program: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) [ 85.109706][ T5341] Bluetooth: hci0: command tx timeout [ 85.188610][ T5367] ------------[ cut here ]------------ [ 85.190951][ T5367] verifier bug: error during ctx access conversion (0)(1) [ 85.203278][ T5367] WARNING: CPU: 0 PID: 5367 at kernel/bpf/verifier.c:21448 bpf_check+0x1b6ed/0x1d2d0 [ 85.212403][ T5367] Modules linked in: [ 85.214389][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.218589][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.223271][ T5367] RIP: 0010:bpf_check+0x1b6ed/0x1d2d0 [ 85.225815][ T5367] Code: 28 af ff 90 0f 0b 90 90 e9 6d 60 ff ff e8 4b 9c eb ff c6 05 d8 7a b9 0d 01 90 48 c7 c7 e0 fb 91 8b 44 89 f6 e8 94 28 af ff 90 <0f> 0b 90 90 e9 af bd ff ff e8 25 9c eb ff c6 05 b7 7a b9 0d 01 90 [ 85.233536][ T5367] RSP: 0018:ffffc9000d42f600 EFLAGS: 00010246 [ 85.236014][ T5367] RAX: e0f1d66ee5314000 RBX: 0000000000000000 RCX: 0000000000100000 [ 85.240028][ T5367] RDX: ffffc9000dfe2000 RSI: 000000000000191f RDI: 0000000000001920 [ 85.243731][ T5367] RBP: ffffc9000d42fb50 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 85.247177][ T5367] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc90000bee052 [ 85.250716][ T5367] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 85.254451][ T5367] FS: 00007f44e69d26c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 85.259614][ T5367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.262748][ T5367] CR2: 00007f44e5dc0190 CR3: 0000000043821000 CR4: 0000000000352ef0 [ 85.270510][ T5367] Call Trace: [ 85.272259][ T5367] [ 85.273831][ T5367] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 85.276978][ T5367] ? __pfx_bpf_check+0x10/0x10 [ 85.279414][ T5367] ? ktime_get_with_offset+0x8c/0x2a0 [ 85.281966][ T5367] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 85.284725][ T5367] ? ktime_get_with_offset+0x8c/0x2a0 [ 85.287176][ T5367] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 85.289913][ T5367] ? __asan_memset+0x22/0x50 [ 85.291829][ T5367] ? bpf_obj_name_cpy+0x194/0x1e0 [ 85.293949][ T5367] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 85.299068][ T5367] ? security_bpf_prog_load+0x7f/0x310 [ 85.301570][ T5367] bpf_prog_load+0x1318/0x1930 [ 85.303835][ T5367] ? __pfx_bpf_prog_load+0x10/0x10 [ 85.306197][ T5367] ? bpf_lsm_bpf+0x9/0x20 [ 85.308282][ T5367] ? security_bpf+0x7e/0x300 [ 85.310693][ T5367] __sys_bpf+0x528/0x870 [ 85.313138][ T5367] ? __pfx___sys_bpf+0x10/0x10 [ 85.315976][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.318917][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.321146][ T5367] __x64_sys_bpf+0x7c/0x90 [ 85.323152][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.325413][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.328052][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.330858][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 85.333017][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.335680][ T5367] RIP: 0033:0x7f44e5b8ebe9 [ 85.338039][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.346560][ T5367] RSP: 002b:00007f44e69d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.350616][ T5367] RAX: ffffffffffffffda RBX: 00007f44e5dc5fa0 RCX: 00007f44e5b8ebe9 [ 85.354200][ T5367] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 85.357984][ T5367] RBP: 00007f44e5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.361451][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.364916][ T5367] R13: 00007f44e5dc6038 R14: 00007f44e5dc5fa0 R15: 00007ffd8320ec68 [ 85.368674][ T5367] [ 85.370567][ T5367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.374464][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.379086][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.384660][ T5367] Call Trace: [ 