program: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000340)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@uni_xlateno}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") [ 79.884953][ T5316] loop0: detected capacity change from 0 to 256 [ 81.117760][ T5315] ================================================================== [ 81.120485][ T5315] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x341/0x3d0 [ 81.123147][ T5315] Write of size 4064 at addr ffffc9000d1b1020 by task syz.0.0/5315 [ 81.125897][ T5315] [ 81.126848][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 81.130617][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.134551][ T5315] Call Trace: [ 81.135738][ T5315] [ 81.136879][ T5315] dump_stack_lvl+0x241/0x360 [ 81.138639][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.140710][ T5315] ? __pfx__printk+0x10/0x10 [ 81.142513][ T5315] ? _printk+0xd5/0x120 [ 81.144126][ T5315] print_report+0x169/0x550 [ 81.145867][ T5315] ? __virt_addr_valid+0xbd/0x530 [ 81.147747][ T5315] ? vrealloc_noprof+0x341/0x3d0 [ 81.149614][ T5315] kasan_report+0x143/0x180 [ 81.151285][ T5315] ? vrealloc_noprof+0x341/0x3d0 [ 81.153037][ T5315] kasan_check_range+0x282/0x290 [ 81.154921][ T5315] __asan_memset+0x23/0x50 [ 81.156791][ T5315] vrealloc_noprof+0x341/0x3d0 [ 81.158620][ T5315] push_insn_history+0x16c/0x6a0 [ 81.160517][ T5315] do_check+0x692f/0xfcd0 [ 81.162187][ T5315] ? __pfx_do_check+0x10/0x10 [ 81.163980][ T5315] ? mark_reg_not_init+0xd4/0x4b0 [ 81.165836][ T5315] ? __asan_memcpy+0x40/0x70 [ 81.167378][ T5315] ? mark_reg_not_init+0xd4/0x4b0 [ 81.169160][ T5315] do_check_common+0x1564/0x2010 [ 81.170871][ T5315] bpf_check+0x804e/0x1fc90 [ 81.172377][ T5315] ? __alloc_pages_noprof+0x292/0x710 [ 81.174122][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.175801][ T5315] ? mark_lock+0x9a/0x360 [ 81.177140][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.178896][ T5315] ? mark_lock+0x9a/0x360 [ 81.180372][ T5315] ? validate_chain+0x11e/0x5920 [ 81.182347][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.184635][ T5315] ? validate_chain+0x11e/0x5920 [ 81.186895][ T5315] ? mark_lock+0x9a/0x360 [ 81.188825][ T5315] ? validate_chain+0x11e/0x5920 [ 81.191101][ T5315] ? validate_chain+0x11e/0x5920 [ 81.193530][ T5315] ? validate_chain+0x11e/0x5920 [ 81.195736][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.197706][ T5315] ? validate_chain+0x11e/0x5920 [ 81.199597][ T5315] ? validate_chain+0x11e/0x5920 [ 81.201748][ T5315] ? validate_chain+0x11e/0x5920 [ 81.204047][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.206351][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.208100][ T5315] ? __pfx_bpf_check+0x10/0x10 [ 81.209627][ T5315] ? mark_lock+0x9a/0x360 [ 81.211089][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.212774][ T5315] ? mark_lock+0x9a/0x360 [ 81.214286][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.216068][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 81.217841][ T5315] ? ktime_get_with_offset+0x8c/0x290 [ 81.219798][ T5315] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.221946][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.224338][ T5315] ? ktime_get_with_offset+0x8c/0x290 [ 81.226383][ T5315] ? seqcount_lockdep_reader_access+0x157/0x220 [ 81.228690][ T5315] ? lockdep_hardirqs_on+0x99/0x150 [ 81.230679][ T5315] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 81.232975][ T5315] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 81.235403][ T5315] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 81.237236][ T5315] bpf_prog_load+0x1667/0x20f0 [ 81.239055][ T5315] ? __pfx_bpf_prog_load+0x10/0x10 [ 81.241043][ T5315] ? __pfx___might_resched+0x10/0x10 [ 81.243023][ T5315] ? __might_fault+0xc6/0x120 [ 81.245132][ T5315] __sys_bpf+0x4ee/0x810 [ 81.247122][ T5315] ? __pfx___sys_bpf+0x10/0x10 [ 81.249455][ T5315] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.252156][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.254259][ T5315] ? exc_page_fault+0x590/0x8b0 [ 81.256083][ T5315] __x64_sys_bpf+0x7c/0x90 [ 81.257738][ T5315] do_syscall_64+0xf3/0x230 [ 81.259712][ T5315] ? clear_bhb_loop+0x35/0x90 [ 81.261994][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.264753][ T5315] RIP: 0033:0x7fdbca385d29 [ 