./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2004204926 <...> Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. execve("./syz-executor2004204926", ["./syz-executor2004204926"], 0x7ffe27cedd90 /* 10 vars */) = 0 brk(NULL) = 0x5555556e1000 brk(0x5555556e1d00) = 0x5555556e1d00 arch_prctl(ARCH_SET_FS, 0x5555556e1380) = 0 set_tid_address(0x5555556e1650) = 5068 set_robust_list(0x5555556e1660, 24) = 0 rseq(0x5555556e1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2004204926", 4096) = 28 getrandom("\xba\xeb\x36\x96\xb1\x97\xa6\x97", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555556e1d00 brk(0x555555702d00) = 0x555555702d00 brk(0x555555703000) = 0x555555703000 mprotect(0x7ff0c72aa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556e1650) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x5555556e1660, 24) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [ 71.908188][ T5069] ================================================================================ [ 71.917537][ T5069] UBSAN: shift-out-of-bounds in kernel/bpf/verifier.c:13571:63 [ 71.925383][ T5069] shift exponent 1073741824 is too large for 32-bit type 'int' [ 71.933353][ T5069] CPU: 0 PID: 5069 Comm: syz-executor200 Not tainted 6.7.0-rc5-syzkaller-00167-gb1dfc0f76231 #0 [ 71.943784][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 71.953827][ T5069] Call Trace: [ 71.957356][ T5069] [ 71.960278][ T5069] dump_stack_lvl+0x125/0x1b0 [ 71.964967][ T5069] __ubsan_handle_shift_out_of_bounds+0x2a6/0x480 [ 71.971385][ T5069] ? tnum_const+0x11/0x20 [ 71.975704][ T5069] adjust_reg_min_max_vals.cold+0x162/0x221 [ 71.981622][ T5069] ? check_kfunc_mem_size_reg+0x540/0x540 [ 71.987435][ T5069] ? is_reg64.constprop.0+0x120/0x380 [ 71.992805][ T5069] check_alu_op+0x498/0x3a60 [ 71.997388][ T5069] do_check_common+0x1b30/0xd690 [ 72.002346][ T5069] ? check_helper_call.isra.0+0xb550/0xb550 [ 72.008315][ T5069] ? kvfree+0x47/0x50 [ 72.012315][ T5069] ? check_cfg+0x405/0x840 [ 72.016726][ T5069] bpf_check+0x77d9/0xa5e0 [ 72.021144][ T5069] ? bpf_get_btf_vmlinux+0x20/0x20 [ 72.026248][ T5069] ? find_held_lock+0x2d/0x110 [ 72.031002][ T5069] ? bpf_prog_load+0x1470/0x2200 [ 72.035926][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.041294][ T5069] ? preempt_count_sub+0x160/0x160 [ 72.046418][ T5069] ? read_tsc+0x9/0x20 [ 72.050471][ T5069] ? ktime_get_with_offset+0x306/0x520 [ 72.055926][ T5069] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 72.060956][ T5069] bpf_prog_load+0x1531/0x2200 [ 72.065708][ T5069] ? map_create+0x1b90/0x1b90 [ 72.070367][ T5069] ? find_held_lock+0x2d/0x110 [ 72.075132][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.080508][ T5069] ? bpf_lsm_bpf+0x9/0x10 [ 72.084830][ T5069] __sys_bpf+0xbf7/0x4920 [ 72.089153][ T5069] ? bpf_perf_link_attach+0x540/0x540 [ 72.094533][ T5069] ? cgroup_update_frozen+0x144/0x6b0 [ 72.100015][ T5069] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.105467][ T5069] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 72.110651][ T5069] ? find_held_lock+0x2d/0x110 [ 72.115426][ T5069] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.120612][ T5069] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.126070][ T5069] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.131257][ T5069] ? ptrace_notify+0xf4/0x130 [ 72.135934][ T5069] __x64_sys_bpf+0x78/0xc0 [ 72.140347][ T5069] ? syscall_enter_from_user_mode+0x107/0x120 [ 72.146404][ T5069] do_syscall_64+0x40/0x110 [ 72.150988][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.156889][ T5069] RIP: 0033:0x7ff0c7237af9 [ 72.161295][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.181419][ T5069] RSP: 002b:00007fff01650e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.189830][ T5069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0c7237af9 [ 72.198655][ T5069] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 72.206611][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 72.214565][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000003a28 [ 72.222518][ T5069] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.230484][ T5069] [ 72.234288][ T5069] ================================================================================ [ 72.243617][ T5069] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 72.250796][ T5069] CPU: 0 PID: 5069 Comm: syz-executor200 Not tainted 6.7.0-rc5-syzkaller-00167-gb1dfc0f76231 #0 [ 72.261216][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.271261][ T5069] Call Trace: [ 72.274545][ T5069] [ 72.277472][ T5069] dump_stack_lvl+0xd9/0x1b0 [ 72.282057][ T5069] panic+0x6dc/0x790 [ 72.285948][ T5069] ? preempt_schedule_irq+0x79/0x90 [ 72.291239][ T5069] ? panic_smp_self_stop+0xa0/0xa0 [ 72.296354][ T5069] ? kmsg_dump_get_line+0x350/0x350 [ 72.301547][ T5069] ? check_panic_on_warn+0x1f/0xb0 [ 72.306648][ T5069] check_panic_on_warn+0xab/0xb0 [ 72.311581][ T5069] __ubsan_handle_shift_out_of_bounds+0x2ce/0x480 [ 72.318027][ T5069] ? tnum_const+0x11/0x20 [ 72.322342][ T5069] adjust_reg_min_max_vals.cold+0x162/0x221 [ 72.328234][ T5069] ? check_kfunc_mem_size_reg+0x540/0x540 [ 72.333960][ T5069] ? is_reg64.constprop.0+0x120/0x380 [ 72.339325][ T5069] check_alu_op+0x498/0x3a60 [ 72.343910][ T5069] do_check_common+0x1b30/0xd690 [ 72.348854][ T5069] ? check_helper_call.isra.0+0xb550/0xb550 [ 72.354736][ T5069] ? kvfree+0x47/0x50 [ 72.358706][ T5069] ? check_cfg+0x405/0x840 [ 72.363114][ T5069] bpf_check+0x77d9/0xa5e0 [ 72.367527][ T5069] ? bpf_get_btf_vmlinux+0x20/0x20 [ 72.372716][ T5069] ? find_held_lock+0x2d/0x110 [ 72.377484][ T5069] ? bpf_prog_load+0x1470/0x2200 [ 72.382405][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.387789][ T5069] ? preempt_count_sub+0x160/0x160 [ 72.392903][ T5069] ? read_tsc+0x9/0x20 [ 72.396958][ T5069] ? ktime_get_with_offset+0x306/0x520 [ 72.402489][ T5069] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 72.407500][ T5069] bpf_prog_load+0x1531/0x2200 [ 72.412251][ T5069] ? map_create+0x1b90/0x1b90 [ 72.416925][ T5069] ? find_held_lock+0x2d/0x110 [ 72.421684][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 72.427057][ T5069] ? bpf_lsm_bpf+0x9/0x10 [ 72.431379][ T5069] __sys_bpf+0xbf7/0x4920 [ 72.435715][ T5069] ? bpf_perf_link_attach+0x540/0x540 [ 72.441067][ T5069] ? cgroup_update_frozen+0x144/0x6b0 [ 72.446434][ T5069] ? recalc_sigpending_tsk+0x187/0x1d0 [ 72.451876][ T5069] ? ptrace_stop.part.0+0x5c2/0x7a0 [ 72.457062][ T5069] ? find_held_lock+0x2d/0x110 [ 72.461911][ T5069] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.467108][ T5069] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.472293][ T5069] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.477477][ T5069] ? ptrace_notify+0xf4/0x130 [ 72.482143][ T5069] __x64_sys_bpf+0x78/0xc0 [ 72.486548][ T5069] ? syscall_enter_from_user_mode+0x107/0x120 [ 72.492607][ T5069] do_syscall_64+0x40/0x110 [ 72.497104][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.503077][ T5069] RIP: 0033:0x7ff0c7237af9 [ 72.507475][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.527101][ T5069] RSP: 002b:00007fff01650e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.535526][ T5069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0c7237af9 [ 72.543496][ T5069] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 72.551453][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 72.559508][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000003a28 [ 72.567471][ T5069] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.575444][ T5069] [ 72.578679][ T5069] Kernel Offset: disabled [ 72.583064][ T5069] Rebooting in 86400 seconds..