Warning: Permanently added '10.128.1.159' (ECDSA) to the list of known hosts. executing program [ 52.565212][ T3498] kernel profiling enabled (shift: 0) [ 53.964632][ C1] ================================================================== [ 53.972988][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 53.980232][ C1] Read of size 8 at addr ffffc90000dffac0 by task kworker/1:1/25 [ 53.987940][ C1] [ 53.990270][ C1] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.15.111-syzkaller #0 [ 53.998441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 54.008492][ C1] Workqueue: krxrpcd rxrpc_local_processor [ 54.014306][ C1] Call Trace: [ 54.017588][ C1] [ 54.020421][ C1] dump_stack_lvl+0x1e3/0x2cb [ 54.025093][ C1] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 54.030715][ C1] ? _printk+0xd1/0x111 [ 54.034867][ C1] ? __wake_up_klogd+0xcc/0x100 [ 54.039713][ C1] ? panic+0x84d/0x84d [ 54.043770][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 54.049230][ C1] print_address_description+0x63/0x3b0 [ 54.054805][ C1] ? profile_pc+0xa4/0xe0 [ 54.059136][ C1] kasan_report+0x16b/0x1c0 [ 54.063641][ C1] ? profile_pc+0xa4/0xe0 [ 54.067955][ C1] ? trigger_load_balance+0x1d5/0xd90 [ 54.073320][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 54.079412][ C1] profile_pc+0xa4/0xe0 [ 54.083571][ C1] profile_tick+0xd4/0x130 [ 54.087977][ C1] tick_sched_timer+0x237/0x3c0 [ 54.092818][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 54.098360][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 54.103566][ C1] ? hrtimer_interrupt+0x980/0x980 [ 54.108698][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 54.114935][ C1] hrtimer_interrupt+0x392/0x980 [ 54.119889][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 54.125864][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 54.131494][ C1] [ 54.134413][ C1] [ 54.137334][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 54.143306][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 54.149801][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 42 8e a5 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f7 62 33 f7 65 8b 05 f8 be de 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 54.169394][ C1] RSP: 0018:ffffc90000dffac0 EFLAGS: 00000206 [ 54.175453][ C1] RAX: d88e9f8b00fc1e00 RBX: 1ffff920001bff5c RCX: ffffffff8162c608 [ 54.183426][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8afb60 RDI: 0000000000000001 [ 54.191398][ C1] RBP: ffffc90000dffb48 R08: dffffc0000000000 R09: fffffbfff1f78e3b [ 54.199468][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.207437][ C1] R13: 1ffff920001bff58 R14: ffffc90000dffae0 R15: 0000000000000246 [ 54.215416][ C1] ? mark_lock+0x98/0x340 [ 54.219761][ C1] ? _raw_spin_unlock+0x40/0x40 [ 54.224622][ C1] skb_dequeue+0x10f/0x140 [ 54.229058][ C1] ? rxrpc_local_processor+0x4f8/0x5d0 [ 54.234540][ C1] rxrpc_purge_queue+0x2c/0x170 [ 54.239410][ C1] ? rxrpc_local_processor+0x4f8/0x5d0 [ 54.244870][ C1] rxrpc_local_processor+0x4f8/0x5d0 [ 54.250153][ C1] process_one_work+0x8a1/0x10c0 [ 54.255099][ C1] ? worker_detach_from_pool+0x260/0x260 [ 54.260731][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 54.266274][ C1] ? kthread_data+0x4e/0xc0 [ 54.270775][ C1] ? wq_worker_running+0x97/0x170 [ 54.275790][ C1] worker_thread+0xaca/0x1280 [ 54.280462][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.286364][ C1] kthread+0x3f6/0x4f0 [ 54.290421][ C1] ? rcu_lock_release+0x20/0x20 [ 54.295268][ C1] ? kthread_blkcg+0xd0/0xd0 [ 54.299844][ C1] ret_from_fork+0x1f/0x30 [ 54.304268][ C1] [ 54.307273][ C1] [ 54.309587][ C1] [ 54.311901][ C1] addr ffffc90000dffac0 is located in stack of task kworker/1:1/25 at offset 0 in frame: [ 54.321782][ C1] _raw_spin_unlock_irqrestore+0x0/0x130 [ 54.327424][ C1] [ 54.329737][ C1] this frame has 1 object: [ 54.334142][ C1] [32, 40) 'flags.i.i.i.i' [ 54.334154][ C1] [ 54.341024][ C1] Memory state around the buggy address: [ 54.346645][ C1] ffffc90000dff980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.354696][ C1] ffffc90000dffa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.362745][ C1] >ffffc90000dffa80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 54.370788][ C1] ^ [ 54.376923][ C1] ffffc90000dffb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.384977][ C1] ffffc90000dffb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.393116][ C1] ================================================================== [ 54.401179][ C1] Disabling lock debugging due to kernel taint [ 54.407310][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 54.414579][ C1] CPU: 1 PID: 25 Comm: kworker/1:1 Tainted: G B 5.15.111-syzkaller #0 [ 54.424024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 54.434063][ C1] Workqueue: krxrpcd rxrpc_local_processor [ 54.439864][ C1] Call Trace: [ 54.443132][ C1] [ 54.445963][ C1] dump_stack_lvl+0x1e3/0x2cb [ 54.450641][ C1] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 54.456257][ C1] ? panic+0x84d/0x84d [ 54.460312][ C1] ? lock_release+0xb9/0x9a0 [ 54.464905][ C1] ? irq_work_queue+0xcd/0x150 [ 54.469659][ C1] panic+0x318/0x84d [ 54.473542][ C1] ? check_panic_on_warn+0x1d/0xa0 [ 54.478640][ C1] ? fb_is_primary_device+0xcc/0xcc [ 54.483842][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.489721][ C1] ? _raw_spin_unlock+0x40/0x40 [ 54.494564][ C1] ? print_memory_metadata+0xe2/0x140 [ 54.499931][ C1] check_panic_on_warn+0x7e/0xa0 [ 54.504861][ C1] ? profile_pc+0xa4/0xe0 [ 54.509174][ C1] end_report+0x6d/0xf0 [ 54.513335][ C1] kasan_report+0x18e/0x1c0 [ 54.517833][ C1] ? profile_pc+0xa4/0xe0 [ 54.522148][ C1] ? trigger_load_balance+0x1d5/0xd90 [ 54.527506][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 54.533382][ C1] profile_pc+0xa4/0xe0 [ 54.537532][ C1] profile_tick+0xd4/0x130 [ 54.541928][ C1] tick_sched_timer+0x237/0x3c0 [ 54.546764][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 54.552312][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 54.557535][ C1] ? hrtimer_interrupt+0x980/0x980 [ 54.562632][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 54.568691][ C1] hrtimer_interrupt+0x392/0x980 [ 54.573635][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 54.579603][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 54.585228][ C1] [ 54.588141][ C1] [ 54.591056][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 54.597020][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 54.603519][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 42 8e a5 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f7 62 33 f7 65 8b 05 f8 be de 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 54.623194][ C1] RSP: 0018:ffffc90000dffac0 EFLAGS: 00000206 [ 54.629244][ C1] RAX: d88e9f8b00fc1e00 RBX: 1ffff920001bff5c RCX: ffffffff8162c608 [ 54.637203][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8afb60 RDI: 0000000000000001 [ 54.645159][ C1] RBP: ffffc90000dffb48 R08: dffffc0000000000 R09: fffffbfff1f78e3b [ 54.653123][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.661079][ C1] R13: 1ffff920001bff58 R14: ffffc90000dffae0 R15: 0000000000000246 [ 54.669039][ C1] ? mark_lock+0x98/0x340 [ 54.673360][ C1] ? _raw_spin_unlock+0x40/0x40 [ 54.678216][ C1] skb_dequeue+0x10f/0x140 [ 54.682976][ C1] ? rxrpc_local_processor+0x4f8/0x5d0 [ 54.688419][ C1] rxrpc_purge_queue+0x2c/0x170 [ 54.693257][ C1] ? rxrpc_local_processor+0x4f8/0x5d0 [ 54.698698][ C1] rxrpc_local_processor+0x4f8/0x5d0 [ 54.703977][ C1] process_one_work+0x8a1/0x10c0 [ 54.708906][ C1] ? worker_detach_from_pool+0x260/0x260 [ 54.714530][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 54.720087][ C1] ? kthread_data+0x4e/0xc0 [ 54.724578][ C1] ? wq_worker_running+0x97/0x170 [ 54.729598][ C1] worker_thread+0xaca/0x1280 [ 54.734256][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.740140][ C1] kthread+0x3f6/0x4f0 [ 54.744194][ C1] ? rcu_lock_release+0x20/0x20 [ 54.749035][ C1] ? kthread_blkcg+0xd0/0xd0 [ 54.753619][ C1] ret_from_fork+0x1f/0x30 [ 54.758030][ C1] [ 54.761301][ C1] Kernel Offset: disabled [ 54.765619][ C1] Rebooting in 86400 seconds..