./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2976416856 <...> Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. execve("./syz-executor2976416856", ["./syz-executor2976416856"], 0x7ffd882ebe10 /* 10 vars */) = 0 brk(NULL) = 0x55556ed45000 brk(0x55556ed45d00) = 0x55556ed45d00 arch_prctl(ARCH_SET_FS, 0x55556ed45380) = 0 set_tid_address(0x55556ed45650) = 5066 set_robust_list(0x55556ed45660, 24) = 0 rseq(0x55556ed45ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2976416856", 4096) = 28 getrandom("\x44\x01\xd5\xb8\x21\x15\x5c\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556ed45d00 brk(0x55556ed66d00) = 0x55556ed66d00 brk(0x55556ed67000) = 0x55556ed67000 mprotect(0x7fa7fbd22000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_BLOOM_FILTER, key_size=0, value_size=2147483649, max_entries=255, map_flags=0, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [ 59.833644][ T5066] ------------[ cut here ]------------ [ 59.839232][ T5066] UBSAN: array-index-out-of-bounds in kernel/bpf/verifier.c:7182:12 [ 59.847356][ T5066] index -1 is out of range for type 'u8[8]' (aka 'unsigned char[8]') [ 59.855555][ T5066] CPU: 1 PID: 5066 Comm: syz-executor297 Not tainted 6.8.0-syzkaller-05204-g237bb5f7f7f5 #0 [ 59.865673][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 59.875734][ T5066] Call Trace: [ 59.879097][ T5066] [ 59.882019][ T5066] dump_stack_lvl+0x1e7/0x2e0 [ 59.886727][ T5066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.892226][ T5066] ? __pfx__printk+0x10/0x10 [ 59.896826][ T5066] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 59.903609][ T5066] ? __asan_memset+0x23/0x50 [ 59.908265][ T5066] __ubsan_handle_out_of_bounds+0x121/0x150 [ 59.914617][ T5066] check_stack_range_initialized+0x1668/0x19a0 [ 59.920799][ T5066] ? __pfx_check_stack_range_initialized+0x10/0x10 [ 59.927317][ T5066] ? adjust_ptr_min_max_vals+0x1a84/0x2220 [ 59.933118][ T5066] ? rcu_is_watching+0x15/0xb0 [ 59.937894][ T5066] check_helper_mem_access+0x2eb/0xfa0 [ 59.943363][ T5066] ? __pfx_check_helper_mem_access+0x10/0x10 [ 59.949680][ T5066] ? is_reg64+0xb6/0x3a0 [ 59.953910][ T5066] ? check_reg_type+0x70d/0xf50 [ 59.958754][ T5066] ? check_func_arg_reg_off+0x20b/0x2f0 [ 59.964296][ T5066] check_helper_call+0x263c/0x7220 [ 59.969414][ T5066] ? __pfx_check_helper_call+0x10/0x10 [ 59.974869][ T5066] ? tnum_const+0xd/0x20 [ 59.979192][ T5066] do_check+0x9e49/0x10500 [ 59.983627][ T5066] ? kmalloc_trace+0x1d9/0x360 [ 59.988395][ T5066] ? do_check_common+0x190/0x1dd0 [ 59.993406][ T5066] ? bpf_check+0x136ab/0x19010 [ 59.998187][ T5066] ? __pfx_do_check+0x10/0x10 [ 60.002860][ T5066] ? mark_reg_not_init+0xd4/0x4b0 [ 60.007870][ T5066] ? __asan_memcpy+0x40/0x70 [ 60.012470][ T5066] ? mark_reg_not_init+0xd4/0x4b0 [ 60.017485][ T5066] do_check_common+0x14bd/0x1dd0 [ 60.022433][ T5066] bpf_check+0x136ab/0x19010 [ 60.027023][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.032218][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.037141][ T5066] ? mark_lock+0x9a/0x350 [ 60.041479][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.046406][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.051423][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.056365][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.061315][ T5066] ? __pfx_bpf_check+0x10/0x10 [ 60.066070][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.071020][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.076221][ T5066] ? mark_lock+0x9a/0x350 [ 60.080553][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.085763][ T5066] ? mark_lock+0x9a/0x350 [ 60.090112][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.095303][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.100429][ T5066] ? mark_lock+0x9a/0x350 [ 