Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 76.759819][ T5066] ==================================================================
[ 76.767980][ T5066] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x530
[ 76.775648][ T5066] Read of size 8 at addr ffff888077523d18 by task syz-executor124/5066
[ 76.784008][ T5066]
[ 76.786352][ T5066] CPU: 1 PID: 5066 Comm: syz-executor124 Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0
[ 76.796545][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 76.806624][ T5066] Call Trace:
[ 76.809937][ T5066]
[ 76.812887][ T5066] dump_stack_lvl+0x1e7/0x2e0
[ 76.817607][ T5066] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.822840][ T5066] ? __pfx__printk+0x10/0x10
[ 76.827476][ T5066] ? _printk+0xd5/0x120
[ 76.831697][ T5066] ? __virt_addr_valid+0x183/0x520
[ 76.836948][ T5066] ? __virt_addr_valid+0x183/0x520
[ 76.842109][ T5066] print_report+0x169/0x550
[ 76.846630][ T5066] ? __virt_addr_valid+0x183/0x520
[ 76.851853][ T5066] ? __virt_addr_valid+0x183/0x520
[ 76.856984][ T5066] ? __virt_addr_valid+0x44e/0x520
[ 76.862114][ T5066] ? __phys_addr+0xba/0x170
[ 76.866635][ T5066] ? bpf_trace_run2+0xfa/0x530
[ 76.871405][ T5066] kasan_report+0x143/0x180
[ 76.875926][ T5066] ? sock_map_delete_elem+0x97/0x140
[ 76.881244][ T5066] ? bpf_trace_run2+0xfa/0x530
[ 76.886018][ T5066] bpf_trace_run2+0xfa/0x530
[ 76.890644][ T5066] ? __kernel_text_address+0xd/0x40
[ 76.895860][ T5066] ? __pfx_bpf_trace_run2+0x10/0x10
[ 76.901094][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 76.906833][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 76.912571][ T5066] __traceiter_kfree+0x2b/0x50
[ 76.917440][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 76.923172][ T5066] kfree+0x291/0x380
[ 76.927083][ T5066] tomoyo_realpath_from_path+0xc2/0x5e0
[ 76.932734][ T5066] tomoyo_check_open_permission+0x255/0x500
[ 76.938634][ T5066] ? __lock_acquire+0x1346/0x1fd0
[ 76.943673][ T5066] ? tomoyo_check_open_permission+0x204/0x500
[ 76.949745][ T5066] ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 76.956187][ T5066] ? tomoyo_file_open+0x168/0x220
[ 76.961311][ T5066] security_file_open+0x69/0x570
[ 76.966351][ T5066] ? try_module_get+0x31/0x150
[ 76.971129][ T5066] do_dentry_open+0x327/0x15a0
[ 76.975904][ T5066] ? inode_permission+0xff/0x460
[ 76.980861][ T5066] path_openat+0x2860/0x3240
[ 76.985469][ T5066] ? __pfx_stack_trace_save+0x10/0x10
[ 76.990857][ T5066] ? __lock_acquire+0x1346/0x1fd0
[ 76.995897][ T5066] ? mark_lock+0x9a/0x350
[ 77.000246][ T5066] ? __pfx_path_openat+0x10/0x10
[ 77.005201][ T5066] do_filp_open+0x235/0x490
[ 77.009829][ T5066] ? __pfx_do_filp_open+0x10/0x10
[ 77.014879][ T5066] ? _raw_spin_unlock+0x28/0x50
[ 77.019740][ T5066] ? alloc_fd+0x59d/0x640
[ 77.024114][ T5066] do_sys_openat2+0x13e/0x1d0
[ 77.028832][ T5066] ? __pfx_do_sys_openat2+0x10/0x10
[ 77.034047][ T5066] ? __pfx_path_umount+0x10/0x10
[ 77.038995][ T5066] ? user_path_at_empty+0x4c/0x60
[ 77.044116][ T5066] __x64_sys_openat+0x247/0x2a0
[ 77.048982][ T5066] ? __pfx___x64_sys_openat+0x10/0x10
