Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts.
executing program
executing program
syzkaller login: [ 52.718707][ T3603] syz-executor427: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 52.735597][ T3603] CPU: 0 PID: 3603 Comm: syz-executor427 Not tainted 5.19.0-rc4-syzkaller-00119-g3d5a2a396f19 #0
[ 52.746114][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 52.756180][ T3603] Call Trace:
[ 52.759456][ T3603]
[ 52.762386][ T3603] dump_stack_lvl+0xcd/0x134
[ 52.767003][ T3603] warn_alloc.cold+0x9b/0x189
[ 52.771711][ T3603] ? zone_watermark_ok_safe+0x290/0x290
[ 52.777264][ T3603] ? __kasan_kmalloc+0xbd/0xd0
[ 52.782036][ T3603] ? __get_vm_area_node+0x297/0x3f0
[ 52.787286][ T3603] __vmalloc_node_range+0xdff/0x13e0
[ 52.792611][ T3603] ? bpf_int_jit_compile+0x474/0x13e0
[ 52.798007][ T3603] ? bpf_prog_alloc_no_stats+0x38/0x470
[ 52.803681][ T3603] ? vfree_atomic+0xe0/0xe0
[ 52.808232][ T3603] ? arch_prepare_bpf_dispatcher+0xc0/0xc0
[ 52.814085][ T3603] ? lockdep_init_map_type+0x21a/0x7f0
[ 52.819583][ T3603] ? bpf_prog_alloc_no_stats+0x38/0x470
[ 52.825151][ T3603] __vmalloc+0x69/0x80
[ 52.829241][ T3603] ? bpf_prog_alloc_no_stats+0x38/0x470
[ 52.834818][ T3603] bpf_prog_alloc_no_stats+0x38/0x470
[ 52.840209][ T3603] bpf_check+0x630e/0xbbc0
[ 52.844667][ T3603] ? bpf_get_btf_vmlinux+0x10/0x10
[ 52.849812][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 52.854692][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 52.859569][ T3603] ? ktime_get_with_offset+0x3f2/0x500
[ 52.865051][ T3603] ? memset+0x20/0x40
[ 52.869051][ T3603] ? bpf_obj_name_cpy+0x144/0x1a0
[ 52.874189][ T3603] bpf_prog_load+0xfb2/0x2250
[ 52.878891][ T3603] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 52.884805][ T3603] ? find_held_lock+0x2d/0x110
[ 52.889705][ T3603] ? __might_fault+0xd1/0x170
[ 52.894396][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 52.899273][ T3603] ? bpf_lsm_bpf+0x5/0x10
[ 52.903632][ T3603] __sys_bpf+0x11a1/0x5700
[ 52.908078][ T3603] ? bpf_perf_link_attach+0x520/0x520
[ 52.913506][ T3603] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 52.919535][ T3603] ? find_held_lock+0x2d/0x110
[ 52.924353][ T3603] __x64_sys_bpf+0x75/0xb0
[ 52.928795][ T3603] ? syscall_enter_from_user_mode+0x21/0x70
[ 52.934719][ T3603] do_syscall_64+0x35/0xb0
[ 52.939159][ T3603] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 52.945073][ T3603] RIP: 0033:0x7f9a9f2a1209
[ 52.949586][ T3603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.969211][ T3603] RSP: 002b:00007ffd2a0c4eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 52.977711][ T3603] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9a9f2a1209
[ 52.985816][ T3603] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005
[ 52.993801][ T3603] RBP: 00007ffd2a0c4ed0 R08: 0000000000000002 R09: 0000000000000001
[ 53.001784][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 53.009776][ T3603] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 53.018117][ T3603]
[ 53.023994][ T3603] Mem-Info:
[ 53.027138][ T3603] active_anon:226 inactive_anon:2163 isolated_anon:0
[ 53.027138][ T3603] active_file:5127 inactive_file:6035 isolated_file:0
[ 53.027138][ T3603] unevictable:768 dirty:786 writeback:0
[ 53.027138][ T3603] slab_reclaimable:17480 slab_unreclaimable:73719
[ 53.027138][ T3603] mapped:1883 shmem:1228 pagetables:199 bounce:0
[ 53.027138][ T3603] kernel_misc_reclaimable:0
[ 53.027138][ T3603] free:1512956 free_pcp:10546 free_cma:0
[ 53.069610][ T3603] Node 0 active_anon:904kB inactive_anon:8652kB active_file:20432kB inactive_file:24140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7532kB dirty:3140kB writeback:0kB shmem:3376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7436kB pagetables:792kB all_unreclaimable? no
[ 53.100586][ T3603] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no
[ 53.129879][ T3603] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 53.157111][ T3603] lowmem_reserve[]: 0 2633 2634 2634 2634
[ 53.162959][ T3603] Node 0 DMA32 free:2101184kB boost:0kB min:35572kB low:44464kB high:53356kB reserved_highatomic:0KB active_anon:904kB inactive_anon:8652kB active_file:20432kB inactive_file:24140kB unevictable:1536kB writepending:3140kB present:3129332kB managed:2701980kB mlocked:0kB bounce:0kB free_pcp:24896kB local_pcp:13848kB free_cma:0kB
[ 53.193829][ T3603] lowmem_reserve[]: 0 0 1 1 1
[ 53.198583][ T3603] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 53.225690][ T3603] lowmem_reserve[]: 0 0 0 0 0
[ 53.230574][ T3603] Node 1 Normal free:3935280kB boost:0kB min:54316kB low:67892kB high:81468kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17280kB local_pcp:5376kB free_cma:0kB
[ 53.260148][ T3603] lowmem_reserve[]: 0 0 0 0 0
[ 53.264905][ T3603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 53.277783][ T3603] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 2*16kB (ME) 2*32kB (UE) 1*64kB (M) 0*128kB 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 0*2048kB 512*4096kB (M) = 2101184kB
[ 53.294232][ T3603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 53.305957][ T3603] Node 1 Normal: 170*4kB (UME) 43*8kB (UME) 21*16kB (UME) 19*32kB (UME) 10*64kB (UME) 8*128kB (UME) 4*256kB (UME) 1*512kB (M) 0*1024kB 1*2048kB (U) 959*4096kB (M) = 3935280kB
[ 53.323758][ T3603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 53.333508][ T3603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 53.343455][ T3603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 53.353183][ T3603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 53.362822][ T3603] 12390 total pagecache pages
[ 53.367513][ T3603] 0 pages in swap cache
executing program
executing program
[ 53.371867][ T3603] Swap cache stats: add 0, delete 0, find 0/0
[ 53.377959][ T3603] Free swap = 0kB
[ 53.381947][ T3603] Total swap = 0kB
[ 53.385677][ T3603] 2097051 pages RAM
[ 53.389671][ T3603] 0 pages HighMem/MovableOnly
[ 53.394369][ T3603] 388019 pages reserved
[ 53.398516][ T3603] 0 pages cma reserved
[ 53.413524][ T3605] ==================================================================
[ 53.421607][ T3605] BUG: KASAN: vmalloc-out-of-bounds in bpf_jit_free+0x26c/0x2b0
[ 53.429256][ T3605] Read of size 4 at addr ffffffffa0000000 by task syz-executor427/3605
[ 53.437485][ T3605]
[ 53.439796][ T3605] CPU: 0 PID: 3605 Comm: syz-executor427 Not tainted 5.19.0-rc4-syzkaller-00119-g3d5a2a396f19 #0
[ 53.450290][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 53.460346][ T3605] Call Trace:
[ 53.463628][ T3605]
[ 53.466562][ T3605] dump_stack_lvl+0xcd/0x134
[ 53.471170][ T3605] print_address_description.constprop.0.cold+0xf/0x495
[ 53.478551][ T3605] ? bpf_jit_free+0x26c/0x2b0
[ 53.483238][ T3605] kasan_report.cold+0xf4/0x1c6
[ 53.488100][ T3605] ? bpf_jit_free+0x26c/0x2b0
