syzkaller login: [ 902.705487] ------------[ cut here ]------------ [ 902.706028] kernel BUG at mm/slab.c:3256! [ 902.706475] invalid opcode: 0000 [#1] SMP KASAN [ 902.706943] Dumping ftrace buffer: [ 902.707300] ------------[ cut here ]------------ [ 902.707303] kernel BUG at mm/slab.c:3256! [ 902.707328] ------------[ cut here ]------------ [ 902.707331] kernel BUG at mm/slab.c:3256! [ 902.708755] (ftrace buffer empty) [ 902.709054] Modules linked in: [ 902.709343] CPU: 3 PID: 3008 Comm: syzkaller571619 Not tainted 4.13.0-rc7-next-20170901+ #13 executing program executing program executing program [ 902.710043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 902.712890] ------------[ cut here ]------------ [ 902.712893] kernel BUG at mm/slab.c:3256! [ 902.722275] task: ffff8800682aa540 task.stack: ffff880068170000 [ 902.722786] RIP: 0010:____cache_alloc_node+0x1d7/0x1e0 [ 902.723226] RSP: 0018:ffff880068177638 EFLAGS: 00010096 [ 902.723698] RAX: ffffffffffff8b7b RBX: 0000000001080220 RCX: 0000000000000000 [ 902.724300] RDX: 00000000ffff8b7b RSI: 0000000001080220 RDI: ffff88003e800040 [ 902.724896] RBP: ffff8800681776c0 R08: 0000000000000000 R09: 0000000000000000 [ 902.725483] R10: 1ffff1000d02ede9 R11: 1ffff1000d05573b R12: ffff88003e800040 [ 902.726203] R13: ffff88003e800040 R14: 0000000000000001 R15: 00000000ffff8b7b [ 902.726790] FS: 0000000002238940(0000) GS:ffff88006df00000(0000) knlGS:0000000000000000 [ 902.727838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.728517] CR2: 0000000020001fec CR3: 0000000068a12000 CR4: 00000000000006e0 [ 902.729315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.730040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.730707] Call Trace: [ 902.730956] ? kmem_cache_alloc_node_trace+0xe9/0x760 [ 902.731482] ? lookup_elem_raw+0x181/0x210 [ 902.732492] __kmalloc_node+0x33/0x70 [ 902.732860] alloc_htab_elem+0x2a8/0x480 [ 902.733257] htab_map_update_elem+0x73e/0xb80 [ 902.733687] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.734160] ? __might_sleep+0x95/0x190 [ 902.734536] ? rcutorture_record_progress+0x10/0x10 [ 902.735865] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.736654] SyS_bpf+0x20cb/0x4c50 [ 902.737014] ? bpf_prog_get+0x20/0x20 [ 902.737405] ? lock_downgrade+0x990/0x990 [ 902.737817] ? __lock_is_held+0xbc/0x140 [ 902.738232] ? check_noncircular+0x20/0x20 [ 902.738726] ? __bfs+0x6f0/0x750 [ 902.739111] ? vma_set_page_prot+0x16b/0x230 [ 902.739552] ? check_noncircular+0x20/0x20 [ 902.740014] ? __handle_mm_fault+0x587/0x39c0 [ 902.740370] ? __pmd_alloc+0x4e0/0x4e0 [ 902.740675] ? find_held_lock+0x39/0x1d0 [ 902.741012] ? lock_downgrade+0x990/0x990 [ 902.741349] ? handle_mm_fault+0x4a2/0x860 [ 902.741670] ? down_read_trylock+0xdb/0x170 [ 902.742024] ? __handle_mm_fault+0x39c0/0x39c0 [ 902.742391] ? vmacache_find+0x61/0x270 [ 902.742690] ? vmacache_update+0xfe/0x130 [ 902.743038] ? up_read+0x1a/0x40 [ 902.743376] ? __do_page_fault+0x35b/0xb60 [ 902.743803] ? do_page_fault+0xee/0x720 [ 902.744204] ? __do_page_fault+0xb60/0xb60 [ 902.744633] ? SyS_mmap_pgoff+0x243/0x5f0 [ 902.745053] ? lockdep_sys_exit+0x47/0xf0 [ 902.745416] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 902.745741] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.746082] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 