DUID 00:04:f8:78:02:71:58:70:bd:05:46:b3:41:f8:60:5e:d2:e5
forked to background, child pid 3836
[ 26.611589][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.622808][ T3837] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
syzkaller login: [ 51.150090][ C0] ------------[ cut here ]------------
[ 51.150510][ C0]
[ 51.150513][ C0] ======================================================
[ 51.150516][ C0] WARNING: possible circular locking dependency detected
[ 51.150519][ C0] 5.15.175-syzkaller #0 Not tainted
[ 51.150523][ C0] ------------------------------------------------------
[ 51.150525][ C0] syz-executor164/4193 is trying to acquire lock:
[ 51.150530][ C0] ffffffff8cb148a0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60
[ 51.150566][ C0]
[ 51.150566][ C0] but task is already holding lock:
[ 51.150568][ C0] ffff888029d66368 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xae/0x1300
[ 51.150588][ C0]
[ 51.150588][ C0] which lock already depends on the new lock.
[ 51.150588][ C0]
[ 51.150590][ C0]
[ 51.150590][ C0] the existing dependency chain (in reverse order) is:
[ 51.150592][ C0]
[ 51.150592][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 51.150602][ C0] lock_acquire+0x1db/0x4f0
[ 51.150611][ C0] _raw_spin_lock_irqsave+0xd1/0x120
[ 51.150623][ C0] try_to_wake_up+0xae/0x1300
[ 51.150630][ C0] __wake_up_common+0x2a0/0x4e0
[ 51.150639][ C0] __wake_up+0x112/0x1c0
[ 51.150647][ C0] tty_port_default_wakeup+0xa8/0x100
[ 51.150655][ C0] serial8250_tx_chars+0x60d/0x800
[ 51.150664][ C0] serial8250_handle_irq+0x505/0x600
[ 51.150671][ C0] serial8250_default_handle_irq+0xc8/0x1e0
[ 51.150679][ C0] serial8250_interrupt+0xa1/0x1e0
[ 51.150686][ C0] __handle_irq_event_percpu+0x292/0xa70
[ 51.150695][ C0] handle_irq_event+0xff/0x2b0
[ 51.150702][ C0] handle_edge_irq+0x245/0xbf0
[ 51.150708][ C0] __common_interrupt+0xd7/0x1f0
[ 51.150716][ C0] common_interrupt+0x59/0xd0
[ 51.150724][ C0] asm_common_interrupt+0x22/0x40
[ 51.150732][ C0]
[ 51.150732][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}:
[ 51.150742][ C0] lock_acquire+0x1db/0x4f0
[ 51.150748][ C0] _raw_spin_lock_irqsave+0xd1/0x120
[ 51.150756][ C0] __wake_up+0xf5/0x1c0
[ 51.150763][ C0] tty_port_default_wakeup+0xa8/0x100
[ 51.150770][ C0] serial8250_tx_chars+0x60d/0x800
[ 51.150777][ C0] serial8250_handle_irq+0x505/0x600
[ 51.150785][ C0] serial8250_default_handle_irq+0xc8/0x1e0
[ 51.150793][ C0] serial8250_interrupt+0xa1/0x1e0
[ 51.150800][ C0] __handle_irq_event_percpu+0x292/0xa70
[ 51.150807][ C0] handle_irq_event+0xff/0x2b0
[ 51.150814][ C0] handle_edge_irq+0x245/0xbf0
[ 51.150821][ C0] __common_interrupt+0xd7/0x1f0
[ 51.150827][ C0] common_interrupt+0xae/0xd0
[ 51.150834][ C0] asm_common_interrupt+0x22/0x40
[ 51.150841][ C0] _raw_spin_unlock_irqrestore+0xd4/0x130
[ 51.150849][ C0] uart_write+0x6af/0x930
[ 51.150855][ C0] n_tty_write+0xd7e/0x1280
[ 51.150862][ C0] file_tty_write+0x561/0x920
[ 51.150869][ C0] vfs_write+0xacd/0xe50
[ 51.150877][ C0] ksys_write+0x1a2/0x2c0
[ 51.150883][ C0] do_syscall_64+0x3b/0xb0
[ 51.150890][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.150898][ C0]
[ 51.150898][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}:
[ 51.150908][ C0] lock_acquire+0x1db/0x4f0
[ 51.150914][ C0] _raw_spin_lock_irqsave+0xd1/0x120
[ 51.150922][ C0] serial8250_console_write+0x19d/0x1180
[ 51.150929][ C0] console_unlock+0xced/0x12b0
[ 51.150936][ C0] vprintk_emit+0xbf/0x150
[ 51.150942][ C0] _printk+0xd1/0x120
