DUID 00:04:19:c0:d1:0e:d7:c0:27:6c:e7:df:2b:fb:70:54:6d:6b
forked to background, child pid 3214
[ 38.121387][ T3215] 8021q: adding VLAN 0 to HW filter on device bond0
[ 38.139835][ T3215] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.100' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 60.249807][ T3543] kernel profiling enabled (shift: 0)
[ 60.313659][ C0] ==================================================================
[ 60.321768][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[ 60.328965][ C0] Read of size 8 at addr ffffc9000397f2a0 by task syz-executor575/3543
[ 60.337197][ C0]
[ 60.339512][ C0] CPU: 0 PID: 3543 Comm: syz-executor575 Not tainted 6.1.28-syzkaller #0
[ 60.347916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 60.358007][ C0] Call Trace:
[ 60.361292][ C0]
[ 60.364140][ C0] dump_stack_lvl+0x1e3/0x2cb
[ 60.368843][ C0] ? nf_tcp_handle_invalid+0x642/0x642
[ 60.374326][ C0] ? panic+0x75d/0x75d
[ 60.378420][ C0] ? _printk+0xd1/0x111
[ 60.382586][ C0] print_report+0x15f/0x4f0
[ 60.387188][ C0] ? __lock_acquire+0x1f80/0x1f80
[ 60.392223][ C0] ? __virt_addr_valid+0xb9/0x2e0
[ 60.397287][ C0] ? profile_pc+0xa4/0xe0
[ 60.401626][ C0] kasan_report+0x136/0x160
[ 60.406143][ C0] ? profile_pc+0xa4/0xe0
[ 60.410484][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 60.416405][ C0] profile_pc+0xa4/0xe0
[ 60.420571][ C0] profile_tick+0xee/0x170
[ 60.424992][ C0] tick_sched_timer+0x390/0x550
[ 60.429851][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0
[ 60.435406][ C0] __hrtimer_run_queues+0x5a7/0xe50
[ 60.440640][ C0] ? hrtimer_interrupt+0x980/0x980
[ 60.446077][ C0] ? ktime_get_update_offsets_now+0x407/0x420
[ 60.452175][ C0] hrtimer_interrupt+0x392/0x980
[ 60.457159][ C0] __sysvec_apic_timer_interrupt+0x156/0x580
[ 60.463158][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0
[ 60.468806][ C0]
[ 60.471737][ C0]
[ 60.474686][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 60.480673][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 60.487187][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 a2 89 54 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 68 d2 f6 65 8b 05 18 e4 76 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 60.506808][ C0] RSP: 0018:ffffc9000397f2a0 EFLAGS: 00000206
[ 60.512882][ C0] RAX: 7293405346c0d800 RBX: 1ffff9200072fe58 RCX: ffffffff816a3aca
[ 60.520860][ C0] RDX: dffffc0000000000 RSI: ffffffff8aebd020 RDI: 0000000000000001
[ 60.528838][ C0] RBP: ffffc9000397f330 R08: dffffc0000000000 R09: fffffbfff205065e
[ 60.536812][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 60.544802][ C0] R13: 1ffff9200072fe54 R14: ffffc9000397f2c0 R15: 0000000000000246
[ 60.552781][ C0] ? mark_lock+0x9a/0x340
[ 60.557124][ C0] ? _raw_spin_unlock+0x40/0x40
[ 60.561996][ C0] get_page_from_freelist+0x8db/0x3480
[ 60.567477][ C0] ? __alloc_pages+0x770/0x770
[ 60.572242][ C0] ? prepare_alloc_pages+0x1d9/0x5b0
[ 60.577547][ C0] __alloc_pages+0x28d/0x770
[ 60.582139][ C0] ? zone_statistics+0x160/0x160
[ 60.587080][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 60.592134][ C0] ? alloc_pages+0x50c/0x770
[ 60.596741][ C0] __get_free_pages+0x8/0x30
[ 60.601334][ C0] kasan_populate_vmalloc_pte+0x35/0xf0
[ 60.606898][ C0] ? __apply_to_page_range+0x9b3/0xcc0
[ 60.612379][ C0] __apply_to_page_range+0x9c5/0xcc0
[ 60.617672][ C0] ? kasan_populate_vmalloc+0x70/0x70
