./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor474451042
<...>
Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts.
execve("./syz-executor474451042", ["./syz-executor474451042"], 0x7ffce1050720 /* 10 vars */) = 0
brk(NULL) = 0x555579d92000
brk(0x555579d92d00) = 0x555579d92d00
arch_prctl(ARCH_SET_FS, 0x555579d92380) = 0
set_tid_address(0x555579d92650) = 5071
set_robust_list(0x555579d92660, 24) = 0
rseq(0x555579d92ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor474451042", 4096) = 27
getrandom("\x31\x3f\xdb\xc3\x64\x9c\x72\x3e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555579d92d00
brk(0x555579db3d00) = 0x555579db3d00
brk(0x555579db4000) = 0x555579db4000
mprotect(0x7f8416207000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_BLOOM_FILTER, key_size=0, value_size=2147483649, max_entries=255, map_flags=0, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[ 57.532488][ T5071] ------------[ cut here ]------------
[ 57.538083][ T5071] UBSAN: array-index-out-of-bounds in kernel/bpf/verifier.c:7190:12
[ 57.546206][ T5071] index -1 is out of range for type 'u8[8]' (aka 'unsigned char[8]')
[ 57.554332][ T5071] CPU: 0 PID: 5071 Comm: syz-executor474 Not tainted 6.8.0-syzkaller-05226-g0740b6427e90 #0
[ 57.564397][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 57.574436][ T5071] Call Trace:
[ 57.577702][ T5071]
[ 57.580619][ T5071] dump_stack_lvl+0x1e7/0x2e0
[ 57.585304][ T5071] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.590486][ T5071] ? __pfx__printk+0x10/0x10
[ 57.595060][ T5071] ? __pfx_check_stack_access_within_bounds+0x10/0x10
[ 57.601805][ T5071] ? __asan_memset+0x23/0x50
[ 57.606379][ T5071] __ubsan_handle_out_of_bounds+0x121/0x150
[ 57.612266][ T5071] check_stack_range_initialized+0x1668/0x19a0
[ 57.618417][ T5071] ? __pfx_check_stack_range_initialized+0x10/0x10
[ 57.624901][ T5071] ? adjust_ptr_min_max_vals+0x1a84/0x2220
[ 57.630688][ T5071] ? rcu_is_watching+0x15/0xb0
[ 57.635442][ T5071] check_helper_mem_access+0x2eb/0xfa0
[ 57.640888][ T5071] ? __pfx_check_helper_mem_access+0x10/0x10
[ 57.646853][ T5071] ? is_reg64+0xb6/0x3a0
[ 57.651077][ T5071] ? check_reg_type+0x70d/0xf50
[ 57.655915][ T5071] ? check_func_arg_reg_off+0x20b/0x2f0
[ 57.661446][ T5071] check_helper_call+0x263c/0x7220
[ 57.666551][ T5071] ? __pfx_check_helper_call+0x10/0x10
[ 57.671996][ T5071] ? tnum_const+0xd/0x20
[ 57.676223][ T5071] do_check+0x9e29/0x10530
[ 57.680627][ T5071] ? kmalloc_trace+0x1d9/0x360
[ 57.685376][ T5071] ? do_check_common+0x190/0x1dd0
[ 57.690381][ T5071] ? bpf_check+0x136ab/0x19010
[ 57.695151][ T5071] ? __pfx_do_check+0x10/0x10
[ 57.699807][ T5071] ? mark_reg_not_init+0xd4/0x4b0
[ 57.704810][ T5071] ? __asan_memcpy+0x40/0x70
[ 57.709380][ T5071] ? mark_reg_not_init+0xd4/0x4b0
[ 57.714386][ T5071] do_check_common+0x14bd/0x1dd0
[ 57.719311][ T5071] bpf_check+0x136ab/0x19010
[ 57.723898][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 57.729084][ T5071] ? validate_chain+0x11b/0x58e0
[ 57.734003][ T5071] ? mark_lock+0x9a/0x350
[ 57.738315][ T5071] ? validate_chain+0x11b/0x58e0
[ 57.743235][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 57.748252][ T5071] ? validate_chain+0x11b/0x58e0
[ 57.753207][ T5071] ? validate_chain+0x11b/0x58e0
[ 57.758132][ T5071] ? __pfx_bpf_check+0x10/0x10
[ 57.762877][ T5071] ? validate_chain+0x11b/0x58e0
[ 57.767799][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 57.772983][ T5071] ? mark_lock+0x9a/0x350
[ 57.777302][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 57.782490][ T5071] ? mark_lock+0x9a/0x350
[ 57.786805][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 57.791985][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 57.796991][ T5071] ? mark_lock+0x9a/0x350
