./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2079825145
<...>
Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts.
execve("./syz-executor2079825145", ["./syz-executor2079825145"], 0x7ffdd9d9f3a0 /* 10 vars */) = 0
brk(NULL) = 0x555556758000
brk(0x555556758c40) = 0x555556758c40
arch_prctl(ARCH_SET_FS, 0x555556758300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2079825145", 4096) = 28
brk(0x555556779c40) = 0x555556779c40
brk(0x55555677a000) = 0x55555677a000
mprotect(0x7f08e00b0000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3603 attached
, child_tidptr=0x5555567585d0) = 3603
[pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3603] setpgid(0, 0) = 0
[pid 3603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3603] write(3, "1000", 4) = 4
[pid 3603] close(3) = 0
[pid 3603] openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_APPEND|O_CLOEXEC, 000) = 3
[ 49.426990][ T3603] kernel profiling enabled (shift: 4)
[ 49.465778][ C1] ==================================================================
[ 49.473893][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[ 49.481037][ C1] Read of size 8 at addr ffffc9000307fc40 by task strace-static-x/3599
[ 49.489289][ C1]
[ 49.491620][ C1] CPU: 1 PID: 3599 Comm: strace-static-x Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0
[ 49.501792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.511862][ C1] Call Trace:
[ 49.515150][ C1]
[ 49.518004][ C1] dump_stack_lvl+0x1e3/0x2cb
[ 49.522718][ C1] ? io_notif_register+0x5e7/0x5e7
[ 49.527842][ C1] ? _printk+0xcf/0x10f
[ 49.532009][ C1] ? __wake_up_klogd+0xd6/0x100
[ 49.536878][ C1] ? __wake_up_klogd+0xcd/0x100
[ 49.541748][ C1] ? panic+0x76e/0x76e
[ 49.545837][ C1] ? _printk+0xcf/0x10f
[ 49.550005][ C1] print_address_description+0x65/0x4b0
[ 49.555545][ C1] print_report+0xf4/0x210
[ 49.559954][ C1] ? __raise_softirq_irqoff+0xb0/0xb0
[ 49.565336][ C1] ? rcu_read_lock_sched_held+0x89/0x130
[ 49.570973][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 49.576944][ C1] ? run_posix_cpu_timers+0x472/0x800
[ 49.582310][ C1] ? profile_pc+0xa4/0xe0
[ 49.586629][ C1] kasan_report+0xfb/0x130
[ 49.591038][ C1] ? profile_pc+0xa4/0xe0
[ 49.595360][ C1] ? trigger_load_balance+0x192/0xbd0
[ 49.600810][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 49.606698][ C1] profile_pc+0xa4/0xe0
[ 49.610851][ C1] profile_tick+0xc8/0x110
[ 49.615267][ C1] tick_sched_timer+0x381/0x540
[ 49.620123][ C1] __hrtimer_run_queues+0x4cb/0xa60
[ 49.625335][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0
[ 49.630960][ C1] ? hrtimer_interrupt+0xfd0/0xfd0
[ 49.636059][ C1] ? ktime_get_update_offsets_now+0x449/0x460
[ 49.642129][ C1] hrtimer_interrupt+0x3a6/0xfd0
[ 49.647082][ C1] ? irq_exit_rcu+0x20/0x20
[ 49.651579][ C1] __sysvec_apic_timer_interrupt+0xf9/0x280
[ 49.657487][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0
[ 49.663119][ C1]
[ 49.666042][ C1]
[ 49.668977][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 49.674952][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 49.681446][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 12 c7 a5 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 07 26 27 f7 65 8b 05 88 49 cd 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 49.701057][ C1] RSP: 0018:ffffc9000307fc40 EFLAGS: 00000206
[ 49.707118][ C1] RAX: 76a0c0d77766fe00 RBX: 1ffff9200060ff8c RCX: ffffffff91549f03
[ 49.715081][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8d2fe0 RDI: 0000000000000001
[ 49.723049][ C1] RBP: ffffc9000307fcd0 R08: dffffc0000000000 R09: ffffed100303c4e4
[ 49.731011][ C1] R10: ffffed100303c4e4 R11: 1ffff1100303c4e3 R12: dffffc0000000000
[ 49.738977][ C1] R13: 1ffff9200060ff88 R14: ffffc9000307fc60 R15: 0000000000000246
[ 49.746965][ C1] ? _raw_spin_unlock+0x40/0x40
[ 49.751811][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 49.757008][ C1] wait_task_inactive+0x32f/0x5a0
[ 49.762052][ C1] ? migrate_swap_stop+0x850/0x850
[ 49.767170][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 49.772365][ C1] ptrace_check_attach+0x179/0x360
