program:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
[ 101.816502][ T5324] ------------[ cut here ]------------
[ 101.816571][ T5324] verifier bug: backtracking misuse
[ 101.816604][ T5324] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#0: syz.0.0/5324
[ 101.826206][ T5324] Modules linked in:
[ 101.828082][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.831970][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.836702][ T5324] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20
[ 101.839932][ T5324] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 d8 45 00 e9 09 ff ff ff e8 e7 62 d4 ff 48 8d 3d 70 cf 8a 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 c0 e4 16
[ 101.848306][ T5324] RSP: 0018:ffffc9000e1a7220 EFLAGS: 00010283
[ 101.850881][ T5324] RAX: ffffffff81f36949 RBX: 0000000000000001 RCX: 0000000000100000
[ 101.854479][ T5324] RDX: ffffc9000eb2a000 RSI: 0000000000004560 RDI: ffffffff907e38c0
[ 101.857974][ T5324] RBP: 0000000000000003 R08: ffff888039b20000 R09: 0000000000000003
[ 101.861407][ T5324] R10: 0000000000000007 R11: 0000000000000002 R12: ffff8880525f7850
[ 101.864957][ T5324] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 101.868624][ T5324] FS: 00007f26d9d9b6c0(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 101.872409][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 101.875856][ T5324] CR2: 000055adfe2a9660 CR3: 0000000052a5d000 CR4: 0000000000352ef0
[ 101.879446][ T5324] Call Trace:
[ 101.880929][ T5324]
[ 101.882252][ T5324] ? update_loop_inline_state+0x22a/0x610
[ 101.884815][ T5324] do_check_insn+0x12c6d/0x17d70
[ 101.886992][ T5324] ? __pfx_do_check_insn+0x10/0x10
[ 101.889246][ T5324] ? verbose+0x11d/0x1a0
[ 101.891170][ T5324] ? __pfx_bpf_verifier_log_write+0x10/0x10
[ 101.893818][ T5324] ? __pfx_verbose+0x10/0x10
[ 101.895855][ T5324] ? bpf_vlog_reset+0x2aa/0x340
[ 101.897962][ T5324] ? print_insn_state+0x106/0x170
[ 101.900038][ T5324] do_check_common+0x3c19/0x5d30
[ 101.902145][ T5324] ? __pfx_do_check_common+0x10/0x10
[ 101.904517][ T5324] ? __pfx_verbose+0x10/0x10
[ 101.906526][ T5324] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[ 101.909064][ T5324] bpf_check+0x2639/0x2e10
[ 101.911001][ T5324] ? ktime_get_with_offset+0x93/0x2d0
[ 101.913468][ T5324] ? __pfx_bpf_check+0x10/0x10
[ 101.915579][ T5324] ? bpf_obj_name_cpy+0x194/0x1e0
[ 101.917782][ T5324] bpf_prog_load+0x14d6/0x1c20
[ 101.919976][ T5324] ? __pfx_bpf_prog_load+0x10/0x10
[ 101.922190][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 101.924502][ T5324] __sys_bpf+0xd11/0xda0
[ 101.926347][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 101.928517][ T5324] ? __pfx___sys_bpf+0x10/0x10
[ 101.930594][ T5324] ? do_futex+0x3e7/0x4e0
[ 101.932571][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 101.934832][ T5324] ? rcu_is_watching+0x16/0xb0
[ 101.936900][ T5324] __x64_sys_bpf+0xba/0xd0
[ 101.939299][ T5324] do_syscall_64+0x166/0x520
[ 101.941304][ T5324] ? trace_irq_disable+0x3b/0x140
[ 101.943969][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.946669][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 101.948619][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.951146][ T5324] RIP: 0033:0x7f26d8f9e159
[ 101.954579][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.962170][ T5324] RSP: 002b:00007f26d9d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 101.965546][ T5324] RAX: ffffffffffffffda RBX: 00007f26d9225fa0 RCX: 00007f26d8f9e159
[ 101.969009][ T5324] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[ 101.972519][ T5324] RBP: 00007f26d9035024 R08: 0000000000000000 R09: 0000000000000000
[ 101.975975][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.979545][ T5324] R13: 00007f26d9226038 R14: 00007f26d9225fa0 R15: 00007ffd98807508
[ 101.983159][ T5324]
[ 101.984532][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 101.987729][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.991529][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.995676][ T5324] Call Trace:
[ 101.997146][ T5324]
[ 101.998451][ T5324] vpanic+0x56d/0xa60
[ 102.000184][ T5324] ? __pfx__printk+0x10/0x10
[ 102.002054][ T5324] ? __pfx_vpanic+0x10/0x10
