Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts. executing program executing program executing program executing program syzkaller login: [ 48.915032][ T3606] syz-executor334: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 48.915133][ T3606] CPU: 0 PID: 3606 Comm: syz-executor334 Not tainted 5.19.0-rc2-syzkaller-00498-gb0d93b44641a #0 [ 48.915147][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 48.915147][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 48.915154][ T3606] Call Trace: [ 48.915157][ T3606] [ 48.915162][ T3606] dump_stack_lvl+0xcd/0x134 [ 48.915188][ T3606] warn_alloc.cold+0x9b/0x189 [ 48.915206][ T3606] ? zone_watermark_ok_safe+0x290/0x290 [ 48.915228][ T3606] ? __kasan_kmalloc+0xbd/0xd0 [ 48.915241][ T3606] ? __get_vm_area_node+0x297/0x3f0 [ 48.915260][ T3606] __vmalloc_node_range+0xdff/0x13e0 [ 48.915278][ T3606] ? bpf_int_jit_compile+0x474/0x13e0 [ 48.915291][ T3606] ? bpf_prog_alloc_no_stats+0x38/0x4d0 [ 48.915310][ T3606] ? vfree_atomic+0xe0/0xe0 [ 48.915321][ T3606] ? arch_prepare_bpf_dispatcher+0xc0/0xc0 [ 48.915332][ T3606] ? lockdep_init_map_type+0x21a/0x7f0 [ 48.915347][ T3606] ? bpf_prog_alloc_no_stats+0x38/0x4d0 [ 48.915360][ T3606] __vmalloc+0x69/0x80 [ 48.915371][ T3606] ? bpf_prog_alloc_no_stats+0x38/0x4d0 [ 48.915386][ T3606] bpf_prog_alloc_no_stats+0x38/0x4d0 [ 48.915411][ T3606] bpf_check+0x6198/0xb040 [ 48.915455][ T3606] ? bpf_get_btf_vmlinux+0x10/0x10 [ 48.915485][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 48.915505][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 48.915518][ T3606] ? ktime_get_with_offset+0x3f2/0x500 [ 48.915536][ T3606] ? memset+0x20/0x40 [ 48.915549][ T3606] ? bpf_obj_name_cpy+0x144/0x1a0 [ 48.915572][ T3606] bpf_prog_load+0xfb2/0x2250 [ 48.915591][ T3606] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 48.915606][ T3606] ? find_held_lock+0x2d/0x110 [ 48.915623][ T3606] ? __might_fault+0xd1/0x170 [ 48.915637][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 48.915655][ T3606] ? bpf_lsm_bpf+0x5/0x10 [ 48.915670][ T3606] __sys_bpf+0x11a1/0x5790 [ 48.915684][ T3606] ? bpf_perf_link_attach+0x520/0x520 [ 48.915695][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.915716][ T3606] ? find_held_lock+0x2d/0x110 [ 48.915747][ T3606] __x64_sys_bpf+0x75/0xb0 [ 48.915758][ T3606] ? syscall_enter_from_user_mode+0x21/0x70 [ 48.915772][ T3606] do_syscall_64+0x35/0xb0 [ 48.915787][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 48.915802][ T3606] RIP: 0033:0x7fe5b823e209 [ 48.915812][ T3606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.915823][ T3606] RSP: 002b:00007ffc68d718c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.915836][ T3606] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe5b823e209 [ 48.915844][ T3606] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 48.915851][ T3606] RBP: 00007ffc68d718e0 R08: 0000000000000002 R09: 0000000000000001 [ 48.915858][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 48.915866][ T3606] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 48.915882][ T3606] [ 48.915886][ T3606] Mem-Info: [ 48.915891][ T3606] active_anon:227 inactive_anon:2060 isolated_anon:0 [ 48.915891][ T3606] active_file:3107 inactive_file:8046 isolated_file:0 [ 48.915891][ T3606] unevictable:768 dirty:5791 writeback:0 [ 48.915891][ T3606] slab_reclaimable:17402 slab_unreclaimable:73661 [ 48.915891][ T3606] mapped:1838 shmem:1228 pagetables:177 bounce:0 [ 48.915891][ T3606] kernel_misc_reclaimable:0 [ 48.915891][ T3606] free:1513392 free_pcp:9804 free_cma:0 [ 48.915923][ T3606] Node 0 active_anon:908kB inactive_anon:8240kB active_file:12356kB inactive_file:32184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7352kB dirty:23140kB writeback:0kB shmem:3376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7524kB pagetables:704kB all_unreclaimable? no [ 48.915954][ T3606] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 48.915983][ T3606] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.916017][ T3606] lowmem_reserve[]: 0 2633 2634 2634 2634 [ 48.916036][ T3606] Node 0 DMA32 free:2097768kB boost:0kB min:35572kB low:44464kB high:53356kB reserved_highatomic:0KB active_anon:908kB inactive_anon:8240kB active_file:12356kB inactive_file:32184kB unevictable:1536kB writepending:23140kB present:3129332kB managed:2701988kB mlocked:0kB bounce:0kB free_pcp:22064kB local_pcp:13336kB free_cma:0kB [ 48.916073][ T3606] lowmem_reserve[]: 0 0 1 1 1 [ 48.916090][ T3606] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.916123][ T3606] lowmem_reserve[]: 0 0 0 0 0 [ 48.916139][ T3606] Node 1 Normal free:3940440kB boost:0kB min:54316kB low:67892kB high:81468kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:24kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:7872kB free_cma:0kB [ 48.916173][ T3606] lowmem_reserve[]: 0 0 0 0 0 [ 48.916190][ T3606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 48.916255][ T3606] Node 0 DMA32: 2*4kB (ME) 0*8kB 2*16kB (ME) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 510*4096kB (M) = 2097768kB [ 48.916338][ T3606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 48.916393][ T3606] Node 1 Normal: 178*4kB (UE) 46*8kB (UE) 30*16kB (UME) 22*32kB (UME) 10*64kB (UME) 4*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (ME) = 3940440kB [ 48.916480][ T3606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.916490][ T3606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.916499][ T3606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.916508][ T3606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.916518][ T3606] 12383 total pagecache pages [ 48.916523][ T3606] 0 pages in swap cache [ 48.916528][ T3606] Swap cache stats: add 0, delete 0, find 0/0 [ 48.916540][ T3606] Free swap = 0kB [ 48.916545][ T3606] Total swap = 0kB [ 48.916551][ T3606] 2097051 pages RAM [ 48.916556][ T3606] 0 pages HighMem/MovableOnly [ 48.916566][ T3606] 388017 pages reserved [ 48.916572][ T3606] 0 pages cma reserved [ 48.953080][ T3608] ================================================================== [ 48.953091][ T3608] BUG: KASAN: vmalloc-out-of-bounds in bpf_jit_free+0x26c/0x2b0 [ 48.953120][ T3608] Read of size 4 at addr ffffffffa0000000 by task syz-executor334/3608 [ 48.953137][ T3608] [ 48.953141][ T3608] CPU: 0 PID: 3608 Comm: syz-executor334 Not tainted 5.19.0-rc2-syzkaller-00498-gb0d93b44641a #0 [ 48.953164][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 48.953176][ T3608] Call Trace: [ 48.953181][ T3608] [ 48.953188][ T3608] dump_stack_lvl+0xcd/0x134 [ 48.953214][ T3608] print_address_description.constprop.0.cold+0xf/0x495 [ 48.953242][ T3608] ? bpf_jit_free+0x26c/0x2b0 [ 48.953263][ T3608] kasan_report.cold+0xf4/0x1c6 [ 48.953286][ T3608] ? bpf_jit_free+0x26c/0x2b0 [ 48.953309][ T3608] bpf_jit_free+0x26c/0x2b0 [ 48.953332][ T3608] bpf_check+0x7035/0xb040 [ 48.953364][ T3608] ? bpf_get_btf_vmlinux+0x10/0x10 [ 48.953389][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.953409][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.953428][ T3608] ? ktime_get_with_offset+0x3f2/0x500 [ 48.953455][ T3608] ? memset+0x20/0x40 [ 48.953475][ T3608] ? bpf_obj_name_cpy+0x144/0x1a0 [ 48.953501][ T3608] bpf_prog_load+0xfb2/0x2250 [ 48.953529][ T3608] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 48.953555][ T3608] ? find_held_lock+0x2d/0x110 [ 48.953586][ T3608] ? __might_fault+0xd1/0x170 [ 48.953609][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.953633][ T3608] ? bpf_lsm_bpf+0x5/0x10 [ 48.953656][ T3608] __sys_bpf+0x11a1/0x5790 [ 48.953676][ T3608] ? bpf_perf_link_attach+0x520/0x520 [ 48.953695][ T3608] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.953726][ T3608] ? find_held_lock+0x2d/0x110 [ 48.953762][ T3608] __x64_sys_bpf+0x75/0xb0 [ 48.953780][ T3608] ? syscall_enter_from_user_mode+0x21/0x70 [ 48.953804][ T3608] do_syscall_64+0x35/0xb0 [ 48.953828][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 48.953852][ T3608] RIP: 0033:0x7fe5b823e209 [ 48.953869][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.953888][ T3608] RSP: 002b:00007ffc68d718c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.953908][ T3608] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe5b823e209 [ 48.953922][ T3608] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 48.953935][ T3608] RBP: 00007ffc68d718e0 R08: 0000000000000002 R09: 0000000000000001 [ 48.953948][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 48.953960][ T3608] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 48.953980][ T3608] [ 48.953986][ T3608] [ 48.953990][ T3608] Memory state around the buggy address: [ 48.954003][ T3608] BUG: unable to handle page fault for address: fffffbfff3ffffe0 [ 48.954014][ T3608] #PF: supervisor read access in kernel mode [ 48.954024][ T3608] #PF: error_code(0x0000) - not-present page [ 48.954034][ T3608] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 48.954066][ T3608] Oops: 0000 [#1] PREEMPT SMP