./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3610672538 <...> DUID 00:04:1c:76:50:43:29:7e:9c:e7:55:a6:71:63:69:aa:23:de forked to background, child pid 3188 [ 27.362639][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.372630][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.65' (ECDSA) to the list of known hosts. execve("./syz-executor3610672538", ["./syz-executor3610672538"], 0x7ffd098c0d80 /* 10 vars */) = 0 brk(NULL) = 0x55555641b000 brk(0x55555641bc40) = 0x55555641bc40 arch_prctl(ARCH_SET_FS, 0x55555641b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3610672538", 4096) = 28 brk(0x55555643cc40) = 0x55555643cc40 brk(0x55555643d000) = 0x55555643d000 mprotect(0x7f0fbaeae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 syzkaller login: [ 50.990532][ T3609] ------------[ cut here ]------------ [ 50.996157][ T3609] WARNING: CPU: 0 PID: 3609 at kernel/bpf/btf.c:1946 btf_type_id_size+0x2d5/0x9d0 [ 51.005816][ T3609] Modules linked in: [ 51.009735][ T3609] CPU: 0 PID: 3609 Comm: syz-executor361 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 51.019915][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 51.030041][ T3609] RIP: 0010:btf_type_id_size+0x2d5/0x9d0 [ 51.035747][ T3609] Code: ef e8 7f 8e e4 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 6d 91 e4 ff 44 89 fe bf 0e 00 00 00 e8 20 8e e4 ff e8 5b 91 e4 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 46 91 e4 ff 44 [ 51.055544][ T3609] RSP: 0018:ffffc90003cefb40 EFLAGS: 00010293 [ 51.061613][ T3609] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 51.069645][ T3609] RDX: ffff8880259c0000 RSI: ffffffff81968415 RDI: 0000000000000005 [ 51.077717][ T3609] RBP: ffff88801270ca00 R08: 0000000000000005 R09: 000000000000000e [ 51.085783][ T3609] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 51.093790][ T3609] R13: 0000000000000011 R14: ffff888026ee6424 R15: 0000000000000011 [ 51.101858][ T3609] FS: 000055555641b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 51.110845][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.117492][ T3609] CR2: 0000000000f2e258 CR3: 000000007110e000 CR4: 00000000003506f0 [ 51.125516][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.133489][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.141556][ T3609] Call Trace: [ 51.144879][ T3609] [ 51.147810][ T3609] btf_new_fd+0x1926/0x1e70 [ 51.152323][ T3609] ? btf_type_snprintf_show+0x3b0/0x3b0 [ 51.158022][ T3609] ? apparmor_capable+0x1d8/0x460 [ 51.163104][ T3609] ? security_capable+0x8f/0xc0 [ 51.168028][ T3609] __sys_bpf+0xb7d/0x4cf0 [ 51.172377][ T3609] ? lock_release+0x780/0x780 [ 51.177140][ T3609] ? bpf_perf_link_attach+0x520/0x520 [ 51.182531][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 51.187606][ T3609] ? rwlock_bug.part.0+0x90/0x90 [ 51.192562][ T3609] ? _raw_spin_lock_irq+0x41/0x50 [ 51.197668][ T3609] ? find_held_lock+0x2d/0x110 [ 51.202468][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.207789][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.213037][ T3609] ? lockdep_hardirqs_on+0x79/0x100 [ 51.218380][ T3609] __x64_sys_bpf+0x75/0xb0 [ 51.222856][ T3609] do_syscall_64+0x35/0xb0 [ 51.227370][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.233296][ T3609] RIP: 0033:0x7f0fbae41c69 [ 51.237786][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.257467][ T3609] RSP: 002b:00007ffc8aeb6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.266015][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fbae41c69 [ 51.274061][ T3609] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 51.282121][ T3609] RBP: 00007f0fbae05e10 R08: 0000000000000000 R09: 0000000000000000 [ 51.290278][ T3609] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f0fbae05ea0 [ 51.298542][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.306597][ T3609] [ 51.309641][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 51.316217][ T3609] CPU: 0 PID: 3609 Comm: syz-executor361 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 51.326300][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 51.336408][ T3609] Call Trace: [ 51.339698][ T3609] [ 51.342636][ T3609] dump_stack_lvl+0xcd/0x134 [ 51.347246][ T3609] panic+0x2c8/0x627 [ 51.351153][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.357154][ T3609] ? __warn.cold+0x248/0x2c4 [ 51.361780][ T3609] ? btf_type_id_size+0x2d5/0x9d0 [ 51.366861][ T3609] __warn.cold+0x259/0x2c4 [ 51.371298][ T3609] ? btf_type_id_size+0x2d5/0x9d0 [ 51.376353][ T3609] report_bug+0x1bc/0x210 [ 51.380702][ T3609] handle_bug+0x3c/0x70 [ 51.384867][ T3609] exc_invalid_op+0x14/0x40 [ 51.389379][ T3609] asm_exc_invalid_op+0x16/0x20 [ 51.394248][ T3609] RIP: 0010:btf_type_id_size+0x2d5/0x9d0 [ 51.399912][ T3609] Code: ef e8 7f 8e e4 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 6d 91 e4 ff 44 89 fe bf 0e 00 00 00 e8 20 8e e4 ff e8 5b 91 e4 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 46 91 e4 ff 44 [ 51.419538][ T3609] RSP: 0018:ffffc90003cefb40 EFLAGS: 00010293 [ 51.425617][ T3609] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 51.433601][ T3609] RDX: ffff8880259c0000 RSI: ffffffff81968415 RDI: 0000000000000005 [ 51.441586][ T3609] RBP: ffff88801270ca00 R08: 0000000000000005 R09: 000000000000000e [ 51.449565][ T3609] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000000 [ 51.457554][ T3609] R13: 0000000000000011 R14: ffff888026ee6424 R15: 0000000000000011 [ 51.465552][ T3609] ? btf_type_id_size+0x2d5/0x9d0 [ 51.470619][ T3609] btf_new_fd+0x1926/0x1e70 [ 51.475151][ T3609] ? btf_type_snprintf_show+0x3b0/0x3b0 [ 51.480714][ T3609] ? apparmor_capable+0x1d8/0x460 [ 51.485781][ T3609] ? security_capable+0x8f/0xc0 [ 51.490673][ T3609] __sys_bpf+0xb7d/0x4cf0 [ 51.495113][ T3609] ? lock_release+0x780/0x780 [ 51.499807][ T3609] ? bpf_perf_link_attach+0x520/0x520 [ 51.505209][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 51.510289][ T3609] ? rwlock_bug.part.0+0x90/0x90 [ 51.515251][ T3609] ? _raw_spin_lock_irq+0x41/0x50 [ 51.520337][ T3609] ? find_held_lock+0x2d/0x110 [ 51.525166][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.530392][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.535608][ T3609] ? lockdep_hardirqs_on+0x79/0x100 [ 51.540831][ T3609] __x64_sys_bpf+0x75/0xb0 [ 51.545270][ T3609] do_syscall_64+0x35/0xb0 [ 51.549717][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.555634][ T3609] RIP: 0033:0x7f0fbae41c69 [ 51.560054][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.579780][ T3609] RSP: 002b:00007ffc8aeb6228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.588206][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fbae41c69 [ 51.596190][ T3609] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 51.604190][ T3609] RBP: 00007f0fbae05e10 R08: 0000000000000000 R09: 0000000000000000 [ 51.612182][ T3609] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f0fbae05ea0 [ 51.620160][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.628183][ T3609] [ 51.631594][ T3609] Kernel Offset: disabled [ 51.635977][ T3609] Rebooting in 86400 seconds..