Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts.
executing program
syzkaller login: [   51.337812][ T3541] kernel profiling enabled (shift: 0)
[   51.353196][    C1] ==================================================================
[   51.361382][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0
[   51.368499][    C1] Read of size 8 at addr ffffc90003baf0e0 by task syz-executor338/3541
[   51.376712][    C1] 
[   51.379012][    C1] CPU: 1 PID: 3541 Comm: syz-executor338 Not tainted 6.1.69-syzkaller #0
[   51.387395][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   51.397431][    C1] Call Trace:
[   51.400690][    C1]  <IRQ>
[   51.403603][    C1]  dump_stack_lvl+0x1e3/0x2cb
[   51.408361][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[   51.413799][    C1]  ? panic+0x75d/0x75d
[   51.417869][    C1]  ? _printk+0xd1/0x111
[   51.422010][    C1]  print_report+0x15f/0x4f0
[   51.426493][    C1]  ? __virt_addr_valid+0xb9/0x2e0
[   51.431509][    C1]  ? profile_pc+0xa4/0xe0
[   51.435841][    C1]  kasan_report+0x136/0x160
[   51.440322][    C1]  ? profile_pc+0xa4/0xe0
[   51.444628][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   51.450498][    C1]  profile_pc+0xa4/0xe0
[   51.454633][    C1]  profile_tick+0xee/0x170
[   51.459050][    C1]  tick_sched_timer+0x390/0x550
[   51.463887][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   51.469411][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[   51.474592][    C1]  ? hrtimer_interrupt+0x980/0x980
[   51.479677][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[   51.485721][    C1]  hrtimer_interrupt+0x392/0x980
[   51.490639][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[   51.496596][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   51.502204][    C1]  </IRQ>
[   51.505113][    C1]  <TASK>
[   51.508021][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   51.513981][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   51.520464][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 e2 af 4d f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 87 fd c9 f6 65 8b 05 08 30 6e 75 85 c0 74 3f 48 c7 04 24 0e 36
[   51.540043][    C1] RSP: 0018:ffffc90003baf0e0 EFLAGS: 00000206
[   51.546086][    C1] RAX: ac75560ca61e3000 RBX: 1ffff92000775e20 RCX: ffffffff816ab80a
[   51.554038][    C1] RDX: dffffc0000000000 RSI: ffffffff8aebe6c0 RDI: 0000000000000001
[   51.561984][    C1] RBP: ffffc90003baf170 R08: dffffc0000000000 R09: fffffbfff2091e45
[   51.569932][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   51.577881][    C1] R13: 1ffff92000775e1c R14: ffffc90003baf100 R15: 0000000000000246
[   51.585831][    C1]  ? mark_lock+0x9a/0x340
[   51.590148][    C1]  ? _raw_spin_unlock+0x40/0x40
[   51.594975][    C1]  ? __mod_zone_page_state+0xd6/0x140
[   51.600327][    C1]  __rmqueue_pcplist+0x2023/0x2310
[   51.605430][    C1]  ? zone_watermark_fast+0x240/0x240
[   51.610697][    C1]  get_page_from_freelist+0x86c/0x3320
[   51.616143][    C1]  ? __alloc_pages+0x16a/0x770
[   51.620995][    C1]  ? mark_lock+0x9a/0x340
[   51.625306][    C1]  ? __might_sleep+0xb0/0xb0
[   51.629876][    C1]  ? fs_reclaim_acquire+0x8e/0x120
[   51.635051][    C1]  ? __alloc_pages+0x770/0x770
[   51.639788][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   51.645048][    C1]  __alloc_pages+0x28d/0x770
[   51.649615][    C1]  ? zone_statistics+0x160/0x160
[   51.654620][    C1]  ? do_raw_spin_lock+0x14a/0x370
[   51.659621][    C1]  ? alloc_pages+0x50c/0x770
[   51.664193][    C1]  __get_free_pages+0x8/0x30
[   51.668760][    C1]  kasan_populate_vmalloc_pte+0x35/0xf0
[   51.674282][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   51.679718][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   51.684981][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   51.690338][    C1]  alloc_vmap_area+0x1977/0x1ac0
