Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   57.733898] ==================================================================
[   57.741434] BUG: KASAN: slab-out-of-bounds in queue_stack_map_push_elem+0x185/0x290
[   57.749267] Write of size 262146 at addr ffff8801bc989408 by task syz-executor467/5982
[   57.757305] 
[   57.758920] CPU: 0 PID: 5982 Comm: syz-executor467 Not tainted 4.20.0-rc1+ #153
[   57.766348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   57.775682] Call Trace:
[   57.778366]  dump_stack+0x244/0x39d
[   57.782002]  ? dump_stack_print_info.cold.1+0x20/0x20
[   57.787174]  ? printk+0xa7/0xcf
[   57.790439]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[   57.795184]  print_address_description.cold.7+0x9/0x1ff
[   57.800666]  kasan_report.cold.8+0x242/0x309
[   57.805063]  ? queue_stack_map_push_elem+0x185/0x290
[   57.810163]  check_memory_region+0x13e/0x1b0
[   57.814559]  memcpy+0x37/0x50
[   57.817657]  queue_stack_map_push_elem+0x185/0x290
[   57.822571]  ? queue_map_pop_elem+0x30/0x30
[   57.826878]  map_update_elem+0x605/0xf60
[   57.830929]  __x64_sys_bpf+0x32d/0x520
[   57.834804]  ? bpf_prog_get+0x20/0x20
[   57.838603]  do_syscall_64+0x1b9/0x820
[   57.842473]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[   57.847822]  ? syscall_return_slowpath+0x5e0/0x5e0
[   57.852738]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   57.857566]  ? trace_hardirqs_on_caller+0x310/0x310
[   57.862580]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[   57.867579]  ? prepare_exit_to_usermode+0x291/0x3b0
[   57.872740]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   57.877574]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   57.882750] RIP: 0033:0x4400e9
[   57.885931] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   57.904813] RSP: 002b:00007ffc2f089808 EFLAGS: 00000213 ORIG_RAX: 0000000000000141
[   57.912503] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400e9
[   57.919754] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000002
[   57.927256] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
[   57.934513] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401970
[   57.941770] R13: 0000000000401a00 R14: 0000000000000000 R15: 0000000000000000
[   57.949037] 
[   57.950650] Allocated by task 5982:
[   57.954266]  save_stack+0x43/0xd0
[   57.957704]  kasan_kmalloc+0xc7/0xe0
[   57.961397]  __kmalloc_node+0x50/0x70
[   57.965180]  bpf_map_area_alloc+0x3f/0x90
[   57.969324]  queue_stack_map_alloc+0x192/0x290
[   57.973884]  map_create+0x3bd/0x1110
[   57.977580]  __x64_sys_bpf+0x303/0x520
[   57.981452]  do_syscall_64+0x1b9/0x820
[   57.985325]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   57.990490] 
[   57.992101] Freed by task 3750:
[   57.995369]  save_stack+0x43/0xd0
[   57.998809]  __kasan_slab_free+0x102/0x150
[   58.003034]  kasan_slab_free+0xe/0x10
[   58.006895]  kfree+0xcf/0x230
[   58.009992]  kernfs_fop_release+0x12b/0x1a0
[   58.014303]  __fput+0x385/0xa30
[   58.017570]  ____fput+0x15/0x20
[   58.020835]  task_work_run+0x1e8/0x2a0
[   58.024710]  exit_to_usermode_loop+0x318/0x380
[   58.029278]  do_syscall_64+0x6be/0x820
[   58.033152]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   58.038317] 
[   58.039934] The buggy address belongs to the object at ffff8801bc9892c0
[   58.039934]  which belongs to the cache kmalloc-512 of size 512
[   58.052662] The buggy address is located 328 bytes inside of
[   58.052662]  512-byte region [ffff8801bc9892c0, ffff8801bc9894c0)
[   58.064519] The buggy address belongs to the page:
[   58.069458] page:ffffea0006f26240 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0
[   58.077582] flags: 0x2fffc0000000200(slab)
[   58.081914] raw: 02fffc0000000200 ffffea0006f2e788 ffffea0006f26308 ffff8801da800940
[   58.089783] raw: 0000000000000000 ffff8801bc989040 0000000100000006 0000000000000000
[   58.097643] page dumped because: kasan: bad access detected
[   58.103341] 
[   58.104952] Memory state around the buggy address:
[   58.109863]  ffff8801bc989300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   58.117202]  ffff8801bc989380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   58.124546] >ffff8801bc989400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   58.131959]                                            ^
[   58.137404]  ffff8801bc989480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   58.144748]  ffff8801bc989500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[   58.152135] ==================================================================
[   58.159482] Disabling lock debugging due to kernel taint
[   58.164910] Kernel panic - not syncing: panic_on_warn set ...
[   58.170783] CPU: 0 PID: 5982 Comm: syz-executor467 Tainted: G    B             4.20.0-rc1+ #153
[   58.179605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   58.188941] Call Trace:
[   58.191529]  dump_stack+0x244/0x39d
[   58.195153]  ? dump_stack_print_info.cold.1+0x20/0x20
[   58.200332]  panic+0x2ad/0x55c
[   58.203511]  ? add_taint.cold.5+0x16/0x16
[   58.207646]  ? add_taint.cold.5+0x5/0x16
[   58.211689]  ? trace_hardirqs_off+0xaf/0x310
[   58.216082]  kasan_end_report+0x47/0x4f
[   58.220036]  kasan_report.cold.8+0x76/0x309
[   58.224341]  ? queue_stack_map_push_elem+0x185/0x290
[   58.229431]  check_memory_region+0x13e/0x1b0
[   58.233822]  memcpy+0x37/0x50
[   58.237017]  queue_stack_map_push_elem+0x185/0x290
[   58.241931]  ? queue_map_pop_elem+0x30/0x30
[   58.246238]  map_update_elem+0x605/0xf60
[   58.250291]  __x64_sys_bpf+0x32d/0x520
[   58.254163]  ? bpf_prog_get+0x20/0x20
[   58.257956]  do_syscall_64+0x1b9/0x820
[   58.261828]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[   58.267176]  ? syscall_return_slowpath+0x5e0/0x5e0
[   58.272100]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   58.276932]  ? trace_hardirqs_on_caller+0x310/0x310
[   58.281936]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[   58.286938]  ? prepare_exit_to_usermode+0x291/0x3b0
[   58.291941]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   58.296774]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   58.301955] RIP: 0033:0x4400e9
[   58.305143] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   58.324039] RSP: 002b:00007ffc2f089808 EFLAGS: 00000213 ORIG_RAX: 0000000000000141
[   58.331729] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400e9
[   58.338982] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000002
[   58.346235] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
[   58.353534] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401970
[   58.360814] R13: 0000000000401a00 R14: 0000000000000000 R15: 0000000000000000
[   58.369420] Kernel Offset: disabled
[   58.373040] Rebooting in 86400 seconds..