kauditd_printk_skb: 60 callbacks suppressed audit: type=1400 audit(2000001718.425:38520): avc: denied { prog_load } for pid=31219 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 ================================================================== BUG: KASAN: use-after-free in __list_add_valid+0x9a/0xa0 lib/list_debug.c:26 Read of size 8 at addr ffff888068c68328 by task syz-executor5/31221 CPU: 1 PID: 31221 Comm: syz-executor5 Not tainted 5.0.0-rc1+ #16 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 print_address_description.cold+0x7c/0x20d mm/kasan/report.c:187 kasan_report.cold+0x1b/0x40 mm/kasan/report.c:317 __asan_report_load8_noabort+0x14/0x20 mm/kasan/generic_report.c:135 __list_add_valid+0x9a/0xa0 lib/list_debug.c:26 __list_add_rcu include/linux/rculist.h:52 [inline] list_add_tail_rcu include/linux/rculist.h:101 [inline] bpf_prog_ksym_node_add kernel/bpf/core.c:580 [inline] bpf_prog_kallsyms_add+0x1f4/0xaf0 kernel/bpf/core.c:611 jit_subprogs kernel/bpf/verifier.c:6724 [inline] fixup_call_args kernel/bpf/verifier.c:6776 [inline] bpf_check+0x71a7/0x8840 kernel/bpf/verifier.c:7221 bpf_prog_load+0x10da/0x1d00 kernel/bpf/syscall.c:1532 __do_sys_bpf+0xc52/0x4410 kernel/bpf/syscall.c:2618 __se_sys_bpf kernel/bpf/syscall.c:2580 [inline] __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:2580 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457ec9 Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f5fa5349c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5fa534a6d4 R13: 00000000004be236 R14: 00000000004ce4e0 R15: 00000000ffffffff BUG: unable to handle kernel paging request at ffffc9000193d030 #PF error: [normal kernel read fault] audit: type=1400 audit(2000001718.575:38521): avc: denied { map } for pid=31231 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 PGD aa119067 P4D aa119067 PUD aa11a067 PMD 219b27067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 31221 Comm: syz-executor5 Not tainted 5.0.0-rc1+ #16 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:708 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:489 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:558 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find kernel/bpf/core.c:632 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x274/0x4b0 kernel/bpf/core.c:625 Code: 03 42 80 3c 30 00 0f 85 af 01 00 00 49 8b 47 50 48 8d 78 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 b7 01 00 00 48 8d 78 02 <4c> 8b 60 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880780673f0 EFLAGS: 00010046 RAX: ffffc9000193d000 RBX: ffff888068c682f8 RCX: ffffffff818eb13a audit: type=1400 audit(2000001718.575:38522): avc: denied { map } for pid=31231 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 RDX: 1ffff92000327a06 RSI: 0000000000000008 RDI: ffffc9000193d002 RBP: ffff888078067518 R08: ffff888070c64680 R09: ffffed1015ce5b90 R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 1ffff1100f00ce96 R13: ffffffffffffffda R14: dffffc0000000000 R15: ffff888068c682f8 FS: 00007f5fa534a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000193d030 CR3: 0000000099edc000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 bpf_get_prog_addr_region kernel/bpf/core.c:492 [inline] WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 bpf_tree_comp kernel/bpf/core.c:558 [inline] WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 __lt_find include/linux/rbtree_latch.h:115 [inline] WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 latch_tree_find include/linux/rbtree_latch.h:208 [inline] WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 bpf_prog_kallsyms_find kernel/bpf/core.c:632 [inline] WARNING: CPU: 1 PID: 31221 at kernel/bpf/core.c:492 bpf_prog_kallsyms_find+0x2c3/0x4b0 kernel/bpf/core.c:625