./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1334343382 <...> forked to background, child pid 3181 no interfaces have a carrier [ 25.042845][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.054841][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. execve("./syz-executor1334343382", ["./syz-executor1334343382"], 0x7fff2796ff70 /* 10 vars */) = 0 brk(NULL) = 0x5555561ce000 brk(0x5555561cec40) = 0x5555561cec40 arch_prctl(ARCH_SET_FS, 0x5555561ce300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1334343382", 4096) = 28 brk(0x5555561efc40) = 0x5555561efc40 brk(0x5555561f0000) = 0x5555561f0000 mprotect(0x7fb461b14000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=2, value_size=4, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 syzkaller login: [ 40.285896][ T3601] ------------[ cut here ]------------ [ 40.291610][ T3601] trace type BPF program uses run-time allocation [ 40.298044][ T3601] WARNING: CPU: 1 PID: 3601 at kernel/bpf/verifier.c:12517 check_map_prog_compatibility+0x76b/0x920 [ 40.308856][ T3601] Modules linked in: [ 40.312818][ T3601] CPU: 1 PID: 3601 Comm: syz-executor133 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 40.323150][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 40.333260][ T3601] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 40.340031][ T3601] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 40.359669][ T3601] RSP: 0018:ffffc900030ef1e8 EFLAGS: 00010246 [ 40.365765][ T3601] RAX: 3f8e3ac67f330200 RBX: 0000000000000001 RCX: ffff8880228b8000 [ 40.373941][ T3601] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 40.381979][ T3601] RBP: ffff88802639a030 R08: ffffffff816c1ccd R09: ffffed1017364f14 [ 40.389959][ T3601] R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: ffff88802639a000 [ 40.398042][ T3601] R13: dffffc0000000000 R14: ffff888026fe4000 R15: 0000000000000005 [ 40.406056][ T3601] FS: 00005555561ce300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 40.415011][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.421621][ T3601] CR2: 00007fb4d2ef8a70 CR3: 000000001c22d000 CR4: 00000000003506e0 [ 40.429578][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.437585][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.445580][ T3601] Call Trace: [ 40.448844][ T3601] [ 40.451809][ T3601] resolve_pseudo_ldimm64+0x67f/0x1270 [ 40.457283][ T3601] ? check_attach_btf_id+0xef0/0xef0 [ 40.462601][ T3601] ? ___mark_reg_known+0x190/0x190 [ 40.467713][ T3601] ? bpf_lsm_capable+0x5/0x10 [ 40.472423][ T3601] bpf_check+0x2606/0x13b70 [ 40.476947][ T3601] ? reacquire_held_locks+0x680/0x680 [ 40.482387][ T3601] ? validate_chain+0x126/0x65c0 [ 40.487347][ T3601] ? validate_chain+0x126/0x65c0 [ 40.492883][ T3601] ? reacquire_held_locks+0x680/0x680 [ 40.498531][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 40.504891][ T3601] ? reacquire_held_locks+0x680/0x680 [ 40.510285][ T3601] ? reacquire_held_locks+0x680/0x680 [ 40.515988][ T3601] ? mark_lock+0x98/0x350 [ 40.520331][ T3601] ? reacquire_held_locks+0x680/0x680 [ 40.525996][ T3601] ? mark_lock+0x98/0x350 [ 40.530313][ T3601] ? bpf_get_btf_vmlinux+0x10/0x10 [ 40.535519][ T3601] ? __lock_acquire+0x129a/0x1f80 [ 40.540557][ T3601] ? pcpu_alloc+0xf4d/0x15d0 [ 40.545354][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 40.551104][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 40.557096][ T3601] ? mark_lock+0x98/0x350 [ 40.561467][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 40.566930][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 40.572756][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 40.579138][ T3601] ? read_lock_is_recursive+0x10/0x10 [ 40.584585][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 