902.746392] RIP: 0033:0x436059 [ 902.746600] RSP: 002b:00007ffe50c0bd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.747122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000436059 [ 902.747616] RDX: 0000000000000020 RSI: 0000000020006000 RDI: 0000000000000002 [ 902.748172] RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000 [ 902.748890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.749611] R13: 0000000000402360 R14: 00000000004023f0 R15: 0000000000000000 [ 902.750339] Code: 83 c2 01 89 50 18 4c 03 70 08 e8 15 f4 ff ff 4d 85 f6 0f 85 3e ff ff ff 44 89 fe 4c 89 ef e8 81 fb ff ff 49 89 c6 e9 2b ff ff ff <0f> 0b 0f 0b 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 902.752357] RIP: ____cache_alloc_node+0x1d7/0x1e0 RSP: ffff880068177638 [ 902.753619] ---[ end trace 05b8a84288b4f9c9 ]--- [ 902.753623] invalid opcode: 0000 [#2] SMP KASAN [ 902.753628] Dumping ftrace buffer: [ 902.753630] (ftrace buffer empty) [ 902.753632] Modules linked in: [ 902.753638] CPU: 0 PID: 3017 Comm: syzkaller571619 Tainted: G D 4.13.0-rc7-next-20170901+ #13 [ 902.753640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 902.753642] task: ffff88003a11a280 task.stack: ffff880038120000 [ 902.753647] RIP: 0010:____cache_alloc_node+0x1d7/0x1e0 [ 902.753649] RSP: 0018:ffff880038127638 EFLAGS: 00010096 [ 902.753653] RAX: ffffffffffff8b7b RBX: 0000000001080220 RCX: 00000000000000c0 [ 902.753655] RDX: 00000000ffff8b7b RSI: 0000000001080220 RDI: ffff88003e800040 [ 902.753657] RBP: ffff8800381276c0 R08: 0000000000000000 R09: 0000000000000000 [ 902.753659] R10: 0000000000000000 R11: ffffed00073d24e8 R12: ffff88003e800040 [ 902.753662] R13: ffff88003e800040 R14: 0000000000000000 R15: 00000000ffff8b7b [ 902.753665] FS: 0000000002238940(0000) GS:ffff88003ec00000(0000) knlGS:0000000000000000 [ 902.753667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.753669] CR2: 0000000020001fec CR3: 000000003e2a8000 CR4: 00000000000006f0 [ 902.753673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.753675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.753676] Call Trace: [ 902.753681] ? kmem_cache_alloc_node_trace+0xe9/0x760 [ 902.753686] ? lock_downgrade+0x990/0x990 [ 902.753691] ? lookup_elem_raw+0x181/0x210 [ 902.753698] __kmalloc_node+0x33/0x70 [ 902.753703] alloc_htab_elem+0x2a8/0x480 [ 902.753707] ? __might_fault+0xe0/0x1d0 [ 902.753714] htab_map_update_elem+0x73e/0xb80 [ 902.753722] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.753727] ? __might_sleep+0x95/0x190 [ 902.753735] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.753741] SyS_bpf+0x20cb/0x4c50 [ 902.753748] ? bpf_prog_get+0x20/0x20 [ 902.753753] ? lock_downgrade+0x990/0x990 [ 902.753757] ? lock_acquire+0x1d5/0x580 [ 902.753764] ? perf_event_fork+0x30/0x30 [ 902.753768] ? lock_release+0xd70/0xd70 [ 902.753774] ? do_raw_spin_trylock+0x190/0x190 [ 902.753779] ? rcu_note_context_switch+0x710/0x710 [ 902.753783] ? kasan_unpoison_shadow+0x35/0x50 [ 902.753790] ? vma_set_page_prot+0x16b/0x230 [ 902.753797] ? __handle_mm_fault+0x587/0x39c0 [ 902.753803] ? __pmd_alloc+0x4e0/0x4e0 [ 902.753809] ? handle_mm_fault+0x23e/0x860 [ 902.753813] ? lock_downgrade+0x990/0x990 [ 902.753817] ? lock_downgrade+0x990/0x990 [ 902.753820] ? SyS_brk+0x6f0/0x6f0 [ 902.753826] ? handle_mm_fault+0xfa/0x860 [ 902.753831] ? __do_page_fault+0x51b/0xb60 [ 902.753835] ? lock_downgrade+0x990/0x990 [ 902.753849] ? handle_mm_fault+0x4a2/0x860 [ 902.753852] ? down_read_trylock+0xdb/0x170 [ 902.753856] ? __handle_mm_fault+0x39c0/0x39c0 [ 902.753860] ? vmacache_find+0x61/0x270 [ 902.753863] ? vmacache_update+0xfe/0x130 [ 902.753870] ? up_read+0x1a/0x40 [ 902.753874] ? __do_page_fault+0x35b/0xb60 [ 902.753882] ? do_page_fault+0xee/0x720 [ 902.753887] ? __do_page_fault+0xb60/0xb60 [ 902.753896] ? SyS_mmap_pgoff+0x243/0x5f0 [ 902.753900] ? lockdep_sys_exit+0x47/0xf0 [ 902.753905] ? prepare_exit_to_usermode+0x1a0/0x2c0 [ 902.753911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.753919] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 902.753922] RIP: 0033:0x436059 [ 902.753924] RSP: 002b:00007ffe50c0bd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.753927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000436059 [ 902.753929] RDX: 0000000000000020 RSI: 0000000020006000 RDI: 0000000000000002 [ 902.753931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.753934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.753936] R13: 0000000000402360 R14: 00000000004023f0 R15: 0000000000000000 [ 902.753945] Code: 83 c2 01 89 50 18 4c 03 70 08 e8 15 f4 ff ff 4d 85 f6 0f 85 3e ff ff ff 44 89 fe 4c 89 ef e8 81 fb ff ff 49 89 c6 e9 2b ff ff ff <0f> 0b 0f 0b 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 902.754018] RIP: ____cache_alloc_node+0x1d7/0x1e0 RSP: ffff880038127638 [ 902.754023] ---[ end trace 05b8a84288b4f9ca ]--- [ 902.754026] invalid opcode: 0000 [#3] SMP KASAN [ 902.754028] Kernel panic - not syncing: Fatal exception [ 902.754029] Dumping ftrace buffer: [ 902.754031] (ftrace buffer empty) [ 902.754032] Modules linked in: [ 902.754039] CPU: 2 PID: 3010 Comm: syzkaller571619 Tainted: G D 4.13.0-rc7-next-20170901+ #13 [ 902.754041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 902.754043] task: ffff88003adca0c0 task.stack: ffff88003b890000 [ 902.754047] RIP: 0010:____cache_alloc_node+0x1d7/0x1e0 [ 902.754049] RSP: 0018:ffff88003b897638 EFLAGS: 00010096 [ 902.754053] RAX: ffffffffffff8b7b RBX: 0000000001080220 RCX: 00000000000000c0 [ 902.754055] RDX: 00000000ffff8b7b RSI: 0000000001080220 RDI: ffff88003e800040 [ 902.754057] RBP: ffff88003b8976c0 R08: 0000000000000000 R09: 0000000000000000 [ 902.754060] R10: 0000000000000000 R11: ffffed000db09818 R12: ffff88003e800040 [ 902.754062] R13: ffff88003e800040 R14: 0000000000000001 R15: 00000000ffff8b7b [ 902.754065] FS: 0000000002238940(0000) GS:ffff88006de00000(0000) knlGS:0000000000000000 [ 902.754068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.754070] CR2: 0000000020001fec CR3: 000000003ce98000 CR4: 00000000000006e0 [ 902.754074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.754076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.754077] Call Trace: [ 902.754081] ? kmem_cache_alloc_node_trace+0xe9/0x760 [ 902.754086] ? lock_downgrade+0x990/0x990 [ 902.754091] ? lookup_elem_raw+0x181/0x210 [ 902.754098] __kmalloc_node+0x33/0x70 [ 902.754104] alloc_htab_elem+0x2a8/0x480 [ 902.754108] ? __might_fault+0xe0/0x1d0 [ 902.754115] htab_map_update_elem+0x73e/0xb80 [ 902.754124] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.754128] ? __might_sleep+0x95/0x190 [ 902.754137] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.754143] SyS_bpf+0x20cb/0x4c50 [ 902.754150] ? bpf_prog_get+0x20/0x20 [ 902.754155] ? lock_downgrade+0x990/0x990 [ 902.754159] ? lock_acquire+0x1d5/0x580 [ 902.754166] ? perf_event_fork+0x30/0x30 [ 902.754171] ? lock_release+0xd70/0xd70 [ 902.754177] ? do_raw_spin_trylock+0x190/0x190 [ 902.754182] ? rcu_note_context_switch+0x710/0x710 [ 902.754187] ? kasan_unpoison_shadow+0x35/0x50 [ 902.754193] ? vma_set_page_prot+0x16b/0x230 [ 902.754200] ? __handle_mm_fault+0x587/0x39c0 [ 902.754207] ? __pmd_alloc+0x4e0/0x4e0 [ 902.754213] ? handle_mm_fault+0x23e/0x860 [ 902.754217] ? lock_downgrade+0x990/0x990 [ 902.754221] ? lock_downgrade+0x990/0x990 [ 902.754224] ? SyS_brk+0x6f0/0x6f0 [ 902.754231] ? handle_mm_fault+0xfa/0x860 [ 902.754235] ? __do_page_fault+0x51b/0xb60 [ 902.754239] ? lock_downgrade+0x990/0x990 [ 902.754254] ? handle_mm_fault+0x4a2/0x860 [ 902.754257] ? down_read_trylock+0xdb/0x170 [ 902.754262] ? __handle_mm_fault+0x39c0/0x39c0 [ 902.754265] ? vmacache_find+0x61/0x270 [ 902.754269] ? vmacache_update+0xfe/0x130 [ 902.754276] ? up_read+0x1a/0x40 [ 902.754280] ? __do_page_fault+0x35b/0xb60 [ 902.754288] ? do_page_fault+0xee/0x720 [ 902.754292] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 902.754297] ? __do_page_fault+0xb60/0xb60 [ 902.754306] ? SyS_mmap_pgoff+0x243/0x5f0 [ 902.754311] ? lockdep_sys_exit+0x47/0xf0 [ 902.754315] ? prepare_exit_to_usermode+0x1a0/0x2c0 [ 902.754321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.754329] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 902.754332] RIP: 0033:0x436059 [ 902.754334] RSP: 002b:00007ffe50c0bd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.754338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000436059 [ 902.754340] RDX: 0000000000000020 RSI: 0000000020006000 RDI: 0000000000000002 [ 902.754342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.754344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.754347] R13: 0000000000402360 R14: 00000000004023f0 R15: 0000000000000000 [ 902.754356] Code: 83 c2 01 89 50 18 4c 03 70 08 e8 15 f4 ff ff 4d 85 f6 0f 85 3e ff ff ff 44 89 fe 4c 89 ef e8 81 fb ff ff 49 89 c6 e9 2b ff ff ff <0f> 0b 0f 0b 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 902.754432] RIP: ____cache_alloc_node+0x1d7/0x1e0 RSP: ffff88003b897638 [ 902.754434] ---[ end trace 05b8a84288b4f9cb ]--- [ 902.754438] invalid opcode: 0000 [#4] SMP KASAN [ 902.754441] Dumping ftrace buffer: [ 902.754443] (ftrace buffer empty) [ 902.754444] Modules linked in: [ 902.754450] CPU: 1 PID: 3016 Comm: syzkaller571619 Tainted: G D 4.13.0-rc7-next-20170901+ #13 [ 902.754452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 902.754454] task: ffff8800398ca240 task.stack: ffff8800386c0000 [ 902.754459] RIP: 0010:____cache_alloc_node+0x1d7/0x1e0 [ 902.754461] RSP: 0018:ffff8800386c7638 EFLAGS: 00010096 [ 902.754464] RAX: ffffffffffff8b7b RBX: 0000000001080220 RCX: 00000000000000c0 [ 902.754467] RDX: 00000000ffff8b7b RSI: 0000000001080220 RDI: ffff88003e800040 [ 902.754469] RBP: ffff8800386c76c0 R08: 0000000000000000 R09: 0000000000000000 [ 902.754471] R10: 