./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3410905882

<...>
Warning: Permanently added '10.128.1.140' (ECDSA) to the list of known hosts.
execve("./syz-executor3410905882", ["./syz-executor3410905882"], 0x7fff433fc8a0 /* 10 vars */) = 0
brk(NULL)                               = 0x555556e70000
brk(0x555556e70c40)                     = 0x555556e70c40
arch_prctl(ARCH_SET_FS, 0x555556e70300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3410905882", 4096) = 28
brk(0x555556e91c40)                     = 0x555556e91c40
brk(0x555556e92000)                     = 0x555556e92000
mprotect(0x7fdcce2fa000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/profiling", O_WRONLY|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME) = 3
syzkaller login: [   56.438199][ T5012] kernel profiling enabled (shift: 0)
[   57.044579][    C0] ==================================================================
[   57.052759][    C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa8/0xe0
[   57.060003][    C0] Read of size 8 at addr ffffc90003adf400 by task syz-executor341/5012
[   57.068241][    C0] 
[   57.070553][    C0] CPU: 0 PID: 5012 Comm: syz-executor341 Not tainted 6.4.0-syzkaller-12155-ga452483508d7 #0
[   57.080613][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[   57.090655][    C0] Call Trace:
[   57.093918][    C0]  <IRQ>
[   57.096745][    C0]  dump_stack_lvl+0x1e7/0x2d0
[   57.101412][    C0]  ? nf_tcp_handle_invalid+0x650/0x650
[   57.106856][    C0]  ? panic+0x770/0x770
[   57.110901][    C0]  ? _printk+0xd5/0x120
[   57.115039][    C0]  print_report+0x163/0x540
[   57.119521][    C0]  ? rcu_read_lock_sched_held+0x8d/0x130
[   57.125132][    C0]  ? __virt_addr_valid+0xbd/0x2e0
[   57.130134][    C0]  ? profile_pc+0xa8/0xe0
[   57.134439][    C0]  kasan_report+0x175/0x1b0
[   57.138933][    C0]  ? profile_pc+0xa8/0xe0
[   57.143259][    C0]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   57.149143][    C0]  profile_pc+0xa8/0xe0
[   57.153308][    C0]  profile_tick+0xd8/0x130
[   57.157714][    C0]  tick_sched_timer+0x383/0x550
[   57.162553][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   57.168086][    C0]  __hrtimer_run_queues+0x562/0xd10
[   57.173279][    C0]  ? hrtimer_interrupt+0x980/0x980
[   57.178381][    C0]  ? ktime_get_update_offsets_now+0x40b/0x420
[   57.184450][    C0]  hrtimer_interrupt+0x396/0x980
[   57.189396][    C0]  __sysvec_apic_timer_interrupt+0x13f/0x480
[   57.195377][    C0]  sysvec_apic_timer_interrupt+0x90/0xb0
[   57.201011][    C0]  </IRQ>
[   57.203928][    C0]  <TASK>
[   57.206851][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   57.212831][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   57.219325][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 7f 1e f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 f6 98 f6 65 8b 05 04 81 3d 75 85 c0 74 3f 48 c7 04 24 0e 36
[   57.238921][    C0] RSP: 0018:ffffc90003adf400 EFLAGS: 00000206
[   57.244977][    C0] RAX: 845a82f88087d700 RBX: 1ffff9200075be84 RCX: ffffffff816c292a
[   57.252946][    C0] RDX: dffffc0000000000 RSI: ffffffff8b0a9040 RDI: 0000000000000001
[   57.260906][    C0] RBP: ffffc90003adf490 R08: ffffffff907b0307 R09: 1ffffffff20f6060
[   57.268866][    C0] R10: dffffc0000000000 R11: fffffbfff20f6061 R12: dffffc0000000000
[   57.276833][    C0] R13: 1ffff9200075be80 R14: ffffc90003adf420 R15: 0000000000000246
[   57.284802][    C0]  ? mark_lock+0x9a/0x340
[   57.289131][    C0]  ? _raw_spin_unlock+0x40/0x40
[   57.293971][    C0]  ? __mod_zone_page_state+0xda/0x140
