./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1474211705 <...> Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. execve("./syz-executor1474211705", ["./syz-executor1474211705"], 0x7ffe049d5d80 /* 10 vars */) = 0 brk(NULL) = 0x555556caf000 brk(0x555556cafd00) = 0x555556cafd00 arch_prctl(ARCH_SET_FS, 0x555556caf380) = 0 set_tid_address(0x555556caf650) = 5060 set_robust_list(0x555556caf660, 24) = 0 rseq(0x555556cafca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1474211705", 4096) = 28 getrandom("\x3e\x54\x1d\x78\x71\x4f\x69\x02", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556cafd00 brk(0x555556cd0d00) = 0x555556cd0d00 brk(0x555556cd1000) = 0x555556cd1000 mprotect(0x7efe26e0a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 72.023336][ T5060] ------------[ cut here ]------------ [ 72.031086][ T5060] verifier backtracking bug [ 72.031155][ T5060] WARNING: CPU: 1 PID: 5060 at kernel/bpf/verifier.c:3681 __mark_chain_precision+0x3c4b/0x4d70 [ 72.046365][ T5060] Modules linked in: [ 72.050274][ T5060] CPU: 1 PID: 5060 Comm: syz-executor147 Not tainted 6.7.0-rc5-syzkaller-01540-g5abde6246522 #0 [ 72.060778][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.070950][ T5060] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70 [ 72.077345][ T5060] Code: ff 89 de e8 67 df ec ff 84 db 0f 85 60 cf ff ff e8 2a e4 ec ff c6 05 b4 89 68 0d 01 90 48 c7 c7 40 22 d4 8a e8 e6 01 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 a0 da 05 8d e8 3d 36 [ 72.097041][ T5060] RSP: 0018:ffffc900040d7458 EFLAGS: 00010282 [ 72.103387][ T5060] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbd09 [ 72.111806][ T5060] RDX: ffff888018bd0000 RSI: ffffffff814dbd16 RDI: 0000000000000001 [ 72.119814][ T5060] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000 [ 72.127875][ T5060] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 72.135921][ T5060] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 72.143936][ T5060] FS: 0000555556caf380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 72.152917][ T5060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.159538][ T5060] CR2: 0000000000918398 CR3: 0000000076b67000 CR4: 00000000003506f0 [ 72.167616][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.175671][ T5060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.183704][ T5060] Call Trace: [ 72.186993][ T5060] [ 72.189923][ T5060] ? show_regs+0x8f/0xa0 [ 72.194222][ T5060] ? __warn+0xe6/0x390 [ 72.198314][ T5060] ? __mark_chain_precision+0x3c4b/0x4d70 [ 72.204092][ T5060] ? report_bug+0x3bc/0x580 [ 72.208633][ T5060] ? handle_bug+0x3d/0x70 [ 72.213093][ T5060] ? exc_invalid_op+0x17/0x40 [ 72.217820][ T5060] ? asm_exc_invalid_op+0x1a/0x20 [ 72.222905][ T5060] ? __warn_printk+0x199/0x350 [ 72.227693][ T5060] ? __warn_printk+0x1a6/0x350 [ 72.232541][ T5060] ? __mark_chain_precision+0x3c4b/0x4d70 [ 72.238311][ T5060] ? __mark_chain_precision+0x3c4a/0x4d70 [ 72.244117][ T5060] ? check_cfg+0x840/0x840 [ 72.248542][ T5060] ? slab_free_freelist_hook+0x114/0x1e0 [ 72.254261][ T5060] ? find_good_pkt_pointers+0x690/0x690 [ 72.259839][ T5060] ? add_subprog_and_kfunc+0x1ba0/0x1ba0 [ 72.265565][ T5060] ? __check_reg_arg+0x323/0x410 [ 72.270598][ T5060] check_return_code+0x8fa/0x11a0 [ 72.275777][ T5060] do_check_common+0x8a17/0xc590 [ 72.280885][ T5060] ? check_helper_call.isra.0+0xab50/0xab50 [ 72.286893][ T5060] ? kvfree+0x47/0x50 [ 72.291071][ T5060] ? check_cfg+0x409/0x840 [ 72.295570][ T5060] bpf_check+0x4fa4/0xa330 [ 72.300028][ T5060] ? bpf_get_btf_vmlinux+0x20/0x20 [ 72.305231][ T5060] ? find_held_lock+0x2d/0x110 [ 72.310151][ T5060] ? bpf_prog_load+0x1473/0x2200 [ 72.315139][ T5060] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.320539][ T5060] ? preempt_count_sub+0x160/0x160 [ 72.325705][ T5060] ? read_tsc+0x9/0x20 [ 72.329803][ T5060] ? ktime_get_with_offset+0x306/0x520 [ 72.335979][ T5060] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 72.341068][ T5060] bpf_prog_load+0x1534/0x2200 [ 72.345942][ T5060] ? map_create+0x1b90/0x1b90 [ 72.350676][ T5060] ? find_held_lock+0x2d/0x110 [ 72.355540][ T5060] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.360977][ T5060] ? bpf_lsm_bpf+0x9/0x10 [ 72.365373][ T5060] __sys_bpf+0xbf7/0x4a00 [ 72.369805][ T5060] ? bpf_perf_link_attach+0x540/0x540 [ 72.375225][ T5060] ? cgroup_update_frozen+0x144/0x6b0 [ 72.380653][ T5060] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.386181][ T5060] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 72.391414][ T5060] ? find_held_lock+0x2d/0x110 [ 72.396267][ T5060] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.401516][ T5060] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.406923][ T5060] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.412215][ T5060] ? ptrace_notify+0xf4/0x130 [ 72.416900][ T5060] __x64_sys_bpf+0x78/0xc0 [ 72.421307][ T5060] ? syscall_enter_from_user_mode+0x107/0x120 [ 72.427435][ T5060] do_syscall_64+0x40/0x110 [ 72.432009][ T5060] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.438095][ T5060] RIP: 0033:0x7efe26d97469 [ 72.442575][ T5060] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.462319][ T5060] RSP: 002b:00007ffd22e83018 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.470726][ T5060] RAX: ffffffffffffffda RBX: 00007ffd22e831f8 RCX: 00007efe26d97469 [ 72.478868][ T5060] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 72.487004][ T5060] RBP: 00007efe26e0a610 R08: 0000000000000000 R09: 0000000000000000 [ 72.495264][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.503299][ T5060] R13: 00007ffd22e831e8 R14: 0000000000000001 R15: 0000000000000001 [ 72.511312][ T5060] [ 72.514429][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.521727][ T5060] CPU: 1 PID: 5060 Comm: syz-executor147 Not tainted 6.7.0-rc5-syzkaller-01540-g5abde6246522 #0 [ 72.532355][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.542490][ T5060] Call Trace: [ 72.545766][ T5060] [ 72.548685][ T5060] dump_stack_lvl+0xd9/0x1b0 [ 72.553274][ T5060] panic+0x6dc/0x790 [ 72.557162][ T5060] ? panic_smp_self_stop+0xa0/0xa0 [ 72.562279][ T5060] ? show_trace_log_lvl+0x363/0x4f0 [ 72.567651][ T5060] ? check_panic_on_warn+0x1f/0xb0 [ 72.572760][ T5060] ? __mark_chain_precision+0x3c4b/0x4d70 [ 72.578583][ T5060] check_panic_on_warn+0xab/0xb0 [ 72.583611][ T5060] __warn+0xf2/0x390 [ 72.587498][ T5060] ? __mark_chain_precision+0x3c4b/0x4d70 [ 72.593251][ T5060] report_bug+0x3bc/0x580 [ 72.597738][ T5060] handle_bug+0x3d/0x70 [ 72.602090][ T5060] exc_invalid_op+0x17/0x40 [ 72.606713][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 72.611795][ T5060] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70 [ 72.618175][ T5060] Code: ff 89 de e8 67 df ec ff 84 db 0f 85 60 cf ff ff e8 2a e4 ec ff c6 05 b4 89 68 0d 01 90 48 c7 c7 40 22 d4 8a e8 e6 01 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 a0 da 05 