Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts.
executing program
[   50.567183][ T3507] kernel profiling enabled (shift: 0)
[   50.591304][    C0] ==================================================================
[   50.599586][    C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[   50.606695][    C0] Read of size 8 at addr ffffc90003a8f2a0 by task syz-executor163/3507
[   50.614908][    C0] 
[   50.617210][    C0] CPU: 0 PID: 3507 Comm: syz-executor163 Not tainted 6.1.49-syzkaller #0
[   50.625601][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   50.635633][    C0] Call Trace:
[   50.638892][    C0]  <IRQ>
[   50.641714][    C0]  dump_stack_lvl+0x1e3/0x2cb
[   50.646381][    C0]  ? nf_tcp_handle_invalid+0x642/0x642
[   50.651817][    C0]  ? panic+0x75d/0x75d
[   50.655861][    C0]  ? _printk+0xd1/0x111
[   50.659996][    C0]  print_report+0x15f/0x4f0
[   50.664496][    C0]  ? __virt_addr_valid+0xb9/0x2e0
[   50.669497][    C0]  ? profile_pc+0xa4/0xe0
[   50.673803][    C0]  kasan_report+0x136/0x160
[   50.678281][    C0]  ? profile_pc+0xa4/0xe0
[   50.682589][    C0]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   50.688458][    C0]  profile_pc+0xa4/0xe0
[   50.692592][    C0]  profile_tick+0xee/0x170
[   50.696982][    C0]  tick_sched_timer+0x390/0x550
[   50.701812][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   50.707333][    C0]  __hrtimer_run_queues+0x5a7/0xe50
[   50.712513][    C0]  ? hrtimer_interrupt+0x980/0x980
[   50.717604][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[   50.723646][    C0]  hrtimer_interrupt+0x392/0x980
[   50.728568][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[   50.734522][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   50.740146][    C0]  </IRQ>
[   50.743062][    C0]  <TASK>
[   50.745972][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   50.751968][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   50.758447][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 b2 a3 51 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e7 13 cf f6 65 8b 05 a8 7e 73 75 85 c0 74 3f 48 c7 04 24 0e 36
[   50.778208][    C0] RSP: 0018:ffffc90003a8f2a0 EFLAGS: 00000206
[   50.784256][    C0] RAX: 3f125dcb6743d400 RBX: 1ffff92000751e58 RCX: ffffffff816a5a2a
[   50.792379][    C0] RDX: dffffc0000000000 RSI: ffffffff8aebe2a0 RDI: 0000000000000001
[   50.800327][    C0] RBP: ffffc90003a8f330 R08: dffffc0000000000 R09: fffffbfff209345e
[   50.808276][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   50.816236][    C0] R13: 1ffff92000751e54 R14: ffffc90003a8f2c0 R15: 0000000000000246
[   50.824192][    C0]  ? mark_lock+0x9a/0x340
[   50.828509][    C0]  ? _raw_spin_unlock+0x40/0x40
[   50.833349][    C0]  get_page_from_freelist+0x8db/0x3480
[   50.838796][    C0]  ? __alloc_pages+0x770/0x770
[   50.843538][    C0]  ? prepare_alloc_pages+0x1d9/0x5b0
[   50.848974][    C0]  __alloc_pages+0x28d/0x770
[   50.853542][    C0]  ? zone_statistics+0x160/0x160
[   50.858457][    C0]  ? do_raw_spin_lock+0x14a/0x370
[   50.863477][    C0]  ? alloc_pages+0x50c/0x770
[   50.868048][    C0]  __get_free_pages+0x8/0x30
[   50.872622][    C0]  kasan_populate_vmalloc_pte+0x35/0xf0
[   50.878149][    C0]  ? __apply_to_page_range+0x9b3/0xcc0
[   50.883586][    C0]  __apply_to_page_range+0x9c5/0xcc0
[   50.888847][    C0]  ? kasan_populate_vmalloc+0x70/0x70
[   50.894204][    C0]  alloc_vmap_area+0x1977/0x1ac0
[   50.899126][    C0]  ? vm_map_ram+0xaa0/0xaa0
[   50.903607][    C0]  __get_vm_area_node+0x16c/0x360
[   50.908609][    C0]  __vmalloc_node_range+0x394/0x1460
