./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2508241526 <...> Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. execve("./syz-executor2508241526", ["./syz-executor2508241526"], 0x7ffc758c9430 /* 10 vars */) = 0 brk(NULL) = 0x5555568ed000 brk(0x5555568edc40) = 0x5555568edc40 arch_prctl(ARCH_SET_FS, 0x5555568ed300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2508241526", 4096) = 28 brk(0x55555690ec40) = 0x55555690ec40 brk(0x55555690f000) = 0x55555690f000 mprotect(0x7fa2f3a42000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=2, value_size=4, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 51.775262][ T3600] ------------[ cut here ]------------ [ 51.781072][ T3600] trace type BPF program uses run-time allocation [ 51.787540][ T3600] WARNING: CPU: 1 PID: 3600 at kernel/bpf/verifier.c:12589 bpf_check+0xa515/0xb040 [ 51.796901][ T3600] Modules linked in: [ 51.800980][ T3600] CPU: 1 PID: 3600 Comm: syz-executor250 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 51.811182][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 51.821386][ T3600] RIP: 0010:bpf_check+0xa515/0xb040 [ 51.826601][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6 [ 51.846420][ T3600] RSP: 0018:ffffc90002e3f8b0 EFLAGS: 00010286 [ 51.852629][ T3600] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 51.860726][ T3600] RDX: ffff88807d0eba80 RSI: ffffffff81610608 RDI: fffff520005c7f08 [ 51.868709][ T3600] RBP: ffffc90002e3fb10 R08: 0000000000000005 R09: 0000000000000000 [ 51.876736][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888076b1d000 [ 51.884814][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002 [ 51.892828][ T3600] FS: 00005555568ed300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.901900][ T3600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.909118][ T3600] CR2: 00007f3e9b6e2a70 CR3: 0000000025434000 CR4: 00000000003506e0 [ 51.917149][ T3600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.925221][ T3600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.933260][ T3600] Call Trace: [ 51.936555][ T3600] [ 51.939542][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 51.944892][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 51.949821][ T3600] ? __might_fault+0xd1/0x170 [ 51.954579][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 51.959447][ T3600] ? ktime_get_with_offset+0x3f2/0x500 [ 51.965040][ T3600] ? memset+0x20/0x40 [ 51.969259][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0 [ 51.974362][ T3600] bpf_prog_load+0xfb2/0x2250 [ 51.979058][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 51.985054][ T3600] ? find_held_lock+0x2d/0x110 [ 51.989881][ T3600] ? __might_fault+0xd1/0x170 [ 51.994566][ T3600] ? bpf_lsm_bpf+0x5/0x10 [ 51.998899][ T3600] __sys_bpf+0x11a1/0x5700 [ 52.003398][ T3600] ? lock_release+0x780/0x780 [ 52.008441][ T3600] ? ptrace_stop.part.0+0x520/0xa80 [ 52.013890][ T3600] ? bpf_perf_link_attach+0x520/0x520 [ 52.019305][ T3600] ? do_raw_spin_lock+0x120/0x2a0 [ 52.024454][ T3600] ? rwlock_bug.part.0+0x90/0x90 [ 52.029419][ T3600] ? _raw_spin_lock_irq+0x41/0x50 [ 52.034532][ T3600] ? find_held_lock+0x2d/0x110 [ 52.039328][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.044612][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.049960][ T3600] ? lockdep_hardirqs_on+0x79/0x100 [ 52.055279][ T3600] __x64_sys_bpf+0x75/0xb0 [ 52.060039][ T3600] do_syscall_64+0x35/0xb0 [ 52.064606][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 52.070579][ T3600] RIP: 0033:0x7fa2f39d5ce9 [ 52.075099][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.094782][ T3600] RSP: 002b:00007ffd7736a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.103414][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2f39d5ce9 [ 52.111459][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 