./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3162158916
<...>
Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts.
execve("./syz-executor3162158916", ["./syz-executor3162158916"], 0x7ffe16459d00 /* 10 vars */) = 0
brk(NULL) = 0x555557545000
brk(0x555557545d00) = 0x555557545d00
arch_prctl(ARCH_SET_FS, 0x555557545380) = 0
set_tid_address(0x555557545650) = 5058
set_robust_list(0x555557545660, 24) = 0
rseq(0x555557545ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3162158916", 4096) = 28
getrandom("\xfa\x35\xc7\xaf\x75\xa5\x50\x01", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555557545d00
brk(0x555557566d00) = 0x555557566d00
brk(0x555557567000) = 0x555557567000
mprotect(0x7f04b3cb4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
[ 72.659791][ T5058] ------------[ cut here ]------------
[ 72.665257][ T5058] verifier backtracking bug (stack slot out of bounds)
[ 72.665327][ T5058] WARNING: CPU: 0 PID: 5058 at kernel/bpf/verifier.c:4266 __mark_chain_precision+0x2a84/0x4d60
[ 72.682567][ T5058] Modules linked in:
[ 72.686464][ T5058] CPU: 0 PID: 5058 Comm: syz-executor316 Not tainted 6.7.0-rc3-syzkaller-00722-g3aee2bf9c49b #0
[ 72.696910][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 72.706994][ T5058] RIP: 0010:__mark_chain_precision+0x2a84/0x4d60
[ 72.713475][ T5058] Code: ff 89 de e8 8e e3 ec ff 84 db 0f 85 2c e1 ff ff e8 51 e8 ec ff c6 05 7f 74 68 0d 01 90 48 c7 c7 60 47 d4 8a e8 5d 06 b3 ff 90 <0f> 0b 90 90 e9 09 e1 ff ff e8 2e e8 ec ff 48 8d 7b 04 48 b8 00 00
[ 72.733225][ T5058] RSP: 0018:ffffc9000325f4d0 EFLAGS: 00010282
[ 72.739357][ T5058] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814db209
[ 72.747369][ T5058] RDX: ffff88807f8c1dc0 RSI: ffffffff814db216 RDI: 0000000000000001
[ 72.755359][ T5058] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 72.763616][ T5058] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807b151000
[ 72.771767][ T5058] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[ 72.779767][ T5058] FS: 0000555557545380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 72.788759][ T5058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.795341][ T5058] CR2: 0000000000fa1398 CR3: 00000000177b0000 CR4: 00000000003506f0
[ 72.803353][ T5058] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 72.811365][ T5058] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 72.819377][ T5058] Call Trace:
[ 72.822658][ T5058]
[ 72.825577][ T5058] ? show_regs+0x8f/0xa0
[ 72.829880][ T5058] ? __warn+0xe6/0x390
[ 72.833970][ T5058] ? __wake_up_klogd.part.0+0x99/0xf0
[ 72.839388][ T5058] ? __mark_chain_precision+0x2a84/0x4d60
[ 72.845140][ T5058] ? report_bug+0x3bc/0x580
[ 72.849701][ T5058] ? handle_bug+0x3d/0x70
[ 72.854146][ T5058] ? exc_invalid_op+0x17/0x40
[ 72.858953][ T5058] ? asm_exc_invalid_op+0x1a/0x20
[ 72.864005][ T5058] ? __warn_printk+0x199/0x350
[ 72.868855][ T5058] ? __warn_printk+0x1a6/0x350
[ 72.873648][ T5058] ? __mark_chain_precision+0x2a84/0x4d60
[ 72.879461][ T5058] ? check_cfg+0x840/0x840
[ 72.883903][ T5058] ? find_good_pkt_pointers+0x690/0x690
[ 72.889498][ T5058] ? add_subprog_and_kfunc+0x1b10/0x1b10
[ 72.895181][ T5058] ? do_check_common+0x9207/0xe8e0
[ 72.900345][ T5058] do_check_common+0x9251/0xe8e0
[ 72.905438][ T5058] ? check_helper_call.isra.0+0xab50/0xab50
[ 72.911383][ T5058] ? kvfree+0x47/0x50