[ 49.777478][ C1] __se_sys_ptrace+0x1d1/0x600
[ 49.782240][ C1] ? __ct_user_exit+0x81/0xe0
[ 49.786912][ C1] ? __x64_sys_ptrace+0xa0/0xa0
[ 49.791765][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 49.797790][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 49.803781][ C1] do_syscall_64+0x2b/0x70
[ 49.808214][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.814104][ C1] RIP: 0033:0x4e6c1a
[ 49.818010][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 4c
[ 49.837609][ C1] RSP: 002b:00007ffdd9d9ef20 EFLAGS: 00000206 ORIG_RAX: 0000000000000065
[ 49.846013][ C1] RAX: ffffffffffffffda RBX: 0000000000e4ca50 RCX: 00000000004e6c1a
[ 49.854007][ C1] RDX: 0000000000000058 RSI: 0000000000000e12 RDI: 000000000000420e
[ 49.862035][ C1] RBP: 00007ffdd9d9f020 R08: 000000000000420d R09: 0000000000000000
[ 49.870004][ C1] R10: 000000000063c820 R11: 0000000000000206 R12: 0000000000e4ca50
[ 49.877966][ C1] R13: 00007ffdd9d9f07c R14: 000000000000857f R15: 0000000000617180
[ 49.886137][ C1]
[ 49.889156][ C1]
[ 49.891474][ C1] The buggy address belongs to stack of task strace-static-x/3599
[ 49.899262][ C1] and is located at offset 0 in frame:
[ 49.904793][ C1] _raw_spin_unlock_irqrestore+0x0/0x130
[ 49.910439][ C1]
[ 49.912751][ C1] This frame has 1 object:
[ 49.917148][ C1] [32, 40) 'flags.i.i.i.i'
[ 49.917156][ C1]
[ 49.923965][ C1] The buggy address belongs to the virtual mapping at
[ 49.923965][ C1] [ffffc90003078000, ffffc90003081000) created by:
[ 49.923965][ C1] dup_task_struct+0x8b/0x490
[ 49.941669][ C1]
[ 49.943996][ C1] The buggy address belongs to the physical page:
[ 49.950390][ C1] page:ffffea00008771c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21dc7
[ 49.960528][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 49.967624][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 49.976210][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 49.984789][ C1] page dumped because: kasan: bad access detected
[ 49.991188][ C1] page_owner tracks the page as allocated
[ 49.996896][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3181, tgid 3181 (dhcpcd), ts 40983850505, free_ts 40981985923
[ 50.015555][ C1] get_page_from_freelist+0x72b/0x7a0
[ 50.020922][ C1] __alloc_pages+0x259/0x560
[ 50.025519][ C1] __vmalloc_node_range+0x904/0x12e0
[ 50.030792][ C1] alloc_thread_stack_node+0x307/0x500
[ 50.036253][ C1] dup_task_struct+0x8b/0x490
[ 50.040918][ C1] copy_process+0x641/0x3fe0
[ 50.045510][ C1] kernel_clone+0x22f/0x7a0
[ 50.050002][ C1] __x64_sys_clone+0x276/0x2e0
[ 50.054772][ C1] do_syscall_64+0x2b/0x70
[ 50.059181][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.065086][ C1] page last free stack trace:
[ 50.069764][ C1] free_pcp_prepare+0x812/0x900
[ 50.074622][ C1] free_unref_page+0x7d/0x390
[ 50.079286][ C1] __unfreeze_partials+0x1ab/0x200
[ 50.084388][ C1] put_cpu_partial+0x116/0x180
[ 50.089139][ C1] qlist_free_all+0x2b/0x70
[ 50.093640][ C1] kasan_quarantine_reduce+0x169/0x180
[ 50.099103][ C1] __kasan_slab_alloc+0x2f/0xe0
[ 50.104039][ C1] __kmalloc+0x1bd/0x370
[ 50.108272][ C1] tomoyo_supervisor+0xd26/0x1310
[ 50.113302][ C1] tomoyo_check_unix_address+0x549/0x820
[ 50.118926][ C1] tomoyo_socket_connect_permission+0x23c/0x370
[ 50.125177][ C1] security_socket_connect+0x56/0xb0
[ 50.130449][ C1] __sys_connect+0x1d6/0x2d0
[ 50.135065][ C1] __x64_sys_connect+0x76/0x80
[ 50.139833][ C1] do_syscall_64+0x2b/0x70
[ 50.144243][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.150129][ C1]
[ 50.152437][ C1] Memory state around the buggy address:
[ 50.158053][ C1] ffffc9000307fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 50.166103][ C1] ffffc9000307fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 50.174155][ C1] >ffffc9000307fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3
[ 50.182203][ C1] ^
[ 50.188353][ C1] ffffc9000307fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 50.196493][ C1] ffffc9000307fd00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[ 50.204543][ C1] ==================================================================
