================================================================================ UBSAN: array-index-out-of-bounds in kernel/bpf/helpers.c:776:13 index -1 is out of range for type 'char[3][512]' CPU: 0 PID: 301 Comm: syz-fuzzer Tainted: G W 6.1.75-syzkaller-00123-g60534eef4739 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_out_of_bounds+0x13a/0x160 lib/ubsan.c:282 try_get_fmt_tmp_buf kernel/bpf/helpers.c:776 [inline] bpf_bprintf_prepare+0x132e/0x1360 kernel/bpf/helpers.c:818 ____bpf_trace_printk kernel/trace/bpf_trace.c:385 [inline] bpf_trace_printk+0x14a/0x300 kernel/trace/bpf_trace.c:376 bpf_prog_627f579d68777422+0x3d/0x3f bpf_dispatcher_nop_func include/linux/bpf.h:987 [inline] __bpf_prog_run include/linux/filter.h:600 [inline] bpf_prog_run include/linux/filter.h:607 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2275 [inline] bpf_trace_run2+0x133/0x290 kernel/trace/bpf_trace.c:2314 __bpf_trace_sys_enter+0x62/0x70 include/trace/events/syscalls.h:18 __traceiter_sys_enter+0x2a/0x40 include/trace/events/syscalls.h:18 trace_sys_enter include/trace/events/syscalls.h:18 [inline] syscall_trace_enter kernel/entry/common.c:81 [inline] __syscall_enter_from_user_work kernel/entry/common.c:94 [inline] syscall_enter_from_user_mode+0x12c/0x190 kernel/entry/common.c:112 do_syscall_64+0x1e/0xb0 arch/x86/entry/common.c:77 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x40720e Code: 48 83 ec 38 e8 13 00 00 00 48 83 c4 38 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 RSP: 002b:000000c000330d20 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000040720e RDX: 00000000000000f0 RSI: 000000c00042a200 RDI: 0000000000000003 RBP: 000000c000330d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000216 R12: 000000c000330ea0 R13: 0000000000000001 R14: 000000c0000061a0 R15: 000000000000000f ================================================================================ BUG: scheduling while atomic: syz-fuzzer/301/0x00000002 Modules linked in: Preemption disabled at: [] spin_lock_bh include/linux/spinlock.h:355 [inline] [] release_sock+0x30/0x1b0 net/core/sock.c:3512 CPU: 0 PID: 301 Comm: syz-fuzzer Tainted: G W 6.1.75-syzkaller-00123-g60534eef4739 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x1b lib/dump_stack.c:113 __schedule_bug+0x195/0x260 kernel/sched/core.c:5960 schedule_debug kernel/sched/core.c:5987 [inline] __schedule+0xcf7/0x1550 kernel/sched/core.c:6622 schedule+0xc3/0x180 kernel/sched/core.c:6805 exit_to_user_mode_loop+0x4e/0xa0 kernel/entry/common.c:159 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x40720e Code: 48 83 ec 38 e8 13 00 00 00 48 83 c4 38 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 RSP: 002b:000000c000330d20 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 RAX: 00000000000000f0 RBX: 0000000000000003 RCX: 000000000040720e RDX: 00000000000000f0 RSI: 000000c00042a200 RDI: 0000000000000003 RBP: 000000c000330d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000216 R12: 000000c000330ea0 R13: 0000000000000001 R14: 000000c0000061a0 R15: 000000000000000f