./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2201928845 <...> Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. execve("./syz-executor2201928845", ["./syz-executor2201928845"], 0x7fff97072760 /* 10 vars */) = 0 brk(NULL) = 0x555591a55000 brk(0x555591a55d00) = 0x555591a55d00 arch_prctl(ARCH_SET_FS, 0x555591a55380) = 0 set_tid_address(0x555591a55650) = 5094 set_robust_list(0x555591a55660, 24) = 0 rseq(0x555591a55ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2201928845", 4096) = 28 getrandom("\x16\x36\x50\x4e\xd8\xb5\xb8\x5c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555591a55d00 brk(0x555591a76d00) = 0x555591a76d00 brk(0x555591a77000) = 0x555591a77000 mprotect(0x7fb06ca6c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555591a55650) = 5095 ./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x555591a55660, 24) = 0 [pid 5095] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setsid() = 1 [pid 5095] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5095] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5095] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5095] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5095] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5095] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5095] unshare(CLONE_NEWNS) = 0 [pid 5095] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5095] unshare(CLONE_NEWIPC) = 0 [pid 5095] unshare(CLONE_NEWCGROUP) = 0 [pid 5095] unshare(CLONE_NEWUTS) = 0 [pid 5095] unshare(CLONE_SYSVSEM) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "16777216", 8) = 8 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "536870912", 9) = 9 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1024", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "8192", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1024", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1024", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5095] close(3) = 0 [pid 5095] getpid() = 1 [pid 5095] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached , child_tidptr=0x555591a55650) = 3 [pid 5099] set_robust_list(0x555591a55660, 24) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] write(1, "executing program\n", 18executing program ) = 18 [pid 5099] socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 [pid 5099] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=2, value_size=4, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 5099] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000040, value=0x20000140, flags=BPF_ANY}, 32) = 0 [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 5099] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=6}}, 16) = 7 [pid 5099] close(3) = 0 [ 79.252492][ T5099] ------------[ cut here ]------------ [ 79.258514][ T5099] WARNING: CPU: 1 PID: 5099 at net/core/sock_map.c:1701 sock_map_close+0x2a2/0x2d0 [ 79.267997][ T5099] Modules linked in: [ 79.271982][ T5099] CPU: 1 PID: 5099 Comm: syz-executor220 Not tainted 6.9.0-syzkaller-g6f130e4d4a5f #0 [ 79.281604][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 79.291717][ T5099] RIP: 0010:sock_map_close+0x2a2/0x2d0 [ 79.297191][ T5099] Code: df e8 72 e4 87 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 59 e4 87 f8 4c 8b 23 eb 89 e8 1f a5 22 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 79.317209][ T5099] RSP: 0018:ffffc90003e97da8 EFLAGS: 00010293 [ 79.323371][ T5099] RAX: ffffffff89738cb1 RBX: ffffffff94b882c0 RCX: ffff88801bfbda00 [ 79.331456][ T5099] RDX: 0000000000000000 RSI: ffffffff8bcab5a0 RDI: ffffffff8c1fada0 [ 79.339462][ T5099] RBP: 0000000000000000 R08: ffffffff92f9c627 R09: 1ffffffff25f38c4 [ 79.347530][ T5099] R10: dffffc0000000000 R11: fffffbfff25f38c5 R12: ffffffff89738a10 [ 79.355701][ T5099] R13: ffff8880770c0000 R14: ffff8880770c0000 R15: ffffffff89738a40 [ 79.363745][ T5099] FS: 0000555591a55380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 79.372850][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.379552][ T5099] CR2: 00007fb06c9f7283 CR3: 00000000769dc000 CR4: 00000000003506f0 [ 79.387598][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.395673][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.403705][ T5099] Call Trace: [ 79.407014][ T5099] [ 79.409951][ T5099] ? __warn+0x163/0x4e0 [ 79.414207][ T5099] ? sock_map_close+0x2a2/0x2d0 [ 79.419113][ T5099] ? report_bug+0x2b3/0x500 [ 79.423722][ T5099] ? sock_map_close+0x2a2/0x2d0 [ 79.428618][ T5099] ? handle_bug+0x3e/0x70 [ 79.433122][ T5099] ? exc_invalid_op+0x1a/0x50 [ 79.437938][ T5099] ? asm_exc_invalid_op+0x1a/0x20 [ 79.443118][ T5099] ? sock_map_close+0x30/0x2d0 [ 79.447951][ T5099] ? __pfx_sock_map_close+0x10/0x10 [ 79.455222][ T5099] ? sock_map_close+0x2a1/0x2d0 [ 79.460136][ T5099] ? sock_map_close+0x2a2/0x2d0 [ 79.465091][ T5099] ? sock_map_close+0x2a1/0x2d0 [ 79.469987][ T5099] unix_release+0x85/0xc0 [ 79.474536][ T5099] sock_close+0xbc/0x240 [ 79.478821][ T5099] ? __pfx_sock_close+0x10/0x10 [ 79.483890][ T5099] __fput+0x429/0x8a0 [ 79.487932][ T5099] __x64_sys_close+0x7f/0x110 [ 79.492815][ T5099] do_syscall_64+0xf5/0x240 [ 79.497483][ T5099] ? clear_bhb_loop+0x35/0x90 [ 79.502262][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.508305][ T5099] RIP: 0033:0x7fb06c9f8520 [ 79.512934][ T5099] Code: ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 80 3d 61 8b 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c [ 79.532744][ T5099] RSP: 002b:00007ffe565dff18 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 79.541347][ T5099] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb06c9f8520 [ 79.549365][ T5099] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 [ 79.557486][ T5099] RBP: 0000000000000000 R08: 0000000091a56610 R09: 0000000091a56610 [ 79.565658][ T5099] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.573785][ T5099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.582042][ T5099] [ 79.585203][ T5099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.592509][ T5099] CPU: 1 PID: 5099 Comm: syz-executor220 Not tainted 6.9.0-syzkaller-g6f130e4d4a5f #0 [ 79.602060][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 79.612140][ T5099] Call Trace: [ 79.615431][ T5099] [ 79.618370][ T5099] dump_stack_lvl+0x241/0x360 [ 79.623075][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.628292][ T5099] ? __pfx__printk+0x10/0x10 [ 79.632935][ T5099] ? vscnprintf+0x5d/0x90 [ 79.637278][ T5099] panic+0x349/0x860 [ 79.641190][ T5099] ? __warn+0x172/0x4e0 [ 79.645365][ T5099] ? __pfx_panic+0x10/0x10 [ 79.649819][ T5099] __warn+0x346/0x4e0 [ 79.653829][ T5099] ? sock_map_close+0x2a2/0x2d0 [ 79.658692][ T5099] report_bug+0x2b3/0x500 [ 79.663048][ T5099] ? sock_map_close+0x2a2/0x2d0 [ 79.667913][ T5099] handle_bug+0x3e/0x70 [ 79.672089][ T5099] exc_invalid_op+0x1a/0x50 [ 79.676610][ T5099] asm_exc_invalid_op+0x1a/0x20 [ 79.681566][ T5099] RIP: 0010:sock_map_close+0x2a2/0x2d0 [ 79.687046][ T5099] Code: df e8 72 e4 87 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 59 e4 87 f8 4c 8b 23 eb 89 e8 1f a5 22 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 79.706673][ T5099] RSP: 0018:ffffc90003e97da8 EFLAGS: 00010293 [ 79.712756][ T5099] RAX: ffffffff89738cb1 RBX: ffffffff94b882c0 RCX: ffff88801bfbda00 [ 79.720741][ T5099] RDX: 0000000000000000 RSI: ffffffff8bcab5a0 RDI: ffffffff8c1fada0 [ 79.728730][ T5099] RBP: 0000000000000000 R08: ffffffff92f9c627 R09: 1ffffffff25f38c4 [ 79.736711][ T5099] R10: dffffc0000000000 R11: fffffbfff25f38c5 R12: ffffffff89738a10 [ 79.744712][ T5099] R13: ffff8880770c0000 R14: ffff8880770c0000 R15: ffffffff89738a40 [ 79.752697][ T5099] ? sock_map_close+0x30/0x2d0 [ 79.757488][ T5099] ? __pfx_sock_map_close+0x10/0x10 [ 79.762838][ T5099] ? sock_map_close+0x2a1/0x2d0 [ 79.767737][ T5099] ? sock_map_close+0x2a1/0x2d0 [ 79.772613][ T5099] unix_release+0x85/0xc0 [ 79.776971][ T5099] sock_close+0xbc/0x240 [ 79.781282][ T5099] ? __pfx_sock_close+0x10/0x10 [ 79.786295][ T5099] __fput+0x429/0x8a0 [ 79.790399][ T5099] __x64_sys_close+0x7f/0x110 [ 79.795108][ T5099] do_syscall_64+0xf5/0x240 [ 79.799639][ T5099] ? clear_bhb_loop+0x35/0x90 [ 79.804339][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.810334][ T5099] RIP: 0033:0x7fb06c9f8520 [ 79.814763][ T5099] Code: ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 80 3d 61 8b 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c [ 79.834557][ T5099] RSP: 002b:00007ffe565dff18 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 79.843076][ T5099] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb06c9f8520 [ 79.851251][ T5099] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 [ 79.859363][ T5099] RBP: 0000000000000000 R08: 0000000091a56610 R09: 0000000091a56610 [ 79.867365][ T5099] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.875371][ T5099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.883371][ T5099] [ 79.886632][ T5099] Kernel Offset: disabled [ 79.891010][ T5099] Rebooting in 86400 seconds..