protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 ================================================================== BUG: KASAN: use-after-free in __list_add_valid+0x8f/0xb0 lib/list_debug.c:26 Read of size 8 at addr ffff8880a00f33a8 by task syz-executor4/32648 CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 protocol 88fb is buggy, dev hsr_slave_0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113 protocol 88fb is buggy, dev hsr_slave_1 print_address_description.cold.8+0x9/0x1ff mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.9+0x242/0x309 mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 __list_add_valid+0x8f/0xb0 lib/list_debug.c:26 __list_add_rcu include/linux/rculist.h:52 [inline] list_add_tail_rcu include/linux/rculist.h:101 [inline] bpf_prog_ksym_node_add kernel/bpf/core.c:579 [inline] bpf_prog_kallsyms_add+0x200/0x9b0 kernel/bpf/core.c:610 BUG: unable to handle kernel paging request at ffffc90001947030 kobject: 'loop3' (00000000243cf579): kobject_uevent_env #PF error: [normal kernel read fault] kobject: 'loop3' (00000000243cf579): fill_kobj_path: path = '/devices/virtual/block/loop3' PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'loop2' (00000000a318378b): kobject_uevent_env RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ef2d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 kobject: 'loop2' (00000000a318378b): fill_kobj_path: path = '/devices/virtual/block/loop2' RBP: ffff8880698ef448 R08: ffff8880a0162500 R09: ffffed1015ce5b8f R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 1ffff1100d31de7c R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#2] PREEMPT SMP KASAN kobject: 'ip6gre2' (00000000b328bd47): kobject_add_internal: parent: 'net', set: 'devices' CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698eeaa8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698eec20 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31dd77 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 kobject: 'ip6gre2' (00000000b328bd47): kobject_uevent_env Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 kobject: 'ip6gre2' (00000000b328bd47): fill_kobj_path: path = '/devices/virtual/net/ip6gre2' Oops: 0000 [#3] PREEMPT SMP KASAN kobject: 'queues' (00000000ef51f7bc): kobject_add_internal: parent: 'ip6gre2', set: '' CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ee278 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ee3f0 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31dc71 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 kobject: 'queues' (00000000ef51f7bc): kobject_uevent_env DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] kobject: 'queues' (00000000ef51f7bc): kobject_uevent_env: filter function caused the event to drop! PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#4] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 kobject: 'rx-0' (00000000440b2c21): kobject_add_internal: parent: 'queues', set: 'queues' Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 kobject: 'rx-0' (00000000440b2c21): kobject_uevent_env RSP: 0018:ffff8880698eda48 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698edbc0 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31db6b R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 kobject: 'rx-0' (00000000440b2c21): fill_kobj_path: path = '/devices/virtual/net/ip6gre2/queues/rx-0' Oops: 0000 [#5] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ed218 EFLAGS: 00010046 kobject: 'tx-0' (00000000df7e1a36): kobject_add_internal: parent: 'queues', set: 'queues' RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ed390 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31da65 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 kobject: 'tx-0' (00000000df7e1a36): kobject_uevent_env Oops: 0000 [#6] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ec9e8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ecb60 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d95f R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'tx-0' (00000000df7e1a36): fill_kobj_path: path = '/devices/virtual/net/ip6gre2/queues/tx-0' CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 kobject: 'loop0' (00000000b8ff0b2e): kobject_uevent_env #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#7] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ec1b8 EFLAGS: 00010046 kobject: 'loop0' (00000000b8ff0b2e): fill_kobj_path: path = '/devices/virtual/block/loop0' RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ec330 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d859 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 kobject: 'loop1' (000000009d75a118): kobject_uevent_env Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#8] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 kobject: 'loop1' (000000009d75a118): fill_kobj_path: path = '/devices/virtual/block/loop1' RSP: 0018:ffff8880698eb988 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ebb00 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d753 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 protocol 88fb is buggy, dev hsr_slave_0 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 protocol 88fb is buggy, dev hsr_slave_1 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#9] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698eb158 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698eb2d0 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d64d R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#10] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ea928 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698eaaa0 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d547 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#11] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ea0f8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ea270 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d441 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#12] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698e98c8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698e9a40 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d33b R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Oops: 0000 [#13] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698e9098 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698e9210 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d235 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#14] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698e8868 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698e89e0 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31d12f R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: ------------[ cut here ]------------ kernel BUG at mm/slab.c:4425! invalid opcode: 0000 [#15] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__check_heap_object+0xa7/0xb5 mm/slab.c:4425 Code: 48 c7 c7 75 86 38 89 e8 27 71 0a 00 5d c3 41 8b 91 04 01 00 00 48 29 c7 48 39 d7 77 be 48 01 d0 48 29 c8 48 39 f0 72 b3 5d c3 <0f> 0b 48 c7 c7 75 86 38 89 e8 8d 79 0a 00 44 89 e9 48 c7 c7 30 87 RSP: 0018:ffff8880698e7500 EFLAGS: 00010046 RAX: 0000000000000001 RBX: 1ffff1100d31cea7 RCX: 000000000000000c RDX: ffff8880698e63c0 RSI: 0000000000000002 RDI: ffff8880698e76a8 RBP: ffff8880698e7500 R08: ffff8880a0162500 R09: ffff88812c2bec40 R10: 00000000000010ae R11: 0000000000000000 R12: ffff8880698e76a8 R13: 0000000000000002 R14: ffffea0001a63980 R15: 0000000000000001 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c239067 P4D 12c239067 PUD 12c23a067 PMD a5f6f067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#16] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698e7050 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698e71c8 R08: ffff8880a0162500 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff8880a0162500 R12: 1ffff1100d31ce2c R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: ------------[ cut here ]------------ kernel BUG at mm/slab.c:4425! invalid opcode: 0000 [#17] PREEMPT SMP KASAN CPU: 1 PID: 32648 Comm: syz-executor4 Not tainted 4.20.0+ #192 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__check_heap_object+0xa7/0xb5 mm/slab.c:4425 Code: 48 c7 c7 75 86 38 89 e8 27 71 0a 00 5d c3 41 8b 91 04 01 00 00 48 29 c7 48 39 d7 77 be 48 01 d0 48 29 c8 48 39 f0 72 b3 5d c3 <0f> 0b 48 c7 c7 75 86 38 89 e8 8d 79 0a 00 44 89 e9 48 c7 c7 30 87 RSP: 0018:ffff8880698e6068 EFLAGS: 00010097 RAX: 00000000000f0f0e RBX: 1ffff1100d31cc14 RCX: 000000000000000c RDX: ffff8880698e63c0 RSI: 0000000000000001 RDI: ffff8880698e6248 RBP: ffff8880698e6068 R08: ffff8880a0162500 R09: ffff88812c2bec40 R10: 00000000e1e1e096 R11: 0000000000000000 R12: ffff8880698e6248 R13: 0000000000000001 R14: ffffea0001a63980 R15: 0000000000000001 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: Modules linked in: ---[ end trace 92d9848996062be7 ]--- RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8880698ef2d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a00f3378 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff8880698ef448 R08: ffff8880a0162500 R09: ffffed1015ce5b8f R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 1ffff1100d31de7c R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a00f3378 FS: 00007f4708e8e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 0000000065164000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600