[   51.695257][    C1]  ? vm_map_ram+0xb20/0xb20
[   51.699832][    C1]  __get_vm_area_node+0x16c/0x360
[   51.704844][    C1]  __vmalloc_node_range+0x394/0x1460
[   51.710112][    C1]  ? profile_init+0xfa/0x160
[   51.714679][    C1]  ? __alloc_pages+0xba/0x770
[   51.719331][    C1]  ? memset+0x1f/0x40
[   51.723294][    C1]  ? __alloc_pages+0xba/0x770
[   51.728032][    C1]  ? zone_statistics+0x160/0x160
[   51.732941][    C1]  ? free_vm_area+0x50/0x50
[   51.737424][    C1]  ? profile_init+0xfa/0x160
[   51.741994][    C1]  ? sysfs_kf_read+0x300/0x300
[   51.746749][    C1]  vzalloc+0x75/0x80
[   51.750624][    C1]  ? profile_init+0xfa/0x160
[   51.755189][    C1]  profile_init+0xfa/0x160
[   51.759582][    C1]  profiling_store+0x5a/0xc0
[   51.764150][    C1]  kernfs_fop_write_iter+0x3a2/0x4f0
[   51.769419][    C1]  vfs_write+0x7ae/0xba0
[   51.773641][    C1]  ? file_end_write+0x250/0x250
[   51.778471][    C1]  ? __fdget_pos+0x2c1/0x360
[   51.783036][    C1]  ksys_write+0x19c/0x2c0
[   51.787342][    C1]  ? print_irqtrace_events+0x210/0x210
[   51.792780][    C1]  ? __ia32_sys_read+0x80/0x80
[   51.797519][    C1]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.803478][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[   51.808651][    C1]  ? syscall_enter_from_user_mode+0x2e/0x220
[   51.814611][    C1]  do_syscall_64+0x3d/0xb0
[   51.819004][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.824876][    C1] RIP: 0033:0x7ff3e7a9b569
[   51.829276][    C1] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   51.848859][    C1] RSP: 002b:00007ffcf78a6ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.857251][    C1] RAX: ffffffffffffffda RBX: 00007ff3e7ae4017 RCX: 00007ff3e7a9b569
[   51.865202][    C1] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003
[   51.873152][    C1] RBP: 00007ff3e7b0e610 R08: 00007ffcf78a6874 R09: 00007ffcf78a6cb8
[   51.881122][    C1] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[   51.889071][    C1] R13: 00007ffcf78a6ca8 R14: 0000000000000001 R15: 0000000000000001
[   51.897025][    C1]  </TASK>
[   51.900033][    C1] 
[   51.902342][    C1] The buggy address belongs to stack of task syz-executor338/3541
[   51.910134][    C1]  and is located at offset 0 in frame:
[   51.915648][    C1]  _raw_spin_unlock_irqrestore+0x0/0x130
[   51.921272][    C1] 
[   51.923591][    C1] This frame has 1 object:
[   51.927979][    C1]  [32, 40) 'flags.i.i.i.i'
[   51.927986][    C1] 
[   51.934753][    C1] The buggy address belongs to the virtual mapping at
[   51.934753][    C1]  [ffffc90003ba8000, ffffc90003bb1000) created by:
[   51.934753][    C1]  copy_process+0x637/0x4060
[   51.952344][    C1] 
[   51.954735][    C1] The buggy address belongs to the physical page:
[   51.961120][    C1] page:ffffea0001e2c840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78b21
[   51.971242][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   51.978332][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   51.986890][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   51.995444][    C1] page dumped because: kasan: bad access detected
[   52.001830][    C1] page_owner tracks the page as allocated
[   52.007519][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3484, tgid 3484 (dhcpcd-run-hook), ts 41821991489, free_ts 41650629823
[   52.026934][    C1]  post_alloc_hook+0x18d/0x1b0
[   52.031695][    C1]  get_page_from_freelist+0x31a1/0x3320
[   52.037212][    C1]  __alloc_pages+0x28d/0x770
[   52.041774][    C1]  __vmalloc_node_range+0x96c/0x1460
[   52.047033][    C1]  dup_task_struct+0x3e5/0x6d0
[   52.051770][    C1]  copy_process+0x637/0x4060
[   52.056336][    C1]  kernel_clone+0x222/0x920
[   52.060810][    C1]  __x64_sys_clone+0x231/0x280
[   52.065552][    C1]  do_syscall_64+0x3d/0xb0