[   57.299336][    C0]  __rmqueue_pcplist+0x1e3e/0x2150
[   57.304447][    C0]  ? zone_watermark_fast+0x240/0x240
[   57.309723][    C0]  get_page_from_freelist+0x780/0x3370
[   57.315177][    C0]  ? __alloc_pages+0x165/0x670
[   57.319927][    C0]  ? __might_sleep+0xc0/0xc0
[   57.324516][    C0]  ? __alloc_pages+0x670/0x670
[   57.329271][    C0]  ? prepare_alloc_pages+0x1d9/0x5b0
[   57.334549][    C0]  __alloc_pages+0x255/0x670
[   57.339128][    C0]  ? zone_statistics+0x170/0x170
[   57.344058][    C0]  ? _raw_spin_unlock+0x28/0x40
[   57.348903][    C0]  ? alloc_pages+0x510/0x780
[   57.353502][    C0]  __vmalloc_node_range+0x9a3/0x1490
[   57.358812][    C0]  ? free_vm_area+0x50/0x50
[   57.363319][    C0]  ? profile_init+0xee/0x130
[   57.367912][    C0]  ? sysfs_kf_read+0x310/0x310
[   57.372670][    C0]  vzalloc+0x79/0x90
[   57.376561][    C0]  ? profile_init+0xee/0x130
[   57.381143][    C0]  profile_init+0xee/0x130
[   57.385553][    C0]  profiling_store+0x5e/0xc0
[   57.390153][    C0]  kernfs_fop_write_iter+0x3a6/0x4f0
[   57.395457][    C0]  vfs_write+0x782/0xaf0
[   57.399707][    C0]  ? file_end_write+0x250/0x250
[   57.404560][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[   57.409750][    C0]  ? __fdget_pos+0x265/0x2f0
[   57.414343][    C0]  ksys_write+0x1a0/0x2c0
[   57.418664][    C0]  ? __ia32_sys_read+0x90/0x90
[   57.423439][    C0]  ? syscall_enter_from_user_mode+0x32/0x230
[   57.429410][    C0]  ? syscall_enter_from_user_mode+0x8c/0x230
[   57.435386][    C0]  do_syscall_64+0x41/0xc0
[   57.439797][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   57.445678][    C0] RIP: 0033:0x7fdcce28dde9
[   57.450081][    C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   57.469677][    C0] RSP: 002b:00007ffc8c298c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   57.478079][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcce28dde9
[   57.486038][    C0] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003
[   57.493997][    C0] RBP: 00007fdcce251d00 R08: 0000000000000014 R09: 0000000000000000
[   57.501957][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcce251d90
[   57.509914][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   57.517965][    C0]  </TASK>
[   57.520972][    C0] 
[   57.523373][    C0] The buggy address belongs to stack of task syz-executor341/5012
[   57.531243][    C0]  and is located at offset 0 in frame:
[   57.537032][    C0]  _raw_spin_unlock_irqrestore+0x0/0x140
[   57.542706][    C0] 
[   57.545036][    C0] This frame has 1 object:
[   57.549441][    C0]  [32, 40) 'flags.i.i.i.i'
[   57.549452][    C0] 
[   57.556269][    C0] The buggy address belongs to the virtual mapping at
[   57.556269][    C0]  [ffffc90003ad8000, ffffc90003ae1000) created by:
[   57.556269][    C0]  copy_process+0x5c8/0x4290
[   57.573882][    C0] 
[   57.576191][    C0] The buggy address belongs to the physical page:
[   57.582583][    C0] page:ffffea0000abfdc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aff7
[   57.592719][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   57.599823][    C0] page_type: 0xffffffff()
[   57.604141][    C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   57.613579][    C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   57.622148][    C0] page dumped because: kasan: bad access detected
[   57.628555][    C0] page_owner tracks the page as allocated
[   57.634276][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 4938, tgid 4938 (dhcpcd-run-hook), ts 44796902105, free_ts 44795186948
[   57.654059][    C0]  post_alloc_hook+0x1e6/0x210
