./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2018426475

<...>
Warning: Permanently added '10.128.1.23' (ECDSA) to the list of known hosts.
execve("./syz-executor2018426475", ["./syz-executor2018426475"], 0x7fff5225f6e0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555563a000
brk(0x55555563ac40)                     = 0x55555563ac40
arch_prctl(ARCH_SET_FS, 0x55555563a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2018426475", 4096) = 28
brk(0x55555565bc40)                     = 0x55555565bc40
brk(0x55555565c000)                     = 0x55555565c000
mprotect(0x7f3c12327000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_LARGEFILE|O_CLOEXEC, 000) = 3
syzkaller login: [   46.969186][ T3614] kernel profiling enabled (shift: 0)
[   47.121741][    C0] ==================================================================
[   47.129822][    C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[   47.136919][    C0] Read of size 8 at addr ffffc9000377ef20 by task syz-executor201/3614
[   47.145125][    C0] 
[   47.147425][    C0] CPU: 0 PID: 3614 Comm: syz-executor201 Not tainted 6.0.0-rc7-syzkaller-00220-gffb4d94b4314 #0
[   47.157805][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[   47.167834][    C0] Call Trace:
[   47.171089][    C0]  <IRQ>
[   47.173911][    C0]  dump_stack_lvl+0x1e3/0x2cb
[   47.178579][    C0]  ? io_alloc_page_table+0x110/0x110
[   47.183844][    C0]  ? _printk+0xcf/0x10f
[   47.187980][    C0]  ? __wake_up_klogd+0xd6/0x100
[   47.192809][    C0]  ? __wake_up_klogd+0xcd/0x100
[   47.197665][    C0]  ? panic+0x76b/0x76b
[   47.201721][    C0]  ? _printk+0xcf/0x10f
[   47.205866][    C0]  print_address_description+0x65/0x4b0
[   47.211398][    C0]  print_report+0x108/0x220
[   47.215890][    C0]  ? rcu_read_lock_sched_held+0x89/0x130
[   47.221515][    C0]  ? smp_call_function_single+0x760/0x760
[   47.227218][    C0]  ? run_posix_cpu_timers+0x472/0x800
[   47.232570][    C0]  ? profile_pc+0xa4/0xe0
[   47.236876][    C0]  kasan_report+0xfb/0x130
[   47.241267][    C0]  ? profile_pc+0xa4/0xe0
[   47.245574][    C0]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   47.251444][    C0]  profile_pc+0xa4/0xe0
[   47.255576][    C0]  profile_tick+0xcd/0x120
[   47.260837][    C0]  tick_sched_timer+0x381/0x540
[   47.265664][    C0]  __hrtimer_run_queues+0x4cb/0xa60
[   47.270842][    C0]  ? tick_setup_sched_timer+0x2c0/0x2c0
[   47.276375][    C0]  ? hrtimer_interrupt+0xfd0/0xfd0
[   47.281473][    C0]  ? ktime_get_update_offsets_now+0x449/0x460
[   47.287524][    C0]  hrtimer_interrupt+0x3a6/0xfd0
[   47.292455][    C0]  ? irq_exit_rcu+0x20/0x20
[   47.296943][    C0]  __sysvec_apic_timer_interrupt+0xf9/0x280
[   47.302819][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   47.308438][    C0]  </IRQ>
[   47.311350][    C0]  <TASK>
[   47.314273][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   47.320248][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   47.326923][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 42 96 9a f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 07 be 1a f7 65 8b 05 a8 b9 bf 75 85 c0 74 3f 48 c7 04 24 0e 36
[   47.346526][    C0] RSP: 0018:ffffc9000377ef20 EFLAGS: 00000206
[   47.352583][    C0] RAX: bd0877f2c2922600 RBX: 1ffff920006efde8 RCX: ffffffff8169b33a
[   47.360532][    C0] RDX: dffffc0000000000 RSI: ffffffff8aad7740 RDI: 0000000000000001
[   47.368484][    C0] RBP: ffffc9000377efb0 R08: dffffc0000000000 R09: fffffbfff1ff4622
