================================================================================ UBSAN: array-index-out-of-bounds in kernel/bpf/helpers.c:776:13 index -1 is out of range for type 'char[3][512]' CPU: 1 PID: 6470 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-00123-g60534eef4739 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_out_of_bounds+0x13a/0x160 lib/ubsan.c:282 try_get_fmt_tmp_buf kernel/bpf/helpers.c:776 [inline] bpf_bprintf_prepare+0x132e/0x1360 kernel/bpf/helpers.c:818 ____bpf_snprintf kernel/bpf/helpers.c:1036 [inline] bpf_snprintf+0x155/0x210 kernel/bpf/helpers.c:1022 bpf_prog_4b0c6afe02c93bf0+0x49/0x6f bpf_dispatcher_nop_func include/linux/bpf.h:987 [inline] __bpf_prog_run include/linux/filter.h:600 [inline] bpf_prog_run include/linux/filter.h:607 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2275 [inline] bpf_trace_run2+0x133/0x290 kernel/trace/bpf_trace.c:2314 __bpf_trace_sys_enter+0x62/0x70 include/trace/events/syscalls.h:18 __traceiter_sys_enter+0x2a/0x40 include/trace/events/syscalls.h:18 trace_sys_enter include/trace/events/syscalls.h:18 [inline] syscall_trace_enter kernel/entry/common.c:81 [inline] __syscall_enter_from_user_work kernel/entry/common.c:94 [inline] syscall_enter_from_user_mode+0x12c/0x190 kernel/entry/common.c:112 do_syscall_64+0x1e/0xb0 arch/x86/entry/common.c:77 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f18ce07a853 Code: 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d b1 56 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 RSP: 002b:00007ffc73063978 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 00000000000002ed RCX: 00007f18ce07a853 RDX: 0000000040000001 RSI: 00007ffc730639dc RDI: 00000000ffffffff RBP: 00007ffc730639dc R08: 00007ffc73104080 R09: 00007ffc731040b0 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 R13: 000000000006f333 R14: 000000000006ef42 R15: 000000000000001f ================================================================================ BUG: scheduling while atomic: syz-executor.0/6470/0x00000002 Modules linked in: Preemption disabled at: [] schedule+0xbc/0x180 kernel/sched/core.c:6804 CPU: 1 PID: 6470 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-00123-g60534eef4739 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 __schedule_bug+0x195/0x260 kernel/sched/core.c:5960 schedule_debug kernel/sched/core.c:5987 [inline] __schedule+0xcf7/0x1550 kernel/sched/core.c:6622 schedule+0xc3/0x180 kernel/sched/core.c:6805 exit_to_user_mode_loop+0x4e/0xa0 kernel/entry/common.c:159 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f18ce07a853 Code: 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d b1 56 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 RSP: 002b:00007ffc73063978 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: 0000000000000000 RBX: 00000000000002ed RCX: 00007f18ce07a853 RDX: 0000000040000001 RSI: 00007ffc730639dc RDI: 00000000ffffffff RBP: 00007ffc730639dc R08: 00007ffc73104080 R09: 00007ffc731040b0 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 R13: 000000000006f333 R14: 000000000006ef42 R15: 000000000000001f