./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor712114587
<...>
forked to background, child pid 3175
no interfaces have a carrier
[ 21.414543][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.424565][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts.
execve("./syz-executor712114587", ["./syz-executor712114587"], 0x7ffed0c89ca0 /* 10 vars */) = 0
brk(NULL) = 0x555556969000
brk(0x555556969c40) = 0x555556969c40
arch_prctl(ARCH_SET_FS, 0x555556969300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor712114587", 4096) = 27
brk(0x55555698ac40) = 0x55555698ac40
brk(0x55555698b000) = 0x55555698b000
mprotect(0x7f844a8d1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=4, value_size=4, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
syzkaller login: [ 41.353074][ T3597] ------------[ cut here ]------------
[ 41.358976][ T3597] trace type BPF program uses run-time allocation
[ 41.366274][ T3597] WARNING: CPU: 0 PID: 3597 at kernel/bpf/verifier.c:11998 bpf_check+0xb1d9/0xbbc0
[ 41.376571][ T3597] Modules linked in:
[ 41.380451][ T3597] CPU: 0 PID: 3597 Comm: syz-executor712 Not tainted 5.18.0-syzkaller-01850-gaa051d36ce4a #0
[ 41.390935][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.401048][ T3597] RIP: 0010:bpf_check+0xb1d9/0xbbc0
[ 41.406307][ T3597] Code: ff ff e8 8a 5a 37 00 8b 95 18 fe ff ff e9 83 cc ff ff e8 6a d3 eb ff 48 c7 c7 20 0e d4 89 c6 05 82 4e 17 0c 01 e8 2d 16 9c 07 <0f> 0b e9 ac c3 ff ff 48 89 cf e8 e8 59 37 00 e9 fe 72 ff ff e8 be
[ 41.425974][ T3597] RSP: 0018:ffffc90002eff8a8 EFLAGS: 00010286
[ 41.432202][ T3597] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
[ 41.440186][ T3597] RDX: ffff88807f09d880 RSI: ffffffff81604a38 RDI: fffff520005dff07
[ 41.448254][ T3597] RBP: ffffc90002effb10 R08: 0000000000000000 R09: 0000000000000001
[ 41.456305][ T3597] R10: ffffffff815ff40e R11: 0000000000000000 R12: ffff88801da3c000
[ 41.464478][ T3597] R13: dffffc0000000000 R14: ffffc90000abe058 R15: 0000000000000002
[ 41.472531][ T3597] FS: 0000555556969300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 41.481502][ T3597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.488149][ T3597] CR2: 00007fd93a312a70 CR3: 0000000073176000 CR4: 0000000000350ef0
[ 41.496189][ T3597] Call Trace:
[ 41.499451][ T3597]
[ 41.502504][ T3597] ? bpf_get_btf_vmlinux+0x10/0x10
[ 41.507672][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.512563][ T3597] ? __might_fault+0xd1/0x170
[ 41.517267][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.522228][ T3597] ? memset+0x20/0x40
[ 41.526249][ T3597] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 41.532807][ T3597] ? bpf_obj_name_cpy+0x144/0x1a0
[ 41.537893][ T3597] ? bpf_prog_load+0xf71/0x2250
[ 41.542816][ T3597] bpf_prog_load+0xfb2/0x2250
[ 41.547517][ T3597] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 41.553481][ T3597] ? find_held_lock+0x2d/0x110
[ 41.558439][ T3597] ? __might_fault+0xd1/0x170
[ 41.563208][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.568085][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 41.574427][ T3597] __sys_bpf+0x674/0x55d0
[ 41.578790][ T3597] ? lock_release+0x780/0x780
[ 41.583676][ T3597] ? bpf_perf_link_attach+0x520/0x520
[ 41.589106][ T3597] ? rwlock_bug.part.0+0x90/0x90
[ 41.594089][ T3597] ? _raw_spin_lock_irq+0x41/0x50
[ 41.599203][ T3597] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 41.605545][ T3597] ? find_held_lock+0x2d/0x110
[ 41.610364][ T3597] ? _raw_spin_unlock_irq+0x1f/0x40
[ 41.615632][ T3597] ? lockdep_hardirqs_on+0x79/0x100
[ 41.620866][ T3597] ? trace_hardirqs_on+0x38/0x1c0
[ 41.625984][ T3597] __x64_sys_bpf+0x75/0xb0
[ 41.630437][ T3597] do_syscall_64+0x35/0xb0
[ 41.634905][ T3597] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.640852][ T3597] RIP: 0033:0x7f844a864d49
[ 41.645335][ T3597] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.665224][ T3597] RSP: 002b:00007ffeabbe0ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 41.673725][ T3597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f844a864d49
[ 41.681804][ T3597] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005
[ 41.689785][ T3597] RBP: 00007f844a828ef0 R08: 0000000000000000 R09: 0000000000000000
[ 41.697819][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f844a828f80
[ 41.705861][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.713932][ T3597]
[ 41.716962][ T3597] Kernel panic - not syncing: panic_on_warn set ...
