./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2811902516 <...> Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. execve("./syz-executor2811902516", ["./syz-executor2811902516"], 0x7ffe8dc18080 /* 10 vars */) = 0 brk(NULL) = 0x55555eee3000 brk(0x55555eee3d00) = 0x55555eee3d00 arch_prctl(ARCH_SET_FS, 0x55555eee3380) = 0 set_tid_address(0x55555eee3650) = 290 set_robust_list(0x55555eee3660, 24) = 0 rseq(0x55555eee3ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2811902516", 4096) = 28 getrandom("\x79\x8c\xfa\xa8\x1b\x3e\x21\xfc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555eee3d00 brk(0x55555ef04d00) = 0x55555ef04d00 brk(0x55555ef05000) = 0x55555ef05000 mprotect(0x7f438d1bf000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555eee3650) = 291 ./strace-static-x86_64: Process 291 attached [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] set_robust_list(0x55555eee3660, 24) = 0 ./strace-static-x86_64: Process 292 attached [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x55555eee3650) = 292 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] set_robust_list(0x55555eee3660, 24./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x55555eee3660, 24 [pid 291] <... clone resumed>, child_tidptr=0x55555eee3650) = 293 [pid 293] <... set_robust_list resumed>) = 0 [pid 293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x55555eee3660, 24 [pid 290] <... clone resumed>, child_tidptr=0x55555eee3650) = 294 [pid 293] <... prctl resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... set_robust_list resumed>) = 0 [pid 293] setpgid(0, 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... setpgid resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 293] write(3, "1000", 4) = 4 [pid 293] close(3) = 0 [pid 290] <... clone resumed>, child_tidptr=0x55555eee3650) = 295 [pid 292] <... clone resumed>, child_tidptr=0x55555eee3650) = 296 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] write(1, "executing program\n", 18./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x55555eee3660, 24) = 0 executing program [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... write resumed>) = 18 [pid 296] <... openat resumed>) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] write(1, "executing program\n", 18 executing program [pid 293] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 298 attached ./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 295 attached [pid 296] <... write resumed>) = 18 [pid 294] <... clone resumed>, child_tidptr=0x55555eee3650) = 297 [pid 290] <... clone resumed>, child_tidptr=0x55555eee3650) = 298 [pid 298] set_robust_list(0x55555eee3660, 24) = 0 [pid 293] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555eee3650) = 299 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x55555eee3660, 24) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] write(1, "executing program\n", 18executing program ) = 18 [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 299] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 295] set_robust_list(0x55555eee3660, 24 [pid 297] set_robust_list(0x55555eee3660, 24 [pid 295] <... set_robust_list resumed>) = 0 [pid 293] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 297] <... set_robust_list resumed>) = 0 [pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [ 23.321132][ T28] audit: type=1400 audit(1748446871.844:64): avc: denied { execmem } for pid=290 comm="syz-executor281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.349490][ T28] audit: type=1400 audit(1748446871.874:65): avc: denied { bpf } for pid=293 comm="syz-executor281" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... bpf resumed>) = 5 [pid 293] <... bpf resumed>) = 3 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 299] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000} [pid 297] <... prctl resumed>) = 0 [pid 296] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 293] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 299] <... seccomp resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 299] write(6, "1", 1) = 1 [pid 299] close_range(0, 4294967295, 0 [pid 297] setpgid(0, 0 [pid 296] <... bpf resumed>) = 3 [pid 295] <... clone resumed>, child_tidptr=0x55555eee3650) = 300 [pid 293] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 