./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3485263985
<...>
Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts.
execve("./syz-executor3485263985", ["./syz-executor3485263985"], 0x7ffcf7642990 /* 10 vars */) = 0
brk(NULL) = 0x555555d6b000
brk(0x555555d6bc40) = 0x555555d6bc40
arch_prctl(ARCH_SET_FS, 0x555555d6b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3485263985", 4096) = 28
brk(0x555555d8cc40) = 0x555555d8cc40
brk(0x555555d8d000) = 0x555555d8d000
mprotect(0x7fbef6b3c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=4, value_size=4, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
syzkaller login: [ 50.676392][ T3600] ------------[ cut here ]------------
[ 50.681907][ T3600] trace type BPF program uses run-time allocation
[ 50.688805][ T3600] WARNING: CPU: 1 PID: 3600 at kernel/bpf/verifier.c:12589 bpf_check+0xa515/0xb040
[ 50.698604][ T3600] Modules linked in:
[ 50.702518][ T3600] CPU: 1 PID: 3600 Comm: syz-executor348 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 50.712588][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.722792][ T3600] RIP: 0010:bpf_check+0xa515/0xb040
[ 50.728066][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6
[ 50.747935][ T3600] RSP: 0018:ffffc90002eaf8b0 EFLAGS: 00010286
[ 50.754043][ T3600] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
[ 50.762020][ T3600] RDX: ffff8880252e1d40 RSI: ffffffff81610608 RDI: fffff520005d5f08
[ 50.770044][ T3600] RBP: ffffc90002eafb10 R08: 0000000000000005 R09: 0000000000000000
[ 50.778051][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888016ab4800
[ 50.786068][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002
[ 50.794101][ T3600] FS: 0000555555d6b300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.803064][ T3600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.809675][ T3600] CR2: 00007fcecd5f5a70 CR3: 000000007ee43000 CR4: 00000000003506e0
[ 50.817731][ T3600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.825778][ T3600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.833832][ T3600] Call Trace:
[ 50.837113][ T3600]
[ 50.840058][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10
[ 50.845229][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 50.850109][ T3600] ? __might_fault+0xd1/0x170
[ 50.854828][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 50.859688][ T3600] ? ktime_get_with_offset+0x3f2/0x500
[ 50.865188][ T3600] ? memset+0x20/0x40
[ 50.869185][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0
[ 50.874258][ T3600] bpf_prog_load+0xfb2/0x2250
[ 50.878952][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 50.884893][ T3600] ? find_held_lock+0x2d/0x110
[ 50.889695][ T3600] ? __might_fault+0xd1/0x170
[ 50.894457][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 50.899355][ T3600] ? bpf_lsm_bpf+0x5/0x10
[ 50.903775][ T3600] __sys_bpf+0x11a1/0x5700
[ 50.908212][ T3600] ? lock_release+0x780/0x780
[ 50.912947][ T3600] ? ptrace_stop.part.0+0x520/0xa80
[ 50.918176][ T3600] ? bpf_perf_link_attach+0x520/0x520
[ 50.923703][ T3600] ? do_raw_spin_lock+0x120/0x2a0
[ 50.928751][ T3600] ? rwlock_bug.part.0+0x90/0x90
[ 50.933821][ T3600] ? _raw_spin_lock_irq+0x41/0x50
[ 50.938891][ T3600] ? find_held_lock+0x2d/0x110
[ 50.943727][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.948947][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.954224][ T3600] ? lockdep_hardirqs_on+0x79/0x100
[ 50.959460][ T3600] __x64_sys_bpf+0x75/0xb0
[ 50.963958][ T3600] do_syscall_64+0x35/0xb0
[ 50.968397][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.974370][ T3600] RIP: 0033:0x7fbef6acfd49
[ 50.978800][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.998459][ T3600] RSP: 002b:00007ffc99002b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 51.006928][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbef6acfd49
[ 51.015061][ T3600] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005
[ 51.023089][ T3600] RBP: 00007fbef6a93ef0 R08: 0000000000000000 R09: 0000000000000000
[ 51.031062][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbef6a93f80
[ 51.039080][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.047127][ T3600]
[ 51.050143][ T3600] Kernel panic - not syncing: panic_on_warn set ...
