./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3491740852 <...> Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. execve("./syz-executor3491740852", ["./syz-executor3491740852"], 0x7ffc41b2fec0 /* 10 vars */) = 0 brk(NULL) = 0x55556f58f000 brk(0x55556f58fd00) = 0x55556f58fd00 arch_prctl(ARCH_SET_FS, 0x55556f58f380) = 0 set_tid_address(0x55556f58f650) = 5816 set_robust_list(0x55556f58f660, 24) = 0 rseq(0x55556f58fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3491740852", 4096) = 28 getrandom("\x36\x20\xed\x81\x21\xa8\xcc\x68", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556f58fd00 brk(0x55556f5b0d00) = 0x55556f5b0d00 brk(0x55556f5b1000) = 0x55556f5b1000 mprotect(0x7f2bdcbc6000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5817 attached [pid 5817] set_robust_list(0x55556f58f660, 24 [pid 5816] <... clone resumed>, child_tidptr=0x55556f58f650) = 5817 [pid 5817] <... set_robust_list resumed>) = 0 [pid 5817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5817] setpgid(0, 0) = 0 [pid 5817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5817] write(3, "1000", 4) = 4 [pid 5817] close(3) = 0 executing program [pid 5817] write(1, "executing program\n", 18) = 18 [ 50.956864][ T29] audit: type=1400 audit(1739561684.351:88): avc: denied { execmem } for pid=5816 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.005592][ T29] audit: type=1400 audit(1739561684.401:89): avc: denied { prog_load } for pid=5817 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.024969][ T29] audit: type=1400 audit(1739561684.401:90): avc: denied { bpf } for pid=5817 comm="syz-executor349" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 5817] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SOCKET_FILTER, insn_cnt=8, insns=0x400000001000, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 [ 51.046482][ T29] audit: type=1400 audit(1739561684.401:91): avc: denied { perfmon } for pid=5817 comm="syz-executor349" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.070147][ T29] audit: type=1400 audit(1739561684.471:92): avc: denied { prog_run } for pid=5817 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.090998][ T5817] ------------[ cut here ]------------ [ 51.096477][ T5817] Please remove unsupported % in format string [ 51.103128][ T5817] WARNING: CPU: 0 PID: 5817 at lib/vsprintf.c:2693 format_decode+0xac6/0xd40 [ 51.111930][ T5817] Modules linked in: [ 51.115829][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor349 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 51.126947][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.137007][ T5817] RIP: 0010:format_decode+0xac6/0xd40 [ 51.142389][ T5817] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 00 62 cf 8c e8 fb 60 26 f6 90 <0f> 0b 90 90 e9 d3 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 51.162017][ T5817] RSP: 0018:ffffc9000406f6a8 EFLAGS: 00010282 [ 51.168057][ T5817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a1159 [ 51.176028][ T5817] RDX: ffff8880263b4880 RSI: ffffffff817a1166 RDI: 0000000000000001 [ 51.184023][ T5817] RBP: ffffc9000406f750 R08: 0000000000000001 R09: 0000000000000000 [ 51.192012][ T5817] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 51.199999][ T5817] R13: ffffc9000406f954 R14: ffffc9000406f7e0 R15: 0000000000000000 [ 51.207965][ T5817] FS: 000055556f58f380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 51.216915][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.223504][ T5817] CR2: 00007f2bdcbca0d0 CR3: 000000003493e000 CR4: 00000000003526f0 [ 51.231488][ T5817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.239461][ T5817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.247405][ T5817] Call Trace: [ 51.250687][ T5817] [ 51.253607][ T5817] ? __warn+0xea/0x3c0 [ 51.257654][ T5817] ? __pfx_vprintk_emit+0x10/0x10 [ 51.262684][ T5817] ? format_decode+0xac6/0xd40 [ 51.267464][ T5817] ? report_bug+0x3c0/0x580 [ 51.271977][ T5817] ? handle_bug+0x54/0xa0 [ 51.276297][ T5817] ? exc_invalid_op+0x17/0x50 [ 51.280982][ T5817] ? asm_exc_invalid_op+0x1a/0x20 [ 51.286006][ T5817] ? __warn_printk+0x199/0x350 [ 51.290774][ T5817] ? __warn_printk+0x1a6/0x350 [ 51.295528][ T5817] ? format_decode+0xac6/0xd40 [ 51.300303][ T5817] ? format_decode+0xac5/0xd40 [ 51.305063][ T5817] ? __pfx_format_decode+0x10/0x10 [ 51.310184][ T5817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.316078][ T5817] bstr_printf+0x16e/0x10d0 [ 51.320605][ T5817] ? __pfx_bstr_printf+0x10/0x10 [ 51.325558][ T5817] ? find_held_lock+0x2d/0x110 [ 51.330376][ T5817] ? bpf_test_run+0x450/0xa90 [ 51.335060][ T5817] bpf_trace_printk+0x10b/0x190 [ 51.339951][ T5817] ? __pfx_bpf_trace_printk+0x10/0x10 [ 51.345314][ T5817] ? trace_lock_acquire+0x14e/0x1f0 [ 51.350524][ T5817] ? bpf_test_timer_enter+0x9d/0x180 [ 51.355806][ T5817] ? bpf_test_run+0x450/0xa90 [ 51.360487][ T5817] ? ktime_get+0x200/0x310 [ 51.364897][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.370101][ T5817] ? read_tsc+0x9/0x20 [ 51.374165][ T5817] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 51.379626][ T5817] bpf_test_run+0x49d/0xa90 [ 51.384122][ T5817] ? __pfx_bpf_test_run+0x10/0x10 [ 51.389174][ T5817] ? __asan_memset+0x23/0x50 [ 51.393765][ T5817] bpf_prog_test_run_skb+0xb93/0x2280 [ 51.399164][ T5817] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 51.404971][ T5817] ? lock_acquire+0x2f/0xb0 [ 51.409480][ T5817] ? __might_fault+0xe3/0x190 [ 51.414152][ T5817] ? fdget+0x176/0x210 [ 51.418195][ T5817] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 51.424004][ T5817] __sys_bpf+0xfc6/0x49c0 [ 51.428326][ T5817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 51.433967][ T5817] ? __pfx___sys_bpf+0x10/0x10 [ 51.438718][ T5817] ? do_raw_spin_lock+0x12d/0x2c0 [ 51.443756][ T5817] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.449149][ T5817] ? lock_acquire+0x2f/0xb0 [ 51.453631][ T5817] ? ptrace_stop.part.0+0x488/0x940 [ 51.458809][ T5817] ? ptrace_stop.part.0+0x722/0x940 [ 51.464045][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 51.469265][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.474462][ T5817] __x64_sys_bpf+0x78/0xc0 [ 51.478870][ T5817] do_syscall_64+0xcd/0x250 [ 51.483383][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.489283][ T5817] RIP: 0033:0x7f2bdcb53bb9 [ 51.493685][ T5817] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.513348][ T5817] RSP: 002b:00007fff5d33b818 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.521792][ T5817] RAX: ffffffffffffffda RBX: 64006ad576d86aa0 RCX: 00007f2bdcb53bb9 [ 51.529778][ T5817] RDX: 0000000000000028 RSI: 0000400000000080 RDI: 000000000000000a [ 51.537740][ T5817] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 51.545721][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.553697][ T5817] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 51.561684][ T5817] [ 51.564691][ T5817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.571963][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor349 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 51.583041][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.593071][ T5817] Call Trace: [ 51.596327][ T5817] [ 51.599234][ T5817] dump_stack_lvl+0x3d/0x1f0 [ 51.603817][ T5817] panic+0x71d/0x800 [ 51.607687][ T5817] ? __pfx_panic+0x10/0x10 [ 51.612090][ T5817] ? show_trace_log_lvl+0x29d/0x3d0 [ 51.617278][ T5817] ? check_panic_on_warn+0x1f/0xb0 [ 51.622368][ T5817] ? format_decode+0xac6/0xd40 [ 51.627123][ T5817] check_panic_on_warn+0xab/0xb0 [ 51.632042][ T5817] __warn+0xf6/0x3c0 [ 51.635917][ T5817] ? __pfx_vprintk_emit+0x10/0x10 [ 