[ 102.004038][ T5324] ? is_bpf_text_address+0x292/0x2b0
[ 102.006451][ T5324] ? is_bpf_text_address+0x26/0x2b0
[ 102.008750][ T5324] panic+0xc5/0xd0
[ 102.010450][ T5324] ? __pfx_panic+0x10/0x10
[ 102.012389][ T5324] __warn+0x315/0x4c0
[ 102.014177][ T5324] ? bpf_mark_chain_precision+0x5c90/0x7c20
[ 102.016725][ T5324] ? bpf_mark_chain_precision+0x5c90/0x7c20
[ 102.019391][ T5324] __report_bug+0x276/0x570
[ 102.021460][ T5324] ? bpf_mark_chain_precision+0x5c90/0x7c20
[ 102.023930][ T5324] ? __pfx___report_bug+0x10/0x10
[ 102.026053][ T5324] ? number+0xc60/0xed0
[ 102.027881][ T5324] ? __pfx_number+0x10/0x10
[ 102.029901][ T5324] report_bug_entry+0x19b/0x290
[ 102.032024][ T5324] ? bpf_mark_chain_precision+0x5c90/0x7c20
[ 102.034553][ T5324] ? bpf_mark_chain_precision+0x5c95/0x7c20
[ 102.037054][ T5324] handle_bug+0xce/0x200
[ 102.038861][ T5324] exc_invalid_op+0x1a/0x50
[ 102.040873][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 102.043046][ T5324] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20
[ 102.045910][ T5324] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 d8 45 00 e9 09 ff ff ff e8 e7 62 d4 ff 48 8d 3d 70 cf 8a 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 c0 e4 16
[ 102.054144][ T5324] RSP: 0018:ffffc9000e1a7220 EFLAGS: 00010283
[ 102.056442][ T5324] RAX: ffffffff81f36949 RBX: 0000000000000001 RCX: 0000000000100000
[ 102.059635][ T5324] RDX: ffffc9000eb2a000 RSI: 0000000000004560 RDI: ffffffff907e38c0
[ 102.063090][ T5324] RBP: 0000000000000003 R08: ffff888039b20000 R09: 0000000000000003
[ 102.066648][ T5324] R10: 0000000000000007 R11: 0000000000000002 R12: ffff8880525f7850
[ 102.070402][ T5324] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[ 102.073867][ T5324] ? bpf_mark_chain_precision+0x5c89/0x7c20
[ 102.076313][ T5324] ? update_loop_inline_state+0x22a/0x610
[ 102.078765][ T5324] do_check_insn+0x12c6d/0x17d70
[ 102.080932][ T5324] ? __pfx_do_check_insn+0x10/0x10
[ 102.083154][ T5324] ? verbose+0x11d/0x1a0
[ 102.084814][ T5324] ? __pfx_bpf_verifier_log_write+0x10/0x10
[ 102.087255][ T5324] ? __pfx_verbose+0x10/0x10
[ 102.089079][ T5324] ? bpf_vlog_reset+0x2aa/0x340
[ 102.091113][ T5324] ? print_insn_state+0x106/0x170
[ 102.093250][ T5324] do_check_common+0x3c19/0x5d30
[ 102.095445][ T5324] ? __pfx_do_check_common+0x10/0x10
[ 102.097879][ T5324] ? __pfx_verbose+0x10/0x10
[ 102.099991][ T5324] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[ 102.102607][ T5324] bpf_check+0x2639/0x2e10
[ 102.104629][ T5324] ? ktime_get_with_offset+0x93/0x2d0
[ 102.106955][ T5324] ? __pfx_bpf_check+0x10/0x10
[ 102.109117][ T5324] ? bpf_obj_name_cpy+0x194/0x1e0
[ 102.111362][ T5324] bpf_prog_load+0x14d6/0x1c20
[ 102.113528][ T5324] ? __pfx_bpf_prog_load+0x10/0x10
[ 102.115775][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 102.117988][ T5324] __sys_bpf+0xd11/0xda0
[ 102.119840][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 102.121963][ T5324] ? __pfx___sys_bpf+0x10/0x10
[ 102.124065][ T5324] ? do_futex+0x3e7/0x4e0
[ 102.125943][ T5324] ? do_raw_spin_lock+0x100/0x2f0
[ 102.128124][ T5324] ? rcu_is_watching+0x16/0xb0
[ 102.130253][ T5324] __x64_sys_bpf+0xba/0xd0
[ 102.132166][ T5324] do_syscall_64+0x166/0x520
[ 102.134183][ T5324] ? trace_irq_disable+0x3b/0x140
[ 102.136332][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.139034][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 102.141017][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.143602][ T5324] RIP: 0033:0x7f26d8f9e159
[ 102.145612][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.153810][ T5324] RSP: 002b:00007f26d9d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 102.157329][ T5324] RAX: ffffffffffffffda RBX: 00007f26d9225fa0 RCX: 00007f26d8f9e159
[ 102.160645][ T5324] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[ 102.163986][ T5324] RBP: 00007f26d9035024 R08: 0000000000000000 R09: 0000000000000000
[ 102.167362][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.170757][ T5324] R13: 00007f26d9226038 R14: 00007f26d9225fa0 R15: 00007ffd98807508
[ 102.174377][ T5324]
[ 102.176490][ T5324] Kernel Offset: disabled
[ 102.178405][ T5324] Rebooting in 86400 seconds..