./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2772564995 <...> Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. execve("./syz-executor2772564995", ["./syz-executor2772564995"], 0x7ffc809ec880 /* 10 vars */) = 0 brk(NULL) = 0x555562681000 brk(0x555562681d00) = 0x555562681d00 arch_prctl(ARCH_SET_FS, 0x555562681380) = 0 set_tid_address(0x555562681650) = 5065 set_robust_list(0x555562681660, 24) = 0 rseq(0x555562681ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2772564995", 4096) = 28 getrandom("\x40\x14\x42\x2b\xf1\x32\x91\xc1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555562681d00 brk(0x5555626a2d00) = 0x5555626a2d00 brk(0x5555626a3000) = 0x5555626a3000 mprotect(0x7f9161d34000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 56.612505][ T5065] ------------[ cut here ]------------ [ 56.618004][ T5065] verifier backtracking bug [ 56.618063][ T5065] WARNING: CPU: 1 PID: 5065 at kernel/bpf/verifier.c:3714 __mark_chain_precision+0x7027/0x7520 [ 56.633085][ T5065] Modules linked in: [ 56.637018][ T5065] CPU: 1 PID: 5065 Comm: syz-executor277 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 56.647215][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.657344][ T5065] RIP: 0010:__mark_chain_precision+0x7027/0x7520 [ 56.664022][ T5065] Code: 8b e8 5d f0 b0 ff 90 0f 0b 90 90 e9 7d f2 ff ff e8 3e 17 ee ff c6 05 63 74 ca 0d 01 90 48 c7 c7 80 aa b0 8b e8 3a f0 b0 ff 90 <0f> 0b 90 90 e9 5a f2 ff ff e8 1b 17 ee ff c6 05 41 74 ca 0d 01 90 [ 56.683850][ T5065] RSP: 0018:ffffc90003d0eac0 EFLAGS: 00010246 [ 56.689957][ T5065] RAX: 2452fad754001700 RBX: ffff88807ced5600 RCX: ffff8880290ebc00 [ 56.698000][ T5065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.706210][ T5065] RBP: ffffc90003d0ed10 R08: ffffffff8157cc12 R09: 1ffff110172a51a2 [ 56.714463][ T5065] R10: dffffc0000000000 R11: ffffed10172a51a3 R12: 0000000080000000 [ 56.722507][ T5065] R13: 0000000000000010 R14: 0000000000000001 R15: ffff88807ced0000 [ 56.730591][ T5065] FS: 0000555562681380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.739597][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.746252][ T5065] CR2: 0000000022f46388 CR3: 0000000021ed6000 CR4: 00000000003506f0 [ 56.754277][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.762263][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.770409][ T5065] Call Trace: [ 56.773729][ T5065] [ 56.776651][ T5065] ? __warn+0x163/0x4b0 [ 56.780823][ T5065] ? __mark_chain_precision+0x7027/0x7520 [ 56.786617][ T5065] ? report_bug+0x2b3/0x500 [ 56.791162][ T5065] ? __mark_chain_precision+0x7027/0x7520 [ 56.797029][ T5065] ? handle_bug+0x3e/0x70 [ 56.801416][ T5065] ? exc_invalid_op+0x1a/0x50 [ 56.806254][ T5065] ? asm_exc_invalid_op+0x1a/0x20 [ 56.811387][ T5065] ? __warn_printk+0x292/0x360 [ 56.816207][ T5065] ? __mark_chain_precision+0x7027/0x7520 [ 56.821969][ T5065] ? poison_slab_object+0xa6/0xe0 [ 56.827095][ T5065] ? __pfx___mark_chain_precision+0x10/0x10 [ 56.833083][ T5065] ? __pfx_verbose+0x10/0x10 [ 56.837677][ T5065] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 56.843226][ T5065] check_return_code+0xbe0/0x11e0 [ 56.848373][ T5065] do_check+0xb962/0x10740 [ 56.852896][ T5065] ? __pfx_do_check+0x10/0x10 [ 56.857580][ T5065] ? mark_reg_not_init+0xd4/0x4b0 [ 56.862656][ T5065] ? __asan_memcpy+0x40/0x70 [ 56.867436][ T5065] ? mark_reg_not_init+0xd4/0x4b0 [ 56.872532][ T5065] do_check_common+0x14bd/0x1dd0 [ 56.877487][ T5065] bpf_check+0x126eb/0x18fe0 [ 56.882084][ T5065] ? validate_chain+0x11b/0x58e0 [ 56.887159][ T5065] ? mark_lock+0x9a/0x350 [ 56.891512][ T5065] ? validate_chain+0x11b/0x58e0 [ 56.896549][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 56.901606][ T5065] ? validate_chain+0x11b/0x58e0 [ 56.906655][ T5065] ? validate_chain+0x11b/0x58e0 [ 56.911624][ T5065] ? __pfx_bpf_check+0x10/0x10 [ 56.916483][ T5065] ? validate_chain+0x11b/0x58e0 [ 56.921490][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 56.926791][ T5065] ? mark_lock+0x9a/0x350 [ 56.931151][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 56.936418][ T5065] ? mark_lock+0x9a/0x350 [ 56.940777][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 56.946061][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 56.951203][ T5065] ? mark_lock+0x9a/0x350 [ 56.955632][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 56.960680][ T5065] ? mark_lock+0x9a/0x350 [ 56.965080][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 56.970141][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 56.975296][ T5065] ? ktime_get_with_offset+0x105/0x330 [ 56.980795][ T5065] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 56.986909][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.993312][ T5065] ? ktime_get_with_offset+0x105/0x330 [ 56.998873][ T5065] ? seqcount_lockdep_reader_access+0x157/0x220 [ 57.005172][ T5065] ? lockdep_hardirqs_on+0x99/0x150 [ 57.010474][ T5065] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 57.016800][ T5065] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 57.023483][ T5065] ? __check_object_size+0x8e/0xa00 [ 57.028691][ T5065] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 57.033868][ T5065] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 57.039104][ T5065] ? security_bpf_prog_load+0x87/0xb0 [ 57.044532][ T5065] bpf_prog_load+0x1667/0x20f0 [ 57.049339][ T5065] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.054529][ T5065] ? __pfx___might_resched+0x10/0x10 [ 57.059852][ T5065] ? __might_fault+0xc6/0x120 [ 57.064607][ T5065] ? bpf_lsm_bpf+0x9/0x10 [ 57.068960][ T5065] ? security_bpf+0x87/0xb0 [ 57.073530][ T5065] __sys_bpf+0x4ee/0x810 [ 57.077791][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 57.082658][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.089098][ T5065] ? exc_page_fault+0x585/0x890 [ 57.094045][ T5065] __x64_sys_bpf+0x7c/0x90 [ 57.098676][ T5065] do_syscall_64+0xfb/0x240 [ 57.103502][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 57.109604][ T5065] RIP: 0033:0x7f9161cc1469 [ 57.114094][ T5065] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.133771][ T5065] RSP: 002b:00007fff6756a0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.142273][ T5065] RAX: ffffffffffffffda RBX: 00007fff6756a2d8 RCX: 00007f9161cc1469 [ 57.150389][ T5065] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 57.158579][ T5065] RBP: 00007f9161d34610 R08: 0000000000000000 R09: 0000000000000000 [ 57.166621][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.174721][ T5065] R13: 00007fff6756a2c8 R14: 0000000000000001 R15: 0000000000000001 [ 57.183271][ T5065] [ 57.186298][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.193564][ T5065] CPU: 1 PID: 5065 Comm: syz-executor277 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 57.203632][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.213775][ T5065] Call Trace: [ 57.217145][ T5065] [ 57.220163][ T5065] dump_stack_lvl+0x1e7/0x2e0 [ 57.224845][ T5065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.230039][ T5065] ? __pfx__printk+0x10/0x10 [ 57.234725][ T5065] ? vscnprintf+0x5d/0x90 [ 57.239084][ T5065] panic+0x349/0x860 [ 57.243008][ T5065] ? __warn+0x172/0x4b0 [ 57.247175][ T5065] ? __pfx_panic+0x10/0x10 [ 57.251692][ T5065] __warn+0x31e/0x4b0 [ 57.255691][ T5065] ? __mark_chain_precision+0x7027/0x7520 [ 57.261411][ T5065] report_bug+0x2b3/0x500 [ 57.265738][ T5065] ? __mark_chain_precision+0x7027/0x7520 [ 57.271461][ T5065] handle_bug+0x3e/0x70 [ 57.275618][ T5065] exc_invalid_op+0x1a/0x50 [ 57.280117][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 57.284968][ T5065] RIP: 0010:__mark_chain_precision+0x7027/0x7520 [ 57.291293][ T5065] Code: 8b e8 5d f0 b0 ff 90 0f 0b 90 90 e9 7d f2 ff ff e8 3e 17 ee ff c6 05 63 74 ca 0d 01 90 48 c7 c7 80 aa b0 8b e8 3a f0 b0 ff 90 <0f> 0b 90 90 e9 5a f2 ff ff e8 1b 17 ee ff c6 05 41 74 ca 0d 01 90 [ 57.310908][ T5065] RSP: 0018:ffffc90003d0eac0 EFLAGS: 00010246 [ 57.317057][ T5065] RAX: 2452fad754001700 RBX: ffff88807ced5600 RCX: ffff8880290ebc00 [ 57.325109][ T5065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.333177][ T5065] RBP: ffffc90003d0ed10 R08: ffffffff8157cc12 R09: 1ffff110172a51a2 [ 57.344291][ T5065] R10: dffffc0000000000 R11: ffffed10172a51a3 R12: 0000000080000000 [ 57.356344][ T5065] R13: 0000000000000010 R14: 0000000000000001 R15: ffff88807ced0000 [ 57.364334][ T5065] ? __warn_printk+0x292/0x360 [ 57.369117][ T5065] ? poison_slab_object+0xa6/0xe0 [ 57.374158][ T5065] ? __pfx___mark_chain_precision+0x10/0x10 [ 57.380056][ T5065] ? __pfx_verbose+0x10/0x10 [ 57.384678][ T5065] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 57.390155][ T5065] check_return_code+0xbe0/0x11e0 [ 57.395184][ T5065] do_check+0xb962/0x10740 [ 57.399633][ T5065] ? __pfx_do_check+0x10/0x10 [ 57.404325][ T5065] ? mark_reg_not_init+0xd4/0x4b0 [ 57.409381][ T5065] ? __asan_memcpy+0x40/0x70 [ 57.414015][ T5065] ? mark_reg_not_init+0xd4/0x4b0 [ 57.419042][ T5065] do_check_common+0x14bd/0x1dd0 [ 57.423983][ T5065] bpf_check+0x126eb/0x18fe0 [ 57.428589][ T5065] ? validate_chain+0x11b/0x58e0 [ 57.433522][ T5065] ? mark_lock+0x9a/0x350 [ 57.437932][ T5065] ? validate_chain+0x11b/0x58e0 [ 57.442869][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 57.447911][ T5065] ? validate_chain+0x11b/0x58e0 [ 57.452849][ T5065] ? validate_chain+0x11b/0x58e0 [ 57.457883][ T5065] ? __pfx_bpf_check+0x10/0x10 [ 57.462648][ T5065] ? validate_chain+0x11b/0x58e0 [ 57.468196][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 57.473395][ T5065] ? mark_lock+0x9a/0x350 [ 57.477750][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 57.482962][ T5065] ? mark_lock+0x9a/0x350 [ 57.487301][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 57.492606][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 57.497632][ T5065] ? mark_lock+0x9a/0x350 [ 57.501961][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 57.507094][ T5065] ? mark_lock+0x9a/0x350 [ 57.511442][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 57.516488][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 57.521508][ T5065] ? ktime_get_with_offset+0x105/0x330 [ 57.527000][ T5065] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 57.533000][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.539333][ T5065] ? ktime_get_with_offset+0x105/0x330 [ 57.544802][ T5065] ? seqcount_lockdep_reader_access+0x157/0x220 [ 57.551396][ T5065] ? lockdep_hardirqs_on+0x99/0x150 [ 57.556689][ T5065] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 57.563032][ T5065] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 57.569706][ T5065] ? __check_object_size+0x8e/0xa00 [ 57.574992][ T5065] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 57.580130][ T5065] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 57.585347][ T5065] ? security_bpf_prog_load+0x87/0xb0 [ 57.590802][ T5065] bpf_prog_load+0x1667/0x20f0 [ 57.595574][ T5065] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.600683][ T5065] ? __pfx___might_resched+0x10/0x10 [ 57.605991][ T5065] ? __might_fault+0xc6/0x120 [ 57.610756][ T5065] ? bpf_lsm_bpf+0x9/0x10 [ 57.615081][ T5065] ? security_bpf+0x87/0xb0 [ 57.619578][ T5065] __sys_bpf+0x4ee/0x810 [ 57.623816][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 57.628592][ T5065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.634914][ T5065] ? exc_page_fault+0x585/0x890 [ 57.639766][ T5065] __x64_sys_bpf+0x7c/0x90 [ 57.644177][ T5065] do_syscall_64+0xfb/0x240 [ 57.648769][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 57.654661][ T5065] RIP: 0033:0x7f9161cc1469 [ 57.659072][ T5065] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.678848][ T5065] RSP: 002b:00007fff6756a0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.687346][ T5065] RAX: ffffffffffffffda RBX: 00007fff6756a2d8 RCX: 00007f9161cc1469 [ 57.695310][ T5065] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 57.703291][ T5065] RBP: 00007f9161d34610 R08: 0000000000000000 R09: 0000000000000000 [ 57.711285][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.719449][ T5065] R13: 00007fff6756a2c8 R14: 0000000000000001 R15: 0000000000000001 [ 57.727630][ T5065] [ 57.731040][ T5065] Kernel Offset: disabled [ 57.735503][ T5065] Rebooting in 86400 seconds..