================================================================== BUG: KASAN: use-after-free in __list_add_valid+0x8f/0xac lib/list_debug.c:26 Read of size 8 at addr ffff8881b334f068 by task syz-executor4/2448 CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 print_address_description.cold.7+0x9/0x1ff mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.8+0x242/0x309 mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 __list_add_valid+0x8f/0xac lib/list_debug.c:26 __list_add_rcu include/linux/rculist.h:52 [inline] list_add_tail_rcu include/linux/rculist.h:101 [inline] bpf_prog_ksym_node_add kernel/bpf/core.c:474 [inline] bpf_prog_kallsyms_add+0x200/0x9b0 kernel/bpf/core.c:505 bpf_prog_load+0x13c8/0x1c30 kernel/bpf/syscall.c:1554 BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b7568 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b76e0 R08: ffff8881950504c0 R09: ffffed103b5e5b67 R10: ffffed103b5e5b67 R11: ffff8881daf2db3b R12: 1ffff11032016ecf R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#2] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b6e78 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b6ff0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016df1 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#3] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 kobject: 'loop0' (000000004285962d): kobject_uevent_env RSP: 0018:ffff8881900b6788 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b6900 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016d13 kobject: 'loop0' (000000004285962d): fill_kobj_path: path = '/devices/virtual/block/loop0' R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#4] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b6098 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b6210 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016c35 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#5] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b59a8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b5b20 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016b57 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#6] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b52b8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b5430 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016a79 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#7] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b4bc8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b4d40 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff1103201699b R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#8] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b44d8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b4650 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff110320168bd R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#9] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b3de8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b3f60 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff110320167df R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#10] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b36f8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b3870 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016701 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#11] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b3008 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b3180 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016623 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#12] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b2918 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b2a90 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016545 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#13] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b2228 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b23a0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016467 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#14] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b1b38 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b1cb0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff11032016389 R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Oops: 0000 [#15] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b1448 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b15c0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff110320162ab kobject: 'loop3' (00000000fecb8dea): kobject_uevent_env R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 kobject: 'loop3' (00000000fecb8dea): fill_kobj_path: path = '/devices/virtual/block/loop3' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#16] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b0d58 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b0ed0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff110320161cd R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc9000194b030 PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1d4168067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#17] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b0668 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b07e0 R08: ffff8881950504c0 R09: 0000000000000001 R10: ffffed103b5e5b67 R11: ffff8881950504c0 R12: 1ffff110320160ef R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usercopy: Kernel memory overwrite attempt detected to SLAB object 'kmalloc-8k' (offset 8440, size 2)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:102! invalid opcode: 0000 [#18] PREEMPT SMP KASAN CPU: 1 PID: 2448 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #160 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xbb/0xbd mm/usercopy.c:90 Code: c0 e8 67 b2 b1 ff 48 8b 55 c0 49 89 d9 4d 89 f0 ff 75 c8 4c 89 e1 4c 89 ee 48 c7 c7 00 dc 34 88 ff 75 d0 41 57 e8 57 fe 97 ff <0f> 0b e8 3c b2 b1 ff e8 97 13 f5 ff 8b 95 e4 fe ff ff 4c 89 e1 31 RSP: 0018:ffff8881900ae3e8 EFLAGS: 00010082 RAX: 0000000000000065 RBX: ffffffff8914a248 RCX: ffffc9000de5e000 RDX: 0000000000000000 RSI: ffffffff8165eae5 RDI: 0000000000000005 RBP: ffff8881900ae440 R08: ffff8881950504c0 R09: ffffed103b5e3ef8 R10: ffffed103b5e3ef8 R11: ffff8881daf1f7c7 R12: ffffffff8914f045 R13: ffffffff8834da60 R14: ffffffff8834d9a0 R15: ffffffff8834d960 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 124080326c914321 ]--- RIP: 0010:bpf_prog_ebpf_jited include/linux/filter.h:885 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:386 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:452 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:526 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff8881900b7568 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8881b334f038 RCX: ffffffff818c0c51 RDX: 1ffff92000329606 RSI: 0000000000000008 RDI: ffffc9000194b002 RBP: ffff8881900b76e0 R08: ffff8881950504c0 R09: ffffed103b5e5b67 R10: ffffed103b5e5b67 R11: ffff8881daf2db3b R12: 1ffff11032016ecf R13: ffffc9000194b000 R14: dffffc0000000000 R15: ffff8881b334f038 FS: 00007f15612aa700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000194b030 CR3: 00000001cee48000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400