./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor376432761

<...>
DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31
forked to background, child pid 4646
[   38.464428][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.492657][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.108' (ECDSA) to the list of known hosts.
execve("./syz-executor376432761", ["./syz-executor376432761"], 0x7ffd671b6540 /* 10 vars */) = 0
brk(NULL)                               = 0x5555555a8000
brk(0x5555555a8c40)                     = 0x5555555a8c40
arch_prctl(ARCH_SET_FS, 0x5555555a8300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor376432761", 4096) = 27
brk(0x5555555c9c40)                     = 0x5555555c9c40
brk(0x5555555ca000)                     = 0x5555555ca000
mprotect(0x7f2c63f0d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR) = 3
syzkaller login: [   59.724497][ T5072] kernel profiling enabled (shift: 0)
[   59.736517][    C1] ==================================================================
[   59.744595][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa8/0xe0
[   59.751727][    C1] Read of size 8 at addr ffffc90003c2f100 by task syz-executor376/5072
[   59.759970][    C1] 
[   59.762298][    C1] CPU: 1 PID: 5072 Comm: syz-executor376 Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0
[   59.772697][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[   59.782744][    C1] Call Trace:
[   59.786030][    C1]  <IRQ>
[   59.788869][    C1]  dump_stack_lvl+0x1e7/0x2d0
[   59.793573][    C1]  ? nf_tcp_handle_invalid+0x650/0x650
[   59.799048][    C1]  ? panic+0x770/0x770
[   59.803133][    C1]  ? _printk+0xd5/0x120
[   59.807295][    C1]  print_report+0x163/0x540
[   59.811819][    C1]  ? __virt_addr_valid+0xbd/0x2e0
[   59.816876][    C1]  ? profile_pc+0xa8/0xe0
[   59.821221][    C1]  kasan_report+0x176/0x1b0
[   59.825731][    C1]  ? profile_pc+0xa8/0xe0
[   59.830068][    C1]  ? scheduler_tick+0x387/0x540
[   59.834934][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   59.840836][    C1]  profile_pc+0xa8/0xe0
[   59.845002][    C1]  profile_tick+0xd8/0x130
[   59.849425][    C1]  tick_sched_timer+0x394/0x550
[   59.854288][    C1]  ? tick_setup_sched_timer+0x2e0/0x2e0
[   59.859837][    C1]  __hrtimer_run_queues+0x562/0xd10
[   59.865067][    C1]  ? hrtimer_interrupt+0x980/0x980
[   59.870200][    C1]  ? ktime_get_update_offsets_now+0x40b/0x420
[   59.876302][    C1]  hrtimer_interrupt+0x396/0x980
[   59.881263][    C1]  __sysvec_apic_timer_interrupt+0x13f/0x480
[   59.887267][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[   59.892920][    C1]  </IRQ>
[   59.895859][    C1]  <TASK>
[   59.898809][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   59.904805][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   59.911335][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 6e fb 35 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 29 b4 f6 65 8b 05 24 91 59 75 85 c0 74 3f 48 c7 04 24 0e 36
[   59.931039][    C1] RSP: 0018:ffffc90003c2f100 EFLAGS: 00000206
[   59.937129][    C1] RAX: 9a04483aef095100 RBX: 1ffff92000785e24 RCX: ffffffff816a859a
[   59.945112][    C1] RDX: dffffc0000000000 RSI: ffffffff8aea7d60 RDI: 0000000000000001
[   59.953093][    C1] RBP: ffffc90003c2f190 R08: dffffc0000000000 R09: fffffbfff205be39
[   59.961071][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   59.969042][    C1] R13: 1ffff92000785e20 R14: ffffc90003c2f120 R15: 0000000000000246
[   59.977021][    C1]  ? mark_lock+0x9a/0x340
[   59.981359][    C1]  ? _raw_spin_unlock+0x40/0x40
[   59.986218][    C1]  ? __mod_zone_page_state+0xda/0x140
[   59.991597][    C1]  __rmqueue_pcplist+0x1e71/0x2190
[   59.996736][    C1]  ? zone_watermark_fast+0x240/0x240
[   60.002035][    C1]  get_page_from_freelist+0x791/0x33c0
[   60.007513][    C1]  ? __might_sleep+0xc0/0xc0
[   60.012106][    C1]  ? __lock_acquire+0x125b/0x1f80
