./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3620063442 <...> Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. execve("./syz-executor3620063442", ["./syz-executor3620063442"], 0x7ffccfa52cd0 /* 10 vars */) = 0 brk(NULL) = 0x555555d99000 brk(0x555555d99d00) = 0x555555d99d00 arch_prctl(ARCH_SET_FS, 0x555555d99380) = 0 set_tid_address(0x555555d99650) = 5055 set_robust_list(0x555555d99660, 24) = 0 rseq(0x555555d99ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3620063442", 4096) = 28 getrandom("\x98\x29\xe2\x2e\x43\x69\x77\x5e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555d99d00 brk(0x555555dbad00) = 0x555555dbad00 brk(0x555555dbb000) = 0x555555dbb000 mprotect(0x7f1402e00000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 66.591917][ T5055] ------------[ cut here ]------------ [ 66.597426][ T5055] verifier backtracking bug [ 66.597504][ T5055] WARNING: CPU: 1 PID: 5055 at kernel/bpf/verifier.c:3681 __mark_chain_precision+0x3c4b/0x4d70 [ 66.612511][ T5055] Modules linked in: [ 66.616387][ T5055] CPU: 1 PID: 5055 Comm: syz-executor362 Not tainted 6.7.0-rc6-next-20231222-syzkaller #0 [ 66.626322][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 66.636440][ T5055] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70 [ 66.643142][ T5055] Code: ff 89 de e8 f7 e6 ec ff 84 db 0f 85 60 cf ff ff e8 ba eb ec ff c6 05 dd 4d 89 0d 01 90 48 c7 c7 40 21 d4 8a e8 26 eb b2 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 c0 f3 25 8d e8 2d 64 [ 66.663092][ T5055] RSP: 0018:ffffc90003acf458 EFLAGS: 00010282 [ 66.669169][ T5055] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e14d9 [ 66.677270][ T5055] RDX: ffff88802b709dc0 RSI: ffffffff814e14e6 RDI: 0000000000000001 [ 66.685446][ T5055] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000 [ 66.693437][ T5055] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 66.701445][ T5055] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 66.709407][ T5055] FS: 0000555555d99380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.718359][ T5055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.724969][ T5055] CR2: 0000000000682388 CR3: 000000006037c000 CR4: 00000000003506f0 [ 66.732986][ T5055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.740985][ T5055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.748944][ T5055] Call Trace: [ 66.752243][ T5055] [ 66.755176][ T5055] ? show_regs+0x8e/0xa0 [ 66.759417][ T5055] ? __warn+0xe5/0x390 [ 66.763517][ T5055] ? __mark_chain_precision+0x3c4b/0x4d70 [ 66.769254][ T5055] ? report_bug+0x3bc/0x580 [ 66.773806][ T5055] ? handle_bug+0x3d/0x70 [ 66.778173][ T5055] ? exc_invalid_op+0x17/0x40 [ 66.782893][ T5055] ? asm_exc_invalid_op+0x1a/0x20 [ 66.787936][ T5055] ? __warn_printk+0x199/0x350 [ 66.792738][ T5055] ? __warn_printk+0x1a6/0x350 [ 66.797534][ T5055] ? __mark_chain_precision+0x3c4b/0x4d70 [ 66.803289][ T5055] ? __mark_chain_precision+0x3c4a/0x4d70 [ 66.809030][ T5055] ? check_cfg+0x840/0x840 [ 66.813478][ T5055] ? trace_irq_enable.constprop.0+0xe0/0x110 [ 66.819508][ T5055] ? find_good_pkt_pointers+0x690/0x690 [ 66.825092][ T5055] ? add_subprog_and_kfunc+0x1ba0/0x1ba0 [ 66.830762][ T5055] ? __check_reg_arg+0x323/0x410 [ 66.835695][ T5055] check_return_code+0x8fa/0x11a0 [ 66.840751][ T5055] do_check_common+0x8a15/0xc590 [ 66.845711][ T5055] ? kvfree+0x47/0x50 [ 66.849745][ T5055] ? check_helper_call.isra.0+0xab50/0xab50 [ 66.855748][ T5055] ? kvfree+0x47/0x50 [ 66.859759][ T5055] ? check_cfg+0x409/0x840 [ 66.864204][ T5055] bpf_check+0x4fa4/0xa330 [ 