syzkaller login: [ 236.084531][ T2806] warn_alloc: 5 callbacks suppressed [ 236.084763][ T2806] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 236.087645][ T2806] CPU: 0 PID: 2806 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 236.088686][ T2806] Hardware name: riscv-virtio,qemu (DT) [ 236.089454][ T2806] Call Trace: [ 236.090380][ T2806] [] dump_backtrace+0x2e/0x3c [ 236.091483][ T2806] [] show_stack+0x34/0x40 [ 236.092380][ T2806] [] dump_stack_lvl+0xe0/0x14c [ 236.093432][ T2806] [] dump_stack+0x1c/0x24 [ 236.094444][ T2806] [] warn_alloc+0x168/0x22c [ 236.095359][ T2806] [] __vmalloc_node_range+0xb6c/0xdb4 [ 236.096421][ T2806] [] bpf_jit_alloc_exec+0x46/0x52 [ 236.097426][ T2806] [] bpf_jit_binary_alloc+0x96/0x13c [ 236.098480][ T2806] [] bpf_int_jit_compile+0x886/0xaa6 [ 236.099561][ T2806] [] bpf_prog_select_runtime+0x1a2/0x22e [ 236.101326][ T2806] [] bpf_migrate_filter+0x258/0x2be [ 236.102506][ T2806] [] bpf_prepare_filter+0x10e/0x1b4 [ 236.103582][ T2806] [] __get_filter+0x148/0x1a0 [ 236.104612][ T2806] [] sk_attach_filter+0x22/0x11a [ 236.105508][ T2806] [] sk_setsockopt+0x144e/0x270c [ 236.106502][ T2806] [] sock_setsockopt+0x48/0x58 [ 236.107394][ T2806] [] __sys_setsockopt+0x3f0/0x418 [ 236.108286][ T2806] [] sys_setsockopt+0x3a/0x4c [ 236.109167][ T2806] [] ret_from_syscall+0x0/0x2 [ 236.160880][ T2806] Mem-Info: [ 236.162116][ T2806] active_anon:692 inactive_anon:40 isolated_anon:0 [ 236.162116][ T2806] active_file:0 inactive_file:1678 isolated_file:0 [ 236.162116][ T2806] unevictable:768 dirty:16 writeback:0 [ 236.162116][ T2806] slab_reclaimable:4834 slab_unreclaimable:18176 [ 236.162116][ T2806] mapped:1032 shmem:802 pagetables:106 [ 236.162116][ T2806] sec_pagetables:0 bounce:0 [ 236.162116][ T2806] kernel_misc_reclaimable:0 [ 236.162116][ T2806] free:285448 free_pcp:812 free_cma:4096 [ 236.165933][ T2806] Node 0 active_anon:2768kB inactive_anon:160kB active_file:0kB inactive_file:6712kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:4128kB dirty:64kB writeback:0kB shmem:3208kB writeback_tmp:0kB kernel_stack:4600kB pagetables:424kB sec_pagetables:0kB all_unreclaimable? no [ 236.168920][ T2806] Node 0 DMA32 free:1141792kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:2768kB inactive_anon:160kB active_file:0kB inactive_file:6712kB unevictable:3072kB writepending:64kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3248kB local_pcp:1288kB free_cma:16384kB [ 236.194673][ T2806] lowmem_reserve[]: 0 0 0 [ 236.196250][ T2806] Node 0 DMA32: 4*4kB (E) 92*8kB (UME) 23*16kB (U) 22*32kB (U) 14*64kB (UME) 3*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (M) 3*2048kB (UC) 276*4096kB (MC) = 1141792kB [ 236.216547][ T2806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.217441][ T2806] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 236.218338][ T2806] 2480 total pagecache pages [ 236.219184][ T2806] 0 pages in swap cache [ 236.231763][ T2806] Free swap = 0kB [ 236.232570][ T2806] Total swap = 0kB [ 236.233230][ T2806] 523776 pages RAM [ 236.233901][ T2806] 0 pages HighMem/MovableOnly [ 236.234572][ T2806] 184025 pages reserved [ 236.235283][ T2806] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_root_recvmsgcb: failed to send message to pid 2781: Connection refused [ 250.339477][ T2675] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 2785: Connection refused [ 250.359086][ T2675] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.385091][ T2675] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 2806: Connection refused ps_root_recvmsgcb: failed to send message to pid 2808: Connection refused [ 282.527066][ T2825] warn_alloc: 1 callbacks suppressed [ 282.527307][ T2825] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 282.560973][ T2825] CPU: 0 PID: 2825 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 282.562134][ T2825] Hardware name: riscv-virtio,qemu (DT) [ 282.562784][ T2825] Call Trace: [ 282.563378][ T2825] [] dump_backtrace+0x2e/0x3c [ 282.564264][ T2825] [] show_stack+0x34/0x40 [ 282.565061][ T2825] [] dump_stack_lvl+0xe0/0x14c [ 282.565952][ T2825] [] dump_stack+0x1c/0x24 [ 282.566784][ T2825] [] warn_alloc+0x168/0x22c [ 282.567575][ T2825] [] __vmalloc_node_range+0xb6c/0xdb4 [ 282.568443][ T2825] [] bpf_jit_alloc_exec+0x46/0x52 [ 282.569272][ T2825] [] bpf_jit_binary_alloc+0x96/0x13c [ 282.570548][ T2825] [] bpf_int_jit_compile+0x886/0xaa6 [ 282.571408][ T2825] [] bpf_prog_select_runtime+0x1a2/0x22e [ 282.572252][ T2825] [] bpf_migrate_filter+0x258/0x2be [ 282.573135][ T2825] [] bpf_prepare_filter+0x10e/0x1b4 [ 282.574041][ T2825] [] __get_filter+0x148/0x1a0 [ 282.575044][ T2825] [] sk_attach_filter+0x22/0x11a [ 282.575864][ T2825] [] sk_setsockopt+0x144e/0x270c [ 282.576725][ T2825] [] sock_setsockopt+0x48/0x58 [ 282.577580][ T2825] [] __sys_setsockopt+0x3f0/0x418 [ 282.578438][ T2825] [] sys_setsockopt+0x3a/0x4c [ 282.579237][ T2825] [] ret_from_syscall+0x0/0x2 [ 282.614165][ T2825] Mem-Info: [ 282.615109][ T2825] active_anon:1248 inactive_anon:41 isolated_anon:0 [ 282.615109][ T2825] active_file:0 inactive_file:6178 isolated_file:0 [ 282.615109][ T2825] unevictable:768 dirty:259 writeback:0 [ 282.615109][ T2825] slab_reclaimable:5223 slab_unreclaimable:18578 [ 282.615109][ T2825] mapped:1082 shmem:804 pagetables:110 [ 282.615109][ T2825] sec_pagetables:0 bounce:0 [ 282.615109][ T2825] kernel_misc_reclaimable:0 [ 282.615109][ T2825] free:279192 free_pcp:782 free_cma:4096 [ 282.617438][ T2825] Node 0 active_anon:4992kB inactive_anon:164kB active_file:0kB inactive_file:24712kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:4328kB dirty:1036kB writeback:0kB shmem:3216kB writeback_tmp:0kB kernel_stack:4576kB pagetables:440kB sec_pagetables:0kB all_unreclaimable? no [ 282.619148][ T2825] Node 0 DMA32 free:1116768kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:4992kB inactive_anon:164kB active_file:0kB inactive_file:24712kB unevictable:3072kB writepending:1036kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3128kB local_pcp:2300kB free_cma:16384kB [ 282.631908][ T2825] lowmem_reserve[]: 0 0 0 [ 282.633450][ T2825] Node 0 DMA32: 2*4kB (ME) 37*8kB (U) 55*16kB (UME) 24*32kB (UME) 5*64kB (UM) 1*128kB (M) 3*256kB (UME) 1*512kB (M) 1*1024kB (E) 3*2048kB (EC) 270*4096kB (MC) = 1116768kB [ 282.656091][ T2825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.656996][ T2825] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 282.657898][ T2825] 6987 total pagecache pages [ 282.658588][ T2825] 0 pages in swap cache [ 282.659241][ T2825] Free swap = 0kB [ 282.673450][ T2825] Total swap = 0kB [ 282.675021][ T2825] 523776 pages RAM [ 282.676101][ T2825] 0 pages HighMem/MovableOnly [ 282.677341][ T2825] 184025 pages reserved [ 282.678388][ T2825] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 Warning: Permanently added '[localhost]:57516' (ECDSA) to the list of known hosts. 1970/01/01 00:05:18 fuzzer started runtime: lfstack.push invalid packing: node=0xffffff88951a60 cnt=0x1 packed=0xffff88951a600001 -> node=0xffff88951a60 fatal error: lfstack.push runtime stack: runtime.throw({0x6cfe80, 0xc}) /usr/local/go/src/runtime/panic.go:1198 +0x60 runtime.(*lfstack).push(0x14ab3b8, 0xffffff88951a60) /usr/local/go/src/runtime/lfstack.go:30 +0x1a8 runtime.(*spanSetBlockAlloc).free(...) /usr/local/go/src/runtime/mspanset.go:292 runtime.(*spanSet).reset(0x14a4600) /usr/local/go/src/runtime/mspanset.go:265 +0xe4 runtime.finishsweep_m() /usr/local/go/src/runtime/mgcsweep.go:145 +0xb4 runtime.gcStart.func1() /usr/local/go/src/runtime/mgc.go:660 +0x24 runtime.systemstack() /usr/local/go/src/runtime/asm_riscv64.s:131 +0x58 goroutine 1 [running]: runtime.systemstack_switch() /usr/local/go/src/runtime/asm_riscv64.s:94 +0x8 fp=0xc0005bf5c0 sp=0xc0005bf5b8 pc=0x80368 runtime.gcStart({0x0, 0x0, 0x0}) /usr/local/go/src/runtime/mgc.go:659 +0x544 fp=0xc0005bf638 sp=0xc0005bf5c0 pc=0x2bcb4 runtime.mallocgc(0x6f50, 0x64d960, 0x1) /usr/local/go/src/runtime/malloc.go:1174 +0x7d0 fp=0xc0005bf6b8 sp=0xc0005bf638 pc=0x1d070 runtime.newarray(0x64d960, 0x89) /usr/local/go/src/runtime/malloc.go:1250 +0x94 fp=0xc0005bf6e0 sp=0xc0005bf6b8 pc=0x1d2dc runtime.makeBucketArray(0x5f1460, 0x7, 0x0) /usr/local/go/src/runtime/map.go:362 +0x204 fp=0xc0005bf710 sp=0xc0005bf6e0 pc=0x1e3ec runtime.hashGrow(0x5f1460, 0xc000443fb0) /usr/local/go/src/runtime/map.go:1036 +0xb4 fp=0xc0005bf758 sp=0xc0005bf710 pc=0x201ac runtime.mapassign_faststr(0x5f1460, 0xc000443fb0, {0x7146c2, 0x18}) /usr/local/go/src/runtime/map_faststr.go:275 +0xe4 fp=0xc0005bf7c0 sp=0xc0005bf758 pc=0x23a0c github.com/google/syzkaller/prog.(*Target).initTarget(0xc000228000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:159 +0x384 fp=0xc0005bf890 sp=0xc0005bf7c0 pc=0x180a34 github.com/google/syzkaller/prog.(*Target).lazyInit(0xc000228000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:130 +0x80 fp=0xc0005bf908 sp=0xc0005bf890 pc=0x1803b8 github.com/google/syzkaller/prog.(*Target).lazyInit-fm() /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:127 +0x34 fp=0xc0005bf918 sp=0xc0005bf908 pc=0x188ecc sync.(*Once).doSlow(0xc000228108, 0xc0005bf9f8) /usr/local/go/src/sync/once.go:68 +0xcc fp=0xc0005bf960 sp=0xc0005bf918 pc=0x99814 sync.