Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[   54.353003][ T3541] kernel profiling enabled (shift: 7)
executing program
executing program
executing program
executing program
[   54.426262][    C1] ==================================================================
[   54.434355][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[   54.441559][    C1] Read of size 8 at addr ffffc90003b0f780 by task syz-executor219/3557
[   54.449780][    C1] 
[   54.452115][    C1] CPU: 1 PID: 3557 Comm: syz-executor219 Not tainted 6.1.84-syzkaller #0
[   54.460606][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   54.470752][    C1] Call Trace:
[   54.474030][    C1]  <IRQ>
[   54.476955][    C1]  dump_stack_lvl+0x1e3/0x2cb
[   54.481818][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[   54.487375][    C1]  ? panic+0x75d/0x75d
[   54.491569][    C1]  ? _printk+0xd1/0x111
[   54.495736][    C1]  print_report+0x15f/0x4f0
[   54.501210][    C1]  ? __virt_addr_valid+0xb9/0x520
[   54.506237][    C1]  ? profile_pc+0xa4/0xe0
[   54.510734][    C1]  kasan_report+0x136/0x160
[   54.515234][    C1]  ? profile_pc+0xa4/0xe0
[   54.519728][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   54.525605][    C1]  profile_pc+0xa4/0xe0
[   54.529932][    C1]  profile_tick+0xee/0x170
[   54.534342][    C1]  tick_sched_timer+0x390/0x550
[   54.539176][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   54.544703][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[   54.550068][    C1]  ? hrtimer_interrupt+0x980/0x980
[   54.555164][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[   54.561223][    C1]  hrtimer_interrupt+0x392/0x980
[   54.566153][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[   54.572123][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   54.578183][    C1]  </IRQ>
[   54.581188][    C1]  <TASK>
[   54.584197][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   54.590259][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   54.596745][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 12 a3 4d f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 17 e9 c9 f6 65 8b 05 b8 14 6e 75 85 c0 74 3f 48 c7 04 24 0e 36
[   54.616596][    C1] RSP: 0018:ffffc90003b0f780 EFLAGS: 00000206
[   54.622957][    C1] RAX: 5eeb74aa642c8700 RBX: 1ffff92000761ef4 RCX: ffffffff816ac11a
[   54.631092][    C1] RDX: dffffc0000000000 RSI: ffffffff8aebeec0 RDI: 0000000000000001
[   54.639049][    C1] RBP: ffffc90003b0f818 R08: dffffc0000000000 R09: fffffbfff209304b
[   54.647003][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   54.654974][    C1] R13: 1ffff92000761ef0 R14: ffffc90003b0f7a0 R15: 0000000000000246
[   54.663029][    C1]  ? mark_lock+0x9a/0x340
[   54.667354][    C1]  ? _raw_spin_unlock+0x40/0x40
[   54.672281][    C1]  debug_check_no_obj_freed+0x455/0x4e0
[   54.678084][    C1]  ? __phys_addr+0xb6/0x170
[   54.682758][    C1]  ? virt_to_slab+0x5/0xa0
[   54.687187][    C1]  ? ____kasan_slab_free+0x8e/0x120
[   54.692376][    C1]  kmem_cache_free+0x241/0x510
[   54.697308][    C1]  ? unlink_anon_vmas+0x59a/0x5e0
[   54.702320][    C1]  unlink_anon_vmas+0x59a/0x5e0
[   54.707247][    C1]  free_pgtables+0x344/0x4f0
[   54.711828][    C1]  ? exit_mmap+0x269/0x9f0
[   54.716403][    C1]  ? free_pgd_range+0xdc0/0xdc0
[   54.721240][    C1]  exit_mmap+0x3bb/0x9f0
[   54.725466][    C1]  ? vm_brk+0x20/0x20
[   54.729534][    C1]  ? memset+0x1f/0x40
[   54.733683][    C1]  ? uprobe_clear_state+0x271/0x280
[   54.738977][    C1]  ? mm_update_next_owner+0x4fa/0x5e0
[   54.744344][    C1]  __mmput+0x115/0x3c0
[   54.748590][    C1]  exit_mm+0x226/0x300
[   54.752696][    C1]  ? do_exit+0x26a0/0x26a0
[   54.757128][    C1]  ? taskstats_exit+0x399/0x920
[   54.762071][    C1]  ? tty_audit_exit+0x150/0x1f0
[   54.766920][    C1]  do_exit+0x9f6/0x26a0
[   54.771078][    C1]  ? put_task_struct+0x80/0x80
[   54.776184][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   54.782160][    C1]  ? print_irqtrace_events+0x210/0x210
[   54.787612][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[   54.792808][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[   54.797991][    C1]  do_group_exit+0x202/0x2b0
[   54.802683][    C1]  __x64_sys_exit_group+0x3b/0x40
[   54.807785][    C1]  do_syscall_64+0x3d/0xb0
[   54.812186][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.818150][    C1] RIP: 0033:0x7f5d01fc8e09
[   54.822556][    C1] Code: Unable to access opcode bytes at 0x7f5d01fc8ddf.