[ 51.150950][ C0] register_console+0x65a/0x940
[ 51.150957][ C0] univ8250_console_init+0x41/0x50
[ 51.150966][ C0] console_init+0x18c/0x660
[ 51.150973][ C0] start_kernel+0x301/0x540
[ 51.150980][ C0] secondary_startup_64_no_verify+0xb1/0xbb
[ 51.150989][ C0]
[ 51.150989][ C0] -> #0 (console_owner){-...}-{0:0}:
[ 51.150999][ C0] validate_chain+0x1649/0x5930
[ 51.151006][ C0] __lock_acquire+0x1295/0x1ff0
[ 51.151012][ C0] lock_acquire+0x1db/0x4f0
[ 51.151019][ C0] console_lock_spinning_enable+0x51/0x60
[ 51.151026][ C0] console_unlock+0xa47/0x12b0
[ 51.151032][ C0] vprintk_emit+0xbf/0x150
[ 51.151039][ C0] _printk+0xd1/0x120
[ 51.151045][ C0] report_bug+0x1e5/0x2e0
[ 51.151054][ C0] handle_bug+0x3d/0x70
[ 51.151060][ C0] exc_invalid_op+0x16/0x40
[ 51.151067][ C0] asm_exc_invalid_op+0x16/0x20
[ 51.151074][ C0] copy_from_user_nofault+0x15c/0x1c0
[ 51.151082][ C0] bpf_probe_read_compat+0xe4/0x180
[ 51.151089][ C0] bpf_prog_ec105dade7fdaf27+0x35/0x710
[ 51.151096][ C0] bpf_trace_run2+0x19e/0x340
[ 51.151103][ C0] set_task_cpu+0x40f/0x480
[ 51.151111][ C0] try_to_wake_up+0x660/0x1300
[ 51.151118][ C0] hrtimer_wakeup+0x5e/0x70
[ 51.151125][ C0] __hrtimer_run_queues+0x598/0xcf0
[ 51.151132][ C0] hrtimer_interrupt+0x392/0x980
[ 51.151138][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0
[ 51.151148][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 51.151156][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 51.151164][ C0] lookup_page_ext+0x0/0x120
[ 51.151173][ C0] __set_page_owner+0x23/0x300
[ 51.151179][ C0] get_page_from_freelist+0x3b78/0x3d40
[ 51.151187][ C0] __alloc_pages+0x272/0x700
[ 51.151194][ C0] __get_free_pages+0x8/0x30
[ 51.151200][ C0] __tlb_remove_page_size+0x1fa/0x3e0
[ 51.151208][ C0] unmap_page_range+0x10d8/0x2630
[ 51.151217][ C0] unmap_vmas+0x1f8/0x390
[ 51.151224][ C0] exit_mmap+0x3b6/0x620
[ 51.151230][ C0] __mmput+0x112/0x3b0
[ 51.151236][ C0] exit_mm+0x688/0x7f0
[ 51.151244][ C0] do_exit+0x626/0x2480
[ 51.151252][ C0] do_group_exit+0x144/0x310
[ 51.151259][ C0] __x64_sys_exit_group+0x3b/0x40
[ 51.151267][ C0] do_syscall_64+0x3b/0xb0
[ 51.151273][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.151282][ C0]
[ 51.151282][ C0] other info that might help us debug this:
[ 51.151282][ C0]
[ 51.151284][ C0] Chain exists of:
[ 51.151284][ C0] console_owner --> &tty->write_wait --> &p->pi_lock
[ 51.151284][ C0]
[ 51.151295][ C0] Possible unsafe locking scenario:
[ 51.151295][ C0]
[ 51.151297][ C0] CPU0 CPU1
[ 51.151299][ C0] ---- ----
[ 51.151301][ C0] lock(&p->pi_lock);
[ 51.151305][ C0] lock(&tty->write_wait);
[ 51.151310][ C0] lock(&p->pi_lock);
[ 51.151324][ C0] lock(console_owner);
[ 51.151328][ C0]
[ 51.151328][ C0] *** DEADLOCK ***
[ 51.151328][ C0]
[ 51.151330][ C0] 4 locks held by syz-executor164/4193:
[ 51.151335][ C0] #0: ffff88802297de58 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x9c3/0x2630
[ 51.151356][ C0] #1: ffff888029d66368 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xae/0x1300
[ 51.151375][ C0] #2: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[ 51.151393][ C0] #3: ffffffff8c9fc5e0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150
[ 51.151411][ C0]
[ 51.151411][ C0] stack backtrace:
[ 51.151420][ C0] CPU: 0 PID: 4193 Comm: syz-executor164 Not tainted 5.15.175-syzkaller #0
[ 51.151428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 51.151435][ C0] Call Trace:
[ 51.151438][ C0]
[ 51.151441][ C0] dump_stack_lvl+0x1e3/0x2d0