[   47.376440][    C0] R10: fffffbfff1ff4622 R11: 1ffffffff1ff4621 R12: dffffc0000000000
[   47.384399][    C0] R13: 1ffff920006efde4 R14: ffffc9000377ef40 R15: 0000000000000246
[   47.392440][    C0]  ? mark_lock+0x9a/0x350
[   47.396755][    C0]  ? _raw_spin_unlock+0x40/0x40
[   47.401584][    C0]  ? stack_trace_save+0x1f0/0x1f0
[   47.406586][    C0]  rmqueue_pcplist+0x1ee/0x500
[   47.411328][    C0]  ? reserve_highatomic_pageblock+0x2f0/0x2f0
[   47.417370][    C0]  ? mark_lock+0x9a/0x350
[   47.421681][    C0]  rmqueue+0x1c11/0x1f60
[   47.425899][    C0]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   47.431859][    C0]  ? clear_sched_clock_stable+0x60/0x60
[   47.437380][    C0]  ? check_new_pages+0x360/0x360
[   47.442292][    C0]  ? zone_watermark_fast+0xc3/0x230
[   47.447473][    C0]  get_page_from_freelist+0x497/0x7a0
[   47.452826][    C0]  __alloc_pages+0x259/0x560
[   47.457390][    C0]  ? zone_statistics+0x160/0x160
[   47.462302][    C0]  ? alloc_pages_bulk_array_mempolicy+0x79e/0x9b0
[   47.468698][    C0]  __vmalloc_node_range+0x8f4/0x1290
[   47.473963][    C0]  ? profile_init+0xea/0x130
[   47.478527][    C0]  ? sysfs_kf_read+0x390/0x390
[   47.483268][    C0]  vzalloc+0x75/0x80
[   47.487137][    C0]  ? profile_init+0xea/0x130
[   47.491712][    C0]  profile_init+0xea/0x130
[   47.496105][    C0]  profiling_store+0x59/0xc0
[   47.500673][    C0]  kernfs_fop_write_iter+0x3ac/0x500
[   47.505937][    C0]  do_iter_write+0x6f0/0xc50
[   47.510508][    C0]  ? vfs_iter_write+0xa0/0xa0
[   47.515162][    C0]  ? vfs_iter_write+0x69/0xa0
[   47.519821][    C0]  iter_file_splice_write+0x830/0xff0
[   47.525177][    C0]  ? splice_from_pipe+0x220/0x220
[   47.530263][    C0]  ? splice_shrink_spd+0xb0/0xb0
[   47.535182][    C0]  ? splice_from_pipe+0x220/0x220
[   47.540183][    C0]  direct_splice_actor+0xe6/0x1c0
[   47.545191][    C0]  splice_direct_to_actor+0x4e4/0xc00
[   47.550546][    C0]  ? do_splice_direct+0x3f0/0x3f0
[   47.555559][    C0]  ? pipe_to_sendpage+0x340/0x340
[   47.560664][    C0]  ? bpf_lsm_file_permission+0x5/0x10
[   47.566011][    C0]  ? security_file_permission+0xe0/0x5c0
[   47.571624][    C0]  do_splice_direct+0x2a0/0x3f0
[   47.576475][    C0]  ? splice_direct_to_actor+0xc00/0xc00
[   47.582015][    C0]  ? rcu_read_lock_any_held+0xb3/0x150
[   47.587461][    C0]  vfs_copy_file_range+0x9f5/0x1380
[   47.592643][    C0]  ? generic_copy_file_range+0x150/0x150
[   47.598258][    C0]  ? __might_fault+0xb2/0x110
[   47.602922][    C0]  __se_sys_copy_file_range+0x34c/0x5e0
[   47.608450][    C0]  ? __x64_sys_copy_file_range+0xf0/0xf0
[   47.614084][    C0]  ? __ct_user_exit+0x81/0xe0
[   47.618764][    C0]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   47.624729][    C0]  ? __x64_sys_copy_file_range+0x1d/0xf0
[   47.630343][    C0]  do_syscall_64+0x2b/0x70
[   47.634746][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   47.640639][    C0] RIP: 0033:0x7f3c122bab29
[   47.645039][    C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   47.664629][    C0] RSP: 002b:00007ffe112dcef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[   47.673027][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c122bab29
[   47.680979][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[   47.688925][    C0] RBP: 00007f3c1227ecd0 R08: 0000000000000008 R09: 0000000000000000
[   47.696882][    C0] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f3c1227ed60
