./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3852940713

<...>
Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
execve("./syz-executor3852940713", ["./syz-executor3852940713"], 0x7fff072d3d20 /* 10 vars */) = 0
brk(NULL)                               = 0x55556fcfa000
brk(0x55556fcfad00)                     = 0x55556fcfad00
arch_prctl(ARCH_SET_FS, 0x55556fcfa380) = 0
set_tid_address(0x55556fcfa650)         = 5090
set_robust_list(0x55556fcfa660, 24)     = 0
rseq(0x55556fcfaca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3852940713", 4096) = 28
getrandom("\x24\x63\xaa\x4f\x0f\x06\x96\xc8", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556fcfad00
brk(0x55556fd1bd00)                     = 0x55556fd1bd00
brk(0x55556fd1c000)                     = 0x55556fd1c000
mprotect(0x7faf2fae9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_NOFOLLOW|FASYNC, 000) = 3
[   72.058169][ T5090] kernel profiling enabled (shift: 0)
[   72.718610][    C1] ==================================================================
[   72.726726][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170
[   72.734059][    C1] Read of size 8 at addr ffffc900033672c0 by task syz-executor385/5090
[   72.742301][    C1] 
[   72.744708][    C1] CPU: 1 PID: 5090 Comm: syz-executor385 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[   72.755130][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   72.765194][    C1] Call Trace:
[   72.768505][    C1]  <IRQ>
[   72.771360][    C1]  dump_stack_lvl+0x241/0x360
[   72.776181][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.782048][    C1]  ? __pfx__printk+0x10/0x10
[   72.786832][    C1]  ? _printk+0xd5/0x120
[   72.791040][    C1]  print_report+0x169/0x550
[   72.795587][    C1]  ? rcu_read_lock_sched_held+0x8d/0x130
[   72.801299][    C1]  ? __virt_addr_valid+0xbd/0x520
[   72.806381][    C1]  ? profile_pc+0xd2/0x170
[   72.810813][    C1]  kasan_report+0x143/0x180
[   72.815331][    C1]  ? profile_pc+0xd2/0x170
[   72.819753][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   72.825845][    C1]  profile_pc+0xd2/0x170
[   72.830222][    C1]  profile_tick+0xd7/0x150
[   72.834679][    C1]  tick_nohz_handler+0x386/0x500
[   72.839633][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[   72.845120][    C1]  __hrtimer_run_queues+0x55b/0xd50
[   72.850466][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   72.856263][    C1]  ? ktime_get_update_offsets_now+0x411/0x430
[   72.862378][    C1]  hrtimer_interrupt+0x396/0x990
[   72.867355][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[   72.873369][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[   72.879031][    C1]  </IRQ>
[   72.881958][    C1]  <TASK>
[   72.884885][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   72.891037][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   72.897573][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 de b8 6f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 b4 da f5 65 8b 05 74 d8 78 74 85 c0 74 43 48 c7 04 24 0e 36
[   72.917287][    C1] RSP: 0018:ffffc900033672c0 EFLAGS: 00000206
[   72.923368][    C1] RAX: b725fd149c303b00 RBX: 1ffff9200066ce5c RCX: ffffffff8172f77a
[   72.931362][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcab8a0 RDI: 0000000000000001
[   72.939375][    C1] RBP: ffffc90003367350 R08: ffffffff92f35507 R09: 1ffffffff25e6aa0
[   72.947508][    C1] R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: dffffc0000000000
[   72.955519][    C1] R13: 1ffff9200066ce58 R14: ffffc900033672e0 R15: 0000000000000246
[   72.963520][    C1]  ? mark_lock+0x9a/0x350
[   72.967888][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.974239][    C1]  ? __mod_zone_page_state+0xda/0x150
[   72.979644][    C1]  __rmqueue_pcplist+0x216d/0x2620
[   72.984867][    C1]  ? __pfx___rmqueue_pcplist+0x10/0x10
[   72.990393][    C1]  get_page_from_freelist+0x856/0x35b0
