./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1702096691
<...>
DUID 00:04:22:6a:1f:62:54:25:21:a9:cf:52:ab:bd:c7:70:d9:1c
forked to background, child pid 4669
[ 50.094009][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0
[ 50.105540][ T4670] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts.
execve("./syz-executor1702096691", ["./syz-executor1702096691"], 0x7ffc22372df0 /* 10 vars */) = 0
brk(NULL) = 0x555555d48000
brk(0x555555d48c40) = 0x555555d48c40
arch_prctl(ARCH_SET_FS, 0x555555d48300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1702096691", 4096) = 28
brk(0x555555d69c40) = 0x555555d69c40
brk(0x555555d6a000) = 0x555555d6a000
mprotect(0x7f91f26ee000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_BTF_LOAD, {btf="\x9f\xeb\x01\x00\x18\x00\x00\x00\x00\x00\x00\x00\x38\x00\x00\x00\x38\x00\x00\x00\x04\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x11\x04\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x12\x02\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0e\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x00", btf_log_buf=NULL, btf_size=84, btf_log_size=0, btf_log_level=0}, 32) = 3
syzkaller login: [ 80.172458][ T5006] ------------[ cut here ]------------
[ 80.178070][ T5006] WARNING: CPU: 0 PID: 5006 at kernel/bpf/btf.c:1988 btf_type_id_size+0x2d9/0x9d0
[ 80.187719][ T5006] Modules linked in:
[ 80.191648][ T5006] CPU: 0 PID: 5006 Comm: syz-executor170 Not tainted 6.4.0-rc2-syzkaller-00180-g67caf26d769e #0
[ 80.202149][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 80.212301][ T5006] RIP: 0010:btf_type_id_size+0x2d9/0x9d0
[ 80.218011][ T5006] Code: ef e8 6b 58 e2 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 f9 5b e2 ff 44 89 fe bf 0e 00 00 00 e8 0c 58 e2 ff e8 e7 5b e2 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 d2 5b e2 ff 44
[ 80.237714][ T5006] RSP: 0018:ffffc900039dfb68 EFLAGS: 00010293
[ 80.243935][ T5006] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 80.251949][ T5006] RDX: ffff88802844bb80 RSI: ffffffff81a1e6e9 RDI: 0000000000000005
[ 80.260028][ T5006] RBP: ffff888022463000 R08: 0000000000000005 R09: 000000000000000e
[ 80.268149][ T5006] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000
[ 80.276234][ T5006] R13: 0000000000000011 R14: ffff88801ed5bc18 R15: 0000000000000011
[ 80.284304][ T5006] FS: 0000555555d48300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 80.293286][ T5006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.299952][ T5006] CR2: 00000000007f2398 CR3: 000000007593d000 CR4: 00000000003506f0
[ 80.308033][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 80.316101][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 80.324150][ T5006] Call Trace:
[ 80.327435][ T5006]
[ 80.330379][ T5006] map_create+0x1157/0x1860
[ 80.334965][ T5006] ? __might_fault+0xe2/0x190
[ 80.339705][ T5006] ? lock_downgrade+0x690/0x690
[ 80.344641][ T5006] ? bpf_obj_name_cpy+0x1a0/0x1a0
[ 80.349741][ T5006] ? bpf_lsm_bpf+0x9/0x10
[ 80.354181][ T5006] __sys_bpf+0x127f/0x5420
[ 80.358642][ T5006] ? lock_sync+0x190/0x190
[ 80.363097][ T5006] ? bpf_perf_link_attach+0x520/0x520
[ 80.368548][ T5006] ? do_raw_spin_lock+0x124/0x2b0
[ 80.373642][ T5006] ? spin_bug+0x1c0/0x1c0
[ 80.378265][ T5006] ? _raw_spin_lock_irq+0x45/0x50
[ 80.383389][ T5006] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 80.388998][ T5006] ? find_held_lock+0x2d/0x110
[ 80.393834][ T5006] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.399139][ T5006] ? lockdep_hardirqs_on+0x7d/0x100
[ 80.404425][ T5006] __x64_sys_bpf+0x79/0xc0
[ 80.408881][ T5006] do_syscall_64+0x39/0xb0
[ 80.413335][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.419321][ T5006] RIP: 0033:0x7f91f2681d09
[ 80.423786][ T5006] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 80.443606][ T5006] RSP: 002b:00007ffd8302d908 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 80.452150][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91f2681d09