52.119445][ T3600] RBP: 00007fa2f3999e90 R08: 0000000000000000 R09: 0000000000000000 [ 52.127467][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2f3999f20 [ 52.135648][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.143680][ T3600] [ 52.146713][ T3600] Kernel panic - not syncing: panic_on_warn set ... [ 52.153373][ T3600] CPU: 0 PID: 3600 Comm: syz-executor250 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 52.163351][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 52.173509][ T3600] Call Trace: [ 52.176788][ T3600] [ 52.179727][ T3600] dump_stack_lvl+0xcd/0x134 [ 52.184761][ T3600] panic+0x2d7/0x636 [ 52.188654][ T3600] ? panic_print_sys_info.part.0+0x10b/0x10b [ 52.194820][ T3600] ? __warn.cold+0x248/0x2c4 [ 52.199409][ T3600] ? bpf_check+0xa515/0xb040 [ 52.204013][ T3600] __warn.cold+0x259/0x2c4 [ 52.208536][ T3600] ? __wake_up_klogd.part.0+0x99/0xf0 [ 52.213952][ T3600] ? bpf_check+0xa515/0xb040 [ 52.218546][ T3600] report_bug+0x1bc/0x210 [ 52.223067][ T3600] handle_bug+0x3c/0x60 [ 52.227240][ T3600] exc_invalid_op+0x14/0x40 [ 52.231834][ T3600] asm_exc_invalid_op+0x1b/0x20 [ 52.236798][ T3600] RIP: 0010:bpf_check+0xa515/0xb040 [ 52.242002][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6 [ 52.261699][ T3600] RSP: 0018:ffffc90002e3f8b0 EFLAGS: 00010286 [ 52.268315][ T3600] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 52.276397][ T3600] RDX: ffff88807d0eba80 RSI: ffffffff81610608 RDI: fffff520005c7f08 [ 52.284374][ T3600] RBP: ffffc90002e3fb10 R08: 0000000000000005 R09: 0000000000000000 [ 52.292783][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888076b1d000 [ 52.300757][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002 [ 52.308746][ T3600] ? vprintk+0x88/0x90 [ 52.312845][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 52.317968][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 52.322820][ T3600] ? __might_fault+0xd1/0x170 [ 52.327531][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 52.332402][ T3600] ? ktime_get_with_offset+0x3f2/0x500 [ 52.337872][ T3600] ? memset+0x20/0x40 [ 52.341949][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0 [ 52.347004][ T3600] bpf_prog_load+0xfb2/0x2250 [ 52.351695][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 52.357593][ T3600] ? find_held_lock+0x2d/0x110 [ 52.362402][ T3600] ? __might_fault+0xd1/0x170 [ 52.367300][ T3600] ? bpf_lsm_bpf+0x5/0x10 [ 52.371666][ T3600] __sys_bpf+0x11a1/0x5700 [ 52.376190][ T3600] ? lock_release+0x780/0x780 [ 52.380918][ T3600] ? ptrace_stop.part.0+0x520/0xa80 [ 52.386167][ T3600] ? bpf_perf_link_attach+0x520/0x520 [ 52.391659][ T3600] ? do_raw_spin_lock+0x120/0x2a0 [ 52.396697][ T3600] ? rwlock_bug.part.0+0x90/0x90 [ 52.401686][ T3600] ? _raw_spin_lock_irq+0x41/0x50 [ 52.406842][ T3600] ? find_held_lock+0x2d/0x110 [ 52.411652][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.416889][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.422200][ T3600] ? lockdep_hardirqs_on+0x79/0x100 [ 52.427461][ T3600] __x64_sys_bpf+0x75/0xb0 [ 52.431892][ T3600] do_syscall_64+0x35/0xb0 [ 52.436322][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 52.442261][ T3600] RIP: 0033:0x7fa2f39d5ce9 [ 52.446677][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.466648][ T3600] RSP: 002b:00007ffd7736a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.475062][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2f39d5ce9 [ 52.483035][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 52.491003][ T3600] RBP: 00007fa2f3999e90 R08: 0000000000000000 R09: 0000000000000000 [ 52.498972][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2f3999f20 [ 52.506960][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.514941][ T3600] [ 52.518416][ T3600] Kernel Offset: disabled [ 52.522830][ T3600] Rebooting in 86400 seconds..