[ 51.151451][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 51.151460][ C0] ? print_circular_bug+0x12b/0x1a0
[ 51.151469][ C0] check_noncircular+0x2f8/0x3b0
[ 51.151478][ C0] ? add_chain_block+0x850/0x850
[ 51.151486][ C0] ? lockdep_lock+0x11f/0x2a0
[ 51.151496][ C0] validate_chain+0x1649/0x5930
[ 51.151508][ C0] ? reacquire_held_locks+0x660/0x660
[ 51.151517][ C0] ? format_decode+0x72f/0x1f10
[ 51.151528][ C0] ? lockdep_unlock+0x166/0x300
[ 51.151537][ C0] ? mark_lock+0x98/0x340
[ 51.151545][ C0] __lock_acquire+0x1295/0x1ff0
[ 51.151556][ C0] lock_acquire+0x1db/0x4f0
[ 51.151562][ C0] ? console_lock_spinning_enable+0x2c/0x60
[ 51.151572][ C0] ? read_lock_is_recursive+0x10/0x10
[ 51.151580][ C0] ? console_lock_spinning_enable+0x2c/0x60
[ 51.151588][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 51.151595][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 51.151606][ C0] console_lock_spinning_enable+0x51/0x60
[ 51.151614][ C0] ? console_lock_spinning_enable+0x2c/0x60
[ 51.151621][ C0] console_unlock+0xa47/0x12b0
[ 51.151631][ C0] ? console_trylock_spinning+0x3f0/0x3f0
[ 51.151639][ C0] ? __down_trylock_console_sem+0x1f2/0x250
[ 51.151647][ C0] ? vprintk_emit+0xa6/0x150
[ 51.151654][ C0] ? printk_parse_prefix+0x2c0/0x2c0
[ 51.151662][ C0] ? vprintk_emit+0xa6/0x150
[ 51.151669][ C0] ? console_trylock+0x70/0x70
[ 51.151676][ C0] ? validate_chain+0x112/0x5930
[ 51.151686][ C0] ? vprintk_emit+0x150/0x150
[ 51.151694][ C0] ? validate_chain+0x112/0x5930
[ 51.151702][ C0] ? reacquire_held_locks+0x660/0x660
[ 51.151711][ C0] vprintk_emit+0xbf/0x150
[ 51.151719][ C0] _printk+0xd1/0x120
[ 51.151727][ C0] ? mark_lock+0x98/0x340
[ 51.151734][ C0] ? report_bug+0x16e/0x2e0
[ 51.151742][ C0] ? panic+0x860/0x860
[ 51.151749][ C0] ? __lock_acquire+0x1295/0x1ff0
[ 51.151758][ C0] ? find_bug+0x9c/0x350
[ 51.151766][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 51.151773][ C0] report_bug+0x1e5/0x2e0
[ 51.151782][ C0] handle_bug+0x3d/0x70
[ 51.151789][ C0] exc_invalid_op+0x16/0x40
[ 51.151797][ C0] asm_exc_invalid_op+0x16/0x20
[ 51.151805][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0
[ 51.151814][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff
[ 51.151821][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010006
[ 51.151828][ C0] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 51.151834][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 51.151839][ C0] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: ffffed10055463b9
[ 51.151844][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000006b9
[ 51.151849][ C0] R13: 0000000000000000 R14: 00000000000006b9 R15: ffffc90000007aa8
[ 51.151856][ C0] ? copy_from_user_nofault+0x6d/0x1c0
[ 51.151863][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 51.151872][ C0] bpf_probe_read_compat+0xe4/0x180
[ 51.151881][ C0] bpf_prog_ec105dade7fdaf27+0x35/0x710
[ 51.151888][ C0] bpf_trace_run2+0x19e/0x340
[ 51.151896][ C0] ? bpf_trace_run1+0x2f0/0x2f0
[ 51.151905][ C0] ? balance_fair+0x70/0x70
[ 51.151913][ C0] set_task_cpu+0x40f/0x480
[ 51.151922][ C0] ? is_cpu_allowed+0xe6/0x1e0
[ 51.151931][ C0] try_to_wake_up+0x660/0x1300
[ 51.151941][ C0] ? do_raw_spin_unlock+0x137/0x8b0
[ 51.151949][ C0] ? try_invoke_on_locked_down_task+0x450/0x450
[ 51.151959][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 51.151968][ C0] ? _raw_spin_unlock+0x40/0x40
[ 51.151976][ C0] ? __remove_hrtimer+0x4b0/0x4b0
[ 51.151984][ C0] hrtimer_wakeup+0x5e/0x70
[ 51.151992][ C0] __hrtimer_run_queues+0x598/0xcf0