[ 77.054368][ T5066] ? do_syscall_64+0x10a/0x240
[ 77.059148][ T5066] ? do_syscall_64+0xb6/0x240
[ 77.063857][ T5066] do_syscall_64+0xfb/0x240
[ 77.068407][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 77.074328][ T5066] RIP: 0033:0x7f63f6f0e431
[ 77.078838][ T5066] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00
[ 77.098471][ T5066] RSP: 002b:00007ffff3f12b40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[ 77.106917][ T5066] RAX: ffffffffffffffda RBX: 0000000000012b85 RCX: 00007f63f6f0e431
[ 77.114897][ T5066] RDX: 0000000000090800 RSI: 00007ffff3f13cd0 RDI: 00000000ffffff9c
[ 77.122876][ T5066] RBP: 0000000000001429 R08: 0000000000000010 R09: 00007f63f6ec20b0
[ 77.130855][ T5066] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffff3f13cd0
[ 77.138833][ T5066] R13: 00007ffff3f13cf0 R14: 00007ffff3f13cd0 R15: 0000000000000014
[ 77.146821][ T5066]
[ 77.149844][ T5066]
[ 77.152168][ T5066] Allocated by task 5165:
[ 77.156493][ T5066] kasan_save_track+0x3f/0x80
[ 77.161185][ T5066] __kasan_kmalloc+0x98/0xb0
[ 77.165781][ T5066] kmalloc_trace+0x1d9/0x360
[ 77.170387][ T5066] bpf_raw_tp_link_attach+0x2a0/0x6e0
[ 77.175766][ T5066] bpf_raw_tracepoint_open+0x1c2/0x240
[ 77.181322][ T5066] __sys_bpf+0x3c0/0x810
[ 77.185592][ T5066] __x64_sys_bpf+0x7c/0x90
[ 77.190122][ T5066] do_syscall_64+0xfb/0x240
[ 77.194655][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 77.200588][ T5066]
[ 77.202922][ T5066] Freed by task 5165:
[ 77.206943][ T5066] kasan_save_track+0x3f/0x80
[ 77.211651][ T5066] kasan_save_free_info+0x40/0x50
[ 77.216692][ T5066] poison_slab_object+0xa6/0xe0
[ 77.221653][ T5066] __kasan_slab_free+0x37/0x60
[ 77.226444][ T5066] kfree+0x14a/0x380
[ 77.230386][ T5066] bpf_link_release+0x3b/0x50
[ 77.235090][ T5066] __fput+0x429/0x8a0
[ 77.239102][ T5066] task_work_run+0x24f/0x310
[ 77.243702][ T5066] do_exit+0xa1b/0x27e0
[ 77.247878][ T5066] do_group_exit+0x207/0x2c0
[ 77.252507][ T5066] __x64_sys_exit_group+0x3f/0x40
[ 77.257576][ T5066] do_syscall_64+0xfb/0x240
[ 77.262123][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 77.268054][ T5066]
[ 77.270394][ T5066] The buggy address belongs to the object at ffff888077523d00
[ 77.270394][ T5066] which belongs to the cache kmalloc-128 of size 128
[ 77.284450][ T5066] The buggy address is located 24 bytes inside of
[ 77.284450][ T5066] freed 128-byte region [ffff888077523d00, ffff888077523d80)
[ 77.298165][ T5066]
[ 77.300490][ T5066] The buggy address belongs to the physical page:
[ 77.306901][ T5066] page:ffffea0001dd48c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77523
[ 77.317065][ T5066] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 77.324638][ T5066] page_type: 0xffffffff()
[ 77.328993][ T5066] raw: 00fff00000000800 ffff888014c418c0 dead000000000122 0000000000000000
[ 77.337621][ T5066] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 77.346212][ T5066] page dumped because: kasan: bad access detected
[ 77.352627][ T5066] page_owner tracks the page as allocated