66.868616][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 66.874015][ T5055] ? bpf_get_btf_vmlinux+0x20/0x20 [ 66.879143][ T5055] ? rcu_is_watching+0x12/0xb0 [ 66.883941][ T5055] ? rcu_is_watching+0x12/0xb0 [ 66.888716][ T5055] ? bpf_prog_load+0x1472/0x2200 [ 66.893675][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 66.899057][ T5055] ? spin_bug+0x1c0/0x1c0 [ 66.903424][ T5055] ? pcpu_alloc+0x1f0/0x1440 [ 66.908040][ T5055] ? preempt_count_sub+0x160/0x160 [ 66.913195][ T5055] ? read_tsc+0x9/0x20 [ 66.917277][ T5055] ? ktime_get_with_offset+0x306/0x520 [ 66.922784][ T5055] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 66.927838][ T5055] bpf_prog_load+0x1533/0x2200 [ 66.932664][ T5055] ? map_create+0x1b90/0x1b90 [ 66.937347][ T5055] ? rcu_is_watching+0x12/0xb0 [ 66.942160][ T5055] ? lock_release+0x4c8/0x6a0 [ 66.946843][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 66.952241][ T5055] ? bpf_lsm_bpf+0x9/0x10 [ 66.956589][ T5055] __sys_bpf+0xbf7/0x4a00 [ 66.960959][ T5055] ? bpf_perf_link_attach+0x540/0x540 [ 66.966337][ T5055] ? cgroup_update_frozen+0x144/0x6b0 [ 66.971855][ T5055] ? ptrace_stop.part.0+0x722/0x930 [ 66.977181][ T5055] ? rcu_is_watching+0x12/0xb0 [ 66.981996][ T5055] ? rcu_is_watching+0x12/0xb0 [ 66.986774][ T5055] ? trace_irq_enable.constprop.0+0xe0/0x110 [ 66.992809][ T5055] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.998023][ T5055] ? ptrace_notify+0xf1/0x130 [ 67.002847][ T5055] __x64_sys_bpf+0x78/0xc0 [ 67.007275][ T5055] ? syscall_enter_from_user_mode+0xf5/0x110 [ 67.013396][ T5055] do_syscall_64+0x40/0x110 [ 67.017950][ T5055] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 67.023883][ T5055] RIP: 0033:0x7f1402d8d469 [ 67.028306][ T5055] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.048115][ T5055] RSP: 002b:00007ffcc0744bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.056584][ T5055] RAX: ffffffffffffffda RBX: 00007ffcc0744d98 RCX: 00007f1402d8d469 [ 67.064601][ T5055] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 67.072634][ T5055] RBP: 00007f1402e00610 R08: 0000000000000000 R09: 0000000000000000 [ 67.080673][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.088647][ T5055] R13: 00007ffcc0744d88 R14: 0000000000000001 R15: 0000000000000001 [ 67.096737][ T5055] [ 67.099776][ T5055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.107227][ T5055] CPU: 1 PID: 5055 Comm: syz-executor362 Not tainted 6.7.0-rc6-next-20231222-syzkaller #0 [ 67.117100][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 67.127152][ T5055] Call Trace: [ 67.130421][ T5055] [ 67.133447][ T5055] dump_stack_lvl+0xd9/0x1b0 [ 67.138044][ T5055] panic+0x6dc/0x790 [ 67.141932][ T5055] ? panic_smp_self_stop+0xa0/0xa0 [ 67.147032][ T5055] ? show_trace_log_lvl+0x363/0x4f0 [ 67.152238][ T5055] ? check_panic_on_warn+0x1f/0xb0 [ 67.157352][ T5055] ? __mark_chain_precision+0x3c4b/0x4d70 [ 67.163084][ T5055] check_panic_on_warn+0xab/0xb0 [ 67.168013][ T5055] __warn+0xf1/0x390 [ 67.171900][ T5055] ? __mark_chain_precision+0x3c4b/0x4d70 [ 67.177618][ T5055] report_bug+0x3bc/0x580 [ 67.181941][ T5055] handle_bug+0x3d/0x70 [ 67.186088][ T5055] exc_invalid_op+0x17/0x40 [ 67.190588][ T5055] asm_exc_invalid_op+0x1a/0x20 [ 67.195474][ T5055] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70 [ 67.201808][ T5055] Code: ff 89 de e8 f7 e6 ec ff 84 db 0f 85 60 cf ff ff e8 ba eb ec ff c6 05 dd 4d 89 0d 01 90 48 c7 c7 40 21 d4 8a e8 26 eb b2 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 c0 f3 25 8d e8 2d 64 [ 67.221593][ T5055] RSP: 0018:ffffc90003acf458 