./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2124461440 <...> Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. execve("./syz-executor2124461440", ["./syz-executor2124461440"], 0x7ffdc99b4fa0 /* 10 vars */) = 0 brk(NULL) = 0x5555558cf000 brk(0x5555558cfd00) = 0x5555558cfd00 arch_prctl(ARCH_SET_FS, 0x5555558cf380) = 0 set_tid_address(0x5555558cf650) = 356 set_robust_list(0x5555558cf660, 24) = 0 rseq(0x5555558cfca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2124461440", 4096) = 28 getrandom("\xa2\x26\x90\xb5\xd4\x1a\xfd\xa4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555558cfd00 brk(0x5555558f0d00) = 0x5555558f0d00 brk(0x5555558f1000) = 0x5555558f1000 mprotect(0x7f7905325000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SCHED_CLS, insn_cnt=14, insns=0x20000bc0, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 bpf(BPF_OBJ_GET_INFO_BY_FD, {info={bpf_fd=3, info_len=192, info=0x20000640}}, 16) = 0 bpf(BPF_PROG_GET_FD_BY_ID, {prog_id=1, next_id=0}, 4) = 4 [ 23.638610][ T23] audit: type=1400 audit(1705016485.430:66): avc: denied { execmem } for pid=356 comm="syz-executor212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.660319][ T23] audit: type=1400 audit(1705016485.450:67): avc: denied { prog_load } for pid=356 comm="syz-executor212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.678544][ T356] kasan: CONFIG_KASAN_INLINE enabled [ 23.679737][ T23] audit: type=1400 audit(1705016485.450:68): avc: denied { prog_run } for pid=356 comm="syz-executor212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.684509][ T356] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 23.711444][ T356] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 23.718356][ T356] CPU: 1 PID: 356 Comm: syz-executor212 Not tainted 5.4.259-syzkaller #0 [ 23.726594][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 23.736499][ T356] RIP: 0010:bpf_skb_cgroup_id+0x10f/0x190 [ 23.742116][ T356] Code: c7 a0 02 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c0 58 0c fe bb 40 01 00 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 a2 58 0c fe 48 8b 1b 48 83 c3 68 [ 23.761488][ T356] RSP: 0018:ffff8881dce6f530 EFLAGS: 00010206 [ 23.767388][ T356] RAX: 0000000000000028 RBX: 0000000000000140 RCX: ffff8881dce65e80 [ 23.775399][ T356] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 23.783186][ T356] RBP: ffff8881dce6f690 R08: ffffffff8387bc86 R09: ffff8881dce6f760 [ 23.790999][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.798814][ T356] R13: fffffffa7d0c8213 R14: ffff8881dcee5012 R15: ffff8881dcee52a0 [ 23.806621][ T356] FS: 00005555558cf380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.815390][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.821909][ T356] CR2: 000000000061ba0c CR3: 00000001dcd19000 CR4: 00000000003406a0 [ 23.829714][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.838130][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.845941][ T356] Call Trace: [ 23.849076][ T356] ? __die+0xb4/0x100 [ 23.852901][ T356] ? die+0x26/0x50 [ 23.856445][ T356] ? do_general_protection+0x266/0x3c0 [ 23.861853][ T356] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.868098][ T356] ? do_trap+0x340/0x340 [ 23.872158][ T356] ? stack_trace_save+0x118/0x1c0 [ 23.877192][ T356] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.883093][ T356] ? general_protection+0x28/0x30 [ 23.887962][ T356] ? bpf_skb_cgroup_id+0xd6/0x190 [ 23.892842][ T356] ? bpf_skb_cgroup_id+0x10f/0x190 [ 23.897784][ T356] ? 0xffffffff81000000 [ 23.901756][ T356] ? ktime_get+0xf9/0x130 [ 23.905918][ T356] ? bpf_test_run+0x2ae/0x6c0 [ 23.910430][ T356] ? bpf_ctx_init+0x1a0/0x1a0 [ 23.914941][ T356] ? build_skb+0x259/0x440 [ 23.919197][ T356] ? bpf_prog_test_run_skb+0x73c/0xf00 [ 23.924490][ T356] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 23.930225][ T356] ? __bpf_prog_get+0x287/0x310 [ 23.934905][ T356] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 23.940548][ T356] ? __se_sys_bpf+0x2e37/0xbcb0 [ 23.945235][ T356] ? check_preemption_disabled+0x9f/0x320 [ 23.950787][ T356] ? debug_smp_processor_id+0x20/0x20 [ 23.956022][ T356] ? check_preemption_disabled+0x9f/0x320 [ 23.961556][ T356] ? check_preemption_disabled+0x9f/0x320 [ 23.967108][ T356] ? debug_smp_processor_id+0x20/0x20 [ 23.972334][ T356] ? debug_smp_processor_id+0x20/0x20 [ 23.977526][ T356] ? __x64_sys_bpf+0x80/0x80 [ 23.981950][ T356] ? switch_mm_irqs_off+0x6b5/0xab0 [ 23.986983][ T356] ? _raw_spin_unlock_irq+0x4a/0x60 [ 23.992013][ T356] ? finish_task_switch+0x130/0x590 [ 23.997056][ T356] ? __schedule+0xb0d/0x1320 [ 24.001474][ T356] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 24.006421][ T356] ? _raw_spin_lock_irqsave+0x210/0x210 [ 24.011803][ T356] ? cgroup_update_frozen+0x157/0xab0 [ 24.017012][ T356] ? cgroup_update_frozen+0x157/0xab0 [ 24.022218][ T356] ? cgroup_leave_frozen+0x13c/0x290 [ 24.027426][ T356] ? ptrace_stop+0x6ee/0xa30 [ 24.031939][ T356] ? _raw_spin_unlock_irq+0x4a/0x60 [ 24.037067][ T356] ? ptrace_notify+0x24c/0x350 [ 24.041740][ T356] ? do_notify_parent+0xa10/0xa10 [ 24.046550][ T356] ? check_preemption_disabled+0x153/0x320 [ 24.052254][ T356] ? syscall_trace_enter+0x650/0x940 [ 24.057287][ T356] ? do_syscall_64+0xca/0x1c0 [ 24.061811][ T356] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 24.068037][ T356] Modules linked in: [ 24.071829][ T356] ---[ end trace 8c8e16eec857c25f ]--- [ 24.077081][ T356] RIP: 0010:bpf_skb_cgroup_id+0x10f/0x190 [ 24.083612][ T356] Code: c7 a0 02 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c0 58 0c fe bb 40 01 00 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 a2 58 0c fe 48 8b 1b 48 83 c3 68 [ 24.103137][ T356] RSP: 0018:ffff8881dce6f530 EFLAGS: 00010206 [ 24.109005][ T356] RAX: 0000000000000028 RBX: 0000000000000140 RCX: ffff8881dce65e80 [ 24.116821][ T356] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 24.124624][ T356] RBP: ffff8881dce6f690 R08: ffffffff8387bc86 R09: ffff8881dce6f760 [ 24.132559][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 24.140343][ T356] R13: fffffffa7d0c8213 R14: ffff8881dcee5012 R15: ffff8881dcee52a0 [ 24.148151][ T356] FS: 00005555558cf380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.157254][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.163710][ T356] CR2: 000000000061ba0c CR3: 00000001dcd19000 CR4: 00000000003406a0 [ 24.171725][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.179726][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.187690][ T356] Kernel panic - not syncing: Fatal exception [ 24.193725][ T356] Kernel Offset: disabled [ 24.197839][ T356] Rebooting in 86400 seconds..