syzkaller login: [ 261.095777][ T2818] warn_alloc: 5 callbacks suppressed [ 261.096091][ T2818] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 261.099530][ T2818] CPU: 0 PID: 2818 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 261.100740][ T2818] Hardware name: riscv-virtio,qemu (DT) [ 261.101702][ T2818] Call Trace: [ 261.102386][ T2818] [] dump_backtrace+0x2e/0x3c [ 261.104173][ T2818] [] show_stack+0x34/0x40 [ 261.105179][ T2818] [] dump_stack_lvl+0xe0/0x14c [ 261.106397][ T2818] [] dump_stack+0x1c/0x24 [ 261.107549][ T2818] [] warn_alloc+0x168/0x22c [ 261.108814][ T2818] [] __vmalloc_node_range+0xb6c/0xdb4 [ 261.110113][ T2818] [] bpf_jit_alloc_exec+0x46/0x52 [ 261.111278][ T2818] [] bpf_jit_binary_alloc+0x96/0x13c [ 261.112441][ T2818] [] bpf_int_jit_compile+0x886/0xaa6 [ 261.113995][ T2818] [] bpf_prog_select_runtime+0x1a2/0x22e [ 261.115541][ T2818] [] bpf_migrate_filter+0x258/0x2be [ 261.116876][ T2818] [] bpf_prepare_filter+0x10e/0x1b4 [ 261.118151][ T2818] [] __get_filter+0x148/0x1a0 [ 261.119326][ T2818] [] sk_attach_filter+0x22/0x11a [ 261.120576][ T2818] [] sk_setsockopt+0x144e/0x270c [ 261.121706][ T2818] [] sock_setsockopt+0x48/0x58 [ 261.122878][ T2818] [] __sys_setsockopt+0x3f0/0x418 [ 261.124323][ T2818] [] sys_setsockopt+0x3a/0x4c [ 261.125449][ T2818] [] ret_from_syscall+0x0/0x2 [ 261.180302][ T2818] Mem-Info: [ 261.181316][ T2818] active_anon:849 inactive_anon:40 isolated_anon:0 [ 261.181316][ T2818] active_file:0 inactive_file:1794 isolated_file:0 [ 261.181316][ T2818] unevictable:768 dirty:103 writeback:0 [ 261.181316][ T2818] slab_reclaimable:4833 slab_unreclaimable:18494 [ 261.181316][ T2818] mapped:1100 shmem:802 pagetables:108 [ 261.181316][ T2818] sec_pagetables:0 bounce:0 [ 261.181316][ T2818] kernel_misc_reclaimable:0 [ 261.181316][ T2818] free:284646 free_pcp:695 free_cma:4096 [ 261.186624][ T2818] Node 0 active_anon:3480kB inactive_anon:160kB active_file:0kB inactive_file:7176kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:4400kB dirty:412kB writeback:0kB shmem:3208kB writeback_tmp:0kB kernel_stack:4672kB pagetables:432kB sec_pagetables:0kB all_unreclaimable? no [ 261.188779][ T2818] Node 0 DMA32 free:1138584kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:3480kB inactive_anon:160kB active_file:0kB inactive_file:7176kB unevictable:3072kB writepending:412kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:2772kB local_pcp:1756kB free_cma:16384kB [ 261.191326][ T2818] lowmem_reserve[]: 0 0 0 [ 261.207031][ T2818] Node 0 DMA32: 0*4kB 53*8kB (U) 19*16kB (UME) 2*32kB (UE) 0*64kB 3*128kB (UE) 1*256kB (M) 1*512kB (U) 0*1024kB 3*2048kB (UC) 276*4096kB (MEC) = 1138584kB [ 261.220778][ T2818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.221887][ T2818] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 261.222911][ T2818] 2598 total pagecache pages [ 261.275637][ T2818] 0 pages in swap cache [ 261.276800][ T2818] Free swap = 0kB [ 261.277929][ T2818] Total swap = 0kB [ 261.279043][ T2818] 523776 pages RAM [ 261.280154][ T2818] 0 pages HighMem/MovableOnly [ 261.281283][ T2818] 184025 pages reserved [ 261.282378][ T2818] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_root_recvmsgcb: failed to send message to pid 2782: Connection refused ps_root_recvmsgcb: failed to send message to pid 2786: Connection refused [ 269.957251][ T2677] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 270.047576][ T2677] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 270.079506][ T2677] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 2819: Connection refused ps_root_recvmsgcb: failed to send message to pid 2818: Connection refused [ 301.300684][ T2831] warn_alloc: 1 callbacks suppressed [ 301.300930][ T2831] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 301.328748][ T2831] CPU: 1 PID: 2831 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 301.330002][ T2831] Hardware name: riscv-virtio,qemu (DT) [ 301.330861][ T2831] Call Trace: [ 301.331620][ T2831] [] dump_backtrace+0x2e/0x3c [ 301.332949][ T2831] [] show_stack+0x34/0x40 [ 301.334448][ T2831] [] dump_stack_lvl+0xe0/0x14c [ 301.336022][ T2831] [] dump_stack+0x1c/0x24 [ 301.337356][ T2831] [] warn_alloc+0x168/0x22c [ 301.338615][ T2831] [] __vmalloc_node_range+0xb6c/0xdb4 [ 301.340002][ T2831] [] bpf_jit_alloc_exec+0x46/0x52 [ 301.341281][ T2831] [] bpf_jit_binary_alloc+0x96/0x13c [ 301.342578][ T2831] [] bpf_int_jit_compile+0x886/0xaa6 [ 301.344283][ T2831] [] bpf_prog_select_runtime+0x1a2/0x22e [ 301.345465][ T2831] [] bpf_migrate_filter+0x258/0x2be [ 301.346595][ T2831] [] bpf_prepare_filter+0x10e/0x1b4 [ 301.347751][ T2831] [] __get_filter+0x148/0x1a0 [ 301.348899][ T2831] [] sk_attach_filter+0x22/0x11a [ 301.349947][ T2831] [] sk_setsockopt+0x144e/0x270c [ 301.351087][ T2831] [] sock_setsockopt+0x48/0x58 [ 301.352231][ T2831] [] __sys_setsockopt+0x3f0/0x418 [ 301.353383][ T2831] [] sys_setsockopt+0x3a/0x4c [ 301.354491][ T2831] [] ret_from_syscall+0x0/0x2 [ 301.426101][ T2831] Mem-Info: [ 301.427117][ T2831] active_anon:571 inactive_anon:41 isolated_anon:0 [ 301.427117][ T2831] active_file:0 inactive_file:7313 isolated_file:0 [ 301.427117][ T2831] unevictable:768 dirty:375 writeback:0 [ 301.427117][ T2831] slab_reclaimable:5311 slab_unreclaimable:18521 [ 301.427117][ T2831] mapped:758 shmem:804 pagetables:89 [ 301.427117][ T2831] sec_pagetables:0 bounce:0 [ 301.427117][ T2831] kernel_misc_reclaimable:0 [ 301.427117][ T2831] free:278747 free_pcp:1213 free_cma:4096 [ 301.429749][ T2831] Node 0 active_anon:2284kB inactive_anon:164kB active_file:0kB inactive_file:29252kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:3032kB dirty:1500kB writeback:0kB shmem:3216kB writeback_tmp:0kB kernel_stack:4600kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no [ 301.431722][ T2831] Node 0 DMA32 free:1114988kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:2284kB inactive_anon:164kB active_file:0kB inactive_file:29252kB unevictable:3072kB writepending:1500kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:4852kB local_pcp:2100kB free_cma:16384kB [ 301.460016][ T2831] lowmem_reserve[]: 0 0 0 [ 301.466030][ T2831] Node 0 DMA32: 91*4kB (M) 22*8kB (UME) 11*16kB (UM) 51*32kB (UME) 15*64kB (UM) 3*128kB (UE) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 5*2048kB (UMEC) 268*4096kB (MC) = 1114988kB [ 301.477937][ T2831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.479042][ T2831] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 301.480132][ T2831] 8117 total pagecache pages [ 301.480940][ T2831] 0 pages in swap cache [ 301.481748][ T2831] Free swap = 0kB [ 301.482553][ T2831] Total swap = 0kB [ 301.504177][ T2831] 523776 pages RAM [ 301.506406][ T2831] 0 pages HighMem/MovableOnly [ 301.507301][ T2831] 184025 pages reserved [ 301.508164][ T2831] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 Warning: Permanently added '[localhost]:31403' (ECDSA) to the list of known hosts. ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:05:19 fuzzer started runtime: lfstack.push invalid packing: node=0xffffff620a3980 cnt=0x1 packed=0xffff620a39800001 -> node=0xffff620a3980 fatal error: lfstack.push runtime stack: runtime.throw({0x6cfe80, 0xc}) /usr/local/go/src/runtime/panic.go:1198 +0x60 runtime.(*lfstack).push(0x14ab418, 0xffffff620a3980) /usr/local/go/src/runtime/lfstack.go:30 +0x1a8 runtime.(*spanSetBlockAlloc).free(...) /usr/local/go/src/runtime/mspanset.go:292 runtime.