[ 72.915386][ T5058] ? check_cfg+0x405/0x840
[ 72.919863][ T5058] bpf_check+0x5129/0xa420
[ 72.924314][ T5058] ? bpf_get_btf_vmlinux+0x20/0x20
[ 72.929481][ T5058] ? find_held_lock+0x2d/0x110
[ 72.934269][ T5058] ? bpf_prog_load+0x1473/0x2200
[ 72.939243][ T5058] ? reacquire_held_locks+0x4c0/0x4c0
[ 72.944645][ T5058] ? preempt_count_sub+0x160/0x160
[ 72.949835][ T5058] ? read_tsc+0x9/0x20
[ 72.953940][ T5058] ? ktime_get_with_offset+0x306/0x520
[ 72.959445][ T5058] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 72.964487][ T5058] bpf_prog_load+0x1534/0x2200
[ 72.969298][ T5058] ? map_create+0x1b90/0x1b90
[ 72.974977][ T5058] ? find_held_lock+0x2d/0x110
[ 72.979810][ T5058] ? reacquire_held_locks+0x4c0/0x4c0
[ 72.985223][ T5058] ? bpf_lsm_bpf+0x9/0x10
[ 72.989614][ T5058] __sys_bpf+0xbf7/0x49d0
[ 72.993978][ T5058] ? bpf_perf_link_attach+0x540/0x540
[ 72.999422][ T5058] ? cgroup_update_frozen+0x144/0x6b0
[ 73.004844][ T5058] ? recalc_sigpending_tsk+0x187/0x1d0
[ 73.010422][ T5058] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 73.015636][ T5058] ? find_held_lock+0x2d/0x110
[ 73.020475][ T5058] ? _raw_spin_unlock_irq+0x23/0x50
[ 73.025692][ T5058] ? lockdep_hardirqs_on+0x7d/0x110
[ 73.030942][ T5058] ? _raw_spin_unlock_irq+0x2e/0x50
[ 73.036157][ T5058] ? ptrace_notify+0xf4/0x130
[ 73.040881][ T5058] __x64_sys_bpf+0x78/0xc0
[ 73.045313][ T5058] ? syscall_enter_from_user_mode+0x107/0x120
[ 73.051432][ T5058] do_syscall_64+0x40/0x110
[ 73.055980][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 73.061916][ T5058] RIP: 0033:0x7f04b3c403a9
[ 73.066348][ T5058] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.086253][ T5058] RSP: 002b:00007ffde9effc38 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 73.094716][ T5058] RAX: ffffffffffffffda RBX: 00007ffde9effe18 RCX: 00007f04b3c403a9
[ 73.102728][ T5058] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[ 73.110733][ T5058] RBP: 00007f04b3cb4610 R08: 0000000000000000 R09: 0000000000000000
[ 73.118838][ T5058] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001
[ 73.126829][ T5058] R13: 00007ffde9effe08 R14: 0000000000000001 R15: 0000000000000001
[ 73.134862][ T5058]
[ 73.137935][ T5058] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 73.145200][ T5058] CPU: 0 PID: 5058 Comm: syz-executor316 Not tainted 6.7.0-rc3-syzkaller-00722-g3aee2bf9c49b #0
[ 73.155604][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 73.165654][ T5058] Call Trace:
[ 73.168922][ T5058]
[ 73.171857][ T5058] dump_stack_lvl+0xd9/0x1b0
[ 73.176442][ T5058] panic+0x6dc/0x790
[ 73.180334][ T5058] ? panic_smp_self_stop+0xa0/0xa0
[ 73.185522][ T5058] ? show_trace_log_lvl+0x363/0x4f0
[ 73.190717][ T5058] ? check_panic_on_warn+0x1f/0xb0
[ 73.195835][ T5058] ? __mark_chain_precision+0x2a84/0x4d60
[ 73.201552][ T5058] check_panic_on_warn+0xab/0xb0
[ 73.206484][ T5058] __warn+0xf2/0x390
[ 73.210369][ T5058] ? __wake_up_klogd.part.0+0x99/0xf0
[ 73.215742][ T5058] ? __mark_chain_precision+0x2a84/0x4d60
[ 73.221459][ T5058] report_bug+0x3bc/0x580
[ 73.225782][ T5058] handle_bug+0x3d/0x70
[ 73.229959][ T5058] exc_invalid_op+0x17/0x40
[ 73.234540][ T5058] asm_exc_invalid_op+0x1a/0x20
[ 73.239384][ T5058] RIP: 0010:__mark_chain_precision+0x2a84/0x4d60
