./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3901556115 <...> Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. execve("./syz-executor3901556115", ["./syz-executor3901556115"], 0x7fff26da1050 /* 10 vars */) = 0 brk(NULL) = 0x555556254000 brk(0x555556254c40) = 0x555556254c40 arch_prctl(ARCH_SET_FS, 0x555556254300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3901556115", 4096) = 28 brk(0x555556275c40) = 0x555556275c40 brk(0x555556276000) = 0x555556276000 mprotect(0x7f798424a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=128, value_size=8, max_entries=129, map_flags=BPF_F_NO_PREALLOC|BPF_F_RDONLY_PROG, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 49.646873][ T3607] ------------[ cut here ]------------ [ 49.652375][ T3607] trace type BPF program uses run-time allocation [ 49.659310][ T3607] WARNING: CPU: 0 PID: 3607 at kernel/bpf/verifier.c:12589 bpf_check+0xa515/0xb040 [ 49.668831][ T3607] Modules linked in: [ 49.672717][ T3607] CPU: 0 PID: 3607 Comm: syz-executor390 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 49.682981][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 49.693347][ T3607] RIP: 0010:bpf_check+0xa515/0xb040 [ 49.698834][ T3607] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6 [ 49.718637][ T3607] RSP: 0018:ffffc90002eff8b0 EFLAGS: 00010286 [ 49.724850][ T3607] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 49.732811][ T3607] RDX: ffff888024779d40 RSI: ffffffff81610608 RDI: fffff520005dff08 [ 49.740893][ T3607] RBP: ffffc90002effb10 R08: 0000000000000005 R09: 0000000000000000 [ 49.748923][ T3607] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807c51e800 [ 49.756944][ T3607] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002 [ 49.764958][ T3607] FS: 0000555556254300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 49.773888][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.780498][ T3607] CR2: 0000000020000c40 CR3: 00000000767ab000 CR4: 00000000003506e0 [ 49.788500][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.796515][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.804554][ T3607] Call Trace: [ 49.807821][ T3607] [ 49.810752][ T3607] ? bpf_get_btf_vmlinux+0x10/0x10 [ 49.815915][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 49.820787][ T3607] ? __might_fault+0xd1/0x170 [ 49.825499][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 49.830360][ T3607] ? ktime_get_with_offset+0x3f2/0x500 [ 49.835863][ T3607] ? memset+0x20/0x40 [ 49.839875][ T3607] ? bpf_obj_name_cpy+0x144/0x1a0 [ 49.844941][ T3607] bpf_prog_load+0xfb2/0x2250 [ 49.849628][ T3607] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 49.855580][ T3607] ? find_held_lock+0x2d/0x110 [ 49.860362][ T3607] ? __might_fault+0xd1/0x170 [ 49.865107][ T3607] ? bpf_lsm_bpf+0x5/0x10 [ 49.869462][ T3607] __sys_bpf+0x11a1/0x5700 [ 49.873894][ T3607] ? lock_release+0x780/0x780 [ 49.878638][ T3607] ? ptrace_stop.part.0+0x520/0xa80 [ 49.883864][ T3607] ? bpf_perf_link_attach+0x520/0x520 [ 49.889263][ T3607] ? do_raw_spin_lock+0x120/0x2a0 [ 49.894318][ T3607] ? rwlock_bug.part.0+0x90/0x90 [ 49.899242][ T3607] ? _raw_spin_lock_irq+0x41/0x50 [ 49.904318][ T3607] ? find_held_lock+0x2d/0x110 [ 49.909106][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 49.914351][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 49.919564][ T3607] ? lockdep_hardirqs_on+0x79/0x100 [ 49.924798][ T3607] __x64_sys_bpf+0x75/0xb0 [ 49.929224][ T3607] do_syscall_64+0x35/0xb0 [ 49.933631][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 49.939563][ T3607] RIP: 0033:0x7f79841ddd59 [ 49.943986][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.963620][ T3607] RSP: 002b:00007ffc7bc5d308 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.972062][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79841ddd59 [ 49.980057][ T3607] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 