40.590063][ T3601] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 40.596161][ T3601] ? print_irqtrace_events+0x220/0x220 [ 40.601703][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 40.607151][ T3601] ? seqcount_lockdep_reader_access+0x153/0x220 [ 40.613799][ T3601] ? lockdep_hardirqs_on+0x95/0x140 [ 40.619029][ T3601] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 40.625315][ T3601] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 40.630610][ T3601] ? _raw_spin_unlock+0x24/0x40 [ 40.635543][ T3601] ? find_vmap_area+0x104/0x120 [ 40.640492][ T3601] ? __might_fault+0xb2/0x110 [ 40.645235][ T3601] ? memset+0x1f/0x40 [ 40.649230][ T3601] ? bpf_obj_name_cpy+0x191/0x1d0 [ 40.654338][ T3601] bpf_prog_load+0x1288/0x1b80 [ 40.659116][ T3601] ? map_freeze+0x390/0x390 [ 40.663712][ T3601] ? __might_sleep+0xc0/0xc0 [ 40.668339][ T3601] ? __might_fault+0xb2/0x110 [ 40.673106][ T3601] ? bpf_lsm_bpf+0x5/0x10 [ 40.677445][ T3601] ? security_bpf+0x9d/0xb0 [ 40.682055][ T3601] __sys_bpf+0x3d3/0x6c0 [ 40.686314][ T3601] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 40.691756][ T3601] ? print_irqtrace_events+0x220/0x220 [ 40.697230][ T3601] ? vtime_user_exit+0x2b2/0x3e0 [ 40.702236][ T3601] ? __ct_user_exit+0x81/0xe0 [ 40.706945][ T3601] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 40.712997][ T3601] __x64_sys_bpf+0x78/0x90 [ 40.717450][ T3601] do_syscall_64+0x2b/0x70 [ 40.722212][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.728133][ T3601] RIP: 0033:0x7fb461aa7ce9 [ 40.732826][ T3601] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 40.752629][ T3601] RSP: 002b:00007ffd3b9aca78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.761145][ T3601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb461aa7ce9 [ 40.769127][ T3601] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 40.777173][ T3601] RBP: 00007fb461a6be90 R08: 0000000000000000 R09: 0000000000000000 [ 40.785179][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb461a6bf20 [ 40.793223][ T3601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.801349][ T3601] [ 40.804362][ T3601] Kernel panic - not syncing: panic_on_warn set ... [ 40.810963][ T3601] CPU: 0 PID: 3601 Comm: syz-executor133 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 40.821098][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 40.832006][ T3601] Call Trace: [ 40.835286][ T3601] [ 40.838200][ T3601] dump_stack_lvl+0x1e3/0x2cb [ 40.842881][ T3601] ? io_notif_register+0x5e7/0x5e7 [ 40.847985][ T3601] ? panic+0x76e/0x76e [ 40.852046][ T3601] ? vscnprintf+0x59/0x80 [ 40.856366][ T3601] ? check_map_prog_compatibility+0x6a0/0x920 [ 40.862429][ T3601] panic+0x312/0x76e [ 40.866325][ T3601] ? __warn+0x131/0x220 [ 40.870469][ T3601] ? fb_is_primary_device+0xcc/0xcc [ 40.875659][ T3601] ? check_map_prog_compatibility+0x76b/0x920 [ 40.881711][ T3601] __warn+0x1fa/0x220 [ 40.886981][ T3601] ? check_map_prog_compatibility+0x76b/0x920 [ 40.893033][ T3601] report_bug+0x1b3/0x2d0 [ 40.897349][ T3601] handle_bug+0x3d/0x70 [ 40.901485][ T3601] exc_invalid_op+0x16/0x40 [ 40.905973][ T3601] asm_exc_invalid_op+0x16/0x20 [ 40.910817][ T3601] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 40.917474][ T3601] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 40.937078][ T3601] RSP: 0018:ffffc900030ef1e8 EFLAGS: 00010246 [ 40.943130][ T3601] RAX: 3f8e3ac67f330200 RBX: 0000000000000001 RCX: ffff8880228b8000 [ 40.951085][ T3601] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 40.959155][ T3601] RBP: ffff88802639a030 R08: ffffffff816c1ccd R09: ffffed1017364f14 [ 40.967114][ T3601] R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: ffff88802639a000 [ 40.975075][ T3601] R13: dffffc0000000000 R14: ffff888026fe4000 R15: 