[   47.704835][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   47.712804][    C0]  </TASK>
[   47.715806][    C0] 
[   47.718108][    C0] The buggy address belongs to stack of task syz-executor201/3614
[   47.725880][    C0]  and is located at offset 0 in frame:
[   47.731403][    C0]  _raw_spin_unlock_irqrestore+0x0/0x130
[   47.737021][    C0] 
[   47.739323][    C0] This frame has 1 object:
[   47.743721][    C0]  [32, 40) 'flags.i.i.i.i'
[   47.743729][    C0] 
[   47.750500][    C0] The buggy address belongs to the virtual mapping at
[   47.750500][    C0]  [ffffc90003778000, ffffc90003781000) created by:
[   47.750500][    C0]  dup_task_struct+0x8b/0x490
[   47.768192][    C0] 
[   47.770496][    C0] The buggy address belongs to the physical page:
[   47.776879][    C0] page:ffffea0001d68380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75a0e
[   47.787012][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   47.794103][    C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   47.802663][    C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   47.811228][    C0] page dumped because: kasan: bad access detected
[   47.817624][    C0] page_owner tracks the page as allocated
[   47.823317][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3611, tgid 3611 (strace-static-x), ts 46943162358, free_ts 46940076066
[   47.842839][    C0]  get_page_from_freelist+0x72b/0x7a0
[   47.848198][    C0]  __alloc_pages+0x259/0x560
[   47.852762][    C0]  __vmalloc_node_range+0x8f4/0x1290
[   47.858024][    C0]  alloc_thread_stack_node+0x307/0x500
[   47.863457][    C0]  dup_task_struct+0x8b/0x490
[   47.868108][    C0]  copy_process+0x637/0x3f60
[   47.872676][    C0]  kernel_clone+0x22f/0x7a0
[   47.877154][    C0]  __x64_sys_clone+0x276/0x2e0
[   47.881895][    C0]  do_syscall_64+0x2b/0x70
[   47.886287][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   47.892156][    C0] page last free stack trace:
[   47.896804][    C0]  free_pcp_prepare+0x812/0x900
[   47.901633][    C0]  free_unref_page_list+0xb4/0x7b0
[   47.906722][    C0]  release_pages+0x22c3/0x2540
[   47.911463][    C0]  tlb_flush_mmu+0x850/0xa70
[   47.916029][    C0]  tlb_finish_mmu+0xcb/0x200
[   47.920592][    C0]  exit_mmap+0x1dc/0x530
[   47.924809][    C0]  __mmput+0x111/0x3a0
[   47.928855][    C0]  exec_mmap+0x589/0x610
[   47.933072][    C0]  begin_new_exec+0x762/0xf80
[   47.937725][    C0]  load_elf_binary+0x926/0x27d0
[   47.942630][    C0]  bprm_execve+0x8dc/0x1590
[   47.947234][    C0]  do_execveat_common+0x59b/0x750
[   47.952264][    C0]  __x64_sys_execve+0x8e/0xa0
[   47.956918][    C0]  do_syscall_64+0x2b/0x70
[   47.961311][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   47.967187][    C0] 
[   47.969488][    C0] Memory state around the buggy address:
[   47.975096][    C0]  ffffc9000377ee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   47.983136][    C0]  ffffc9000377ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   47.991171][    C0] >ffffc9000377ef00: 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00
[   47.999217][    C0]                                ^
[   48.004307][    C0]  ffffc9000377ef80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[   48.012342][    C0]  ffffc9000377f000: 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 00 00 00 00
[   48.020380][    C0] ==================================================================
[   48.028419][    C0] Kernel panic - not syncing: panic_on_warn set ...
