./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1948294797 <...> Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. execve("./syz-executor1948294797", ["./syz-executor1948294797"], 0x7ffd64854cf0 /* 10 vars */) = 0 brk(NULL) = 0x555556378000 brk(0x555556378d00) = 0x555556378d00 arch_prctl(ARCH_SET_FS, 0x555556378380) = 0 set_tid_address(0x555556378650) = 5059 set_robust_list(0x555556378660, 24) = 0 rseq(0x555556378ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1948294797", 4096) = 28 getrandom("\xb6\x70\x6e\x9d\x31\x04\xf9\xa9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556378d00 brk(0x555556399d00) = 0x555556399d00 brk(0x55555639a000) = 0x55555639a000 mprotect(0x7fb4cd7b0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5060 attached , child_tidptr=0x555556378650) = 5060 [pid 5060] set_robust_list(0x555556378660, 24) = 0 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] setpgid(0, 0) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] write(3, "1000", 4) = 4 [pid 5060] close(3) = 0 [pid 5060] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 [pid 5060] listen(3, 0) = 0 [pid 5060] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000380, license="GPL", log_level=1, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144) = 4 [pid 5060] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=4, value_size=8, max_entries=11, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 5060] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_MSG_VERDICT, attach_flags=0}, 16) = 0 [pid 5060] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000240, value=0x200004c0, flags=BPF_ANY}, 32) = 0 [pid 5060] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb0", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 EACCES (Permission denied) [pid 5060] writev(3, [{iov_base="\x39\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=536871489}], 1) = 548865 [pid 5060] exit_group(0) = ? [pid 5060] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x555556378650) = 5061 [pid 5061] set_robust_list(0x555556378660, 24) = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 [pid 5061] listen(3, 0) = 0 [pid 5061] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000380, license="GPL", log_level=1, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144) = 4 [pid 5061] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=4, value_size=8, max_entries=11, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 5061] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_MSG_VERDICT, attach_flags=0}, 16) = 0 [pid 5061] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000240, value=0x200004c0, flags=BPF_ANY}, 32) = 0 [pid 5061] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb0", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 EACCES (Permission denied) [pid 5061] writev(3, [{iov_base="\x39\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=536871489}], 1) = 548865 [pid 5061] exit_group(0) = ? [ 71.571947][ C1] ------------[ cut here ]------------ [ 71.577938][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:155 inet_sock_destruct+0x6ef/0x8b0 [ 71.587357][ C1] Modules linked in: [ 71.591325][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.7.0-rc6-syzkaller-01632-ge9301af385e7 #0 [ 71.600970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 71.611295][ C1] RIP: 0010:inet_sock_destruct+0x6ef/0x8b0 [pid 5061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 71.617223][ C1] Code: 0f 0b 90 e9 fd fd ff ff e8 4e 27 7f f8 90 0f 0b 90 e9 33 fe ff ff e8 40 27 7f f8 90 0f 0b 90 e9 87 fd ff ff