[ 53.492800][ T3605] bpf_jit_free+0x26c/0x2b0
[ 53.497323][ T3605] bpf_check+0x71ab/0xbbc0
[ 53.501765][ T3605] ? bpf_get_btf_vmlinux+0x10/0x10
[ 53.506895][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.511764][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.516666][ T3605] ? ktime_get_with_offset+0x3f2/0x500
[ 53.522135][ T3605] ? memset+0x20/0x40
[ 53.526120][ T3605] ? bpf_obj_name_cpy+0x144/0x1a0
[ 53.531154][ T3605] bpf_prog_load+0xfb2/0x2250
[ 53.535843][ T3605] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 53.541747][ T3605] ? find_held_lock+0x2d/0x110
[ 53.546529][ T3605] ? __might_fault+0xd1/0x170
[ 53.551312][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.556209][ T3605] ? bpf_lsm_bpf+0x5/0x10
[ 53.560546][ T3605] __sys_bpf+0x11a1/0x5700
[ 53.564974][ T3605] ? bpf_perf_link_attach+0x520/0x520
[ 53.570360][ T3605] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 53.576354][ T3605] ? find_held_lock+0x2d/0x110
[ 53.581164][ T3605] __x64_sys_bpf+0x75/0xb0
[ 53.585652][ T3605] ? syscall_enter_from_user_mode+0x21/0x70
[ 53.591820][ T3605] do_syscall_64+0x35/0xb0
[ 53.596252][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.602181][ T3605] RIP: 0033:0x7f9a9f2a1209
[ 53.606657][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.626269][ T3605] RSP: 002b:00007ffd2a0c4eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 53.634774][ T3605] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9a9f2a1209
[ 53.642746][ T3605] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005
[ 53.650721][ T3605] RBP: 00007ffd2a0c4ed0 R08: 0000000000000002 R09: 0000000000000001
[ 53.658693][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 53.666678][ T3605] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 53.674745][ T3605]
[ 53.677760][ T3605]
[ 53.680093][ T3605] Memory state around the buggy address:
[ 53.685794][ T3605] BUG: unable to handle page fault for address: fffffbfff3ffffe0
[ 53.693514][ T3605] #PF: supervisor read access in kernel mode
[ 53.699488][ T3605] #PF: error_code(0x0000) - not-present page
[ 53.705549][ T3605] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0
[ 53.712179][ T3605] Oops: 0000 [#1] PREEMPT SMP KASAN
[ 53.717374][ T3605] CPU: 0 PID: 3605 Comm: syz-executor427 Not tainted 5.19.0-rc4-syzkaller-00119-g3d5a2a396f19 #0
[ 53.727871][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 53.737940][ T3605] RIP: 0010:memcpy_erms+0x6/0x10
[ 53.742901][ T3605] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe
[ 53.762600][ T3605] RSP: 0018:ffffc90002d3f7b0 EFLAGS: 00010082
[ 53.768676][ T3605] RAX: ffffc90002d3f7bc RBX: ffffffff9fffff00 RCX: 0000000000000010
[ 53.776646][ T3605] RDX: 0000000000000010 RSI: fffffbfff3ffffe0 RDI: ffffc90002d3f7bc
[ 53.784620][ T3605] RBP: ffffffffa0000000 R08: 0000000000000007 R09: 0000000000000000
[ 53.792600][ T3605] R10: 0000000000000014 R11: 000000006f6d654d R12: 00000000fffffffe
[ 53.800575][ T3605] R13: ffffffff9fffff80 R14: ffff88801b129d80 R15: 0000000000000292
[ 53.808693][ T3605] FS: 00005555574a9300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 53.817642][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.824236][ T3605] CR2: fffffbfff3ffffe0 CR3: 0000000072012000 CR4: 00000000003506f0
[ 53.832210][ T3605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.840269][ T3605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.848242][ T3605] Call Trace:
