./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2500918365 <...> DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 3186 [ 25.114142][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.124865][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. execve("./syz-executor2500918365", ["./syz-executor2500918365"], 0x7fff3dc2b0c0 /* 10 vars */) = 0 brk(NULL) = 0x555555ed2000 brk(0x555555ed2c40) = 0x555555ed2c40 arch_prctl(ARCH_SET_FS, 0x555555ed2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2500918365", 4096) = 28 brk(0x555555ef3c40) = 0x555555ef3c40 brk(0x555555ef4000) = 0x555555ef4000 mprotect(0x7f013c1ef000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_HASH, key_size=4, value_size=4, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 syzkaller login: [ 46.484093][ T3608] ------------[ cut here ]------------ [ 46.489738][ T3608] trace type BPF program uses run-time allocation [ 46.496253][ T3608] WARNING: CPU: 1 PID: 3608 at kernel/bpf/verifier.c:12517 check_map_prog_compatibility+0x76b/0x920 [ 46.507321][ T3608] Modules linked in: [ 46.511216][ T3608] CPU: 1 PID: 3608 Comm: syz-executor250 Not tainted 5.19.0-rc5-syzkaller-00228-ge5524c2a1fc4 #0 [ 46.521785][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 46.532038][ T3608] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 46.538800][ T3608] Code: c7 fc ff ff e8 26 23 ee ff 31 db e9 bb fc ff ff e8 1a 23 ee ff c6 05 82 b3 56 0c 01 48 c7 c7 60 8e 94 8a 31 c0 e8 a5 b7 b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 46.558486][ T3608] RSP: 0018:ffffc90002e4f1e8 EFLAGS: 00010246 [ 46.564592][ T3608] RAX: 09db6eded460e900 RBX: 0000000000000001 RCX: ffff8880203a5880 [ 46.572574][ T3608] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 46.580678][ T3608] RBP: ffff88807543c830 R08: ffffffff816bcd7d R09: fffff520005c9db9 [ 46.588709][ T3608] R10: fffff520005c9db9 R11: 1ffff920005c9db8 R12: ffff88807543c800 [ 46.596725][ T3608] R13: dffffc0000000000 R14: ffff88807cd94000 R15: 0000000000000002 [ 46.604726][ T3608] FS: 0000555555ed2300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 46.613662][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.620284][ T3608] CR2: 00007fde702f8a70 CR3: 0000000074ea8000 CR4: 00000000003506e0 [ 46.628293][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.636343][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.644335][ T3608] Call Trace: [ 46.647678][ T3608] [ 46.650630][ T3608] resolve_pseudo_ldimm64+0x67f/0x1270 [ 46.656277][ T3608] ? check_attach_btf_id+0xef0/0xef0 [ 46.661580][ T3608] ? ___mark_reg_known+0x190/0x190 [ 46.666748][ T3608] ? bpf_lsm_capable+0x5/0x10 [ 46.671439][ T3608] bpf_check+0x2606/0x13b70 [ 46.676029][ T3608] ? reacquire_held_locks+0x680/0x680 [ 46.681422][ T3608] ? validate_chain+0x126/0x65c0 [ 46.686412][ T3608] ? validate_chain+0x126/0x65c0 [ 46.691360][ T3608] ? reacquire_held_locks+0x680/0x680 [ 46.697009][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 46.703013][ T3608] ? reacquire_held_locks+0x680/0x680 [ 46.708467][ T3608] ? reacquire_held_locks+0x680/0x680 [ 46.713846][ T3608] ? mark_lock+0x98/0x350 [ 46.718222][ T3608] ? reacquire_held_locks+0x680/0x680 [ 46.723598][ T3608] ? mark_lock+0x98/0x350 [ 46.727984][ T3608] ? bpf_get_btf_vmlinux+0x10/0x10 [ 46.733103][ T3608] ? __lock_acquire+0x129a/0x1f80 [ 46.738185][ T3608] ? pcpu_alloc+0xf4d/0x15d0 [ 46.742777][ T3608] ? rcu_read_lock_sched_held+0x89/0x130 [ 46.748472][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 46.754509][ T3608] ? mark_lock+0x98/0x350 [ 46.758847][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 46.764291][ T3608] ? rcu_read_lock_sched_held+0x89/0x130 [ 46.770027][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 46.776097][ T3608] ? read_lock_is_recursive+0x10/0x10 [ 