./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2401022202 <...> Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. execve("./syz-executor2401022202", ["./syz-executor2401022202"], 0x7ffe4a2e68c0 /* 10 vars */) = 0 brk(NULL) = 0x555585065000 brk(0x555585065d00) = 0x555585065d00 arch_prctl(ARCH_SET_FS, 0x555585065380) = 0 set_tid_address(0x555585065650) = 5072 set_robust_list(0x555585065660, 24) = 0 rseq(0x555585065ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2401022202", 4096) = 28 getrandom("\xf2\xb8\x2e\xf4\xb2\xaf\xc5\x9e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585065d00 brk(0x555585086d00) = 0x555585086d00 brk(0x555585087000) = 0x555585087000 mprotect(0x7fdaf5be3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_BLOOM_FILTER, key_size=0, value_size=2147483649, max_entries=255, map_flags=0, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 72.140899][ T5072] ------------[ cut here ]------------ [ 72.146388][ T5072] UBSAN: array-index-out-of-bounds in kernel/bpf/verifier.c:7182:12 [ 72.154525][ T5072] index -1 is out of range for type 'u8[8]' (aka 'unsigned char[8]') [ 72.162724][ T5072] CPU: 0 PID: 5072 Comm: syz-executor240 Not tainted 6.8.0-syzkaller-05212-g4c8644f86c85 #0 [ 72.172804][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 72.182883][ T5072] Call Trace: [ 72.186165][ T5072] [ 72.189110][ T5072] dump_stack_lvl+0x1e7/0x2e0 [ 72.193827][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.199034][ T5072] ? __pfx__printk+0x10/0x10 [ 72.203638][ T5072] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 72.210414][ T5072] ? __asan_memset+0x23/0x50 [ 72.215027][ T5072] __ubsan_handle_out_of_bounds+0x121/0x150 [ 72.220952][ T5072] check_stack_range_initialized+0x1668/0x19a0 [ 72.227138][ T5072] ? __pfx_check_stack_range_initialized+0x10/0x10 [ 72.233664][ T5072] ? adjust_ptr_min_max_vals+0x1a84/0x2220 [ 72.239472][ T5072] ? rcu_is_watching+0x15/0xb0 [ 72.244246][ T5072] check_helper_mem_access+0x2eb/0xfa0 [ 72.249715][ T5072] ? __pfx_check_helper_mem_access+0x10/0x10 [ 72.255700][ T5072] ? is_reg64+0xb6/0x3a0 [ 72.259941][ T5072] ? check_reg_type+0x70d/0xf50 [ 72.264813][ T5072] ? check_func_arg_reg_off+0x20b/0x2f0 [ 72.270383][ T5072] check_helper_call+0x263c/0x7220 [ 72.275522][ T5072] ? __pfx_check_helper_call+0x10/0x10 [ 72.281002][ T5072] ? tnum_const+0xd/0x20 [ 72.285253][ T5072] do_check+0x9e49/0x10500 [ 72.289687][ T5072] ? kmalloc_trace+0x1d9/0x360 [ 72.294473][ T5072] ? do_check_common+0x190/0x1dd0 [ 72.299530][ T5072] ? bpf_check+0x136ab/0x190c0 [ 72.304355][ T5072] ? __pfx_do_check+0x10/0x10 [ 72.309035][ T5072] ? mark_reg_not_init+0xd4/0x4b0 [ 72.314095][ T5072] ? __asan_memcpy+0x40/0x70 [ 72.318706][ T5072] ? mark_reg_not_init+0xd4/0x4b0 [ 72.323739][ T5072] do_check_common+0x14bd/0x1dd0 [ 72.328690][ T5072] bpf_check+0x136ab/0x190c0 [ 72.333301][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.338508][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.343447][ T5072] ? mark_lock+0x9a/0x350 [ 72.347795][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.352741][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.357790][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.362735][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.367684][ T5072] ? __pfx_bpf_check+0x10/0x10 [ 72.372447][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.377408][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.382607][ T5072] ? mark_lock+0x9a/0x350 [ 72.386935][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.392154][ T5072] ? mark_lock+0x9a/0x350 [ 72.396485][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.401681][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.406738][ T5072] ? mark_lock+0x9a/0x350 [ 72.411075][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.416107][ T5072] ? mark_lock+0x9a/0x350 [ 72.420439][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.425478][ T5072] ? __pfx_lock_acquire+0x10/0x10 [ 72.430497][ T5072] ? ktime_get_with_offset+0x105/0x330 [ 72.435957][ T5072] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.441939][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.448282][ T5072] ? ktime_get_with_offset+0x105/0x330 [ 72.453830][ T5072] ? seqcount_lockdep_reader_access+0x157/0x220 [ 72.460077][ T5072] ? lockdep_hardirqs_on+0x99/0x150 [ 72.465278][ T5072] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.471522][ T5072] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 72.478117][ T5072] ? __check_object_size+0x8e/0xa00 [ 72.483324][ T5072] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 72.488358][ T5072] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 72.493549][ T5072] ? security_bpf_prog_load+0x87/0xb0 [ 72.498917][ T5072] bpf_prog_load+0x1667/0x20f0 [ 72.503711][ T5072] ? __pfx_bpf_prog_load+0x10/0x10 [ 72.508817][ T5072] ? __pfx___might_resched+0x10/0x10 [ 72.514111][ T5072] ? __might_fault+0xc6/0x120 [ 72.518786][ T5072] ? bpf_lsm_bpf+0x9/0x10 [ 72.523113][ T5072] ? security_bpf+0x87/0xb0 [ 72.527630][ T5072] __sys_bpf+0x4ee/0x810 [ 72.531881][ T5072] ? __pfx___sys_bpf+0x10/0x10 [ 72.536658][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.542979][ T5072] ? do_syscall_64+0x10a/0x240 [ 72.547770][ T5072] __x64_sys_bpf+0x7c/0x90 [ 72.552181][ T5072] do_syscall_64+0xfb/0x240 [ 72.556685][ T5072] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 72.562594][ T5072] RIP: 0033:0x7fdaf5b70629 [ 72.567007][ T5072] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.586605][ T5072] RSP: 002b:00007fff8f9be768 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.595014][ T5072] RAX: ffffffffffffffda RBX: 00007fff8f9be938 RCX: 00007fdaf5b70629 [ 72.602978][ T5072] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 72.610951][ T5072] RBP: 00007fdaf5be3610 R08: 0000000000000000 R09: 00007fff8f9be938 [ 72.618915][ T5072] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 72.626895][ T5072] R13: 00007fff8f9be928 R14: 0000000000000001 R15: 0000000000000001 [ 72.634881][ T5072] [ 72.638843][ T5072] ---[ end trace ]--- [ 72.642961][ T5072] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 72.650167][ T5072] CPU: 0 PID: 5072 Comm: syz-executor240 Not tainted 6.8.0-syzkaller-05212-g4c8644f86c85 #0 [ 72.660229][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 72.670295][ T5072] Call Trace: [ 72.673583][ T5072] [ 72.676510][ T5072] dump_stack_lvl+0x1e7/0x2e0 [ 72.681196][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.686393][ T5072] ? __pfx__printk+0x10/0x10 [ 72.690984][ T5072] ? vprintk_emit+0x608/0x720 [ 72.695769][ T5072] ? vscnprintf+0x5d/0x90 [ 72.700132][ T5072] panic+0x349/0x860 [ 72.704031][ T5072] ? check_panic_on_warn+0x21/0xb0 [ 72.709324][ T5072] ? __pfx_panic+0x10/0x10 [ 72.713765][ T5072] ? _printk+0xd5/0x120 [ 72.717923][ T5072] ? __pfx__printk+0x10/0x10 [ 72.722518][ T5072] check_panic_on_warn+0x86/0xb0 [ 72.727479][ T5072] __ubsan_handle_out_of_bounds+0x141/0x150 [ 72.733378][ T5072] check_stack_range_initialized+0x1668/0x19a0 [ 72.739546][ T5072] ? __pfx_check_stack_range_initialized+0x10/0x10 [ 72.746071][ T5072] ? adjust_ptr_min_max_vals+0x1a84/0x2220 [ 72.751891][ T5072] ? rcu_is_watching+0x15/0xb0 [ 72.756666][ T5072] check_helper_mem_access+0x2eb/0xfa0 [ 72.762135][ T5072] ? __pfx_check_helper_mem_access+0x10/0x10 [ 72.768128][ T5072] ? is_reg64+0xb6/0x3a0 [ 72.772387][ T5072] ? check_reg_type+0x70d/0xf50 [ 72.777243][ T5072] ? check_func_arg_reg_off+0x20b/0x2f0 [ 72.782793][ T5072] check_helper_call+0x263c/0x7220 [ 72.787918][ T5072] ? __pfx_check_helper_call+0x10/0x10 [ 