(*Once).Do(...) /usr/local/go/src/sync/once.go:59 github.com/google/syzkaller/prog.GetTarget({0x6b39ee, 0x5}, {0xffffffd7299e92, 0x7}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:108 +0x17c fp=0xc0005bfa88 sp=0xc0005bf960 pc=0x180094 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:164 +0x3c0 fp=0xc0005bff88 sp=0xc0005bfa88 pc=0x55b2c8 runtime.main() /usr/local/go/src/runtime/proc.go:255 +0x268 fp=0xc0005bffd8 sp=0xc0005bff88 pc=0x4f770 runtime.goexit() /usr/local/go/src/runtime/asm_riscv64.s:507 +0x4 fp=0xc0005bffd8 sp=0xc0005bffd8 pc=0x82314 goroutine 5 [select]: go.opencensus.io/stats/view.(*worker).start(0xc0003c6200) /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:276 +0xb0 created by go.opencensus.io/stats/view.init.0 /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x80 ps_root_recvmsgcb: failed to send message to pid 2825: Connection refused ps_root_recvmsgcb: failed to send message to pid 2826: Connection refused ps_root_recvmsgcb: failed to send message to pid 2827: Connection refused VM DIAGNOSIS: 12:13:46 Registers: info registers vcpu 0 pc 00ffffffa29cf29c mhartid 0000000000000000 mstatus 00000000000040a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff80010d88 sepc 00ffffffa2982d98 mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra 00aaaaaace18a220 x2/sp 00ffffffde10c290 x3/gp 00aaaaaace1dda68 x4/tp 00ffffffa29416c8 x5/t0 0000000002120479 x6/t1 00aaaaaace144ebc x7/t2 ffffffffffffffff x8/s0 00ffffffde10c2d0 x9/s1 00aaaaaace1dde60 x10/a0 0000000000000007 x11/a1 00ffffffde10c2d0 x12/a2 00aaaaab0b683cf0 x13/a3 00aaaaab0b688500 x14/a4 00ffffffde10c498 x15/a5 0000000000000000 x16/a6 00aaaaab0b688508 x17/a7 0000000000000071 x18/s2 00ffffffde10c488 x19/s3 00ffffffde10c490 x20/s4 00aaaaab0b687bf0 x21/s5 0000000000000000 x22/s6 00aaaaab0b688110 x23/s7 00ffffffde10c480 x24/s8 ffffffffffffffff x25/s9 00aaaaab0b687bf0 x26/s10 ffffffffffffffff x27/s11 00000000ffffffff x28/t3 00ffffffa29cf28c x29/t4 0000000000000000 x30/t5 0000000002120479 x31/t6 00000000027da6ae f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff83453834 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff80010d88 sepc 0000000000083560 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801578f6 x2/sp ff200000051a7800 x3/gp ffffffff85efe540 x4/tp ff600000126d4980 x5/t0 ff60000010c6301c x6/t1 00000000000f0000 x7/t2 00ffffffd7299414 x8/s0 ff200000051a7860 x9/s1 0000000000000001 x10/a0 ffffffff83a2bdc0 x11/a1 0000000000000002 x12/a2 ffffffff83444bba x13/a3 0000000000000002 x14/a4 ff600000126d5980 x15/a5 ff6000005a9e4848 x16/a6 0000000000000003 x17/a7 0000000000000002 x18/s2 0000000000000000 x19/s3 0000000000000001 x20/s4 0000000000000000 x21/s5 ff6000000ee5c8a8 x22/s6 0000000000000000 x23/s7 ff600000126d4980 x24/s8 ffffffff8010b1a4 x25/s9 ffffffff85f25740 x26/s10 1fe4000000a34ef8 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff801244de x30/t5 1fe4000000a34ed4 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 43e0000000000000 f3/ft3 43e0000000000000 f4/ft4 3ff799999999999a f5/ft5 4000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000