e8 32 27 7f f8 90 <0f> 0b 90 e9 8f fe ff ff e8 84 24 d6 f8 e9 68 fc ff ff 48 89 ef e8 [ 71.637321][ C1] RSP: 0018:ffffc900001f0da0 EFLAGS: 00010246 [ 71.643446][ C1] RAX: 0000000000000000 RBX: ffff88814b061a00 RCX: ffffffff890858ce [ 71.651542][ C1] RDX: ffff88801667bb80 RSI: ffffffff89085a3e RDI: 0000000000000005 [ 71.659718][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 71.667879][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88814b061a28 [ 71.675930][ C1] R13: ffff88814b061b60 R14: 0000000000000000 R15: 0000000000000003 [ 71.684148][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 71.693302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.699917][ C1] CR2: 00000000200023d0 CR3: 000000000cd77000 CR4: 00000000003506f0 [ 71.708139][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.716192][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.724426][ C1] Call Trace: [ 71.727728][ C1] [ 71.730870][ C1] ? show_regs+0x8f/0xa0 [ 71.736085][ C1] ? __warn+0xe6/0x390 [ 71.740218][ C1] ? inet_sock_destruct+0x6ef/0x8b0 [ 71.745592][ C1] ? report_bug+0x3bc/0x580 [ 71.750234][ C1] ? handle_bug+0x3d/0x70 [ 71.754642][ C1] ? exc_invalid_op+0x17/0x40 [ 71.759632][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 71.764969][ C1] ? inet_sock_destruct+0x57e/0x8b0 [ 71.770300][ C1] ? inet_sock_destruct+0x6ee/0x8b0 [ 71.775663][ C1] ? inet_sock_destruct+0x6ef/0x8b0 [ 71.780899][ C1] ? inet6_cleanup_sock+0x113/0x210 [ 71.786251][ C1] ? inet6_cleanup_sock+0x210/0x210 [ 71.791787][ C1] ? rcu_core+0x817/0x1680 [ 71.796283][ C1] __sk_destruct+0x4d/0x740 [ 71.800851][ C1] ? rcu_core+0x817/0x1680 [ 71.805389][ C1] rcu_core+0x819/0x1680 [ 71.809693][ C1] ? rcutree_report_cpu_dead+0x4d0/0x4d0 [ 71.815431][ C1] __do_softirq+0x21a/0x8de [ 71.820087][ C1] ? __lock_text_end+0x3/0x3 [ 71.824765][ C1] irq_exit_rcu+0xb7/0x120 [ 71.829240][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 71.835087][ C1] [ 71.838064][ C1] [ 71.841000][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.847152][ C1] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 71.852692][ C1] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d a7 1b b9 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 71.872477][ C1] RSP: 0018:ffffc90000187d58 EFLAGS: 00000246 [ 71.878610][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a80fa07 [ 71.886650][ C1] RDX: 0000000000000001 RSI: ffff888014ec0800 RDI: ffff888014ec0864 [ 71.894802][ C1] RBP: ffff888014ec0864 R08: 0000000000000001 R09: ffffed1017326dbd [ 71.902926][ C1] R10: ffff8880b9936deb R11: 0000000000000000 R12: ffff8881416d6000 [ 71.911116][ C1] R13: ffffffff8db1cb00 R14: 0000000000000001 R15: 0000000000000000 [ 71.920833][ C1] ? ct_kernel_exit+0x137/0x190 [ 71.925846][ C1] acpi_idle_enter+0xc5/0x160 [ 71.930544][ C1] cpuidle_enter_state+0x83/0x500 [ 71.935657][ C1] ? mark_tsc_async_resets+0x50/0x50 [ 71.941005][ C1] cpuidle_enter+0x4e/0xa0 [ 71.945565][ C1] do_idle+0x319/0x400 [ 71.949761][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 71.954959][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 71.960892][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.966177][ C1] cpu_startup_entry+0x50/0x60 [ 71.970995][ C1] start_secondary+0x20e/0x2a0 [ 71.975842][ C1] ? set_cpu_sibling_map+0x1f50/0x1f50 [ 71.981468][ C1] secondary_startup_64_no_verify+0x166/0x16b [ 71.987575][ C1] [ 71.990673][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.998047][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.7.0-rc6-syzkaller-01632-ge9301af385e7 #0 [ 