[ 50.212592][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 50.219164][ C1] CPU: 1 PID: 3599 Comm: strace-static-x Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0
[ 50.229316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.239362][ C1] Call Trace:
[ 50.242648][ C1]
[ 50.245487][ C1] dump_stack_lvl+0x1e3/0x2cb
[ 50.250159][ C1] ? io_notif_register+0x5e7/0x5e7
[ 50.255267][ C1] ? panic+0x76e/0x76e
[ 50.259330][ C1] ? vscnprintf+0x59/0x80
[ 50.263648][ C1] panic+0x312/0x76e
[ 50.267532][ C1] ? fb_is_primary_device+0xcc/0xcc
[ 50.272737][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 50.278625][ C1] ? profile_pc+0xa4/0xe0
[ 50.282946][ C1] end_report+0x91/0xa0
[ 50.287093][ C1] kasan_report+0x108/0x130
[ 50.291677][ C1] ? profile_pc+0xa4/0xe0
[ 50.296187][ C1] ? trigger_load_balance+0x192/0xbd0
[ 50.301582][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 50.307466][ C1] profile_pc+0xa4/0xe0
[ 50.311630][ C1] profile_tick+0xc8/0x110
[ 50.316038][ C1] tick_sched_timer+0x381/0x540
[ 50.320889][ C1] __hrtimer_run_queues+0x4cb/0xa60
[ 50.326081][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0
[ 50.331621][ C1] ? hrtimer_interrupt+0xfd0/0xfd0
[ 50.336728][ C1] ? ktime_get_update_offsets_now+0x449/0x460
[ 50.342795][ C1] hrtimer_interrupt+0x3a6/0xfd0
[ 50.347750][ C1] ? irq_exit_rcu+0x20/0x20
[ 50.352259][ C1] __sysvec_apic_timer_interrupt+0xf9/0x280
[ 50.358144][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0
[ 50.363793][ C1]
[ 50.366732][ C1]
[ 50.369655][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 50.375643][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 50.382143][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 12 c7 a5 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 07 26 27 f7 65 8b 05 88 49 cd 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 50.401742][ C1] RSP: 0018:ffffc9000307fc40 EFLAGS: 00000206
[ 50.407795][ C1] RAX: 76a0c0d77766fe00 RBX: 1ffff9200060ff8c RCX: ffffffff91549f03
[ 50.415760][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8d2fe0 RDI: 0000000000000001
[ 50.423748][ C1] RBP: ffffc9000307fcd0 R08: dffffc0000000000 R09: ffffed100303c4e4
[ 50.431708][ C1] R10: ffffed100303c4e4 R11: 1ffff1100303c4e3 R12: dffffc0000000000
[ 50.439667][ C1] R13: 1ffff9200060ff88 R14: ffffc9000307fc60 R15: 0000000000000246
[ 50.447637][ C1] ? _raw_spin_unlock+0x40/0x40
[ 50.452499][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 50.457688][ C1] wait_task_inactive+0x32f/0x5a0
[ 50.462709][ C1] ? migrate_swap_stop+0x850/0x850
[ 50.467812][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 50.473009][ C1] ptrace_check_attach+0x179/0x360
[ 50.478115][ C1] __se_sys_ptrace+0x1d1/0x600
[ 50.482866][ C1] ? __ct_user_exit+0x81/0xe0
[ 50.487533][ C1] ? __x64_sys_ptrace+0xa0/0xa0
[ 50.492381][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 50.498373][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 50.504345][ C1] do_syscall_64+0x2b/0x70
[ 50.508754][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.514639][ C1] RIP: 0033:0x4e6c1a
[ 50.518528][ C1] Code: 70 41 83 f8 03 c7 44 24 10 08 00 00 00 48 89 44 24 18 48 8d 44 24 30 8b 70 08 4c 0f 43 d1 48 89 44 24 20 b8 65 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3e 48 85 c0 78 06 41 83 f8 02 76 1b 48 8b 4c
[ 50.538129][ C1] RSP: 002b:00007ffdd9d9ef20 EFLAGS: 00000206 ORIG_RAX: 0000000000000065
[ 50.546600][ C1] RAX: ffffffffffffffda RBX: 0000000000e4ca50 RCX: 00000000004e6c1a
[ 50.554571][ C1] RDX: 0000000000000058 RSI: 0000000000000e12 RDI: 000000000000420e
[ 50.562533][ C1] RBP: 00007ffdd9d9f020 R08: 000000000000420d R09: 0000000000000000
[ 50.570502][ C1] R10: 000000000063c820 R11: 0000000000000206 R12: 0000000000e4ca50
[ 50.578495][ C1] R13: 00007ffdd9d9f07c R14: 000000000000857f R15: 0000000000617180
[ 50.586463][ C1]
[ 50.589661][ C1] Kernel Offset: disabled
[ 50.593989][ C1] Rebooting in 86400 seconds..