[   52.069943][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   52.075823][    C1] page last free stack trace:
[   52.080642][    C1]  free_unref_page_prepare+0xf63/0x1120
[   52.086167][    C1]  free_unref_page_list+0x663/0x900
[   52.091341][    C1]  release_pages+0x2836/0x2b40
[   52.096080][    C1]  tlb_flush_mmu+0xfc/0x210
[   52.100558][    C1]  tlb_finish_mmu+0xce/0x1f0
[   52.105122][    C1]  exit_mmap+0x3c3/0x9f0
[   52.109343][    C1]  __mmput+0x115/0x3c0
[   52.113387][    C1]  exit_mm+0x226/0x300
[   52.117453][    C1]  do_exit+0x9f6/0x26a0
[   52.121585][    C1]  do_group_exit+0x202/0x2b0
[   52.126150][    C1]  __x64_sys_exit_group+0x3b/0x40
[   52.131150][    C1]  do_syscall_64+0x3d/0xb0
[   52.135551][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   52.141423][    C1] 
[   52.143764][    C1] Memory state around the buggy address:
[   52.149366][    C1]  ffffc90003baef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   52.157418][    C1]  ffffc90003baf000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   52.165469][    C1] >ffffc90003baf080: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[   52.173509][    C1]                                                        ^
[   52.180680][    C1]  ffffc90003baf100: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[   52.188735][    C1]  ffffc90003baf180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   52.196772][    C1] ==================================================================
[   52.204897][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   52.212067][    C1] CPU: 1 PID: 3541 Comm: syz-executor338 Not tainted 6.1.69-syzkaller #0
[   52.220470][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   52.230521][    C1] Call Trace:
[   52.233783][    C1]  <IRQ>
[   52.236611][    C1]  dump_stack_lvl+0x1e3/0x2cb
[   52.241303][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[   52.246824][    C1]  ? panic+0x75d/0x75d
[   52.250882][    C1]  ? rcu_is_watching+0x11/0xb0
[   52.255632][    C1]  ? lock_release+0xd6/0xa20
[   52.260216][    C1]  ? vscnprintf+0x59/0x80
[   52.264554][    C1]  panic+0x318/0x75d
[   52.268429][    C1]  ? __wake_up_klogd+0xcc/0x100
[   52.273257][    C1]  ? check_panic_on_warn+0x1d/0xa0
[   52.278362][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[   52.283717][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[   52.288918][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   52.294796][    C1]  ? _raw_spin_unlock+0x40/0x40
[   52.299626][    C1]  check_panic_on_warn+0x7e/0xa0
[   52.304551][    C1]  ? profile_pc+0xa4/0xe0
[   52.308861][    C1]  end_report+0x66/0x110
[   52.313103][    C1]  kasan_report+0x143/0x160
[   52.317607][    C1]  ? profile_pc+0xa4/0xe0
[   52.321918][    C1]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[   52.327792][    C1]  profile_pc+0xa4/0xe0
[   52.331926][    C1]  profile_tick+0xee/0x170
[   52.336331][    C1]  tick_sched_timer+0x390/0x550
[   52.341250][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   52.346779][    C1]  __hrtimer_run_queues+0x5a7/0xe50
[   52.351962][    C1]  ? hrtimer_interrupt+0x980/0x980
[   52.357054][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[   52.363100][    C1]  hrtimer_interrupt+0x392/0x980
[   52.368023][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[   52.374008][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[   52.379618][    C1]  </IRQ>
[   52.382526][    C1]  <TASK>
[   52.385440][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[   52.391402][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[   52.397899][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 e2 af 4d f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 87 fd c9 f6 65 8b 05 08 30 6e 75 85 c0 74 3f 48 c7 04 24 0e 36
[   52.417581][    C1] RSP: 0018:ffffc90003baf0e0 EFLAGS: 00000206