72.793384][ T5072] ? tnum_const+0xd/0x20 [ 72.797633][ T5072] do_check+0x9e49/0x10500 [ 72.802055][ T5072] ? kmalloc_trace+0x1d9/0x360 [ 72.806822][ T5072] ? do_check_common+0x190/0x1dd0 [ 72.811836][ T5072] ? bpf_check+0x136ab/0x190c0 [ 72.816634][ T5072] ? __pfx_do_check+0x10/0x10 [ 72.821304][ T5072] ? mark_reg_not_init+0xd4/0x4b0 [ 72.826323][ T5072] ? __asan_memcpy+0x40/0x70 [ 72.830909][ T5072] ? mark_reg_not_init+0xd4/0x4b0 [ 72.835931][ T5072] do_check_common+0x14bd/0x1dd0 [ 72.840874][ T5072] bpf_check+0x136ab/0x190c0 [ 72.845481][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.850710][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.855646][ T5072] ? mark_lock+0x9a/0x350 [ 72.859975][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.864910][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.869940][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.874885][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.879832][ T5072] ? __pfx_bpf_check+0x10/0x10 [ 72.884598][ T5072] ? validate_chain+0x11b/0x58e0 [ 72.889542][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.894782][ T5072] ? mark_lock+0x9a/0x350 [ 72.899127][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.904339][ T5072] ? mark_lock+0x9a/0x350 [ 72.908678][ T5072] ? __pfx_validate_chain+0x10/0x10 [ 72.913880][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.919448][ T5072] ? mark_lock+0x9a/0x350 [ 72.923811][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.928855][ T5072] ? mark_lock+0x9a/0x350 [ 72.933208][ T5072] ? __lock_acquire+0x1346/0x1fd0 [ 72.938258][ T5072] ? __pfx_lock_acquire+0x10/0x10 [ 72.943288][ T5072] ? ktime_get_with_offset+0x105/0x330 [ 72.948778][ T5072] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.954773][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.961102][ T5072] ? ktime_get_with_offset+0x105/0x330 [ 72.966566][ T5072] ? seqcount_lockdep_reader_access+0x157/0x220 [ 72.972807][ T5072] ? lockdep_hardirqs_on+0x99/0x150 [ 72.978003][ T5072] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.984244][ T5072] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 72.990879][ T5072] ? __check_object_size+0x8e/0xa00 [ 72.996101][ T5072] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 73.001134][ T5072] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 73.006339][ T5072] ? security_bpf_prog_load+0x87/0xb0 [ 73.011721][ T5072] bpf_prog_load+0x1667/0x20f0 [ 73.016501][ T5072] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.021643][ T5072] ? __pfx___might_resched+0x10/0x10 [ 73.027109][ T5072] ? __might_fault+0xc6/0x120 [ 73.031797][ T5072] ? bpf_lsm_bpf+0x9/0x10 [ 73.036135][ T5072] ? security_bpf+0x87/0xb0 [ 73.040649][ T5072] __sys_bpf+0x4ee/0x810 [ 73.044899][ T5072] ? __pfx___sys_bpf+0x10/0x10 [ 73.049678][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.056007][ T5072] ? do_syscall_64+0x10a/0x240 [ 73.060775][ T5072] __x64_sys_bpf+0x7c/0x90 [ 73.065188][ T5072] do_syscall_64+0xfb/0x240 [ 73.069712][ T5072] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 73.075615][ T5072] RIP: 0033:0x7fdaf5b70629 [ 73.080025][ T5072] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.099640][ T5072] RSP: 002b:00007fff8f9be768 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.108053][ T5072] RAX: ffffffffffffffda RBX: 00007fff8f9be938 RCX: 00007fdaf5b70629 [ 73.116039][ T5072] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 73.124003][ T5072] RBP: 00007fdaf5be3610 R08: 0000000000000000 R09: 00007fff8f9be938 [ 73.131969][ T5072] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 73.139952][ T5072] R13: 00007fff8f9be928 R14: 0000000000000001 R15: 0000000000000001 [ 73.147931][ T5072] [ 73.151260][ T5072] Kernel Offset: disabled [ 73.155659][ T5072] Rebooting in 86400 seconds..