[ 60.623052][ C0] alloc_vmap_area+0x1977/0x1ac0
[ 60.628009][ C0] ? vm_map_ram+0xaa0/0xaa0
[ 60.632523][ C0] __get_vm_area_node+0x16c/0x360
[ 60.637556][ C0] __vmalloc_node_range+0x394/0x1460
[ 60.642936][ C0] ? profile_init+0xfa/0x160
[ 60.647913][ C0] ? __alloc_pages+0xba/0x770
[ 60.652779][ C0] ? memset+0x1f/0x40
[ 60.656768][ C0] ? __alloc_pages+0xba/0x770
[ 60.661450][ C0] ? zone_statistics+0x160/0x160
[ 60.666479][ C0] ? free_vm_area+0x50/0x50
[ 60.671083][ C0] ? profile_init+0xfa/0x160
[ 60.675773][ C0] ? sysfs_kf_read+0x300/0x300
[ 60.680546][ C0] vzalloc+0x75/0x80
[ 60.684467][ C0] ? profile_init+0xfa/0x160
[ 60.689068][ C0] profile_init+0xfa/0x160
[ 60.693497][ C0] profiling_store+0x5a/0xc0
[ 60.698099][ C0] kernfs_fop_write_iter+0x3a2/0x4f0
[ 60.703394][ C0] vfs_write+0x7ae/0xba0
[ 60.707645][ C0] ? file_end_write+0x250/0x250
[ 60.712497][ C0] ? do_sys_openat2+0x42b/0x500
[ 60.717368][ C0] ? __fdget_pos+0x261/0x2f0
[ 60.721973][ C0] ksys_write+0x19c/0x2c0
[ 60.727175][ C0] ? print_irqtrace_events+0x210/0x210
[ 60.732725][ C0] ? __ia32_sys_read+0x80/0x80
[ 60.737494][ C0] ? syscall_enter_from_user_mode+0x2e/0x220
[ 60.743486][ C0] ? lockdep_hardirqs_on+0x94/0x130
[ 60.748708][ C0] ? syscall_enter_from_user_mode+0x2e/0x220
[ 60.754721][ C0] do_syscall_64+0x3d/0xb0
[ 60.759146][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.765047][ C0] RIP: 0033:0x7f1511810289
[ 60.769465][ C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.791421][ C0] RSP: 002b:00007ffe71c5f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 60.799840][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1511810289
[ 60.807815][ C0] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003
[ 60.815793][ C0] RBP: 00007f15117d3fe0 R08: 0000000000000012 R09: 0000000000000000
[ 60.823767][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15117d4070
[ 60.831762][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.839833][ C0]
[ 60.842876][ C0]
[ 60.845210][ C0] The buggy address belongs to stack of task syz-executor575/3543
[ 60.853015][ C0] and is located at offset 0 in frame:
[ 60.858573][ C0] _raw_spin_unlock_irqrestore+0x0/0x130
[ 60.864746][ C0]
[ 60.867067][ C0] This frame has 1 object:
[ 60.871494][ C0] [32, 40) 'flags.i.i.i.i'
[ 60.871509][ C0]
[ 60.878345][ C0] The buggy address belongs to the virtual mapping at
[ 60.878345][ C0] [ffffc90003978000, ffffc90003981000) created by:
[ 60.878345][ C0] copy_process+0x637/0x4020
[ 60.896071][ C0]
[ 60.898394][ C0] The buggy address belongs to the physical page:
[ 60.904844][ C0] page:ffffea00007c3600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f0d8
[ 60.915104][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 60.922228][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 60.930825][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 60.939404][ C0] page dumped because: kasan: bad access detected
[ 60.945820][ C0] page_owner tracks the page as allocated
[ 60.951535][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3431, tgid 3431 (dhcpcd-run-hook), ts 50509167761, free_ts 50507695003
[ 60.970994][ C0] post_alloc_hook+0x18d/0x1b0
[ 60.975778][ C0] get_page_from_freelist+0x32ed/0x3480
[ 60.981331][ C0] __alloc_pages+0x28d/0x770
[ 60.985925][ C0] __vmalloc_node_range+0x96c/0x1460
[ 60.991236][ C0] dup_task_struct+0x3e5/0x6d0
