./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor316454140
<...>
Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts.
execve("./syz-executor316454140", ["./syz-executor316454140"], 0x7ffc2e47a940 /* 10 vars */) = 0
brk(NULL) = 0x555555ebb000
brk(0x555555ebbd00) = 0x555555ebbd00
arch_prctl(ARCH_SET_FS, 0x555555ebb380) = 0
set_tid_address(0x555555ebb650) = 5057
set_robust_list(0x555555ebb660, 24) = 0
rseq(0x555555ebbca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor316454140", 4096) = 27
getrandom("\x87\x0d\x94\x1e\x4b\x6b\xc8\xd9", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555ebbd00
brk(0x555555edcd00) = 0x555555edcd00
brk(0x555555edd000) = 0x555555edd000
mprotect(0x7f2c534e1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
[ 73.433391][ T5057] ------------[ cut here ]------------
[ 73.438947][ T5057] verifier backtracking bug
[ 73.439021][ T5057] WARNING: CPU: 0 PID: 5057 at kernel/bpf/verifier.c:3681 __mark_chain_precision+0x3c4b/0x4d70
[ 73.453912][ T5057] Modules linked in:
[ 73.457915][ T5057] CPU: 0 PID: 5057 Comm: syz-executor316 Not tainted 6.7.0-rc5-syzkaller-01540-g5abde6246522 #0
[ 73.468387][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 73.478524][ T5057] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70
[ 73.484853][ T5057] Code: ff 89 de e8 67 df ec ff 84 db 0f 85 60 cf ff ff e8 2a e4 ec ff c6 05 b4 89 68 0d 01 90 48 c7 c7 40 22 d4 8a e8 e6 01 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 a0 da 05 8d e8 3d 36
[ 73.504548][ T5057] RSP: 0018:ffffc90003b67458 EFLAGS: 00010282
[ 73.510660][ T5057] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbd09
[ 73.518685][ T5057] RDX: ffff888018b78000 RSI: ffffffff814dbd16 RDI: 0000000000000001
[ 73.526789][ T5057] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000
[ 73.534768][ T5057] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 73.542775][ T5057] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[ 73.550781][ T5057] FS: 0000555555ebb380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 73.559755][ T5057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.566380][ T5057] CR2: 0000000002421388 CR3: 00000000744a5000 CR4: 00000000003506f0
[ 73.574346][ T5057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 73.582357][ T5057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 73.590448][ T5057] Call Trace:
[ 73.593746][ T5057]
[ 73.596722][ T5057] ? show_regs+0x8f/0xa0
[ 73.600990][ T5057] ? __warn+0xe6/0x390
[ 73.605058][ T5057] ? __mark_chain_precision+0x3c4b/0x4d70
[ 73.610874][ T5057] ? report_bug+0x3bc/0x580
[ 73.615454][ T5057] ? handle_bug+0x3d/0x70
[ 73.619781][ T5057] ? exc_invalid_op+0x17/0x40
[ 73.624450][ T5057] ? asm_exc_invalid_op+0x1a/0x20
[ 73.629519][ T5057] ? __warn_printk+0x199/0x350
[ 73.634316][ T5057] ? __warn_printk+0x1a6/0x350
[ 73.639155][ T5057] ? __mark_chain_precision+0x3c4b/0x4d70
[ 73.644918][ T5057] ? __mark_chain_precision+0x3c4a/0x4d70
[ 73.650742][ T5057] ? check_cfg+0x840/0x840
[ 73.655385][ T5057] ? slab_free_freelist_hook+0x114/0x1e0
[ 73.661030][ T5057] ? find_good_pkt_pointers+0x690/0x690
[ 73.666612][ T5057] ? add_subprog_and_kfunc+0x1ba0/0x1ba0
[ 73.672268][ T5057] ? __check_reg_arg+0x323/0x410
[ 73.677269][ T5057] check_return_code+0x8fa/0x11a0
[ 73.682417][ T5057] do_check_common+0x8a17/0xc590
[ 73.687487][ T5057] ? check_helper_call.isra.0+0xab50/0xab50
