================================================================================
UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56
index 4 is out of range for type 'insn_byte_t [4]'
CPU: 1 PID: 9050 Comm: syz-executor.1 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_out_of_bounds.cold+0x63/0x6f lib/ubsan.c:383
 is_prefix_bad arch/x86/kernel/uprobes.c:276 [inline]
 uprobe_init_insn arch/x86/kernel/uprobes.c:299 [inline]
 arch_uprobe_analyze_insn+0x9d8/0xaa0 arch/x86/kernel/uprobes.c:868
 prepare_uprobe kernel/events/uprobes.c:611 [inline]
 install_breakpoint kernel/events/uprobes.c:654 [inline]
 register_for_each_vma+0xbf5/0xe50 kernel/events/uprobes.c:822
 uprobe_apply+0xeb/0x160 kernel/events/uprobes.c:970
 uprobe_perf_open kernel/trace/trace_uprobe.c:1067 [inline]
 trace_uprobe_register+0x4ac/0x6f0 kernel/trace/trace_uprobe.c:1207
 perf_trace_event_open kernel/trace/trace_event_perf.c:181 [inline]
 perf_trace_event_init kernel/trace/trace_event_perf.c:203 [inline]
 perf_trace_event_init+0x175/0xaa0 kernel/trace/trace_event_perf.c:190
 perf_uprobe_init+0x165/0x200 kernel/trace/trace_event_perf.c:330
 perf_uprobe_event_init+0xf8/0x190 kernel/events/core.c:8587
 perf_try_init_event+0x124/0x2e0 kernel/events/core.c:9860
 perf_init_event kernel/events/core.c:9891 [inline]
 perf_event_alloc.part.0+0x1bad/0x3000 kernel/events/core.c:10165
 perf_event_alloc kernel/events/core.c:10535 [inline]
 __do_sys_perf_event_open kernel/events/core.c:10636 [inline]
 __se_sys_perf_event_open+0x54e/0x27c0 kernel/events/core.c:10525
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007efc80f1ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000024cc0 RCX: 000000000045de29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
RBP: 000000000118bf70 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd5beaa9af R14: 00007efc80f1f9c0 R15: 000000000118bf2c
================================================================================
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
syz-executor.5 (9034) used greatest stack depth: 22784 bytes left
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
IPVS: ftp: loaded support on port[0] = 21
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
overlayfs: 'file0' not a directory
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
overlayfs: './file0' not a directory
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
9pnet: Insufficient options for proto=fd
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
9pnet: Insufficient options for proto=fd
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
9pnet: Insufficient options for proto=fd
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
9pnet: Insufficient options for proto=fd
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
9pnet: Insufficient options for proto=fd
netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
9pnet: Insufficient options for proto=fd
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue