./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3801415997 <...> Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. execve("./syz-executor3801415997", ["./syz-executor3801415997"], 0x7ffd125b8b30 /* 10 vars */) = 0 brk(NULL) = 0x55555634d000 brk(0x55555634dd00) = 0x55555634dd00 arch_prctl(ARCH_SET_FS, 0x55555634d380) = 0 set_tid_address(0x55555634d650) = 5069 set_robust_list(0x55555634d660, 24) = 0 rseq(0x55555634dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3801415997", 4096) = 28 getrandom("\x55\x24\x9c\x8d\xf1\xcb\x6b\x18", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555634dd00 brk(0x55555636ed00) = 0x55555636ed00 brk(0x55555636f000) = 0x55555636f000 mprotect(0x7fd3d5789000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x55555634d660, 24) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... clone resumed>, child_tidptr=0x55555634d650) = 5070 [pid 5070] <... prctl resumed>) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [ 74.125359][ T5070] ================================================================================ [ 74.134777][ T5070] UBSAN: shift-out-of-bounds in kernel/bpf/verifier.c:13571:63 [ 74.142854][ T5070] shift exponent 1073741824 is too large for 32-bit type 'int' [ 74.150705][ T5070] CPU: 0 PID: 5070 Comm: syz-executor380 Not tainted 6.7.0-rc4-syzkaller-00156-g117211aa739a #0 [ 74.161210][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 74.171265][ T5070] Call Trace: [ 74.174565][ T5070] [ 74.177491][ T5070] dump_stack_lvl+0x125/0x1b0 [ 74.182317][ T5070] __ubsan_handle_shift_out_of_bounds+0x2a6/0x480 [ 74.188753][ T5070] ? tnum_const+0x11/0x20 [ 74.193084][ T5070] adjust_reg_min_max_vals.cold+0x162/0x221 [ 74.198986][ T5070] ? check_kfunc_mem_size_reg+0x540/0x540 [ 74.204717][ T5070] ? is_reg64.constprop.0+0x120/0x380 [ 74.210092][ T5070] check_alu_op+0x498/0x3a60 [ 74.214682][ T5070] do_check_common+0x1b30/0xd690 [ 74.219650][ T5070] ? check_helper_call.isra.0+0xb550/0xb550 [ 74.225638][ T5070] ? kvfree+0x47/0x50 [ 74.229652][ T5070] ? check_cfg+0x405/0x840 [ 74.234103][ T5070] bpf_check+0x77d9/0xa5e0 [ 74.238560][ T5070] ? bpf_get_btf_vmlinux+0x20/0x20 [ 74.243682][ T5070] ? find_held_lock+0x2d/0x110 [ 74.248451][ T5070] ? bpf_prog_load+0x1470/0x2200 [ 74.253381][ T5070] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.258755][ T5070] ? preempt_count_sub+0x160/0x160 [ 74.263863][ T5070] ? read_tsc+0x9/0x20 [ 74.267927][ T5070] ? ktime_get_with_offset+0x306/0x520 [ 74.273381][ T5070] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 74.278406][ T5070] bpf_prog_load+0x1531/0x2200 [ 74.283435][ T5070] ? map_create+0x1b90/0x1b90 [ 74.288124][ T5070] ? find_held_lock+0x2d/0x110 [ 74.292892][ T5070] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.298273][ T5070] ? bpf_lsm_bpf+0x9/0x10 [ 74.302616][ T5070] __sys_bpf+0xbf7/0x4920 [ 74.306957][ T5070] ? bpf_perf_link_attach+0x540/0x540 [ 74.312350][ T5070] ? cgroup_update_frozen+0x144/0x6b0 [ 74.317755][ T5070] ? recalc_sigpending_tsk+0x187/0x1d0 [ 74.323227][ T5070] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 74.328457][ T5070] ? find_held_lock+0x2d/0x110 [ 74.333272][ T5070] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.338487][ T5070] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.343691][ T5070] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.348889][ T5070] ? ptrace_notify+0xf4/0x130 [ 74.353659][ T5070] __x64_sys_bpf+0x78/0xc0 [ 74.358069][ T5070] ? syscall_enter_from_user_mode+0x107/0x120 [ 74.364142][ T5070] do_syscall_64+0x40/0x110 [ 74.368662][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 74.374561][ T5070] RIP: 0033:0x7fd3d5716af9 [ 74.378968][ T5070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.398750][ T5070] RSP: 002b:00007ffe74d76228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.407181][ T5070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3d5716af9 [ 74.415170][ T5070] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 74.423140][ T5070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 74.431115][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000003a28 [ 74.439083][ T5070] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 74.447065][ T5070] [ 74.452776][ T5070] ================================================================================ [ 74.463095][ T5070] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.470319][ T5070] CPU: 0 PID: 5070 Comm: syz-executor380 Not tainted 6.7.0-rc4-syzkaller-00156-g117211aa739a #0 [ 74.481076][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 74.491142][ T5070] Call Trace: [ 74.494413][ T5070] [ 74.497334][ T5070] dump_stack_lvl+0xd9/0x1b0 [ 74.501928][ T5070] panic+0x6dc/0x790 [ 74.505825][ T5070] ? preempt_schedule_irq+0x79/0x90 [ 74.511027][ T5070] ? panic_smp_self_stop+0xa0/0xa0 [ 74.516143][ T5070] ? kmsg_dump_get_line+0x350/0x350 [ 74.521462][ T5070] ? check_panic_on_warn+0x1f/0xb0 [ 74.526721][ T5070] check_panic_on_warn+0xab/0xb0 [ 74.531679][ T5070] __ubsan_handle_shift_out_of_bounds+0x2ce/0x480 [ 74.538109][ T5070] ? tnum_const+0x11/0x20 [ 74.542462][ T5070] adjust_reg_min_max_vals.cold+0x162/0x221 [ 74.548381][ T5070] ? check_kfunc_mem_size_reg+0x540/0x540 [ 74.554124][ T5070] ? is_reg64.constprop.0+0x120/0x380 [ 74.559507][ T5070] check_alu_op+0x498/0x3a60 [ 74.564116][ T5070] do_check_common+0x1b30/0xd690 [ 74.569073][ T5070] ? check_helper_call.isra.0+0xb550/0xb550 [ 74.575681][ T5070] ? kvfree+0x47/0x50 [ 74.579804][ T5070] ? check_cfg+0x405/0x840 [ 74.584226][ T5070] bpf_check+0x77d9/0xa5e0 [ 74.588665][ T5070] ? bpf_get_btf_vmlinux+0x20/0x20 [ 74.593787][ T5070] ? find_held_lock+0x2d/0x110 [ 74.598560][ T5070] ? bpf_prog_load+0x1470/0x2200 [ 74.603534][ T5070] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.608945][ T5070] ? preempt_count_sub+0x160/0x160 [ 74.614064][ T5070] ? read_tsc+0x9/0x20 [ 74.618138][ T5070] ? ktime_get_with_offset+0x306/0x520 [ 74.623612][ T5070] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 74.628925][ T5070] bpf_prog_load+0x1531/0x2200 [ 74.633691][ T5070] ? map_create+0x1b90/0x1b90 [ 74.638381][ T5070] ? find_held_lock+0x2d/0x110 [ 74.643274][ T5070] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.648675][ T5070] ? bpf_lsm_bpf+0x9/0x10 [ 74.653013][ T5070] __sys_bpf+0xbf7/0x4920 [ 74.657339][ T5070] ? bpf_perf_link_attach+0x540/0x540 [ 74.662712][ T5070] ? cgroup_update_frozen+0x144/0x6b0 [ 74.668095][ T5070] ? recalc_sigpending_tsk+0x187/0x1d0 [ 74.673564][ T5070] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 74.678775][ T5070] ? find_held_lock+0x2d/0x110 [ 74.683558][ T5070] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.688758][ T5070] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.693966][ T5070] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.699212][ T5070] ? ptrace_notify+0xf4/0x130 [ 74.703892][ T5070] __x64_sys_bpf+0x78/0xc0 [ 74.708308][ T5070] ? syscall_enter_from_user_mode+0x107/0x120 [ 74.714386][ T5070] do_syscall_64+0x40/0x110 [ 74.718892][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 74.724823][ T5070] RIP: 0033:0x7fd3d5716af9 [ 74.729237][ T5070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.748930][ T5070] RSP: 002b:00007ffe74d76228 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.758082][ T5070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3d5716af9 [ 74.766058][ T5070] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 74.774059][ T5070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 74.782034][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000003a28 [ 74.790004][ T5070] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 74.797987][ T5070] [ 74.801192][ T5070] Kernel Offset: disabled [ 74.805604][ T5070] Rebooting in 86400 seconds..