[ 51.152002][ C0] ? hrtimer_interrupt+0x980/0x980
[ 51.152010][ C0] ? ktime_get_update_offsets_now+0x407/0x420
[ 51.152020][ C0] hrtimer_interrupt+0x392/0x980
[ 51.152032][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0
[ 51.152042][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 51.152050][ C0]
[ 51.152052][ C0]
[ 51.152055][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 51.152064][ C0] RIP: 0010:lookup_page_ext+0x0/0x120
[ 51.152072][ C0] Code: 00 48 3b 4c 24 40 75 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 7e 6c 08 e8 f9 13 ae ff 0f 0b cc cc cc cc cc cc cc <41> 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 d7
[ 51.152078][ C0] RSP: 0018:ffffc90002dbf2c8 EFLAGS: 00000293
[ 51.152084][ C0] RAX: ffffffff81d10dab RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 51.152089][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001d67cc0
[ 51.152094][ C0] RBP: ffffea0001d67cc0 R08: dffffc0000000000 R09: ffffed100eb3e600
[ 51.152100][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002800
[ 51.152104][ C0] R13: ffff88813fffb768 R14: ffffea0001d67cc0 R15: 0000000000002800
[ 51.152111][ C0] ? __set_page_owner+0x1b/0x300
[ 51.152120][ C0] __set_page_owner+0x23/0x300
[ 51.152127][ C0] ? post_alloc_hook+0x104/0x220
[ 51.152135][ C0] get_page_from_freelist+0x3b78/0x3d40
[ 51.152150][ C0] ? mark_lock+0x98/0x340
[ 51.152158][ C0] ? __alloc_pages+0x700/0x700
[ 51.152165][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 51.152173][ C0] ? prepare_alloc_pages+0x1db/0x5b0
[ 51.152183][ C0] __alloc_pages+0x272/0x700
[ 51.152191][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0
[ 51.152200][ C0] ? rcu_lock_acquire+0x30/0x30
[ 51.152208][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 51.152216][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 51.152224][ C0] ? alloc_pages+0x458/0x570
[ 51.152231][ C0] __get_free_pages+0x8/0x30
[ 51.152239][ C0] __tlb_remove_page_size+0x1fa/0x3e0
[ 51.152248][ C0] unmap_page_range+0x10d8/0x2630
[ 51.152261][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0
[ 51.152270][ C0] ? __pagevec_lru_add+0x1584/0x18d0
[ 51.152279][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 51.152286][ C0] ? uprobe_munmap+0x17a/0x400
[ 51.152296][ C0] ? unmap_single_vma+0x1a1/0x2d0
[ 51.152305][ C0] unmap_vmas+0x1f8/0x390
[ 51.152323][ C0] ? unmap_page_range+0x2630/0x2630
[ 51.152334][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200
[ 51.152342][ C0] exit_mmap+0x3b6/0x620
[ 51.152351][ C0] ? vm_brk+0x20/0x20
[ 51.152360][ C0] ? uprobe_clear_state+0x304/0x460
[ 51.152370][ C0] __mmput+0x112/0x3b0
[ 51.152378][ C0] exit_mm+0x688/0x7f0
[ 51.152386][ C0] ? _raw_spin_unlock_irq+0x2a/0x40
[ 51.152395][ C0] ? do_exit+0x2480/0x2480
[ 51.152404][ C0] ? rcu_is_watching+0x11/0xa0
[ 51.152412][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410
[ 51.152419][ C0] ? taskstats_exit+0x491/0xa10
[ 51.152427][ C0] ? tty_audit_exit+0x150/0x1f0
[ 51.152436][ C0] do_exit+0x626/0x2480
[ 51.152446][ C0] ? put_task_struct+0x80/0x80
[ 51.152454][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 51.152463][ C0] ? vtime_user_exit+0x2d1/0x400
[ 51.152474][ C0] do_group_exit+0x144/0x310
[ 51.152483][ C0] __x64_sys_exit_group+0x3b/0x40
[ 51.152492][ C0] do_syscall_64+0x3b/0xb0
[ 51.152499][ C0] ? clear_bhb_loop+0x15/0x70
[ 51.152506][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.152515][ C0] RIP: 0033:0x7f57aa6a1179
[ 51.152521][ C0] Code: Unable to access opcode bytes at RIP 0x7f57aa6a114f.