[   50.913876][    C0]  ? profile_init+0xfa/0x160
[   50.918445][    C0]  ? __alloc_pages+0xba/0x770
[   50.923097][    C0]  ? memset+0x1f/0x40
[   50.927051][    C0]  ? __alloc_pages+0xba/0x770
[   50.931702][    C0]  ? zone_statistics+0x160/0x160
[   50.936616][    C0]  ? free_vm_area+0x50/0x50
[   50.941095][    C0]  ? profile_init+0xfa/0x160
[   50.945656][    C0]  ? sysfs_kf_read+0x300/0x300
[   50.950392][    C0]  vzalloc+0x75/0x80
[   50.954266][    C0]  ? profile_init+0xfa/0x160
[   50.958832][    C0]  profile_init+0xfa/0x160
[   50.963224][    C0]  profiling_store+0x5a/0xc0
[   50.967791][    C0]  kernfs_fop_write_iter+0x3a2/0x4f0
[   50.973140][    C0]  vfs_write+0x7ae/0xba0
[   50.977362][    C0]  ? file_end_write+0x250/0x250
[   50.982183][    C0]  ? do_sys_openat2+0x42b/0x500
[   50.987011][    C0]  ? __fdget_pos+0x2c1/0x360
[   50.991579][    C0]  ksys_write+0x19c/0x2c0
[   50.995883][    C0]  ? print_irqtrace_events+0x210/0x210
[   51.001321][    C0]  ? __ia32_sys_read+0x80/0x80
[   51.006063][    C0]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.012022][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[   51.017202][    C0]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.023175][    C0]  do_syscall_64+0x3d/0xb0
[   51.027579][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.033456][    C0] RIP: 0033:0x7fb1259e32e9
[   51.037846][    C0] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   51.057435][    C0] RSP: 002b:00007ffd800052b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.065927][    C0] RAX: ffffffffffffffda RBX: 00007ffd80005488 RCX: 00007fb1259e32e9
[   51.073886][    C0] RDX: 000000000000000f RSI: 0000000020000000 RDI: 0000000000000003
[   51.081835][    C0] RBP: 00007fb125a56610 R08: 0000000000000000 R09: 00007ffd80005488
[   51.089789][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.097748][    C0] R13: 00007ffd80005478 R14: 0000000000000001 R15: 0000000000000001
[   51.105704][    C0]  </TASK>
[   51.108705][    C0] 
[   51.111007][    C0] The buggy address belongs to stack of task syz-executor163/3507
[   51.118783][    C0]  and is located at offset 0 in frame:
[   51.124296][    C0]  _raw_spin_unlock_irqrestore+0x0/0x130
[   51.129917][    C0] 
[   51.132223][    C0] This frame has 1 object:
[   51.136632][    C0]  [32, 40) 'flags.i.i.i.i'
[   51.136641][    C0] 
[   51.143527][    C0] The buggy address belongs to the virtual mapping at
[   51.143527][    C0]  [ffffc90003a88000, ffffc90003a91000) created by:
[   51.143527][    C0]  copy_process+0x637/0x4020
[   51.161128][    C0] 
[   51.163443][    C0] The buggy address belongs to the physical page:
[   51.169829][    C0] page:ffffea00009cc940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27325
[   51.179963][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   51.187053][    C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   51.195615][    C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   51.204173][    C0] page dumped because: kasan: bad access detected
[   51.210562][    C0] page_owner tracks the page as allocated
[   51.216342][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3505, tgid 3505 (sshd), ts 50528125770, free_ts 44804448013
[   51.234819][    C0]  post_alloc_hook+0x18d/0x1b0
[   51.239570][    C0]  get_page_from_freelist+0x32ed/0x3480
[   51.245091][    C0]  __alloc_pages+0x28d/0x770
[   51.249660][    C0]  __vmalloc_node_range+0x96c/0x1460
[   51.254924][    C0]  dup_task_struct+0x3e5/0x6d0
[   51.259674][    C0]  copy_process+0x637/0x4020
