program: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) [ 75.108805][ T5334] Bluetooth: hci0: command tx timeout [ 75.164969][ C0] hrtimer: interrupt took 106819 ns [ 75.221260][ T5353] ------------[ cut here ]------------ [ 75.224130][ T5353] verifier bug: error during ctx access conversion (0)(1) [ 75.228136][ T5353] WARNING: CPU: 0 PID: 5353 at kernel/bpf/verifier.c:21448 bpf_check+0x1b6ed/0x1d2d0 [ 75.235485][ T5353] Modules linked in: [ 75.237418][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.242138][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.247338][ T5353] RIP: 0010:bpf_check+0x1b6ed/0x1d2d0 [ 75.250082][ T5353] Code: 2b af ff 90 0f 0b 90 90 e9 6d 60 ff ff e8 4b 9c eb ff c6 05 d6 72 b9 0d 01 90 48 c7 c7 60 fb 91 8b 44 89 f6 e8 24 2b af ff 90 <0f> 0b 90 90 e9 af bd ff ff e8 25 9c eb ff c6 05 b5 72 b9 0d 01 90 [ 75.258240][ T5353] RSP: 0018:ffffc9000d3ef600 EFLAGS: 00010246 [ 75.261272][ T5353] RAX: 99dd815d8d8a5700 RBX: 0000000000000000 RCX: 0000000000100000 [ 75.265641][ T5353] RDX: ffffc9000e22a000 RSI: 00000000000029d5 RDI: 00000000000029d6 [ 75.269455][ T5353] RBP: ffffc9000d3efb50 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.273133][ T5353] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000061e052 [ 75.276585][ T5353] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 75.280855][ T5353] FS: 00007f09ba44e6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 75.285819][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.289011][ T5353] CR2: 00007f09b97acbe0 CR3: 00000000361d4000 CR4: 0000000000352ef0 [ 75.331596][ T5353] Call Trace: [ 75.333339][ T5353] [ 75.334914][ T5353] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 75.338204][ T5353] ? __pfx_bpf_check+0x10/0x10 [ 75.340546][ T5353] ? ktime_get_with_offset+0x8c/0x2a0 [ 75.342865][ T5353] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 75.345812][ T5353] ? ktime_get_with_offset+0x8c/0x2a0 [ 75.348484][ T5353] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 75.352072][ T5353] ? __asan_memset+0x22/0x50 [ 75.354549][ T5353] ? bpf_obj_name_cpy+0x194/0x1e0 [ 75.356916][ T5353] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 75.359679][ T5353] ? security_bpf_prog_load+0x7f/0x310 [ 75.362441][ T5353] bpf_prog_load+0x1318/0x1930 [ 75.364873][ T5353] ? __pfx_bpf_prog_load+0x10/0x10 [ 75.367596][ T5353] ? bpf_lsm_bpf+0x9/0x20 [ 75.369933][ T5353] ? security_bpf+0x7e/0x300 [ 75.372372][ T5353] __sys_bpf+0x528/0x870 [ 75.374427][ T5353] ? __pfx___sys_bpf+0x10/0x10 [ 75.376685][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.378986][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.381632][ T5353] __x64_sys_bpf+0x7c/0x90 [ 75.384178][ T5353] do_syscall_64+0xfa/0x3b0 [ 75.386614][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.390174][ T5353] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.393296][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 75.395578][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.398202][ T5353] RIP: 0033:0x7f09b958ebe9 [ 75.400478][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.409157][ T5353] RSP: 002b:00007f09ba44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.415789][ T5353] RAX: ffffffffffffffda RBX: 00007f09b97b5fa0 RCX: 00007f09b958ebe9 [ 75.419968][ T5353] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 75.423831][ T5353] RBP: 00007f09b9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.427964][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.432013][ T5353] R13: 00007f09b97b6038 R14: 00007f09b97b5fa0 R15: 00007ffd895cdc58 [ 75.435877][ T5353] [ 75.437626][ T5353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.441230][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.445375][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.449922][ T5353] Call Trace: [ 75.451486][ T5353] [ 75.452842][ T5353] dump_stack_lvl+0x99/0x250 [ 75.454940][ T5353] ? __asan_memcpy+0x40/0x70 [ 75.456963][ T5353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.459310][ T5353] ? __pfx__printk+0x10/0x10 [ 75.461438][ T5353] vpanic+0x281/0x750 [ 75.463390][ T5353] ? __pfx__printk+0x10/0x10 [ 75.465624][ T5353] ? __pfx_vpanic+0x10/0x10 [ 75.467776][ T5353] ? is_bpf_text_address+0x26/0x2b0 [ 75.470148][ T5353] panic+0xb9/0xc0 [ 75.471900][ T5353] ? __pfx_panic+0x10/0x10 [ 75.473906][ T5353] __warn+0x31b/0x4b0 [ 75.475683][ T5353] ? bpf_check+0x1b6ed/0x1d2d0 [ 75.477906][ T5353] ? bpf_check+0x1b6ed/0x1d2d0 [ 75.480058][ T5353] report_bug+0x2be/0x4f0 [ 75.481968][ T5353] ? bpf_check+0x1b6ed/0x1d2d0 [ 75.484274][ T5353] ? bpf_check+0x1b6ed/0x1d2d0 [ 75.486958][ T5353] ? bpf_check+0x1b6ef/0x1d2d0 [ 75.489813][ T5353] handle_bug+0x84/0x160 [ 75.492253][ T5353] exc_invalid_op+0x1a/0x50 [ 75.494445][ T5353] asm_exc_invalid_op+0x1a/0x20 [ 75.496641][ T5353] RIP: 0010:bpf_check+0x1b6ed/0x1d2d0 [ 75.498988][ T5353] Code: 2b af ff 90 0f 0b 90 90 e9 6d 60 ff ff e8 4b 9c eb ff c6 05 d6 72 b9 0d 01 90 48 c7 c7 60 fb 91 8b 44 89 f6 e8 24 2b af ff 90 <0f> 0b 90 90 e9 af bd ff ff e8 25 9c eb ff c6 05 b5 72 b9 0d 01 90 [ 75.508206][ T5353] RSP: 0018:ffffc9000d3ef600 EFLAGS: 00010246 [ 75.510928][ T5353] RAX: 99dd815d8d8a5700 RBX: 0000000000000000 RCX: 0000000000100000 [ 75.514238][ T5353] RDX: ffffc9000e22a000 RSI: 00000000000029d5 RDI: 00000000000029d6 [ 75.517805][ T5353] RBP: ffffc9000d3efb50 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.521391][ T5353] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000061e052 [ 75.524777][ T5353] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 75.528296][ T5353] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 75.531164][ T5353] ? __pfx_bpf_check+0x10/0x10 [ 75.533238][ T5353] ? ktime_get_with_offset+0x8c/0x2a0 [ 75.535905][ T5353] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 75.539008][ T5353] ? ktime_get_with_offset+0x8c/0x2a0 [ 75.541786][ T5353] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 75.544709][ T5353] ? __asan_memset+0x22/0x50 [ 75.546798][ T5353] ? bpf_obj_name_cpy+0x194/0x1e0 [ 75.549072][ T5353] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 75.551342][ T5353] ? security_bpf_prog_load+0x7f/0x310 [ 75.553787][ T5353] bpf_prog_load+0x1318/0x1930 [ 75.556394][ T5353] ? __pfx_bpf_prog_load+0x10/0x10 [ 75.559210][ T5353] ? bpf_lsm_bpf+0x9/0x20 [ 75.561578][ T5353] ? security_bpf+0x7e/0x300 [ 75.564039][ T5353] __sys_bpf+0x528/0x870 [ 75.565876][ T5353] ? __pfx___sys_bpf+0x10/0x10 [ 75.567975][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.570185][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.572282][ T5353] __x64_sys_bpf+0x7c/0x90 [ 75.574212][ T5353] do_syscall_64+0xfa/0x3b0 [ 75.576239][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.578857][ T5353] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.581652][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 75.583974][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.586697][ T5353] RIP: 0033:0x7f09b958ebe9 [ 75.588705][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.596966][ T5353] RSP: 002b:00007f09ba44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.600639][ T5353] RAX: ffffffffffffffda RBX: 00007f09b97b5fa0 RCX: 00007f09b958ebe9 [ 75.604164][ T5353] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 75.607948][ T5353] RBP: 00007f09b9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.611688][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.615116][ T5353] R13: 00007f09b97b6038 R14: 00007f09b97b5fa0 R15: 00007ffd895cdc58 [ 75.618383][ T5353] [ 75.620105][ T5353] Kernel Offset: disabled [ 75.622171][ T5353] Rebooting in 86400 seconds..