81.266934][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.274041][ T5315] RSP: 002b:00007fdbcb217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.276861][ T5315] RAX: ffffffffffffffda RBX: 00007fdbca575fa0 RCX: 00007fdbca385d29 [ 81.279645][ T5315] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 81.282307][ T5315] RBP: 00007fdbca401b08 R08: 0000000000000000 R09: 0000000000000000 [ 81.284937][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.287530][ T5315] R13: 0000000000000001 R14: 00007fdbca575fa0 R15: 00007ffe9aefdc78 [ 81.290076][ T5315] [ 81.291194][ T5315] [ 81.292084][ T5315] The buggy address belongs to the virtual mapping at [ 81.292084][ T5315] [ffffc9000d171000, ffffc9000d1b3000) created by: [ 81.292084][ T5315] kvrealloc_noprof+0xc7/0x120 [ 81.297743][ T5315] [ 81.298581][ T5315] The buggy address belongs to the physical page: [ 81.300648][ T5315] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888036c66a80 pfn:0x36c66 [ 81.304451][ T5315] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 81.306918][ T5315] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 81.309794][ T5315] raw: ffff888036c66a80 0000000000000000 00000001ffffffff 0000000000000000 [ 81.312753][ T5315] page dumped because: kasan: bad access detected [ 81.315623][ T5315] page_owner tracks the page as allocated [ 81.318222][ T5315] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 5315, tgid 5314 (syz.0.0), ts 81117432143, free_ts 80172581449 [ 81.325140][ T5315] post_alloc_hook+0x1f3/0x230 [ 81.327208][ T5315] get_page_from_freelist+0x365c/0x37a0 [ 81.328809][ T5315] __alloc_pages_slowpath+0x414/0x1020 [ 81.330527][ T5315] __alloc_pages_noprof+0x49b/0x710 [ 81.332278][ T5315] alloc_pages_mpol_noprof+0x3e1/0x780 [ 81.334151][ T5315] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 81.336282][ T5315] __kvmalloc_node_noprof+0x142/0x190 [ 81.338222][ T5315] kvrealloc_noprof+0xc7/0x120 [ 81.339747][ T5315] push_insn_history+0x16c/0x6a0 [ 81.341426][ T5315] do_check+0x692f/0xfcd0 [ 81.342997][ T5315] do_check_common+0x1564/0x2010 [ 81.344938][ T5315] bpf_check+0x804e/0x1fc90 [ 81.346602][ T5315] bpf_prog_load+0x1667/0x20f0 [ 81.348184][ T5315] __sys_bpf+0x4ee/0x810 [ 81.349661][ T5315] __x64_sys_bpf+0x7c/0x90 [ 81.351049][ T5315] do_syscall_64+0xf3/0x230 [ 81.352368][ T5315] page last free pid 5315 tgid 5314 stack trace: [ 81.354229][ T5315] free_unref_page+0xd3f/0x1010 [ 81.355629][ T5315] __slab_free+0x2c2/0x380 [ 81.357286][ T5315] qlist_free_all+0x9a/0x140 [ 81.358812][ T5315] kasan_quarantine_reduce+0x14f/0x170 [ 81.360715][ T5315] __kasan_krealloc+0x20/0x140 [ 81.362362][ T5315] krealloc_noprof+0x18f/0x2f0 [ 81.364032][ T5315] kvrealloc_noprof+0x9a/0x120 [ 81.365597][ T5315] push_insn_history+0x16c/0x6a0 [ 81.367148][ T5315] do_check+0x692f/0xfcd0 [ 81.368604][ T5315] do_check_common+0x1564/0x2010 [ 81.370175][ T5315] bpf_check+0x804e/0x1fc90 [ 81.371630][ T5315] bpf_prog_load+0x1667/0x20f0 [ 81.373187][ T5315] __sys_bpf+0x4ee/0x810 [ 81.374593][ T5315] __x64_sys_bpf+0x7c/0x90 [ 81.376184][ T5315] do_syscall_64+0xf3/0x230 [ 81.377811][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.379769][ T5315] [ 81.380613][ T5315] Memory state around the buggy address: [ 81.382551][ T5315] ffffc9000d1b0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.385451][ T5315] ffffc9000d1b0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.388102][ T5315] >ffffc9000d1b1000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.390783][ T5315] ^ [ 81.392474][ T5315] ffffc9000d1b1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.395235][ T5315] ffffc9000d1b1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.397771][ T5315] ================================================================== [ 81.400567][ T5315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.402894][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 81.406467][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.410161][ T5315] Call Trace: [ 81.411330][ T5315] [ 81.412391][ T5315] dump_stack_lvl+0x241/0x360 [ 81.414702][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.416656][ T5315] ? __pfx__printk+0x10/0x10 [ 81.418222][ T5315] ? preempt_schedule+0xe1/0xf0 [ 81.419948][ T5315] ? vscnprintf+0x5d/0x90 [ 81.421457][ T5315] panic+0x349/0x880 [ 81.422644][ T5315] ? check_panic_on_warn+0x21/0xb0 [ 81.424358][ T5315] ? __pfx_panic+0x10/0x10 [ 81.425924][ T5315] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 81.427908][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.430230][ T5315] ? print_report+0x502/0x550 [ 81.432063][ T5315] check_panic_on_warn+0x86/0xb0 [ 81.433745][ T5315] ? vrealloc_noprof+0x341/0x3d0 [ 81.435158][ T5315] end_report+0x77/0x160 [ 81.436342][ T5315] kasan_report+0x154/0x180 [ 81.437690][ T5315] ? vrealloc_noprof+0x341/0x3d0 [ 81.439351][ T5315] kasan_check_range+0x282/0x290 [ 81.440858][ T5315] __asan_memset+0x23/0x50 [ 81.442167][ T5315] vrealloc_noprof+0x341/0x3d0 [ 81.443877][ T5315] push_insn_history+0x16c/0x6a0 [ 81.445684][ T5315] do_check+0x692f/0xfcd0 [ 81.447280][ T5315] ? __pfx_do_check+0x10/0x10 [ 81.449014][ T5315] ? mark_reg_not_init+0xd4/0x4b0 [ 81.450643][ T5315] ? __asan_memcpy+0x40/0x70 [ 81.452200][ T5315] ? mark_reg_not_init+0xd4/0x4b0 [ 81.453917][ T5315] do_check_common+0x1564/0x2010 [ 81.455616][ T5315] bpf_check+0x804e/0x1fc90 [ 81.457281][ T5315] ? __alloc_pages_noprof+0x292/0x710 [ 81.459114][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.460793][ T5315] ? mark_lock+0x9a/0x360 [ 81.462255][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.464046][ T5315] ? mark_lock+0x9a/0x360 [ 81.465505][ T5315] ? validate_chain+0x11e/0x5920 [ 81.467028][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.468711][ T5315] ? validate_chain+0x11e/0x5920 [ 81.470487][ T5315] ? mark_lock+0x9a/0x360 [ 81.471942][ T5315] ? validate_chain+0x11e/0x5920 [ 81.473542][ T5315] ? validate_chain+0x11e/0x5920 [ 81.475103][ T5315] ? validate_chain+0x11e/0x5920 [ 81.476730][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.478469][ T5315] ? validate_chain+0x11e/0x5920 [ 81.480229][ T5315] ? validate_chain+0x11e/0x5920 [ 81.482078][ T5315] ? validate_chain+0x11e/0x5920 [ 81.483770][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.485414][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 81.487113][ T5315] ? __pfx_bpf_check+0x10/0x10 [ 81.488752][ T5315] ? mark_lock+0x9a/0x360 [ 81.490278][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.491993][ T5315] ? mark_lock+0x9a/0x360 [ 81.493520][ T5315] ? __lock_acquire+0x1397/0x2100 [ 81.495309][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 81.497532][ T5315] ? ktime_get_with_offset+0x8c/0x290 [ 81.499343][ T5315] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.501410][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.503464][ T5315] ? ktime_get_with_offset+0x8c/0x290 [ 81.505244][ T5315] ? seqcount_lockdep_reader_access+0x157/0x220 [ 81.507373][ T5315] ? lockdep_hardirqs_on+0x99/0x150 [ 81.509173][ T5315] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 81.511419][ T5315] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 81.513855][ T5315] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 81.515710][ T5315] bpf_prog_load+0x1667/0x20f0 [ 81.517397][ T5315] ? __pfx_bpf_prog_load+0x10/0x10 [ 81.519221][ T5315] ? __pfx___might_resched+0x10/0x10 [ 81.521159][ T5315] ? __might_fault+0xc6/0x120 [ 81.522805][ T5315] __sys_bpf+0x4ee/0x810 [ 81.524288][ T5315] ? __pfx___sys_bpf+0x10/0x10 [ 81.526141][ T5315] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.528382][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.530701][ T5315] ? exc_page_fault+0x590/0x8b0 [ 81.532477][ T5315] __x64_sys_bpf+0x7c/0x90 [ 81.534162][ T5315] do_syscall_64+0xf3/0x230 [ 81.535856][ T5315] ? clear_bhb_loop+0x35/0x90 [ 81.537619][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.539891][ T5315] RIP: 0033:0x7fdbca385d29 [ 81.541514][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.547609][ T5315] RSP: 002b:00007fdbcb217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.550877][ T5315] RAX: ffffffffffffffda RBX: 00007fdbca575fa0 RCX: 00007fdbca385d29 [ 81.553772][ T5315] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 81.556589][ T5315] RBP: 00007fdbca401b08 R08: 0000000000000000 R09: 0000000000000000 [ 81.559522][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.562416][ T5315] R13: 0000000000000001 R14: 00007fdbca575fa0 R15: 00007ffe9aefdc78 [ 81.565312][ T5315] [ 81.566703][ T5315] Kernel Offset: disabled [ 81.568348][ T5315] Rebooting in 86400 seconds..