[   51.264241][    C0]  kernel_clone+0x222/0x920
[   51.268719][    C0]  __x64_sys_clone+0x231/0x280
[   51.273458][    C0]  do_syscall_64+0x3d/0xb0
[   51.277857][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.283742][    C0] page last free stack trace:
[   51.288391][    C0]  free_unref_page_prepare+0xf63/0x1120
[   51.293912][    C0]  free_unref_page+0x98/0x570
[   51.298564][    C0]  pipe_read+0x6e1/0x12a0
[   51.302873][    C0]  vfs_read+0x7de/0xbe0
[   51.307005][    C0]  ksys_read+0x19c/0x2c0
[   51.311226][    C0]  do_syscall_64+0x3d/0xb0
[   51.315618][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.321505][    C0] 
[   51.323807][    C0] Memory state around the buggy address:
[   51.329413][    C0]  ffffc90003a8f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   51.337450][    C0]  ffffc90003a8f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   51.345497][    C0] >ffffc90003a8f280: 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00
[   51.353535][    C0]                                ^
[   51.358618][    C0]  ffffc90003a8f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   51.366658][    C0]  ffffc90003a8f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   51.374693][    C0] ==================================================================
[   51.382729][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   51.389906][    C0] CPU: 0 PID: 3507 Comm: syz-executor163 Not tainted 6.1.49-syzkaller #0
[   51.398296][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   51.408510][    C0] Call Trace:
[   51.411770][    C0]  <IRQ>
[   51.414593][    C0]  dump_stack_lvl+0x1e3/0x2cb
[   51.419268][    C0]  ? nf_tcp_handle_invalid+0x642/0x642
[   51.424778][    C0]  ? panic+0x75d/0x75d
[   51.428827][    C0]  ? rcu_is_watching+0x11/0xb0
[   51.433567][    C0]  ? lock_release+0xd6/0xa20
[   51.438130][    C0]  ? vscnprintf+0x59/0x80
[   51.442440][    C0]  panic+0x318/0x75d
[   51.446328][    C0]  ? vprintk_emit+0x109/0x1f0
[   51.450997][    C0]  ? check_panic_on_warn+0x1d/0xa0
[   51.456090][    C0]  ? memcpy_page_flushcache+0xfc/0xfc
[   51.461468][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[   51.466665][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   51.472632][    C0]  ? _raw_spin_unlock+0x40/0x40
[   51.477465][    C0]  check_panic_on_warn+0x7e/0xa0
[   51.482384][    C0]  ? profile_pc+0xa4/0xe0
[   51.486700][    C0]  end_report+0x66/0x110
[   51.490918][    C0]  kasan_report+0x143/0x160
[   51.495397][    C0]  ? profile_pc+0xa4/0xe0
[   51.499881][    C0]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   51.505756][    C0]  profile_pc+0xa4/0xe0
[   51.509897][    C0]  profile_tick+0xee/0x170
[   51.514291][    C0]  tick_sched_timer+0x390/0x550
[   51.519479][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   51.525022][    C0]  __hrtimer_run_queues+0x5a7/0xe50
[   51.530219][    C0]  ? hrtimer_interrupt+0x980/0x980
[   51.535308][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[   51.541456][    C0]  hrtimer_interrupt+0x392/0x980
[   51.546391][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[   51.552365][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   51.558073][    C0]  </IRQ>
[   51.560984][    C0]  <TASK>
[   51.563895][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   51.569861][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   51.576342][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 b2 a3 51 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e7 13 cf f6 65 8b 05 a8 7e 73 75 85 c0 74 3f 48 c7 04 24 0e 36
