./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1023588621
<...>
Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts.
execve("./syz-executor1023588621", ["./syz-executor1023588621"], 0x7ffe0feb26f0 /* 10 vars */) = 0
brk(NULL) = 0x555573b71000
brk(0x555573b71d00) = 0x555573b71d00
arch_prctl(ARCH_SET_FS, 0x555573b71380) = 0
set_tid_address(0x555573b71650) = 5080
set_robust_list(0x555573b71660, 24) = 0
rseq(0x555573b71ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1023588621", 4096) = 28
getrandom("\x1b\x72\x38\x12\x30\x9a\x48\x58", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555573b71d00
brk(0x555573b92d00) = 0x555573b92d00
brk(0x555573b93000) = 0x555573b93000
mprotect(0x7fa74730e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5080}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5) = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5) = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
close(5) = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
close(5) = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5080}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(3) = 0
close(4) = 0
openat(AT_FDCWD, "/sys/kernel/profiling", O_RDWR|O_CREAT|O_NOFOLLOW|FASYNC, 000) = 3
[ 63.978975][ T5080] kernel profiling enabled (shift: 3)
[ 63.994102][ C0] ==================================================================
[ 64.002187][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170
[ 64.009491][ C0] Read of size 8 at addr ffffc90003446f20 by task syz-executor102/5080
[ 64.018927][ C0]
[ 64.021245][ C0] CPU: 0 PID: 5080 Comm: syz-executor102 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0
[ 64.031660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 64.041703][ C0] Call Trace:
[ 64.044974][ C0]
[ 64.047801][ C0] dump_stack_lvl+0x241/0x360
[ 64.052504][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.057892][ C0] ? __pfx__printk+0x10/0x10
[ 64.062590][ C0] ? _printk+0xd5/0x120
[ 64.066762][ C0] print_report+0x169/0x550
[ 64.071347][ C0] ? rcu_read_lock_sched_held+0x8d/0x130
[ 64.076982][ C0] ? __virt_addr_valid+0xbd/0x520
[ 64.082027][ C0] ? profile_pc+0xd2/0x170
[ 64.086620][ C0] kasan_report+0x143/0x180
[ 64.091120][ C0] ? profile_pc+0xd2/0x170
[ 64.095535][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 64.101434][ C0] profile_pc+0xd2/0x170
[ 64.105694][ C0] profile_tick+0xd7/0x150
[ 64.110493][ C0] tick_nohz_handler+0x386/0x500
[ 64.115547][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 64.121050][ C0] __hrtimer_run_queues+0x55b/0xd50
[ 64.126350][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 64.132120][ C0] ? ktime_get_update_offsets_now+0x411/0x430
[ 64.138206][ C0] hrtimer_interrupt+0x396/0x990
[ 64.143165][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 64.149269][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 64.157511][ C0]
[ 64.163211][ C0]
[ 64.166147][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 64.172734][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[ 64.179348][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e a5 6f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 ab da f5 65 8b 05 34 d8 78 74 85 c0 74 43 48 c7 04 24 0e 36
[ 64.202437][ C0] RSP: 0018:ffffc90003446f20 EFLAGS: 00000206
[ 64.208505][ C0] RAX: 005aea1cd6d54c00 RBX: 1ffff92000688de8 RCX: ffffffff8172edda
[ 64.216554][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcab8a0 RDI: 0000000000000001
[ 64.224511][ C0] RBP: ffffc90003446fb0 R08: ffffffff92f35507 R09: 1ffffffff25e6aa0
[ 64.232470][ C0] R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: dffffc0000000000
[ 64.240868][ C0] R13: 1ffff92000688de4 R14: ffffc90003446f40 R15: 0000000000000246
[ 64.248923][ C0] ? mark_lock+0x9a/0x350
[ 64.253258][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 64.259603][ C0] ? __mod_zone_page_state+0xda/0x150
[ 64.265062][ C0] __rmqueue_pcplist+0x216d/0x2620
[ 64.270538][ C0] ? __pfx___rmqueue_pcplist+0x10/0x10
[ 64.275995][ C0] get_page_from_freelist+0x856/0x35b0
[ 64.281542][ C0] ? __pfx___might_resched+0x10/0x10
[ 64.286839][ C0] ? fs_reclaim_acquire+0x93/0x140
[ 64.292031][ C0] ? __pfx_get_page_from_freelist+0x10/0x10
[ 64.297915][ C0] ? prepare_alloc_pages+0x1da/0x5d0
[ 64.303201][ C0] __alloc_pages+0x256/0x6c0
[ 64.307784][ C0] ? __pfx___alloc_pages+0x10/0x10
[ 64.312896][ C0] ? policy_nodemask+0x2b0/0x800
[ 64.317834][ C0] alloc_pages_mpol+0x3e8/0x680
[ 64.322684][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10
