./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3525050178
<...>
Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts.
execve("./syz-executor3525050178", ["./syz-executor3525050178"], 0x7fff794ce8f0 /* 10 vars */) = 0
brk(NULL) = 0x555557216000
brk(0x555557216d00) = 0x555557216d00
arch_prctl(ARCH_SET_FS, 0x555557216380) = 0
set_tid_address(0x555557216650) = 5064
set_robust_list(0x555557216660, 24) = 0
rseq(0x555557216ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3525050178", 4096) = 28
getrandom("\x54\x76\x84\x9c\xb3\x65\x3a\x1e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555557216d00
brk(0x555557237d00) = 0x555557237d00
brk(0x555557238000) = 0x555557238000
mprotect(0x7f902bfdd000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
[ 71.580752][ T5064] ------------[ cut here ]------------
[ 71.586356][ T5064] verifier backtracking bug
[ 71.586426][ T5064] WARNING: CPU: 0 PID: 5064 at kernel/bpf/verifier.c:3691 __mark_chain_precision+0x3c4b/0x4d70
[ 71.601305][ T5064] Modules linked in:
[ 71.605238][ T5064] CPU: 0 PID: 5064 Comm: syz-executor352 Not tainted 6.7.0-rc6-syzkaller-01690-g92de776d2090 #0
[ 71.615682][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 71.625777][ T5064] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70
[ 71.632130][ T5064] Code: ff 89 de e8 27 d8 ec ff 84 db 0f 85 60 cf ff ff e8 ea dc ec ff c6 05 65 9e 68 0d 01 90 48 c7 c7 a0 1b d4 8a e8 76 16 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 80 d2 05 8d e8 ed 00
[ 71.651907][ T5064] RSP: 0018:ffffc900039bf450 EFLAGS: 00010286
[ 71.658050][ T5064] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbca9
[ 71.666083][ T5064] RDX: ffff88801736d940 RSI: ffffffff814dbcb6 RDI: 0000000000000001
[ 71.674075][ T5064] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000
[ 71.682105][ T5064] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 71.690137][ T5064] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[ 71.698155][ T5064] FS: 0000555557216380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 71.710873][ T5064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.717735][ T5064] CR2: 0000000000d78388 CR3: 000000002792d000 CR4: 00000000003506f0
[ 71.725771][ T5064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 71.733771][ T5064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 71.741824][ T5064] Call Trace:
[ 71.745145][ T5064]
[ 71.748071][ T5064] ? show_regs+0x8f/0xa0
[ 71.752329][ T5064] ? __warn+0xe6/0x390
[ 71.756492][ T5064] ? __wake_up_klogd.part.0+0x99/0xf0
[ 71.761900][ T5064] ? __mark_chain_precision+0x3c4b/0x4d70
[ 71.767695][ T5064] ? report_bug+0x3bc/0x580
[ 71.772246][ T5064] ? handle_bug+0x3d/0x70
[ 71.776625][ T5064] ? exc_invalid_op+0x17/0x40
[ 71.781341][ T5064] ? asm_exc_invalid_op+0x1a/0x20
[ 71.786474][ T5064] ? __warn_printk+0x199/0x350
[ 71.791275][ T5064] ? __warn_printk+0x1a6/0x350
[ 71.796133][ T5064] ? __mark_chain_precision+0x3c4b/0x4d70
[ 71.801924][ T5064] ? check_cfg+0x840/0x840
[ 71.806397][ T5064] ? slab_free_freelist_hook+0x114/0x1e0
[ 71.812033][ T5064] ? find_good_pkt_pointers+0x690/0x690
[ 71.817630][ T5064] ? add_subprog_and_kfunc+0x1b90/0x1b90
[ 71.823311][ T5064] ? __check_reg_arg+0x323/0x410
[ 71.828340][ T5064] check_return_code+0x8fa/0x11a0
[ 71.833401][ T5064] do_check_common+0xa68b/0xe8d0
[ 71.838438][ T5064] ? check_helper_call.isra.0+0xab50/0xab50