[ 51.152524][ C0] RSP: 002b:00007ffdf8d0caa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 51.152532][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57aa6a1179
[ 51.152537][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 51.152541][ C0] RBP: 00007f57aa71c350 R08: ffffffffffffffb8 R09: 00007ffdf8d0cb2c
[ 51.152547][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57aa71c350
[ 51.152552][ C0] R13: 0000000000000000 R14: 00007f57aa71cda0 R15: 00007f57aa671bb0
[ 51.152559][ C0]
[ 52.648206][ C0] WARNING: CPU: 0 PID: 4193 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0
[ 52.657466][ C0] Modules linked in:
[ 52.661331][ C0] CPU: 0 PID: 4193 Comm: syz-executor164 Not tainted 5.15.175-syzkaller #0
[ 52.669885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 52.679913][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0
[ 52.686041][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff
[ 52.705627][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010006
[ 52.711667][ C0] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 52.719610][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 52.727554][ C0] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: ffffed10055463b9
[ 52.735497][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000006b9
[ 52.743440][ C0] R13: 0000000000000000 R14: 00000000000006b9 R15: ffffc90000007aa8
[ 52.751382][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 52.760279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.766843][ C0] CR2: 00007f57aa71d1b0 CR3: 0000000020389000 CR4: 00000000003506f0
[ 52.774901][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 52.782855][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 52.790804][ C0] Call Trace:
[ 52.794062][ C0]
[ 52.796881][ C0] ? __warn+0x15b/0x300
[ 52.801012][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 52.806552][ C0] ? report_bug+0x1b7/0x2e0
[ 52.811039][ C0] ? handle_bug+0x3d/0x70
[ 52.815348][ C0] ? exc_invalid_op+0x16/0x40
[ 52.819995][ C0] ? asm_exc_invalid_op+0x16/0x20
[ 52.824996][ C0] ? copy_from_user_nofault+0x6d/0x1c0
[ 52.830428][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 52.835945][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 52.841467][ C0] bpf_probe_read_compat+0xe4/0x180
[ 52.846647][ C0] bpf_prog_ec105dade7fdaf27+0x35/0x710
[ 52.852163][ C0] bpf_trace_run2+0x19e/0x340
[ 52.856813][ C0] ? bpf_trace_run1+0x2f0/0x2f0
[ 52.861635][ C0] ? balance_fair+0x70/0x70
[ 52.866110][ C0] set_task_cpu+0x40f/0x480
[ 52.870592][ C0] ? is_cpu_allowed+0xe6/0x1e0
[ 52.875331][ C0] try_to_wake_up+0x660/0x1300
[ 52.880081][ C0] ? do_raw_spin_unlock+0x137/0x8b0
[ 52.885258][ C0] ? try_invoke_on_locked_down_task+0x450/0x450
[ 52.891472][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 52.897338][ C0] ? _raw_spin_unlock+0x40/0x40
[ 52.902162][ C0] ? __remove_hrtimer+0x4b0/0x4b0
[ 52.907163][ C0] hrtimer_wakeup+0x5e/0x70
[ 52.911634][ C0] __hrtimer_run_queues+0x598/0xcf0
[ 52.916809][ C0] ? hrtimer_interrupt+0x980/0x980
[ 52.921889][ C0] ? ktime_get_update_offsets_now+0x407/0x420
[ 52.927927][ C0] hrtimer_interrupt+0x392/0x980
[ 52.932836][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0
[ 52.938789][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 52.944396][ C0]