[ 73.245727][ T5058] Code: ff 89 de e8 8e e3 ec ff 84 db 0f 85 2c e1 ff ff e8 51 e8 ec ff c6 05 7f 74 68 0d 01 90 48 c7 c7 60 47 d4 8a e8 5d 06 b3 ff 90 <0f> 0b 90 90 e9 09 e1 ff ff e8 2e e8 ec ff 48 8d 7b 04 48 b8 00 00
[ 73.265343][ T5058] RSP: 0018:ffffc9000325f4d0 EFLAGS: 00010282
[ 73.271416][ T5058] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814db209
[ 73.279396][ T5058] RDX: ffff88807f8c1dc0 RSI: ffffffff814db216 RDI: 0000000000000001
[ 73.287373][ T5058] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 73.295348][ T5058] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807b151000
[ 73.303328][ T5058] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[ 73.311307][ T5058] ? __warn_printk+0x199/0x350
[ 73.316164][ T5058] ? __warn_printk+0x1a6/0x350
[ 73.321043][ T5058] ? check_cfg+0x840/0x840
[ 73.325470][ T5058] ? find_good_pkt_pointers+0x690/0x690
[ 73.331028][ T5058] ? add_subprog_and_kfunc+0x1b10/0x1b10
[ 73.336691][ T5058] ? do_check_common+0x9207/0xe8e0
[ 73.341815][ T5058] do_check_common+0x9251/0xe8e0
[ 73.346790][ T5058] ? check_helper_call.isra.0+0xab50/0xab50
[ 73.352695][ T5058] ? kvfree+0x47/0x50
[ 73.356693][ T5058] ? check_cfg+0x405/0x840
[ 73.361122][ T5058] bpf_check+0x5129/0xa420
[ 73.365570][ T5058] ? bpf_get_btf_vmlinux+0x20/0x20
[ 73.370701][ T5058] ? find_held_lock+0x2d/0x110
[ 73.375482][ T5058] ? bpf_prog_load+0x1473/0x2200
[ 73.380423][ T5058] ? reacquire_held_locks+0x4c0/0x4c0
[ 73.385807][ T5058] ? preempt_count_sub+0x160/0x160
[ 73.390928][ T5058] ? read_tsc+0x9/0x20
[ 73.394998][ T5058] ? ktime_get_with_offset+0x306/0x520
[ 73.400472][ T5058] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 73.405500][ T5058] bpf_prog_load+0x1534/0x2200
[ 73.410275][ T5058] ? map_create+0x1b90/0x1b90
[ 73.414950][ T5058] ? find_held_lock+0x2d/0x110
[ 73.419726][ T5058] ? reacquire_held_locks+0x4c0/0x4c0
[ 73.425128][ T5058] ? bpf_lsm_bpf+0x9/0x10
[ 73.429468][ T5058] __sys_bpf+0xbf7/0x49d0
[ 73.433804][ T5058] ? bpf_perf_link_attach+0x540/0x540
[ 73.439177][ T5058] ? cgroup_update_frozen+0x144/0x6b0
[ 73.444569][ T5058] ? recalc_sigpending_tsk+0x187/0x1d0
[ 73.450028][ T5058] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 73.455242][ T5058] ? find_held_lock+0x2d/0x110
[ 73.460046][ T5058] ? _raw_spin_unlock_irq+0x23/0x50
[ 73.465270][ T5058] ? lockdep_hardirqs_on+0x7d/0x110
[ 73.470533][ T5058] ? _raw_spin_unlock_irq+0x2e/0x50
[ 73.475734][ T5058] ? ptrace_notify+0xf4/0x130
[ 73.480418][ T5058] __x64_sys_bpf+0x78/0xc0
[ 73.484847][ T5058] ? syscall_enter_from_user_mode+0x107/0x120
[ 73.490926][ T5058] do_syscall_64+0x40/0x110
[ 73.495458][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 73.501377][ T5058] RIP: 0033:0x7f04b3c403a9
[ 73.505789][ T5058] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.525399][ T5058] RSP: 002b:00007ffde9effc38 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 73.533815][ T5058] RAX: ffffffffffffffda RBX: 00007ffde9effe18 RCX: 00007f04b3c403a9
[ 73.541790][ T5058] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[ 73.549849][ T5058] RBP: 00007f04b3cb4610 R08: 0000000000000000 R09: 0000000000000000
[ 73.557819][ T5058] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001
[ 73.565790][ T5058] R13: 00007ffde9effe08 R14: 0000000000000001 R15: 0000000000000001
[ 73.573773][ T5058]
[ 73.576976][ T5058] Kernel Offset: disabled
[ 73.581354][ T5058] Rebooting in 86400 seconds..