85.386480][ T5367] [ 85.388042][ T5367] dump_stack_lvl+0x99/0x250 [ 85.390358][ T5367] ? __asan_memcpy+0x40/0x70 [ 85.392395][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.394536][ T5367] ? __pfx__printk+0x10/0x10 [ 85.396436][ T5367] vpanic+0x281/0x750 [ 85.398102][ T5367] ? __pfx__printk+0x10/0x10 [ 85.399907][ T5367] ? __pfx_vpanic+0x10/0x10 [ 85.401715][ T5367] ? is_bpf_text_address+0x26/0x2b0 [ 85.403912][ T5367] panic+0xb9/0xc0 [ 85.405573][ T5367] ? __pfx_panic+0x10/0x10 [ 85.407559][ T5367] __warn+0x31b/0x4b0 [ 85.409369][ T5367] ? bpf_check+0x1b6ed/0x1d2d0 [ 85.411493][ T5367] ? bpf_check+0x1b6ed/0x1d2d0 [ 85.413601][ T5367] report_bug+0x2be/0x4f0 [ 85.415432][ T5367] ? bpf_check+0x1b6ed/0x1d2d0 [ 85.417573][ T5367] ? bpf_check+0x1b6ed/0x1d2d0 [ 85.419567][ T5367] ? bpf_check+0x1b6ef/0x1d2d0 [ 85.421613][ T5367] handle_bug+0x84/0x160 [ 85.423448][ T5367] exc_invalid_op+0x1a/0x50 [ 85.425410][ T5367] asm_exc_invalid_op+0x1a/0x20 [ 85.427548][ T5367] RIP: 0010:bpf_check+0x1b6ed/0x1d2d0 [ 85.429685][ T5367] Code: 28 af ff 90 0f 0b 90 90 e9 6d 60 ff ff e8 4b 9c eb ff c6 05 d8 7a b9 0d 01 90 48 c7 c7 e0 fb 91 8b 44 89 f6 e8 94 28 af ff 90 <0f> 0b 90 90 e9 af bd ff ff e8 25 9c eb ff c6 05 b7 7a b9 0d 01 90 [ 85.437810][ T5367] RSP: 0018:ffffc9000d42f600 EFLAGS: 00010246 [ 85.440409][ T5367] RAX: e0f1d66ee5314000 RBX: 0000000000000000 RCX: 0000000000100000 [ 85.443797][ T5367] RDX: ffffc9000dfe2000 RSI: 000000000000191f RDI: 0000000000001920 [ 85.447305][ T5367] RBP: ffffc9000d42fb50 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 85.450607][ T5367] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc90000bee052 [ 85.453952][ T5367] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 [ 85.457313][ T5367] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 85.459920][ T5367] ? __pfx_bpf_check+0x10/0x10 [ 85.461921][ T5367] ? ktime_get_with_offset+0x8c/0x2a0 [ 85.464224][ T5367] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 85.467061][ T5367] ? ktime_get_with_offset+0x8c/0x2a0 [ 85.469241][ T5367] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 85.472040][ T5367] ? __asan_memset+0x22/0x50 [ 85.474111][ T5367] ? bpf_obj_name_cpy+0x194/0x1e0 [ 85.476341][ T5367] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 85.478652][ T5367] ? security_bpf_prog_load+0x7f/0x310 [ 85.481079][ T5367] bpf_prog_load+0x1318/0x1930 [ 85.483107][ T5367] ? __pfx_bpf_prog_load+0x10/0x10 [ 85.485343][ T5367] ? bpf_lsm_bpf+0x9/0x20 [ 85.487211][ T5367] ? security_bpf+0x7e/0x300 [ 85.489238][ T5367] __sys_bpf+0x528/0x870 [ 85.491097][ T5367] ? __pfx___sys_bpf+0x10/0x10 [ 85.493146][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.495295][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.497455][ T5367] __x64_sys_bpf+0x7c/0x90 [ 85.499378][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.501264][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.503583][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.506133][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 85.508148][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.510664][ T5367] RIP: 0033:0x7f44e5b8ebe9 [ 85.512709][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.520890][ T5367] RSP: 002b:00007f44e69d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.524434][ T5367] RAX: ffffffffffffffda RBX: 00007f44e5dc5fa0 RCX: 00007f44e5b8ebe9 [ 85.527947][ T5367] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 85.531136][ T5367] RBP: 00007f44e5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.534301][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.537429][ T5367] R13: 00007f44e5dc6038 R14: 00007f44e5dc5fa0 R15: 00007ffd8320ec68 [ 85.540635][ T5367] [ 85.542326][ T5367] Kernel Offset: disabled [ 85.544026][ T5367] Rebooting in 86400 seconds..