[   57.658841][    C0]  get_page_from_freelist+0x31e8/0x3370
[   57.664381][    C0]  __alloc_pages+0x255/0x670
[   57.668961][    C0]  __vmalloc_node_range+0x9a3/0x1490
[   57.674237][    C0]  dup_task_struct+0x3e5/0x7d0
[   57.678986][    C0]  copy_process+0x5c8/0x4290
[   57.683689][    C0]  kernel_clone+0x222/0x800
[   57.688210][    C0]  __x64_sys_clone+0x258/0x2a0
[   57.692986][    C0]  do_syscall_64+0x41/0xc0
[   57.697405][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   57.703292][    C0] page last free stack trace:
[   57.707946][    C0]  free_unref_page_prepare+0x903/0xa30
[   57.713398][    C0]  free_unref_page_list+0x596/0x830
[   57.718584][    C0]  release_pages+0x2193/0x2470
[   57.723348][    C0]  tlb_flush_mmu+0x100/0x210
[   57.728022][    C0]  tlb_finish_mmu+0xd4/0x1f0
[   57.732690][    C0]  exit_mmap+0x3e2/0xad0
[   57.736923][    C0]  __mmput+0x115/0x3c0
[   57.740980][    C0]  exit_mm+0x21f/0x300
[   57.745043][    C0]  do_exit+0x612/0x2290
[   57.749199][    C0]  do_group_exit+0x206/0x2c0
[   57.753791][    C0]  __x64_sys_exit_group+0x3f/0x40
[   57.758807][    C0]  do_syscall_64+0x41/0xc0
[   57.763216][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   57.769098][    C0] 
[   57.771408][    C0] Memory state around the buggy address:
[   57.777019][    C0]  ffffc90003adf300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   57.785069][    C0]  ffffc90003adf380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   57.793116][    C0] >ffffc90003adf400: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00
[   57.801160][    C0]                    ^
[   57.805215][    C0]  ffffc90003adf480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   57.813259][    C0]  ffffc90003adf500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   57.821303][    C0] ==================================================================
[   57.829347][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   57.836524][    C0] CPU: 0 PID: 5012 Comm: syz-executor341 Not tainted 6.4.0-syzkaller-12155-ga452483508d7 #0
[   57.846577][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[   57.856709][    C0] Call Trace:
[   57.860068][    C0]  <IRQ>
[   57.862905][    C0]  dump_stack_lvl+0x1e7/0x2d0
[   57.867670][    C0]  ? nf_tcp_handle_invalid+0x650/0x650
[   57.873124][    C0]  ? panic+0x770/0x770
[   57.877183][    C0]  ? rcu_is_watching+0x15/0xb0
[   57.881939][    C0]  ? lock_release+0xbf/0x9d0
[   57.886539][    C0]  ? vscnprintf+0x5d/0x80
[   57.890862][    C0]  panic+0x30f/0x770
[   57.894749][    C0]  ? vprintk_emit+0x10d/0x1f0
[   57.899431][    C0]  ? check_panic_on_warn+0x21/0xa0
[   57.904537][    C0]  ? __memcpy_flushcache+0x2b0/0x2b0
[   57.909814][    C0]  ? do_raw_spin_unlock+0x13b/0x8b0
[   57.915013][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   57.920903][    C0]  ? _raw_spin_unlock+0x40/0x40
[   57.925745][    C0]  check_panic_on_warn+0x82/0xa0
[   57.930671][    C0]  ? profile_pc+0xa8/0xe0
[   57.934989][    C0]  end_report+0x6e/0x130
[   57.939223][    C0]  kasan_report+0x186/0x1b0
[   57.943809][    C0]  ? profile_pc+0xa8/0xe0
[   57.948129][    C0]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   57.954013][    C0]  profile_pc+0xa8/0xe0
[   57.958164][    C0]  profile_tick+0xd8/0x130
[   57.962574][    C0]  tick_sched_timer+0x383/0x550
[   57.967411][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   57.972949][    C0]  __hrtimer_run_queues+0x562/0xd10
[   57.978154][    C0]  ? hrtimer_interrupt+0x980/0x980
[   57.983256][    C0]  ? ktime_get_update_offsets_now+0x40b/0x420