[ 77.358341][ T5066] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5162, tgid 5162 (syz-executor124), ts 76721527908, free_ts 76721343043
[ 77.376945][ T5066] post_alloc_hook+0x1ea/0x210
[ 77.381759][ T5066] get_page_from_freelist+0x33ea/0x3580
[ 77.387383][ T5066] __alloc_pages+0x256/0x680
[ 77.392038][ T5066] alloc_slab_page+0x5f/0x160
[ 77.396730][ T5066] new_slab+0x84/0x2f0
[ 77.400804][ T5066] ___slab_alloc+0xd1b/0x13e0
[ 77.405519][ T5066] __kmalloc_node_track_caller+0x2d4/0x4e0
[ 77.411362][ T5066] krealloc+0x7d/0x120
[ 77.415445][ T5066] check_stack_access_within_bounds+0x5b0/0x940
[ 77.421732][ T5066] check_mem_access+0x865/0x1e60
[ 77.426868][ T5066] do_check+0x87dd/0x10500
[ 77.431315][ T5066] do_check_common+0x14bd/0x1dd0
[ 77.436378][ T5066] bpf_check+0x136ab/0x190c0
[ 77.441017][ T5066] bpf_prog_load+0x1667/0x20f0
[ 77.445808][ T5066] __sys_bpf+0x4ee/0x810
[ 77.450070][ T5066] __x64_sys_bpf+0x7c/0x90
[ 77.454496][ T5066] page last free pid 5162 tgid 5162 stack trace:
[ 77.460949][ T5066] free_unref_page_prepare+0x968/0xa90
[ 77.466421][ T5066] free_unref_page+0x37/0x3f0
[ 77.471109][ T5066] vfree+0x186/0x2e0
[ 77.475009][ T5066] bpf_prog_calc_tag+0x663/0x900
[ 77.479961][ T5066] resolve_pseudo_ldimm64+0xe2/0x1650
[ 77.485363][ T5066] bpf_check+0x6175/0x190c0
[ 77.490082][ T5066] bpf_prog_load+0x1667/0x20f0
[ 77.494873][ T5066] __sys_bpf+0x4ee/0x810
[ 77.499152][ T5066] __x64_sys_bpf+0x7c/0x90
[ 77.503590][ T5066] do_syscall_64+0xfb/0x240
[ 77.508135][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 77.514064][ T5066]
[ 77.516396][ T5066] Memory state around the buggy address:
[ 77.522029][ T5066] ffff888077523c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.530092][ T5066] ffff888077523c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 77.538178][ T5066] >ffff888077523d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.546239][ T5066] ^
[ 77.551085][ T5066] ffff888077523d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 77.559148][ T5066] ffff888077523e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[ 77.567207][ T5066] ==================================================================
[ 77.575439][ T5066] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.582665][ T5066] CPU: 1 PID: 5066 Comm: syz-executor124 Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0
[ 77.592764][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 77.602851][ T5066] Call Trace:
[ 77.606143][ T5066]
[ 77.609088][ T5066] dump_stack_lvl+0x1e7/0x2e0
[ 77.613788][ T5066] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.618998][ T5066] ? __pfx__printk+0x10/0x10
[ 77.623602][ T5066] ? vscnprintf+0x5d/0x90
[ 77.627949][ T5066] panic+0x349/0x860
[ 77.631859][ T5066] ? check_panic_on_warn+0x21/0xb0
[ 77.636983][ T5066] ? __pfx_panic+0x10/0x10
[ 77.641427][ T5066] ? mark_lock+0x9a/0x350
[ 77.645788][ T5066] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 77.651718][ T5066] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 77.657634][ T5066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 77.663972][ T5066] ? print_report+0x502/0x550
