================================================================================ UBSAN: array-index-out-of-bounds in kernel/bpf/helpers.c:776:13 index -6 is out of range for type 'char[3][512]' CPU: 0 PID: 90 Comm: klogd Tainted: G W 6.1.75-syzkaller-00037-gdcb09569bbff #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_out_of_bounds+0x13a/0x160 lib/ubsan.c:282 try_get_fmt_tmp_buf kernel/bpf/helpers.c:776 [inline] bpf_bprintf_prepare+0x132e/0x1360 kernel/bpf/helpers.c:818 ____bpf_trace_printk kernel/trace/bpf_trace.c:385 [inline] bpf_trace_printk+0x14a/0x300 kernel/trace/bpf_trace.c:376 bpf_prog_bf7b426aeed8fce8+0x56/0x58 bpf_dispatcher_nop_func include/linux/bpf.h:987 [inline] __bpf_prog_run include/linux/filter.h:600 [inline] bpf_prog_run include/linux/filter.h:607 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2275 [inline] bpf_trace_run2+0x133/0x290 kernel/trace/bpf_trace.c:2314 __bpf_trace_sys_enter+0x62/0x70 include/trace/events/syscalls.h:18 trace_sys_enter include/trace/events/syscalls.h:18 [inline] syscall_trace_enter kernel/entry/common.c:81 [inline] __syscall_enter_from_user_work kernel/entry/common.c:94 [inline] syscall_enter_from_user_mode+0x12c/0x190 kernel/entry/common.c:112 do_syscall_64+0x1e/0xb0 arch/x86/entry/common.c:77 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5ae0df49b5 Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 RSP: 002b:00007fff035499e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ae0df49b5 RDX: 000000000000005c RSI: 000055cb0f9ab6b0 RDI: 0000000000000003 RBP: 000055cb0f9a52c0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 R13: 00007f5ae0f82212 R14: 00007fff03549ae8 R15: 0000000000000000 ================================================================================ BUG: using smp_processor_id() in preemptible [00000000] code: klogd/90 caller is debug_smp_processor_id+0x17/0x20 lib/smp_processor_id.c:60 CPU: 0 PID: 90 Comm: klogd Tainted: G W 6.1.75-syzkaller-00037-gdcb09569bbff #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 check_preemption_disabled+0x109/0x110 lib/smp_processor_id.c:49 debug_smp_processor_id+0x17/0x20 lib/smp_processor_id.c:60 ___slab_alloc+0x712/0xb80 mm/slub.c:3204 __slab_alloc+0x5d/0xa0 mm/slub.c:3302 slab_alloc_node mm/slub.c:3387 [inline] kmem_cache_alloc_node+0x1c9/0x2d0 mm/slub.c:3466 __alloc_skb+0xcc/0x2d0 net/core/skbuff.c:505 alloc_skb include/linux/skbuff.h:1283 [inline] alloc_skb_with_frags+0xa6/0x680 net/core/skbuff.c:6156 sock_alloc_send_pskb+0x915/0xa50 net/core/sock.c:2751 unix_dgram_sendmsg+0x5b1/0x2050 net/unix/af_unix.c:1943 sock_sendmsg_nosec net/socket.c:716 [inline] __sock_sendmsg net/socket.c:728 [inline] __sys_sendto+0x480/0x600 net/socket.c:2138 __do_sys_sendto net/socket.c:2150 [inline] __se_sys_sendto net/socket.c:2146 [inline] __x64_sys_sendto+0xe5/0x100 net/socket.c:2146 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5ae0df49b5 Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 RSP: 002b:00007fff035499e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ae0df49b5 RDX: 000000000000004f RSI: 000055cb0f9ab6b0 RDI: 0000000000000003 RBP: 000055cb0f9a52c0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 R13: 00007f5ae0f82212 R14: 00007fff03549ae8 R15: 0000000000000000