[   60.017138][    C1]  ? __alloc_pages+0x670/0x670
[   60.021907][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   60.027215][    C1]  __alloc_pages+0x255/0x670
[   60.031812][    C1]  ? zone_statistics+0x170/0x170
[   60.036753][    C1]  ? do_raw_spin_lock+0x14d/0x3a0
[   60.041784][    C1]  ? alloc_pages+0x510/0x780
[   60.046379][    C1]  __get_free_pages+0xc/0x30
[   60.050976][    C1]  kasan_populate_vmalloc_pte+0x2e/0xd0
[   60.056527][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   60.061994][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   60.067284][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   60.072664][    C1]  alloc_vmap_area+0x1acc/0x1c00
[   60.077614][    C1]  ? vm_map_ram+0xb30/0xb30
[   60.082119][    C1]  __get_vm_area_node+0x16e/0x370
[   60.087149][    C1]  __vmalloc_node_range+0x3a2/0x12f0
[   60.092434][    C1]  ? profile_init+0xee/0x130
[   60.097030][    C1]  ? __alloc_pages+0xbd/0x670
[   60.101713][    C1]  ? __asan_memset+0x23/0x40
[   60.106305][    C1]  ? __alloc_pages+0xbd/0x670
[   60.110989][    C1]  ? free_vm_area+0x50/0x50
[   60.115504][    C1]  ? profile_init+0xee/0x130
[   60.120099][    C1]  ? sysfs_kf_read+0x310/0x310
[   60.124876][    C1]  vzalloc+0x79/0x90
[   60.128774][    C1]  ? profile_init+0xee/0x130
[   60.133366][    C1]  profile_init+0xee/0x130
[   60.137787][    C1]  profiling_store+0x5e/0xc0
[   60.142384][    C1]  kernfs_fop_write_iter+0x3a6/0x4f0
[   60.147682][    C1]  vfs_write+0x7b2/0xbb0
[   60.151941][    C1]  ? file_end_write+0x250/0x250
[   60.156801][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[   60.162003][    C1]  ? __fdget_pos+0x265/0x2f0
[   60.166607][    C1]  ksys_write+0x1a0/0x2c0
[   60.170946][    C1]  ? __ia32_sys_read+0x90/0x90
[   60.175718][    C1]  ? syscall_enter_from_user_mode+0x32/0x260
[   60.181707][    C1]  ? syscall_enter_from_user_mode+0x8c/0x260
[   60.187701][    C1]  do_syscall_64+0x41/0xc0
[   60.192134][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.198060][    C1] RIP: 0033:0x7f2c63ea0da9
[   60.202478][    C1] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   60.222083][    C1] RSP: 002b:00007ffc81a20b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   60.230497][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c63ea0da9
[   60.238466][    C1] RDX: 0000000000000012 RSI: 00000000200001c0 RDI: 0000000000000003
[   60.246434][    C1] RBP: 00007f2c63e64cc0 R08: 0000000000000012 R09: 0000000000000000
[   60.254576][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c63e64d50
[   60.262564][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   60.270556][    C1]  </TASK>
[   60.273587][    C1] 
[   60.275909][    C1] The buggy address belongs to stack of task syz-executor376/5072
[   60.283708][    C1]  and is located at offset 0 in frame:
[   60.289262][    C1]  _raw_spin_unlock_irqrestore+0x0/0x140
[   60.294922][    C1] 
[   60.297252][    C1] This frame has 1 object:
[   60.301665][    C1]  [32, 40) 'flags.i.i.i.i'
[   60.301677][    C1] 
[   60.308497][    C1] The buggy address belongs to the virtual mapping at
[   60.308497][    C1]  [ffffc90003c28000, ffffc90003c31000) created by:
[   60.308497][    C1]  copy_process+0x5bd/0x3fc0
[   60.326131][    C1] 
[   60.328457][    C1] The buggy address belongs to the physical page:
[   60.334885][    C1] page:ffffea0001ccab40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x732ad
[   60.345035][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   60.352150][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   60.360733][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   60.369306][    C1] page dumped because: kasan: bad access detected
[   60.375713][    C1] page_owner tracks the page as allocated
[   60.381425][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5069, tgid 5069 (strace-static-x), ts 59701233039, free_ts 59636928543