72.008281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.018421][ C1] Call Trace: [ 72.021716][ C1] [ 72.024548][ C1] dump_stack_lvl+0xd9/0x1b0 [ 72.029146][ C1] panic+0x6dc/0x790 [ 72.033041][ C1] ? panic_smp_self_stop+0xa0/0xa0 [ 72.038246][ C1] ? show_trace_log_lvl+0x363/0x4f0 [ 72.043578][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 72.048980][ C1] ? inet_sock_destruct+0x6ef/0x8b0 [ 72.054277][ C1] check_panic_on_warn+0xab/0xb0 [ 72.059217][ C1] __warn+0xf2/0x390 [ 72.063201][ C1] ? inet_sock_destruct+0x6ef/0x8b0 [ 72.068830][ C1] report_bug+0x3bc/0x580 [ 72.073362][ C1] handle_bug+0x3d/0x70 [ 72.077620][ C1] exc_invalid_op+0x17/0x40 [ 72.082113][ C1] asm_exc_invalid_op+0x1a/0x20 [ 72.086958][ C1] RIP: 0010:inet_sock_destruct+0x6ef/0x8b0 [ 72.092764][ C1] Code: 0f 0b 90 e9 fd fd ff ff e8 4e 27 7f f8 90 0f 0b 90 e9 33 fe ff ff e8 40 27 7f f8 90 0f 0b 90 e9 87 fd ff ff e8 32 27 7f f8 90 <0f> 0b 90 e9 8f fe ff ff e8 84 24 d6 f8 e9 68 fc ff ff 48 89 ef e8 [ 72.112553][ C1] RSP: 0018:ffffc900001f0da0 EFLAGS: 00010246 [ 72.118640][ C1] RAX: 0000000000000000 RBX: ffff88814b061a00 RCX: ffffffff890858ce [ 72.126627][ C1] RDX: ffff88801667bb80 RSI: ffffffff89085a3e RDI: 0000000000000005 [ 72.134598][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 72.142611][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88814b061a28 [ 72.150680][ C1] R13: ffff88814b061b60 R14: 0000000000000000 R15: 0000000000000003 [ 72.158879][ C1] ? inet_sock_destruct+0x57e/0x8b0 [ 72.164266][ C1] ? inet_sock_destruct+0x6ee/0x8b0 [ 72.169912][ C1] ? inet6_cleanup_sock+0x113/0x210 [ 72.175218][ C1] ? inet6_cleanup_sock+0x210/0x210 [ 72.180431][ C1] ? rcu_core+0x817/0x1680 [ 72.184882][ C1] __sk_destruct+0x4d/0x740 [ 72.189386][ C1] ? rcu_core+0x817/0x1680 [ 72.194015][ C1] rcu_core+0x819/0x1680 [ 72.198305][ C1] ? rcutree_report_cpu_dead+0x4d0/0x4d0 [ 72.203960][ C1] __do_softirq+0x21a/0x8de [ 72.208477][ C1] ? __lock_text_end+0x3/0x3 [ 72.213081][ C1] irq_exit_rcu+0xb7/0x120 [ 72.217504][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 72.223398][ C1] [ 72.226325][ C1] [ 72.229274][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.235513][ C1] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 72.240989][ C1] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d a7 1b b9 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 72.261139][ C1] RSP: 0018:ffffc90000187d58 EFLAGS: 00000246 [ 72.267735][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a80fa07 [ 72.275970][ C1] RDX: 0000000000000001 RSI: ffff888014ec0800 RDI: ffff888014ec0864 [ 72.284209][ C1] RBP: ffff888014ec0864 R08: 0000000000000001 R09: ffffed1017326dbd [ 72.292539][ C1] R10: ffff8880b9936deb R11: 0000000000000000 R12: ffff8881416d6000 [ 72.300532][ C1] R13: ffffffff8db1cb00 R14: 0000000000000001 R15: 0000000000000000 [ 72.308517][ C1] ? ct_kernel_exit+0x137/0x190 [ 72.313369][ C1] acpi_idle_enter+0xc5/0x160 [ 72.318050][ C1] cpuidle_enter_state+0x83/0x500 [ 72.323074][ C1] ? mark_tsc_async_resets+0x50/0x50 [ 72.328378][ C1] cpuidle_enter+0x4e/0xa0 [ 72.332922][ C1] do_idle+0x319/0x400 [ 72.336984][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 72.342005][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 72.347811][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.353110][ C1] cpu_startup_entry+0x50/0x60 [ 72.357886][ C1] start_secondary+0x20e/0x2a0 [ 72.362667][ C1] ? set_cpu_sibling_map+0x1f50/0x1f50 [ 72.368344][ C1] secondary_startup_64_no_verify+0x166/0x16b [ 72.374624][ C1] [ 72.377758][ C1] Kernel Offset: disabled [ 72.382147][ C1] Rebooting in 86400 seconds..