[   51.595948][    C0] RSP: 0018:ffffc90003a8f2a0 EFLAGS: 00000206
[   51.601994][    C0] RAX: 3f125dcb6743d400 RBX: 1ffff92000751e58 RCX: ffffffff816a5a2a
[   51.609943][    C0] RDX: dffffc0000000000 RSI: ffffffff8aebe2a0 RDI: 0000000000000001
[   51.617889][    C0] RBP: ffffc90003a8f330 R08: dffffc0000000000 R09: fffffbfff209345e
[   51.625839][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   51.633786][    C0] R13: 1ffff92000751e54 R14: ffffc90003a8f2c0 R15: 0000000000000246
[   51.641749][    C0]  ? mark_lock+0x9a/0x340
[   51.646061][    C0]  ? _raw_spin_unlock+0x40/0x40
[   51.650889][    C0]  get_page_from_freelist+0x8db/0x3480
[   51.656331][    C0]  ? __alloc_pages+0x770/0x770
[   51.661067][    C0]  ? prepare_alloc_pages+0x1d9/0x5b0
[   51.666360][    C0]  __alloc_pages+0x28d/0x770
[   51.670924][    C0]  ? zone_statistics+0x160/0x160
[   51.675839][    C0]  ? do_raw_spin_lock+0x14a/0x370
[   51.680839][    C0]  ? alloc_pages+0x50c/0x770
[   51.685411][    C0]  __get_free_pages+0x8/0x30
[   51.689976][    C0]  kasan_populate_vmalloc_pte+0x35/0xf0
[   51.695499][    C0]  ? __apply_to_page_range+0x9b3/0xcc0
[   51.700934][    C0]  __apply_to_page_range+0x9c5/0xcc0
[   51.706234][    C0]  ? kasan_populate_vmalloc+0x70/0x70
[   51.711609][    C0]  alloc_vmap_area+0x1977/0x1ac0
[   51.716527][    C0]  ? vm_map_ram+0xaa0/0xaa0
[   51.721007][    C0]  __get_vm_area_node+0x16c/0x360
[   51.726009][    C0]  __vmalloc_node_range+0x394/0x1460
[   51.731272][    C0]  ? profile_init+0xfa/0x160
[   51.735847][    C0]  ? __alloc_pages+0xba/0x770
[   51.740496][    C0]  ? memset+0x1f/0x40
[   51.744457][    C0]  ? __alloc_pages+0xba/0x770
[   51.749124][    C0]  ? zone_statistics+0x160/0x160
[   51.754052][    C0]  ? free_vm_area+0x50/0x50
[   51.758548][    C0]  ? profile_init+0xfa/0x160
[   51.763129][    C0]  ? sysfs_kf_read+0x300/0x300
[   51.767873][    C0]  vzalloc+0x75/0x80
[   51.771756][    C0]  ? profile_init+0xfa/0x160
[   51.776322][    C0]  profile_init+0xfa/0x160
[   51.780714][    C0]  profiling_store+0x5a/0xc0
[   51.785287][    C0]  kernfs_fop_write_iter+0x3a2/0x4f0
[   51.790554][    C0]  vfs_write+0x7ae/0xba0
[   51.794778][    C0]  ? file_end_write+0x250/0x250
[   51.799604][    C0]  ? do_sys_openat2+0x42b/0x500
[   51.804437][    C0]  ? __fdget_pos+0x2c1/0x360
[   51.809005][    C0]  ksys_write+0x19c/0x2c0
[   51.813311][    C0]  ? print_irqtrace_events+0x210/0x210
[   51.818755][    C0]  ? __ia32_sys_read+0x80/0x80
[   51.823498][    C0]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.829454][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[   51.834759][    C0]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.840726][    C0]  do_syscall_64+0x3d/0xb0
[   51.845124][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.850996][    C0] RIP: 0033:0x7fb1259e32e9
[   51.855396][    C0] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   51.874982][    C0] RSP: 002b:00007ffd800052b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.883373][    C0] RAX: ffffffffffffffda RBX: 00007ffd80005488 RCX: 00007fb1259e32e9
[   51.891328][    C0] RDX: 000000000000000f RSI: 0000000020000000 RDI: 0000000000000003
[   51.899288][    C0] RBP: 00007fb125a56610 R08: 0000000000000000 R09: 00007ffd80005488
[   51.907233][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.915182][    C0] R13: 00007ffd80005478 R14: 0000000000000001 R15: 0000000000000001
[   51.923133][    C0]  </TASK>
[   51.926239][    C0] Kernel Offset: disabled
[   51.930542][    C0] Rebooting in 86400 seconds..