8d e8 3d 36 [ 72.637905][ T5060] RSP: 0018:ffffc900040d7458 EFLAGS: 00010282 [ 72.643978][ T5060] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbd09 [ 72.651952][ T5060] RDX: ffff888018bd0000 RSI: ffffffff814dbd16 RDI: 0000000000000001 [ 72.659944][ T5060] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000 [ 72.667916][ T5060] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 72.675887][ T5060] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 72.683862][ T5060] ? __warn_printk+0x199/0x350 [ 72.688636][ T5060] ? __warn_printk+0x1a6/0x350 [ 72.693514][ T5060] ? __mark_chain_precision+0x3c4a/0x4d70 [ 72.699283][ T5060] ? check_cfg+0x840/0x840 [ 72.703716][ T5060] ? slab_free_freelist_hook+0x114/0x1e0 [ 72.709358][ T5060] ? find_good_pkt_pointers+0x690/0x690 [ 72.714910][ T5060] ? add_subprog_and_kfunc+0x1ba0/0x1ba0 [ 72.720558][ T5060] ? __check_reg_arg+0x323/0x410 [ 72.725608][ T5060] check_return_code+0x8fa/0x11a0 [ 72.731083][ T5060] do_check_common+0x8a17/0xc590 [ 72.736064][ T5060] ? check_helper_call.isra.0+0xab50/0xab50 [ 72.741976][ T5060] ? kvfree+0x47/0x50 [ 72.746075][ T5060] ? check_cfg+0x409/0x840 [ 72.750529][ T5060] bpf_check+0x4fa4/0xa330 [ 72.755006][ T5060] ? bpf_get_btf_vmlinux+0x20/0x20 [ 72.760153][ T5060] ? find_held_lock+0x2d/0x110 [ 72.764926][ T5060] ? bpf_prog_load+0x1473/0x2200 [ 72.769864][ T5060] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.775334][ T5060] ? preempt_count_sub+0x160/0x160 [ 72.780491][ T5060] ? read_tsc+0x9/0x20 [ 72.784568][ T5060] ? ktime_get_with_offset+0x306/0x520 [ 72.790057][ T5060] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 72.795122][ T5060] bpf_prog_load+0x1534/0x2200 [ 72.799998][ T5060] ? map_create+0x1b90/0x1b90 [ 72.804679][ T5060] ? find_held_lock+0x2d/0x110 [ 72.809588][ T5060] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.815331][ T5060] ? bpf_lsm_bpf+0x9/0x10 [ 72.819680][ T5060] __sys_bpf+0xbf7/0x4a00 [ 72.824537][ T5060] ? bpf_perf_link_attach+0x540/0x540 [ 72.830170][ T5060] ? cgroup_update_frozen+0x144/0x6b0 [ 72.835645][ T5060] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.841128][ T5060] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 72.846428][ T5060] ? find_held_lock+0x2d/0x110 [ 72.851392][ T5060] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.858501][ T5060] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.863716][ T5060] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.869036][ T5060] ? ptrace_notify+0xf4/0x130 [ 72.873732][ T5060] __x64_sys_bpf+0x78/0xc0 [ 72.878328][ T5060] ? syscall_enter_from_user_mode+0x107/0x120 [ 72.884401][ T5060] do_syscall_64+0x40/0x110 [ 72.888916][ T5060] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.894815][ T5060] RIP: 0033:0x7efe26d97469 [ 72.899331][ T5060] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.919043][ T5060] RSP: 002b:00007ffd22e83018 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.927564][ T5060] RAX: ffffffffffffffda RBX: 00007ffd22e831f8 RCX: 00007efe26d97469 [ 72.935554][ T5060] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 72.943540][ T5060] RBP: 00007efe26e0a610 R08: 0000000000000000 R09: 0000000000000000 [ 72.951684][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.959653][ T5060] R13: 00007ffd22e831e8 R14: 0000000000000001 R15: 0000000000000001 [ 72.967666][ T5060] [ 72.971002][ T5060] Kernel Offset: disabled [ 72.975389][ T5060] Rebooting in 86400 seconds..