./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4199301224 <...> DUID 00:04:60:0b:d9:94:f1:4e:15:d4:cc:23:27:00:18:99:58:ba forked to background, child pid 3186 [ 27.866371][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.876531][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. execve("./syz-executor4199301224", ["./syz-executor4199301224"], 0x7ffcd9ebac90 /* 10 vars */) = 0 brk(NULL) = 0x555555e10000 brk(0x555555e10c40) = 0x555555e10c40 arch_prctl(ARCH_SET_FS, 0x555555e10300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4199301224", 4096) = 28 brk(0x555555e31c40) = 0x555555e31c40 brk(0x555555e32000) = 0x555555e32000 mprotect(0x7f0ad0049000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 syzkaller login: [ 50.832858][ T3615] ------------[ cut here ]------------ [ 50.838459][ T3615] WARNING: CPU: 1 PID: 3615 at kernel/bpf/btf.c:1946 btf_type_id_size+0x2d5/0x9d0 [ 50.847936][ T3615] Modules linked in: [ 50.851907][ T3615] CPU: 1 PID: 3615 Comm: syz-executor419 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 50.862121][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 50.872281][ T3615] RIP: 0010:btf_type_id_size+0x2d5/0x9d0 [ 50.877985][ T3615] Code: ef e8 7f 8e e4 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 6d 91 e4 ff 44 89 fe bf 0e 00 00 00 e8 20 8e e4 ff e8 5b 91 e4 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 46 91 e4 ff 44 [ 50.897648][ T3615] RSP: 0018:ffffc90003cbfb40 EFLAGS: 00010293 [ 50.903739][ T3615] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 50.911766][ T3615] RDX: ffff88801ec41d80 RSI: ffffffff81968415 RDI: 0000000000000005 [ 50.919847][ T3615] RBP: ffff88801f211200 R08: 0000000000000005 R09: 000000000000000e [ 50.927883][ T3615] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 50.935914][ T3615] R13: 0000000000000011 R14: ffff8880126304a4 R15: 0000000000000011 [ 50.943906][ T3615] FS: 0000555555e10300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.952893][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.959562][ T3615] CR2: 00007ffe774fbfa0 CR3: 0000000071b69000 CR4: 00000000003506f0 [ 50.967590][ T3615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.975597][ T3615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.983571][ T3615] Call Trace: [ 50.986887][ T3615] [ 50.989913][ T3615] btf_new_fd+0x1926/0x1e70 [ 50.994422][ T3615] ? btf_type_snprintf_show+0x3b0/0x3b0 [ 51.000032][ T3615] ? apparmor_capable+0x1d8/0x460 [ 51.005133][ T3615] ? security_capable+0x8f/0xc0 [ 51.009984][ T3615] __sys_bpf+0xb7d/0x4cf0 [ 51.014308][ T3615] ? lock_release+0x780/0x780 [ 51.019045][ T3615] ? bpf_perf_link_attach+0x520/0x520 [ 51.024439][ T3615] ? do_raw_spin_lock+0x120/0x2a0 [ 51.029512][ T3615] ? rwlock_bug.part.0+0x90/0x90 [ 51.034471][ T3615] ? _raw_spin_lock_irq+0x41/0x50 [ 51.039573][ T3615] ? find_held_lock+0x2d/0x110 [ 51.044372][ T3615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.049827][ T3615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.055127][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 51.060359][ T3615] __x64_sys_bpf+0x75/0xb0 [ 51.066334][ T3615] do_syscall_64+0x35/0xb0 [ 51.070782][ T3615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.076740][ T3615] RIP: 0033:0x7f0acffdcc69 [ 51.081168][ T3615] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.100813][ T3615] RSP: 002b:00007ffe5d907848 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.109266][ T3615] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0acffdcc69 [ 51.117270][ T3615] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 