./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3865037525
<...>
Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts.
execve("./syz-executor3865037525", ["./syz-executor3865037525"], 0x7fffd261e7e0 /* 10 vars */) = 0
brk(NULL) = 0x555591931000
brk(0x555591931d00) = 0x555591931d00
arch_prctl(ARCH_SET_FS, 0x555591931380) = 0
set_tid_address(0x555591931650) = 5835
set_robust_list(0x555591931660, 24) = 0
rseq(0x555591931ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3865037525", 4096) = 28
getrandom("\x7e\x6c\xb5\xad\x6e\xd4\x4f\xec", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555591931d00
brk(0x555591952d00) = 0x555591952d00
brk(0x555591953000) = 0x555591953000
mprotect(0x7f5b8c53f000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
executing program
write(1, "executing program\n", 18) = 18
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=262144, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
syzkaller login: [ 88.365932][ T5835] ------------[ cut here ]------------
[ 88.371490][ T5835] verifier bug: more than one arg with ref_obj_id R2 2 2(1)
[ 88.380518][ T5835] WARNING: CPU: 1 PID: 5835 at kernel/bpf/verifier.c:9678 check_helper_call+0x6052/0x6b60
[ 88.390523][ T5835] Modules linked in:
[ 88.394466][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor386 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full)
[ 88.406412][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 88.416548][ T5835] RIP: 0010:check_helper_call+0x6052/0x6b60
[ 88.422463][ T5835] Code: 48 8b 44 24 18 48 8b 4c 24 38 8b 94 01 d4 00 00 00 8b 8c 24 20 01 00 00 48 c7 c7 e0 a3 91 8b 48 8b 74 24 60 e8 ef 56 ab ff 90 <0f> 0b 90 90 e9 15 d0 ff ff e8 d0 b3 e7 ff c6 05 73 64 b2 0d 01 90
[ 88.442129][ T5835] RSP: 0018:ffffc90003f5ecc0 EFLAGS: 00010246
[ 88.448287][ T5835] RAX: 9de7429615562e00 RBX: 1ffff1100488e229 RCX: ffff888011441e00
[ 88.456375][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 88.464379][ T5835] RBP: ffffc90003f5eeb0 R08: ffffc90003f5e9e7 R09: 1ffff920007ebd3c
[ 88.472430][ T5835] R10: dffffc0000000000 R11: fffff520007ebd3d R12: 0000000000000002
[ 88.480469][ T5835] R13: 0000000000000004 R14: 0000000000000078 R15: 0000000000000002
[ 88.488498][ T5835] FS: 0000555591931380(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000
[ 88.497534][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.504136][ T5835] CR2: 0000000010cac398 CR3: 0000000075382000 CR4: 00000000003526f0
[ 88.512195][ T5835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 88.520273][ T5835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 88.528328][ T5835] Call Trace:
[ 88.531639][ T5835]
[ 88.534593][ T5835] ? __pfx_check_helper_call+0x10/0x10
[ 88.540136][ T5835] ? do_check+0xa2df/0xe080
[ 88.544682][ T5835] do_check+0x95ec/0xe080
[ 88.549095][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.554355][ T5835] ? bpf_prog_load+0x1318/0x1930
[ 88.559360][ T5835] ? __x64_sys_bpf+0x7c/0x90
[ 88.563984][ T5835] ? do_syscall_64+0xfa/0x3b0
[ 88.568765][ T5835] ? __pfx_do_check+0x10/0x10
[ 88.573495][ T5835] ? __asan_memset+0x22/0x50
[ 88.578169][ T5835] do_check_common+0x188f/0x23f0
[ 88.583158][ T5835] bpf_check+0x10252/0x1a5d0
[ 88.587860][ T5835] ? __lock_acquire+0xab9/0xd20
[ 88.592782][ T5835] ? __lock_acquire+0xab9/0xd20
[ 88.597732][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 88.603664][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.609016][ T5835] ? __pfx_bpf_check+0x10/0x10
