Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.327801] ================================================================== [ 30.335173] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0x146f/0x17d0 [ 30.342516] Read of size 8 at addr ffff888091c079a8 by task syz-executor307/7954 [ 30.350113] [ 30.351724] CPU: 0 PID: 7954 Comm: syz-executor307 Not tainted 4.14.280-syzkaller #0 [ 30.359582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.369021] Call Trace: [ 30.371599] dump_stack+0x1b2/0x281 [ 30.375216] print_address_description.cold+0x54/0x1d3 [ 30.380477] kasan_report_error.cold+0x8a/0x191 [ 30.385144] ? unwind_next_frame+0x146f/0x17d0 [ 30.389712] __asan_report_load8_noabort+0x68/0x70 [ 30.394627] ? unwind_next_frame+0x146f/0x17d0 [ 30.399192] unwind_next_frame+0x146f/0x17d0 [ 30.403592] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.408947] ? deref_stack_reg+0x1a0/0x1a0 [ 30.413165] ? check_preemption_disabled+0x35/0x240 [ 30.418163] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.423506] perf_callchain_kernel+0x38c/0x520 [ 30.428091] ? kvm_sched_clock_read+0x5/0x10 [ 30.432476] ? sched_clock+0x2a/0x40 [ 30.436168] ? arch_perf_update_userpage+0x300/0x300 [ 30.441255] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.446594] ? arch_perf_update_userpage+0x300/0x300 [ 30.452107] ? check_preemption_disabled+0x35/0x240 [ 30.457193] get_perf_callchain+0x2de/0x740 [ 30.461504] ? put_callchain_buffers+0x60/0x60 [ 30.466103] ? kvm_clock_read+0x1f/0x30 [ 30.470064] ? kvm_sched_clock_read+0x5/0x10 [ 30.474449] ? sched_clock+0x2a/0x40 [ 30.478154] ? sched_clock_cpu+0x18/0x1b0 [ 30.482383] perf_callchain+0x147/0x190 [ 30.486338] perf_prepare_sample+0xc9a/0x1370 [ 30.490823] ? perf_output_sample+0x16f0/0x16f0 [ 30.495577] perf_event_output_forward+0xc9/0x1f0 [ 30.500540] ? perf_prepare_sample+0x1370/0x1370 [ 30.505305] ? check_preemption_disabled+0x35/0x240 [ 30.510388] __perf_event_overflow+0x113/0x310 [ 30.515002] perf_swevent_event+0x299/0x460 [ 30.519306] perf_tp_event+0x540/0x6e0 [ 30.523178] ? perf_swevent_event+0x460/0x460 [ 30.527739] ? perf_trace_run_bpf_submit+0x119/0x200 [ 30.532824] ? perf_trace_run_bpf_submit+0x119/0x200 [ 30.537915] ? perf_trace_lock+0x2d6/0x490 [ 30.542146] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 30.548009] ? perf_trace_run_bpf_submit+0x119/0x200 [ 30.553090] ? perf_trace_lock_acquire+0x510/0x510 [ 30.557996] ? __save_stack_trace+0x63/0x160 [ 30.562380] ? deref_stack_reg+0x124/0x1a0 [ 30.566595] ? is_bpf_text_address+0x91/0x150 [ 30.571078] ? lock_acquire+0x170/0x3f0 [ 30.575026] ? lock_downgrade+0x740/0x740 [ 30.579188] ? __lock_acquire+0x5fc/0x3f20 [ 30.583405] ? perf_trace_run_bpf_submit+0x119/0x200 [ 30.588498] ? check_preemption_disabled+0x35/0x240 [ 30.593504] perf_trace_run_bpf_submit+0x119/0x200 [ 30.598418] perf_trace_lock+0x2d6/0x490 [ 30.602469] ? kasan_slab_free+0x12d/0x1a0 [ 30.606691] ? perf_trace_lock_acquire+0x510/0x510 [ 30.611598] ? free_pgd_range+0x84b/0xcd0 [ 30.615726] ? free_pgtables+0x1ec/0x2b0 [ 30.619766] ? exit_mmap+0x27f/0x4d0 [ 30.623467] ? do_exit+0x984/0x2850 [ 30.627070] ? SyS_exit_group+0x19/0x20 [ 30.631038] ? do_syscall_64+0x1d5/0x640 [ 30.635090] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.640434] ? debug_check_no_obj_freed+0x2c0/0x680 [ 30.645428] ? perf_trace_lock_acquire+0x510/0x510 [ 30.650339] lock_release+0x4df/0x870 [ 30.654139] ? lock_acquire+0x170/0x3f0 [ 30.658097] ? lock_downgrade+0x740/0x740 [ 30.662227] _raw_spin_unlock_irqrestore+0x1b/0xe0 [ 30.667259] debug_check_no_obj_freed+0x2c0/0x680 [ 