================================================================================
UBSAN: array-index-out-of-bounds in kernel/bpf/helpers.c:736:13
index -1 is out of range for type 'char[3][512]'
CPU: 0 PID: 328 Comm: syz-executor109 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
 dump_stack+0x15/0x17 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0x118/0x140 lib/ubsan.c:282
 try_get_fmt_tmp_buf kernel/bpf/helpers.c:736 [inline]
 bpf_bprintf_prepare+0x132e/0x1360 kernel/bpf/helpers.c:778
 ____bpf_trace_printk kernel/trace/bpf_trace.c:377 [inline]
 bpf_trace_printk+0x14a/0x300 kernel/trace/bpf_trace.c:368
 bpf_prog_cfddb232a7dfb698+0x2f/0x3e0
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:625 [inline]
 bpf_prog_run include/linux/filter.h:632 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1883 [inline]
 bpf_trace_run3+0x11e/0x250 kernel/trace/bpf_trace.c:1921
 __bpf_trace_kmem_cache_free+0x99/0xc0 include/trace/events/kmem.h:138
 __traceiter_kmem_cache_free+0x32/0x50 include/trace/events/kmem.h:138
 trace_kmem_cache_free include/trace/events/kmem.h:138 [inline]
 kmem_cache_free+0x2c3/0x2e0 mm/slub.c:3536
 __d_free fs/dcache.c:273 [inline]
 dentry_free+0xd5/0x160 fs/dcache.c:350
 __dentry_kill+0x505/0x660 fs/dcache.c:596
 dentry_kill+0xc0/0x2a0
 dput+0x165/0x320 fs/dcache.c:888
 __fput+0x662/0x910 fs/file_table.c:288
 ____fput+0x15/0x20 fs/file_table.c:308
 task_work_run+0x129/0x190 kernel/task_work.c:164
 exit_task_work include/linux/task_work.h:32 [inline]
 do_exit+0xc48/0x2ca0 kernel/exit.c:878
 do_group_exit+0x141/0x310 kernel/exit.c:1000
 __do_sys_exit_group kernel/exit.c:1011 [inline]
 __se_sys_exit_group kernel/exit.c:1009 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1009
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f8b8e892039
Code: Unable to access opcode bytes at RIP 0x7f8b8e89200f.
RSP: 002b:00007ffe84094e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b8e892039
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f8b8e90e2b0 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b8e90e2b0
R13: 0000000000000000 R14: 00007f8b8e90ed20 R15: 00007f8b8e8631c0
 </TASK>
================================================================================
BUG: scheduling while atomic: syz-executor109/328/0x00000002
Modules linked in:
Preemption disabled at:
[<ffffffff8165ea9a>] is_module_text_address+0x1a/0x140 kernel/module.c:4811
CPU: 0 PID: 328 Comm: syz-executor109 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
 dump_stack+0x15/0x17 lib/dump_stack.c:113
 __schedule_bug+0x195/0x260 kernel/sched/core.c:5707
 schedule_debug kernel/sched/core.c:5734 [inline]
 __schedule+0xd19/0x1590 kernel/sched/core.c:6402
 do_task_dead+0x99/0xa0 kernel/sched/core.c:6530
 do_exit+0x2089/0x2ca0 kernel/exit.c:929
 do_group_exit+0x141/0x310 kernel/exit.c:1000
 __do_sys_exit_group kernel/exit.c:1011 [inline]
 __se_sys_exit_group kernel/exit.c:1009 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1009
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f8b8e892039
Code: Unable to access opcode bytes at RIP 0x7f8b8e89200f.
RSP: 002b:00007ffe84094e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b8e892039
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f8b8e90e2b0 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b8e90e2b0
R13: 0000000000000000 R14: 00007f8b8e90ed20 R15: 00007f8b8e8631c0
 </TASK>