./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4268833370
<...>
Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
execve("./syz-executor4268833370", ["./syz-executor4268833370"], 0x7ffe9095b560 /* 10 vars */) = 0
brk(NULL) = 0x555561e24000
brk(0x555561e24d00) = 0x555561e24d00
arch_prctl(ARCH_SET_FS, 0x555561e24380) = 0
set_tid_address(0x555561e24650) = 5075
set_robust_list(0x555561e24660, 24) = 0
rseq(0x555561e24ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4268833370", 4096) = 28
getrandom("\xd5\x12\x10\x46\x6c\x36\x09\x43", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555561e24d00
brk(0x555561e45d00) = 0x555561e45d00
brk(0x555561e46000) = 0x555561e46000
mprotect(0x7f7bd68e3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_HASH, key_size=4, value_size=4095, max_entries=7, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address)
[ 74.601563][ T28] audit: type=1400 audit(1714109148.162:87): avc: denied { execmem } for pid=5075 comm="syz-executor426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.624874][ T28] audit: type=1400 audit(1714109148.182:88): avc: denied { map_create } for pid=5075 comm="syz-executor426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SYSCALL, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_ANY_ALIGNMENT|BPF_F_TEST_STATE_FREQ|BPF_F_SLEEPABLE|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4
[ 74.644309][ T28] audit: type=1400 audit(1714109148.192:89): avc: denied { map_read map_write } for pid=5075 comm="syz-executor426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 74.664473][ T28] audit: type=1400 audit(1714109148.212:90): avc: denied { prog_load } for pid=5075 comm="syz-executor426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 74.666451][ T5075] ------------[ cut here ]------------
[ 74.689402][ T5075] WARNING: CPU: 1 PID: 5075 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 74.689521][ T28] audit: type=1400 audit(1714109148.212:91): avc: denied { bpf } for pid=5075 comm="syz-executor426" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 74.699621][ T5075] Modules linked in:
[ 74.724291][ T5075] CPU: 1 PID: 5075 Comm: syz-executor426 Not tainted 6.9.0-rc5-syzkaller-00053-ge33c4963bf53 #0
[ 74.734993][ T28] audit: type=1400 audit(1714109148.222:92): avc: denied { perfmon } for pid=5075 comm="syz-executor426" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 74.735056][ T28] audit: type=1400 audit(1714109148.232:93): avc: denied { prog_run } for pid=5075 comm="syz-executor426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 74.775759][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 74.785873][ T5075] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 74.792224][ T5075] Code: 41 5c 41 5d ff e0 cc 66 90 e8 24 8f e5 ff e8 6f 12 cb ff 31 ff 41 89 c4 89 c6 e8 f3 89 e5 ff 45 85 e4 75 8c e8 09 8f e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 db b7 40 00 eb 93 e8 d4 b7 40 00 eb ae
[ 74.811952][ T5075] RSP: 0018:ffffc90003187a80 EFLAGS: 00010293
[ 74.818079][ T5075] RAX: 0000000000000000 RBX: ffff88801b299000 RCX: ffffffff81a8333d
[ 74.826127][ T5075] RDX: ffff888026ff5a00 RSI: ffffffff81a83347 RDI: 0000000000000005
[ 74.834122][ T5075] RBP: 0000000000500100 R08: 0000000000000005 R09: 0000000000000000
[ 74.842147][ T5075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 74.850169][ T5075] R13: ffffc90003187b38 R14: 0000000000000000 R15: 0000000000000000