[   54.829554][    C1] RSP: 002b:00007fff25bc38b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   54.838124][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d01fc8e09
[   54.846351][    C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[   54.854313][    C1] RBP: 00007f5d02044350 R08: ffffffffffffffb8 R09: 0000000000000006
[   54.862362][    C1] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f5d02044350
[   54.870576][    C1] R13: 0000000000000000 R14: 00007f5d02044da0 R15: 00007f5d01f99dd0
[   54.878628][    C1]  </TASK>
[   54.881634][    C1] 
[   54.883966][    C1] The buggy address belongs to stack of task syz-executor219/3557
[   54.891918][    C1]  and is located at offset 0 in frame:
[   54.897527][    C1]  _raw_spin_unlock_irqrestore+0x0/0x130
[   54.903149][    C1] 
[   54.905456][    C1] This frame has 1 object:
[   54.910379][    C1]  [32, 40) 'flags.i.i.i.i'
[   54.910388][    C1] 
[   54.917357][    C1] The buggy address belongs to the virtual mapping at
[   54.917357][    C1]  [ffffc90003b08000, ffffc90003b11000) created by:
[   54.917357][    C1]  copy_process+0x637/0x4060
[   54.935132][    C1] 
[   54.937467][    C1] The buggy address belongs to the physical page:
[   54.943857][    C1] page:ffffea0000858000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21600
[   54.953989][    C1] flags: 0xfff80000000000(node=0|zone=1|lastcpupid=0xfff)
[   54.961256][    C1] raw: 00fff80000000000 0000000000000000 dead000000000122 0000000000000000
[   54.969822][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   54.978903][    C1] page dumped because: kasan: bad access detected
[   54.985302][    C1] page_owner tracks the page as allocated
[   54.990998][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3540, tgid 3540 (syz-executor219), ts 54423979489, free_ts 33349145585
[   55.010608][    C1]  post_alloc_hook+0x18d/0x1b0
[   55.015380][    C1]  get_page_from_freelist+0x31a1/0x3320
[   55.020907][    C1]  __alloc_pages+0x28d/0x770
[   55.025653][    C1]  __vmalloc_node_range+0x96c/0x1460
[   55.031011][    C1]  dup_task_struct+0x3e5/0x6d0
[   55.035934][    C1]  copy_process+0x637/0x4060
[   55.040517][    C1]  kernel_clone+0x222/0x920
[   55.045004][    C1]  __x64_sys_clone+0x231/0x280
[   55.049801][    C1]  do_syscall_64+0x3d/0xb0
[   55.054249][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.060156][    C1] page last free stack trace:
[   55.064847][    C1]  free_unref_page_prepare+0xf63/0x1120
[   55.070401][    C1]  free_unref_page+0x33/0x3e0
[   55.075065][    C1]  qlist_free_all+0x76/0xe0
[   55.079564][    C1]  kasan_quarantine_reduce+0x156/0x170
[   55.085005][    C1]  __kasan_slab_alloc+0x1f/0x70
[   55.089860][    C1]  slab_post_alloc_hook+0x52/0x3a0
[   55.095139][    C1]  kmem_cache_alloc+0x10c/0x2d0
[   55.099979][    C1]  getname_flags+0xb8/0x4f0
[   55.104472][    C1]  __x64_sys_newfstatat+0x130/0x1e0
[   55.110124][    C1]  do_syscall_64+0x3d/0xb0
[   55.114672][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.120590][    C1] 
[   55.122903][    C1] Memory state around the buggy address:
[   55.128724][    C1]  ffffc90003b0f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.136969][    C1]  ffffc90003b0f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.145102][    C1] >ffffc90003b0f780: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00
[   55.155059][    C1]                    ^
[   55.159120][    C1]  ffffc90003b0f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.167165][    C1]  ffffc90003b0f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.175311][    C1] ==================================================================
[   55.183703][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   55.190895][    C1] CPU: 1 PID: 3557 Comm: syz-executor219 Not tainted 6.1.84-syzkaller #0
[   55.199315][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   55.209366][    C1] Call Trace:
[   55.212760][    C1]  <IRQ>
[   55.215622][    C1]  dump_stack_lvl+0x1e3/0x2cb
[   55.220330][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[   55.225881][    C1]  ? panic+0x75d/0x75d
[   55.229938][    C1]  ? rcu_is_watching+0x11/0xb0
[   55.234783][    C1]  ? lock_release+0xd6/0xa20
[   55.239625][    C1]  ? vscnprintf+0x59/0x80
[   55.243940][    C1]  panic+0x318/0x75d
[   55.247824][    C1]  ? __wake_up_klogd+0xcc/0x100
[   55.253575][    C1]  ? check_panic_on_warn+0x1d/0xa0
