./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1421799649 <...> DUID 00:04:6d:8d:bc:0e:4f:6f:26:62:62:35:cf:10:b8:8b:0d:d5 forked to background, child pid 3190 [ 25.987490][ T3191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.997705][ T3191] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. execve("./syz-executor1421799649", ["./syz-executor1421799649"], 0x7ffeabd9ce10 /* 10 vars */) = 0 brk(NULL) = 0x555555abc000 brk(0x555555abcc40) = 0x555555abcc40 arch_prctl(ARCH_SET_FS, 0x555555abc300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1421799649", 4096) = 28 brk(0x555555addc40) = 0x555555addc40 brk(0x555555ade000) = 0x555555ade000 mprotect(0x7ff3291e6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 syzkaller login: [ 48.275968][ T3611] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 48.287711][ T3611] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 48.296104][ T3611] CPU: 1 PID: 3611 Comm: syz-executor142 Not tainted 5.19.0-rc2-syzkaller-00498-gb0d93b44641a #0 [ 48.306599][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 48.316673][ T3611] RIP: 0010:do_check_common+0xb3d2/0xd250 [ 48.322406][ T3611] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 6b 48 8b 9b 00 01 00 00 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 08 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4c 8b [ 48.342019][ T3611] RSP: 0018:ffffc90002f3f620 EFLAGS: 00010202 [ 48.348087][ T3611] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 48.356059][ T3611] RDX: 0000000000000001 RSI: ffffffff818e322a RDI: 0000000000000008 [ 48.364027][ T3611] RBP: ffffc90002f3f8a0 R08: 0000000000000005 R09: 000000000000002b [ 48.372013][ T3611] R10: 000000000000002b R11: 0000000000000001 R12: ffff8880172d9020 [ 48.379982][ T3611] R13: 0000000000000000 R14: ffff8880172d9000 R15: 0000000000000005 [ 48.387951][ T3611] FS: 0000555555abc300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 48.396882][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.403482][ T3611] CR2: 00007fb8c43f5a70 CR3: 00000000216ac000 CR4: 00000000003506e0 [ 48.411463][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.419438][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.427409][ T3611] Call Trace: [ 48.430687][ T3611] [ 48.433620][ T3611] ? lockdep_hardirqs_on+0x79/0x100 [ 48.438837][ T3611] ? kasan_quarantine_put+0xf5/0x210 [ 48.444148][ T3611] ? lockdep_hardirqs_on+0x79/0x100 [ 48.449361][ T3611] ? check_helper_call+0x9290/0x9290 [ 48.454654][ T3611] ? rcu_read_lock_sched_held+0x3a/0x70 [ 48.460220][ T3611] ? kvfree+0x42/0x50 [ 48.464210][ T3611] ? check_cfg+0x670/0xb40 [ 48.468642][ T3611] bpf_check+0x72eb/0xb040 [ 48.473064][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.479110][ T3611] ? bpf_get_btf_vmlinux+0x10/0x10 [ 48.484255][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 48.489111][ T3611] ? __might_fault+0xd1/0x170 [ 48.493805][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 48.498680][ T3611] ? ktime_get_with_offset+0x3f2/0x500 [ 48.504160][ T3611] ? memset+0x20/0x40 [ 48.508154][ T3611] ? bpf_obj_name_cpy+0x144/0x1a0 [ 48.513196][ T3611] bpf_prog_load+0xfb2/0x2250 [ 48.517886][ T3611] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 48.523789][ T3611] ? find_held_lock+0x2d/0x110 [ 48.528558][ T3611] ? __might_fault+0xd1/0x170 [ 48.533243][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 48.538098][ T3611] ? bpf_lsm_bpf+0x5/0x10 [ 48.542431][ T3611] __sys_bpf+0x11a1/0x5790 [ 48.546850][ T3611] ? lock_release+0x780/0x780 [ 48.551527][ T3611] ? ptrace_stop.part.0+0x4f0/0xa80 [ 48.556731][ T3611] ? bpf_perf_link_attach+0x520/0x520 [ 48.562188][ T3611] ? do_raw_spin_lock+0x120/0x2a0 [ 48.567214][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 48.572151][ T3611] ? _raw_spin_lock_irq+0x41/0x50 [ 48.577183][ T3611] ? find_held_lock+0x2d/0x110 [ 48.581957][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.587157][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.592363][ T3611] ? lockdep_hardirqs_on+0x79/0x100 [ 48.597565][ T3611] __x64_sys_bpf+0x75/0xb0 [ 48.601990][ T3611] do_syscall_64+0x35/0xb0 [ 48.606411][ T3611] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 48.612315][ T3611] RIP: 0033:0x7ff329179be9 [ 48.616730][ T3611] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.636336][ T3611] RSP: 002b:00007ffcb76118b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.644750][ T3611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff329179be9 [ 48.652719][ T3611] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005 [ 48.660687][ T3611] RBP: 00007ff32913dd90 R08: 0000000000000000 R09: 0000000000000000 [ 48.668655][ T3611] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ff32913de20 [ 48.676624][ T3611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.684599][ T3611] [ 48.687610][ T3611] Modules linked in: [ 48.691710][ T3611] ---[ end trace 0000000000000000 ]--- [ 48.691720][ T3611] RIP: 0010:do_check_common+0xb3d2/0xd250 [ 48.691748][ T3611] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 6b 48 8b 9b 00 01 00 00 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 08 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4c 8b [ 48.691769][ T3611] RSP: 0018:ffffc90002f3f620 EFLAGS: 00010202 [ 48.691786][ T3611] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 48.691799][ T3611] RDX: 0000000000000001 RSI: ffffffff818e322a RDI: 0000000000000008 [ 48.691809][ T3611] RBP: ffffc90002f3f8a0 R08: 0000000000000005 R09: 000000000000002b [ 48.694209][ T3611] R10: 000000000000002b R11: 0000000000000001 R12: ffff8880172d9020 [ 48.694225][ T3611] R13: 0000000000000000 R14: ffff8880172d9000 R15: 0000000000000005 [ 48.694240][ T3611] FS: 0000555555abc300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.694263][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.694280][ T3611] CR2: 00007fff94877ffc CR3: 00000000216ac000 CR4: 00000000003506f0 [ 48.694294][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.694306][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.694321][ T3611] Kernel panic - not syncing: Fatal exception [ 48.816250][ T3611] Kernel Offset: disabled [ 48.820567][ T3611] Rebooting in 86400 seconds..