[ 74.858180][ T5075] FS: 0000555561e24380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[ 74.867164][ T5075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.873738][ T5075] CR2: 00005606a936e0c8 CR3: 000000007ab28000 CR4: 00000000003506f0
[ 74.881740][ T5075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.889752][ T5075] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.897761][ T5075] Call Trace:
[ 74.901050][ T5075]
[ 74.903969][ T5075] ? show_regs+0x8c/0xa0
[ 74.908244][ T5075] ? __warn+0xe5/0x3c0
[ 74.912325][ T5075] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 74.918085][ T5075] ? report_bug+0x3c0/0x580
[ 74.922616][ T5075] ? handle_bug+0x3d/0x70
[ 74.926980][ T5075] ? exc_invalid_op+0x17/0x50
[ 74.931673][ T5075] ? asm_exc_invalid_op+0x1a/0x20
[ 74.936730][ T5075] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 74.942464][ T5075] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 74.948218][ T5075] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 74.953952][ T5075] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 74.960253][ T5075] ___bpf_prog_run+0x3e51/0xabd0
[ 74.965247][ T5075] __bpf_prog_run32+0xc1/0x100
[ 74.970038][ T5075] ? __pfx___bpf_prog_run32+0x10/0x10
[ 74.975497][ T5075] ? __pfx_lock_acquire+0x10/0x10
[ 74.980560][ T5075] ? __pfx___cant_migrate+0x10/0x10
[ 74.985817][ T5075] ? migrate_disable+0x106/0x160
[ 74.990777][ T5075] bpf_prog_test_run_syscall+0x3ae/0x770
[ 74.996451][ T5075] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 75.002619][ T5075] ? __fget_light+0x176/0x210
[ 75.007339][ T5075] ? __bpf_prog_get+0xa0/0x2f0
[ 75.012117][ T5075] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 75.018314][ T5075] __sys_bpf+0xd56/0x4b40
[ 75.022672][ T5075] ? __pfx_lock_acquire+0x10/0x10
[ 75.027750][ T5075] ? __pfx___sys_bpf+0x10/0x10
[ 75.032581][ T5075] ? do_raw_spin_lock+0x12d/0x2c0
[ 75.037657][ T5075] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 75.043042][ T5075] ? cgroup_update_frozen+0x144/0x6b0
[ 75.048450][ T5075] ? ptrace_stop.part.0+0x722/0x940
[ 75.053668][ T5075] ? _raw_spin_unlock_irq+0x23/0x50
[ 75.058907][ T5075] ? lockdep_hardirqs_on+0x7c/0x110
[ 75.064118][ T5075] __x64_sys_bpf+0x78/0xc0
[ 75.068582][ T5075] do_syscall_64+0xcf/0x260
[ 75.073102][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.079043][ T5075] RIP: 0033:0x7f7bd6870669
[ 75.083467][ T5075] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 75.103110][ T5075] RSP: 002b:00007ffc4a73bd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 75.111590][ T5075] RAX: ffffffffffffffda RBX: 00007ffc4a73bf18 RCX: 00007f7bd6870669
[ 75.119619][ T5075] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 75.127639][ T5075] RBP: 00007f7bd68e3610 R08: 00007ffc4a73bf18 R09: 00007ffc4a73bf18
[ 75.135668][ T5075] R10: 00007ffc4a73bf18 R11: 0000000000000246 R12: 0000000000000001
[ 75.143646][ T5075] R13: 00007ffc4a73bf08 R14: 0000000000000001 R15: 0000000000000001
[ 75.151649][ T5075]
[ 75.154711][ T5075] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.161988][ T5075] CPU: 1 PID: 5075 Comm: syz-executor426 Not tainted 6.9.0-rc5-syzkaller-00053-ge33c4963bf53 #0
[ 75.172391][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 75.182431][ T5075] Call Trace:
[ 75.185698][ T5075]
[ 75.188616][ T5075] dump_stack_lvl+0x3d/0x1f0
[ 75.193201][ T5075] panic+0x6f5/0x7a0
[ 75.197089][ T5075] ? __pfx_panic+0x10/0x10
[ 75.201499][ T5075] ? show_trace_log_lvl+0x363/0x500