[ 51.056710][ T3600] CPU: 1 PID: 3600 Comm: syz-executor348 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 51.067293][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 51.077364][ T3600] Call Trace:
[ 51.080642][ T3600]
[ 51.083569][ T3600] dump_stack_lvl+0xcd/0x134
[ 51.088167][ T3600] panic+0x2d7/0x636
[ 51.094155][ T3600] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 51.100170][ T3600] ? __warn.cold+0x248/0x2c4
[ 51.104863][ T3600] ? bpf_check+0xa515/0xb040
[ 51.109479][ T3600] __warn.cold+0x259/0x2c4
[ 51.113922][ T3600] ? __wake_up_klogd.part.0+0x99/0xf0
[ 51.119330][ T3600] ? bpf_check+0xa515/0xb040
[ 51.123954][ T3600] report_bug+0x1bc/0x210
[ 51.128752][ T3600] handle_bug+0x3c/0x60
[ 51.132920][ T3600] exc_invalid_op+0x14/0x40
[ 51.137460][ T3600] asm_exc_invalid_op+0x1b/0x20
[ 51.142378][ T3600] RIP: 0010:bpf_check+0xa515/0xb040
[ 51.147614][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6
[ 51.167243][ T3600] RSP: 0018:ffffc90002eaf8b0 EFLAGS: 00010286
[ 51.173342][ T3600] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
[ 51.181431][ T3600] RDX: ffff8880252e1d40 RSI: ffffffff81610608 RDI: fffff520005d5f08
[ 51.189419][ T3600] RBP: ffffc90002eafb10 R08: 0000000000000005 R09: 0000000000000000
[ 51.197489][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888016ab4800
[ 51.205474][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002
[ 51.213461][ T3600] ? vprintk+0x88/0x90
[ 51.217564][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10
[ 51.222717][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 51.227597][ T3600] ? __might_fault+0xd1/0x170
[ 51.232309][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 51.237170][ T3600] ? ktime_get_with_offset+0x3f2/0x500
[ 51.242662][ T3600] ? memset+0x20/0x40
[ 51.246663][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0
[ 51.251747][ T3600] bpf_prog_load+0xfb2/0x2250
[ 51.256435][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 51.262346][ T3600] ? find_held_lock+0x2d/0x110
[ 51.267135][ T3600] ? __might_fault+0xd1/0x170
[ 51.271838][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 51.276712][ T3600] ? bpf_lsm_bpf+0x5/0x10
[ 51.281054][ T3600] __sys_bpf+0x11a1/0x5700
[ 51.285493][ T3600] ? lock_release+0x780/0x780
[ 51.290182][ T3600] ? ptrace_stop.part.0+0x520/0xa80
[ 51.295394][ T3600] ? bpf_perf_link_attach+0x520/0x520
[ 51.300777][ T3600] ? do_raw_spin_lock+0x120/0x2a0
[ 51.305818][ T3600] ? rwlock_bug.part.0+0x90/0x90
[ 51.310758][ T3600] ? _raw_spin_lock_irq+0x41/0x50
[ 51.315801][ T3600] ? find_held_lock+0x2d/0x110
[ 51.320581][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.325784][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.330989][ T3600] ? lockdep_hardirqs_on+0x79/0x100
[ 51.336197][ T3600] __x64_sys_bpf+0x75/0xb0
[ 51.340615][ T3600] do_syscall_64+0x35/0xb0
[ 51.345034][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 51.350924][ T3600] RIP: 0033:0x7fbef6acfd49
[ 51.355355][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.374989][ T3600] RSP: 002b:00007ffc99002b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 51.383402][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbef6acfd49
[ 51.391379][ T3600] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005
[ 51.399364][ T3600] RBP: 00007fbef6a93ef0 R08: 0000000000000000 R09: 0000000000000000
[ 51.407348][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbef6a93f80
[ 51.415325][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.423307][ T3600]
[ 51.426593][ T3600] Kernel Offset: disabled
[ 51.430969][ T3600] Rebooting in 86400 seconds..