[ 71.844398][ T5064] ? kvfree+0x47/0x50
[ 71.848481][ T5064] ? check_cfg+0x409/0x840
[ 71.852916][ T5064] bpf_check+0x4fb0/0xa310
[ 71.857402][ T5064] ? bpf_get_btf_vmlinux+0x20/0x20
[ 71.862549][ T5064] ? find_held_lock+0x2d/0x110
[ 71.867400][ T5064] ? bpf_prog_load+0x1473/0x2200
[ 71.872394][ T5064] ? reacquire_held_locks+0x4c0/0x4c0
[ 71.877846][ T5064] ? preempt_count_sub+0x160/0x160
[ 71.882983][ T5064] ? read_tsc+0x9/0x20
[ 71.887106][ T5064] ? ktime_get_with_offset+0x306/0x520
[ 71.892591][ T5064] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 71.897668][ T5064] bpf_prog_load+0x1534/0x2200
[ 71.902460][ T5064] ? map_create+0x1b90/0x1b90
[ 71.907181][ T5064] ? find_held_lock+0x2d/0x110
[ 71.911991][ T5064] ? reacquire_held_locks+0x4c0/0x4c0
[ 71.917463][ T5064] ? bpf_lsm_bpf+0x9/0x10
[ 71.921836][ T5064] __sys_bpf+0xbf7/0x4a00
[ 71.926234][ T5064] ? bpf_perf_link_attach+0x540/0x540
[ 71.931623][ T5064] ? cgroup_update_frozen+0x144/0x6b0
[ 71.937061][ T5064] ? recalc_sigpending_tsk+0x187/0x1d0
[ 71.942560][ T5064] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 71.947816][ T5064] ? find_held_lock+0x2d/0x110
[ 71.952617][ T5064] ? _raw_spin_unlock_irq+0x23/0x50
[ 71.957875][ T5064] ? lockdep_hardirqs_on+0x7d/0x110
[ 71.963097][ T5064] ? _raw_spin_unlock_irq+0x2e/0x50
[ 71.968353][ T5064] ? ptrace_notify+0xf4/0x130
[ 71.973057][ T5064] __x64_sys_bpf+0x78/0xc0
[ 71.977521][ T5064] ? syscall_enter_from_user_mode+0x107/0x120
[ 71.983610][ T5064] do_syscall_64+0x40/0x110
[ 71.988170][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 71.994210][ T5064] RIP: 0033:0x7f902bf6a469
[ 71.998640][ T5064] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.018336][ T5064] RSP: 002b:00007ffe54dc73a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 72.026859][ T5064] RAX: ffffffffffffffda RBX: 00007ffe54dc7588 RCX: 00007f902bf6a469
[ 72.034894][ T5064] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005
[ 72.042884][ T5064] RBP: 00007f902bfdd610 R08: 0000000000000000 R09: 0000000000000000
[ 72.050936][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 72.058974][ T5064] R13: 00007ffe54dc7578 R14: 0000000000000001 R15: 0000000000000001
[ 72.067030][ T5064]
[ 72.070054][ T5064] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 72.077319][ T5064] CPU: 0 PID: 5064 Comm: syz-executor352 Not tainted 6.7.0-rc6-syzkaller-01690-g92de776d2090 #0
[ 72.088117][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 72.098182][ T5064] Call Trace:
[ 72.101456][ T5064]
[ 72.104381][ T5064] dump_stack_lvl+0xd9/0x1b0
[ 72.108990][ T5064] panic+0x6dc/0x790
[ 72.112882][ T5064] ? panic_smp_self_stop+0xa0/0xa0
[ 72.117988][ T5064] ? show_trace_log_lvl+0x363/0x4f0
[ 72.123217][ T5064] ? check_panic_on_warn+0x1f/0xb0
[ 72.128354][ T5064] ? __mark_chain_precision+0x3c4b/0x4d70
[ 72.134177][ T5064] check_panic_on_warn+0xab/0xb0
[ 72.139119][ T5064] __warn+0xf2/0x390
[ 72.143004][ T5064] ? __wake_up_klogd.part.0+0x99/0xf0
[ 72.148368][ T5064] ? __mark_chain_precision+0x3c4b/0x4d70
[ 72.154092][ T5064] report_bug+0x3bc/0x580
[ 72.158444][ T5064] handle_bug+0x3d/0x70
[ 72.162585][ T5064] exc_invalid_op+0x17/0x40
[ 72.167082][ T5064] asm_exc_invalid_op+0x1a/0x20
[ 72.171926][ T5064] RIP: 0010:__mark_chain_precision+0x3c4b/0x4d70
