EPT pointer = 0x00000001bced101e kernel msg: ebtables bug: please report to author: Wrong nr of counters TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. kernel msg: ebtables bug: please report to author: Wrong nr of counters ================================================================== BUG: KASAN: use-after-free in __list_add_valid+0x8f/0xac lib/list_debug.c:26 Read of size 8 at addr ffff8801d7cfbda0 by task syz-executor3/13773 CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 print_address_description.cold.7+0x9/0x1ff mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.8+0x242/0x309 mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 __list_add_valid+0x8f/0xac lib/list_debug.c:26 __list_add_rcu include/linux/rculist.h:52 [inline] list_add_tail_rcu include/linux/rculist.h:101 [inline] bpf_prog_ksym_node_add kernel/bpf/core.c:457 [inline] bpf_prog_kallsyms_add+0x200/0x9b0 kernel/bpf/core.c:488 jit_subprogs kernel/bpf/verifier.c:5929 [inline] fixup_call_args kernel/bpf/verifier.c:5979 [inline] bpf_check+0x4fcb/0x6310 kernel/bpf/verifier.c:6337 bpf_prog_load+0x113d/0x1cc0 kernel/bpf/syscall.c:1448 BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1f3d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1f548 R08: ffff8801bab2a380 R09: ffffed003b5e5b4f R10: ffffed003b5e5b4f R11: ffff8801daf2da7b R12: 1ffff10030943e9c R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#2] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1ece8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1ee60 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943dbf R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#3] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1e5f8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1e770 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943ce1 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#4] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1df08 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1e080 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943c03 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#5] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1d818 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1d990 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943b25 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#6] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1d128 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1d2a0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943a47 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#7] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1ca38 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1cbb0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943969 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#8] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1c348 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1c4c0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff1003094388b R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#9] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1bc58 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1bdd0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff100309437ad R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#10] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1b568 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1b6e0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff100309436cf R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#11] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1ae78 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1aff0 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff100309435f1 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#12] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1a788 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1a900 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943513 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#13] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1a098 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1a210 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943435 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#14] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a199a8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a19b20 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943357 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Oops: 0000 [#15] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a192b8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a19430 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030943279 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#16] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a18bc8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a18d40 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff1003094319b R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: usercopy: Kernel memory overwrite attempt detected to process stack (offset 0, size 1)! ------------[ cut here ]------------ kernel BUG at mm/slab.c:4425! invalid opcode: 0000 [#17] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__check_heap_object+0xa7/0xb5 mm/slab.c:4450 Code: 48 c7 c7 b5 cc ef 88 e8 57 e4 0a 00 5d c3 41 8b 91 04 01 00 00 48 29 c7 48 39 d7 77 be 48 01 d0 48 29 c8 48 39 f0 72 b3 5d c3 <0f> 0b 48 c7 c7 b5 cc ef 88 e8 bd ec 0a 00 44 89 e9 48 c7 c7 70 cd RSP: 0018:ffff880184a173b0 EFLAGS: 00010046 RAX: 0000000000000001 RBX: 1ffff10030942e7d RCX: 000000000000000c RDX: ffff880184a16200 RSI: 0000000000000002 RDI: ffff880184a17558 RBP: ffff880184a173b0 R08: ffff8801bab2a380 R09: ffff8801da98ae00 R10: 0000000000001111 R11: 0000000000000000 R12: ffff880184a17558 R13: 0000000000000002 R14: ffffea0006128580 R15: 0000000000000001 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: BUG: unable to handle kernel paging request at ffffc9000192c030 PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1d407e067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#18] PREEMPT SMP KASAN CPU: 1 PID: 13773 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a16f00 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a17078 R08: ffff8801bab2a380 R09: 0000000000000001 R10: ffffed003b5e5b4f R11: ffff8801bab2a380 R12: 1ffff10030942e02 R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0 Call Trace: Modules linked in: CR2: ffffc9000192c030 ---[ end trace 8363951eec71c302 ]--- RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:877 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:381 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:435 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:509 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff880184a1f3d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8801d7cfbd70 RCX: ffffffff818bc5b1 RDX: 1ffff92000325806 RSI: 0000000000000008 RDI: ffffc9000192c002 RBP: ffff880184a1f548 R08: ffff8801bab2a380 R09: ffffed003b5e5b4f R10: ffffed003b5e5b4f R11: ffff8801daf2da7b R12: 1ffff10030943e9c R13: ffffc9000192c000 R14: dffffc0000000000 R15: ffff8801d7cfbd70 FS: 00007f85a066b700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000192c030 CR3: 00000001d7009000 CR4: 00000000001426e0