[   57.989318][    C0]  hrtimer_interrupt+0x396/0x980
[   57.994251][    C0]  __sysvec_apic_timer_interrupt+0x13f/0x480
[   58.000350][    C0]  sysvec_apic_timer_interrupt+0x90/0xb0
[   58.005978][    C0]  </IRQ>
[   58.008901][    C0]  <TASK>
[   58.011819][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   58.017790][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   58.024277][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 7f 1e f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 f6 98 f6 65 8b 05 04 81 3d 75 85 c0 74 3f 48 c7 04 24 0e 36
[   58.044136][    C0] RSP: 0018:ffffc90003adf400 EFLAGS: 00000206
[   58.050716][    C0] RAX: 845a82f88087d700 RBX: 1ffff9200075be84 RCX: ffffffff816c292a
[   58.058781][    C0] RDX: dffffc0000000000 RSI: ffffffff8b0a9040 RDI: 0000000000000001
[   58.066791][    C0] RBP: ffffc90003adf490 R08: ffffffff907b0307 R09: 1ffffffff20f6060
[   58.074758][    C0] R10: dffffc0000000000 R11: fffffbfff20f6061 R12: dffffc0000000000
[   58.082718][    C0] R13: 1ffff9200075be80 R14: ffffc90003adf420 R15: 0000000000000246
[   58.090770][    C0]  ? mark_lock+0x9a/0x340
[   58.095098][    C0]  ? _raw_spin_unlock+0x40/0x40
[   58.099940][    C0]  ? __mod_zone_page_state+0xda/0x140
[   58.105397][    C0]  __rmqueue_pcplist+0x1e3e/0x2150
[   58.111397][    C0]  ? zone_watermark_fast+0x240/0x240
[   58.116695][    C0]  get_page_from_freelist+0x780/0x3370
[   58.122250][    C0]  ? __alloc_pages+0x165/0x670
[   58.127096][    C0]  ? __might_sleep+0xc0/0xc0
[   58.131768][    C0]  ? __alloc_pages+0x670/0x670
[   58.136520][    C0]  ? prepare_alloc_pages+0x1d9/0x5b0
[   58.141798][    C0]  __alloc_pages+0x255/0x670
[   58.146380][    C0]  ? zone_statistics+0x170/0x170
[   58.151313][    C0]  ? _raw_spin_unlock+0x28/0x40
[   58.156156][    C0]  ? alloc_pages+0x510/0x780
[   58.160735][    C0]  __vmalloc_node_range+0x9a3/0x1490
[   58.166023][    C0]  ? free_vm_area+0x50/0x50
[   58.170525][    C0]  ? profile_init+0xee/0x130
[   58.175108][    C0]  ? sysfs_kf_read+0x310/0x310
[   58.179865][    C0]  vzalloc+0x79/0x90
[   58.183753][    C0]  ? profile_init+0xee/0x130
[   58.188334][    C0]  profile_init+0xee/0x130
[   58.192740][    C0]  profiling_store+0x5e/0xc0
[   58.197321][    C0]  kernfs_fop_write_iter+0x3a6/0x4f0
[   58.202594][    C0]  vfs_write+0x782/0xaf0
[   58.206838][    C0]  ? file_end_write+0x250/0x250
[   58.211681][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[   58.216871][    C0]  ? __fdget_pos+0x265/0x2f0
[   58.221452][    C0]  ksys_write+0x1a0/0x2c0
[   58.225787][    C0]  ? __ia32_sys_read+0x90/0x90
[   58.230541][    C0]  ? syscall_enter_from_user_mode+0x32/0x230
[   58.236512][    C0]  ? syscall_enter_from_user_mode+0x8c/0x230
[   58.242484][    C0]  do_syscall_64+0x41/0xc0
[   58.246905][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   58.252791][    C0] RIP: 0033:0x7fdcce28dde9
[   58.257212][    C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   58.276909][    C0] RSP: 002b:00007ffc8c298c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   58.285314][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcce28dde9
[   58.293275][    C0] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003
[   58.301261][    C0] RBP: 00007fdcce251d00 R08: 0000000000000014 R09: 0000000000000000
[   58.309310][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcce251d90
[   58.317285][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.325356][    C0]  </TASK>
[   58.328655][    C0] Kernel Offset: disabled
[   58.332974][    C0] Rebooting in 86400 seconds..