[   60.400873][    C1]  get_page_from_freelist+0x3246/0x33c0
[   60.406424][    C1]  __alloc_pages+0x255/0x670
[   60.411019][    C1]  __vmalloc_node_range+0x959/0x12f0
[   60.416299][    C1]  dup_task_struct+0x3e5/0x750
[   60.421067][    C1]  copy_process+0x5bd/0x3fc0
[   60.425658][    C1]  kernel_clone+0x222/0x800
[   60.430157][    C1]  __x64_sys_clone+0x235/0x280
[   60.434917][    C1]  do_syscall_64+0x41/0xc0
[   60.439341][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.445241][    C1] page last free stack trace:
[   60.449916][    C1]  free_unref_page_prepare+0xe2f/0xe70
[   60.455377][    C1]  free_unref_page_list+0x596/0x830
[   60.460581][    C1]  release_pages+0x219e/0x2470
[   60.465344][    C1]  tlb_flush_mmu+0x100/0x210
[   60.469937][    C1]  tlb_finish_mmu+0xd4/0x1f0
[   60.474530][    C1]  exit_mmap+0x2c9/0x850
[   60.478776][    C1]  __mmput+0x115/0x3c0
[   60.482840][    C1]  exec_mmap+0x4eb/0x580
[   60.487087][    C1]  begin_new_exec+0x665/0xf10
[   60.491767][    C1]  load_elf_binary+0x95d/0x2820
[   60.496631][    C1]  bprm_execve+0x90e/0x1740
[   60.501137][    C1]  do_execveat_common+0x580/0x720
[   60.506168][    C1]  __x64_sys_execve+0x92/0xa0
[   60.510854][    C1]  do_syscall_64+0x41/0xc0
[   60.515278][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.521177][    C1] 
[   60.523513][    C1] Memory state around the buggy address:
[   60.529141][    C1]  ffffc90003c2f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   60.537199][    C1]  ffffc90003c2f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   60.545254][    C1] >ffffc90003c2f100: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00
[   60.553318][    C1]                    ^
[   60.557388][    C1]  ffffc90003c2f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   60.565445][    C1]  ffffc90003c2f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   60.573499][    C1] ==================================================================
[   60.581571][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   60.588772][    C1] CPU: 1 PID: 5072 Comm: syz-executor376 Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0
[   60.599181][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[   60.609236][    C1] Call Trace:
[   60.612522][    C1]  <IRQ>
[   60.615368][    C1]  dump_stack_lvl+0x1e7/0x2d0
[   60.620063][    C1]  ? nf_tcp_handle_invalid+0x650/0x650
[   60.625529][    C1]  ? panic+0x770/0x770
[   60.629597][    C1]  ? lock_release+0xbf/0x9d0
[   60.634189][    C1]  ? vscnprintf+0x5d/0x80
[   60.638531][    C1]  panic+0x31c/0x770
[   60.642445][    C1]  ? check_panic_on_warn+0x21/0xa0
[   60.647561][    C1]  ? memcpy_page_flushcache+0x100/0x100
[   60.653116][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   60.659103][    C1]  ? _raw_spin_unlock+0x40/0x40
[   60.663968][    C1]  ? print_report+0x4fb/0x540
[   60.668654][    C1]  check_panic_on_warn+0x82/0xa0
[   60.673599][    C1]  ? profile_pc+0xa8/0xe0
[   60.678031][    C1]  end_report+0x63/0x110
[   60.682283][    C1]  kasan_report+0x183/0x1b0
[   60.686787][    C1]  ? profile_pc+0xa8/0xe0
[   60.691213][    C1]  ? scheduler_tick+0x387/0x540
[   60.696165][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   60.702070][    C1]  profile_pc+0xa8/0xe0
[   60.706243][    C1]  profile_tick+0xd8/0x130
[   60.710658][    C1]  tick_sched_timer+0x394/0x550
[   60.715515][    C1]  ? tick_setup_sched_timer+0x2e0/0x2e0
[   60.721079][    C1]  __hrtimer_run_queues+0x562/0xd10
[   60.726293][    C1]  ? hrtimer_interrupt+0x980/0x980
[   60.731433][    C1]  ? ktime_get_update_offsets_now+0x40b/0x420
[   60.737508][    C1]  hrtimer_interrupt+0x396/0x980
[   60.742464][    C1]  __sysvec_apic_timer_interrupt+0x13f/0x480
[   60.748455][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[   60.754097][    C1]  </IRQ>
[   60.757038][    C1]  <TASK>