[ 57.801306][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 57.806309][ T5071] ? mark_lock+0x9a/0x350
[ 57.810619][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 57.815637][ T5071] ? __pfx_lock_acquire+0x10/0x10
[ 57.820642][ T5071] ? ktime_get_with_offset+0x105/0x330
[ 57.826081][ T5071] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.832060][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.838382][ T5071] ? ktime_get_with_offset+0x105/0x330
[ 57.843829][ T5071] ? seqcount_lockdep_reader_access+0x157/0x220
[ 57.850080][ T5071] ? lockdep_hardirqs_on+0x99/0x150
[ 57.855267][ T5071] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 57.861498][ T5071] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 57.868074][ T5071] ? __check_object_size+0x8e/0xa00
[ 57.873262][ T5071] ? bpf_obj_name_cpy+0x18a/0x1d0
[ 57.878269][ T5071] ? bpf_lsm_bpf_prog_load+0x9/0x10
[ 57.883449][ T5071] ? security_bpf_prog_load+0x87/0xb0
[ 57.888805][ T5071] bpf_prog_load+0x1667/0x20f0
[ 57.893560][ T5071] ? __pfx_bpf_prog_load+0x10/0x10
[ 57.898650][ T5071] ? __pfx___might_resched+0x10/0x10
[ 57.903925][ T5071] ? __might_fault+0xc6/0x120
[ 57.908597][ T5071] ? bpf_lsm_bpf+0x9/0x10
[ 57.912905][ T5071] ? security_bpf+0x87/0xb0
[ 57.917390][ T5071] __sys_bpf+0x4ee/0x810
[ 57.921613][ T5071] ? __pfx___sys_bpf+0x10/0x10
[ 57.926365][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.932693][ T5071] ? do_syscall_64+0x10a/0x240
[ 57.937455][ T5071] __x64_sys_bpf+0x7c/0x90
[ 57.941859][ T5071] do_syscall_64+0xfb/0x240
[ 57.946350][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 57.952236][ T5071] RIP: 0033:0x7f8416194629
[ 57.956639][ T5071] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.976227][ T5071] RSP: 002b:00007ffdc6f0fdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 57.984627][ T5071] RAX: ffffffffffffffda RBX: 00007ffdc6f0ff88 RCX: 00007f8416194629
[ 57.992584][ T5071] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005
[ 58.000554][ T5071] RBP: 00007f8416207610 R08: 0000000000000000 R09: 00007ffdc6f0ff88
[ 58.008513][ T5071] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001
[ 58.016487][ T5071] R13: 00007ffdc6f0ff78 R14: 0000000000000001 R15: 0000000000000001
[ 58.024475][ T5071]
[ 58.028172][ T5071] ---[ end trace ]---
[ 58.032181][ T5071] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 58.039382][ T5071] CPU: 0 PID: 5071 Comm: syz-executor474 Not tainted 6.8.0-syzkaller-05226-g0740b6427e90 #0
[ 58.049445][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 58.059496][ T5071] Call Trace:
[ 58.062771][ T5071]
[ 58.065699][ T5071] dump_stack_lvl+0x1e7/0x2e0
[ 58.070376][ T5071] ? __pfx_dump_stack_lvl+0x10/0x10
[ 58.075582][ T5071] ? __pfx__printk+0x10/0x10
[ 58.080177][ T5071] ? vprintk_emit+0x608/0x720
[ 58.084856][ T5071] ? vscnprintf+0x5d/0x90
[ 58.089182][ T5071] panic+0x349/0x860
[ 58.093078][ T5071] ? check_panic_on_warn+0x21/0xb0
[ 58.098297][ T5071] ? __pfx_panic+0x10/0x10
[ 58.102705][ T5071] ? _printk+0xd5/0x120
[ 58.106857][ T5071] ? __pfx__printk+0x10/0x10
[ 58.111444][ T5071] check_panic_on_warn+0x86/0xb0
[ 58.116379][ T5071] __ubsan_handle_out_of_bounds+0x141/0x150
[ 58.122271][ T5071] check_stack_range_initialized+0x1668/0x19a0
[ 58.128430][ T5071] ? __pfx_check_stack_range_initialized+0x10/0x10
[ 58.134925][ T5071] ? adjust_ptr_min_max_vals+0x1a84/0x2220
[ 58.140721][ T5071] ? rcu_is_watching+0x15/0xb0
[ 58.145490][ T5071] check_helper_mem_access+0x2eb/0xfa0
[ 58.150946][ T5071] ? __pfx_check_helper_mem_access+0x10/0x10
[ 58.156923][ T5071] ? is_reg64+0xb6/0x3a0
[ 58.161167][ T5071] ? check_reg_type+0x70d/0xf50
[ 58.166015][ T5071] ? check_func_arg_reg_off+0x20b/0x2f0
[ 58.171556][ T5071] check_helper_call+0x263c/0x7220
[ 58.176679][ T5071] ? __pfx_check_helper_call+0x10/0x10
