================================================================== BUG: KASAN: use-after-free in __list_add_valid+0x8f/0xb0 lib/list_debug.c:26 Read of size 8 at addr ffff8880a157e5e8 by task syz-executor1/13520 CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113 print_address_description.cold.8+0x9/0x1ff mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.9+0x242/0x309 mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 __list_add_valid+0x8f/0xb0 lib/list_debug.c:26 __list_add_rcu include/linux/rculist.h:52 [inline] list_add_tail_rcu include/linux/rculist.h:101 [inline] bpf_prog_ksym_node_add kernel/bpf/core.c:579 [inline] bpf_prog_kallsyms_add+0x200/0x9b0 kernel/bpf/core.c:610 bpf_prog_load+0x1350/0x1d30 kernel/bpf/syscall.c:1556 __do_sys_bpf+0xee3/0x4560 kernel/bpf/syscall.c:2618 __se_sys_bpf kernel/bpf/syscall.c:2580 [inline] __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:2580 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4579b9 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc1e4d59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1e4d5a6d4 R13: 00000000004be054 R14: 00000000004ce0e0 R15: 00000000ffffffff BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69f2d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69f448 R08: ffff88806a894540 R09: ffffed1015ce5b8f R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 1ffff11011ad3e7c R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#2] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69eaa8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69ec20 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3d77 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#3] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69e278 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69e3f0 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3c71 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#4] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69da48 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69dbc0 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3b6b R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#5] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69d218 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69d390 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3a65 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#6] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69c9e8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69cb60 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad395f R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#7] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69c1b8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69c330 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3859 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#8] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69b988 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69bb00 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3753 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#9] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69b158 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69b2d0 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad364d R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#10] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69a928 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69aaa0 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3547 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#11] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69a0f8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69a270 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3441 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#12] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d6998c8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d699a40 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad333b R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Oops: 0000 [#13] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d699098 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d699210 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad3235 R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: BUG: unable to handle kernel paging request at ffffc90001947030 #PF error: [normal kernel read fault] PGD 12c238067 P4D 12c238067 PUD 12c239067 PMD 219dc8067 PTE 0 Thread overran stack, or stack corrupted Oops: 0000 [#14] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d698868 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d6989e0 R08: ffff88806a894540 R09: 0000000000000001 R10: ffffed1015ce5b8f R11: ffff88806a894540 R12: 1ffff11011ad312f R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usercopy: Kernel memory overwrite attempt detected to SLAB object 'kmalloc-512' (offset 536, size 1)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:102! invalid opcode: 0000 [#15] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xbb/0xbd mm/usercopy.c:102 usercopy: Kernel memory overwrite attempt detected to SLAB object 'kmalloc-512' (offset 456, size 64)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:102! invalid opcode: 0000 [#16] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xbb/0xbd mm/usercopy.c:102 ------------[ cut here ]------------ kernel BUG at mm/slab.c:4425! invalid opcode: 0000 [#17] PREEMPT SMP KASAN CPU: 1 PID: 13520 Comm: syz-executor1 Not tainted 4.20.0+ #109 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__check_heap_object+0xa7/0xb5 mm/slab.c:4425 Code: 48 c7 c7 f5 d8 35 89 e8 27 71 0a 00 5d c3 41 8b 91 04 01 00 00 48 29 c7 48 39 d7 77 be 48 01 d0 48 29 c8 48 39 f0 72 b3 5d c3 <0f> 0b 48 c7 c7 f5 d8 35 89 e8 8d 79 0a 00 44 89 e9 48 c7 c7 b0 d9 RSP: 0018:ffff88808d696e80 EFLAGS: 00010087 RAX: 0000000000666666 RBX: 1ffff11011ad2dd7 RCX: 0000000000000009 RDX: ffff88808d6970c0 RSI: 0000000000000040 RDI: ffff88808d697008 RBP: ffff88808d696e80 R08: ffff88806a894540 R09: ffff88812c3f0940 R10: 000000009999992b R11: 0000000000000000 R12: ffff88808d697008 R13: 0000000000000040 R14: ffffea000235a5c0 R15: 0000000000000001 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace ce1cc6b29bf169f8 ]--- RIP: 0010:bpf_jit_binary_hdr include/linux/filter.h:712 [inline] RIP: 0010:bpf_get_prog_addr_region kernel/bpf/core.c:488 [inline] RIP: 0010:bpf_tree_comp kernel/bpf/core.c:557 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_prog_kallsyms_find+0x289/0x4a0 kernel/bpf/core.c:631 Code: 03 42 80 3c 30 00 0f 85 b1 01 00 00 4d 8b 6f 50 49 8d 7d 30 48 89 fa 48 c1 ea 03 42 80 3c 32 00 0f 85 ab 01 00 00 49 8d 7d 02 <4d> 8b 65 30 48 89 fa 48 89 f9 48 c1 ea 03 83 e1 07 42 0f b6 14 32 RSP: 0018:ffff88808d69f2d0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880a157e5b8 RCX: ffffffff818e3131 RDX: 1ffff92000328e06 RSI: 0000000000000008 RDI: ffffc90001947002 RBP: ffff88808d69f448 R08: ffff88806a894540 R09: ffffed1015ce5b8f R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 1ffff11011ad3e7c R13: ffffc90001947000 R14: dffffc0000000000 R15: ffff8880a157e5b8 FS: 00007fc1e4d5a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90001947030 CR3: 00000000a5261000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400