Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. executing program syzkaller login: [ 41.489868][ T3501] kernel profiling enabled (shift: 0) [ 42.562449][ C0] ================================================================== [ 42.570798][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 42.578188][ C0] Read of size 8 at addr ffffc90002d378c0 by task syz-executor215/3501 [ 42.586408][ C0] [ 42.588711][ C0] CPU: 0 PID: 3501 Comm: syz-executor215 Not tainted 5.15.145-syzkaller #0 [ 42.597814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 42.607860][ C0] Call Trace: [ 42.611139][ C0] [ 42.613964][ C0] dump_stack_lvl+0x1e3/0x2cb [ 42.618637][ C0] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.624976][ C0] ? _printk+0xd1/0x111 [ 42.629214][ C0] ? __wake_up_klogd+0xcc/0x100 [ 42.634066][ C0] ? panic+0x84d/0x84d [ 42.638148][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 42.643600][ C0] ? generic_exec_single+0x29f/0x4d0 [ 42.649131][ C0] print_address_description+0x63/0x3b0 [ 42.654797][ C0] ? profile_pc+0xa4/0xe0 [ 42.659117][ C0] kasan_report+0x16b/0x1c0 [ 42.663706][ C0] ? profile_pc+0xa4/0xe0 [ 42.668199][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 42.674182][ C0] profile_pc+0xa4/0xe0 [ 42.678600][ C0] profile_tick+0xd4/0x130 [ 42.683101][ C0] tick_sched_timer+0x390/0x550 [ 42.688028][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 42.693567][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 42.698787][ C0] ? hrtimer_interrupt+0x980/0x980 [ 42.703987][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 42.710037][ C0] hrtimer_interrupt+0x392/0x980 [ 42.715311][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 42.721271][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 42.727407][ C0] [ 42.730319][ C0] [ 42.733231][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 42.739201][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 42.745689][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 a2 63 a4 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e7 ba 31 f7 65 8b 05 58 f6 dc 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 42.765276][ C0] RSP: 0018:ffffc90002d378c0 EFLAGS: 00000206 [ 42.771332][ C0] RAX: 9f30fa84b3699f00 RBX: 1ffff920005a6f1c RCX: ffffffff8162eb78 [ 42.779311][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b0f80 RDI: 0000000000000001 [ 42.787363][ C0] RBP: ffffc90002d37950 R08: dffffc0000000000 R09: fffffbfff1f79e19 [ 42.795312][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 42.803351][ C0] R13: 1ffff920005a6f18 R14: ffffc90002d378e0 R15: 0000000000000246 [ 42.811306][ C0] ? mark_lock+0x98/0x340 [ 42.815832][ C0] ? _raw_spin_unlock+0x40/0x40 [ 42.820948][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 42.826155][ C0] ? ttwu_do_activate+0x1cf/0x430 [ 42.831774][ C0] try_to_wake_up+0x807/0x1300 [ 42.836533][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 42.842964][ C0] ? __mutex_lock_common+0x444/0x25a0 [ 42.848417][ C0] cpuhp_issue_call+0x314/0x7f0 [ 42.853254][ C0] __cpuhp_setup_state_cpuslocked+0x44d/0x810 [ 42.859955][ C0] ? profile_dead_cpu+0x3e0/0x3e0 [ 42.865241][ C0] ? profile_dead_cpu+0x3e0/0x3e0 [ 42.870271][ C0] __cpuhp_setup_state+0x3b/0x50 [ 42.875763][ C0] ? sysfs_kf_read+0x300/0x300 [ 42.880524][ C0] create_proc_profile+0x8b/0x110 [ 42.885536][ C0] profiling_store+0x7d/0xc0 [ 42.890116][ C0] kernfs_fop_write_iter+0x3a2/0x4f0 [ 42.895488][ C0] vfs_write+0xacf/0xe50 [ 42.899724][ C0] ? file_end_write+0x250/0x250 [ 42.907766][ C0] ? __context_tracking_enter+0x5f/0x90 [ 42.913411][ C0] ? __fdget_pos+0x2d2/0x380 [ 42.918081][ C0] ksys_write+0x1a2/0x2c0 [ 42.922407][ C0] ? print_irqtrace_events+0x210/0x210 [ 42.927972][ C0] ? __ia32_sys_read+0x80/0x80 [ 42.933243][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.939232][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 42.944721][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.950819][ C0] do_syscall_64+0x3d/0xb0 [ 42.955334][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.961326][ C0] RIP: 0033:0x7f458c3d4cb9 [ 42.965814][ C0] Code: d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.985511][ C0] RSP: 002b:00007ffcd8a22ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.993904][ C0] RAX: ffffffffffffffda RBX: 00007f458c41b22b RCX: 00007f458c3d4cb9 [ 43.001874][ C0] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003 [ 43.009851][ C0] RBP: 00007f458c44c380 R08: 00007ffcd8a22c54 R09: 00007ffcd8a22f84 [ 43.018040][ C0] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000004 [ 43.026138][ C0] R13: 0000000000000003 R14: 00007ffcd8a22fb0 R15: 00007ffcd8a22f8d [ 43.034205][ C0] [ 43.037214][ C0] [ 43.039529][ C0] [ 43.041834][ C0] addr ffffc90002d378c0 is located in stack of task syz-executor215/3501 at offset 0 in frame: [ 43.052142][ C0] _raw_spin_unlock_irqrestore+0x0/0x130 [ 43.057766][ C0] [ 43.060070][ C0] this frame has 1 object: [ 43.064457][ C0] [32, 40) 'flags.i.i.i.i' [ 43.064466][ C0] [ 43.071755][ C0] Memory state around the buggy address: [ 43.077375][ C0] ffffc90002d37780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.085420][ C0] ffffc90002d37800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.093507][ C0] >ffffc90002d37880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 43.101558][ C0] ^ [ 43.107705][ C0] ffffc90002d37900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.115750][ C0] ffffc90002d37980: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 [ 43.123810][ C0] ================================================================== [ 43.131932][ C0] Disabling lock debugging due to kernel taint [ 43.138059][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 43.145226][ C0] CPU: 0 PID: 3501 Comm: syz-executor215 Tainted: G B 5.15.145-syzkaller #0 [ 43.155176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 43.165302][ C0] Call Trace: [ 43.168565][ C0] [ 43.171390][ C0] dump_stack_lvl+0x1e3/0x2cb [ 43.176048][ C0] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.181655][ C0] ? panic+0x84d/0x84d [ 43.185895][ C0] ? lock_release+0xb9/0x9a0 [ 43.190553][ C0] ? irq_work_queue+0xcd/0x150 [ 43.195534][ C0] panic+0x318/0x84d [ 43.199941][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 43.205082][ C0] ? fb_is_primary_device+0xcc/0xcc [ 43.210275][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.216403][ C0] ? _raw_spin_unlock+0x40/0x40 [ 43.221250][ C0] check_panic_on_warn+0x7e/0xa0 [ 43.226169][ C0] ? profile_pc+0xa4/0xe0 [ 43.230505][ C0] end_report+0x6d/0xf0 [ 43.234651][ C0] kasan_report+0x18e/0x1c0 [ 43.239141][ C0] ? profile_pc+0xa4/0xe0 [ 43.243519][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 43.249409][ C0] profile_pc+0xa4/0xe0 [ 43.253540][ C0] profile_tick+0xd4/0x130 [ 43.257928][ C0] tick_sched_timer+0x390/0x550 [ 43.262886][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 43.268421][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 43.273612][ C0] ? hrtimer_interrupt+0x980/0x980 [ 43.278820][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 43.284897][ C0] hrtimer_interrupt+0x392/0x980 [ 43.289877][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 43.295867][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 43.301586][ C0] [ 43.304508][ C0] [ 43.307553][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 43.313510][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 43.320003][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 a2 63 a4 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e7 ba 31 f7 65 8b 05 58 f6 dc 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 43.339761][ C0] RSP: 0018:ffffc90002d378c0 EFLAGS: 00000206 [ 43.345954][ C0] RAX: 9f30fa84b3699f00 RBX: 1ffff920005a6f1c RCX: ffffffff8162eb78 [ 43.353984][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b0f80 RDI: 0000000000000001 [ 43.361935][ C0] RBP: ffffc90002d37950 R08: dffffc0000000000 R09: fffffbfff1f79e19 [ 43.369991][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 43.378031][ C0] R13: 1ffff920005a6f18 R14: ffffc90002d378e0 R15: 0000000000000246 [ 43.386081][ C0] ? mark_lock+0x98/0x340 [ 43.390406][ C0] ? _raw_spin_unlock+0x40/0x40 [ 43.395234][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.400407][ C0] ? ttwu_do_activate+0x1cf/0x430 [ 43.405410][ C0] try_to_wake_up+0x807/0x1300 [ 43.410246][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 43.416725][ C0] ? __mutex_lock_common+0x444/0x25a0 [ 43.422172][ C0] cpuhp_issue_call+0x314/0x7f0 [ 43.427348][ C0] __cpuhp_setup_state_cpuslocked+0x44d/0x810 [ 43.433774][ C0] ? profile_dead_cpu+0x3e0/0x3e0 [ 43.438792][ C0] ? profile_dead_cpu+0x3e0/0x3e0 [ 43.444327][ C0] __cpuhp_setup_state+0x3b/0x50 [ 43.449240][ C0] ? sysfs_kf_read+0x300/0x300 [ 43.454163][ C0] create_proc_profile+0x8b/0x110 [ 43.459525][ C0] profiling_store+0x7d/0xc0 [ 43.464102][ C0] kernfs_fop_write_iter+0x3a2/0x4f0 [ 43.469554][ C0] vfs_write+0xacf/0xe50 [ 43.473794][ C0] ? file_end_write+0x250/0x250 [ 43.478794][ C0] ? __context_tracking_enter+0x5f/0x90 [ 43.484321][ C0] ? __fdget_pos+0x2d2/0x380 [ 43.488903][ C0] ksys_write+0x1a2/0x2c0 [ 43.493485][ C0] ? print_irqtrace_events+0x210/0x210 [ 43.501117][ C0] ? __ia32_sys_read+0x80/0x80 [ 43.506063][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.512023][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 43.517245][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.523217][ C0] do_syscall_64+0x3d/0xb0 [ 43.527928][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.533811][ C0] RIP: 0033:0x7f458c3d4cb9 [ 43.538213][ C0] Code: d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.557977][ C0] RSP: 002b:00007ffcd8a22ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.566460][ C0] RAX: ffffffffffffffda RBX: 00007f458c41b22b RCX: 00007f458c3d4cb9 [ 43.574416][ C0] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003 [ 43.582361][ C0] RBP: 00007f458c44c380 R08: 00007ffcd8a22c54 R09: 00007ffcd8a22f84 [ 43.590569][ C0] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000004 [ 43.598520][ C0] R13: 0000000000000003 R14: 00007ffcd8a22fb0 R15: 00007ffcd8a22f8d [ 43.606473][ C0] [ 43.609566][ C0] Kernel Offset: disabled [ 43.613883][ C0] Rebooting in 86400 seconds..