[ 41.723522][ T3597] CPU: 0 PID: 3597 Comm: syz-executor712 Not tainted 5.18.0-syzkaller-01850-gaa051d36ce4a #0
[ 41.733645][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.743686][ T3597] Call Trace:
[ 41.746943][ T3597]
[ 41.749852][ T3597] dump_stack_lvl+0xcd/0x134
[ 41.754439][ T3597] panic+0x2d7/0x636
[ 41.758314][ T3597] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 41.764279][ T3597] ? __warn.cold+0x1d1/0x2c5
[ 41.768852][ T3597] ? bpf_check+0xb1d9/0xbbc0
[ 41.773425][ T3597] __warn.cold+0x1e2/0x2c5
[ 41.777820][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 41.784040][ T3597] ? bpf_check+0xb1d9/0xbbc0
[ 41.788608][ T3597] report_bug+0x1bc/0x210
[ 41.792935][ T3597] handle_bug+0x3c/0x60
[ 41.797071][ T3597] exc_invalid_op+0x14/0x40
[ 41.801552][ T3597] asm_exc_invalid_op+0x1b/0x20
[ 41.806422][ T3597] RIP: 0010:bpf_check+0xb1d9/0xbbc0
[ 41.811612][ T3597] Code: ff ff e8 8a 5a 37 00 8b 95 18 fe ff ff e9 83 cc ff ff e8 6a d3 eb ff 48 c7 c7 20 0e d4 89 c6 05 82 4e 17 0c 01 e8 2d 16 9c 07 <0f> 0b e9 ac c3 ff ff 48 89 cf e8 e8 59 37 00 e9 fe 72 ff ff e8 be
[ 41.831210][ T3597] RSP: 0018:ffffc90002eff8a8 EFLAGS: 00010286
[ 41.837445][ T3597] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
[ 41.845420][ T3597] RDX: ffff88807f09d880 RSI: ffffffff81604a38 RDI: fffff520005dff07
[ 41.853383][ T3597] RBP: ffffc90002effb10 R08: 0000000000000000 R09: 0000000000000001
[ 41.861349][ T3597] R10: ffffffff815ff40e R11: 0000000000000000 R12: ffff88801da3c000
[ 41.869322][ T3597] R13: dffffc0000000000 R14: ffffc90000abe058 R15: 0000000000000002
[ 41.877473][ T3597] ? wake_up_klogd.part.0+0x8e/0xd0
[ 41.882694][ T3597] ? vprintk+0x88/0x90
[ 41.886763][ T3597] ? bpf_check+0xb1d9/0xbbc0
[ 41.891371][ T3597] ? bpf_get_btf_vmlinux+0x10/0x10
[ 41.896479][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.901326][ T3597] ? __might_fault+0xd1/0x170
[ 41.905997][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.910848][ T3597] ? memset+0x20/0x40
[ 41.914820][ T3597] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 41.921054][ T3597] ? bpf_obj_name_cpy+0x144/0x1a0
[ 41.926073][ T3597] ? bpf_prog_load+0xf71/0x2250
[ 41.930920][ T3597] bpf_prog_load+0xfb2/0x2250
[ 41.935593][ T3597] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 41.941478][ T3597] ? find_held_lock+0x2d/0x110
[ 41.946247][ T3597] ? __might_fault+0xd1/0x170
[ 41.950928][ T3597] ? lock_downgrade+0x6e0/0x6e0
[ 41.955795][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 41.962041][ T3597] __sys_bpf+0x674/0x55d0
[ 41.966367][ T3597] ? lock_release+0x780/0x780
[ 41.971048][ T3597] ? bpf_perf_link_attach+0x520/0x520
[ 41.976425][ T3597] ? rwlock_bug.part.0+0x90/0x90
[ 41.981374][ T3597] ? _raw_spin_lock_irq+0x41/0x50
[ 41.986429][ T3597] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 41.992686][ T3597] ? find_held_lock+0x2d/0x110
[ 41.997463][ T3597] ? _raw_spin_unlock_irq+0x1f/0x40
[ 42.002662][ T3597] ? lockdep_hardirqs_on+0x79/0x100
[ 42.007863][ T3597] ? trace_hardirqs_on+0x38/0x1c0
[ 42.012893][ T3597] __x64_sys_bpf+0x75/0xb0
[ 42.017566][ T3597] do_syscall_64+0x35/0xb0
[ 42.021993][ T3597] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 42.027900][ T3597] RIP: 0033:0x7f844a864d49
[ 42.032310][ T3597] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.051931][ T3597] RSP: 002b:00007ffeabbe0ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 42.060517][ T3597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f844a864d49
[ 42.068494][ T3597] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005
[ 42.076482][ T3597] RBP: 00007f844a828ef0 R08: 0000000000000000 R09: 0000000000000000
[ 42.084449][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f844a828f80
[ 42.092414][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.100400][ T3597]
[ 42.104082][ T3597] Kernel Offset: disabled
[ 42.108446][ T3597] Rebooting in 86400 seconds..