Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 49.929178][ T7822] ================================================================== [ 49.937342][ T7822] BUG: KASAN: slab-out-of-bounds in bpf_int_jit_compile+0x4d19/0x7530 [ 49.945464][ T7822] Read of size 4 at addr ffff8880960cc2bc by task syz-executor607/7822 [ 49.953665][ T7822] [ 49.955972][ T7822] CPU: 0 PID: 7822 Comm: syz-executor607 Not tainted 5.2.0+ #37 [ 49.963572][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.973609][ T7822] Call Trace: [ 49.976879][ T7822] dump_stack+0x1d8/0x2f8 [ 49.981187][ T7822] print_address_description+0x75/0x5b0 [ 49.986714][ T7822] ? log_buf_vmcoreinfo_setup+0x153/0x153 [ 49.992407][ T7822] __kasan_report+0x14b/0x1c0 [ 49.997064][ T7822] ? bpf_int_jit_compile+0x4d19/0x7530 [ 50.002495][ T7822] kasan_report+0x26/0x50 [ 50.006799][ T7822] __asan_report_load4_noabort+0x14/0x20 [ 50.012400][ T7822] bpf_int_jit_compile+0x4d19/0x7530 [ 50.017666][ T7822] ? trace_lock_acquire+0x1b0/0x1b0 [ 50.022896][ T7822] ? iosf_mbi_probe+0xa0/0xa0 [ 50.027554][ T7822] ? ktime_get_with_offset+0x98/0x190 [ 50.032898][ T7822] ? __lock_acquire+0x4750/0x4750 [ 50.037936][ T7822] ? read_seqcount_begin+0x12a/0x1c0 [ 50.043236][ T7822] bpf_prog_select_runtime+0x756/0xa50 [ 50.048669][ T7822] ? memset+0x31/0x40 [ 50.052667][ T7822] ? bpf_obj_name_cpy+0x9a9/0x1400 [ 50.057755][ T7822] __do_sys_bpf+0x7d4e/0xc0e0 [ 50.062416][ T7822] ? __bpf_prog_put_rcu+0x320/0x320 [ 50.067587][ T7822] ? trace_hardirqs_on+0x74/0x80 [ 50.072496][ T7822] ? do_huge_pmd_anonymous_page+0x1680/0x1cf0 [ 50.078535][ T7822] ? rcu_lock_release+0x9/0x30 [ 50.083273][ T7822] ? thp_get_unmapped_area+0xa0/0xa0 [ 50.088553][ T7822] ? handle_mm_fault+0xd7f/0x6080 [ 50.093566][ T7822] ? __lock_acquire+0x4750/0x4750 [ 50.098564][ T7822] ? vmacache_update+0xb7/0x120 [ 50.103412][ T7822] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 50.108845][ T7822] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 50.114536][ T7822] ? do_syscall_64+0x1d/0x140 [ 50.119187][ T7822] __x64_sys_bpf+0x7a/0x90 [ 50.123576][ T7822] do_syscall_64+0xfe/0x140 [ 50.128057][ T7822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.133935][ T7822] RIP: 0033:0x4402c9 [ 50.137805][ T7822] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.157402][ T7822] RSP: 002b:00007ffeb7a02c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.165789][ T7822] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402c9 [ 50.173770][ T7822] RDX: 0000000000000046 RSI: 0000000020000180 RDI: 0000000000000005 [ 50.181717][ T7822] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 50.189673][ T7822] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401b50 [ 50.197616][ T7822] R13: 0000000000401be0 R14: 0000000000000000 R15: 0000000000000000 [ 50.205567][ T7822] [ 50.207873][ T7822] Allocated by task 7822: [ 50.212181][ T7822] __kasan_kmalloc+0x11c/0x1b0 [ 50.216915][ T7822] kasan_kmalloc+0x9/0x10 [ 50.221214][ T7822] kmem_cache_alloc_trace+0x215/0x2f0 [ 50.226623][ T7822] bpf_int_jit_compile+0x1b2/0x7530 [ 50.231794][ T7822] bpf_prog_select_runtime+0x756/0xa50 [ 50.237223][ T7822] __do_sys_bpf+0x7d4e/0xc0e0 [ 50.241882][ T7822] __x64_sys_bpf+0x7a/0x90 [ 50.246272][ T7822] do_syscall_64+0xfe/0x140 [ 50.250745][ T7822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.256611][ T7822] [ 50.258915][ T7822] Freed by task 7329: [ 50.262869][ T7822] __kasan_slab_free+0x12a/0x1e0 [ 50.267775][ T7822] kasan_slab_free+0xe/0x10 [ 50.272247][ T7822] kfree+0x115/0x200 [ 50.276113][ T7822] tomoyo_path_perm+0x6cc/0x8b0 [ 50.280937][ T7822] tomoyo_inode_getattr+0x1c/0x20 [ 50.285930][ T7822] security_inode_getattr+0xd5/0x150 [ 50.291187][ T7822] vfs_getattr+0x2a/0x6d0 [ 50.295486][ T7822] __se_sys_newstat+0x10c/0x210 [ 50.300304][ T7822] __x64_sys_newstat+0x5b/0x70 [ 50.305125][ T7822] do_syscall_64+0xfe/0x140 [ 50.309601][ T7822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.315465][ T7822] [ 50.317765][ T7822] The buggy address belongs to the object at ffff8880960cc280 [ 50.317765][ T7822] which belongs to the cache kmalloc-32 of size 32 [ 50.331616][ T7822] The buggy address