51.640922][ T5817] ? format_decode+0xac6/0xd40 [ 51.645686][ T5817] report_bug+0x3c0/0x580 [ 51.649997][ T5817] handle_bug+0x54/0xa0 [ 51.654147][ T5817] exc_invalid_op+0x17/0x50 [ 51.658636][ T5817] asm_exc_invalid_op+0x1a/0x20 [ 51.663469][ T5817] RIP: 0010:format_decode+0xac6/0xd40 [ 51.668828][ T5817] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 01 00 00 41 0f b6 75 00 48 c7 c7 00 62 cf 8c e8 fb 60 26 f6 90 <0f> 0b 90 90 e9 d3 fa ff ff 49 bc 00 00 00 00 00 fc ff df 31 db e8 [ 51.688418][ T5817] RSP: 0018:ffffc9000406f6a8 EFLAGS: 00010282 [ 51.694466][ T5817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a1159 [ 51.702415][ T5817] RDX: ffff8880263b4880 RSI: ffffffff817a1166 RDI: 0000000000000001 [ 51.710366][ T5817] RBP: ffffc9000406f750 R08: 0000000000000001 R09: 0000000000000000 [ 51.718315][ T5817] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 51.726265][ T5817] R13: ffffc9000406f954 R14: ffffc9000406f7e0 R15: 0000000000000000 [ 51.734220][ T5817] ? __warn_printk+0x199/0x350 [ 51.738981][ T5817] ? __warn_printk+0x1a6/0x350 [ 51.743740][ T5817] ? format_decode+0xac5/0xd40 [ 51.748497][ T5817] ? __pfx_format_decode+0x10/0x10 [ 51.753607][ T5817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.759500][ T5817] bstr_printf+0x16e/0x10d0 [ 51.763996][ T5817] ? __pfx_bstr_printf+0x10/0x10 [ 51.768919][ T5817] ? find_held_lock+0x2d/0x110 [ 51.773669][ T5817] ? bpf_test_run+0x450/0xa90 [ 51.778326][ T5817] bpf_trace_printk+0x10b/0x190 [ 51.783161][ T5817] ? __pfx_bpf_trace_printk+0x10/0x10 [ 51.788514][ T5817] ? trace_lock_acquire+0x14e/0x1f0 [ 51.793695][ T5817] ? bpf_test_timer_enter+0x9d/0x180 [ 51.798973][ T5817] ? bpf_test_run+0x450/0xa90 [ 51.803627][ T5817] ? ktime_get+0x200/0x310 [ 51.808024][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.813203][ T5817] ? read_tsc+0x9/0x20 [ 51.817257][ T5817] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 51.822695][ T5817] bpf_test_run+0x49d/0xa90 [ 51.827197][ T5817] ? __pfx_bpf_test_run+0x10/0x10 [ 51.832215][ T5817] ? __asan_memset+0x23/0x50 [ 51.836792][ T5817] bpf_prog_test_run_skb+0xb93/0x2280 [ 51.842166][ T5817] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 51.847964][ T5817] ? lock_acquire+0x2f/0xb0 [ 51.852450][ T5817] ? __might_fault+0xe3/0x190 [ 51.857108][ T5817] ? fdget+0x176/0x210 [ 51.861156][ T5817] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 51.866944][ T5817] __sys_bpf+0xfc6/0x49c0 [ 51.871253][ T5817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 51.876872][ T5817] ? __pfx___sys_bpf+0x10/0x10 [ 51.881616][ T5817] ? do_raw_spin_lock+0x12d/0x2c0 [ 51.886621][ T5817] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.891971][ T5817] ? lock_acquire+0x2f/0xb0 [ 51.896456][ T5817] ? ptrace_stop.part.0+0x488/0x940 [ 51.901657][ T5817] ? ptrace_stop.part.0+0x722/0x940 [ 51.906852][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 51.912037][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.917216][ T5817] __x64_sys_bpf+0x78/0xc0 [ 51.921614][ T5817] do_syscall_64+0xcd/0x250 [ 51.926100][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.931979][ T5817] RIP: 0033:0x7f2bdcb53bb9 [ 51.936374][ T5817] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.955960][ T5817] RSP: 002b:00007fff5d33b818 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.964356][ T5817] RAX: ffffffffffffffda RBX: 64006ad576d86aa0 RCX: 00007f2bdcb53bb9 [ 51.972309][ T5817] RDX: 0000000000000028 RSI: 0000400000000080 RDI: 000000000000000a [ 51.980261][ T5817] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 51.988209][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.996158][ T5817] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 52.004116][ T5817] [ 52.007293][ T5817] Kernel Offset: disabled [ 52.011605][ T5817] Rebooting in 86400 seconds..