30.672090] ? debug_object_activate+0x490/0x490 [ 30.676840] kmem_cache_free+0x156/0x2b0 [ 30.680891] ___pmd_free_tlb+0xa3/0xf0 [ 30.684768] free_pgd_range+0x697/0xcd0 [ 30.688723] free_pgtables+0x1ec/0x2b0 [ 30.692587] exit_mmap+0x27f/0x4d0 [ 30.696104] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 30.700848] ? kmem_cache_free+0x23a/0x2b0 [ 30.705062] ? __khugepaged_exit+0x29b/0x3c0 [ 30.709449] mmput+0xfa/0x420 [ 30.712594] do_exit+0x984/0x2850 [ 30.716032] ? __do_page_fault+0x571/0xad0 [ 30.720245] ? mm_update_next_owner+0x5b0/0x5b0 [ 30.724889] ? lock_downgrade+0x740/0x740 [ 30.729013] do_group_exit+0x100/0x2e0 [ 30.732878] SyS_exit_group+0x19/0x20 [ 30.736655] ? do_group_exit+0x2e0/0x2e0 [ 30.740692] do_syscall_64+0x1d5/0x640 [ 30.744571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.749742] RIP: 0033:0x7fddcf172a89 [ 30.753505] RSP: 002b:00007ffdda88a138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.761200] RAX: ffffffffffffffda RBX: 00007fddcf1e6330 RCX: 00007fddcf172a89 [ 30.768448] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 30.775696] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 00007ffdda88a328 [ 30.783291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fddcf1e6330 [ 30.790543] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 30.797790] [ 30.799391] The buggy address belongs to the page: [ 30.804324] page:ffffea00024701c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 30.812444] flags: 0xfff00000000000() [ 30.816226] raw: 00fff00000000000 0000000000000000 0000000000000000 00000000ffffffff [ 30.824103] raw: 0000000000000000 ffffea00024701e0 0000000000000000 0000000000000000 [ 30.832139] page dumped because: kasan: bad access detected [ 30.837818] [ 30.839422] Memory state around the buggy address: [ 30.844419] ffff888091c07880: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 04 [ 30.851774] ffff888091c07900: f2 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 f1 [ 30.859112] >ffff888091c07980: f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 30.866446] ^ [ 30.871186] ffff888091c07a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 [ 30.878522] ffff888091c07a80: f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 30.885945] ================================================================== [ 30.893364] Disabling lock debugging due to kernel taint [ 30.898820] Kernel panic - not syncing: panic_on_warn set ... [ 30.898820] [ 30.907785] CPU: 0 PID: 7954 Comm: syz-executor307 Tainted: G B 4.14.280-syzkaller #0 [ 30.917085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.926414] Call Trace: [ 30.928990] dump_stack+0x1b2/0x281 [ 30.932592] panic+0x1f9/0x42d [ 30.935849] ? add_taint.cold+0x16/0x16 [ 30.939802] ? lock_downgrade+0x740/0x740 [ 30.943925] kasan_end_report+0x43/0x49 [ 30.947889] kasan_report_error.cold+0xa7/0x191 [ 30.952650] ? unwind_next_frame+0x146f/0x17d0 [ 30.957207] __asan_report_load8_noabort+0x68/0x70 [ 30.962112] ? unwind_next_frame+0x146f/0x17d0 [ 30.966670] unwind_next_frame+0x146f/0x17d0 [ 30.971061] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.976406] ? deref_stack_reg+0x1a0/0x1a0 [ 30.980618] ? check_preemption_disabled+0x35/0x240 [ 30.985620] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.990966] perf_callchain_kernel+0x38c/0x520 [ 30.995527] ? kvm_sched_clock_read+0x5/0x10 [ 31.000003] ? sched_clock+0x2a/0x40 [ 31.003695] ? arch_perf_update_userpage+0x300/0x300 [ 31.008777] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 31.014116] ? arch_perf_update_userpage+0x300/0x300 [ 31.019195] ? check_preemption_disabled+0x35/0x240 [ 31.024191] get_perf_callchain+0x2de/0x740 [ 31.028498] ? put_callchain_buffers+0x60/0x60 [ 31.033054] ? kvm_clock_read+0x1f/0x30 [ 31.037005] ? kvm_sched_clock_read+0x5/0x10 [ 31.041476] ? sched_clock+0x2a/0x40 [ 31.045169] ? sched_clock_cpu+0x18/0x1b0 [ 31.049293] perf_callchain+0x147/0x190 [ 31.053246] perf_prepare_sample+0xc9a/0x1370 [ 31.057716] ? perf_output_sample+0x16f0/0x16f0 [ 31.062361] perf_event_output_forward+0xc9/0x1f0 [ 31.067188] ? perf_prepare_sample+0x1370/0x1370 [ 31.071926] ? check_preemption_disabled+0x35/0x240 [ 31.076917] __perf_event_overflow+0x113/0x310 [ 31.081475] perf_swevent_event+0x299/0x460 [ 31.085770] perf_tp_event+0x540/0x6e0 [ 31.089719] ? perf_swevent_event+0x460/0x460 [ 31.094188] ? perf_trace_run_bpf_submit+0x119/0x200 [ 31.099353] ? perf_trace_run_bpf_submit+0x119/0x200 [ 31.104435] ? perf_trace_lock+0x2d6/0x490 [ 31.108648] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 31.114530] ? perf_trace_run_bpf_submit+0x119/0x200 [ 31.119608] ? perf_trace_lock_acquire+0x510/0x510 [ 31.124511] ? __save_stack_trace+0x63/0x160 [ 31.128894] ? deref_stack_reg+0x124/0x1a0 [ 31.133106] ? is_bpf_text_address+0x91/0x150 [ 31.137575] ? lock_acquire+0x170/0x3f0 [ 31.141519] ? lock_downgrade+0x740/0x740 [ 31.145641] ? __lock_acquire+0x5fc/0x3f20 [ 31.149861] ? perf_trace_run_bpf_submit+0x119/0x200 [ 31.155033] ? check_preemption_disabled+0x35/0x240 [ 31.160026] perf_trace_run_bpf_submit+0x119/0x200 [ 31.164933] perf_trace_lock+0x2d6/0x490 [ 31.168968] ? kasan_slab_free+0x12d/0x1a0 [ 31.173176] ? perf_trace_lock_acquire+0x510/0x510 [ 31.178084] ? free_pgd_range+0x84b/0xcd0 [ 31.182211] ? free_pgtables+0x1ec/0x2b0 [ 31.186248] ? exit_mmap+0x27f/0x4d0 [ 31.189941] ? do_exit+0x984/0x2850 [ 31.193568] ? SyS_exit_group+0x19/0x20 [ 31.197519] ? do_syscall_64+0x1d5/0x640 [ 31.201559] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 31.206899] ? debug_check_no_obj_freed+0x2c0/0x680 [ 31.211889] ? perf_trace_lock_acquire+0x510/0x510 [ 31.216792] lock_release+0x4df/0x870 [ 31.220566] ? lock_acquire+0x170/0x3f0 [ 31.224515] ? lock_downgrade+0x740/0x740 [ 31.228639] _raw_spin_unlock_irqrestore+0x1b/0xe0 [ 31.233546] debug_check_no_obj_freed+0x2c0/0x680 [ 31.238367] ? debug_object_activate+0x490/0x490 [ 31.243128] kmem_cache_free+0x156/0x2b0 [ 31.247165] ___pmd_free_tlb+0xa3/0xf0 [ 31.251289] free_pgd_range+0x697/0xcd0 [ 31.255239] free_pgtables+0x1ec/0x2b0 [ 31.259100] exit_mmap+0x27f/0x4d0 [ 31.262702] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 31.267347] ? kmem_cache_free+0x23a/0x2b0 [ 31.271557] ? __khugepaged_exit+0x29b/0x3c0 [ 31.275943] mmput+0xfa/0x420 [ 31.279024] do_exit+0x984/0x2850 [ 31.282454] ? __do_page_fault+0x571/0xad0 [ 31.286664] ? mm_update_next_owner+0x5b0/0x5b0 [ 31.291307] ? lock_downgrade+0x740/0x740 [ 31.295428] do_group_exit+0x100/0x2e0 [ 31.299292] SyS_exit_group+0x19/0x20 [ 31.303070] ? do_group_exit+0x2e0/0x2e0 [ 31.307104] do_syscall_64+0x1d5/0x640 [ 31.310971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 31.316140] RIP: 0033:0x7fddcf172a89 [ 31.319823] RSP: 002b:00007ffdda88a138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.327507] RAX: ffffffffffffffda RBX: 00007fddcf1e6330 RCX: 00007fddcf172a89 [ 31.334757] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.342001] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 00007ffdda88a328 [ 31.349243] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fddcf1e6330 [ 31.356493] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 31.363914] Kernel Offset: disabled [ 31.367533] Rebooting in 86400 seconds..