[   72.995936][    C1]  ? preempt_schedule_notrace_thunk+0x1a/0x30
[   73.002160][    C1]  ? __pfx___might_resched+0x10/0x10
[   73.007478][    C1]  ? __alloc_pages_bulk+0x729/0xd40
[   73.012710][    C1]  ? fs_reclaim_acquire+0x93/0x140
[   73.017948][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[   73.023859][    C1]  ? prepare_alloc_pages+0x1da/0x5d0
[   73.029281][    C1]  __alloc_pages+0x256/0x6c0
[   73.034024][    C1]  ? __pfx___alloc_pages+0x10/0x10
[   73.039229][    C1]  ? policy_nodemask+0x2b0/0x800
[   73.044202][    C1]  alloc_pages_mpol+0x3e8/0x680
[   73.049172][    C1]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   73.054795][    C1]  ? alloc_pages+0xef/0x170
[   73.059364][    C1]  __vmalloc_node_range+0x9a4/0x1490
[   73.064961][    C1]  ? __pfx___vmalloc_node_range+0x10/0x10
[   73.070950][    C1]  ? rcu_is_watching+0x15/0xb0
[   73.075736][    C1]  ? trace_kmalloc+0x1f/0xd0
[   73.080590][    C1]  ? __kmalloc+0x251/0x4a0
[   73.085092][    C1]  ? profile_init+0xee/0x130
[   73.089679][    C1]  ? __pfx_sysfs_kf_write+0x10/0x10
[   73.094897][    C1]  vzalloc+0x79/0x90
[   73.098813][    C1]  ? profile_init+0xee/0x130
[   73.103419][    C1]  profile_init+0xee/0x130
[   73.107839][    C1]  profiling_store+0x5e/0xc0
[   73.112437][    C1]  kernfs_fop_write_iter+0x3a1/0x500
[   73.118537][    C1]  vfs_write+0xa84/0xcb0
[   73.122822][    C1]  ? __pfx_vfs_write+0x10/0x10
[   73.127739][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[   73.132971][    C1]  ? __fdget_pos+0x272/0x320
[   73.137562][    C1]  ksys_write+0x1a0/0x2c0
[   73.141898][    C1]  ? __pfx_ksys_write+0x10/0x10
[   73.146925][    C1]  ? do_syscall_64+0x102/0x240
[   73.151714][    C1]  do_syscall_64+0xf5/0x240
[   73.156242][    C1]  ? clear_bhb_loop+0x35/0x90
[   73.160959][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.167654][    C1] RIP: 0033:0x7faf2fa76529
[   73.172100][    C1] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   73.192250][    C1] RSP: 002b:00007ffffbe75198 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   73.201119][    C1] RAX: ffffffffffffffda RBX: 00007ffffbe75368 RCX: 00007faf2fa76529
[   73.209092][    C1] RDX: 0000000000000015 RSI: 0000000020000280 RDI: 0000000000000003
[   73.217058][    C1] RBP: 00007faf2fae9610 R08: 00007ffffbe74f24 R09: 00007ffffbe75368
[   73.225042][    C1] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[   73.233148][    C1] R13: 00007ffffbe75358 R14: 0000000000000001 R15: 0000000000000001
[   73.241256][    C1]  </TASK>
[   73.244278][    C1] 
[   73.246602][    C1] The buggy address belongs to stack of task syz-executor385/5090
[   73.254480][    C1]  and is located at offset 0 in frame:
[   73.260051][    C1]  _raw_spin_unlock_irqrestore+0x0/0x140
[   73.265701][    C1] 
[   73.268037][    C1] This frame has 1 object:
[   73.272477][    C1]  [32, 40) 'flags.i.i.i.i'
[   73.272488][    C1] 
[   73.279399][    C1] The buggy address belongs to the virtual mapping at
[   73.279399][    C1]  [ffffc90003360000, ffffc90003369000) created by:
[   73.279399][    C1]  copy_process+0x5d1/0x3df0
[   73.297040][    C1] 
[   73.299450][    C1] The buggy address belongs to the physical page:
[   73.305880][    C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f058
[   73.314654][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   73.321763][    C1] page_type: 0xffffffff()
[   73.326087][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   73.334670][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   73.343284][    C1] page dumped because: kasan: bad access detected
[   73.349942][    C1] page_owner tracks the page as allocated
[   73.355793][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5030, tgid 1196351046 (dhcpcd-run-hook), ts 5030, free_ts 61040428557
[   73.375510][    C1]  post_alloc_hook+0x1ea/0x210