[ 77.668682][ T5066] check_panic_on_warn+0x86/0xb0
[ 77.673634][ T5066] ? bpf_trace_run2+0xfa/0x530
[ 77.678407][ T5066] end_report+0x6e/0x140
[ 77.682668][ T5066] kasan_report+0x154/0x180
[ 77.687180][ T5066] ? sock_map_delete_elem+0x97/0x140
[ 77.692476][ T5066] ? bpf_trace_run2+0xfa/0x530
[ 77.697257][ T5066] bpf_trace_run2+0xfa/0x530
[ 77.701855][ T5066] ? __kernel_text_address+0xd/0x40
[ 77.707066][ T5066] ? __pfx_bpf_trace_run2+0x10/0x10
[ 77.712275][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 77.718011][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 77.723742][ T5066] __traceiter_kfree+0x2b/0x50
[ 77.728521][ T5066] ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 77.734250][ T5066] kfree+0x291/0x380
[ 77.738161][ T5066] tomoyo_realpath_from_path+0xc2/0x5e0
[ 77.743725][ T5066] tomoyo_check_open_permission+0x255/0x500
[ 77.749628][ T5066] ? __lock_acquire+0x1346/0x1fd0
[ 77.754691][ T5066] ? tomoyo_check_open_permission+0x204/0x500
[ 77.760764][ T5066] ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 77.767294][ T5066] ? tomoyo_file_open+0x168/0x220
[ 77.772340][ T5066] security_file_open+0x69/0x570
[ 77.777282][ T5066] ? try_module_get+0x31/0x150
[ 77.782066][ T5066] do_dentry_open+0x327/0x15a0
[ 77.786853][ T5066] ? inode_permission+0xff/0x460
[ 77.795895][ T5066] path_openat+0x2860/0x3240
[ 77.800497][ T5066] ? __pfx_stack_trace_save+0x10/0x10
[ 77.805886][ T5066] ? __lock_acquire+0x1346/0x1fd0
[ 77.810929][ T5066] ? mark_lock+0x9a/0x350
[ 77.815274][ T5066] ? __pfx_path_openat+0x10/0x10
[ 77.820240][ T5066] do_filp_open+0x235/0x490
[ 77.824777][ T5066] ? __pfx_do_filp_open+0x10/0x10
[ 77.829825][ T5066] ? _raw_spin_unlock+0x28/0x50
[ 77.834715][ T5066] ? alloc_fd+0x59d/0x640
[ 77.839087][ T5066] do_sys_openat2+0x13e/0x1d0
[ 77.843782][ T5066] ? __pfx_do_sys_openat2+0x10/0x10
[ 77.849023][ T5066] ? __pfx_path_umount+0x10/0x10
[ 77.853985][ T5066] ? user_path_at_empty+0x4c/0x60
[ 77.859049][ T5066] __x64_sys_openat+0x247/0x2a0
[ 77.863933][ T5066] ? __pfx___x64_sys_openat+0x10/0x10
[ 77.869345][ T5066] ? do_syscall_64+0x10a/0x240
[ 77.874186][ T5066] ? do_syscall_64+0xb6/0x240
[ 77.878886][ T5066] do_syscall_64+0xfb/0x240
[ 77.883422][ T5066] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 77.889356][ T5066] RIP: 0033:0x7f63f6f0e431
[ 77.893791][ T5066] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00
[ 77.913431][ T5066] RSP: 002b:00007ffff3f12b40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[ 77.921861][ T5066] RAX: ffffffffffffffda RBX: 0000000000012b85 RCX: 00007f63f6f0e431
[ 77.929838][ T5066] RDX: 0000000000090800 RSI: 00007ffff3f13cd0 RDI: 00000000ffffff9c
[ 77.937815][ T5066] RBP: 0000000000001429 R08: 0000000000000010 R09: 00007f63f6ec20b0
[ 77.945796][ T5066] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffff3f13cd0
[ 77.953772][ T5066] R13: 00007ffff3f13cf0 R14: 00007ffff3f13cd0 R15: 0000000000000014
[ 77.961769][ T5066]
[ 77.965067][ T5066] Kernel Offset: disabled
[ 77.969414][ T5066] Rebooting in 86400 seconds..