[   48.034986][    C0] CPU: 0 PID: 3614 Comm: syz-executor201 Not tainted 6.0.0-rc7-syzkaller-00220-gffb4d94b4314 #0
[   48.045372][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[   48.055409][    C0] Call Trace:
[   48.058671][    C0]  <IRQ>
[   48.061497][    C0]  dump_stack_lvl+0x1e3/0x2cb
[   48.066154][    C0]  ? io_alloc_page_table+0x110/0x110
[   48.071435][    C0]  ? panic+0x76b/0x76b
[   48.075507][    C0]  ? vscnprintf+0x59/0x80
[   48.079824][    C0]  panic+0x316/0x76b
[   48.083765][    C0]  ? fb_is_primary_device+0xcc/0xcc
[   48.088943][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   48.094822][    C0]  ? profile_pc+0xa4/0xe0
[   48.099157][    C0]  end_report+0x91/0xa0
[   48.103297][    C0]  kasan_report+0x108/0x130
[   48.107781][    C0]  ? profile_pc+0xa4/0xe0
[   48.112095][    C0]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   48.118035][    C0]  profile_pc+0xa4/0xe0
[   48.122188][    C0]  profile_tick+0xcd/0x120
[   48.126598][    C0]  tick_sched_timer+0x381/0x540
[   48.131436][    C0]  __hrtimer_run_queues+0x4cb/0xa60
[   48.136630][    C0]  ? tick_setup_sched_timer+0x2c0/0x2c0
[   48.142159][    C0]  ? hrtimer_interrupt+0xfd0/0xfd0
[   48.147250][    C0]  ? ktime_get_update_offsets_now+0x449/0x460
[   48.153308][    C0]  hrtimer_interrupt+0x3a6/0xfd0
[   48.158233][    C0]  ? irq_exit_rcu+0x20/0x20
[   48.162718][    C0]  __sysvec_apic_timer_interrupt+0xf9/0x280
[   48.168683][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   48.174319][    C0]  </IRQ>
[   48.177232][    C0]  <TASK>
[   48.180145][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   48.186104][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   48.192596][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 42 96 9a f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 07 be 1a f7 65 8b 05 a8 b9 bf 75 85 c0 74 3f 48 c7 04 24 0e 36
[   48.212178][    C0] RSP: 0018:ffffc9000377ef20 EFLAGS: 00000206
[   48.218223][    C0] RAX: bd0877f2c2922600 RBX: 1ffff920006efde8 RCX: ffffffff8169b33a
[   48.226169][    C0] RDX: dffffc0000000000 RSI: ffffffff8aad7740 RDI: 0000000000000001
[   48.234119][    C0] RBP: ffffc9000377efb0 R08: dffffc0000000000 R09: fffffbfff1ff4622
[   48.242067][    C0] R10: fffffbfff1ff4622 R11: 1ffffffff1ff4621 R12: dffffc0000000000
[   48.250028][    C0] R13: 1ffff920006efde4 R14: ffffc9000377ef40 R15: 0000000000000246
[   48.257990][    C0]  ? mark_lock+0x9a/0x350
[   48.262304][    C0]  ? _raw_spin_unlock+0x40/0x40
[   48.267137][    C0]  ? stack_trace_save+0x1f0/0x1f0
[   48.272145][    C0]  rmqueue_pcplist+0x1ee/0x500
[   48.276890][    C0]  ? reserve_highatomic_pageblock+0x2f0/0x2f0
[   48.282935][    C0]  ? mark_lock+0x9a/0x350
[   48.287250][    C0]  rmqueue+0x1c11/0x1f60
[   48.291470][    C0]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   48.297432][    C0]  ? clear_sched_clock_stable+0x60/0x60
[   48.302957][    C0]  ? check_new_pages+0x360/0x360
