./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor234730252
<...>
Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts.
execve("./syz-executor234730252", ["./syz-executor234730252"], 0x7ffc319776e0 /* 10 vars */) = 0
brk(NULL) = 0x555566e6c000
brk(0x555566e6cd00) = 0x555566e6cd00
arch_prctl(ARCH_SET_FS, 0x555566e6c380) = 0
set_tid_address(0x555566e6c650) = 5838
set_robust_list(0x555566e6c660, 24) = 0
rseq(0x555566e6cca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor234730252", 4096) = 27
getrandom("\x57\xe7\xa9\xae\xee\x8a\x91\xa7", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555566e6cd00
brk(0x555566e8dd00) = 0x555566e8dd00
brk(0x555566e8e000) = 0x555566e8e000
mprotect(0x7fce53afa000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
executing program
write(1, "executing program\n", 18) = 18
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=262144, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[ 71.751985][ T5838] ------------[ cut here ]------------
[ 71.757470][ T5838] verifier bug: more than one arg with ref_obj_id R2 2 2(1)
[ 71.765050][ T5838] WARNING: CPU: 0 PID: 5838 at kernel/bpf/verifier.c:9678 check_helper_call+0x6052/0x6b60
[ 71.775026][ T5838] Modules linked in:
[ 71.778938][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor234 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full)
[ 71.790966][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 71.801071][ T5838] RIP: 0010:check_helper_call+0x6052/0x6b60
[ 71.807020][ T5838] Code: 48 8b 44 24 18 48 8b 4c 24 38 8b 94 01 d4 00 00 00 8b 8c 24 20 01 00 00 48 c7 c7 e0 a3 91 8b 48 8b 74 24 60 e8 ef 56 ab ff 90 <0f> 0b 90 90 e9 15 d0 ff ff e8 d0 b3 e7 ff c6 05 73 64 b2 0d 01 90
[ 71.826668][ T5838] RSP: 0018:ffffc90003fa6cc0 EFLAGS: 00010246
[ 71.832778][ T5838] RAX: 90ebda3591b07400 RBX: 1ffff11004fd2c29 RCX: ffff88807ace8000
[ 71.840754][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 71.848755][ T5838] RBP: ffffc90003fa6eb0 R08: 0000000000000003 R09: 0000000000000004
[ 71.856750][ T5838] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: 0000000000000002
[ 71.864767][ T5838] R13: 0000000000000004 R14: 0000000000000078 R15: 0000000000000002
[ 71.872803][ T5838] FS: 0000555566e6c380(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000
[ 71.881747][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.888408][ T5838] CR2: 0000563916ee6448 CR3: 0000000074978000 CR4: 00000000003526f0
[ 71.896415][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 71.904429][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 71.912456][ T5838] Call Trace:
[ 71.915792][ T5838]
[ 71.918719][ T5838] ? __pfx_check_helper_call+0x10/0x10
[ 71.924238][ T5838] ? do_check+0xa2df/0xe080
[ 71.928752][ T5838] do_check+0x95ec/0xe080
[ 71.933105][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 71.938329][ T5838] ? bpf_prog_load+0x1318/0x1930
[ 71.943315][ T5838] ? __x64_sys_bpf+0x7c/0x90
[ 71.947907][ T5838] ? do_syscall_64+0xfa/0x3b0
[ 71.952621][ T5838] ? __pfx_do_check+0x10/0x10
[ 71.957310][ T5838] ? __asan_memset+0x22/0x50
[ 71.961948][ T5838] do_check_common+0x188f/0x23f0
[ 71.966908][ T5838] bpf_check+0x10252/0x1a5d0
[ 71.971501][ T5838] ? __lock_acquire+0xab9/0xd20
[ 71.976394][ T5838] ? __lock_acquire+0xab9/0xd20
[ 71.981263][ T5838] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 71.987199][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 71.992435][ T5838] ? __pfx_bpf_check+0x10/0x10