KASAN [ 48.954082][ T3608] CPU: 0 PID: 3608 Comm: syz-executor334 Not tainted 5.19.0-rc2-syzkaller-00498-gb0d93b44641a #0 [ 48.954104][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 48.954116][ T3608] RIP: 0010:memcpy_erms+0x6/0x10 [ 48.954138][ T3608] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 48.954158][ T3608] RSP: 0018:ffffc9000215f7b8 EFLAGS: 00010082 [ 48.954176][ T3608] RAX: ffffc9000215f7c4 RBX: ffffffff9fffff00 RCX: 0000000000000010 [ 48.954190][ T3608] RDX: 0000000000000010 RSI: fffffbfff3ffffe0 RDI: ffffc9000215f7c4 [ 48.954205][ T3608] RBP: ffffffffa0000000 R08: 0000000000000007 R09: 0000000000000000 [ 48.954218][ T3608] R10: 0000000000000014 R11: 0000000000000001 R12: 00000000fffffffe [ 48.954232][ T3608] R13: ffffffff9fffff80 R14: ffff888025745880 R15: 0000000000000282 [ 48.954246][ T3608] FS: 0000555555ac7300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.954269][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.954284][ T3608] CR2: fffffbfff3ffffe0 CR3: 000000007dc79000 CR4: 00000000003506f0 [ 48.954299][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.954311][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.954325][ T3608] Call Trace: [ 48.954330][ T3608] [ 48.954337][ T3608] print_memory_metadata+0x5a/0xdf [ 48.954359][ T3608] ? is_vmalloc_addr+0x28/0x40 [ 48.954385][ T3608] ? bpf_jit_free+0x26c/0x2b0 [ 48.954407][ T3608] kasan_report.cold+0xfe/0x1c6 [ 48.954431][ T3608] ? bpf_jit_free+0x26c/0x2b0 [ 48.954455][ T3608] bpf_jit_free+0x26c/0x2b0 [ 48.954479][ T3608] bpf_check+0x7035/0xb040 [ 48.954510][ T3608] ? bpf_get_btf_vmlinux+0x10/0x10 [ 48.954535][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.954555][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.954581][ T3608] ? ktime_get_with_offset+0x3f2/0x500 [ 48.954607][ T3608] ? memset+0x20/0x40 [ 48.954628][ T3608] ? bpf_obj_name_cpy+0x144/0x1a0 [ 48.954655][ T3608] bpf_prog_load+0xfb2/0x2250 [ 48.954683][ T3608] ? __bpf_prog_put.constprop.0+0x220/0x220 [ 48.954709][ T3608] ? find_held_lock+0x2d/0x110 [ 48.954735][ T3608] ? __might_fault+0xd1/0x170 [ 48.954758][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 48.954783][ T3608] ? bpf_lsm_bpf+0x5/0x10 [ 48.954805][ T3608] __sys_bpf+0x11a1/0x5790 [ 48.954826][ T3608] ? bpf_perf_link_attach+0x520/0x520 [ 48.954846][ T3608] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.954877][ T3608] ? find_held_lock+0x2d/0x110 [ 48.954913][ T3608] __x64_sys_bpf+0x75/0xb0 [ 48.954932][ T3608] ? syscall_enter_from_user_mode+0x21/0x70 [ 48.954956][ T3608] do_syscall_64+0x35/0xb0 [ 48.954980][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 48.955004][ T3608] RIP: 0033:0x7fe5b823e209 [ 48.955020][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.955039][ T3608] RSP: 002b:00007ffc68d718c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.955059][ T3608] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe5b823e209 [ 48.955073][ T3608] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 48.955087][ T3608] RBP: 00007ffc68d718e0 R08: 0000000000000002 R09: 0000000000000001 [ 48.955100][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 48.955113][ T3608] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 48.955133][ T3608] [ 48.955140][ T3608] Modules linked in: [ 48.955150][ T3608] CR2: fffffbfff3ffffe0 [ 48.955161][ T3608] ---[ end trace 0000000000000000 ]--- [ 48.955168][ T3608] RIP: 0010:memcpy_erms+0x6/0x10 [ 48.955189][ T3608] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 48.955207][ T3608] RSP: 0018:ffffc9000215f7b8 EFLAGS: 00010082 [ 48.955222][ T3608] RAX: ffffc9000215f7c4 RBX: ffffffff9fffff00 RCX: 0000000000000010 [ 48.955235][ T3608] RDX: 0000000000000010 RSI: fffffbfff3ffffe0 RDI: ffffc9000215f7c4 [ 48.955249][ T3608] RBP: ffffffffa0000000 R08: 0000000000000007 R09: 0000000000000000 [ 48.955261][ T3608] R10: 0000000000000014 R11: 0000000000000001 R12: 00000000fffffffe [ 48.955273][ T3608] R13: ffffffff9fffff80 R14: ffff888025745880 R15: 0000000000000282 [ 48.955287][ T3608] FS: 0000555555ac7300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.955307][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.955321][ T3608] CR2: fffffbfff3ffffe0 CR3: 000000007dc79000 CR4: 00000000003506f0 [ 48.955334][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.955346][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.955359][ T3608] Kernel panic - not syncing: Fatal exception [ 48.960072][ T3608] Kernel Offset: disabled