49.988081][ T3607] RBP: 00007f79841a1f00 R08: 0000000000000000 R09: 0000000000000000 [ 49.996191][ T3607] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f79841a1f90 [ 50.004215][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.012227][ T3607] [ 50.015308][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 50.021915][ T3607] CPU: 1 PID: 3607 Comm: syz-executor390 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 50.031881][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 50.041920][ T3607] Call Trace: [ 50.045185][ T3607] [ 50.048103][ T3607] dump_stack_lvl+0xcd/0x134 [ 50.052694][ T3607] panic+0x2d7/0x636 [ 50.056582][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.062563][ T3607] ? __warn.cold+0x248/0x2c4 [ 50.067147][ T3607] ? bpf_check+0xa515/0xb040 [ 50.071730][ T3607] __warn.cold+0x259/0x2c4 [ 50.076137][ T3607] ? __wake_up_klogd.part.0+0x99/0xf0 [ 50.081501][ T3607] ? bpf_check+0xa515/0xb040 [ 50.086095][ T3607] report_bug+0x1bc/0x210 [ 50.090434][ T3607] handle_bug+0x3c/0x60 [ 50.094590][ T3607] exc_invalid_op+0x14/0x40 [ 50.099093][ T3607] asm_exc_invalid_op+0x1b/0x20 [ 50.103942][ T3607] RIP: 0010:bpf_check+0xa515/0xb040 [ 50.109136][ T3607] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6 [ 50.128738][ T3607] RSP: 0018:ffffc90002eff8b0 EFLAGS: 00010286 [ 50.134802][ T3607] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 50.142782][ T3607] RDX: ffff888024779d40 RSI: ffffffff81610608 RDI: fffff520005dff08 [ 50.150756][ T3607] RBP: ffffc90002effb10 R08: 0000000000000005 R09: 0000000000000000 [ 50.158724][ T3607] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807c51e800 [ 50.166694][ T3607] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002 [ 50.174669][ T3607] ? vprintk+0x88/0x90 [ 50.178765][ T3607] ? bpf_get_btf_vmlinux+0x10/0x10 [ 50.183889][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 50.188741][ T3607] ? __might_fault+0xd1/0x170 [ 50.193425][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 50.198276][ T3607] ? ktime_get_with_offset+0x3f2/0x500 [ 50.203741][ T3607] ? memset+0x20/0x40 [ 50.207725][ T3607] ? bpf_obj_name_cpy+0x144/0x1a0 [ 50.212759][ T3607] bpf_prog_load+0xfb2/0x2250 [ 50.217438][ T3607] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 50.223326][ T3607] ? find_held_lock+0x2d/0x110 [ 50.228095][ T3607] ? __might_fault+0xd1/0x170 [ 50.232785][ T3607] ? bpf_lsm_bpf+0x5/0x10 [ 50.237117][ T3607] __sys_bpf+0x11a1/0x5700 [ 50.241531][ T3607] ? lock_release+0x780/0x780 [ 50.246201][ T3607] ? ptrace_stop.part.0+0x520/0xa80 [ 50.251400][ T3607] ? bpf_perf_link_attach+0x520/0x520 [ 50.256767][ T3607] ? do_raw_spin_lock+0x120/0x2a0 [ 50.261794][ T3607] ? rwlock_bug.part.0+0x90/0x90 [ 50.266726][ T3607] ? _raw_spin_lock_irq+0x41/0x50 [ 50.271762][ T3607] ? find_held_lock+0x2d/0x110 [ 50.276557][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.281759][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.286973][ T3607] ? lockdep_hardirqs_on+0x79/0x100 [ 50.292195][ T3607] __x64_sys_bpf+0x75/0xb0 [ 50.296620][ T3607] do_syscall_64+0x35/0xb0 [ 50.301054][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.306955][ T3607] RIP: 0033:0x7f79841ddd59 [ 50.311374][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.330980][ T3607] RSP: 002b:00007ffc7bc5d308 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.339396][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79841ddd59 [ 50.347367][ T3607] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 50.355336][ T3607] RBP: 00007f79841a1f00 R08: 0000000000000000 R09: 0000000000000000 [ 50.363306][ T3607] R10: 0000000000000072 R11: 0000000000000246 R12: 00007f79841a1f90 [ 50.371276][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.379257][ T3607] [ 50.382543][ T3607] Kernel Offset: disabled [ 50.386916][ T3607] Rebooting in 86400 seconds..