EFLAGS: 00010282 [ 67.227657][ T5055] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e14d9 [ 67.235708][ T5055] RDX: ffff88802b709dc0 RSI: ffffffff814e14e6 RDI: 0000000000000001 [ 67.243683][ T5055] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000 [ 67.251658][ T5055] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 67.259630][ T5055] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 67.267601][ T5055] ? __warn_printk+0x199/0x350 [ 67.272371][ T5055] ? __warn_printk+0x1a6/0x350 [ 67.277139][ T5055] ? __mark_chain_precision+0x3c4a/0x4d70 [ 67.282878][ T5055] ? check_cfg+0x840/0x840 [ 67.287299][ T5055] ? trace_irq_enable.constprop.0+0xe0/0x110 [ 67.293291][ T5055] ? find_good_pkt_pointers+0x690/0x690 [ 67.298840][ T5055] ? add_subprog_and_kfunc+0x1ba0/0x1ba0 [ 67.304565][ T5055] ? __check_reg_arg+0x323/0x410 [ 67.309550][ T5055] check_return_code+0x8fa/0x11a0 [ 67.315462][ T5055] do_check_common+0x8a15/0xc590 [ 67.321032][ T5055] ? kvfree+0x47/0x50 [ 67.325016][ T5055] ? check_helper_call.isra.0+0xab50/0xab50 [ 67.330916][ T5055] ? kvfree+0x47/0x50 [ 67.334897][ T5055] ? check_cfg+0x409/0x840 [ 67.339318][ T5055] bpf_check+0x4fa4/0xa330 [ 67.343742][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 67.349203][ T5055] ? bpf_get_btf_vmlinux+0x20/0x20 [ 67.354319][ T5055] ? rcu_is_watching+0x12/0xb0 [ 67.359085][ T5055] ? rcu_is_watching+0x12/0xb0 [ 67.363856][ T5055] ? bpf_prog_load+0x1472/0x2200 [ 67.368790][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 67.374161][ T5055] ? spin_bug+0x1c0/0x1c0 [ 67.378489][ T5055] ? pcpu_alloc+0x1f0/0x1440 [ 67.383081][ T5055] ? preempt_count_sub+0x160/0x160 [ 67.388195][ T5055] ? read_tsc+0x9/0x20 [ 67.392259][ T5055] ? ktime_get_with_offset+0x306/0x520 [ 67.397716][ T5055] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 67.402742][ T5055] bpf_prog_load+0x1533/0x2200 [ 67.407510][ T5055] ? map_create+0x1b90/0x1b90 [ 67.412187][ T5055] ? rcu_is_watching+0x12/0xb0 [ 67.416951][ T5055] ? lock_release+0x4c8/0x6a0 [ 67.421635][ T5055] ? reacquire_held_locks+0x4c0/0x4c0 [ 67.427009][ T5055] ? bpf_lsm_bpf+0x9/0x10 [ 67.431346][ T5055] __sys_bpf+0xbf7/0x4a00 [ 67.435691][ T5055] ? bpf_perf_link_attach+0x540/0x540 [ 67.441060][ T5055] ? cgroup_update_frozen+0x144/0x6b0 [ 67.446448][ T5055] ? ptrace_stop.part.0+0x722/0x930 [ 67.451652][ T5055] ? rcu_is_watching+0x12/0xb0 [ 67.456425][ T5055] ? rcu_is_watching+0x12/0xb0 [ 67.461194][ T5055] ? trace_irq_enable.constprop.0+0xe0/0x110 [ 67.467185][ T5055] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.472402][ T5055] ? ptrace_notify+0xf1/0x130 [ 67.477081][ T5055] __x64_sys_bpf+0x78/0xc0 [ 67.481502][ T5055] ? syscall_enter_from_user_mode+0xf5/0x110 [ 67.487481][ T5055] do_syscall_64+0x40/0x110 [ 67.491992][ T5055] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 67.497891][ T5055] RIP: 0033:0x7f1402d8d469 [ 67.502302][ T5055] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.521908][ T5055] RSP: 002b:00007ffcc0744bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.530322][ T5055] RAX: ffffffffffffffda RBX: 00007ffcc0744d98 RCX: 00007f1402d8d469 [ 67.538286][ T5055] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005 [ 67.546253][ T5055] RBP: 00007f1402e00610 R08: 0000000000000000 R09: 0000000000000000 [ 67.554219][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.562273][ T5055] R13: 00007ffcc0744d88 R14: 0000000000000001 R15: 0000000000000001 [ 67.570245][ T5055] [ 67.573461][ T5055] Kernel Offset: disabled [ 67.577770][ T5055] Rebooting in 86400 seconds..