./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2274825625 <...> Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. execve("./syz-executor2274825625", ["./syz-executor2274825625"], 0x7fffdded25a0 /* 10 vars */) = 0 brk(NULL) = 0x555590a1c000 brk(0x555590a1ce00) = 0x555590a1ce00 arch_prctl(ARCH_SET_FS, 0x555590a1c480) = 0 set_tid_address(0x555590a1c750) = 5855 set_robust_list(0x555590a1c760, 24) = 0 rseq(0x555590a1cda0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2274825625", 4096) = 28 getrandom("\xc5\x56\x42\xa7\xec\xe4\x7a\x2b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555590a1ce00 brk(0x555590a3de00) = 0x555590a3de00 brk(0x555590a3e000) = 0x555590a3e000 mprotect(0x7f2c735b1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f2c7350e2b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c73515470}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f2c7350e2b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f2c73515470}, NULL, 8) = 0 executing program write(1, "executing program\n", 18) = 18 perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=240, sample_period=0, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, 0) = 3 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=5, insns=0x20000280, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_SOCK_CREATE, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 148) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_TRACEPOINT, insn_cnt=5, insns=0x20000280, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = 4 ioctl(3, PERF_EVENT_IOC_SET_BPF, 4Connection to 10.128.1.26 closed by remote host. [ 81.651104][ T5855] [ 81.653520][ T5855] ============================= [ 81.658517][ T5855] [ BUG: Invalid wait context ] [ 81.663514][ T5855] 6.12.0-syzkaller-g45e04eb4d9d8 #0 Not tainted [ 81.669787][ T5855] ----------------------------- [ 81.675282][ T5855] syz-executor227/5855 is trying to lock: [ 81.681037][ T5855] ffff8880262a8018 (&sighand->siglock){-...}-{3:3}, at: __lock_task_sighand+0x149/0x2d0 [ 81.690990][ T5855] other info that might help us debug this: [ 81.697087][ T5855] context-{5:5} [ 81.700572][ T5855] 8 locks held by syz-executor227/5855: [ 81.706166][ T5855] #0: ffff88802f97ea90 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 81.716482][ T5855] #1: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: handle_pte_fault+0x21c3/0x68a0 [ 81.726421][ T5855] #2: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x243/0x20d0 [ 81.736215][ T5855] #3: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x82/0x380 [ 81.745930][ T5855] #4: ffff8880791b2df8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x1ba/0x300 [ 81.756586][ T5855] #5: ffffffff8e93c4a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xf6/0x450 [ 81.766041][ T5855] #6: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xbc/0x8a0 [ 81.775423][ T5855] #7: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x29/0x2d0 [ 81.785240][ T5855] stack backtrace: [ 81.788987][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor227 Not tainted 6.12.0-syzkaller-g45e04eb4d9d8 #0 [ 81.799328][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.809486][ T5855] Call Trace: [ 81.812885][ T5855] [ 81.815964][ T5855] dump_stack_lvl+0x241/0x360 [ 81.820717][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.825959][ T5855] ? __pfx__printk+0x10/0x10 [ 81.830597][ T5855] __lock_acquire+0x15a8/0x2100 [ 81.835473][ T5855] lock_acquire+0x1ed/0x550 [ 81.839999][ T5855] ? __lock_task_sighand+0x149/0x2d0 [ 81.845431][ T5855] ? __pfx_lock_acquire+0x10/0x10 [ 81.850580][ T5855] ? __pfx_lock_acquire+0x10/0x10 [ 81.855632][ T5855] _raw_spin_lock_irqsave+0xd5/0x120 [ 81.861118][ T5855] ? __lock_task_sighand+0x149/0x2d0 [ 81.866420][ T5855] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 