./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor615205072
<...>
forked to background, child pid 3178
no interfaces have a carrier
[ 29.483823][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.504468][ T3179] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.80' (ECDSA) to the list of known hosts.
execve("./syz-executor615205072", ["./syz-executor615205072"], 0x7ffca3607900 /* 10 vars */) = 0
brk(NULL) = 0x55555595e000
brk(0x55555595ec40) = 0x55555595ec40
arch_prctl(ARCH_SET_FS, 0x55555595e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor615205072", 4096) = 27
brk(0x55555597fc40) = 0x55555597fc40
brk(0x555555980000) = 0x555555980000
mprotect(0x7f589615c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=3, value_size=8, max_entries=4, map_flags=BPF_F_NO_PREALLOC|BPF_F_WRONLY, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
syzkaller login: [ 52.994893][ T3600] ------------[ cut here ]------------
[ 53.000392][ T3600] trace type BPF program uses run-time allocation
[ 53.007258][ T3600] WARNING: CPU: 0 PID: 3600 at kernel/bpf/verifier.c:12589 bpf_check+0xa515/0xb040
[ 53.016819][ T3600] Modules linked in:
[ 53.020726][ T3600] CPU: 0 PID: 3600 Comm: syz-executor615 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 53.031225][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 53.041829][ T3600] RIP: 0010:bpf_check+0xa515/0xb040
[ 53.047197][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6
[ 53.066983][ T3600] RSP: 0018:ffffc90002ebf8b0 EFLAGS: 00010286
[ 53.073246][ T3600] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000
[ 53.081412][ T3600] RDX: ffff8880205757c0 RSI: ffffffff81610608 RDI: fffff520005d7f08
[ 53.089521][ T3600] RBP: ffffc90002ebfb10 R08: 0000000000000005 R09: 0000000000000000
[ 53.097543][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802623c000
[ 53.105549][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002
[ 53.113547][ T3600] FS: 000055555595e300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 53.122999][ T3600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.129677][ T3600] CR2: 0000560a9cabf2b8 CR3: 00000000749b1000 CR4: 00000000003506e0
[ 53.137709][ T3600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.145716][ T3600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.153720][ T3600] Call Trace:
[ 53.157215][ T3600]
[ 53.160168][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10
[ 53.165356][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.170239][ T3600] ? __might_fault+0xd1/0x170
[ 53.174973][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.179872][ T3600] ? ktime_get_with_offset+0x3f2/0x500
[ 53.185410][ T3600] ? memset+0x20/0x40
[ 53.189413][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0
[ 53.194466][ T3600] bpf_prog_load+0xfb2/0x2250
[ 53.199223][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 53.205176][ T3600] ? find_held_lock+0x2d/0x110
[ 53.210039][ T3600] ? __might_fault+0xd1/0x170
[ 53.214775][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.219660][ T3600] ? bpf_lsm_bpf+0x5/0x10
[ 53.223996][ T3600] __sys_bpf+0x11a1/0x5700
[ 53.228861][ T3600] ? lock_release+0x780/0x780
[ 53.233558][ T3600] ? ptrace_stop.part.0+0x520/0xa80
[ 53.238846][ T3600] ? bpf_perf_link_attach+0x520/0x520
[ 53.244234][ T3600] ? do_raw_spin_lock+0x120/0x2a0
[ 53.249323][ T3600] ? rwlock_bug.part.0+0x90/0x90
[ 53.254450][ T3600] ? _raw_spin_lock_irq+0x41/0x50
[ 53.259552][ T3600] ? find_held_lock+0x2d/0x110
[ 53.264344][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 53.269714][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 53.275029][ T3600] ? lockdep_hardirqs_on+0x79/0x100
[ 53.280251][ T3600] __x64_sys_bpf+0x75/0xb0
[ 53.284664][ T3600] do_syscall_64+0x35/0xb0
[ 53.289172][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.295118][ T3600] RIP: 0033:0x7f58960efd49
[ 53.299548][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.319582][ T3600] RSP: 002b:00007ffc26dae898 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 53.328062][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58960efd49
[ 53.336592][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005
[ 53.344587][ T3600] RBP: 00007f58960b3ef0 R08: 0000000000000000 R09: 0000000000000000
[ 53.352645][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58960b3f80
[ 53.360684][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.368723][ T3600]
[ 53.371749][ T3600] Kernel panic - not syncing: panic_on_warn set ...