[ 88.613816][ T5835] ? __lock_acquire+0xab9/0xd20
[ 88.618768][ T5835] ? __pfx___mutex_trylock_common+0x10/0x10
[ 88.624725][ T5835] ? __lock_acquire+0xab9/0xd20
[ 88.629674][ T5835] ? ktime_get_with_offset+0x8c/0x2a0
[ 88.635086][ T5835] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 88.641385][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.646664][ T5835] ? ktime_get_with_offset+0x8c/0x2a0
[ 88.652067][ T5835] ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 88.658379][ T5835] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 88.665014][ T5835] ? bpf_obj_name_cpy+0x194/0x1e0
[ 88.670124][ T5835] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 88.675477][ T5835] ? security_bpf_prog_load+0x7f/0x310
[ 88.681037][ T5835] bpf_prog_load+0x1318/0x1930
[ 88.685850][ T5835] ? __pfx_bpf_prog_load+0x10/0x10
[ 88.691060][ T5835] ? bpf_lsm_bpf+0x9/0x20
[ 88.695420][ T5835] ? security_bpf+0x7e/0x300
[ 88.700085][ T5835] __sys_bpf+0x5f1/0x860
[ 88.704368][ T5835] ? __pfx___sys_bpf+0x10/0x10
[ 88.709221][ T5835] ? rcu_is_watching+0x15/0xb0
[ 88.714030][ T5835] __x64_sys_bpf+0x7c/0x90
[ 88.718529][ T5835] do_syscall_64+0xfa/0x3b0
[ 88.723067][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.728340][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.734443][ T5835] ? clear_bhb_loop+0x60/0xb0
[ 88.739275][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.745203][ T5835] RIP: 0033:0x7f5b8c4cc4a9
[ 88.749706][ T5835] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.769457][ T5835] RSP: 002b:00007ffe9d7aae88 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 88.777928][ T5835] RAX: ffffffffffffffda RBX: 00007ffe9d7ab058 RCX: 00007f5b8c4cc4a9
[ 88.786330][ T5835] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[ 88.794354][ T5835] RBP: 00007f5b8c53f610 R08: 0000000000000000 R09: 00007ffe9d7ab058
[ 88.802423][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 88.810484][ T5835] R13: 00007ffe9d7ab048 R14: 0000000000000001 R15: 0000000000000001
[ 88.818542][ T5835]
[ 88.821587][ T5835] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.828916][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor386 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full)
[ 88.840813][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 88.850875][ T5835] Call Trace:
[ 88.854158][ T5835]
[ 88.857095][ T5835] dump_stack_lvl+0x99/0x250
[ 88.861724][ T5835] ? __asan_memcpy+0x40/0x70
[ 88.866341][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.871553][ T5835] ? __pfx__printk+0x10/0x10
[ 88.876165][ T5835] panic+0x2db/0x790
[ 88.880088][ T5835] ? __pfx_panic+0x10/0x10
[ 88.884529][ T5835] ? show_trace_log_lvl+0x4fb/0x550
[ 88.889764][ T5835] __warn+0x31b/0x4b0
[ 88.893769][ T5835] ? check_helper_call+0x6052/0x6b60
[ 88.899080][ T5835] ? check_helper_call+0x6052/0x6b60
[ 88.904386][ T5835] report_bug+0x2be/0x4f0
[ 88.908741][ T5835] ? check_helper_call+0x6052/0x6b60
[ 88.914051][ T5835] ? check_helper_call+0x6052/0x6b60
[ 88.919356][ T5835] ? check_helper_call+0x6054/0x6b60
[ 88.924664][ T5835] handle_bug+0x84/0x160
[ 88.928950][ T5835] exc_invalid_op+0x1a/0x50
[ 88.933474][ T5835] asm_exc_invalid_op+0x1a/0x20
[ 88.938341][ T5835] RIP: 0010:check_helper_call+0x6052/0x6b60
[ 88.944257][ T5835] Code: 48 8b 44 24 18 48 8b 4c 24 38 8b 94 01 d4 00 00 00 8b 8c 24 20 01 00 00 48 c7 c7 e0 a3 91 8b 48 8b 74 24 60 e8 ef 56 ab ff 90 <0f> 0b 90 90 e9 15 d0 ff ff e8 d0 b3 e7 ff c6 05 73 64 b2 0d 01 90