[ 73.693450][ T5057] ? kvfree+0x47/0x50
[ 73.697478][ T5057] ? check_cfg+0x409/0x840
[ 73.701916][ T5057] bpf_check+0x4fa4/0xa330
[ 73.706402][ T5057] ? bpf_get_btf_vmlinux+0x20/0x20
[ 73.711535][ T5057] ? find_held_lock+0x2d/0x110
[ 73.716363][ T5057] ? bpf_prog_load+0x1473/0x2200
[ 73.721319][ T5057] ? reacquire_held_locks+0x4c0/0x4c0
[ 73.726740][ T5057] ? preempt_count_sub+0x160/0x160
[ 73.731870][ T5057] ? read_tsc+0x9/0x20
[ 73.736072][ T5057] ? ktime_get_with_offset+0x306/0x520
[ 73.741547][ T5057] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 73.746643][ T5057] bpf_prog_load+0x1534/0x2200
[ 73.751464][ T5057] ? map_create+0x1b90/0x1b90
[ 73.756194][ T5057] ? find_held_lock+0x2d/0x110
[ 73.760981][ T5057] ? reacquire_held_locks+0x4c0/0x4c0
[ 73.766442][ T5057] ? bpf_lsm_bpf+0x9/0x10
[ 73.770807][ T5057] __sys_bpf+0xbf7/0x4a00
[ 73.775157][ T5057] ? bpf_perf_link_attach+0x540/0x540
[ 73.780756][ T5057] ? cgroup_update_frozen+0x144/0x6b0
[ 73.786194][ T5057] ? recalc_sigpending_tsk+0x187/0x1d0
[ 73.791645][ T5057] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 73.796882][ T5057] ? find_held_lock+0x2d/0x110
[ 73.801858][ T5057] ? _raw_spin_unlock_irq+0x23/0x50
[ 73.807123][ T5057] ? lockdep_hardirqs_on+0x7d/0x110
[ 73.812367][ T5057] ? _raw_spin_unlock_irq+0x2e/0x50
[ 73.817619][ T5057] ? ptrace_notify+0xf4/0x130
[ 73.822314][ T5057] __x64_sys_bpf+0x78/0xc0
[ 73.826793][ T5057] ? syscall_enter_from_user_mode+0x107/0x120
[ 73.832900][ T5057] do_syscall_64+0x40/0x110
[ 73.837548][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 73.843546][ T5057] RIP: 0033:0x7f2c5346e469
[ 73.848113][ T5057] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.867791][ T5057] RSP: 002b:00007ffc85511738 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 73.876241][ T5057] RAX: ffffffffffffffda RBX: 00007ffc85511918 RCX: 00007f2c5346e469
[ 73.884222][ T5057] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005
[ 73.892265][ T5057] RBP: 00007f2c534e1610 R08: 0000000000000000 R09: 0000000000000000
[ 73.900283][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 73.908290][ T5057] R13: 00007ffc85511908 R14: 0000000000000001 R15: 0000000000000001
[ 73.916333][ T5057]
[ 73.919354][ T5057] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 73.926616][ T5057] CPU: 0 PID: 5057 Comm: syz-executor316 Not tainted 6.7.0-rc5-syzkaller-01540-g5abde6246522 #0
[ 73.937008][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 73.947237][ T5057] Call Trace:
[ 73.950516][ T5057]
[ 73.953440][ T5057] dump_stack_lvl+0xd9/0x1b0
[ 73.958032][ T5057] panic+0x6dc/0x790
[ 73.961916][ T5057] ? panic_smp_self_stop+0xa0/0xa0
[ 73.967018][ T5057] ? show_trace_log_lvl+0x363/0x4f0
[ 73.972213][ T5057] ? check_panic_on_warn+0x1f/0xb0
[ 73.977327][ T5057] ? __mark_chain_precision+0x3c4b/0x4d70
[ 73.983060][ T5057] check_panic_on_warn+0xab/0xb0
[ 73.988012][ T5057] __warn+0xf2/0x390
[ 73.991902][ T5057] ? __mark_chain_precision+0x3c4b/0x4d70
[ 73.997701][ T5057] report_bug+0x3bc/0x580
[ 74.002026][ T5057] handle_bug+0x3d/0x70
[ 74.006176][ T5057] exc_invalid_op+0x17/0x40
[ 74.010672][ T5057] asm_exc_invalid_op+0x1a/0x20
[ 74.015512][ T5057] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70
[ 74.021849][ T5057] Code: ff 89 de e8 67 df ec ff 84 db 0f 85 60 cf ff ff e8 2a e4 ec ff c6 05 b4 89 68 0d 01 90 48 c7 c7 40 22 d4 8a e8 e6 01 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 a0 da 05 8d e8 3d 36