0000000000000005 [ 40.983044][ T3601] ? __wake_up_klogd+0xcd/0x100 [ 40.987895][ T3601] ? check_map_prog_compatibility+0x76b/0x920 [ 40.993952][ T3601] resolve_pseudo_ldimm64+0x67f/0x1270 [ 40.999401][ T3601] ? check_attach_btf_id+0xef0/0xef0 [ 41.004673][ T3601] ? ___mark_reg_known+0x190/0x190 [ 41.009764][ T3601] ? bpf_lsm_capable+0x5/0x10 [ 41.014437][ T3601] bpf_check+0x2606/0x13b70 [ 41.018942][ T3601] ? reacquire_held_locks+0x680/0x680 [ 41.024300][ T3601] ? validate_chain+0x126/0x65c0 [ 41.029227][ T3601] ? validate_chain+0x126/0x65c0 [ 41.034147][ T3601] ? reacquire_held_locks+0x680/0x680 [ 41.039502][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 41.045471][ T3601] ? reacquire_held_locks+0x680/0x680 [ 41.050832][ T3601] ? reacquire_held_locks+0x680/0x680 [ 41.056184][ T3601] ? mark_lock+0x98/0x350 [ 41.060502][ T3601] ? reacquire_held_locks+0x680/0x680 [ 41.065855][ T3601] ? mark_lock+0x98/0x350 [ 41.070168][ T3601] ? bpf_get_btf_vmlinux+0x10/0x10 [ 41.075259][ T3601] ? __lock_acquire+0x129a/0x1f80 [ 41.080267][ T3601] ? pcpu_alloc+0xf4d/0x15d0 [ 41.084838][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 41.090455][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 41.096431][ T3601] ? mark_lock+0x98/0x350 [ 41.100749][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 41.106188][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 41.111803][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 41.117772][ T3601] ? read_lock_is_recursive+0x10/0x10 [ 41.123146][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 41.128670][ T3601] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 41.134633][ T3601] ? print_irqtrace_events+0x220/0x220 [ 41.140075][ T3601] ? ktime_get_with_offset+0x125/0x360 [ 41.145514][ T3601] ? seqcount_lockdep_reader_access+0x153/0x220 [ 41.151745][ T3601] ? lockdep_hardirqs_on+0x95/0x140 [ 41.156925][ T3601] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 41.163149][ T3601] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 41.168412][ T3601] ? _raw_spin_unlock+0x24/0x40 [ 41.173256][ T3601] ? find_vmap_area+0x104/0x120 [ 41.178091][ T3601] ? __might_fault+0xb2/0x110 [ 41.182750][ T3601] ? memset+0x1f/0x40 [ 41.186715][ T3601] ? bpf_obj_name_cpy+0x191/0x1d0 [ 41.191722][ T3601] bpf_prog_load+0x1288/0x1b80 [ 41.196486][ T3601] ? map_freeze+0x390/0x390 [ 41.200969][ T3601] ? __might_sleep+0xc0/0xc0 [ 41.205561][ T3601] ? __might_fault+0xb2/0x110 [ 41.210219][ T3601] ? bpf_lsm_bpf+0x5/0x10 [ 41.214530][ T3601] ? security_bpf+0x9d/0xb0 [ 41.219013][ T3601] __sys_bpf+0x3d3/0x6c0 [ 41.223239][ T3601] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 41.228597][ T3601] ? print_irqtrace_events+0x220/0x220 [ 41.234033][ T3601] ? vtime_user_exit+0x2b2/0x3e0 [ 41.238954][ T3601] ? __ct_user_exit+0x81/0xe0 [ 41.243622][ T3601] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 41.249585][ T3601] __x64_sys_bpf+0x78/0x90 [ 41.253983][ T3601] do_syscall_64+0x2b/0x70 [ 41.258379][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.264252][ T3601] RIP: 0033:0x7fb461aa7ce9 [ 41.268652][ T3601] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.288235][ T3601] RSP: 002b:00007ffd3b9aca78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.296627][ T3601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb461aa7ce9 [ 41.304667][ T3601] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 41.312620][ T3601] RBP: 00007fb461a6be90 R08: 0000000000000000 R09: 0000000000000000 [ 41.320571][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb461a6bf20 [ 41.328521][ T3601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.336483][ T3601] [ 41.339837][ T3601] Kernel Offset: disabled [ 41.344230][ T3601] Rebooting in 86400 seconds..