[ 53.851522][ T3605]
[ 53.854458][ T3605] print_memory_metadata+0x5a/0xdf
[ 53.859668][ T3605] ? is_vmalloc_addr+0x28/0x40
[ 53.864533][ T3605] ? bpf_jit_free+0x26c/0x2b0
[ 53.869221][ T3605] kasan_report.cold+0xfe/0x1c6
[ 53.874103][ T3605] ? bpf_jit_free+0x26c/0x2b0
[ 53.878887][ T3605] bpf_jit_free+0x26c/0x2b0
[ 53.883405][ T3605] bpf_check+0x71ab/0xbbc0
[ 53.887841][ T3605] ? bpf_get_btf_vmlinux+0x10/0x10
[ 53.892983][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.897859][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.903072][ T3605] ? ktime_get_with_offset+0x3f2/0x500
[ 53.908544][ T3605] ? memset+0x20/0x40
[ 53.912533][ T3605] ? bpf_obj_name_cpy+0x144/0x1a0
[ 53.917572][ T3605] bpf_prog_load+0xfb2/0x2250
[ 53.922351][ T3605] ? __bpf_prog_put.constprop.0+0x220/0x220
[ 53.928280][ T3605] ? find_held_lock+0x2d/0x110
[ 53.933054][ T3605] ? __might_fault+0xd1/0x170
[ 53.937757][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 53.942642][ T3605] ? bpf_lsm_bpf+0x5/0x10
[ 53.946996][ T3605] __sys_bpf+0x11a1/0x5700
[ 53.951448][ T3605] ? bpf_perf_link_attach+0x520/0x520
[ 53.956833][ T3605] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 53.962831][ T3605] ? find_held_lock+0x2d/0x110
[ 53.967618][ T3605] __x64_sys_bpf+0x75/0xb0
[ 53.972049][ T3605] ? syscall_enter_from_user_mode+0x21/0x70
[ 53.977954][ T3605] do_syscall_64+0x35/0xb0
[ 53.982395][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.988298][ T3605] RIP: 0033:0x7f9a9f2a1209
[ 53.992845][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.012892][ T3605] RSP: 002b:00007ffd2a0c4eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 54.021309][ T3605] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9a9f2a1209
[ 54.029286][ T3605] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005
[ 54.037263][ T3605] RBP: 00007ffd2a0c4ed0 R08: 0000000000000002 R09: 0000000000000001
[ 54.045239][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 54.053214][ T3605] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 54.061195][ T3605]
[ 54.064233][ T3605] Modules linked in:
[ 54.068135][ T3605] CR2: fffffbfff3ffffe0
[ 54.072296][ T3605] ---[ end trace 0000000000000000 ]---
[ 54.077750][ T3605] RIP: 0010:memcpy_erms+0x6/0x10
[ 54.082702][ T3605] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe
[ 54.102313][ T3605] RSP: 0018:ffffc90002d3f7b0 EFLAGS: 00010082
[ 54.108382][ T3605] RAX: ffffc90002d3f7bc RBX: ffffffff9fffff00 RCX: 0000000000000010
[ 54.116357][ T3605] RDX: 0000000000000010 RSI: fffffbfff3ffffe0 RDI: ffffc90002d3f7bc
[ 54.124334][ T3605] RBP: ffffffffa0000000 R08: 0000000000000007 R09: 0000000000000000
[ 54.132334][ T3605] R10: 0000000000000014 R11: 000000006f6d654d R12: 00000000fffffffe
[ 54.140316][ T3605] R13: ffffffff9fffff80 R14: ffff88801b129d80 R15: 0000000000000292
[ 54.148291][ T3605] FS: 00005555574a9300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 54.157246][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.163852][ T3605] CR2: fffffbfff3ffffe0 CR3: 0000000072012000 CR4: 00000000003506f0
[ 54.171830][ T3605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.179869][ T3605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.187880][ T3605] Kernel panic - not syncing: Fatal exception
[ 54.194153][ T3605] Kernel Offset: disabled
[ 54.198473][ T3605] Rebooting in 86400 seconds..