[   52.423627][    C1] RAX: ac75560ca61e3000 RBX: 1ffff92000775e20 RCX: ffffffff816ab80a
[   52.431574][    C1] RDX: dffffc0000000000 RSI: ffffffff8aebe6c0 RDI: 0000000000000001
[   52.439525][    C1] RBP: ffffc90003baf170 R08: dffffc0000000000 R09: fffffbfff2091e45
[   52.447567][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   52.455518][    C1] R13: 1ffff92000775e1c R14: ffffc90003baf100 R15: 0000000000000246
[   52.463472][    C1]  ? mark_lock+0x9a/0x340
[   52.467795][    C1]  ? _raw_spin_unlock+0x40/0x40
[   52.472623][    C1]  ? __mod_zone_page_state+0xd6/0x140
[   52.477973][    C1]  __rmqueue_pcplist+0x2023/0x2310
[   52.483071][    C1]  ? zone_watermark_fast+0x240/0x240
[   52.488333][    C1]  get_page_from_freelist+0x86c/0x3320
[   52.493778][    C1]  ? __alloc_pages+0x16a/0x770
[   52.498522][    C1]  ? mark_lock+0x9a/0x340
[   52.502829][    C1]  ? __might_sleep+0xb0/0xb0
[   52.507399][    C1]  ? fs_reclaim_acquire+0x8e/0x120
[   52.512489][    C1]  ? __alloc_pages+0x770/0x770
[   52.517228][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   52.522496][    C1]  __alloc_pages+0x28d/0x770
[   52.527061][    C1]  ? zone_statistics+0x160/0x160
[   52.531973][    C1]  ? do_raw_spin_lock+0x14a/0x370
[   52.536978][    C1]  ? alloc_pages+0x50c/0x770
[   52.541563][    C1]  __get_free_pages+0x8/0x30
[   52.546128][    C1]  kasan_populate_vmalloc_pte+0x35/0xf0
[   52.551736][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   52.557176][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   52.562440][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   52.567810][    C1]  alloc_vmap_area+0x1977/0x1ac0
[   52.572729][    C1]  ? vm_map_ram+0xb20/0xb20
[   52.577213][    C1]  __get_vm_area_node+0x16c/0x360
[   52.582214][    C1]  __vmalloc_node_range+0x394/0x1460
[   52.587477][    C1]  ? profile_init+0xfa/0x160
[   52.592045][    C1]  ? __alloc_pages+0xba/0x770
[   52.596700][    C1]  ? memset+0x1f/0x40
[   52.600657][    C1]  ? __alloc_pages+0xba/0x770
[   52.605311][    C1]  ? zone_statistics+0x160/0x160
[   52.610230][    C1]  ? free_vm_area+0x50/0x50
[   52.614738][    C1]  ? profile_init+0xfa/0x160
[   52.619311][    C1]  ? sysfs_kf_read+0x300/0x300
[   52.624055][    C1]  vzalloc+0x75/0x80
[   52.627935][    C1]  ? profile_init+0xfa/0x160
[   52.632499][    C1]  profile_init+0xfa/0x160
[   52.636893][    C1]  profiling_store+0x5a/0xc0
[   52.641464][    C1]  kernfs_fop_write_iter+0x3a2/0x4f0
[   52.646727][    C1]  vfs_write+0x7ae/0xba0
[   52.650976][    C1]  ? file_end_write+0x250/0x250
[   52.655811][    C1]  ? __fdget_pos+0x2c1/0x360
[   52.660378][    C1]  ksys_write+0x19c/0x2c0
[   52.664684][    C1]  ? print_irqtrace_events+0x210/0x210
[   52.670123][    C1]  ? __ia32_sys_read+0x80/0x80
[   52.674879][    C1]  ? syscall_enter_from_user_mode+0x2e/0x220
[   52.680834][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[   52.686008][    C1]  ? syscall_enter_from_user_mode+0x2e/0x220
[   52.691960][    C1]  do_syscall_64+0x3d/0xb0
[   52.696354][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   52.702231][    C1] RIP: 0033:0x7ff3e7a9b569
[   52.706627][    C1] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   52.726212][    C1] RSP: 002b:00007ffcf78a6ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   52.734602][    C1] RAX: ffffffffffffffda RBX: 00007ff3e7ae4017 RCX: 00007ff3e7a9b569
[   52.742551][    C1] RDX: 0000000000000048 RSI: 0000000020002480 RDI: 0000000000000003
[   52.750497][    C1] RBP: 00007ff3e7b0e610 R08: 00007ffcf78a6874 R09: 00007ffcf78a6cb8
[   52.758449][    C1] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[   52.766402][    C1] R13: 00007ffcf78a6ca8 R14: 0000000000000001 R15: 0000000000000001
[   52.774369][    C1]  </TASK>
[   52.777631][    C1] Kernel Offset: disabled
[   52.781938][    C1] Rebooting in 86400 seconds..