Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. executing program [ 52.650532][ T3544] ================================================================================ [ 52.659869][ T3544] UBSAN: shift-out-of-bounds in kernel/bpf/verifier.c:9211:63 [ 52.667380][ T3544] shift exponent 1073741824 is too large for 32-bit type 's32' (aka 'int') [ 52.676000][ T3544] CPU: 0 PID: 3544 Comm: syz-executor176 Not tainted 6.1.69-syzkaller #0 [ 52.684407][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 52.694457][ T3544] Call Trace: [ 52.697757][ T3544] [ 52.700684][ T3544] dump_stack_lvl+0x1e3/0x2cb [ 52.705370][ T3544] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.710837][ T3544] ? panic+0x75d/0x75d [ 52.714900][ T3544] ? stack_trace_save+0x113/0x1c0 [ 52.719921][ T3544] __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 [ 52.726350][ T3544] ? reg_bounds_sync+0x7d7/0xf10 [ 52.731281][ T3544] scalar32_min_max_arsh+0x564/0x5f0 [ 52.736557][ T3544] ? adjust_reg_min_max_vals+0x7b6/0x6360 [ 52.742272][ T3544] adjust_reg_min_max_vals+0x3d1d/0x6360 [ 52.747911][ T3544] ? zext_32_to_64+0x270/0x270 [ 52.752682][ T3544] ? reg_bounds_sync+0x7d7/0xf10 [ 52.757618][ T3544] ? check_reg_arg+0x463/0x870 [ 52.762404][ T3544] do_check+0x9dd3/0xf550 [ 52.766721][ T3544] ? stack_trace_snprint+0xe0/0xe0 [ 52.771870][ T3544] ? init_func_state+0x3b0/0x3b0 [ 52.776797][ T3544] ? mark_reg_not_init+0x92/0x650 [ 52.781839][ T3544] ? memcpy+0x3c/0x60 [ 52.785812][ T3544] ? btf_check_subprog_arg_match+0x14c/0x2b0 [ 52.791801][ T3544] do_check_common+0x8cb/0x1110 [ 52.796657][ T3544] bpf_check+0x66ca/0x16230 [ 52.801167][ T3544] ? __lock_acquire+0x1f80/0x1f80 [ 52.806200][ T3544] ? validate_chain+0x112/0x5950 [ 52.811135][ T3544] ? mark_lock+0x9a/0x340 [ 52.815464][ T3544] ? validate_chain+0x112/0x5950 [ 52.820408][ T3544] ? validate_chain+0x112/0x5950 [ 52.825357][ T3544] ? reacquire_held_locks+0x660/0x660 [ 52.830810][ T3544] ? mark_lock+0x9a/0x340 [ 52.835143][ T3544] ? reacquire_held_locks+0x660/0x660 [ 52.840599][ T3544] ? validate_chain+0x112/0x5950 [ 52.845531][ T3544] ? bpf_get_btf_vmlinux+0x10/0x10 [ 52.850633][ T3544] ? validate_chain+0x112/0x5950 [ 52.855592][ T3544] ? mark_lock+0x9a/0x340 [ 52.859911][ T3544] ? reacquire_held_locks+0x660/0x660 [ 52.865290][ T3544] ? mark_lock+0x9a/0x340 [ 52.869636][ T3544] ? reacquire_held_locks+0x660/0x660 [ 52.875004][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 52.880021][ T3544] ? reacquire_held_locks+0x660/0x660 [ 52.885390][ T3544] ? mark_lock+0x9a/0x340 [ 52.889731][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 52.894748][ T3544] ? mark_lock+0x9a/0x340 [ 52.899070][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 52.904116][ T3544] ? ktime_get_with_offset+0x101/0x320 [ 52.909565][ T3544] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 52.915538][ T3544] ? print_irqtrace_events+0x210/0x210 [ 52.920989][ T3544] ? ktime_get_with_offset+0x101/0x320 [ 52.926438][ T3544] ? seqcount_lockdep_reader_access+0x153/0x220 [ 52.932675][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 52.937871][ T3544] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 52.944108][ T3544] ? ktime_get_real_ts64+0x460/0x460 [ 52.949388][ T3544] ? __might_fault+0xa1/0x110 [ 52.954056][ T3544] ? memset+0x1f/0x40 [ 52.958029][ T3544] ? bpf_obj_name_cpy+0x186/0x1d0 [ 52.963055][ T3544] bpf_prog_load+0x12df/0x1bb0 [ 52.967827][ T3544] ? map_freeze+0x390/0x390 [ 52.972334][ T3544] ? __might_fault+0xa1/0x110 [ 52.977010][ T3544] ? __might_fault+0xbd/0x110 [ 52.981690][ T3544] ? bpf_lsm_bpf+0x5/0x10 [ 52.986019][ T3544] ? security_bpf+0x7d/0xa0 [ 52.990515][ T3544] __sys_bpf+0x382/0x6c0 [ 52.994756][ T3544] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 53.000130][ T3544] ? print_irqtrace_events+0x210/0x210 [ 53.005588][ T3544] ? syscall_enter_from_user_mode+0x2e/0x220 [ 53.011558][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 53.016744][ T3544] __x64_sys_bpf+0x78/0x90 [ 53.021152][ T3544] do_syscall_64+0x3d/0xb0 [ 53.025562][ T3544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.031461][ T3544] RIP: 0033:0x7f2c376d43e9 [ 53.035883][ T3544] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.055479][ T3544] RSP: 002b:00007ffc08c065b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.063881][ T3544] RAX: ffffffffffffffda RBX: 00007ffc08c06798 RCX: 00007f2c376d43e9 [ 53.071841][ T3544] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 53.079800][ T3544] RBP: 00007f2c37747610 R08: 0000000000000000 R09: 0000000000000000 [ 53.087761][ T3544] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 53.095727][ T3544] R13: 00007ffc08c06788 R14: 0000000000000001 R15: 0000000000000001 [ 53.103787][ T3544] [ 53.107290][ T3544] ================================================================================ [ 53.116617][ T3544] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 53.123800][ T3544] CPU: 0 PID: 3544 Comm: syz-executor176 Not tainted 6.1.69-syzkaller #0 [ 53.132196][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 53.142237][ T3544] Call Trace: [ 53.145502][ T3544] [ 53.148424][ T3544] dump_stack_lvl+0x1e3/0x2cb [ 53.153191][ T3544] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.158648][ T3544] ? panic+0x75d/0x75d [ 53.162710][ T3544] ? vscnprintf+0x59/0x80 [ 53.167042][ T3544] panic+0x318/0x75d [ 53.170927][ T3544] ? check_panic_on_warn+0x1d/0xa0 [ 53.176026][ T3544] ? memcpy_page_flushcache+0xfc/0xfc [ 53.181383][ T3544] ? dump_stack_lvl+0x24f/0x2cb [ 53.186239][ T3544] check_panic_on_warn+0x7e/0xa0 [ 53.191164][ T3544] __ubsan_handle_shift_out_of_bounds+0x3de/0x420 [ 53.197571][ T3544] ? reg_bounds_sync+0x7d7/0xf10 [ 53.202507][ T3544] scalar32_min_max_arsh+0x564/0x5f0 [ 53.207784][ T3544] ? adjust_reg_min_max_vals+0x7b6/0x6360 [ 53.213505][ T3544] adjust_reg_min_max_vals+0x3d1d/0x6360 [ 53.219155][ T3544] ? zext_32_to_64+0x270/0x270 [ 53.223928][ T3544] ? reg_bounds_sync+0x7d7/0xf10 [ 53.228878][ T3544] ? check_reg_arg+0x463/0x870 [ 53.233665][ T3544] do_check+0x9dd3/0xf550 [ 53.237987][ T3544] ? stack_trace_snprint+0xe0/0xe0 [ 53.243127][ T3544] ? init_func_state+0x3b0/0x3b0 [ 53.248061][ T3544] ? mark_reg_not_init+0x92/0x650 [ 53.253081][ T3544] ? memcpy+0x3c/0x60 [ 53.257051][ T3544] ? btf_check_subprog_arg_match+0x14c/0x2b0 [ 53.263115][ T3544] do_check_common+0x8cb/0x1110 [ 53.267969][ T3544] bpf_check+0x66ca/0x16230 [ 53.272502][ T3544] ? __lock_acquire+0x1f80/0x1f80 [ 53.277542][ T3544] ? validate_chain+0x112/0x5950 [ 53.282485][ T3544] ? mark_lock+0x9a/0x340 [ 53.286817][ T3544] ? validate_chain+0x112/0x5950 [ 53.291766][ T3544] ? validate_chain+0x112/0x5950 [ 53.296790][ T3544] ? reacquire_held_locks+0x660/0x660 [ 53.302158][ T3544] ? mark_lock+0x9a/0x340 [ 53.306482][ T3544] ? reacquire_held_locks+0x660/0x660 [ 53.311852][ T3544] ? validate_chain+0x112/0x5950 [ 53.316786][ T3544] ? bpf_get_btf_vmlinux+0x10/0x10 [ 53.321912][ T3544] ? validate_chain+0x112/0x5950 [ 53.326875][ T3544] ? mark_lock+0x9a/0x340 [ 53.331198][ T3544] ? reacquire_held_locks+0x660/0x660 [ 53.336579][ T3544] ? mark_lock+0x9a/0x340 [ 53.340922][ T3544] ? reacquire_held_locks+0x660/0x660 [ 53.346301][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 53.351344][ T3544] ? reacquire_held_locks+0x660/0x660 [ 53.356745][ T3544] ? mark_lock+0x9a/0x340 [ 53.361088][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 53.366222][ T3544] ? mark_lock+0x9a/0x340 [ 53.370566][ T3544] ? __lock_acquire+0x125b/0x1f80 [ 53.375619][ T3544] ? ktime_get_with_offset+0x101/0x320 [ 53.381083][ T3544] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.387080][ T3544] ? print_irqtrace_events+0x210/0x210 [ 53.392554][ T3544] ? ktime_get_with_offset+0x101/0x320 [ 53.398016][ T3544] ? seqcount_lockdep_reader_access+0x153/0x220 [ 53.404268][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 53.409477][ T3544] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 53.415721][ T3544] ? ktime_get_real_ts64+0x460/0x460 [ 53.421015][ T3544] ? __might_fault+0xa1/0x110 [ 53.425691][ T3544] ? memset+0x1f/0x40 [ 53.429661][ T3544] ? bpf_obj_name_cpy+0x186/0x1d0 [ 53.434770][ T3544] bpf_prog_load+0x12df/0x1bb0 [ 53.439538][ T3544] ? map_freeze+0x390/0x390 [ 53.444056][ T3544] ? __might_fault+0xa1/0x110 [ 53.448737][ T3544] ? __might_fault+0xbd/0x110 [ 53.453426][ T3544] ? bpf_lsm_bpf+0x5/0x10 [ 53.457751][ T3544] ? security_bpf+0x7d/0xa0 [ 53.462254][ T3544] __sys_bpf+0x382/0x6c0 [ 53.466508][ T3544] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 53.472066][ T3544] ? print_irqtrace_events+0x210/0x210 [ 53.477532][ T3544] ? syscall_enter_from_user_mode+0x2e/0x220 [ 53.483508][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 53.488705][ T3544] __x64_sys_bpf+0x78/0x90 [ 53.493125][ T3544] do_syscall_64+0x3d/0xb0 [ 53.497539][ T3544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.503531][ T3544] RIP: 0033:0x7f2c376d43e9 [ 53.507945][ T3544] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.527551][ T3544] RSP: 002b:00007ffc08c065b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.535959][ T3544] RAX: ffffffffffffffda RBX: 00007ffc08c06798 RCX: 00007f2c376d43e9 [ 53.543916][ T3544] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 53.551877][ T3544] RBP: 00007f2c37747610 R08: 0000000000000000 R09: 0000000000000000 [ 53.559843][ T3544] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 53.567808][ T3544] R13: 00007ffc08c06788 R14: 0000000000000001 R15: 0000000000000001 [ 53.575806][ T3544] [ 53.578936][ T3544] Kernel Offset: disabled [ 53.583310][ T3544] Rebooting in 86400 seconds..