(*spanSet).reset(0x14a4660) /usr/local/go/src/runtime/mspanset.go:265 +0xe4 runtime.finishsweep_m() /usr/local/go/src/runtime/mgcsweep.go:145 +0xb4 runtime.gcStart.func1() /usr/local/go/src/runtime/mgc.go:660 +0x24 runtime.systemstack() /usr/local/go/src/runtime/asm_riscv64.s:131 +0x58 goroutine 1 [running]: runtime.systemstack_switch() /usr/local/go/src/runtime/asm_riscv64.s:94 +0x8 fp=0xc0005bf588 sp=0xc0005bf580 pc=0x80368 runtime.gcStart({0x0, 0x0, 0x0}) /usr/local/go/src/runtime/mgc.go:659 +0x544 fp=0xc0005bf600 sp=0xc0005bf588 pc=0x2bcb4 runtime.mallocgc(0x800, 0x67f060, 0x1) /usr/local/go/src/runtime/malloc.go:1174 +0x7d0 fp=0xc0005bf680 sp=0xc0005bf600 pc=0x1d070 runtime.growslice(0x67f060, {0xc000512400, 0x40, 0x40}, 0x41) /usr/local/go/src/runtime/slice.go:267 +0x678 fp=0xc0005bf6d0 sp=0xc0005bf680 pc=0x68868 github.com/google/syzkaller/prog.restoreLinks({0x13d5c00, 0xff6, 0xff6}, {0x13c0ea0, 0x15d, 0x15d}, {0x1422d00, 0x5585, 0x5585}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:214 +0x354 fp=0xc0005bf7c0 sp=0xc0005bf6d0 pc=0x18131c github.com/google/syzkaller/prog.(*Target).initTarget(0xc0004a81c0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:162 +0xdc fp=0xc0005bf890 sp=0xc0005bf7c0 pc=0x180ac4 github.com/google/syzkaller/prog.(*Target).lazyInit(0xc0004a81c0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:130 +0x80 fp=0xc0005bf908 sp=0xc0005bf890 pc=0x1806f0 github.com/google/syzkaller/prog.(*Target).lazyInit-fm() /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:127 +0x34 fp=0xc0005bf918 sp=0xc0005bf908 pc=0x189204 sync.(*Once).doSlow(0xc0004a82c8, 0xc00035f9f8) /usr/local/go/src/sync/once.go:68 +0xcc fp=0xc0005bf960 sp=0xc0005bf918 pc=0x99814 sync.(*Once).Do(...) /usr/local/go/src/sync/once.go:59 github.com/google/syzkaller/prog.GetTarget({0x6b39ee, 0x5}, {0xffffffffa47e92, 0x7}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/target.go:108 +0x17c fp=0xc0005bfa88 sp=0xc0005bf960 pc=0x1803cc main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:164 +0x3c0 fp=0xc0005bff88 sp=0xc0005bfa88 pc=0x55b5a8 runtime.main() /usr/local/go/src/runtime/proc.go:255 +0x268 fp=0xc0005bffd8 sp=0xc0005bff88 pc=0x4f770 runtime.goexit() /usr/local/go/src/runtime/asm_riscv64.s:507 +0x4 fp=0xc0005bffd8 sp=0xc0005bffd8 pc=0x82314 goroutine 6 [select]: go.opencensus.io/stats/view.(*worker).start(0xc0000d1080) /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:276 +0xb0 created by go.opencensus.io/stats/view.init.0 /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x80 VM DIAGNOSIS: 21:49:27 Registers: info registers vcpu 0 pc ffffffff8198cfa0 mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff804885a4 sepc ffffffff804885a4 mcause 8000000000000003 scause 8000000000000001 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff82a2551a x2/sp ffffffff85007520 x3/gp ffffffff85efe540 x4/tp ffffffff85044380 x5/t0 ff6000000fad3ee0 x6/t1 00000000000f0000 x7/t2 ffffffffffffffff x8/s0 ffffffff85007610 x9/s1 ff60000014fe0000 x10/a0 ff6000000fad3c46 x11/a1 0000000000000000 x12/a2 ffffffff82a2560a x13/a3 0000000000000100 x14/a4 ffffffff85044380 x15/a5 ffebffff01f5a78a x16/a6 0000000000000100 x17/a7 0000000000000101 x18/s2 ff60000014fe00d8 x19/s3 ff60000014fe00b4 x20/s4 ff60000014fe0029 x21/s5 ff60000014fe00d0 x22/s6 0000000000000600 x23/s7 ff60000014fe0000 x24/s8 ff60000014fe0000 x25/s9 ffffffff850077e0 x26/s10 ff60000011f8cbc0 x27/s11 ff1c00000239e000 x28/t3 0000000000000000 x29/t4 ffebffff01f5a789 x30/t5 ffebffff01f5a78a x31/t6 ff60000014fe0034 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80167602 mhartid 0000000000000001 mstatus 00000000000001a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff80010d88 sepc ffffffff80127f68 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff83444d48 x2/sp ff20000005026ea0 x3/gp ffffffff85efe540 x4/tp ff60000011a86200 x5/t0 0000000000046000 x6/t1 00000000000f0000 x7/t2 ffffffffffffffff x8/s0 ff200000050270a0 x9/s1 ffffffff83843848 x10/a0 0000000000000005 x11/a1 00000000000f0000 x12/a2 1ffffffff0f8101d x13/a3 ffffffff80127e1a x14/a4 0000000000000000 x15/a5 ff20000005026fe0 x16/a6 0000000000000100 x17/a7 0000000000000101 x18/s2 ff20000005027020 x19/s3 ff60000011a86200 x20/s4 ff60000011a86c08 x21/s5 0000000000000000 x22/s6 0000000000005a79 x23/s7 0000000000000000 x24/s8 0000000000005a79 x25/s9 ffffffff85f0ad80 x26/s10 ffffffff85f00b80 x27/s11 ffffffff85f0ad80 x28/t3 fffffffff3f3f300 x29/t4 fffffffef0a301e0 x30/t5 fffffffef0a301e1 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000