./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor35672953 <...> Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. execve("./syz-executor35672953", ["./syz-executor35672953"], 0x7ffc5082fdf0 /* 10 vars */) = 0 brk(NULL) = 0x5555566ea000 brk(0x5555566eac40) = 0x5555566eac40 arch_prctl(ARCH_SET_FS, 0x5555566ea300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor35672953", 4096) = 26 brk(0x55555670bc40) = 0x55555670bc40 brk(0x55555670c000) = 0x55555670c000 mprotect(0x7f91ab6b3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=128, value_size=8, max_entries=129, map_flags=BPF_F_NO_PREALLOC|BPF_F_RDONLY_PROG, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 51.004517][ T27] audit: type=1400 audit(1662262416.414:75): avc: denied { execmem } for pid=3614 comm="syz-executor356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.012642][ T3614] ------------[ cut here ]------------ [ 51.029742][ T3614] trace type BPF program uses run-time allocation [ 51.036257][ T27] audit: type=1400 audit(1662262416.424:76): avc: denied { bpf } for pid=3614 comm="syz-executor356" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.036266][ T3614] WARNING: CPU: 1 PID: 3614 at kernel/bpf/verifier.c:12624 bpf_check+0xb55c/0xc7b0 [ 51.057071][ T27] audit: type=1400 audit(1662262416.424:77): avc: denied { map_create } for pid=3614 comm="syz-executor356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.067169][ T3614] Modules linked in: [ 51.085836][ T27] audit: type=1400 audit(1662262416.424:78): avc: denied { map_read map_write } for pid=3614 comm="syz-executor356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.090113][ T3614] CPU: 1 PID: 3614 Comm: syz-executor356 Not tainted 6.0.0-rc3-syzkaller-00299-gd895ec7938c4 #0 [ 51.109849][ T27] audit: type=1400 audit(1662262416.424:79): avc: denied { prog_load } for pid=3614 comm="syz-executor356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.109928][ T27] audit: type=1400 audit(1662262416.424:80): avc: denied { perfmon } for pid=3614 comm="syz-executor356" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.121002][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 51.171787][ T3614] RIP: 0010:bpf_check+0xb55c/0xc7b0 [ 51.176987][ T3614] Code: e9 72 a0 ff ff 4c 89 ef e8 41 85 36 00 e9 c1 5f ff ff e8 57 e5 ea ff 48 c7 c7 60 6a f4 89 c6 05 9e a3 38 0c 01 e8 01 c3 a9 07 <0f> 0b e9 bb 9f ff ff e8 28 85 36 00 e9 ca 62 ff ff e8 2e e5 ea ff [ 51.196635][ T3614] RSP: 0018:ffffc90002f77868 EFLAGS: 00010286 [ 51.202779][ T3614] RAX: 0000000000000000 RBX: ffff888074a87800 RCX: 0000000000000000 [ 51.210793][ T3614] RDX: ffff88802618e200 RSI: ffffffff81611e08 RDI: fffff520005eeeff [ 51.218863][ T3614] RBP: ffffc90002f77b10 R08: 0000000000000005 R09: 0000000000000000 [ 51.226824][ T3614] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000002 [ 51.234832][ T3614] R13: ffffc90000376059 R14: ffffc90000376058 R15: ffff88807e9b4000 [ 51.242834][ T3614] FS: 00005555566ea300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.251797][ T3614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.258412][ T3614] CR2: 0000564bc425a108 CR3: 0000000074a54000 CR4: 00000000003506e0 [ 51.266374][ T3614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.274377][ T3614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.282383][ T3614] Call Trace: [ 51.285654][ T3614] [ 51.288621][ T3614] ? bpf_get_btf_vmlinux+0x10/0x10 [ 51.293762][ T3614] ? find_held_lock+0x2d/0x110 [ 51.298663][ T3614] ? bpf_prog_load+0x130e/0x2220 [ 51.303617][ T3614] ? lock_downgrade+0x6e0/0x6e0 [ 51.308516][ T3614] ? __might_fault+0xd1/0x170 [ 51.313203][ T3614] ? lock_downgrade+0x6e0/0x6e0 [ 51.318110][ T3614] ? ktime_get_with_offset+0x3f2/0x500 [ 51.323608][ T3614] ? memset+0x20/0x40 [ 51.327678][ T3614] ? bpf_obj_name_cpy+0x144/0x1a0 [ 51.332729][ T3614] bpf_prog_load+0x13cb/0x2220 [ 51.337583][ T3614] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 51.343492][ T3614] ? avc_has_perm+0x107/0x1b0 [ 51.348390][ T3614] ? avc_has_perm_noaudit+0x390/0x390 [ 51.353778][ T3614] ? selinux_bpf+0xe2/0x120 [ 51.358316][ T3614] __sys_bpf+0x1e7e/0x6130 [ 51.362748][ T3614] ? lock_release+0x780/0x780 [ 51.367414][ T3614] ? bpf_perf_link_attach+0x520/0x520 [ 51.372839][ T3614] ? do_raw_spin_lock+0x120/0x2a0 [ 51.377911][ T3614] ? rwlock_bug.part.0+0x90/0x90 [ 51.382859][ T3614] ? _raw_spin_lock_irq+0x41/0x50 [ 51.387915][ T3614] ? find_held_lock+0x2d/0x110 [ 51.392696][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.397939][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.403148][ T3614] ? lockdep_hardirqs_on+0x79/0x100 [ 51.408396][ T3614] __x64_sys_bpf+0x75/0xb0 [ 51.412825][ T3614] do_syscall_64+0x35/0xb0 [ 51.417246][ T3614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.423183][ T3614] RIP: 0033:0x7f91ab646d59 [ 51.427780][ T3614] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.447454][ T3614] RSP: 002b:00007ffeaee7e798 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.455894][ T3614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91ab646d59 [ 51.463930][ T3614] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 51.471964][ T3614] RBP: 00007f91ab60af00 R08: 0000000000000000 R09: 0000000000000000 [ 51.479999][ T3614] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f91ab60af90 [ 51.488004][ T3614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.495969][ T3614] [ 51.499029][ T3614] Kernel panic - not syncing: panic_on_warn set ... [ 51.505724][ T3614] CPU: 1 PID: 3614 Comm: syz-executor356 Not tainted 6.0.0-rc3-syzkaller-00299-gd895ec7938c4 #0 [ 51.516130][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 51.526179][ T3614] Call Trace: [ 51.529450][ T3614] [ 51.532373][ T3614] dump_stack_lvl+0xcd/0x134 [ 51.536961][ T3614] panic+0x2c8/0x627 [ 51.540850][ T3614] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.546822][ T3614] ? __warn.cold+0x248/0x2c4 [ 51.551398][ T3614] ? bpf_check+0xb55c/0xc7b0 [ 51.555976][ T3614] __warn.cold+0x259/0x2c4 [ 51.560404][ T3614] ? bpf_check+0xb55c/0xc7b0 [ 51.564995][ T3614] report_bug+0x1bc/0x210 [ 51.569320][ T3614] handle_bug+0x3c/0x60 [ 51.573477][ T3614] exc_invalid_op+0x14/0x40 [ 51.577976][ T3614] asm_exc_invalid_op+0x16/0x20 [ 51.582824][ T3614] RIP: 0010:bpf_check+0xb55c/0xc7b0 [ 51.588016][ T3614] Code: e9 72 a0 ff ff 4c 89 ef e8 41 85 36 00 e9 c1 5f ff ff e8 57 e5 ea ff 48 c7 c7 60 6a f4 89 c6 05 9e a3 38 0c 01 e8 01 c3 a9 07 <0f> 0b e9 bb 9f ff ff e8 28 85 36 00 e9 ca 62 ff ff e8 2e e5 ea ff [ 51.607628][ T3614] RSP: 0018:ffffc90002f77868 EFLAGS: 00010286 [ 51.613714][ T3614] RAX: 0000000000000000 RBX: ffff888074a87800 RCX: 0000000000000000 [ 51.621697][ T3614] RDX: ffff88802618e200 RSI: ffffffff81611e08 RDI: fffff520005eeeff [ 51.629672][ T3614] RBP: ffffc90002f77b10 R08: 0000000000000005 R09: 0000000000000000 [ 51.637648][ T3614] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000002 [ 51.645619][ T3614] R13: ffffc90000376059 R14: ffffc90000376058 R15: ffff88807e9b4000 [ 51.653594][ T3614] ? vprintk+0x88/0x90 [ 51.657674][ T3614] ? bpf_check+0xb55c/0xc7b0 [ 51.662282][ T3614] ? bpf_get_btf_vmlinux+0x10/0x10 [ 51.667406][ T3614] ? find_held_lock+0x2d/0x110 [ 51.672184][ T3614] ? bpf_prog_load+0x130e/0x2220 [ 51.677128][ T3614] ? lock_downgrade+0x6e0/0x6e0 [ 51.681984][ T3614] ? __might_fault+0xd1/0x170 [ 51.686681][ T3614] ? lock_downgrade+0x6e0/0x6e0 [ 51.691537][ T3614] ? ktime_get_with_offset+0x3f2/0x500 [ 51.697005][ T3614] ? memset+0x20/0x40 [ 51.700994][ T3614] ? bpf_obj_name_cpy+0x144/0x1a0 [ 51.706026][ T3614] bpf_prog_load+0x13cb/0x2220 [ 51.710796][ T3614] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 51.716697][ T3614] ? avc_has_perm+0x107/0x1b0 [ 51.721378][ T3614] ? avc_has_perm_noaudit+0x390/0x390 [ 51.726856][ T3614] ? selinux_bpf+0xe2/0x120 [ 51.731365][ T3614] __sys_bpf+0x1e7e/0x6130 [ 51.735785][ T3614] ? lock_release+0x780/0x780 [ 51.740474][ T3614] ? bpf_perf_link_attach+0x520/0x520 [ 51.745850][ T3614] ? do_raw_spin_lock+0x120/0x2a0 [ 51.750881][ T3614] ? rwlock_bug.part.0+0x90/0x90 [ 51.755821][ T3614] ? _raw_spin_lock_irq+0x41/0x50 [ 51.760853][ T3614] ? find_held_lock+0x2d/0x110 [ 51.765637][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.770842][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.776046][ T3614] ? lockdep_hardirqs_on+0x79/0x100 [ 51.781259][ T3614] __x64_sys_bpf+0x75/0xb0 [ 51.785693][ T3614] do_syscall_64+0x35/0xb0 [ 51.790120][ T3614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.796020][ T3614] RIP: 0033:0x7f91ab646d59 [ 51.800439][ T3614] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.820053][ T3614] RSP: 002b:00007ffeaee7e798 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.828470][ T3614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91ab646d59 [ 51.836446][ T3614] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 51.844430][ T3614] RBP: 00007f91ab60af00 R08: 0000000000000000 R09: 0000000000000000 [ 51.852403][ T3614] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f91ab60af90 [ 51.860375][ T3614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.868348][ T3614] [ 51.871543][ T3614] Kernel Offset: disabled [ 51.875911][ T3614] Rebooting in 86400 seconds..