60.104752][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.109779][ T5066] ? mark_lock+0x9a/0x350 [ 60.114107][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.119147][ T5066] ? __pfx_lock_acquire+0x10/0x10 [ 60.124159][ T5066] ? ktime_get_with_offset+0x105/0x330 [ 60.129612][ T5066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.135581][ T5066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.141962][ T5066] ? ktime_get_with_offset+0x105/0x330 [ 60.147444][ T5066] ? seqcount_lockdep_reader_access+0x157/0x220 [ 60.153779][ T5066] ? lockdep_hardirqs_on+0x99/0x150 [ 60.159741][ T5066] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 60.165980][ T5066] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 60.172579][ T5066] ? __check_object_size+0x8e/0xa00 [ 60.177870][ T5066] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 60.182886][ T5066] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 60.188074][ T5066] ? security_bpf_prog_load+0x87/0xb0 [ 60.193524][ T5066] bpf_prog_load+0x1667/0x20f0 [ 60.198291][ T5066] ? __pfx_bpf_prog_load+0x10/0x10 [ 60.203421][ T5066] ? __pfx___might_resched+0x10/0x10 [ 60.208727][ T5066] ? __might_fault+0xc6/0x120 [ 60.213426][ T5066] ? bpf_lsm_bpf+0x9/0x10 [ 60.217746][ T5066] ? security_bpf+0x87/0xb0 [ 60.222240][ T5066] __sys_bpf+0x4ee/0x810 [ 60.226496][ T5066] ? __pfx___sys_bpf+0x10/0x10 [ 60.231282][ T5066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.237618][ T5066] ? do_syscall_64+0x10a/0x240 [ 60.242387][ T5066] __x64_sys_bpf+0x7c/0x90 [ 60.246824][ T5066] do_syscall_64+0xfb/0x240 [ 60.251434][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.257410][ T5066] RIP: 0033:0x7fa7fbcaf629 [ 60.261817][ T5066] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.281766][ T5066] RSP: 002b:00007fffea56be08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.290193][ T5066] RAX: ffffffffffffffda RBX: 00007fffea56bfd8 RCX: 00007fa7fbcaf629 [ 60.298208][ T5066] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 60.306174][ T5066] RBP: 00007fa7fbd22610 R08: 0000000000000000 R09: 00007fffea56bfd8 [ 60.314163][ T5066] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 60.322149][ T5066] R13: 00007fffea56bfc8 R14: 0000000000000001 R15: 0000000000000001 [ 60.330128][ T5066] [ 60.333293][ T5066] ---[ end trace ]--- [ 60.337293][ T5066] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 60.344502][ T5066] CPU: 1 PID: 5066 Comm: syz-executor297 Not tainted 6.8.0-syzkaller-05204-g237bb5f7f7f5 #0 [ 60.354571][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 60.364629][ T5066] Call Trace: [ 60.367910][ T5066] [ 60.370839][ T5066] dump_stack_lvl+0x1e7/0x2e0 [ 60.375585][ T5066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.380807][ T5066] ? __pfx__printk+0x10/0x10 [ 60.385403][ T5066] ? vprintk_emit+0x608/0x720 [ 60.390089][ T5066] ? vscnprintf+0x5d/0x90 [ 60.394426][ T5066] panic+0x349/0x860 [ 60.398340][ T5066] ? check_panic_on_warn+0x21/0xb0 [ 60.403485][ T5066] ? __pfx_panic+0x10/0x10 [ 60.407912][ T5066] ? _printk+0xd5/0x120 [ 60.412071][ T5066] ? __pfx__printk+0x10/0x10 [ 60.416694][ T5066] check_panic_on_warn+0x86/0xb0 [ 60.421640][ T5066] __ubsan_handle_out_of_bounds+0x141/0x150 [ 60.427549][ T5066] check_stack_range_initialized+0x1668/0x19a0 [ 60.433721][ T5066] ? __pfx_check_stack_range_initialized+0x10/0x10 [ 60.440234][ T5066] ? adjust_ptr_min_max_vals+0x1a84/0x2220 [ 60.446044][ T5066] ? rcu_is_watching+0x15/0xb0 [ 60.450819][ T5066] check_helper_mem_access+0x2eb/0xfa0 [ 60.456317][ T5066] ? __pfx_check_helper_mem_access+0x10/0x10 [ 60.462304][ T5066] ? is_reg64+0xb6/0x3a0 [ 60.466587][ T5066] ? check_reg_type+0x70d/0xf50 [ 60.471443][ T5066] ? check_func_arg_reg_off+0x20b/0x2f0 [ 60.476991][ T5066] check_helper_call+0x263c/0x7220 [ 60.482119][ T5066] ? __pfx_check_helper_call+0x10/0x10 [ 60.487591][ T5066] ? tnum_const+0xd/0x20 [ 60.491839][ T5066] do_check+0x9e49/0x10500 [ 60.496265][ T5066] ? kmalloc_trace+0x1d9/0x360 [ 60.501034][ T5066] ? do_check_common+0x190/0x1dd0 [ 60.507203][ T5066] ? bpf_check+0x136ab/0x19010 [ 60.512015][ T5066] ? __pfx_do_check+0x10/0x10 [ 60.516686][ T5066] ? mark_reg_not_init+0xd4/0x4b0 [ 60.521706][ T5066] ? __asan_memcpy+0x40/0x70 [ 60.526322][ T5066] ? mark_reg_not_init+0xd4/0x4b0 [ 60.531466][ T5066] do_check_common+0x14bd/0x1dd0 [ 60.536450][ T5066] bpf_check+0x136ab/0x19010 [ 60.541099][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.546312][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.551259][ T5066] ? mark_lock+0x9a/0x350 [ 60.555585][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.560521][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.565552][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.570497][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.575441][ T5066] ? __pfx_bpf_check+0x10/0x10 [ 60.580208][ T5066] ? validate_chain+0x11b/0x58e0 [ 60.585151][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.590357][ T5066] ? mark_lock+0x9a/0x350 [ 60.594695][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.599990][ T5066] ? mark_lock+0x9a/0x350 [ 60.604325][ T5066] ? __pfx_validate_chain+0x10/0x10 [ 60.609895][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.614939][ T5066] ? mark_lock+0x9a/0x350 [ 60.619297][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.624346][ T5066] ? mark_lock+0x9a/0x350 [ 60.628689][ T5066] ? __lock_acquire+0x1346/0x1fd0 [ 60.633732][ T5066] ? __pfx_lock_acquire+0x10/0x10 [ 60.638755][ T5066] ? ktime_get_with_offset+0x105/0x330 [ 60.644222][ T5066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.650381][ T5066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.656715][ T5066] ? ktime_get_with_offset+0x105/0x330 [ 60.662182][ T5066] ? seqcount_lockdep_reader_access+0x157/0x220 [ 60.668448][ T5066] ? lockdep_hardirqs_on+0x99/0x150 [ 60.673672][ T5066] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 60.679936][ T5066] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 60.686534][ T5066] ? __check_object_size+0x8e/0xa00 [ 60.691744][ T5066] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 60.696844][ T5066] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 60.702049][ T5066] ? security_bpf_prog_load+0x87/0xb0 [ 60.707427][ T5066] bpf_prog_load+0x1667/0x20f0 [ 60.712230][ T5066] ? __pfx_bpf_prog_load+0x10/0x10 [ 60.717362][ T5066] ? __pfx___might_resched+0x10/0x10 [ 60.722668][ T5066] ? __might_fault+0xc6/0x120 [ 60.727348][ T5066] ? bpf_lsm_bpf+0x9/0x10 [ 60.731680][ T5066] ? security_bpf+0x87/0xb0 [ 60.736212][ T5066] __sys_bpf+0x4ee/0x810 [ 60.740473][ T5066] ? __pfx___sys_bpf+0x10/0x10 [ 60.745258][ T5066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.751606][ T5066] ? do_syscall_64+0x10a/0x240 [ 60.756396][ T5066] __x64_sys_bpf+0x7c/0x90 [ 60.760837][ T5066] do_syscall_64+0xfb/0x240 [ 60.765347][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.771245][ T5066] RIP: 0033:0x7fa7fbcaf629 [ 60.775660][ T5066] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.795465][ T5066] RSP: 002b:00007fffea56be08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.804024][ T5066] RAX: ffffffffffffffda RBX: 00007fffea56bfd8 RCX: 00007fa7fbcaf629 [ 60.812009][ T5066] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 60.819986][ T5066] RBP: 00007fa7fbd22610 R08: 0000000000000000 R09: 00007fffea56bfd8 [ 60.827966][ T5066] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 60.835943][ T5066] R13: 00007fffea56bfc8 R14: 0000000000000001 R15: 0000000000000001 [ 60.843930][ T5066] [ 60.847218][ T5066] Kernel Offset: disabled [ 60.851595][ T5066] Rebooting in 86400 seconds..