[ 58.182137][ T5071] ? tnum_const+0xd/0x20
[ 58.186375][ T5071] do_check+0x9e29/0x10530
[ 58.190800][ T5071] ? kmalloc_trace+0x1d9/0x360
[ 58.195557][ T5071] ? do_check_common+0x190/0x1dd0
[ 58.200568][ T5071] ? bpf_check+0x136ab/0x19010
[ 58.205351][ T5071] ? __pfx_do_check+0x10/0x10
[ 58.210019][ T5071] ? mark_reg_not_init+0xd4/0x4b0
[ 58.215042][ T5071] ? __asan_memcpy+0x40/0x70
[ 58.219622][ T5071] ? mark_reg_not_init+0xd4/0x4b0
[ 58.224653][ T5071] do_check_common+0x14bd/0x1dd0
[ 58.229611][ T5071] bpf_check+0x136ab/0x19010
[ 58.234225][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 58.239450][ T5071] ? validate_chain+0x11b/0x58e0
[ 58.244386][ T5071] ? mark_lock+0x9a/0x350
[ 58.248717][ T5071] ? validate_chain+0x11b/0x58e0
[ 58.253657][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 58.258684][ T5071] ? validate_chain+0x11b/0x58e0
[ 58.263619][ T5071] ? validate_chain+0x11b/0x58e0
[ 58.268558][ T5071] ? __pfx_bpf_check+0x10/0x10
[ 58.273317][ T5071] ? validate_chain+0x11b/0x58e0
[ 58.278256][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 58.283451][ T5071] ? mark_lock+0x9a/0x350
[ 58.287773][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 58.292959][ T5071] ? mark_lock+0x9a/0x350
[ 58.297278][ T5071] ? __pfx_validate_chain+0x10/0x10
[ 58.302468][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 58.307487][ T5071] ? mark_lock+0x9a/0x350
[ 58.311809][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 58.316824][ T5071] ? mark_lock+0x9a/0x350
[ 58.321149][ T5071] ? __lock_acquire+0x1346/0x1fd0
[ 58.326182][ T5071] ? __pfx_lock_acquire+0x10/0x10
[ 58.331200][ T5071] ? ktime_get_with_offset+0x105/0x330
[ 58.336656][ T5071] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 58.342626][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 58.348952][ T5071] ? ktime_get_with_offset+0x105/0x330
[ 58.354404][ T5071] ? seqcount_lockdep_reader_access+0x157/0x220
[ 58.360636][ T5071] ? lockdep_hardirqs_on+0x99/0x150
[ 58.365831][ T5071] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 58.372067][ T5071] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 58.378657][ T5071] ? __check_object_size+0x8e/0xa00
[ 58.383856][ T5071] ? bpf_obj_name_cpy+0x18a/0x1d0
[ 58.388871][ T5071] ? bpf_lsm_bpf_prog_load+0x9/0x10
[ 58.394062][ T5071] ? security_bpf_prog_load+0x87/0xb0
[ 58.399428][ T5071] bpf_prog_load+0x1667/0x20f0
[ 58.404194][ T5071] ? __pfx_bpf_prog_load+0x10/0x10
[ 58.409298][ T5071] ? __pfx___might_resched+0x10/0x10
[ 58.414583][ T5071] ? __might_fault+0xc6/0x120
[ 58.419250][ T5071] ? bpf_lsm_bpf+0x9/0x10
[ 58.423571][ T5071] ? security_bpf+0x87/0xb0
[ 58.428068][ T5071] __sys_bpf+0x4ee/0x810
[ 58.432303][ T5071] ? __pfx___sys_bpf+0x10/0x10
[ 58.437072][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 58.443392][ T5071] ? do_syscall_64+0x10a/0x240
[ 58.448153][ T5071] __x64_sys_bpf+0x7c/0x90
[ 58.452559][ T5071] do_syscall_64+0xfb/0x240
[ 58.457060][ T5071] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 58.462947][ T5071] RIP: 0033:0x7f8416194629
[ 58.467355][ T5071] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.486953][ T5071] RSP: 002b:00007ffdc6f0fdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 58.495360][ T5071] RAX: ffffffffffffffda RBX: 00007ffdc6f0ff88 RCX: 00007f8416194629
[ 58.503325][ T5071] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005
[ 58.511288][ T5071] RBP: 00007f8416207610 R08: 0000000000000000 R09: 00007ffdc6f0ff88
[ 58.519252][ T5071] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001
[ 58.527214][ T5071] R13: 00007ffdc6f0ff78 R14: 0000000000000001 R15: 0000000000000001
[ 58.535189][ T5071]
[ 58.538452][ T5071] Kernel Offset: disabled
[ 58.542824][ T5071] Rebooting in 86400 seconds..