[ 88.963875][ T5835] RSP: 0018:ffffc90003f5ecc0 EFLAGS: 00010246
[ 88.969969][ T5835] RAX: 9de7429615562e00 RBX: 1ffff1100488e229 RCX: ffff888011441e00
[ 88.977978][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 88.985973][ T5835] RBP: ffffc90003f5eeb0 R08: ffffc90003f5e9e7 R09: 1ffff920007ebd3c
[ 88.993968][ T5835] R10: dffffc0000000000 R11: fffff520007ebd3d R12: 0000000000000002
[ 89.001968][ T5835] R13: 0000000000000004 R14: 0000000000000078 R15: 0000000000000002
[ 89.010031][ T5835] ? __pfx_check_helper_call+0x10/0x10
[ 89.015536][ T5835] ? do_check+0xa2df/0xe080
[ 89.020068][ T5835] do_check+0x95ec/0xe080
[ 89.024436][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.029682][ T5835] ? bpf_prog_load+0x1318/0x1930
[ 89.034641][ T5835] ? __x64_sys_bpf+0x7c/0x90
[ 89.039251][ T5835] ? do_syscall_64+0xfa/0x3b0
[ 89.043987][ T5835] ? __pfx_do_check+0x10/0x10
[ 89.048712][ T5835] ? __asan_memset+0x22/0x50
[ 89.053349][ T5835] do_check_common+0x188f/0x23f0
[ 89.058337][ T5835] bpf_check+0x10252/0x1a5d0
[ 89.062990][ T5835] ? __lock_acquire+0xab9/0xd20
[ 89.067882][ T5835] ? __lock_acquire+0xab9/0xd20
[ 89.072799][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 89.078717][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.083934][ T5835] ? __pfx_bpf_check+0x10/0x10
[ 89.088719][ T5835] ? __lock_acquire+0xab9/0xd20
[ 89.093601][ T5835] ? __pfx___mutex_trylock_common+0x10/0x10
[ 89.099521][ T5835] ? __lock_acquire+0xab9/0xd20
[ 89.104399][ T5835] ? ktime_get_with_offset+0x8c/0x2a0
[ 89.109788][ T5835] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 89.116044][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.121253][ T5835] ? ktime_get_with_offset+0x8c/0x2a0
[ 89.126640][ T5835] ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 89.133077][ T5835] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 89.139691][ T5835] ? bpf_obj_name_cpy+0x194/0x1e0
[ 89.144730][ T5835] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 89.149947][ T5835] ? security_bpf_prog_load+0x7f/0x310
[ 89.155431][ T5835] bpf_prog_load+0x1318/0x1930
[ 89.160225][ T5835] ? __pfx_bpf_prog_load+0x10/0x10
[ 89.165378][ T5835] ? bpf_lsm_bpf+0x9/0x20
[ 89.169726][ T5835] ? security_bpf+0x7e/0x300
[ 89.174339][ T5835] __sys_bpf+0x5f1/0x860
[ 89.178607][ T5835] ? __pfx___sys_bpf+0x10/0x10
[ 89.183403][ T5835] ? rcu_is_watching+0x15/0xb0
[ 89.188191][ T5835] __x64_sys_bpf+0x7c/0x90
[ 89.192641][ T5835] do_syscall_64+0xfa/0x3b0
[ 89.197361][ T5835] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.202578][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.208661][ T5835] ? clear_bhb_loop+0x60/0xb0
[ 89.213358][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.219266][ T5835] RIP: 0033:0x7f5b8c4cc4a9
[ 89.223714][ T5835] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 89.243336][ T5835] RSP: 002b:00007ffe9d7aae88 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 89.251768][ T5835] RAX: ffffffffffffffda RBX: 00007ffe9d7ab058 RCX: 00007f5b8c4cc4a9
[ 89.259753][ T5835] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[ 89.267736][ T5835] RBP: 00007f5b8c53f610 R08: 0000000000000000 R09: 00007ffe9d7ab058
[ 89.275716][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 89.283698][ T5835] R13: 00007ffe9d7ab048 R14: 0000000000000001 R15: 0000000000000001
[ 89.291693][ T5835]
[ 89.295095][ T5835] Kernel Offset: disabled
[ 89.299439][ T5835] Rebooting in 86400 seconds..