81.872356][ T5855] __lock_task_sighand+0x149/0x2d0 [ 81.877500][ T5855] ? __lock_task_sighand+0x29/0x2d0 [ 81.882748][ T5855] group_send_sig_info+0x274/0x310 [ 81.887903][ T5855] ? __pfx_group_send_sig_info+0x10/0x10 [ 81.893695][ T5855] bpf_send_signal_common+0x3c4/0x630 [ 81.899100][ T5855] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 81.905011][ T5855] ? trace_call_bpf+0xbc/0x8a0 [ 81.909972][ T5855] ? __pfx___cant_migrate+0x10/0x10 [ 81.915194][ T5855] ? __pfx_validate_chain+0x10/0x10 [ 81.920425][ T5855] bpf_send_signal_thread+0x1a/0x30 [ 81.925639][ T5855] bpf_prog_b7be628660dc1b90+0x23/0x29 [ 81.931129][ T5855] trace_call_bpf+0x369/0x8a0 [ 81.935833][ T5855] ? trace_call_bpf+0xbc/0x8a0 [ 81.940606][ T5855] ? __pfx_trace_call_bpf+0x10/0x10 [ 81.945811][ T5855] ? trace_call_bpf+0x613/0x8a0 [ 81.950683][ T5855] ? trace_call_bpf+0xbc/0x8a0 [ 81.955464][ T5855] ? __pfx_lock_release+0x10/0x10 [ 81.960527][ T5855] perf_trace_run_bpf_submit+0x82/0x180 [ 81.966302][ T5855] perf_trace_lock+0x388/0x490 [ 81.971209][ T5855] ? __lock_acquire+0x1397/0x2100 [ 81.976275][ T5855] ? __pfx_perf_trace_lock+0x10/0x10 [ 81.981730][ T5855] ? pfn_valid+0xf6/0x450 [ 81.986227][ T5855] ? pfn_valid+0xf6/0x450 [ 81.990772][ T5855] lock_release+0x9cc/0xa30 [ 81.995403][ T5855] ? __pfx_lock_acquire+0x10/0x10 [ 82.000463][ T5855] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 82.006036][ T5855] ? __pfx_lock_release+0x10/0x10 [ 82.011077][ T5855] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 82.016644][ T5855] ? rcu_is_watching+0x15/0xb0 [ 82.021454][ T5855] ? __pfx_lock_release+0x10/0x10 [ 82.026488][ T5855] ? pfn_valid+0xf6/0x450 [ 82.030835][ T5855] pfn_valid+0x3eb/0x450 [ 82.035095][ T5855] page_table_check_set+0x22/0x540 [ 82.040680][ T5855] __page_table_check_ptes_set+0x30f/0x410 [ 82.046525][ T5855] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 82.053043][ T5855] ? folio_add_file_rmap_ptes+0x30d/0x530 [ 82.058919][ T5855] set_pte_range+0x724/0x750 [ 82.063535][ T5855] ? __pfx_set_pte_range+0x10/0x10 [ 82.068659][ T5855] ? next_uptodate_folio+0x986/0xa40 [ 82.073956][ T5855] filemap_map_pages+0x11c6/0x20d0 [ 82.079256][ T5855] ? filemap_map_pages+0x243/0x20d0 [ 82.084559][ T5855] ? __pfx_filemap_map_pages+0x10/0x10 [ 82.090028][ T5855] ? handle_pte_fault+0x36f/0x68a0 [ 82.095179][ T5855] ? __pfx_lock_release+0x10/0x10 [ 82.100343][ T5855] ? handle_pte_fault+0x21c3/0x68a0 [ 82.105572][ T5855] ? __pfx_filemap_map_pages+0x10/0x10 [ 82.111093][ T5855] handle_pte_fault+0x31d6/0x68a0 [ 82.116175][ T5855] ? __pfx_handle_pte_fault+0x10/0x10 [ 82.122128][ T5855] ? __lock_acquire+0x1397/0x2100 [ 82.127197][ T5855] ? reacquire_held_locks+0x3eb/0x690 [ 82.132612][ T5855] ? lock_vma_under_rcu+0x34b/0x790 [ 82.137869][ T5855] ? __pfx_reacquire_held_locks+0x10/0x10 [ 82.143827][ T5855] handle_mm_fault+0x1106/0x1bb0 [ 82.149250][ T5855] ? __pfx_handle_mm_fault+0x10/0x10 [ 82.154572][ T5855] ? lock_vma_under_rcu+0x602/0x790 [ 82.159797][ T5855] ? lock_vma_under_rcu+0x1dd/0x790 [ 82.165027][ T5855] ? exc_page_fault+0x113/0x8c0 [ 82.169915][ T5855] exc_page_fault+0x459/0x8c0 [ 82.174814][ T5855] asm_exc_page_fault+0x26/0x30 [ 82.179711][ T5855] RIP: 0033:0x7f2c735865f8 [ 82.184259][ T5855] Code: Unable to access opcode bytes at 0x7f2c735865ce. [ 82.191292][ T5855] RSP: 002b:00007ffcc6892fb8 EFLAGS: 00010202 [ 82.197379][ T5855] RAX: 00007f2c735b6ad8 RBX: 0000000000000000 RCX: 0000000000000004 [ 82.205362][ T5855] RDX: 00007f2c735b7ce0 RSI: 0000000000000000 RDI: 00007f2c735b6ad8 [ 82.213709][ T5855] RBP: 00007f2c735b5118 R08: 00007f2c7350e2b0 R09: 00007f2c7350e2b0 [ 82.222252][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c735b7cc8 [ 82.230438][ T5855] R13: 0000000000000000 R14: 00007f2c735b7ce0 R15: 00007f2c7350e590 [ 82.238462][ T5855]