./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1793461522 <...> DUID 00:04:48:2f:83:80:5e:82:2f:af:2e:03:8c:bf:d4:14:8e:03 forked to background, child pid 3179 [ 26.188001][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.198617][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. execve("./syz-executor1793461522", ["./syz-executor1793461522"], 0x7ffd0c9fba90 /* 10 vars */) = 0 brk(NULL) = 0x555555fcb000 brk(0x555555fcbc40) = 0x555555fcbc40 arch_prctl(ARCH_SET_FS, 0x555555fcb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1793461522", 4096) = 28 brk(0x555555fecc40) = 0x555555fecc40 brk(0x555555fed000) = 0x555555fed000 mprotect(0x7fd5cd34d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=3, value_size=8, max_entries=4, map_flags=BPF_F_NO_PREALLOC|BPF_F_WRONLY, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 syzkaller login: [ 48.356950][ T3600] ------------[ cut here ]------------ [ 48.362704][ T3600] trace type BPF program uses run-time allocation [ 48.369155][ T3600] WARNING: CPU: 0 PID: 3600 at kernel/bpf/verifier.c:12517 check_map_prog_compatibility+0x76b/0x920 [ 48.380272][ T3600] Modules linked in: [ 48.384347][ T3600] CPU: 1 PID: 3600 Comm: syz-executor179 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 48.394649][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.404843][ T3600] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 48.411606][ T3600] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 48.431307][ T3600] RSP: 0018:ffffc90002f1f1e8 EFLAGS: 00010246 [ 48.437476][ T3600] RAX: 790b97d00ffc4800 RBX: 0000000000000001 RCX: ffff888021138000 [ 48.445902][ T3600] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 48.454301][ T3600] RBP: ffff888026c17030 R08: ffffffff816c1ccd R09: ffffed1017344f14 [ 48.462378][ T3600] R10: ffffed1017344f14 R11: 1ffff11017344f13 R12: ffff888026c17000 [ 48.470441][ T3600] R13: dffffc0000000000 R14: ffff888076514000 R15: 0000000000000011 [ 48.478472][ T3600] FS: 0000555555fcb300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.487447][ T3600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.494063][ T3600] CR2: 00007ffdc94dc000 CR3: 0000000072d54000 CR4: 00000000003506f0 [ 48.502217][ T3600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.510198][ T3600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.518232][ T3600] Call Trace: [ 48.521605][ T3600] [ 48.524552][ T3600] resolve_pseudo_ldimm64+0x67f/0x1270 [ 48.530011][ T3600] ? check_attach_btf_id+0xef0/0xef0 [ 48.535353][ T3600] ? bpf_lsm_capable+0x5/0x10 [ 48.540041][ T3600] bpf_check+0x2606/0x13b70 [ 48.544621][ T3600] ? reacquire_held_locks+0x680/0x680 [ 48.550003][ T3600] ? validate_chain+0x126/0x65c0 [ 48.554987][ T3600] ? validate_chain+0x126/0x65c0 [ 48.559930][ T3600] ? reacquire_held_locks+0x680/0x680 [ 48.565349][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.571344][ T3600] ? reacquire_held_locks+0x680/0x680 [ 48.576793][ T3600] ? reacquire_held_locks+0x680/0x680 [ 48.582239][ T3600] ? mark_lock+0x98/0x350 [ 48.586589][ T3600] ? reacquire_held_locks+0x680/0x680 [ 48.592094][ T3600] ? mark_lock+0x98/0x350 [ 48.596427][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 48.601688][ T3600] ? __lock_acquire+0x129a/0x1f80 [ 48.606724][ T3600] ? pcpu_alloc+0xf4d/0x15d0 [ 48.611311][ T3600] ? rcu_read_lock_sched_held+0x89/0x130 [ 48.616987][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.623012][ T3600] ? mark_lock+0x98/0x350 [ 48.627334][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 48.632822][ T3600] ? rcu_read_lock_sched_held+0x89/0x130 [ 48.638465][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.644571][ T3600] ? read_lock_is_recursive+0x10/0x10 [ 48.649950][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 48.655450][ T3600] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 48.661436][ T3600] ? print_irqtrace_events+0x220/0x220 [ 48.666932][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 48.672439][ T3600] ? seqcount_lockdep_reader_access+0x153/0x220 [ 48.678672][ T3600] ? lockdep_hardirqs_on+0x95/0x140 [ 48.684086][ T3600] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 48.690358][ T3600] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 48.695687][ T3600] ? _raw_spin_unlock+0x24/0x40 [ 48.700561][ T3600] ? find_vmap_area+0x104/0x120 [ 48.705515][ T3600] ? __might_fault+0xb2/0x110 [ 48.710235][ T3600] ? memset+0x1f/0x40 [ 48.714286][ T3600] ? bpf_obj_name_cpy+0x191/0x1d0 [ 48.719331][ T3600] bpf_prog_load+0x1288/0x1b80 [ 48.724270][ T3600] ? map_freeze+0x390/0x390 [ 48.728812][ T3600] ? __might_sleep+0xc0/0xc0 [ 48.733466][ T3600] ? __might_fault+0xb2/0x110 [ 48.738176][ T3600] ? bpf_lsm_bpf+0x5/0x10 [ 48.742543][ T3600] ? security_bpf+0x9d/0xb0 [ 48.747057][ T3600] __sys_bpf+0x3d3/0x6c0 [ 48.751290][ T3600] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 48.756746][ T3600] ? print_irqtrace_events+0x220/0x220 [ 48.762252][ T3600] ? vtime_user_exit+0x2b2/0x3e0 [ 48.767187][ T3600] ? __ct_user_exit+0x81/0xe0 [ 48.771932][ T3600] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 48.777925][ T3600] __x64_sys_bpf+0x78/0x90 [ 48.782397][ T3600] do_syscall_64+0x2b/0x70 [ 48.786847][ T3600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.792788][ T3600] RIP: 0033:0x7fd5cd2e0d49 [ 48.797209][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.816885][ T3600] RSP: 002b:00007fff5157b578 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.825384][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5cd2e0d49 [ 48.833425][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 48.841416][ T3600] RBP: 00007fd5cd2a4ef0 R08: 0000000000000000 R09: 0000000000000000 [ 48.849456][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5cd2a4f80 [ 48.857479][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.865550][ T3600] [ 48.868579][ T3600] Kernel panic - not syncing: panic_on_warn set ... [ 48.875158][ T3600] CPU: 0 PID: 3600 Comm: syz-executor179 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 48.885296][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.895388][ T3600] Call Trace: [ 48.898654][ T3600] [ 48.901577][ T3600] dump_stack_lvl+0x1e3/0x2cb [ 48.906248][ T3600] ? io_notif_register+0x5e7/0x5e7 [ 48.911344][ T3600] ? panic+0x76e/0x76e [ 48.915400][ T3600] ? vscnprintf+0x59/0x80 [ 48.919729][ T3600] ? check_map_prog_compatibility+0x6a0/0x920 [ 48.925787][ T3600] panic+0x312/0x76e [ 48.929673][ T3600] ? __warn+0x131/0x220 [ 48.933819][ T3600] ? fb_is_primary_device+0xcc/0xcc [ 48.939007][ T3600] ? check_map_prog_compatibility+0x76b/0x920 [ 48.945063][ T3600] __warn+0x1fa/0x220 [ 48.949033][ T3600] ? check_map_prog_compatibility+0x76b/0x920 [ 48.955083][ T3600] report_bug+0x1b3/0x2d0 [ 48.959398][ T3600] handle_bug+0x3d/0x70 [ 48.963538][ T3600] exc_invalid_op+0x16/0x40 [ 48.968030][ T3600] asm_exc_invalid_op+0x16/0x20 [ 48.972872][ T3600] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 48.979550][ T3600] Code: c7 fc ff ff e8 06 1a ee ff 31 db e9 bb fc ff ff e8 fa 19 ee ff c6 05 fc 31 56 0c 01 48 c7 c7 c0 a4 94 8a 31 c0 e8 b5 4d b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 48.999168][ T3600] RSP: 0018:ffffc90002f1f1e8 EFLAGS: 00010246 [ 49.005234][ T3600] RAX: 790b97d00ffc4800 RBX: 0000000000000001 RCX: ffff888021138000 [ 49.013197][ T3600] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 49.021160][ T3600] RBP: ffff888026c17030 R08: ffffffff816c1ccd R09: ffffed1017344f14 [ 49.029124][ T3600] R10: ffffed1017344f14 R11: 1ffff11017344f13 R12: ffff888026c17000 [ 