[   48.307877][    C0]  ? zone_watermark_fast+0xc3/0x230
[   48.313064][    C0]  get_page_from_freelist+0x497/0x7a0
[   48.318415][    C0]  __alloc_pages+0x259/0x560
[   48.322979][    C0]  ? zone_statistics+0x160/0x160
[   48.327896][    C0]  ? alloc_pages_bulk_array_mempolicy+0x79e/0x9b0
[   48.334299][    C0]  __vmalloc_node_range+0x8f4/0x1290
[   48.339570][    C0]  ? profile_init+0xea/0x130
[   48.344136][    C0]  ? sysfs_kf_read+0x390/0x390
[   48.348878][    C0]  vzalloc+0x75/0x80
[   48.352840][    C0]  ? profile_init+0xea/0x130
[   48.357406][    C0]  profile_init+0xea/0x130
[   48.361799][    C0]  profiling_store+0x59/0xc0
[   48.366365][    C0]  kernfs_fop_write_iter+0x3ac/0x500
[   48.371633][    C0]  do_iter_write+0x6f0/0xc50
[   48.376202][    C0]  ? vfs_iter_write+0xa0/0xa0
[   48.380863][    C0]  ? vfs_iter_write+0x69/0xa0
[   48.385527][    C0]  iter_file_splice_write+0x830/0xff0
[   48.390886][    C0]  ? splice_from_pipe+0x220/0x220
[   48.395887][    C0]  ? splice_shrink_spd+0xb0/0xb0
[   48.400801][    C0]  ? splice_from_pipe+0x220/0x220
[   48.405804][    C0]  direct_splice_actor+0xe6/0x1c0
[   48.410816][    C0]  splice_direct_to_actor+0x4e4/0xc00
[   48.416172][    C0]  ? do_splice_direct+0x3f0/0x3f0
[   48.421172][    C0]  ? pipe_to_sendpage+0x340/0x340
[   48.426188][    C0]  ? bpf_lsm_file_permission+0x5/0x10
[   48.431537][    C0]  ? security_file_permission+0xe0/0x5c0
[   48.437146][    C0]  do_splice_direct+0x2a0/0x3f0
[   48.441978][    C0]  ? splice_direct_to_actor+0xc00/0xc00
[   48.447502][    C0]  ? rcu_read_lock_any_held+0xb3/0x150
[   48.452970][    C0]  vfs_copy_file_range+0x9f5/0x1380
[   48.458175][    C0]  ? generic_copy_file_range+0x150/0x150
[   48.463800][    C0]  ? __might_fault+0xb2/0x110
[   48.468476][    C0]  __se_sys_copy_file_range+0x34c/0x5e0
[   48.474019][    C0]  ? __x64_sys_copy_file_range+0xf0/0xf0
[   48.479628][    C0]  ? __ct_user_exit+0x81/0xe0
[   48.484287][    C0]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   48.490259][    C0]  ? __x64_sys_copy_file_range+0x1d/0xf0
[   48.495881][    C0]  do_syscall_64+0x2b/0x70
[   48.500275][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   48.506157][    C0] RIP: 0033:0x7f3c122bab29
[   48.510556][    C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   48.530145][    C0] RSP: 002b:00007ffe112dcef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[   48.538543][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c122bab29
[   48.546498][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[   48.554447][    C0] RBP: 00007f3c1227ecd0 R08: 0000000000000008 R09: 0000000000000000
[   48.562395][    C0] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f3c1227ed60
[   48.570342][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   48.578292][    C0]  </TASK>
[   48.581405][    C0] Kernel Offset: disabled
[   48.585715][    C0] Rebooting in 86400 seconds..