================================================================================
UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56
index 4 is out of range for type 'insn_byte_t [4]'
CPU: 1 PID: 10999 Comm: syz-executor.5 Not tainted 4.19.150-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_out_of_bounds.cold+0x63/0x6f lib/ubsan.c:383
 is_prefix_bad arch/x86/kernel/uprobes.c:276 [inline]
 uprobe_init_insn arch/x86/kernel/uprobes.c:299 [inline]
 arch_uprobe_analyze_insn+0x9d8/0xaa0 arch/x86/kernel/uprobes.c:868
 prepare_uprobe kernel/events/uprobes.c:611 [inline]
 install_breakpoint kernel/events/uprobes.c:654 [inline]
 register_for_each_vma+0xbf5/0xe50 kernel/events/uprobes.c:822
 uprobe_apply+0xeb/0x160 kernel/events/uprobes.c:970
 uprobe_perf_open kernel/trace/trace_uprobe.c:1067 [inline]
 trace_uprobe_register+0x4ac/0x6f0 kernel/trace/trace_uprobe.c:1207
 perf_trace_event_open kernel/trace/trace_event_perf.c:181 [inline]
 perf_trace_event_init kernel/trace/trace_event_perf.c:203 [inline]
 perf_trace_event_init+0x175/0xaa0 kernel/trace/trace_event_perf.c:190
 perf_uprobe_init+0x165/0x200 kernel/trace/trace_event_perf.c:330
 perf_uprobe_event_init+0xf8/0x190 kernel/events/core.c:8587
 perf_try_init_event+0x124/0x2e0 kernel/events/core.c:9860
 perf_init_event kernel/events/core.c:9891 [inline]
 perf_event_alloc.part.0+0x1bad/0x3000 kernel/events/core.c:10165
 perf_event_alloc kernel/events/core.c:10535 [inline]
 __do_sys_perf_event_open kernel/events/core.c:10636 [inline]
 __se_sys_perf_event_open+0x54e/0x27c0 kernel/events/core.c:10525
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f5fa7103c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000024cc0 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
RBP: 000000000118c018 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007fff9123659f R14: 00007f5fa71049c0 R15: 000000000118bfd4
================================================================================
kvm [11041]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0x187 data 0xb30
kvm [11041]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0xc1 data 0xa
device team1 entered promiscuous mode
syz-executor.3 (11010) used greatest stack depth: 23008 bytes left
kvm [11097]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0x187 data 0xb30
kvm [11097]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0xc1 data 0xa
kvm [11142]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0x187 data 0xb30
kvm [11142]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0xc1 data 0xa
device team1 entered promiscuous mode
kvm [11181]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0x187 data 0xb30
kvm [11181]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0xc1 data 0xa
kauditd_printk_skb: 4 callbacks suppressed
audit: type=1804 audit(1602320127.099:23): pid=11218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir720084327/syzkaller.jxRNw6/98/file1/file0" dev="loop5" ino=3 res=1
netlink: 'syz-executor.1': attribute type 21 has an invalid length.
audit: type=1800 audit(1602320127.199:24): pid=11228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16265 res=0
audit: type=1800 audit(1602320127.199:25): pid=11228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16265 res=0
EXT4-fs (loop4): unsupported inode size: 0
netlink: 'syz-executor.1': attribute type 21 has an invalid length.
EXT4-fs (loop4): blocksize: 4096
audit: type=1800 audit(1602320127.579:26): pid=11245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16266 res=0
audit: type=1800 audit(1602320127.579:27): pid=11245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16266 res=0
audit: type=1800 audit(1602320127.899:28): pid=11260 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16254 res=0
netlink: 'syz-executor.1': attribute type 21 has an invalid length.
audit: type=1800 audit(1602320127.919:29): pid=11260 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16254 res=0
EXT4-fs (loop4): unsupported inode size: 0
EXT4-fs (loop4): blocksize: 4096
audit: type=1804 audit(1602320128.069:30): pid=11264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir720084327/syzkaller.jxRNw6/99/file1/file0" dev="loop5" ino=4 res=1
audit: type=1800 audit(1602320128.189:31): pid=11279 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16277 res=0
audit: type=1800 audit(1602320128.189:32): pid=11279 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16277 res=0
EXT4-fs (loop4): unsupported inode size: 0
EXT4-fs (loop4): blocksize: 4096
EXT4-fs (loop4): unsupported inode size: 0
EXT4-fs (loop4): blocksize: 4096
kauditd_printk_skb: 11 callbacks suppressed
audit: type=1804 audit(1602320132.409:44): pid=11360 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir417822113/syzkaller.JOxT6i/148/file1/file0" dev="loop0" ino=16 res=1
audit: type=1804 audit(1602320132.509:45): pid=11366 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir110792606/syzkaller.QQNtZr/146/file1/file0" dev="sda1" ino=15778 res=1
audit: type=1804 audit(1602320132.559:46): pid=11377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir201872045/syzkaller.RdWIkT/133/file0" dev="sda1" ino=16294 res=1
audit: type=1804 audit(1602320133.069:47): pid=11390 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir720084327/syzkaller.jxRNw6/103/file1/file0" dev="sda1" ino=16295 res=1
audit: type=1804 audit(1602320133.129:48): pid=11386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir003747764/syzkaller.8ayIwH/135/file1/file0" dev="loop3" ino=17 res=1
audit: type=1804 audit(1602320133.469:49): pid=11396 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir089850335/syzkaller.swZJUw/144/file1/file0" dev="loop2" ino=18 res=1
audit: type=1804 audit(1602320134.079:50): pid=11410 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir417822113/syzkaller.JOxT6i/149/file0" dev="sda1" ino=16297 res=1
audit: type=1804 audit(1602320134.179:51): pid=11416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir720084327/syzkaller.jxRNw6/104/file1/file0" dev="loop5" ino=19 res=1