[ 60.996005][ C0] copy_process+0x637/0x4020
[ 61.000600][ C0] kernel_clone+0x222/0x920
[ 61.005126][ C0] __x64_sys_clone+0x231/0x280
[ 61.009896][ C0] do_syscall_64+0x3d/0xb0
[ 61.014335][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.020251][ C0] page last free stack trace:
[ 61.024927][ C0] free_unref_page_prepare+0xf63/0x1120
[ 61.030834][ C0] free_unref_page_list+0x107/0x810
[ 61.036043][ C0] release_pages+0x2836/0x2b40
[ 61.040833][ C0] tlb_flush_mmu+0xfc/0x210
[ 61.045351][ C0] tlb_finish_mmu+0xce/0x1f0
[ 61.049949][ C0] exit_mmap+0x3c3/0x9f0
[ 61.054223][ C0] __mmput+0x115/0x3c0
[ 61.058293][ C0] exit_mm+0x226/0x300
[ 61.062376][ C0] do_exit+0x67e/0x2300
[ 61.066542][ C0] do_group_exit+0x202/0x2b0
[ 61.071141][ C0] __x64_sys_exit_group+0x3b/0x40
[ 61.076274][ C0] do_syscall_64+0x3d/0xb0
[ 61.080734][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.086632][ C0]
[ 61.088953][ C0] Memory state around the buggy address:
[ 61.094578][ C0] ffffc9000397f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.102761][ C0] ffffc9000397f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.110861][ C0] >ffffc9000397f280: 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00
[ 61.119024][ C0] ^
[ 61.124156][ C0] ffffc9000397f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.132243][ C0] ffffc9000397f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.140341][ C0] ==================================================================
[ 61.148414][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 61.155614][ C0] CPU: 0 PID: 3543 Comm: syz-executor575 Not tainted 6.1.28-syzkaller #0
[ 61.164030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 61.174088][ C0] Call Trace:
[ 61.177377][ C0]
[ 61.180232][ C0] dump_stack_lvl+0x1e3/0x2cb
[ 61.185008][ C0] ? nf_tcp_handle_invalid+0x642/0x642
[ 61.190495][ C0] ? panic+0x75d/0x75d
[ 61.194589][ C0] ? rcu_is_watching+0x11/0xb0
[ 61.199363][ C0] ? lock_release+0xd6/0xa20
[ 61.203959][ C0] ? vscnprintf+0x59/0x80
[ 61.208317][ C0] panic+0x318/0x75d
[ 61.212220][ C0] ? vprintk_emit+0x109/0x1f0
[ 61.216898][ C0] ? check_panic_on_warn+0x1d/0xa0
[ 61.222041][ C0] ? memcpy_page_flushcache+0xfc/0xfc
[ 61.227698][ C0] ? do_raw_spin_unlock+0x137/0x8a0
[ 61.232923][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 61.239181][ C0] ? _raw_spin_unlock+0x40/0x40
[ 61.244067][ C0] check_panic_on_warn+0x7e/0xa0
[ 61.249067][ C0] ? profile_pc+0xa4/0xe0
[ 61.253421][ C0] end_report+0x66/0x110
[ 61.258312][ C0] kasan_report+0x143/0x160
[ 61.262829][ C0] ? profile_pc+0xa4/0xe0
[ 61.267203][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 61.273114][ C0] profile_pc+0xa4/0xe0
[ 61.277302][ C0] profile_tick+0xee/0x170
[ 61.281729][ C0] tick_sched_timer+0x390/0x550
[ 61.286609][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0
[ 61.292160][ C0] __hrtimer_run_queues+0x5a7/0xe50
[ 61.297376][ C0] ? hrtimer_interrupt+0x980/0x980
[ 61.302495][ C0] ? ktime_get_update_offsets_now+0x407/0x420
[ 61.308571][ C0] hrtimer_interrupt+0x392/0x980
[ 61.313543][ C0] __sysvec_apic_timer_interrupt+0x156/0x580
[ 61.319537][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0
[ 61.325184][ C0]
[ 61.328138][ C0]
[ 61.331172][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 61.337203][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[ 61.343732][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 a2 89 54 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 68 d2 f6 65 8b 05 18 e4 76 75 85 c0 74 3f 48 c7 04 24 0e 36
