./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1842927523 <...> DUID 00:04:f8:bf:f0:9c:61:e1:97:95:98:d7:6e:33:ae:fb:a4:bd forked to background, child pid 4669 [ 47.123059][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.132572][ T4670] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. execve("./syz-executor1842927523", ["./syz-executor1842927523"], 0x7ffeae300050 /* 10 vars */) = 0 brk(NULL) = 0x555555f0c000 brk(0x555555f0cc40) = 0x555555f0cc40 arch_prctl(ARCH_SET_FS, 0x555555f0c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1842927523", 4096) = 28 brk(0x555555f2dc40) = 0x555555f2dc40 brk(0x555555f2e000) = 0x555555f2e000 mprotect(0x7f5d753fd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_BTF_LOAD, {btf="\x9f\xeb\x01\x00\x18\x00\x00\x00\x00\x00\x00\x00\x38\x00\x00\x00\x38\x00\x00\x00\x04\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x11\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x12\x02\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0e\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x00", btf_log_buf=NULL, btf_size=84, btf_log_size=0, btf_log_level=0}, 32) = 3 syzkaller login: [ 72.339998][ T5005] ------------[ cut here ]------------ [ 72.346223][ T5005] WARNING: CPU: 0 PID: 5005 at kernel/bpf/btf.c:1988 btf_type_id_size+0x2d9/0x9d0 [ 72.355530][ T5005] Modules linked in: [ 72.359469][ T5005] CPU: 0 PID: 5005 Comm: syz-executor184 Not tainted 6.4.0-rc2-syzkaller-00481-gdcbe4ea1985d #0 [ 72.370157][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 72.380398][ T5005] RIP: 0010:btf_type_id_size+0x2d9/0x9d0 [ 72.386103][ T5005] Code: ef e8 0b 2b e2 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 99 2e e2 ff 44 89 fe bf 0e 00 00 00 e8 ac 2a e2 ff e8 87 2e e2 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 72 2e e2 ff 44 [ 72.405816][ T5005] RSP: 0018:ffffc90003a8fb68 EFLAGS: 00010293 [ 72.411933][ T5005] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 72.420011][ T5005] RDX: ffff888026bad940 RSI: ffffffff81a21449 RDI: 0000000000000005 [ 72.428062][ T5005] RBP: ffff88802bda6400 R08: 0000000000000005 R09: 000000000000000e [ 72.436121][ T5005] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 72.444219][ T5005] R13: 0000000000000011 R14: ffff888078316818 R15: 0000000000000011 [ 72.452350][ T5005] FS: 0000555555f0c300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 72.461370][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.468309][ T5005] CR2: 0000000000c26388 CR3: 00000000792ab000 CR4: 00000000003506f0 [ 72.476352][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.484336][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.492390][ T5005] Call Trace: [ 72.495715][ T5005] [ 72.498687][ T5005] map_create+0x1157/0x1860 [ 72.503248][ T5005] ? __might_fault+0xe2/0x190 [ 72.508012][ T5005] ? lock_downgrade+0x690/0x690 [ 72.512917][ T5005] ? bpf_obj_name_cpy+0x1a0/0x1a0 [ 72.518069][ T5005] ? bpf_lsm_bpf+0x9/0x10 [ 72.522440][ T5005] __sys_bpf+0x127f/0x5420 [ 72.526922][ T5005] ? lock_sync+0x190/0x190 [ 72.531387][ T5005] ? bpf_perf_link_attach+0x520/0x520 [ 72.536827][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 72.541905][ T5005] ? spin_bug+0x1c0/0x1c0 [ 72.546331][ T5005] ? _raw_spin_lock_irq+0x45/0x50 [ 72.551433][ T5005] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 72.556991][ T5005] ? find_held_lock+0x2d/0x110 [ 72.561824][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.567130][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.572391][ T5005] __x64_sys_bpf+0x79/0xc0 [ 72.576877][ T5005] do_syscall_64+0x39/0xb0 [ 72.581352][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.587323][ T5005] RIP: 0033:0x7f5d75390d09 [ 72.591771][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.611448][ T5005] RSP: 