51.125272][ T3615] RBP: 00007f0acffa0e10 R08: 0000000000000000 R09: 0000000000000000 [ 51.133231][ T3615] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f0acffa0ea0 [ 51.141289][ T3615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.149312][ T3615] [ 51.152335][ T3615] Kernel panic - not syncing: panic_on_warn set ... [ 51.158918][ T3615] CPU: 0 PID: 3615 Comm: syz-executor419 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 51.168977][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 51.179027][ T3615] Call Trace: [ 51.182318][ T3615] [ 51.185247][ T3615] dump_stack_lvl+0xcd/0x134 [ 51.190182][ T3615] panic+0x2c8/0x627 [ 51.194064][ T3615] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.200035][ T3615] ? __warn.cold+0x248/0x2c4 [ 51.204623][ T3615] ? btf_type_id_size+0x2d5/0x9d0 [ 51.209674][ T3615] __warn.cold+0x259/0x2c4 [ 51.214097][ T3615] ? btf_type_id_size+0x2d5/0x9d0 [ 51.219142][ T3615] report_bug+0x1bc/0x210 [ 51.223485][ T3615] handle_bug+0x3c/0x70 [ 51.227647][ T3615] exc_invalid_op+0x14/0x40 [ 51.232247][ T3615] asm_exc_invalid_op+0x16/0x20 [ 51.237118][ T3615] RIP: 0010:btf_type_id_size+0x2d5/0x9d0 [ 51.242772][ T3615] Code: ef e8 7f 8e e4 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 6d 91 e4 ff 44 89 fe bf 0e 00 00 00 e8 20 8e e4 ff e8 5b 91 e4 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 46 91 e4 ff 44 [ 51.262388][ T3615] RSP: 0018:ffffc90003cbfb40 EFLAGS: 00010293 [ 51.268477][ T3615] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 51.276489][ T3615] RDX: ffff88801ec41d80 RSI: ffffffff81968415 RDI: 0000000000000005 [ 51.284490][ T3615] RBP: ffff88801f211200 R08: 0000000000000005 R09: 000000000000000e [ 51.292470][ T3615] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 51.300453][ T3615] R13: 0000000000000011 R14: ffff8880126304a4 R15: 0000000000000011 [ 51.308440][ T3615] ? btf_type_id_size+0x2d5/0x9d0 [ 51.313503][ T3615] btf_new_fd+0x1926/0x1e70 [ 51.318031][ T3615] ? btf_type_snprintf_show+0x3b0/0x3b0 [ 51.323581][ T3615] ? apparmor_capable+0x1d8/0x460 [ 51.328622][ T3615] ? security_capable+0x8f/0xc0 [ 51.333491][ T3615] __sys_bpf+0xb7d/0x4cf0 [ 51.337829][ T3615] ? lock_release+0x780/0x780 [ 51.342531][ T3615] ? bpf_perf_link_attach+0x520/0x520 [ 51.347947][ T3615] ? do_raw_spin_lock+0x120/0x2a0 [ 51.352992][ T3615] ? rwlock_bug.part.0+0x90/0x90 [ 51.357945][ T3615] ? _raw_spin_lock_irq+0x41/0x50 [ 51.363013][ T3615] ? find_held_lock+0x2d/0x110 [ 51.367832][ T3615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.373053][ T3615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.378284][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 51.383605][ T3615] __x64_sys_bpf+0x75/0xb0 [ 51.388038][ T3615] do_syscall_64+0x35/0xb0 [ 51.392481][ T3615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.398406][ T3615] RIP: 0033:0x7f0acffdcc69 [ 51.402829][ T3615] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.422532][ T3615] RSP: 002b:00007ffe5d907848 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.430955][ T3615] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0acffdcc69 [ 51.438930][ T3615] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 51.446904][ T3615] RBP: 00007f0acffa0e10 R08: 0000000000000000 R09: 0000000000000000 [ 51.454876][ T3615] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f0acffa0ea0 [ 51.462854][ T3615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.470841][ T3615] [ 51.474123][ T3615] Kernel Offset: disabled [ 51.478498][ T3615] Rebooting in 86400 seconds..