is located 28 bytes to the right of [ 50.331616][ T7822] 32-byte region [ffff8880960cc280, ffff8880960cc2a0) [ 50.345291][ T7822] The buggy address belongs to the page: [ 50.350904][ T7822] page:ffffea0002583300 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880960ccfc1 [ 50.361283][ T7822] flags: 0x1fffc0000000200(slab) [ 50.366205][ T7822] raw: 01fffc0000000200 ffffea00027f47c8 ffffea0002a53a48 ffff8880aa4001c0 [ 50.374762][ T7822] raw: ffff8880960ccfc1 ffff8880960cc000 000000010000003f 0000000000000000 [ 50.383326][ T7822] page dumped because: kasan: bad access detected [ 50.389705][ T7822] [ 50.392005][ T7822] Memory state around the buggy address: [ 50.397605][ T7822] ffff8880960cc180: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 50.405651][ T7822] ffff8880960cc200: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc [ 50.413699][ T7822] >ffff8880960cc280: 00 00 00 00 fc fc fc fc 00 00 fc fc fc fc fc fc [ 50.421728][ T7822] ^ [ 50.427592][ T7822] ffff8880960cc300: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc [ 50.435715][ T7822] ffff8880960cc380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 50.443753][ T7822] ================================================================== [ 50.451798][ T7822] Disabling lock debugging due to kernel taint [ 50.458223][ T7822] Kernel panic - not syncing: panic_on_warn set ... [ 50.464812][ T7822] CPU: 0 PID: 7822 Comm: syz-executor607 Tainted: G B 5.2.0+ #37 [ 50.473801][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.483827][ T7822] Call Trace: [ 50.487097][ T7822] dump_stack+0x1d8/0x2f8 [ 50.491398][ T7822] panic+0x29b/0x7d9 [ 50.496419][ T7822] ? __kasan_report+0x195/0x1c0 [ 50.501244][ T7822] ? trace_hardirqs_on+0x34/0x80 [ 50.506164][ T7822] ? nmi_panic+0x97/0x97 [ 50.510376][ T7822] ? trace_hardirqs_on+0x34/0x80 [ 50.515369][ T7822] ? __kasan_report+0x195/0x1c0 [ 50.520200][ T7822] ? _raw_spin_unlock_irqrestore+0xad/0xd0 [ 50.525976][ T7822] __kasan_report+0x1bb/0x1c0 [ 50.530642][ T7822] ? bpf_int_jit_compile+0x4d19/0x7530 [ 50.536086][ T7822] kasan_report+0x26/0x50 [ 50.540395][ T7822] __asan_report_load4_noabort+0x14/0x20 [ 50.546002][ T7822] bpf_int_jit_compile+0x4d19/0x7530 [ 50.551257][ T7822] ? trace_lock_acquire+0x1b0/0x1b0 [ 50.556435][ T7822] ? iosf_mbi_probe+0xa0/0xa0 [ 50.561190][ T7822] ? ktime_get_with_offset+0x98/0x190 [ 50.566545][ T7822] ? __lock_acquire+0x4750/0x4750 [ 50.571549][ T7822] ? read_seqcount_begin+0x12a/0x1c0 [ 50.576859][ T7822] bpf_prog_select_runtime+0x756/0xa50 [ 50.582309][ T7822] ? memset+0x31/0x40 [ 50.586269][ T7822] ? bpf_obj_name_cpy+0x9a9/0x1400 [ 50.591355][ T7822] __do_sys_bpf+0x7d4e/0xc0e0 [ 50.596014][ T7822] ? __bpf_prog_put_rcu+0x320/0x320 [ 50.601188][ T7822] ? trace_hardirqs_on+0x74/0x80 [ 50.608927][ T7822] ? do_huge_pmd_anonymous_page+0x1680/0x1cf0 [ 50.614980][ T7822] ? rcu_lock_release+0x9/0x30 [ 50.619718][ T7822] ? thp_get_unmapped_area+0xa0/0xa0 [ 50.624980][ T7822] ? handle_mm_fault+0xd7f/0x6080 [ 50.629999][ T7822] ? __lock_acquire+0x4750/0x4750 [ 50.634993][ T7822] ? vmacache_update+0xb7/0x120 [ 50.639824][ T7822] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 50.645256][ T7822] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 50.650947][ T7822] ? do_syscall_64+0x1d/0x140 [ 50.655607][ T7822] __x64_sys_bpf+0x7a/0x90 [ 50.659999][ T7822] do_syscall_64+0xfe/0x140 [ 50.664473][ T7822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.670337][ T7822] RIP: 0033:0x4402c9 [ 50.675330][ T7822] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.694930][ T7822] RSP: 002b:00007ffeb7a02c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.703320][ T7822] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402c9 [ 50.711266][ T7822] RDX: 0000000000000046 RSI: 0000000020000180 RDI: 0000000000000005 [ 50.719214][ T7822] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 50.727174][ T7822] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401b50 [ 50.735122][ T7822] R13: 0000000000401be0 R14: 0000000000000000 R15: 0000000000000000 [ 50.744293][ T7822] Kernel Offset: disabled [ 50.752266][ T7822] Rebooting in 86400 seconds..