][ T5065] ? __xdp_reg_mem_model+0x2d9/0x650 [ 55.711643][ T5065] report_bug+0x2b3/0x500 [ 55.715957][ T5065] ? __xdp_reg_mem_model+0x2d9/0x650 [ 55.721227][ T5065] handle_bug+0x3e/0x70 [ 55.725380][ T5065] exc_invalid_op+0x1a/0x50 [ 55.730054][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 55.734889][ T5065] RIP: 0010:__xdp_reg_mem_model+0x2d9/0x650 [ 55.740779][ T5065] Code: 89 c5 85 c0 79 62 e8 c6 b4 3e f8 eb a5 e8 bf b4 3e f8 4c 89 ff e8 97 a9 96 f8 4d 63 fd 48 c7 c7 80 27 39 8f e8 a8 36 23 02 90 <0f> 0b 90 e9 f8 01 00 00 e8 9a b4 3e f8 48 8d 7c 24 60 48 89 f8 48 [ 55.760363][ T5065] RSP: 0018:ffffc90003d0f640 EFLAGS: 00010246 [ 55.766411][ T5065] RAX: 1158ab1705932a00 RBX: dffffc0000000000 RCX: ffffffff8b7974ad [ 55.774375][ T5065] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90003d0f5c0 [ 55.782326][ T5065] RBP: ffffc90003d0f710 R08: ffffc90003d0f5c7 R09: 1ffff920007a1eb8 [ 55.790275][ T5065] R10: dffffc0000000000 R11: fffff520007a1eb9 R12: 0000000000000002 [ 55.798224][ T5065] R13: ffff88802ead6000 R14: 1ffff920007a1ed0 R15: fffffffffffffff4 [ 55.806268][ T5065] ? __mutex_unlock_slowpath+0x21d/0x750 [ 55.811889][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 55.817076][ T5065] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 55.822688][ T5065] ? page_pool_list+0x232/0x280 [ 55.827520][ T5065] xdp_reg_mem_model+0x22/0x40 [ 55.832263][ T5065] bpf_test_run_xdp_live+0x365/0x1e90 [ 55.837612][ T5065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 55.843929][ T5065] ? stack_trace_save+0x118/0x1d0 [ 55.848948][ T5065] ? stack_depot_save_flags+0x37d/0x860 [ 55.854472][ T5065] ? mark_lock+0x9a/0x350 [ 55.858801][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 55.863817][ T5065] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 55.869635][ T5065] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 55.875522][ T5065] ? rcu_is_watching+0x15/0xb0 [ 55.880273][ T5065] ? __might_fault+0xaa/0x120 [ 55.884941][ T5065] ? __might_fault+0xc6/0x120 [ 55.889607][ T5065] ? _copy_from_user+0xa6/0xe0 [ 55.894363][ T5065] ? bpf_test_init+0x15a/0x180 [ 55.899114][ T5065] ? xdp_convert_md_to_buff+0x5b/0x330 [ 55.904568][ T5065] bpf_prog_test_run_xdp+0x813/0x11b0 [ 55.909943][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.915747][ T5065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.921542][ T5065] bpf_prog_test_run+0x33a/0x3b0 [ 55.926472][ T5065] __sys_bpf+0x48d/0x810 [ 55.930703][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 55.935467][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 55.941781][ T5065] ? do_syscall_64+0x10a/0x240 [ 55.946542][ T5065] __x64_sys_bpf+0x7c/0x90 [ 55.950948][ T5065] do_syscall_64+0xfb/0x240 [ 55.955451][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 55.961336][ T5065] RIP: 0033:0x7f2c42ddb279 [ 55.965742][ T5065] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.985351][ T5065] RSP: 002b:00007ffebb32f748 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.993754][ T5065] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f2c42ddb279 [ 56.001713][ T5065] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 56.009669][ T5065] RBP: 00007ffebb32f750 R08: 00007ffebb32f4e7 R09: 00007f2c42da0038 [ 56.017645][ T5065] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 56.025610][ T5065] R13: 00007ffebb32f9b8 R14: 0000000000000001 R15: 0000000000000001 [ 56.033596][ T5065] [ 56.036783][ T5065] Kernel Offset: disabled [ 56.041154][ T5065] Rebooting in 86400 seconds..