[   73.380286][    C1]  get_page_from_freelist+0x3410/0x35b0
[   73.385849][    C1]  __alloc_pages+0x256/0x6c0
[   73.390557][    C1]  alloc_pages_mpol+0x3e8/0x680
[   73.395426][    C1]  __vmalloc_node_range+0x9a4/0x1490
[   73.400731][    C1]  dup_task_struct+0x3e9/0x7d0
[   73.405603][    C1]  copy_process+0x5d1/0x3df0
[   73.410282][    C1]  kernel_clone+0x226/0x8f0
[   73.414876][    C1]  __x64_sys_clone+0x258/0x2a0
[   73.419647][    C1]  do_syscall_64+0xf5/0x240
[   73.424165][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.430060][    C1] page last free pid 5026 tgid 5026 stack trace:
[   73.436751][    C1]  free_unref_page_prepare+0x986/0xab0
[   73.442293][    C1]  free_unref_folios+0x1f2/0xc10
[   73.447510][    C1]  folios_put_refs+0x93a/0xa60
[   73.452396][    C1]  free_pages_and_swap_cache+0x5c8/0x690
[   73.458405][    C1]  tlb_flush_mmu+0x3a3/0x680
[   73.464663][    C1]  tlb_finish_mmu+0xd4/0x200
[   73.469792][    C1]  exit_mmap+0x4bb/0xd60
[   73.474056][    C1]  __mmput+0x115/0x3c0
[   73.478283][    C1]  exit_mm+0x220/0x310
[   73.482661][    C1]  do_exit+0x99e/0x27e0
[   73.486852][    C1]  do_group_exit+0x207/0x2c0
[   73.491463][    C1]  __x64_sys_exit_group+0x3f/0x40
[   73.496600][    C1]  do_syscall_64+0xf5/0x240
[   73.501248][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.507191][    C1] 
[   73.509541][    C1] Memory state around the buggy address:
[   73.515201][    C1]  ffffc90003367180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.523393][    C1]  ffffc90003367200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.531598][    C1] >ffffc90003367280: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3
[   73.539958][    C1]                                            ^
[   73.546131][    C1]  ffffc90003367300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.554640][    C1]  ffffc90003367380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   73.562757][    C1] ==================================================================
[   73.570839][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   73.578152][    C1] CPU: 1 PID: 5090 Comm: syz-executor385 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[   73.589102][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   73.599388][    C1] Call Trace:
[   73.603375][    C1]  <IRQ>
[   73.606570][    C1]  dump_stack_lvl+0x241/0x360
[   73.611315][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.616629][    C1]  ? __pfx__printk+0x10/0x10
[   73.621258][    C1]  ? rcu_is_watching+0x15/0xb0
[   73.626113][    C1]  ? vscnprintf+0x5d/0x90
[   73.630470][    C1]  panic+0x349/0x860
[   73.634369][    C1]  ? __pfx_lock_release+0x10/0x10
[   73.639440][    C1]  ? check_panic_on_warn+0x21/0xb0
[   73.644586][    C1]  ? __pfx_panic+0x10/0x10
[   73.649043][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[   73.654487][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   73.660859][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.667715][    C1]  check_panic_on_warn+0x86/0xb0
[   73.672698][    C1]  ? profile_pc+0xd2/0x170
[   73.677217][    C1]  end_report+0x77/0x160
[   73.681499][    C1]  kasan_report+0x154/0x180
[   73.686411][    C1]  ? profile_pc+0xd2/0x170
[   73.691298][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   73.697707][    C1]  profile_pc+0xd2/0x170
[   73.702809][    C1]  profile_tick+0xd7/0x150
[   73.708050][    C1]  tick_nohz_handler+0x386/0x500
[   73.713098][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[   73.718565][    C1]  __hrtimer_run_queues+0x55b/0xd50
[   73.723826][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   73.729663][    C1]  ? ktime_get_update_offsets_now+0x411/0x430
[   73.736081][    C1]  hrtimer_interrupt+0x396/0x990
[   73.741072][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[   73.747098][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[   73.752784][    C1]  </IRQ>