[ 71.997198][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.002126][ T5838] ? __pfx___mutex_trylock_common+0x10/0x10
[ 72.008057][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.012964][ T5838] ? ktime_get_with_offset+0x8c/0x2a0
[ 72.018341][ T5838] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 72.024611][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.029808][ T5838] ? ktime_get_with_offset+0x8c/0x2a0
[ 72.035197][ T5838] ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 72.041439][ T5838] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 72.048067][ T5838] ? bpf_obj_name_cpy+0x194/0x1e0
[ 72.053119][ T5838] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 72.058310][ T5838] ? security_bpf_prog_load+0x7f/0x310
[ 72.063862][ T5838] bpf_prog_load+0x1318/0x1930
[ 72.068657][ T5838] ? __pfx_bpf_prog_load+0x10/0x10
[ 72.073822][ T5838] ? bpf_lsm_bpf+0x9/0x20
[ 72.078156][ T5838] ? security_bpf+0x7e/0x300
[ 72.082790][ T5838] __sys_bpf+0x5f1/0x860
[ 72.087044][ T5838] ? __pfx___sys_bpf+0x10/0x10
[ 72.091801][ T5838] ? rcu_is_watching+0x15/0xb0
[ 72.096604][ T5838] __x64_sys_bpf+0x7c/0x90
[ 72.101008][ T5838] do_syscall_64+0xfa/0x3b0
[ 72.105549][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.110748][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.116834][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 72.121517][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.127451][ T5838] RIP: 0033:0x7fce53a874a9
[ 72.131911][ T5838] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.151579][ T5838] RSP: 002b:00007ffc6099ddd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 72.160039][ T5838] RAX: ffffffffffffffda RBX: 00007ffc6099dfa8 RCX: 00007fce53a874a9
[ 72.168046][ T5838] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[ 72.176047][ T5838] RBP: 00007fce53afa610 R08: 0000000000000000 R09: 00007ffc6099dfa8
[ 72.184073][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 72.192076][ T5838] R13: 00007ffc6099df98 R14: 0000000000000001 R15: 0000000000000001
[ 72.200050][ T5838]
[ 72.203100][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 72.210378][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor234 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full)
[ 72.222241][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 72.232273][ T5838] Call Trace:
[ 72.235534][ T5838]
[ 72.238447][ T5838] dump_stack_lvl+0x99/0x250
[ 72.243023][ T5838] ? __asan_memcpy+0x40/0x70
[ 72.247595][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.252778][ T5838] ? __pfx__printk+0x10/0x10
[ 72.257351][ T5838] panic+0x2db/0x790
[ 72.261230][ T5838] ? __pfx_panic+0x10/0x10
[ 72.265628][ T5838] ? show_trace_log_lvl+0x4fb/0x550
[ 72.270815][ T5838] __warn+0x31b/0x4b0
[ 72.274776][ T5838] ? check_helper_call+0x6052/0x6b60
[ 72.280043][ T5838] ? check_helper_call+0x6052/0x6b60
[ 72.285308][ T5838] report_bug+0x2be/0x4f0
[ 72.289621][ T5838] ? check_helper_call+0x6052/0x6b60
[ 72.294886][ T5838] ? check_helper_call+0x6052/0x6b60
[ 72.300149][ T5838] ? check_helper_call+0x6054/0x6b60
[ 72.305416][ T5838] handle_bug+0x84/0x160
[ 72.309638][ T5838] exc_invalid_op+0x1a/0x50
[ 72.314118][ T5838] asm_exc_invalid_op+0x1a/0x20
[ 72.318946][ T5838] RIP: 0010:check_helper_call+0x6052/0x6b60
[ 72.324822][ T5838] Code: 48 8b 44 24 18 48 8b 4c 24 38 8b 94 01 d4 00 00 00 8b 8c 24 20 01 00 00 48 c7 c7 e0 a3 91 8b 48 8b 74 24 60 e8 ef 56 ab ff 90 <0f> 0b 90 90 e9 15 d0 ff ff e8 d0 b3 e7 ff c6 05 73 64 b2 0d 01 90