297] <... setpgid resumed>) = 0 [pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 293] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x55555eee3660, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] write(1, "executing program\n", 18executing program ) = 18 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [ 23.370667][ T28] audit: type=1400 audit(1748446871.874:66): avc: denied { prog_load } for pid=293 comm="syz-executor281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.391573][ T28] audit: type=1400 audit(1748446871.884:67): avc: denied { map_create } for pid=299 comm="syz-executor281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 300] <... bpf resumed>) = 4 [pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 297] <... openat resumed>) = 3 [pid 293] <... bpf resumed>) = 4 [pid 300] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 297] write(3, "1000", 4 [pid 293] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 297] <... write resumed>) = 4 [pid 297] close(3 [pid 296] <... bpf resumed>) = 4 [pid 299] <... close_range resumed>) = 0 [ 23.411362][ T28] audit: type=1400 audit(1748446871.884:68): avc: denied { map_read map_write } for pid=299 comm="syz-executor281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.432357][ T28] audit: type=1400 audit(1748446871.884:69): avc: denied { perfmon } for pid=299 comm="syz-executor281" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 executing program [pid 297] <... close resumed>) = 0 [pid 296] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 297] write(1, "executing program\n", 18) = 18 [pid 297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 297] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [ 23.454267][ T28] audit: type=1400 audit(1748446871.884:70): avc: denied { prog_run } for pid=299 comm="syz-executor281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.454919][ T299] FAULT_INJECTION: forcing a failure. [ 23.454919][ T299] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 23.486968][ T299] CPU: 0 PID: 299 Comm: syz-executor281 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 23.497130][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 23.507189][ T299] Call Trace: [ 23.510485][ T299] [ 23.513435][ T299] __dump_stack+0x21/0x24 [ 23.517786][ T299] dump_stack_lvl+0xee/0x150 [ 23.522392][ T299] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.527415][ T299] ? resched_curr+0x10e/0x380 [ 23.532093][ T299] ? __cfi_resched_curr+0x10/0x10 [ 23.537109][ T299] dump_stack+0x15/0x24 [ 23.541279][ T299] should_fail_ex+0x3d4/0x520 [ 23.545951][ T299] should_fail_alloc_page+0x61/0x90 [ 23.551150][ T299] prepare_alloc_pages+0x148/0x5f0 [ 23.556258][ T299] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 23.561451][ T299] ? __cfi_sched_clock_cpu+0x10/0x10 [ 23.566733][ T299] __alloc_pages+0x115/0x3a0 [ 23.571323][ T299] ? __cfi___alloc_pages+0x10/0x10 [ 23.576442][ T299] ? kvm_sched_clock_read+0x18/0x40 [ 23.581643][ T299] ? __this_cpu_preempt_check+0x13/0x20 [ 23.587186][ T299] ? xfd_validate_state+0x70/0x150 [ 23.592298][ T299] __folio_alloc+0x12/0x40 [ 23.596711][ T299] wp_page_copy+0x280/0x15b0 [ 23.601307][ T299] ? __switch_to+0x51f/0xe30 [ 23.605897][ T299] ? fault_dirty_shared_page+0x310/0x310 [ 23.611538][ T299] ? _raw_spin_unlock+0x4c/0x70 [ 23.616388][ T299] ? finish_task_switch+0x16b/0x7b0 [ 23.621585][ T299] ? vm_normal_page+0x99/0x200 [ 23.626348][ T299] do_wp_page+0x9f2/0xfc0 [ 23.630684][ T299] handle_mm_fault+0x10e4/0x2640 [ 23.635626][ T299] ? __cfi_handle_mm_fault+0x10/0x10 [ 23.640939][ T299] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 23.646153][ T299] ? __this_cpu_preempt_check+0x13/0x20 [ 23.651698][ T299] ? xfd_validate_state+0x70/0x150 [ 23.656838][ T299] do_user_addr_fault+0x905/0x1050 [ 23.661973][ T299] exc_page_fault+0x51/0xb0 [ 23.666493][ T299] asm_exc_page_fault+0x27/0x30 [ 23.671356][ T299] RIP: 0033:0x7f438d1223d0 [ 23.675776][ T299] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 1d 0c 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 f0 39 0a 00 0f 85 0f 02 00 00 4c 8d 25 e3 39 0a 00 4c [ 23.695378][ T299] RSP: 002b:00007ffdd27cc1e0 EFLAGS: 00010246 [ 23.701444][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 23.709407][ T299] RDX: 0000000000000001 