46.781479][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 46.786984][ T3608] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 46.793074][ T3608] ? print_irqtrace_events+0x220/0x220 [ 46.798608][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 46.804075][ T3608] ? seqcount_lockdep_reader_access+0x153/0x220 [ 46.810455][ T3608] ? lockdep_hardirqs_on+0x95/0x140 [ 46.815776][ T3608] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 46.822007][ T3608] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 46.827331][ T3608] ? _raw_spin_unlock+0x24/0x40 [ 46.832185][ T3608] ? find_vmap_area+0x104/0x120 [ 46.837167][ T3608] ? __might_fault+0xb2/0x110 [ 46.841854][ T3608] ? memset+0x1f/0x40 [ 46.845876][ T3608] ? bpf_obj_name_cpy+0x191/0x1d0 [ 46.850908][ T3608] bpf_prog_load+0x1288/0x1b80 [ 46.855750][ T3608] ? map_freeze+0x390/0x390 [ 46.860255][ T3608] ? __might_sleep+0xc0/0xc0 [ 46.864904][ T3608] ? __might_fault+0xb2/0x110 [ 46.869585][ T3608] ? bpf_lsm_bpf+0x5/0x10 [ 46.873898][ T3608] ? security_bpf+0x9d/0xb0 [ 46.878461][ T3608] __sys_bpf+0x3d3/0x6c0 [ 46.882729][ T3608] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 46.888160][ T3608] ? print_irqtrace_events+0x220/0x220 [ 46.893625][ T3608] ? vtime_user_exit+0x2b2/0x3e0 [ 46.898611][ T3608] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 46.904650][ T3608] __x64_sys_bpf+0x78/0x90 [ 46.909088][ T3608] do_syscall_64+0x2b/0x70 [ 46.913503][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 46.919442][ T3608] RIP: 0033:0x7f013c182d49 [ 46.923871][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 46.943563][ T3608] RSP: 002b:00007ffe11bdd5c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.952015][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f013c182d49 [ 46.960030][ T3608] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005 [ 46.968043][ T3608] RBP: 00007f013c146ef0 R08: 0000000000000000 R09: 0000000000000000 [ 46.976072][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f013c146f80 [ 46.984047][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.992096][ T3608] [ 46.995149][ T3608] Kernel panic - not syncing: panic_on_warn set ... [ 47.001716][ T3608] CPU: 1 PID: 3608 Comm: syz-executor250 Not tainted 5.19.0-rc5-syzkaller-00228-ge5524c2a1fc4 #0 [ 47.012193][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 47.022230][ T3608] Call Trace: [ 47.025496][ T3608] [ 47.028412][ T3608] dump_stack_lvl+0x1e3/0x2cb [ 47.033095][ T3608] ? bfq_pos_tree_add_move+0x436/0x436 [ 47.038556][ T3608] ? panic+0x76e/0x76e [ 47.042628][ T3608] ? vscnprintf+0x59/0x80 [ 47.046987][ T3608] ? check_map_prog_compatibility+0x690/0x920 [ 47.053064][ T3608] panic+0x312/0x76e [ 47.056974][ T3608] ? __warn+0x131/0x220 [ 47.061132][ T3608] ? fb_is_primary_device+0xcc/0xcc [ 47.066333][ T3608] ? check_map_prog_compatibility+0x76b/0x920 [ 47.072390][ T3608] __warn+0x1fa/0x220 [ 47.076366][ T3608] ? check_map_prog_compatibility+0x76b/0x920 [ 47.082422][ T3608] report_bug+0x1b3/0x2d0 [ 47.086751][ T3608] handle_bug+0x3d/0x70 [ 47.090897][ T3608] exc_invalid_op+0x16/0x40 [ 47.095398][ T3608] asm_exc_invalid_op+0x1b/0x20 [ 47.100311][ T3608] RIP: 0010:check_map_prog_compatibility+0x76b/0x920 [ 47.106989][ T3608] Code: c7 fc ff ff e8 26 23 ee ff 31 db e9 bb fc ff ff e8 1a 23 ee ff c6 05 82 b3 56 0c 01 48 c7 c7 60 8e 94 8a 31 c0 e8 a5 b7 b6 ff <0f> 0b e9 23 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c0 f8 ff [ 47.126709][ T3608] RSP: 0018:ffffc90002e4f1e8 EFLAGS: 00010246 [ 47.132777][ T3608] RAX: 09db6eded460e900 RBX: 0000000000000001 RCX: ffff8880203a5880 [ 47.140744][ T3608] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 47.148705][ T3608] RBP: ffff88807543c830 R08: ffffffff816bcd7d R09: fffff520005c9db9 [ 47.156666][ T3608] R10: fffff520005c9db9 R11: 