[   55.258703][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[   55.264078][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[   55.269280][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   55.275250][    C1]  ? _raw_spin_unlock+0x40/0x40
[   55.280172][    C1]  check_panic_on_warn+0x7e/0xa0
[   55.285098][    C1]  ? profile_pc+0xa4/0xe0
[   55.289416][    C1]  end_report+0x66/0x110
[   55.293649][    C1]  kasan_report+0x143/0x160
[   55.298135][    C1]  ? profile_pc+0xa4/0xe0
[   55.302810][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   55.308691][    C1]  profile_pc+0xa4/0xe0
[   55.313131][    C1]  profile_tick+0xee/0x170
[   55.317545][    C1]  tick_sched_timer+0x390/0x550
[   55.322382][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   55.327941][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[   55.333427][    C1]  ? hrtimer_interrupt+0x980/0x980
[   55.338732][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[   55.344887][    C1]  hrtimer_interrupt+0x392/0x980
[   55.349823][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[   55.355822][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   55.362095][    C1]  </IRQ>
[   55.365107][    C1]  <TASK>
[   55.368211][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   55.374537][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   55.381288][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 12 a3 4d f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 17 e9 c9 f6 65 8b 05 b8 14 6e 75 85 c0 74 3f 48 c7 04 24 0e 36
[   55.401533][    C1] RSP: 0018:ffffc90003b0f780 EFLAGS: 00000206
[   55.407946][    C1] RAX: 5eeb74aa642c8700 RBX: 1ffff92000761ef4 RCX: ffffffff816ac11a
[   55.416861][    C1] RDX: dffffc0000000000 RSI: ffffffff8aebeec0 RDI: 0000000000000001
[   55.425005][    C1] RBP: ffffc90003b0f818 R08: dffffc0000000000 R09: fffffbfff209304b
[   55.432984][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   55.441600][    C1] R13: 1ffff92000761ef0 R14: ffffc90003b0f7a0 R15: 0000000000000246
[   55.449613][    C1]  ? mark_lock+0x9a/0x340
[   55.453957][    C1]  ? _raw_spin_unlock+0x40/0x40
[   55.458808][    C1]  debug_check_no_obj_freed+0x455/0x4e0
[   55.464365][    C1]  ? __phys_addr+0xb6/0x170
[   55.468874][    C1]  ? virt_to_slab+0x5/0xa0
[   55.473280][    C1]  ? ____kasan_slab_free+0x8e/0x120
[   55.478559][    C1]  kmem_cache_free+0x241/0x510
[   55.483313][    C1]  ? unlink_anon_vmas+0x59a/0x5e0
[   55.488513][    C1]  unlink_anon_vmas+0x59a/0x5e0
[   55.493526][    C1]  free_pgtables+0x344/0x4f0
[   55.499668][    C1]  ? exit_mmap+0x269/0x9f0
[   55.504272][    C1]  ? free_pgd_range+0xdc0/0xdc0
[   55.509123][    C1]  exit_mmap+0x3bb/0x9f0
[   55.513576][    C1]  ? vm_brk+0x20/0x20
[   55.517680][    C1]  ? memset+0x1f/0x40
[   55.521786][    C1]  ? uprobe_clear_state+0x271/0x280
[   55.527160][    C1]  ? mm_update_next_owner+0x4fa/0x5e0
[   55.533050][    C1]  __mmput+0x115/0x3c0
[   55.538017][    C1]  exit_mm+0x226/0x300
[   55.542200][    C1]  ? do_exit+0x26a0/0x26a0
[   55.547022][    C1]  ? taskstats_exit+0x399/0x920
[   55.551883][    C1]  ? tty_audit_exit+0x150/0x1f0
[   55.556733][    C1]  do_exit+0x9f6/0x26a0
[   55.560982][    C1]  ? put_task_struct+0x80/0x80
[   55.566029][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   55.572502][    C1]  ? print_irqtrace_events+0x210/0x210
[   55.578115][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[   55.583684][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[   55.588881][    C1]  do_group_exit+0x202/0x2b0
[   55.593553][    C1]  __x64_sys_exit_group+0x3b/0x40
[   55.598697][    C1]  do_syscall_64+0x3d/0xb0
[   55.603137][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.609218][    C1] RIP: 0033:0x7f5d01fc8e09
[   55.613773][    C1] Code: Unable to access opcode bytes at 0x7f5d01fc8ddf.
[   55.620973][    C1] RSP: 002b:00007fff25bc38b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   55.629478][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d01fc8e09
[   55.637874][    C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[   55.645841][    C1] RBP: 00007f5d02044350 R08: ffffffffffffffb8 R09: 0000000000000006
[   55.653883][    C1] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f5d02044350
[   55.662103][    C1] R13: 0000000000000000 R14: 00007f5d02044da0 R15: 00007f5d01f99dd0
[   55.670422][    C1]  </TASK>
[   55.673525][    C1] Kernel Offset: disabled
[   55.677966][    C1] Rebooting in 86400 seconds..