[ 75.206692][ T5075] ? check_panic_on_warn+0x1f/0xb0
[ 75.211786][ T5075] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 75.217491][ T5075] check_panic_on_warn+0xab/0xb0
[ 75.222415][ T5075] __warn+0xf1/0x3c0
[ 75.226293][ T5075] ? bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 75.231999][ T5075] report_bug+0x3c0/0x580
[ 75.236334][ T5075] handle_bug+0x3d/0x70
[ 75.240483][ T5075] exc_invalid_op+0x17/0x50
[ 75.244972][ T5075] asm_exc_invalid_op+0x1a/0x20
[ 75.249805][ T5075] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0
[ 75.256120][ T5075] Code: 41 5c 41 5d ff e0 cc 66 90 e8 24 8f e5 ff e8 6f 12 cb ff 31 ff 41 89 c4 89 c6 e8 f3 89 e5 ff 45 85 e4 75 8c e8 09 8f e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 db b7 40 00 eb 93 e8 d4 b7 40 00 eb ae
[ 75.275721][ T5075] RSP: 0018:ffffc90003187a80 EFLAGS: 00010293
[ 75.281775][ T5075] RAX: 0000000000000000 RBX: ffff88801b299000 RCX: ffffffff81a8333d
[ 75.289730][ T5075] RDX: ffff888026ff5a00 RSI: ffffffff81a83347 RDI: 0000000000000005
[ 75.297683][ T5075] RBP: 0000000000500100 R08: 0000000000000005 R09: 0000000000000000
[ 75.305636][ T5075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 75.313590][ T5075] R13: ffffc90003187b38 R14: 0000000000000000 R15: 0000000000000000
[ 75.321548][ T5075] ? bpf_map_lookup_percpu_elem+0x9d/0xc0
[ 75.327258][ T5075] ? bpf_map_lookup_percpu_elem+0xa7/0xc0
[ 75.332966][ T5075] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10
[ 75.339198][ T5075] ___bpf_prog_run+0x3e51/0xabd0
[ 75.344128][ T5075] __bpf_prog_run32+0xc1/0x100
[ 75.348877][ T5075] ? __pfx___bpf_prog_run32+0x10/0x10
[ 75.354231][ T5075] ? __pfx_lock_acquire+0x10/0x10
[ 75.359248][ T5075] ? __pfx___cant_migrate+0x10/0x10
[ 75.364435][ T5075] ? migrate_disable+0x106/0x160
[ 75.369364][ T5075] bpf_prog_test_run_syscall+0x3ae/0x770
[ 75.374989][ T5075] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 75.381129][ T5075] ? __fget_light+0x176/0x210
[ 75.385796][ T5075] ? __bpf_prog_get+0xa0/0x2f0
[ 75.390548][ T5075] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[ 75.396688][ T5075] __sys_bpf+0xd56/0x4b40
[ 75.401006][ T5075] ? __pfx_lock_acquire+0x10/0x10
[ 75.406021][ T5075] ? __pfx___sys_bpf+0x10/0x10
[ 75.410773][ T5075] ? do_raw_spin_lock+0x12d/0x2c0
[ 75.415780][ T5075] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 75.421136][ T5075] ? cgroup_update_frozen+0x144/0x6b0
[ 75.426497][ T5075] ? ptrace_stop.part.0+0x722/0x940
[ 75.431687][ T5075] ? _raw_spin_unlock_irq+0x23/0x50
[ 75.436877][ T5075] ? lockdep_hardirqs_on+0x7c/0x110
[ 75.442059][ T5075] __x64_sys_bpf+0x78/0xc0
[ 75.446465][ T5075] do_syscall_64+0xcf/0x260
[ 75.450955][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.456837][ T5075] RIP: 0033:0x7f7bd6870669
[ 75.461246][ T5075] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 75.480836][ T5075] RSP: 002b:00007ffc4a73bd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 75.489232][ T5075] RAX: ffffffffffffffda RBX: 00007ffc4a73bf18 RCX: 00007f7bd6870669
[ 75.497188][ T5075] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a
[ 75.505140][ T5075] RBP: 00007f7bd68e3610 R08: 00007ffc4a73bf18 R09: 00007ffc4a73bf18
[ 75.513099][ T5075] R10: 00007ffc4a73bf18 R11: 0000000000000246 R12: 0000000000000001
[ 75.521054][ T5075] R13: 00007ffc4a73bf08 R14: 0000000000000001 R15: 0000000000000001
[ 75.529010][ T5075]
[ 75.532314][ T5075] Kernel Offset: disabled
[ 75.536649][ T5075] Rebooting in 86400 seconds..