==================================================================
BUG: KASAN: use-after-free in __list_add_valid+0x8f/0xac lib/list_debug.c:26
Read of size 8 at addr ffff8881bbdd4060 by task syz-executor2/32677

CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 print_address_description.cold.7+0x9/0x1ff mm/kasan/report.c:256
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.8+0x242/0x309 mm/kasan/report.c:412
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
 __list_add_valid+0x8f/0xac lib/list_debug.c:26
 __list_add_rcu include/linux/rculist.h:52 [inline]
 list_add_tail_rcu include/linux/rculist.h:101 [inline]
 bpf_prog_ksym_node_add kernel/bpf/core.c:458 [inline]
 bpf_prog_kallsyms_add+0x200/0x9b0 kernel/bpf/core.c:489
 bpf_prog_load+0x13dc/0x1cc0 kernel/bpf/syscall.c:1552
BUG: unable to handle kernel paging request at ffffc90001935030
------------[ cut here ]------------
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
downgrading a read lock
WARNING: CPU: 1 PID: 32685 at kernel/locking/lockdep.c:3556 __lock_downgrade kernel/locking/lockdep.c:3556 [inline]
WARNING: CPU: 1 PID: 32685 at kernel/locking/lockdep.c:3556 lock_downgrade+0x4d7/0x900 kernel/locking/lockdep.c:3819
Oops: 0000 [#1] PREEMPT SMP KASAN
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff888192457590 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192457708 R08: ffff8881badec640 R09: ffffed103b5c5b67
R10: ffffed103b5c5b67 R11: ffff8881dae2db3b R12: 1ffff1103248aed4
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#2] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff888192456ea8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192457020 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248adf7
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#3] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff8881924567b8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192456930 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248ad19
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#4] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff8881924560c8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192456240 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248ac3b
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#5] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff8881924559d8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192455b50 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248ab5d
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#6] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff8881924552e8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192455460 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248aa7f
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#7] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff888192454bf8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192454d70 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248a9a1
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#8] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
RSP: 0018:ffff888192454508 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8881bbdd4030 RCX: ffffffff818c0b01
RDX: 1ffff92000326a06 RSI: 0000000000000008 RDI: ffffc90001935002
RBP: ffff888192454680 R08: ffff8881badec640 R09: 0000000000000001
R10: ffffed103b5c5b67 R11: ffff8881badec640 R12: 1ffff1103248a8c3
R13: ffffc90001935000 R14: dffffc0000000000 R15: ffff8881bbdd4030
FS:  00007f8fad925700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90001935030 CR3: 00000001baabd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
BUG: unable to handle kernel paging request at ffffc90001935030
PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d417e067 PTE 0
Oops: 0000 [#9] PREEMPT SMP KASAN
CPU: 0 PID: 32677 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #104
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:910 [inline]
RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:382 [inline]
RIP: 0010:bpf_tree_comp kernel/bpf/core.c:436 [inline]
RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:510
Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32
Shutting down cpus with NMI