RSI: 00007f438d1c3120 RDI: 0000000000000000 [pid 297] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 300] <... bpf resumed>) = 5 [pid 297] <... bpf resumed>) = 5 [pid 296] <... bpf resumed>) = 5 [pid 293] <... bpf resumed>) = 5 [pid 300] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000} [pid 297] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000} [pid 296] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000} [pid 293] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000} [pid 300] <... seccomp resumed>) = 0 [pid 297] <... seccomp resumed>) = 0 [pid 296] <... seccomp resumed>) = 0 [pid 293] <... seccomp resumed>) = 0 [pid 297] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 296] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 293] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 300] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 299] exit_group(0 [pid 300] <... openat resumed>) = 6 [pid 299] <... exit_group resumed>) = ? [pid 297] <... openat resumed>) = 6 [pid 296] <... openat resumed>) = 6 [pid 293] <... openat resumed>) = 6 [pid 300] write(6, "1", 1) = 1 [pid 300] close_range(0, 4294967295, 0 [pid 299] +++ exited with 0 +++ [pid 297] write(6, "1", 1 [pid 296] write(6, "1", 1 [pid 293] write(6, "1", 1 [pid 297] <... write resumed>) = 1 [pid 296] <... write resumed>) = 1 [pid 293] <... write resumed>) = 1 [pid 297] close_range(0, 4294967295, 0 [pid 296] close_range(0, 4294967295, 0 [pid 293] close_range(0, 4294967295, 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555eee3650) = 301 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55555eee3660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 executing program [pid 301] close(3) = 0 [pid 301] write(1, "executing program\n", 18) = 18 [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 301] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=5, value_size=1024, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 23.717405][ T299] RBP: 00007f438d1c3120 R08: 00007ffdd27cbfd7 R09: 0000000000000140 [ 23.725386][ T299] R10: 0000000000000001 R11: 0000000000000286 R12: 0000000000000000 [ 23.733361][ T299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 23.741338][ T299] [ 23.744989][ T299] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.755654][ T300] FAULT_INJECTION: forcing a failure. [ 23.755654][ T300] name failslab, interval 1, probability 0, space 0, times 1 [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=0, insns=0x200000000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(20147, 186, 154), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [ 23.768507][ T300] CPU: 0 PID: 300 Comm: syz-executor281 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 23.778685][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 23.788754][ T300] Call Trace: [ 23.792024][ T300] [ 23.794946][ T300] __dump_stack+0x21/0x24 [ 23.799272][ T300] dump_stack_lvl+0xee/0x150 [ 23.803852][ T300] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.808872][ T300] ? ____fput+0x15/0x20 [ 23.813015][ T300] ? ptrace_notify+0x221/0x250 [ 23.817776][ T300] ? syscall_exit_work+0x84/0x140 [ 23.822799][ T300] ? syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 23.829130][ T300] ? do_syscall_64+0x58/0xa0 [ 23.833724][ T300] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.839824][ T300] dump_stack+0x15/0x24 [ 23.843981][ T300] should_fail_ex+0x3d4/0x520 [ 23.848667][ T300] __should_failslab+0xac/0xf0 [ 23.853421][ T300] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 23.859415][ T300] should_failslab+0x9/0x20 [ 23.863914][ T300] __kmem_cache_alloc_node+0x3d/0x2c0 [ 23.869277][ T300] ? __cfi_mutex_lock+0x10/0x10 [ 23.874124][ T300] ? delete_node+0x3dc/0xa60 [ 23.878700][ T300] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 23.884667][ T300] __kmalloc+0xa1/0x1e0 [ 23.888815][ T300] ? __cfi___bpf_trace_percpu_free_percpu+0x10/0x10 [ 23.895401][ T300] tracepoint_probe_unregister+0x1e6/0x8b0 [ 23.901201][ T300] bpf_probe_unregister+0x61/0x70 [ 23.906221][ T300] bpf_raw_tp_link_release+0x63/0x90 [ 23.911509][ T300] bpf_link_free+0x13a/0x390 [ 23.916095][ T300] ? bpf_link_put_deferred+0x20/0x20 [ 23.921372][ T300] ? security_file_free+0xd8/0xf0 [ 23.926388][ T300] bpf_link_release+0x15f/0x170 [ 23.931239][ T300] ? __cfi_bpf_link_release+0x10/0x10 [ 23.936606][ T300] __fput+0x1fc/0x8f0 [ 23.940584][ T300] ____fput+0x15/0x20 [ 23.944551][ T300] task_work_run+0x1db/0x240 [ 23.949138][ T300] ? __cfi_task_work_run+0x10/0x10 [ 23.954240][ T300] ? fput+0x15b/0x1a0 [ 23.958210][ T300] ? filp_close+0x111/0x160 [ 23.962701][ T300] ptrace_notify+0x221/0x250 [ 23.967281][ T300] ? __cfi_ptrace_notify+0x10/0x10 [ 23.972385][ T300] ? __cfi___close_range+0x10/0x10 [ 23.977507][ T300] ? __secure_computing+0xea/0x290 [ 23.982607][ T300] syscall_exit_work+0x84/0x140 [ 23.987531][ T300] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 23.993677][ T300] syscall_exit_to_user_mode+0xd/0x30 [ 23.999036][ T300] do_syscall_64+0x58/0xa0 [ 24.003444][ T300] ? clear_bhb_loop+0x15/0x70 [ 24.008110][ T300] ? clear_bhb_loop+0x15/0x70 [ 24.012796][ T300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.018684][ T300] RIP: 0033:0x7f438d153c99 [ 24.023087][ T300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.042678][ T300] RSP: 002b:00007ffdd27cc238 EFLAGS: 00000286 ORIG_RAX: 00000000000001b4 [ 24.051082][ T300] RAX: 0000000000000000 RBX: 00007ffdd27cc250 RCX: 00007f438d153c99 [ 24.059041][ T300] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [pid 301] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_free_percpu", prog_fd=4}}, 16 [pid 300] <... close_range resumed>) = 0 [pid 300] exit_group(0) = ? [pid 300] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=27} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 24.067092][ T300] RBP: 0000000000000001 R08: 00007ffdd27cbfd7 R09: 0000000000000140 [ 24.075064][ T300] R10: 0000000000000001 R11: 0000000000000286 R12: 0000000000000000 [ 24.083029][ T300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.091005][ T300] [ 24.095279][ T297] FAULT_INJECTION: forcing a failure. [ 24.095279][ T297] name failslab, interval 1, probability 0, space 0, times 0 [ 24.100338][ T39] CFI failure at __traceiter_percpu_free_percpu+0x87/0xe0 (target: tp_stub_func+0x0/0x10; expected type: 0xc88d2a22) [ 24.108283][ T297] CPU: 0 PID: 297 Comm: syz-executor281 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 24.120152][ T39] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 24.130254][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.136304][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 24.146348][ T297] Call Trace: [ 24.146356][ T297] [ 24.156034][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.159300][ T297] __dump_stack+0x21/0x24 [ 24.162220][ T39] Workqueue: events bpf_prog_free_deferred [ 24.172255][ T297] dump_stack_lvl+0xee/0x150 [ 24.176567][ T39] [ 24.176574][ T39] RIP: 0010:__traceiter_percpu_free_percpu+0x87/0xe0 [ 24.182356][ T297] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.186933][ T39] Code: f8 48 c1 e8 03 80 3c 18 00 74 05 e8 a3 ff 0f 00 49 8b 7d 08 4c 89 fe 8b 55 d4 48 8b 4d c8 41 ba de d5 72 37 45 03 56 fc 74 02 <0f> 0b 41 ff d6 49 83 c4 18 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 [ 24.189247][ T297] ? call_rcu+0xb83/0xf90 [ 24.195898][ T39] RSP: 0018:ffffc9000028faf8 EFLAGS: 00010092 [ 24.200897][ T297] ? ptrace_notify+0x221/0x250 [ 24.220481][ T39] [ 24.220487][ T39] RAX: 1ffff11021a3e8c3 RBX: dffffc0000000000 RCX: 0000607e08c0ffc0 [ 24.224795][ T297] dump_stack+0x15/0x24 [ 24.230837][ T39] RDX: 000000000000ffc0 RSI: ffffe8ffffc00000 RDI: ffffc900000e9000 [ 24.235579][ T297] should_fail_ex+0x3d4/0x520 [ 24.237904][ T39] RBP: ffffc9000028fb30 R08: dffffc0000000000 R09: fffffbfff0ee425e [ 24.245882][ T297] __should_failslab+0xac/0xf0 [ 24.250016][ T39] R10: 00000000dcb33cea R11: 1ffffffff0ee425d R12: ffff88810d1f4610 [ 24.257974][ T297] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 24.262632][ T39] R13: ffff88810d1f4610 R14: ffffffff81710d60 R15: ffffe8ffffc00000 [ 24.270591][ T297] should_failslab+0x9/0x20 [ 24.275336][ T39] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.283292][ T297] __kmem_cache_alloc_node+0x3d/0x2c0 [ 24.289255][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.297207][ T297] ? __cfi_mutex_lock+0x10/0x10 [ 24.301691][ T39] CR2: 00007f438d1c61f0 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 24.310602][ T297] ? delete_node+0x2b3/0xa60 [ 24.315969][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.322534][ T297] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 24.327382][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.335339][ T297] __kmalloc+0xa1/0x1e0 [ 24.339917][ T39] Call Trace: [ 24.339925][ T39] [ 24.347960][ T297] ? __cfi___bpf_trace_percpu_free_percpu+0x10/0x10 [ 24.353923][ T39] free_percpu+0xd09/0x1020 [ 24.361894][ T297] tracepoint_probe_unregister+0x1e6/0x8b0 [ 24.366223][ T39] ? __cfi_free_percpu+0x10/0x10 [ 24.369488][ T297] bpf_probe_unregister+0x61/0x70 [ 24.372407][ T39] ? __bpf_prog_free+0x84/0xe0 [ 24.378972][ T297] bpf_raw_tp_link_release+0x63/0x90 [ 24.383455][ T39] ? __kmem_cache_free+0xb7/0x1b0 [ 24.389240][ T297] bpf_link_free+0x13a/0x390 [ 24.394161][ T39] __bpf_prog_free+0xab/0xe0 [ 24.399172][ T297] ? bpf_link_put_deferred+0x20/0x20 [ 24.403920][ T39] bpf_jit_free+0x1ae/0x1e0 [ 24.409182][ T297] ? security_file_free+0xd8/0xf0 [ 24.414185][ T39] bpf_prog_free_deferred+0x614/0x720 [ 24.418759][ T297] bpf_link_release+0x15f/0x170 [ 24.423332][ T39] process_one_work+0x71f/0xc40 [ 24.428593][ T297] ? __cfi_bpf_link_release+0x10/0x10 [ 24.433079][ T39] worker_thread+0xa29/0x11f0 [ 24.438081][ T297] __fput+0x1fc/0x8f0 [ 24.443441][ T39] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 24.448275][ T297] ____fput+0x15/0x20 [ 24.453107][ T39] ? __kthread_parkme+0x142/0x180 [ 24.458455][ T297] task_work_run+0x1db/0x240 [ 24.463113][ T39] kthread+0x281/0x320 [ 24.467073][ T297] ? __cfi_task_work_run+0x10/0x10 [ 24.472509][ T39] ? __cfi_worker_thread+0x10/0x10 [ 24.476472][ T297] ? fput+0x15b/0x1a0 [ 24.481477][ T39] ? __cfi_kthread+0x10/0x10 [ 24.486050][ T297] ? filp_close+0x111/0x160 [ 24.490096][ T39] ret_from_fork+0x1f/0x30 [ 24.495189][ T297] ptrace_notify+0x221/0x250 [ 24.500284][ T39] [ 24.504244][ T297] ? __cfi_ptrace_notify+0x10/0x10 [ 24.508811][ T39] Modules linked in: [ 24.513297][ T297] ? __cfi___close_range+0x10/0x10 [ 24.517708][ T39] ---[ end trace 0000000000000000 ]--- [ 24.522262][ T297] ? __secure_computing+0xea/0x290 [ 24.525267][ T39] RIP: 0010:__traceiter_percpu_free_percpu+0x87/0xe0 [ 24.530370][ T297] syscall_exit_work+0x84/0x140 [ 24.534245][ T39] Code: f8 48 c1 e8 03 80 3c 18 00 74 05 e8 a3 ff 0f 00 49 8b 7d 08 4c 89 fe 8b 55 d4 48 8b 4d c8 41 ba de d5 72 37 45 03 56 fc 74 02 <0f> 0b 41 ff d6 49 83 c4 18 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 [ 24.539337][ T297] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 24.544774][ T39] RSP: 0018:ffffc9000028faf8 EFLAGS: 00010092 [ 24.549894][ T297] syscall_exit_to_user_mode+0xd/0x30 [ 24.556551][ T39] [ 24.556558][ T39] RAX: 1ffff11021a3e8c3 RBX: dffffc0000000000 RCX: 0000607e08c0ffc0 [ 24.561384][ T297] do_syscall_64+0x58/0xa0 [ 24.580968][ T39] RDX: 000000000000ffc0 RSI: ffffe8ffffc00000 RDI: ffffc900000e9000 [ 24.587102][ T297] ? clear_bhb_loop+0x15/0x70 [ 24.593159][ T39] RBP: ffffc9000028fb30 R08: dffffc0000000000 R09: fffffbfff0ee425e [ 24.598507][ T297] ? clear_bhb_loop+0x15/0x70 [ 24.600822][ T39] R10: 00000000dcb33cea R11: 1ffffffff0ee425d R12: ffff88810d1f4610 [ 24.608780][ T297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.613173][ T39] R13: ffff88810d1f4610 R14: ffffffff81710d60 R15: ffffe8ffffc00000 [ 24.621125][ T297] RIP: 0033:0x7f438d153c99 [ 24.625810][ T39] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.633767][ T297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.638422][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.646379][ T297] RSP: 002b:00007ffdd27cc238 EFLAGS: 00000286 [ 24.652251][ T39] CR2: 00007f438d1c61f0 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 24.660204][ T297] ORIG_RAX: 00000000000001b4 [ 24.664601][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.673507][ T297] RAX: 0000000000000000 RBX: 00007ffdd27cc250 RCX: 00007f438d153c99 [ 24.693446][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.700031][ T297] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 24.706085][ T39] Kernel panic - not syncing: Fatal exception [ 24.714050][ T297] RBP: 0000000000000001 R08: 00007ffdd27cbfd7 R09: 0000000000000140 [ 24.714070][ T297] R10: 0000000000000001 R11: 0000000000000286 R12: 0000000000000000 [ 24.714081][ T297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.714099][ T297] [ 24.714217][ T39] Kernel Offset: disabled [ 24.788328][ T39] Rebooting in 86400 seconds..