[   60.759979][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   60.765970][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   60.772483][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 6e fb 35 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 29 b4 f6 65 8b 05 24 91 59 75 85 c0 74 3f 48 c7 04 24 0e 36
[   60.792087][    C1] RSP: 0018:ffffc90003c2f100 EFLAGS: 00000206
[   60.798157][    C1] RAX: 9a04483aef095100 RBX: 1ffff92000785e24 RCX: ffffffff816a859a
[   60.806151][    C1] RDX: dffffc0000000000 RSI: ffffffff8aea7d60 RDI: 0000000000000001
[   60.814149][    C1] RBP: ffffc90003c2f190 R08: dffffc0000000000 R09: fffffbfff205be39
[   60.822133][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   60.830110][    C1] R13: 1ffff92000785e20 R14: ffffc90003c2f120 R15: 0000000000000246
[   60.838088][    C1]  ? mark_lock+0x9a/0x340
[   60.842432][    C1]  ? _raw_spin_unlock+0x40/0x40
[   60.847308][    C1]  ? __mod_zone_page_state+0xda/0x140
[   60.852705][    C1]  __rmqueue_pcplist+0x1e71/0x2190
[   60.857849][    C1]  ? zone_watermark_fast+0x240/0x240
[   60.863175][    C1]  get_page_from_freelist+0x791/0x33c0
[   60.868659][    C1]  ? __might_sleep+0xc0/0xc0
[   60.873259][    C1]  ? __lock_acquire+0x125b/0x1f80
[   60.878295][    C1]  ? __alloc_pages+0x670/0x670
[   60.883066][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   60.888361][    C1]  __alloc_pages+0x255/0x670
[   60.892961][    C1]  ? zone_statistics+0x170/0x170
[   60.897901][    C1]  ? do_raw_spin_lock+0x14d/0x3a0
[   60.902972][    C1]  ? alloc_pages+0x510/0x780
[   60.907569][    C1]  __get_free_pages+0xc/0x30
[   60.912163][    C1]  kasan_populate_vmalloc_pte+0x2e/0xd0
[   60.917718][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   60.923185][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   60.928483][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   60.933871][    C1]  alloc_vmap_area+0x1acc/0x1c00
[   60.938818][    C1]  ? vm_map_ram+0xb30/0xb30
[   60.943324][    C1]  __get_vm_area_node+0x16e/0x370
[   60.948357][    C1]  __vmalloc_node_range+0x3a2/0x12f0
[   60.953644][    C1]  ? profile_init+0xee/0x130
[   60.958243][    C1]  ? __alloc_pages+0xbd/0x670
[   60.962954][    C1]  ? __asan_memset+0x23/0x40
[   60.967549][    C1]  ? __alloc_pages+0xbd/0x670
[   60.972246][    C1]  ? free_vm_area+0x50/0x50
[   60.976753][    C1]  ? profile_init+0xee/0x130
[   60.981353][    C1]  ? sysfs_kf_read+0x310/0x310
[   60.986131][    C1]  vzalloc+0x79/0x90
[   60.990028][    C1]  ? profile_init+0xee/0x130
[   60.994623][    C1]  profile_init+0xee/0x130
[   60.999055][    C1]  profiling_store+0x5e/0xc0
[   61.003652][    C1]  kernfs_fop_write_iter+0x3a6/0x4f0
[   61.008964][    C1]  vfs_write+0x7b2/0xbb0
[   61.013217][    C1]  ? file_end_write+0x250/0x250
[   61.018088][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[   61.023285][    C1]  ? __fdget_pos+0x265/0x2f0
[   61.027883][    C1]  ksys_write+0x1a0/0x2c0
[   61.032220][    C1]  ? __ia32_sys_read+0x90/0x90
[   61.037076][    C1]  ? syscall_enter_from_user_mode+0x32/0x260
[   61.043057][    C1]  ? syscall_enter_from_user_mode+0x8c/0x260
[   61.049046][    C1]  do_syscall_64+0x41/0xc0
[   61.053484][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.059387][    C1] RIP: 0033:0x7f2c63ea0da9
[   61.063815][    C1] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   61.083421][    C1] RSP: 002b:00007ffc81a20b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   61.091867][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c63ea0da9
[   61.099855][    C1] RDX: 0000000000000012 RSI: 00000000200001c0 RDI: 0000000000000003
[   61.107827][    C1] RBP: 00007f2c63e64cc0 R08: 0000000000000012 R09: 0000000000000000
[   61.115801][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c63e64d50
[   61.123772][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   61.131759][    C1]  </TASK>
[   61.134936][    C1] Kernel Offset: disabled
[   61.139264][    C1] Rebooting in 86400 seconds..