1ffff920005c9db8 R12: ffff88807543c800 [ 47.164661][ T3608] R13: dffffc0000000000 R14: ffff88807cd94000 R15: 0000000000000002 [ 47.172639][ T3608] ? __wake_up_klogd+0xcd/0x100 [ 47.177512][ T3608] ? check_map_prog_compatibility+0x76b/0x920 [ 47.183584][ T3608] resolve_pseudo_ldimm64+0x67f/0x1270 [ 47.189051][ T3608] ? check_attach_btf_id+0xef0/0xef0 [ 47.194376][ T3608] ? ___mark_reg_known+0x190/0x190 [ 47.199489][ T3608] ? bpf_lsm_capable+0x5/0x10 [ 47.204181][ T3608] bpf_check+0x2606/0x13b70 [ 47.208704][ T3608] ? reacquire_held_locks+0x680/0x680 [ 47.214073][ T3608] ? validate_chain+0x126/0x65c0 [ 47.218999][ T3608] ? validate_chain+0x126/0x65c0 [ 47.223926][ T3608] ? reacquire_held_locks+0x680/0x680 [ 47.229310][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 47.235286][ T3608] ? reacquire_held_locks+0x680/0x680 [ 47.240660][ T3608] ? reacquire_held_locks+0x680/0x680 [ 47.246023][ T3608] ? mark_lock+0x98/0x350 [ 47.250342][ T3608] ? reacquire_held_locks+0x680/0x680 [ 47.255703][ T3608] ? mark_lock+0x98/0x350 [ 47.260023][ T3608] ? bpf_get_btf_vmlinux+0x10/0x10 [ 47.265125][ T3608] ? __lock_acquire+0x129a/0x1f80 [ 47.270144][ T3608] ? pcpu_alloc+0xf4d/0x15d0 [ 47.274723][ T3608] ? rcu_read_lock_sched_held+0x89/0x130 [ 47.280344][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 47.286317][ T3608] ? mark_lock+0x98/0x350 [ 47.290640][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 47.296104][ T3608] ? rcu_read_lock_sched_held+0x89/0x130 [ 47.301746][ T3608] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 47.307727][ T3608] ? read_lock_is_recursive+0x10/0x10 [ 47.313101][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 47.318555][ T3608] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 47.324526][ T3608] ? print_irqtrace_events+0x220/0x220 [ 47.329981][ T3608] ? ktime_get_with_offset+0x125/0x360 [ 47.335427][ T3608] ? seqcount_lockdep_reader_access+0x153/0x220 [ 47.341663][ T3608] ? lockdep_hardirqs_on+0x95/0x140 [ 47.346850][ T3608] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 47.353102][ T3608] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 47.358374][ T3608] ? _raw_spin_unlock+0x24/0x40 [ 47.363216][ T3608] ? find_vmap_area+0x104/0x120 [ 47.368059][ T3608] ? __might_fault+0xb2/0x110 [ 47.372731][ T3608] ? memset+0x1f/0x40 [ 47.376704][ T3608] ? bpf_obj_name_cpy+0x191/0x1d0 [ 47.381731][ T3608] bpf_prog_load+0x1288/0x1b80 [ 47.386493][ T3608] ? map_freeze+0x390/0x390 [ 47.390994][ T3608] ? __might_sleep+0xc0/0xc0 [ 47.395584][ T3608] ? __might_fault+0xb2/0x110 [ 47.400252][ T3608] ? bpf_lsm_bpf+0x5/0x10 [ 47.404578][ T3608] ? security_bpf+0x9d/0xb0 [ 47.409610][ T3608] __sys_bpf+0x3d3/0x6c0 [ 47.414037][ T3608] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 47.419410][ T3608] ? print_irqtrace_events+0x220/0x220 [ 47.424863][ T3608] ? vtime_user_exit+0x2b2/0x3e0 [ 47.429796][ T3608] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 47.435772][ T3608] __x64_sys_bpf+0x78/0x90 [ 47.440196][ T3608] do_syscall_64+0x2b/0x70 [ 47.444604][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 47.450487][ T3608] RIP: 0033:0x7f013c182d49 [ 47.454905][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 47.474511][ T3608] RSP: 002b:00007ffe11bdd5c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.482920][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f013c182d49 [ 47.490880][ T3608] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000005 [ 47.498840][ T3608] RBP: 00007f013c146ef0 R08: 0000000000000000 R09: 0000000000000000 [ 47.506811][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f013c146f80 [ 47.514859][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.522833][ T3608] [ 47.526175][ T3608] Kernel Offset: disabled [ 47.530549][ T3608] Rebooting in 86400 seconds..