0000000000000000 R11: ffffed0007b30220 R12: ffff88003e800040 [ 902.754474] R13: ffff88003e800040 R14: 0000000000000000 R15: 00000000ffff8b7b [ 902.754477] FS: 0000000002238940(0000) GS:ffff88003ed00000(0000) knlGS:0000000000000000 [ 902.754480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.754483] CR2: 0000000020001fec CR3: 000000003c81e000 CR4: 00000000000006e0 [ 902.754487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.754489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.754490] Call Trace: [ 902.754495] ? kmem_cache_alloc_node_trace+0xe9/0x760 [ 902.754500] ? lock_downgrade+0x990/0x990 [ 902.754504] ? lookup_elem_raw+0x181/0x210 [ 902.754512] __kmalloc_node+0x33/0x70 [ 902.754518] alloc_htab_elem+0x2a8/0x480 [ 902.754522] ? __might_fault+0xe0/0x1d0 [ 902.754529] htab_map_update_elem+0x73e/0xb80 [ 902.754538] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.754543] ? __might_sleep+0x95/0x190 [ 902.754552] ? htab_percpu_map_update_elem+0x40/0x40 [ 902.754558] SyS_bpf+0x20cb/0x4c50 [ 902.754567] ? bpf_prog_get+0x20/0x20 [ 902.754573] ? lock_downgrade+0x990/0x990 [ 902.754576] ? lock_acquire+0x1d5/0x580 [ 902.754581] ? perf_event_fork+0x30/0x30 [ 902.754584] ? lock_release+0xd70/0xd70 [ 902.754591] ? do_raw_spin_trylock+0x190/0x190 [ 902.754596] ? rcu_note_context_switch+0x710/0x710 [ 902.754601] ? kasan_unpoison_shadow+0x35/0x50 [ 902.754608] ? vma_set_page_prot+0x16b/0x230 [ 902.754615] ? __handle_mm_fault+0x587/0x39c0 [ 902.754622] ? __pmd_alloc+0x4e0/0x4e0 [ 902.754628] ? handle_mm_fault+0x23e/0x860 [ 902.754633] ? lock_downgrade+0x990/0x990 [ 902.754636] ? lock_downgrade+0x990/0x990 [ 902.754639] ? SyS_brk+0x6f0/0x6f0 [ 902.754647] ? handle_mm_fault+0xfa/0x860 [ 902.754652] ? __do_page_fault+0x51b/0xb60 [ 902.754656] ? lock_downgrade+0x990/0x990 [ 902.754671] ? handle_mm_fault+0x4a2/0x860 [ 902.754675] ? down_read_trylock+0xdb/0x170 [ 902.754679] ? __handle_mm_fault+0x39c0/0x39c0 [ 902.754683] ? vmacache_find+0x61/0x270 [ 902.754686] ? vmacache_update+0xfe/0x130 [ 902.754694] ? up_read+0x1a/0x40 [ 902.754698] ? __do_page_fault+0x35b/0xb60 [ 902.754706] ? do_page_fault+0xee/0x720 [ 902.754711] ? __do_page_fault+0xb60/0xb60 [ 902.754721] ? SyS_mmap_pgoff+0x243/0x5f0 [ 902.754727] ? lockdep_sys_exit+0x47/0xf0 [ 902.754732] ? prepare_exit_to_usermode+0x1a0/0x2c0 [ 902.754738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.754746] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 902.754749] RIP: 0033:0x436059 [ 902.754752] RSP: 002b:00007ffe50c0bd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.754755] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000436059 [ 902.754757] RDX: 0000000000000020 RSI: 0000000020006000 RDI: 0000000000000002 [ 902.754760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.754762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.754763] R13: 0000000000402360 R14: 00000000004023f0 R15: 0000000000000000 [ 902.754773] Code: 83 c2 01 89 50 18 4c 03 70 08 e8 15 f4 ff ff 4d 85 f6 0f 85 3e ff ff ff 44 89 fe 4c 89 ef e8 81 fb ff ff 49 89 c6 e9 2b ff ff ff <0f> 0b 0f 0b 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 902.754848] RIP: ____cache_alloc_node+0x1d7/0x1e0 RSP: ffff8800386c7638 [ 902.754851] ---[ end trace 05b8a84288b4f9cc ]---