[   73.755718][    C1]  <TASK>
[   73.758912][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   73.765015][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   73.771551][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 de b8 6f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 b4 da f5 65 8b 05 74 d8 78 74 85 c0 74 43 48 c7 04 24 0e 36
[   73.791531][    C1] RSP: 0018:ffffc900033672c0 EFLAGS: 00000206
[   73.797714][    C1] RAX: b725fd149c303b00 RBX: 1ffff9200066ce5c RCX: ffffffff8172f77a
[   73.805717][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcab8a0 RDI: 0000000000000001
[   73.813706][    C1] RBP: ffffc90003367350 R08: ffffffff92f35507 R09: 1ffffffff25e6aa0
[   73.821682][    C1] R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: dffffc0000000000
[   73.833194][    C1] R13: 1ffff9200066ce58 R14: ffffc900033672e0 R15: 0000000000000246
[   73.841302][    C1]  ? mark_lock+0x9a/0x350
[   73.845680][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.852060][    C1]  ? __mod_zone_page_state+0xda/0x150
[   73.857572][    C1]  __rmqueue_pcplist+0x216d/0x2620
[   73.862728][    C1]  ? __pfx___rmqueue_pcplist+0x10/0x10
[   73.868230][    C1]  get_page_from_freelist+0x856/0x35b0
[   73.873705][    C1]  ? preempt_schedule_notrace_thunk+0x1a/0x30
[   73.879792][    C1]  ? __pfx___might_resched+0x10/0x10
[   73.885121][    C1]  ? __alloc_pages_bulk+0x729/0xd40
[   73.890451][    C1]  ? fs_reclaim_acquire+0x93/0x140
[   73.895648][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[   73.901646][    C1]  ? prepare_alloc_pages+0x1da/0x5d0
[   73.907049][    C1]  __alloc_pages+0x256/0x6c0
[   73.911759][    C1]  ? __pfx___alloc_pages+0x10/0x10
[   73.916966][    C1]  ? policy_nodemask+0x2b0/0x800
[   73.921931][    C1]  alloc_pages_mpol+0x3e8/0x680
[   73.926874][    C1]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   73.932290][    C1]  ? alloc_pages+0xef/0x170
[   73.937460][    C1]  __vmalloc_node_range+0x9a4/0x1490
[   73.943254][    C1]  ? __pfx___vmalloc_node_range+0x10/0x10
[   73.949115][    C1]  ? rcu_is_watching+0x15/0xb0
[   73.953916][    C1]  ? trace_kmalloc+0x1f/0xd0
[   73.958552][    C1]  ? __kmalloc+0x251/0x4a0
[   73.963117][    C1]  ? profile_init+0xee/0x130
[   73.967725][    C1]  ? __pfx_sysfs_kf_write+0x10/0x10
[   73.972944][    C1]  vzalloc+0x79/0x90
[   73.976871][    C1]  ? profile_init+0xee/0x130
[   73.981483][    C1]  profile_init+0xee/0x130
[   73.985936][    C1]  profiling_store+0x5e/0xc0
[   73.990531][    C1]  kernfs_fop_write_iter+0x3a1/0x500
[   73.995837][    C1]  vfs_write+0xa84/0xcb0
[   74.000090][    C1]  ? __pfx_vfs_write+0x10/0x10
[   74.004887][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[   74.010151][    C1]  ? __fdget_pos+0x272/0x320
[   74.014753][    C1]  ksys_write+0x1a0/0x2c0
[   74.019091][    C1]  ? __pfx_ksys_write+0x10/0x10
[   74.024134][    C1]  ? do_syscall_64+0x102/0x240
[   74.028905][    C1]  do_syscall_64+0xf5/0x240
[   74.033479][    C1]  ? clear_bhb_loop+0x35/0x90
[   74.038246][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.044170][    C1] RIP: 0033:0x7faf2fa76529
[   74.048979][    C1] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   74.069240][    C1] RSP: 002b:00007ffffbe75198 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   74.077855][    C1] RAX: ffffffffffffffda RBX: 00007ffffbe75368 RCX: 00007faf2fa76529
[   74.085947][    C1] RDX: 0000000000000015 RSI: 0000000020000280 RDI: 0000000000000003
[   74.093925][    C1] RBP: 00007faf2fae9610 R08: 00007ffffbe74f24 R09: 00007ffffbe75368
[   74.102022][    C1] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[   74.110229][    C1] R13: 00007ffffbe75358 R14: 0000000000000001 R15: 0000000000000001
[   74.119021][    C1]  </TASK>
[   74.122360][    C1] Kernel Offset: disabled
[   74.126692][    C1] Rebooting in 86400 seconds..