./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3429503348 <...> Warning: Permanently added '10.128.1.9' (ECDSA) to the list of known hosts. execve("./syz-executor3429503348", ["./syz-executor3429503348"], 0x7ffece6c3050 /* 10 vars */) = 0 brk(NULL) = 0x555555adf000 brk(0x555555adfc40) = 0x555555adfc40 arch_prctl(ARCH_SET_FS, 0x555555adf300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3429503348", 4096) = 28 brk(0x555555b00c40) = 0x555555b00c40 brk(0x555555b01000) = 0x555555b01000 mprotect(0x7f1f4131a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=128, value_size=8, max_entries=129, map_flags=BPF_F_NO_PREALLOC|BPF_F_RDONLY_PROG, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 syzkaller login: [ 48.998633][ T3610] ------------[ cut here ]------------ [ 49.004245][ T3610] trace type BPF program uses run-time allocation [ 49.010694][ T3610] WARNING: CPU: 1 PID: 3610 at kernel/bpf/verifier.c:12517 check_map_prog_compatibility+0x76b/0x920 [ 49.021566][ T3610] Modules linked in: [ 49.025545][ T3610] CPU: 1 PID: 3610 Comm: syz-executor342 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 49.035748][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 49.045831][ T3610] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 49.052559][ T3610] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 49.072468][ T3610] RSP: 0018:ffffc9000308f1e8 EFLAGS: 00010246 [ 49.078540][ T3610] RAX: e7486afe99925d00 RBX: 0000000000000001 RCX: ffff888027919d80 [ 49.086922][ T3610] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 49.095003][ T3610] RBP: ffff88814ac49030 R08: ffffffff816c1ccd R09: ffffed1017364f14 [ 49.103024][ T3610] R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: ffff88814ac49000 [ 49.110998][ T3610] R13: dffffc0000000000 R14: ffff8880220bc000 R15: 0000000000000011 [ 49.119016][ T3610] FS: 0000555555adf300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 49.129036][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.135681][ T3610] CR2: 0000563404cbb6f8 CR3: 0000000073ff5000 CR4: 00000000003506e0 [ 49.143736][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.151698][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.159740][ T3610] Call Trace: [ 49.163040][ T3610] [ 49.165981][ T3610] resolve_pseudo_ldimm64+0x67f/0x1270 [ 49.171437][ T3610] ? check_attach_btf_id+0xef0/0xef0 [ 49.176775][ T3610] ? bpf_lsm_capable+0x5/0x10 [ 49.181463][ T3610] bpf_check+0x2606/0x13b70 [ 49.186021][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.191403][ T3610] ? validate_chain+0x126/0x65c0 [ 49.196684][ T3610] ? validate_chain+0x126/0x65c0 [ 49.201657][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.207507][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.213707][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.219091][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.224584][ T3610] ? mark_lock+0x98/0x350 [ 49.228949][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.234349][ T3610] ? mark_lock+0x98/0x350 [ 49.238701][ T3610] ? bpf_get_btf_vmlinux+0x10/0x10 [ 49.243857][ T3610] ? __lock_acquire+0x129a/0x1f80 [ 49.248900][ T3610] ? pcpu_alloc+0xf4d/0x15d0 [ 49.253537][ T3610] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.259211][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.265234][ T3610] ? mark_lock+0x98/0x350 [ 49.269576][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.275074][ T3610] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.280729][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.286764][ T3610] ? read_lock_is_recursive+0x10/0x10 [ 49.292174][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.297642][ T3610] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 49.303657][ T3610] ? print_irqtrace_events+0x220/0x220 [ 49.309123][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.314645][ T3610] ? seqcount_lockdep_reader_access+0x153/0x220 [ 49.320908][ T3610] ? lockdep_hardirqs_on+0x95/0x140 [ 49.326189][ T3610] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 49.332510][ T3610] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 49.337792][ T3610] ? _raw_spin_unlock+0x24/0x40 [ 49.342762][ T3610] ? find_vmap_area+0x104/0x120 [ 49.347620][ T3610] ? __might_fault+0xb2/0x110 [ 49.352386][ T3610] ? memset+0x1f/0x40 [ 49.356377][ T3610] ? bpf_obj_name_cpy+0x191/0x1d0 [ 49.361390][ T3610] bpf_prog_load+0x1288/0x1b80 [ 49.366199][ T3610] ? map_freeze+0x390/0x390 [ 49.370706][ T3610] ? __might_sleep+0xc0/0xc0 [ 49.375359][ T3610] ? __might_fault+0xb2/0x110 [ 49.380044][ T3610] ? bpf_lsm_bpf+0x5/0x10 [ 49.384404][ T3610] ? security_bpf+0x9d/0xb0 [ 49.388926][ T3610] __sys_bpf+0x3d3/0x6c0 [ 49.393227][ T3610] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 49.398608][ T3610] ? print_irqtrace_events+0x220/0x220 [ 49.404099][ T3610] ? vtime_user_exit+0x2b2/0x3e0 [ 49.409059][ T3610] ? __ct_user_exit+0x81/0xe0 [ 49.413775][ T3610] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 49.419760][ T3610] __x64_sys_bpf+0x78/0x90 [ 49.424222][ T3610] do_syscall_64+0x2b/0x70 [ 49.428661][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.434602][ T3610] RIP: 0033:0x7f1f412add59 [ 49.439039][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.458705][ T3610] RSP: 002b:00007ffefadb0998 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.467170][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f412add59 [ 49.475199][ T3610] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 49.483238][ T3610] RBP: 00007f1f41271f00 R08: 0000000000000000 R09: 0000000000000000 [ 49.491220][ T3610] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f1f41271f90 [ 49.499235][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.507252][ T3610] [ 49.510285][ T3610] Kernel panic - not syncing: panic_on_warn set ... [ 49.516851][ T3610] CPU: 0 PID: 3610 Comm: syz-executor342 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 49.526982][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 49.537036][ T3610] Call Trace: [ 49.540301][ T3610] [ 49.543216][ T3610] dump_stack_lvl+0x1e3/0x2cb [ 49.547886][ T3610] ? io_notif_register+0x5e7/0x5e7 [ 49.552986][ T3610] ? panic+0x76e/0x76e [ 49.557043][ T3610] ? vscnprintf+0x59/0x80 [ 49.561372][ T3610] ? check_map_prog_compatibility+0x6a0/0x920 [ 49.567423][ T3610] panic+0x312/0x76e [ 49.571303][ T3610] ? __warn+0x131/0x220 [ 49.575443][ T3610] ? fb_is_primary_device+0xcc/0xcc [ 49.580630][ T3610] ? check_map_prog_compatibility+0x76b/0x920 [ 49.586686][ T3610] __warn+0x1fa/0x220 [ 49.590665][ T3610] ? check_map_prog_compatibility+0x76b/0x920 [ 49.596730][ T3610] report_bug+0x1b3/0x2d0 [ 49.601065][ T3610] handle_bug+0x3d/0x70 [ 49.605213][ T3610] exc_invalid_op+0x16/0x40 [ 49.609710][ T3610] asm_exc_invalid_op+0x16/0x20 [ 49.614554][ T3610] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 49.621225][ T3610] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 49.640821][ T3610] RSP: 0018:ffffc9000308f1e8 EFLAGS: 00010246 [ 49.646881][ T3610] RAX: e7486afe99925d00 RBX: 0000000000000001 RCX: ffff888027919d80 [ 49.654844][ T3610] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 49.662821][ T3610] RBP: ffff88814ac49030 R08: ffffffff816c1ccd R09: ffffed1017364f14 [ 49.670799][ T3610] R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: ffff88814ac49000 [ 49.678769][ T3610] R13: dffffc0000000000 R14: ffff8880220bc000 R15: 