TITLE: WARNING: kmalloc bug in cpu_map_update_elem

[   29.689945] WARNING: CPU: 1 PID: 4183 at mm/util.c:403 kvmalloc_node+0xc3/0xd0
[   29.710797] audit: type=1400 audit(1518457683.474:8): avc:  denied  { map_create } for  pid=4183 comm="syzkaller238030" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[   29.718063] Kernel panic - not syncing: panic_on_warn set ...
[   29.718063] 
[   29.718072] CPU: 1 PID: 4183 Comm: syzkaller238030 Not tainted 4.16.0-rc1+ #12
[   29.718076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   29.718080] Call Trace:
[   29.718093]  dump_stack+0x194/0x257
[   29.718107]  ? arch_local_irq_restore+0x53/0x53
[   29.740690] audit: type=1400 audit(1518457683.474:9): avc:  denied  { map_read map_write } for  pid=4183 comm="syzkaller238030" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[   29.747976]  ? vsnprintf+0x1ed/0x1900
[   29.747993]  panic+0x1e4/0x41c
[   29.805634]  ? refcount_error_report+0x214/0x214
[   29.810387]  ? show_regs_print_info+0x18/0x18
[   29.814873]  ? depot_save_stack+0x2ca/0x460
[   29.819180]  ? __warn+0x1c1/0x200
[   29.822619]  ? kvmalloc_node+0xc3/0xd0
[   29.826484]  __warn+0x1dc/0x200
[   29.829743]  ? do_syscall_64+0x282/0x940
[   29.833777]  ? kvmalloc_node+0xc3/0xd0
[   29.837642]  report_bug+0x211/0x2d0
[   29.841249]  fixup_bug.part.11+0x37/0x80
[   29.845293]  do_error_trap+0x2d7/0x3e0
[   29.849167]  ? math_error+0x400/0x400
[   29.852940]  ? kmem_cache_alloc_node_trace+0x523/0x760
[   29.858194]  ? lock_downgrade+0x980/0x980
[   29.862320]  ? lock_release+0xa40/0xa40
[   29.866272]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   29.871094]  do_invalid_op+0x1b/0x20
[   29.874782]  invalid_op+0x22/0x40
[   29.878209] RIP: 0010:kvmalloc_node+0xc3/0xd0
[   29.882675] RSP: 0018:ffff8801b436f6e8 EFLAGS: 00010293
[   29.888012] RAX: ffff8801b1dd25c0 RBX: 0000000001088220 RCX: ffffffff81970ca3
[   29.895258] RDX: 0000000000000000 RSI: 0000000001088220 RDI: 0000000000000070
[   29.902504] RBP: ffff8801b436f708 R08: 0000000000000000 R09: 0000000000000000
[   29.909745] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000070
[   29.917007] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8801d304cd00
[   29.924278]  ? kvmalloc_node+0xc3/0xd0
[   29.928150]  ? kvmalloc_node+0xc3/0xd0
[   29.932015]  cpu_map_update_elem+0x3c3/0x8e0
[   29.936406]  ? kasan_check_write+0x14/0x20
[   29.940634]  ? cpu_map_kthread_run+0x12e0/0x12e0
[   29.945368]  SyS_bpf+0x215f/0x4860
[   29.948890]  ? bpf_prog_get+0x20/0x20
[   29.952692]  ? debug_check_no_locks_freed+0x3c0/0x3c0
[   29.957859]  ? trace_hardirqs_on+0xd/0x10
[   29.961985]  ? find_held_lock+0x35/0x1d0
[   29.966029]  ? __handle_mm_fault+0x2747/0x3ce0
[   29.970586]  ? lock_downgrade+0x980/0x980
[   29.974708]  ? lock_release+0xa40/0xa40
[   29.978659]  ? do_raw_spin_trylock+0x190/0x190
[   29.983227]  ? __handle_mm_fault+0x80e/0x3ce0
[   29.987700]  ? __pmd_alloc+0x4e0/0x4e0
[   29.991565]  ? check_noncircular+0x20/0x20
[   29.995776]  ? check_noncircular+0x20/0x20
[   29.999984]  ? find_held_lock+0x35/0x1d0
[   30.004027]  ? handle_mm_fault+0x270/0x970
[   30.008238]  ? find_held_lock+0x35/0x1d0
[   30.012281]  ? __do_page_fault+0x5f7/0xc90
[   30.016496]  ? lock_downgrade+0x980/0x980
[   30.020628]  ? handle_mm_fault+0x43b/0x970
[   30.024842]  ? __handle_mm_fault+0x3ce0/0x3ce0
[   30.029394]  ? vmacache_find+0x5f/0x280
[   30.033377]  ? up_read+0x1a/0x40
[   30.036722]  ? __do_page_fault+0x3d6/0xc90
[   30.040944]  ? do_syscall_64+0xb7/0x940
[   30.044894]  ? bpf_prog_get+0x20/0x20
[   30.048669]  do_syscall_64+0x282/0x940
[   30.052535]  ? __do_page_fault+0xc90/0xc90
[   30.056746]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   30.061479]  ? syscall_return_slowpath+0x550/0x550
[   30.066384]  ? syscall_return_slowpath+0x2ac/0x550
[   30.071286]  ? prepare_exit_to_usermode+0x350/0x350
[   30.076276]  ? retint_user+0x18/0x18
[   30.079987]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   30.084822]  entry_SYSCALL_64_after_hwframe+0x26/0x9b
[   30.089986] RIP: 0033:0x43fda9
[   30.093150] RSP: 002b:00007ffe6b075798 EFLAGS: 00000203 ORIG_RAX: 0000000000000141
[   30.100841] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000043fda9
[   30.108083] RDX: 0000000000000020 RSI: 0000000020ef4fe0 RDI: 0000000000000002
[   30.115326] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000
[   30.122571] R10: 0000000000000000 R11: 0000000000000203 R12: 00000000004016d0
[   30.129814] R13: 0000000000401760 R14: 0000000000000000 R15: 0000000000000000
[   30.137640] Dumping ftrace buffer:
[   30.141244]    (ftrace buffer empty)
[   30.144925] Kernel Offset: disabled
[   30.148526] Rebooting in 86400 seconds..