================================================================================
UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56
index 4 is out of range for type 'insn_byte_t [4]'
CPU: 0 PID: 23871 Comm: syz-executor.0 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_out_of_bounds.cold+0x63/0x6f lib/ubsan.c:383
 is_prefix_bad arch/x86/kernel/uprobes.c:276 [inline]
 uprobe_init_insn arch/x86/kernel/uprobes.c:299 [inline]
 arch_uprobe_analyze_insn+0x9d8/0xaa0 arch/x86/kernel/uprobes.c:868
 prepare_uprobe kernel/events/uprobes.c:611 [inline]
 install_breakpoint kernel/events/uprobes.c:654 [inline]
 register_for_each_vma+0xbf5/0xe50 kernel/events/uprobes.c:822
 uprobe_apply+0xeb/0x160 kernel/events/uprobes.c:970
 uprobe_perf_open kernel/trace/trace_uprobe.c:1067 [inline]
 trace_uprobe_register+0x4ac/0x6f0 kernel/trace/trace_uprobe.c:1207
 perf_trace_event_open kernel/trace/trace_event_perf.c:181 [inline]
 perf_trace_event_init kernel/trace/trace_event_perf.c:203 [inline]
 perf_trace_event_init+0x175/0xaa0 kernel/trace/trace_event_perf.c:190
 perf_uprobe_init+0x165/0x200 kernel/trace/trace_event_perf.c:330
 perf_uprobe_event_init+0xf8/0x190 kernel/events/core.c:8588
 perf_try_init_event+0x124/0x2e0 kernel/events/core.c:9861
 perf_init_event kernel/events/core.c:9892 [inline]
 perf_event_alloc.part.0+0x1bad/0x3000 kernel/events/core.c:10166
 perf_event_alloc kernel/events/core.c:10536 [inline]
 __do_sys_perf_event_open kernel/events/core.c:10637 [inline]
 __se_sys_perf_event_open+0x54e/0x27c0 kernel/events/core.c:10526
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fd5b8be5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000024cc0 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
RBP: 000000000118c018 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffefc4ebd2f R14: 00007fd5b8be69c0 R15: 000000000118bfd4
================================================================================
audit: type=1804 audit(1602980933.224:69): pid=23853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir507782661/syzkaller.9K5rJZ/845/bus" dev="sda1" ino=17352 res=1
EXT4-fs warning (device loop2): read_mmp_block:110: Error -117 while reading MMP block 64
EXT4-fs (loop4): Unrecognized mount option "00000000000000000003" or missing value
audit: type=1804 audit(1602980933.294:70): pid=23840 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir507782661/syzkaller.9K5rJZ/845/bus" dev="sda1" ino=17352 res=1
xt_TPROXY: Can be used only with -p tcp or -p udp
audit: type=1804 audit(1602980933.294:71): pid=23898 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir507782661/syzkaller.9K5rJZ/845/bus" dev="sda1" ino=17352 res=1
EXT4-fs (loop4): Unrecognized mount option "00000000000000000003" or missing value
audit: type=1804 audit(1602980933.294:72): pid=23853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir507782661/syzkaller.9K5rJZ/845/bus" dev="sda1" ino=17352 res=1
audit: type=1804 audit(1602980934.184:73): pid=23953 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir257799496/syzkaller.xWH6Hq/852/file1/file0" dev="loop4" ino=4 res=1
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

audit: type=1800 audit(1602980936.204:74): pid=24007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17381 res=0
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops
caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
netlink: 'syz-executor.1': attribute type 16 has an invalid length.
IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
vhci_hcd: connection closed
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device
vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(4)
vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
netlink: 'syz-executor.1': attribute type 16 has an invalid length.
vhci_hcd: connection closed
vhci_hcd: stop threads
vhci_hcd: release socket
IPv6: ADDRCONF(NETDEV_CHANGE): vcan2: link becomes ready
vhci_hcd: disconnect device
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

netlink: 'syz-executor.0': attribute type 1 has an invalid length.
bond1 (unregistering): Released all slaves
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
bond1 (unregistering): Released all slaves
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

audit: type=1804 audit(1602980939.014:75): pid=24447 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir101239724/syzkaller.ZGFVQH/833/bus" dev="sda1" ino=17426 res=1
audit: type=1804 audit(1602980939.044:76): pid=24444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir101239724/syzkaller.ZGFVQH/833/bus" dev="sda1" ino=17426 res=1
kvm: pic: non byte read
pic_ioport_write: 29 callbacks suppressed
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
audit: type=1804 audit(1602980939.044:77): pid=24444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir101239724/syzkaller.ZGFVQH/833/bus" dev="sda1" ino=17426 res=1
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
audit: type=1804 audit(1602980939.044:78): pid=24444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir101239724/syzkaller.ZGFVQH/833/bus" dev="sda1" ino=17426 res=1
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: level sensitive irq not supported
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
team0: Device ipvlan1 failed to register rx_handler
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

EXT4-fs (loop0): old and new quota format mixing
netlink: 'syz-executor.3': attribute type 1 has an invalid length.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
device bond1 entered promiscuous mode
team0: Device ipvlan1 failed to register rx_handler
EXT4-fs warning (device loop2): ext4_multi_mount_protect:325: MMP startup interrupted, failing mount

SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24732 comm=syz-executor.1
netlink: 'syz-executor.1': attribute type 5 has an invalid length.
input: syz1 as /devices/virtual/input/input10
input: syz1 as /devices/virtual/input/input11
SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24732 comm=syz-executor.1