[ 52.947299][ C0]
[ 52.950215][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 52.956168][ C0] RIP: 0010:lookup_page_ext+0x0/0x120
[ 52.961514][ C0] Code: 00 48 3b 4c 24 40 75 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 7e 6c 08 e8 f9 13 ae ff 0f 0b cc cc cc cc cc cc cc <41> 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 d7
[ 52.981088][ C0] RSP: 0018:ffffc90002dbf2c8 EFLAGS: 00000293
[ 52.987132][ C0] RAX: ffffffff81d10dab RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 52.995075][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001d67cc0
[ 53.003022][ C0] RBP: ffffea0001d67cc0 R08: dffffc0000000000 R09: ffffed100eb3e600
[ 53.010982][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002800
[ 53.018926][ C0] R13: ffff88813fffb768 R14: ffffea0001d67cc0 R15: 0000000000002800
[ 53.026868][ C0] ? __set_page_owner+0x1b/0x300
[ 53.031781][ C0] __set_page_owner+0x23/0x300
[ 53.036518][ C0] ? post_alloc_hook+0x104/0x220
[ 53.041425][ C0] get_page_from_freelist+0x3b78/0x3d40
[ 53.046950][ C0] ? mark_lock+0x98/0x340
[ 53.051253][ C0] ? __alloc_pages+0x700/0x700
[ 53.055984][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 53.061933][ C0] ? prepare_alloc_pages+0x1db/0x5b0
[ 53.067188][ C0] __alloc_pages+0x272/0x700
[ 53.071746][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0
[ 53.077346][ C0] ? rcu_lock_acquire+0x30/0x30
[ 53.082166][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 53.087160][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 53.092154][ C0] ? alloc_pages+0x458/0x570
[ 53.096714][ C0] __get_free_pages+0x8/0x30
[ 53.101272][ C0] __tlb_remove_page_size+0x1fa/0x3e0
[ 53.106615][ C0] unmap_page_range+0x10d8/0x2630
[ 53.111614][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0
[ 53.117909][ C0] ? __pagevec_lru_add+0x1584/0x18d0
[ 53.123164][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 53.128158][ C0] ? uprobe_munmap+0x17a/0x400
[ 53.132906][ C0] ? unmap_single_vma+0x1a1/0x2d0
[ 53.137917][ C0] unmap_vmas+0x1f8/0x390
[ 53.142218][ C0] ? unmap_page_range+0x2630/0x2630
[ 53.147387][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200
[ 53.152814][ C0] exit_mmap+0x3b6/0x620
[ 53.157026][ C0] ? vm_brk+0x20/0x20
[ 53.160979][ C0] ? uprobe_clear_state+0x304/0x460
[ 53.166158][ C0] __mmput+0x112/0x3b0
[ 53.170201][ C0] exit_mm+0x688/0x7f0
[ 53.174241][ C0] ? _raw_spin_unlock_irq+0x2a/0x40
[ 53.179412][ C0] ? do_exit+0x2480/0x2480
[ 53.183796][ C0] ? rcu_is_watching+0x11/0xa0
[ 53.188527][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410
[ 53.193952][ C0] ? taskstats_exit+0x491/0xa10
[ 53.198774][ C0] ? tty_audit_exit+0x150/0x1f0
[ 53.203596][ C0] do_exit+0x626/0x2480
[ 53.207725][ C0] ? put_task_struct+0x80/0x80
[ 53.212465][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 53.218422][ C0] ? vtime_user_exit+0x2d1/0x400
[ 53.223334][ C0] do_group_exit+0x144/0x310
[ 53.227897][ C0] __x64_sys_exit_group+0x3b/0x40
[ 53.232895][ C0] do_syscall_64+0x3b/0xb0
[ 53.237282][ C0] ? clear_bhb_loop+0x15/0x70
[ 53.241930][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 53.247793][ C0] RIP: 0033:0x7f57aa6a1179
[ 53.252197][ C0] Code: Unable to access opcode bytes at RIP 0x7f57aa6a114f.