[ 80.460762][ T5006] RDX: 0000000000000048 RSI: 0000000020000180 RDI: 0000000000000000
[ 80.468809][ T5006] RBP: 00007f91f2645eb0 R08: 0000000000000000 R09: 0000000000000000
[ 80.476847][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91f2645f40
[ 80.484971][ T5006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 80.492974][ T5006]
[ 80.496058][ T5006] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 80.503365][ T5006] CPU: 0 PID: 5006 Comm: syz-executor170 Not tainted 6.4.0-rc2-syzkaller-00180-g67caf26d769e #0
[ 80.513797][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 80.523870][ T5006] Call Trace:
[ 80.527169][ T5006]
[ 80.530117][ T5006] dump_stack_lvl+0xd9/0x150
[ 80.534752][ T5006] panic+0x686/0x730
[ 80.538685][ T5006] ? panic_smp_self_stop+0xa0/0xa0
[ 80.543851][ T5006] ? show_trace_log_lvl+0x285/0x390
[ 80.549109][ T5006] ? btf_type_id_size+0x2d9/0x9d0
[ 80.554246][ T5006] check_panic_on_warn+0xb1/0xc0
[ 80.559244][ T5006] __warn+0xf2/0x390
[ 80.563194][ T5006] ? btf_type_id_size+0x2d9/0x9d0
[ 80.568271][ T5006] report_bug+0x2da/0x500
[ 80.572659][ T5006] handle_bug+0x3c/0x70
[ 80.576837][ T5006] exc_invalid_op+0x18/0x50
[ 80.581360][ T5006] asm_exc_invalid_op+0x1a/0x20
[ 80.586247][ T5006] RIP: 0010:btf_type_id_size+0x2d9/0x9d0
[ 80.591903][ T5006] Code: ef e8 6b 58 e2 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 f9 5b e2 ff 44 89 fe bf 0e 00 00 00 e8 0c 58 e2 ff e8 e7 5b e2 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 d2 5b e2 ff 44
[ 80.611534][ T5006] RSP: 0018:ffffc900039dfb68 EFLAGS: 00010293
[ 80.617620][ T5006] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 80.625622][ T5006] RDX: ffff88802844bb80 RSI: ffffffff81a1e6e9 RDI: 0000000000000005
[ 80.633712][ T5006] RBP: ffff888022463000 R08: 0000000000000005 R09: 000000000000000e
[ 80.641731][ T5006] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000
[ 80.649723][ T5006] R13: 0000000000000011 R14: ffff88801ed5bc18 R15: 0000000000000011
[ 80.657725][ T5006] ? btf_type_id_size+0x2d9/0x9d0
[ 80.662783][ T5006] ? btf_type_id_size+0x2d9/0x9d0
[ 80.667834][ T5006] map_create+0x1157/0x1860
[ 80.672378][ T5006] ? __might_fault+0xe2/0x190
[ 80.677093][ T5006] ? lock_downgrade+0x690/0x690
[ 80.681978][ T5006] ? bpf_obj_name_cpy+0x1a0/0x1a0
[ 80.687090][ T5006] ? bpf_lsm_bpf+0x9/0x10
[ 80.691474][ T5006] __sys_bpf+0x127f/0x5420
[ 80.695918][ T5006] ? lock_sync+0x190/0x190
[ 80.700371][ T5006] ? bpf_perf_link_attach+0x520/0x520
[ 80.705772][ T5006] ? do_raw_spin_lock+0x124/0x2b0
[ 80.710835][ T5006] ? spin_bug+0x1c0/0x1c0
[ 80.715285][ T5006] ? _raw_spin_lock_irq+0x45/0x50
[ 80.720346][ T5006] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 80.725832][ T5006] ? find_held_lock+0x2d/0x110
[ 80.730638][ T5006] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.735961][ T5006] ? lockdep_hardirqs_on+0x7d/0x100
[ 80.741205][ T5006] __x64_sys_bpf+0x79/0xc0
[ 80.745643][ T5006] do_syscall_64+0x39/0xb0
[ 80.750099][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.756028][ T5006] RIP: 0033:0x7f91f2681d09
[ 80.760461][ T5006] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 80.780095][ T5006] RSP: 002b:00007ffd8302d908 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 80.788549][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91f2681d09
[ 80.796541][ T5006] RDX: 0000000000000048 RSI: 0000000020000180 RDI: 0000000000000000
[ 80.804538][ T5006] RBP: 00007f91f2645eb0 R08: 0000000000000000 R09: 0000000000000000
[ 80.812544][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91f2645f40
[ 80.820540][ T5006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 80.828550][ T5006]
[ 80.831792][ T5006] Kernel Offset: disabled
[ 80.836213][ T5006] Rebooting in 86400 seconds..