[ 72.344403][ T5838] RSP: 0018:ffffc90003fa6cc0 EFLAGS: 00010246
[ 72.350449][ T5838] RAX: 90ebda3591b07400 RBX: 1ffff11004fd2c29 RCX: ffff88807ace8000
[ 72.358400][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 72.366350][ T5838] RBP: ffffc90003fa6eb0 R08: 0000000000000003 R09: 0000000000000004
[ 72.374299][ T5838] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: 0000000000000002
[ 72.382246][ T5838] R13: 0000000000000004 R14: 0000000000000078 R15: 0000000000000002
[ 72.390216][ T5838] ? __pfx_check_helper_call+0x10/0x10
[ 72.395666][ T5838] ? do_check+0xa2df/0xe080
[ 72.400163][ T5838] do_check+0x95ec/0xe080
[ 72.404475][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.409666][ T5838] ? bpf_prog_load+0x1318/0x1930
[ 72.414588][ T5838] ? __x64_sys_bpf+0x7c/0x90
[ 72.419155][ T5838] ? do_syscall_64+0xfa/0x3b0
[ 72.423821][ T5838] ? __pfx_do_check+0x10/0x10
[ 72.428483][ T5838] ? __asan_memset+0x22/0x50
[ 72.433061][ T5838] do_check_common+0x188f/0x23f0
[ 72.437987][ T5838] bpf_check+0x10252/0x1a5d0
[ 72.442571][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.447410][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.452252][ T5838] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 72.458135][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.463317][ T5838] ? __pfx_bpf_check+0x10/0x10
[ 72.468060][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.472898][ T5838] ? __pfx___mutex_trylock_common+0x10/0x10
[ 72.478776][ T5838] ? __lock_acquire+0xab9/0xd20
[ 72.483613][ T5838] ? ktime_get_with_offset+0x8c/0x2a0
[ 72.488973][ T5838] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 72.495192][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.500369][ T5838] ? ktime_get_with_offset+0x8c/0x2a0
[ 72.505718][ T5838] ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 72.511937][ T5838] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 72.518506][ T5838] ? bpf_obj_name_cpy+0x194/0x1e0
[ 72.523507][ T5838] ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 72.528680][ T5838] ? security_bpf_prog_load+0x7f/0x310
[ 72.534120][ T5838] bpf_prog_load+0x1318/0x1930
[ 72.538872][ T5838] ? __pfx_bpf_prog_load+0x10/0x10
[ 72.543972][ T5838] ? bpf_lsm_bpf+0x9/0x20
[ 72.548276][ T5838] ? security_bpf+0x7e/0x300
[ 72.552847][ T5838] __sys_bpf+0x5f1/0x860
[ 72.557073][ T5838] ? __pfx___sys_bpf+0x10/0x10
[ 72.561828][ T5838] ? rcu_is_watching+0x15/0xb0
[ 72.566579][ T5838] __x64_sys_bpf+0x7c/0x90
[ 72.570996][ T5838] do_syscall_64+0xfa/0x3b0
[ 72.575491][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.580670][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.586713][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 72.591368][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.597239][ T5838] RIP: 0033:0x7fce53a874a9
[ 72.601639][ T5838] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.621241][ T5838] RSP: 002b:00007ffc6099ddd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 72.629639][ T5838] RAX: ffffffffffffffda RBX: 00007ffc6099dfa8 RCX: 00007fce53a874a9
[ 72.637606][ T5838] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[ 72.645561][ T5838] RBP: 00007fce53afa610 R08: 0000000000000000 R09: 00007ffc6099dfa8
[ 72.653535][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 72.661484][ T5838] R13: 00007ffc6099df98 R14: 0000000000000001 R15: 0000000000000001
[ 72.669442][ T5838]
[ 72.672710][ T5838] Kernel Offset: disabled
[ 72.677027][ T5838] Rebooting in 86400 seconds..