[ 53.378579][ T3600] CPU: 0 PID: 3600 Comm: syz-executor615 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 53.388543][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 53.398671][ T3600] Call Trace:
[ 53.401941][ T3600]
[ 53.404949][ T3600] dump_stack_lvl+0xcd/0x134
[ 53.409536][ T3600] panic+0x2d7/0x636
[ 53.413602][ T3600] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 53.419593][ T3600] ? __warn.cold+0x248/0x2c4
[ 53.424239][ T3600] ? bpf_check+0xa515/0xb040
[ 53.428839][ T3600] __warn.cold+0x259/0x2c4
[ 53.433255][ T3600] ? __wake_up_klogd.part.0+0x99/0xf0
[ 53.438706][ T3600] ? bpf_check+0xa515/0xb040
[ 53.443287][ T3600] report_bug+0x1bc/0x210
[ 53.447619][ T3600] handle_bug+0x3c/0x60
[ 53.451781][ T3600] exc_invalid_op+0x14/0x40
[ 53.456286][ T3600] asm_exc_invalid_op+0x1b/0x20
[ 53.461134][ T3600] RIP: 0010:bpf_check+0xa515/0xb040
[ 53.466337][ T3600] Code: ff 48 8b bd 30 fe ff ff e8 88 61 37 00 e9 ff ab ff ff e8 ce 5c eb ff 48 c7 c7 20 52 d4 89 c6 05 86 b6 18 0c 01 e8 65 e2 a4 07 <0f> 0b e9 b0 cf ff ff 4c 8b bd 88 fe ff ff e8 a8 5c eb ff 48 c7 c6
[ 53.485958][ T3600] RSP: 0018:ffffc90002ebf8b0 EFLAGS: 00010286
[ 53.492041][ T3600] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000
[ 53.500009][ T3600] RDX: ffff8880205757c0 RSI: ffffffff81610608 RDI: fffff520005d7f08
[ 53.507998][ T3600] RBP: ffffc90002ebfb10 R08: 0000000000000005 R09: 0000000000000000
[ 53.516327][ T3600] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802623c000
[ 53.524402][ T3600] R13: dffffc0000000000 R14: ffffc90000ace058 R15: 0000000000000002
[ 53.532563][ T3600] ? vprintk+0x88/0x90
[ 53.536848][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10
[ 53.542144][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.546996][ T3600] ? __might_fault+0xd1/0x170
[ 53.551678][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.556529][ T3600] ? ktime_get_with_offset+0x3f2/0x500
[ 53.562014][ T3600] ? memset+0x20/0x40
[ 53.566100][ T3600] ? bpf_obj_name_cpy+0x144/0x1a0
[ 53.571140][ T3600] bpf_prog_load+0xfb2/0x2250
[ 53.575905][ T3600] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 53.581796][ T3600] ? find_held_lock+0x2d/0x110
[ 53.586568][ T3600] ? __might_fault+0xd1/0x170
[ 53.591252][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 53.596107][ T3600] ? bpf_lsm_bpf+0x5/0x10
[ 53.600442][ T3600] __sys_bpf+0x11a1/0x5700
[ 53.604857][ T3600] ? lock_release+0x780/0x780
[ 53.609621][ T3600] ? ptrace_stop.part.0+0x520/0xa80
[ 53.614824][ T3600] ? bpf_perf_link_attach+0x520/0x520
[ 53.620192][ T3600] ? do_raw_spin_lock+0x120/0x2a0
[ 53.625219][ T3600] ? rwlock_bug.part.0+0x90/0x90
[ 53.630166][ T3600] ? _raw_spin_lock_irq+0x41/0x50
[ 53.635206][ T3600] ? find_held_lock+0x2d/0x110
[ 53.639987][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 53.645193][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40
[ 53.650401][ T3600] ? lockdep_hardirqs_on+0x79/0x100
[ 53.655606][ T3600] __x64_sys_bpf+0x75/0xb0
[ 53.660040][ T3600] do_syscall_64+0x35/0xb0
[ 53.664562][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.670478][ T3600] RIP: 0033:0x7f58960efd49
[ 53.674988][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.694597][ T3600] RSP: 002b:00007ffc26dae898 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 53.703121][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58960efd49
[ 53.711264][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005
[ 53.719232][ T3600] RBP: 00007f58960b3ef0 R08: 0000000000000000 R09: 0000000000000000
[ 53.727226][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58960b3f80
[ 53.735453][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.743604][ T3600]
[ 53.746806][ T3600] Kernel Offset: disabled
[ 53.751180][ T3600] Rebooting in 86400 seconds..