[ 74.041455][ T5057] RSP: 0018:ffffc90003b67458 EFLAGS: 00010282
[ 74.047522][ T5057] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbd09
[ 74.055486][ T5057] RDX: ffff888018b78000 RSI: ffffffff814dbd16 RDI: 0000000000000001
[ 74.063455][ T5057] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000
[ 74.071424][ T5057] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 74.079397][ T5057] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[ 74.087371][ T5057] ? __warn_printk+0x199/0x350
[ 74.092224][ T5057] ? __warn_printk+0x1a6/0x350
[ 74.097002][ T5057] ? __mark_chain_precision+0x3c4a/0x4d70
[ 74.102913][ T5057] ? check_cfg+0x840/0x840
[ 74.107339][ T5057] ? slab_free_freelist_hook+0x114/0x1e0
[ 74.112977][ T5057] ? find_good_pkt_pointers+0x690/0x690
[ 74.118525][ T5057] ? add_subprog_and_kfunc+0x1ba0/0x1ba0
[ 74.124161][ T5057] ? __check_reg_arg+0x323/0x410
[ 74.129189][ T5057] check_return_code+0x8fa/0x11a0
[ 74.134223][ T5057] do_check_common+0x8a17/0xc590
[ 74.139188][ T5057] ? check_helper_call.isra.0+0xab50/0xab50
[ 74.145084][ T5057] ? kvfree+0x47/0x50
[ 74.149075][ T5057] ? check_cfg+0x409/0x840
[ 74.153500][ T5057] bpf_check+0x4fa4/0xa330
[ 74.157942][ T5057] ? bpf_get_btf_vmlinux+0x20/0x20
[ 74.163061][ T5057] ? find_held_lock+0x2d/0x110
[ 74.167833][ T5057] ? bpf_prog_load+0x1473/0x2200
[ 74.172776][ T5057] ? reacquire_held_locks+0x4c0/0x4c0
[ 74.178160][ T5057] ? preempt_count_sub+0x160/0x160
[ 74.183274][ T5057] ? read_tsc+0x9/0x20
[ 74.187351][ T5057] ? ktime_get_with_offset+0x306/0x520
[ 74.192816][ T5057] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 74.197940][ T5057] bpf_prog_load+0x1534/0x2200
[ 74.202706][ T5057] ? map_create+0x1b90/0x1b90
[ 74.207380][ T5057] ? find_held_lock+0x2d/0x110
[ 74.212238][ T5057] ? reacquire_held_locks+0x4c0/0x4c0
[ 74.217625][ T5057] ? bpf_lsm_bpf+0x9/0x10
[ 74.221971][ T5057] __sys_bpf+0xbf7/0x4a00
[ 74.226301][ T5057] ? bpf_perf_link_attach+0x540/0x540
[ 74.231762][ T5057] ? cgroup_update_frozen+0x144/0x6b0
[ 74.237141][ T5057] ? recalc_sigpending_tsk+0x187/0x1d0
[ 74.242598][ T5057] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 74.247796][ T5057] ? find_held_lock+0x2d/0x110
[ 74.252578][ T5057] ? _raw_spin_unlock_irq+0x23/0x50
[ 74.257778][ T5057] ? lockdep_hardirqs_on+0x7d/0x110
[ 74.262972][ T5057] ? _raw_spin_unlock_irq+0x2e/0x50
[ 74.268172][ T5057] ? ptrace_notify+0xf4/0x130
[ 74.272848][ T5057] __x64_sys_bpf+0x78/0xc0
[ 74.277261][ T5057] ? syscall_enter_from_user_mode+0x107/0x120
[ 74.283333][ T5057] do_syscall_64+0x40/0x110
[ 74.287845][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 74.293738][ T5057] RIP: 0033:0x7f2c5346e469
[ 74.298149][ T5057] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 74.317926][ T5057] RSP: 002b:00007ffc85511738 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 74.326358][ T5057] RAX: ffffffffffffffda RBX: 00007ffc85511918 RCX: 00007f2c5346e469
[ 74.334353][ T5057] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005
[ 74.342318][ T5057] RBP: 00007f2c534e1610 R08: 0000000000000000 R09: 0000000000000000
[ 74.350294][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 74.358262][ T5057] R13: 00007ffc85511908 R14: 0000000000000001 R15: 0000000000000001
[ 74.366328][ T5057]
[ 74.369653][ T5057] Kernel Offset: disabled
[ 74.374023][ T5057] Rebooting in 86400 seconds..