[ 53.259535][ C0] RSP: 002b:00007ffdf8d0caa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 53.267917][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57aa6a1179
[ 53.275857][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 53.283800][ C0] RBP: 00007f57aa71c350 R08: ffffffffffffffb8 R09: 00007ffdf8d0cb2c
[ 53.291747][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57aa71c350
[ 53.299777][ C0] R13: 0000000000000000 R14: 00007f57aa71cda0 R15: 00007f57aa671bb0
[ 53.307722][ C0]
[ 53.310714][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 53.317964][ C0] CPU: 0 PID: 4193 Comm: syz-executor164 Not tainted 5.15.175-syzkaller #0
[ 53.326515][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 53.336539][ C0] Call Trace:
[ 53.339792][ C0]
[ 53.342611][ C0] dump_stack_lvl+0x1e3/0x2d0
[ 53.347261][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 53.352866][ C0] ? panic+0x860/0x860
[ 53.356908][ C0] ? copy_from_user_nofault+0xc0/0x1c0
[ 53.362338][ C0] ? copy_from_user_nofault+0xc0/0x1c0
[ 53.367769][ C0] panic+0x318/0x860
[ 53.371634][ C0] ? __warn+0x16a/0x300
[ 53.375760][ C0] ? fb_is_primary_device+0xd0/0xd0
[ 53.380930][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 53.386450][ C0] __warn+0x2b2/0x300
[ 53.390400][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 53.395920][ C0] report_bug+0x1b7/0x2e0
[ 53.400222][ C0] handle_bug+0x3d/0x70
[ 53.404349][ C0] exc_invalid_op+0x16/0x40
[ 53.408822][ C0] asm_exc_invalid_op+0x16/0x20
[ 53.413643][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0
[ 53.419770][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff
[ 53.439345][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010006
[ 53.445384][ C0] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 53.453328][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 53.461270][ C0] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: ffffed10055463b9
[ 53.469210][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000006b9
[ 53.477154][ C0] R13: 0000000000000000 R14: 00000000000006b9 R15: ffffc90000007aa8
[ 53.485101][ C0] ? copy_from_user_nofault+0x6d/0x1c0
[ 53.490532][ C0] ? copy_from_user_nofault+0x15c/0x1c0
[ 53.496058][ C0] bpf_probe_read_compat+0xe4/0x180
[ 53.501230][ C0] bpf_prog_ec105dade7fdaf27+0x35/0x710
[ 53.506746][ C0] bpf_trace_run2+0x19e/0x340
[ 53.511393][ C0] ? bpf_trace_run1+0x2f0/0x2f0
[ 53.516217][ C0] ? balance_fair+0x70/0x70
[ 53.520692][ C0] set_task_cpu+0x40f/0x480
[ 53.525174][ C0] ? is_cpu_allowed+0xe6/0x1e0
[ 53.529910][ C0] try_to_wake_up+0x660/0x1300
[ 53.534644][ C0] ? do_raw_spin_unlock+0x137/0x8b0
[ 53.539829][ C0] ? try_invoke_on_locked_down_task+0x450/0x450
[ 53.546045][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 53.551911][ C0] ? _raw_spin_unlock+0x40/0x40
[ 53.556734][ C0] ? __remove_hrtimer+0x4b0/0x4b0
[ 53.561731][ C0] hrtimer_wakeup+0x5e/0x70
[ 53.566212][ C0] __hrtimer_run_queues+0x598/0xcf0
[ 53.571397][ C0] ? hrtimer_interrupt+0x980/0x980
[ 53.576486][ C0] ? ktime_get_update_offsets_now+0x407/0x420
[ 53.582528][ C0] hrtimer_interrupt+0x392/0x980
[ 53.587442][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0
[ 53.593396][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 53.599014][ C0]
[ 53.601929][ C0]
[ 53.604835][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 53.610791][ C0] RIP: 0010:lookup_page_ext+0x0/0x120
[ 53.616145][ C0] Code: 00 48 3b 4c 24 40 75 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 7e 6c 08 e8 f9 13 ae ff 0f 0b cc cc cc cc cc cc cc <41> 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 d7