[ 61.363352][ C0] RSP: 0018:ffffc9000397f2a0 EFLAGS: 00000206
[ 61.369425][ C0] RAX: 7293405346c0d800 RBX: 1ffff9200072fe58 RCX: ffffffff816a3aca
[ 61.377427][ C0] RDX: dffffc0000000000 RSI: ffffffff8aebd020 RDI: 0000000000000001
[ 61.385403][ C0] RBP: ffffc9000397f330 R08: dffffc0000000000 R09: fffffbfff205065e
[ 61.393410][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 61.401560][ C0] R13: 1ffff9200072fe54 R14: ffffc9000397f2c0 R15: 0000000000000246
[ 61.409540][ C0] ? mark_lock+0x9a/0x340
[ 61.413906][ C0] ? _raw_spin_unlock+0x40/0x40
[ 61.418786][ C0] get_page_from_freelist+0x8db/0x3480
[ 61.424303][ C0] ? __alloc_pages+0x770/0x770
[ 61.429070][ C0] ? prepare_alloc_pages+0x1d9/0x5b0
[ 61.434370][ C0] __alloc_pages+0x28d/0x770
[ 61.438962][ C0] ? zone_statistics+0x160/0x160
[ 61.443901][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 61.448937][ C0] ? alloc_pages+0x50c/0x770
[ 61.453545][ C0] __get_free_pages+0x8/0x30
[ 61.458136][ C0] kasan_populate_vmalloc_pte+0x35/0xf0
[ 61.463694][ C0] ? __apply_to_page_range+0x9b3/0xcc0
[ 61.469167][ C0] __apply_to_page_range+0x9c5/0xcc0
[ 61.474482][ C0] ? kasan_populate_vmalloc+0x70/0x70
[ 61.479892][ C0] alloc_vmap_area+0x1977/0x1ac0
[ 61.484923][ C0] ? vm_map_ram+0xaa0/0xaa0
[ 61.489442][ C0] __get_vm_area_node+0x16c/0x360
[ 61.494493][ C0] __vmalloc_node_range+0x394/0x1460
[ 61.499785][ C0] ? profile_init+0xfa/0x160
[ 61.504386][ C0] ? __alloc_pages+0xba/0x770
[ 61.509067][ C0] ? memset+0x1f/0x40
[ 61.513054][ C0] ? __alloc_pages+0xba/0x770
[ 61.517742][ C0] ? zone_statistics+0x160/0x160
[ 61.522690][ C0] ? free_vm_area+0x50/0x50
[ 61.527207][ C0] ? profile_init+0xfa/0x160
[ 61.531805][ C0] ? sysfs_kf_read+0x300/0x300
[ 61.536586][ C0] vzalloc+0x75/0x80
[ 61.540493][ C0] ? profile_init+0xfa/0x160
[ 61.545092][ C0] profile_init+0xfa/0x160
[ 61.549524][ C0] profiling_store+0x5a/0xc0
[ 61.554127][ C0] kernfs_fop_write_iter+0x3a2/0x4f0
[ 61.559461][ C0] vfs_write+0x7ae/0xba0
[ 61.563711][ C0] ? file_end_write+0x250/0x250
[ 61.568565][ C0] ? do_sys_openat2+0x42b/0x500
[ 61.573433][ C0] ? __fdget_pos+0x261/0x2f0
[ 61.578050][ C0] ksys_write+0x19c/0x2c0
[ 61.582470][ C0] ? print_irqtrace_events+0x210/0x210
[ 61.588024][ C0] ? __ia32_sys_read+0x80/0x80
[ 61.592896][ C0] ? syscall_enter_from_user_mode+0x2e/0x220
[ 61.598891][ C0] ? lockdep_hardirqs_on+0x94/0x130
[ 61.604124][ C0] ? syscall_enter_from_user_mode+0x2e/0x220
[ 61.610117][ C0] do_syscall_64+0x3d/0xb0
[ 61.614559][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.620459][ C0] RIP: 0033:0x7f1511810289
[ 61.624975][ C0] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 61.644695][ C0] RSP: 002b:00007ffe71c5f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 61.653115][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1511810289
[ 61.661089][ C0] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003
[ 61.669173][ C0] RBP: 00007f15117d3fe0 R08: 0000000000000012 R09: 0000000000000000
[ 61.677148][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15117d4070
[ 61.685120][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 61.693125][ C0]
[ 61.696316][ C0] Kernel Offset: disabled
[ 61.700646][ C0] Rebooting in 86400 seconds..