./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1761396964 <...> [ 63.331097][ T29] audit: type=1400 audit(1726661826.191:83): avc: denied { read } for pid=4660 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 87.279042][ T8] cfg80211: failed to load regulatory.db [ 88.260617][ T29] audit: type=1400 audit(1726661851.121:84): avc: denied { write } for pid=5214 comm="sftp-server" path="pipe:[2791]" dev="pipefs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 88.288643][ T29] audit: type=1400 audit(1726661851.151:85): avc: denied { append } for pid=4660 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.310890][ T29] audit: type=1400 audit(1726661851.151:86): avc: denied { open } for pid=4660 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.333470][ T29] audit: type=1400 audit(1726661851.151:87): avc: denied { getattr } for pid=4660 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. execve("./syz-executor1761396964", ["./syz-executor1761396964"], 0x7ffe3535a2e0 /* 10 vars */) = 0 brk(NULL) = 0x55555cd16000 brk(0x55555cd16d00) = 0x55555cd16d00 arch_prctl(ARCH_SET_FS, 0x55555cd16380) = 0 set_tid_address(0x55555cd16650) = 5234 set_robust_list(0x55555cd16660, 24) = 0 rseq(0x55555cd16ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1761396964", 4096) = 28 getrandom("\x7c\xdb\x6c\xa6\x85\x39\x2d\xfc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555cd16d00 brk(0x55555cd37d00) = 0x55555cd37d00 brk(0x55555cd38000) = 0x55555cd38000 mprotect(0x7fcbd98eb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 executing program write(1, "executing program\n", 18) = 18 [ 105.227427][ T29] audit: type=1400 audit(1726661868.091:88): avc: denied { execmem } for pid=5234 comm="syz-executor176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.250770][ T29] audit: type=1400 audit(1726661868.111:89): avc: denied { prog_load } for pid=5234 comm="syz-executor176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.255738][ T5234] ------------[ cut here ]------------ [ 105.270249][ T29] audit: type=1400 audit(1726661868.111:90): avc: denied { bpf } for pid=5234 comm="syz-executor176" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.275639][ T5234] UBSAN: array-index-out-of-bounds in ./kernel/bpf/core.c:2364:29 [ 105.296484][ T29] audit: type=1400 audit(1726661868.111:91): avc: denied { perfmon } for pid=5234 comm="syz-executor176" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.325519][ T5234] index 16 is out of range for type ' *[16]' [ 105.332518][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz-executor176 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 105.343319][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.353366][ T5234] Call Trace: [ 105.356630][ T5234] [ 105.359543][ T5234] dump_stack_lvl+0x16c/0x1f0 [ 105.364230][ T5234] __ubsan_handle_out_of_bounds+0x110/0x150 [ 105.370123][ T5234] bpf_prog_select_runtime+0x665/0x6f0 [ 105.375567][ T5234] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 105.381009][ T5234] bpf_prog_load+0xf0f/0x2660 [ 105.385674][ T5234] ? __pfx_bpf_prog_load+0x10/0x10 [ 105.390768][ T5234] ? avc_has_perm+0x198/0x1c0 [ 105.395436][ T5234] ? selinux_bpf+0xde/0x130 [ 105.399921][ T5234] __sys_bpf+0x8e3/0x49c0 [ 105.404231][ T5234] ? __pfx_lock_acquire+0x10/0x10 [ 105.409243][ T5234] ? ptrace_stop.part.0+0x3a0/0x940 [ 105.414426][ T5234] ? __pfx___sys_bpf+0x10/0x10 [ 105.419172][ T5234] ? do_raw_spin_lock+0x12d/0x2c0 [ 105.424180][ T5234] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.429535][ T5234] ? cgroup_update_frozen+0x14d/0x6a0 [ 105.434897][ T5234] ? ptrace_stop.part.0+0x722/0x940 [ 105.440089][ T5234] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.445275][ T5234] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.450463][ T5234] __x64_sys_bpf+0x78/0xc0 [ 105.454864][ T5234] do_syscall_64+0xcd/0x250 [ 105.459349][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.465230][ T5234] RIP: 0033:0x7fcbd98783e9 [ 105.469636][ T5234] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.489222][ T5234] RSP: 002b:00007fff8b407468 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.497635][ T5234] RAX: ffffffffffffffda RBX: 00007fff8b407648 RCX: 00007fcbd98783e9 [ 105.505586][ T5234] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 105.513536][ T5234] RBP: 00007fcbd98eb610 R08: 0000000000000000 R09: 0000000000000000 [ 105.521502][ T5234] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 105.529453][ T5234] R13: 00007fff8b407638 R14: 0000000000000001 R15: 0000000000000001 [ 105.537413][ T5234] [ 105.541106][ T5234] ---[ end trace ]--- [ 105.545104][ T5234] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 105.552300][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz-executor176 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 105.563057][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.573106][ T5234] Call Trace: [ 105.576383][ T5234] [ 105.579309][ T5234] dump_stack_lvl+0x3d/0x1f0 [ 105.583907][ T5234] panic+0x6dc/0x7c0 [ 105.587811][ T5234] ? __pfx_panic+0x10/0x10 [ 105.592234][ T5234] ? __pfx__printk+0x10/0x10 [ 105.596832][ T5234] ? check_panic_on_warn+0x1f/0xb0 [ 105.601954][ T5234] check_panic_on_warn+0xab/0xb0 [ 105.606899][ T5234] __ubsan_handle_out_of_bounds+0x137/0x150 [ 105.612809][ T5234] bpf_prog_select_runtime+0x665/0x6f0 [ 105.618269][ T5234] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 105.623733][ T5234] bpf_prog_load+0xf0f/0x2660 [ 105.628418][ T5234] ? __pfx_bpf_prog_load+0x10/0x10 [ 105.633533][ T5234] ? avc_has_perm+0x198/0x1c0 [ 105.638229][ T5234] ? selinux_bpf+0xde/0x130 [ 105.642742][ T5234] __sys_bpf+0x8e3/0x49c0 [ 105.647071][ T5234] ? __pfx_lock_acquire+0x10/0x10 [ 105.652104][ T5234] ? ptrace_stop.part.0+0x3a0/0x940 [ 105.657305][ T5234] ? __pfx___sys_bpf+0x10/0x10 [ 105.662157][ T5234] ? do_raw_spin_lock+0x12d/0x2c0 [ 105.667189][ T5234] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.672558][ T5234] ? cgroup_update_frozen+0x14d/0x6a0 [ 105.677952][ T5234] ? ptrace_stop.part.0+0x722/0x940 [ 105.683179][ T5234] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.688386][ T5234] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.693632][ T5234] __x64_sys_bpf+0x78/0xc0 [ 105.698054][ T5234] do_syscall_64+0xcd/0x250 [ 105.702560][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.708460][ T5234] RIP: 0033:0x7fcbd98783e9 [ 105.712873][ T5234] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.732477][ T5234] RSP: 002b:00007fff8b407468 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.740892][ T5234] RAX: ffffffffffffffda RBX: 00007fff8b407648 RCX: 00007fcbd98783e9 [ 105.748860][ T5234] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 105.756826][ T5234] RBP: 00007fcbd98eb610 R08: 0000000000000000 R09: 0000000000000000 [ 105.764791][ T5234] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 105.772763][ T5234] R13: 00007fff8b407638 R14: 0000000000000001 R15: 0000000000000001 [ 105.780744][ T5234] [ 105.783978][ T5234] Kernel Offset: disabled [ 105.788312][ T5234] Rebooting in 86400 seconds..