0000000000000011 [ 49.686738][ T3610] ? __wake_up_klogd+0xcd/0x100 [ 49.691590][ T3610] ? check_map_prog_compatibility+0x76b/0x920 [ 49.697662][ T3610] resolve_pseudo_ldimm64+0x67f/0x1270 [ 49.703123][ T3610] ? check_attach_btf_id+0xef0/0xef0 [ 49.708416][ T3610] ? bpf_lsm_capable+0x5/0x10 [ 49.713088][ T3610] bpf_check+0x2606/0x13b70 [ 49.717602][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.722969][ T3610] ? validate_chain+0x126/0x65c0 [ 49.727900][ T3610] ? validate_chain+0x126/0x65c0 [ 49.732834][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.738203][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.744201][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.749572][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.754937][ T3610] ? mark_lock+0x98/0x350 [ 49.759262][ T3610] ? reacquire_held_locks+0x680/0x680 [ 49.764711][ T3610] ? mark_lock+0x98/0x350 [ 49.769033][ T3610] ? bpf_get_btf_vmlinux+0x10/0x10 [ 49.774149][ T3610] ? __lock_acquire+0x129a/0x1f80 [ 49.779174][ T3610] ? pcpu_alloc+0xf4d/0x15d0 [ 49.783756][ T3610] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.789406][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.795419][ T3610] ? mark_lock+0x98/0x350 [ 49.799758][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.805226][ T3610] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.810868][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.816882][ T3610] ? read_lock_is_recursive+0x10/0x10 [ 49.822262][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.827722][ T3610] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 49.833715][ T3610] ? print_irqtrace_events+0x220/0x220 [ 49.839191][ T3610] ? ktime_get_with_offset+0x125/0x360 [ 49.844653][ T3610] ? seqcount_lockdep_reader_access+0x153/0x220 [ 49.850902][ T3610] ? lockdep_hardirqs_on+0x95/0x140 [ 49.856099][ T3610] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 49.862339][ T3610] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 49.867656][ T3610] ? _raw_spin_unlock+0x24/0x40 [ 49.872509][ T3610] ? find_vmap_area+0x104/0x120 [ 49.877379][ T3610] ? __might_fault+0xb2/0x110 [ 49.882058][ T3610] ? memset+0x1f/0x40 [ 49.886033][ T3610] ? bpf_obj_name_cpy+0x191/0x1d0 [ 49.891054][ T3610] bpf_prog_load+0x1288/0x1b80 [ 49.895827][ T3610] ? map_freeze+0x390/0x390 [ 49.900325][ T3610] ? __might_sleep+0xc0/0xc0 [ 49.904940][ T3610] ? __might_fault+0xb2/0x110 [ 49.909608][ T3610] ? bpf_lsm_bpf+0x5/0x10 [ 49.913929][ T3610] ? security_bpf+0x9d/0xb0 [ 49.918427][ T3610] __sys_bpf+0x3d3/0x6c0 [ 49.922669][ T3610] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 49.928041][ T3610] ? print_irqtrace_events+0x220/0x220 [ 49.933488][ T3610] ? vtime_user_exit+0x2b2/0x3e0 [ 49.938418][ T3610] ? __ct_user_exit+0x81/0xe0 [ 49.943088][ T3610] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 49.949074][ T3610] __x64_sys_bpf+0x78/0x90 [ 49.953486][ T3610] do_syscall_64+0x2b/0x70 [ 49.957895][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.963778][ T3610] RIP: 0033:0x7f1f412add59 [ 49.968186][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.987794][ T3610] RSP: 002b:00007ffefadb0998 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.996209][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f412add59 [ 50.004173][ T3610] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 50.012138][ T3610] RBP: 00007f1f41271f00 R08: 0000000000000000 R09: 0000000000000000 [ 50.020103][ T3610] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f1f41271f90 [ 50.028066][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.036041][ T3610] [ 50.039232][ T3610] Kernel Offset: disabled [ 50.043601][ T3610] Rebooting in 86400 seconds..