002b:00007ffd516b38b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.619927][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d75390d09 [ 72.627959][ T5005] RDX: 0000000000000048 RSI: 0000000020000180 RDI: 0000000000000000 [ 72.635986][ T5005] RBP: 00007f5d75354eb0 R08: 0000000000000000 R09: 0000000000000000 [ 72.643985][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d75354f40 [ 72.652032][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.660252][ T5005] [ 72.663279][ T5005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.670562][ T5005] CPU: 0 PID: 5005 Comm: syz-executor184 Not tainted 6.4.0-rc2-syzkaller-00481-gdcbe4ea1985d #0 [ 72.681001][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 72.691064][ T5005] Call Trace: [ 72.694348][ T5005] [ 72.697291][ T5005] dump_stack_lvl+0xd9/0x150 [ 72.701905][ T5005] panic+0x686/0x730 [ 72.705822][ T5005] ? panic_smp_self_stop+0xa0/0xa0 [ 72.710976][ T5005] ? show_trace_log_lvl+0x285/0x390 [ 72.716244][ T5005] ? btf_type_id_size+0x2d9/0x9d0 [ 72.721297][ T5005] check_panic_on_warn+0xb1/0xc0 [ 72.726273][ T5005] __warn+0xf2/0x390 [ 72.730205][ T5005] ? btf_type_id_size+0x2d9/0x9d0 [ 72.735277][ T5005] report_bug+0x2da/0x500 [ 72.739650][ T5005] handle_bug+0x3c/0x70 [ 72.743827][ T5005] exc_invalid_op+0x18/0x50 [ 72.748351][ T5005] asm_exc_invalid_op+0x1a/0x20 [ 72.753240][ T5005] RIP: 0010:btf_type_id_size+0x2d9/0x9d0 [ 72.758901][ T5005] Code: ef e8 0b 2b e2 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 99 2e e2 ff 44 89 fe bf 0e 00 00 00 e8 ac 2a e2 ff e8 87 2e e2 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 72 2e e2 ff 44 [ 72.778541][ T5005] RSP: 0018:ffffc90003a8fb68 EFLAGS: 00010293 [ 72.784644][ T5005] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 72.792656][ T5005] RDX: ffff888026bad940 RSI: ffffffff81a21449 RDI: 0000000000000005 [ 72.800650][ T5005] RBP: ffff88802bda6400 R08: 0000000000000005 R09: 000000000000000e [ 72.808652][ T5005] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 72.816644][ T5005] R13: 0000000000000011 R14: ffff888078316818 R15: 0000000000000011 [ 72.824645][ T5005] ? btf_type_id_size+0x2d9/0x9d0 [ 72.829721][ T5005] ? btf_type_id_size+0x2d9/0x9d0 [ 72.834778][ T5005] map_create+0x1157/0x1860 [ 72.839328][ T5005] ? __might_fault+0xe2/0x190 [ 72.844044][ T5005] ? lock_downgrade+0x690/0x690 [ 72.848930][ T5005] ? bpf_obj_name_cpy+0x1a0/0x1a0 [ 72.854001][ T5005] ? bpf_lsm_bpf+0x9/0x10 [ 72.858363][ T5005] __sys_bpf+0x127f/0x5420 [ 72.862801][ T5005] ? lock_sync+0x190/0x190 [ 72.867274][ T5005] ? bpf_perf_link_attach+0x520/0x520 [ 72.872688][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 72.877757][ T5005] ? spin_bug+0x1c0/0x1c0 [ 72.882124][ T5005] ? _raw_spin_lock_irq+0x45/0x50 [ 72.887195][ T5005] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 72.892680][ T5005] ? find_held_lock+0x2d/0x110 [ 72.897486][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.902742][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.907981][ T5005] __x64_sys_bpf+0x79/0xc0 [ 72.912422][ T5005] do_syscall_64+0x39/0xb0 [ 72.916959][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.922885][ T5005] RIP: 0033:0x7f5d75390d09 [ 72.927324][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.946963][ T5005] RSP: 002b:00007ffd516b38b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.955400][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d75390d09 [ 72.963389][ T5005] RDX: 0000000000000048 RSI: 0000000020000180 RDI: 0000000000000000 [ 72.971386][ T5005] RBP: 00007f5d75354eb0 R08: 0000000000000000 R09: 0000000000000000 [ 72.979461][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d75354f40 [ 72.987461][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.995549][ T5005] [ 72.998796][ T5005] Kernel Offset: disabled [ 73.003211][ T5005] Rebooting in 86400 seconds..