49.037089][ T3600] R13: dffffc0000000000 R14: ffff888076514000 R15: 0000000000000011 [ 49.045076][ T3600] ? __wake_up_klogd+0xcd/0x100 [ 49.049928][ T3600] ? check_map_prog_compatibility+0x76b/0x920 [ 49.055993][ T3600] resolve_pseudo_ldimm64+0x67f/0x1270 [ 49.061459][ T3600] ? check_attach_btf_id+0xef0/0xef0 [ 49.066751][ T3600] ? bpf_lsm_capable+0x5/0x10 [ 49.071432][ T3600] bpf_check+0x2606/0x13b70 [ 49.075962][ T3600] ? reacquire_held_locks+0x680/0x680 [ 49.081343][ T3600] ? validate_chain+0x126/0x65c0 [ 49.086276][ T3600] ? validate_chain+0x126/0x65c0 [ 49.091210][ T3600] ? reacquire_held_locks+0x680/0x680 [ 49.097537][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.103515][ T3600] ? reacquire_held_locks+0x680/0x680 [ 49.108887][ T3600] ? reacquire_held_locks+0x680/0x680 [ 49.114257][ T3600] ? mark_lock+0x98/0x350 [ 49.118589][ T3600] ? reacquire_held_locks+0x680/0x680 [ 49.123954][ T3600] ? mark_lock+0x98/0x350 [ 49.128277][ T3600] ? bpf_get_btf_vmlinux+0x10/0x10 [ 49.133387][ T3600] ? __lock_acquire+0x129a/0x1f80 [ 49.138412][ T3600] ? pcpu_alloc+0xf4d/0x15d0 [ 49.142997][ T3600] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.148623][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.154600][ T3600] ? mark_lock+0x98/0x350 [ 49.158927][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 49.164381][ T3600] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.170008][ T3600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.176083][ T3600] ? read_lock_is_recursive+0x10/0x10 [ 49.181465][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 49.187017][ T3600] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 49.193002][ T3600] ? print_irqtrace_events+0x220/0x220 [ 49.198457][ T3600] ? ktime_get_with_offset+0x125/0x360 [ 49.203909][ T3600] ? seqcount_lockdep_reader_access+0x153/0x220 [ 49.210156][ T3600] ? lockdep_hardirqs_on+0x95/0x140 [ 49.215347][ T3600] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 49.221584][ T3600] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 49.226862][ T3600] ? _raw_spin_unlock+0x24/0x40 [ 49.231711][ T3600] ? find_vmap_area+0x104/0x120 [ 49.236560][ T3600] ? __might_fault+0xb2/0x110 [ 49.241234][ T3600] ? memset+0x1f/0x40 [ 49.245209][ T3600] ? bpf_obj_name_cpy+0x191/0x1d0 [ 49.250249][ T3600] bpf_prog_load+0x1288/0x1b80 [ 49.255035][ T3600] ? map_freeze+0x390/0x390 [ 49.259534][ T3600] ? __might_sleep+0xc0/0xc0 [ 49.264130][ T3600] ? __might_fault+0xb2/0x110 [ 49.268803][ T3600] ? bpf_lsm_bpf+0x5/0x10 [ 49.273126][ T3600] ? security_bpf+0x9d/0xb0 [ 49.277625][ T3600] __sys_bpf+0x3d3/0x6c0 [ 49.281862][ T3600] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 49.287240][ T3600] ? print_irqtrace_events+0x220/0x220 [ 49.292691][ T3600] ? vtime_user_exit+0x2b2/0x3e0 [ 49.297710][ T3600] ? __ct_user_exit+0x81/0xe0 [ 49.302384][ T3600] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 49.308360][ T3600] __x64_sys_bpf+0x78/0x90 [ 49.312773][ T3600] do_syscall_64+0x2b/0x70 [ 49.317182][ T3600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.323068][ T3600] RIP: 0033:0x7fd5cd2e0d49 [ 49.327481][ T3600] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.347084][ T3600] RSP: 002b:00007fff5157b578 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.355490][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5cd2e0d49 [ 49.363457][ T3600] RDX: 0000000000000080 RSI: 0000000020000080 RDI: 0000000000000005 [ 49.371426][ T3600] RBP: 00007fd5cd2a4ef0 R08: 0000000000000000 R09: 0000000000000000 [ 49.379392][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5cd2a4f80 [ 49.387356][ T3600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.395339][ T3600] [ 49.398522][ T3600] Kernel Offset: disabled [ 49.402918][ T3600] Rebooting in 86400 seconds..