[ 53.635720][ C0] RSP: 0018:ffffc90002dbf2c8 EFLAGS: 00000293
[ 53.641760][ C0] RAX: ffffffff81d10dab RBX: 0000000000000000 RCX: ffff88802aa31dc0
[ 53.649706][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001d67cc0
[ 53.657650][ C0] RBP: ffffea0001d67cc0 R08: dffffc0000000000 R09: ffffed100eb3e600
[ 53.665594][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002800
[ 53.673661][ C0] R13: ffff88813fffb768 R14: ffffea0001d67cc0 R15: 0000000000002800
[ 53.681620][ C0] ? __set_page_owner+0x1b/0x300
[ 53.686538][ C0] __set_page_owner+0x23/0x300
[ 53.691271][ C0] ? post_alloc_hook+0x104/0x220
[ 53.696182][ C0] get_page_from_freelist+0x3b78/0x3d40
[ 53.701710][ C0] ? mark_lock+0x98/0x340
[ 53.706044][ C0] ? __alloc_pages+0x700/0x700
[ 53.710779][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 53.716736][ C0] ? prepare_alloc_pages+0x1db/0x5b0
[ 53.721997][ C0] __alloc_pages+0x272/0x700
[ 53.726557][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0
[ 53.731813][ C0] ? rcu_lock_acquire+0x30/0x30
[ 53.736637][ C0] ? do_raw_spin_lock+0x14a/0x370
[ 53.741633][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 53.746628][ C0] ? alloc_pages+0x458/0x570
[ 53.751187][ C0] __get_free_pages+0x8/0x30
[ 53.755747][ C0] __tlb_remove_page_size+0x1fa/0x3e0
[ 53.761089][ C0] unmap_page_range+0x10d8/0x2630
[ 53.766092][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0
[ 53.772408][ C0] ? __pagevec_lru_add+0x1584/0x18d0
[ 53.777665][ C0] ? __lock_acquire+0x1ff0/0x1ff0
[ 53.782657][ C0] ? uprobe_munmap+0x17a/0x400
[ 53.787403][ C0] ? unmap_single_vma+0x1a1/0x2d0
[ 53.792412][ C0] unmap_vmas+0x1f8/0x390
[ 53.796717][ C0] ? unmap_page_range+0x2630/0x2630
[ 53.801891][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200
[ 53.807325][ C0] exit_mmap+0x3b6/0x620
[ 53.811538][ C0] ? vm_brk+0x20/0x20
[ 53.815494][ C0] ? uprobe_clear_state+0x304/0x460
[ 53.820662][ C0] __mmput+0x112/0x3b0
[ 53.824707][ C0] exit_mm+0x688/0x7f0
[ 53.828747][ C0] ? _raw_spin_unlock_irq+0x2a/0x40
[ 53.833918][ C0] ? do_exit+0x2480/0x2480
[ 53.838305][ C0] ? rcu_is_watching+0x11/0xa0
[ 53.843054][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410
[ 53.848486][ C0] ? taskstats_exit+0x491/0xa10
[ 53.853307][ C0] ? tty_audit_exit+0x150/0x1f0
[ 53.858133][ C0] do_exit+0x626/0x2480
[ 53.862262][ C0] ? put_task_struct+0x80/0x80
[ 53.866999][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 53.872963][ C0] ? vtime_user_exit+0x2d1/0x400
[ 53.877887][ C0] do_group_exit+0x144/0x310
[ 53.882450][ C0] __x64_sys_exit_group+0x3b/0x40
[ 53.887446][ C0] do_syscall_64+0x3b/0xb0
[ 53.891833][ C0] ? clear_bhb_loop+0x15/0x70
[ 53.896482][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 53.902346][ C0] RIP: 0033:0x7f57aa6a1179
[ 53.906733][ C0] Code: Unable to access opcode bytes at RIP 0x7f57aa6a114f.
[ 53.914067][ C0] RSP: 002b:00007ffdf8d0caa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 53.922451][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57aa6a1179
[ 53.930398][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 53.938339][ C0] RBP: 00007f57aa71c350 R08: ffffffffffffffb8 R09: 00007ffdf8d0cb2c
[ 53.946282][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57aa71c350
[ 53.954227][ C0] R13: 0000000000000000 R14: 00007f57aa71cda0 R15: 00007f57aa671bb0
[ 53.962174][ C0]
[ 53.965447][ C0] Kernel Offset: disabled
[ 53.969768][ C0] Rebooting in 86400 seconds..