[ 72.178251][ T5064] Code: ff 89 de e8 27 d8 ec ff 84 db 0f 85 60 cf ff ff e8 ea dc ec ff c6 05 65 9e 68 0d 01 90 48 c7 c7 a0 1b d4 8a e8 76 16 b3 ff 90 <0f> 0b 90 90 e9 42 cf ff ff 48 89 ee 48 c7 c7 80 d2 05 8d e8 ed 00
[ 72.197864][ T5064] RSP: 0018:ffffc900039bf450 EFLAGS: 00010286
[ 72.203937][ T5064] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dbca9
[ 72.211919][ T5064] RDX: ffff88801736d940 RSI: ffffffff814dbcb6 RDI: 0000000000000001
[ 72.219896][ T5064] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000000
[ 72.227867][ T5064] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 72.235845][ T5064] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[ 72.243826][ T5064] ? __warn_printk+0x199/0x350
[ 72.248607][ T5064] ? __warn_printk+0x1a6/0x350
[ 72.253403][ T5064] ? check_cfg+0x840/0x840
[ 72.257850][ T5064] ? slab_free_freelist_hook+0x114/0x1e0
[ 72.263495][ T5064] ? find_good_pkt_pointers+0x690/0x690
[ 72.269050][ T5064] ? add_subprog_and_kfunc+0x1b90/0x1b90
[ 72.274703][ T5064] ? __check_reg_arg+0x323/0x410
[ 72.279654][ T5064] check_return_code+0x8fa/0x11a0
[ 72.284701][ T5064] do_check_common+0xa68b/0xe8d0
[ 72.289681][ T5064] ? check_helper_call.isra.0+0xab50/0xab50
[ 72.295603][ T5064] ? kvfree+0x47/0x50
[ 72.299598][ T5064] ? check_cfg+0x409/0x840
[ 72.304041][ T5064] bpf_check+0x4fb0/0xa310
[ 72.308492][ T5064] ? bpf_get_btf_vmlinux+0x20/0x20
[ 72.313643][ T5064] ? find_held_lock+0x2d/0x110
[ 72.318452][ T5064] ? bpf_prog_load+0x1473/0x2200
[ 72.323409][ T5064] ? reacquire_held_locks+0x4c0/0x4c0
[ 72.328829][ T5064] ? preempt_count_sub+0x160/0x160
[ 72.333977][ T5064] ? read_tsc+0x9/0x20
[ 72.338157][ T5064] ? ktime_get_with_offset+0x306/0x520
[ 72.343728][ T5064] ? bpf_obj_name_cpy+0x14a/0x1a0
[ 72.348773][ T5064] bpf_prog_load+0x1534/0x2200
[ 72.353555][ T5064] ? map_create+0x1b90/0x1b90
[ 72.358236][ T5064] ? find_held_lock+0x2d/0x110
[ 72.363022][ T5064] ? reacquire_held_locks+0x4c0/0x4c0
[ 72.368425][ T5064] ? bpf_lsm_bpf+0x9/0x10
[ 72.372772][ T5064] __sys_bpf+0xbf7/0x4a00
[ 72.377115][ T5064] ? bpf_perf_link_attach+0x540/0x540
[ 72.382496][ T5064] ? cgroup_update_frozen+0x144/0x6b0
[ 72.387891][ T5064] ? recalc_sigpending_tsk+0x187/0x1d0
[ 72.393360][ T5064] ? ptrace_stop.part.0+0x5c2/0x7a0
[ 72.398570][ T5064] ? find_held_lock+0x2d/0x110
[ 72.403373][ T5064] ? _raw_spin_unlock_irq+0x23/0x50
[ 72.408586][ T5064] ? lockdep_hardirqs_on+0x7d/0x110
[ 72.413801][ T5064] ? _raw_spin_unlock_irq+0x2e/0x50
[ 72.419013][ T5064] ? ptrace_notify+0xf4/0x130
[ 72.423702][ T5064] __x64_sys_bpf+0x78/0xc0
[ 72.428130][ T5064] ? syscall_enter_from_user_mode+0x107/0x120
[ 72.434222][ T5064] do_syscall_64+0x40/0x110
[ 72.438746][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 72.444655][ T5064] RIP: 0033:0x7f902bf6a469
[ 72.449088][ T5064] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.468706][ T5064] RSP: 002b:00007ffe54dc73a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 72.477132][ T5064] RAX: ffffffffffffffda RBX: 00007ffe54dc7588 RCX: 00007f902bf6a469
[ 72.485108][ T5064] RDX: 0000000000000090 RSI: 0000000020000600 RDI: 0000000000000005
[ 72.493086][ T5064] RBP: 00007f902bfdd610 R08: 0000000000000000 R09: 0000000000000000
[ 72.501080][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 72.509059][ T5064] R13: 00007ffe54dc7578 R14: 0000000000000001 R15: 0000000000000001
[ 72.517049][ T5064]
[ 72.520246][ T5064] Kernel Offset: disabled
[ 72.524627][ T5064] Rebooting in 86400 seconds..