[ 64.328052][ C0] ? __pfx___pte_alloc_kernel+0x10/0x10
[ 64.333627][ C0] ? alloc_pages+0xef/0x170
[ 64.338146][ C0] __get_free_pages+0xc/0x30
[ 64.344558][ C0] kasan_populate_vmalloc_pte+0x38/0xe0
[ 64.352315][ C0] __apply_to_page_range+0x8ec/0xe40
[ 64.357649][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10
[ 64.363959][ C0] ? __pfx___apply_to_page_range+0x10/0x10
[ 64.370226][ C0] ? do_raw_spin_unlock+0x13c/0x8b0
[ 64.375715][ C0] ? kmem_cache_alloc_node+0x1e2/0x380
[ 64.381202][ C0] ? alloc_vmap_area+0x746/0x22c0
[ 64.386232][ C0] alloc_vmap_area+0x1c35/0x22c0
[ 64.391172][ C0] ? __pfx_alloc_vmap_area+0x10/0x10
[ 64.396451][ C0] ? kmalloc_node_trace+0x1fd/0x3a0
[ 64.401642][ C0] ? __get_vm_area_node+0x125/0x3c0
[ 64.406837][ C0] __get_vm_area_node+0x16e/0x3c0
[ 64.411876][ C0] __vmalloc_node_range+0x3df/0x1490
[ 64.417501][ C0] ? profile_init+0xee/0x130
[ 64.422081][ C0] ? _printk+0xd5/0x120
[ 64.426328][ C0] ? __pfx___vmalloc_node_range+0x10/0x10
[ 64.432040][ C0] ? rcu_is_watching+0x15/0xb0
[ 64.436794][ C0] ? trace_kmalloc+0x1f/0xd0
[ 64.441376][ C0] ? __kmalloc+0x251/0x4a0
[ 64.445785][ C0] ? profile_init+0xee/0x130
[ 64.450575][ C0] ? __pfx_sysfs_kf_write+0x10/0x10
[ 64.455974][ C0] vzalloc+0x79/0x90
[ 64.460758][ C0] ? profile_init+0xee/0x130
[ 64.467193][ C0] profile_init+0xee/0x130
[ 64.471725][ C0] profiling_store+0x5e/0xc0
[ 64.477739][ C0] kernfs_fop_write_iter+0x3a1/0x500
[ 64.483122][ C0] vfs_write+0xa84/0xcb0
[ 64.487380][ C0] ? __pfx_vfs_write+0x10/0x10
[ 64.492157][ C0] ? lockdep_hardirqs_on+0x99/0x150
[ 64.497620][ C0] ? __fdget_pos+0x272/0x320
[ 64.504653][ C0] ksys_write+0x1a0/0x2c0
[ 64.509008][ C0] ? __pfx_ksys_write+0x10/0x10
[ 64.513894][ C0] ? do_syscall_64+0x102/0x240
[ 64.518859][ C0] do_syscall_64+0xf5/0x240
[ 64.523560][ C0] ? clear_bhb_loop+0x35/0x90
[ 64.528307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.534302][ C0] RIP: 0033:0x7fa747296af9
[ 64.539279][ C0] Code: 48 83 c4 28 c3 e8 e7 18 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 64.559164][ C0] RSP: 002b:00007ffe02f5d9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 64.569567][ C0] RAX: ffffffffffffffda RBX: aaaaaaaaaaaa0102 RCX: 00007fa747296af9
[ 64.577762][ C0] RDX: 0000000000000015 RSI: 0000000020000040 RDI: 0000000000000003
[ 64.586263][ C0] RBP: 00007fa747314380 R08: 00007ffe02f5d757 R09: 0000000000000140
[ 64.594259][ C0] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000004
[ 64.602263][ C0] R13: 0000000000000003 R14: 00007ffe02f5d9e7 R15: 000000000000000c
[ 64.610267][ C0]
[ 64.613295][ C0]
[ 64.615615][ C0] The buggy address belongs to stack of task syz-executor102/5080
[ 64.624415][ C0] and is located at offset 0 in frame:
[ 64.630062][ C0] _raw_spin_unlock_irqrestore+0x0/0x140
[ 64.635697][ C0]
[ 64.638047][ C0] This frame has 1 object:
[ 64.642443][ C0] [32, 40) 'flags.i.i.i.i'
[ 64.642453][ C0]
[ 64.649455][ C0] The buggy address belongs to the virtual mapping at
[ 64.649455][ C0] [ffffc90003440000, ffffc90003449000) created by:
[ 64.649455][ C0] copy_process+0x5d1/0x3df0
[ 64.674209][ C0]
[ 64.676892][ C0] The buggy address belongs to the physical page:
[ 64.683373][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cadb
[ 64.692313][ C0] flags: 0xfff80000000000(node=0|zone=1|lastcpupid=0xfff)
[ 64.699639][ C0] page_type: 0xffffffff()
[ 64.704051][ C0] raw: 00fff80000000000 0000000000000000 dead000000000122 0000000000000000
[ 64.712650][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 64.721225][ C0] page dumped because: kasan: bad access detected
[ 64.727629][ C0] page_owner tracks the page as allocated
[ 64.733411][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 4750, tgid -1725619809 (dhcpcd), ts 4750, free_ts 44912258157
[ 64.752240][ C0] post_alloc_hook+0x1ea/0x210
[ 64.757001][ C0] get_page_from_freelist+0x3410/0x35b0
[ 64.762734][ C0] __alloc_pages+0x256/0x6c0
[ 64.767707][ C0] alloc_pages_mpol+0x3e8/0x680
[ 64.774894][ C0] __vmalloc_node_range+0x9a4/0x1490
[ 64.780466][ C0] dup_task_struct+0x3e9/0x7d0
[ 64.785247][ C0] copy_process+0x5d1/0x3df0
[ 64.789827][ C0] kernel_clone+0x226/0x8f0
[ 64.794321][ C0] __x64_sys_clone+0x258/0x2a0
[ 64.799108][ C0] do_syscall_64+0xf5/0x240
[ 64.803604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.809490][ C0] page last free pid 4906 tgid 4906 stack trace:
[ 64.815813][ C0] free_unref_page_prepare+0x986/0xab0
[ 64.821275][ C0] free_unref_page+0x37/0x3f0
[ 64.825947][ C0] __put_partials+0xeb/0x130
[ 64.830538][ C0] put_cpu_partial+0x17c/0x250
[ 64.835299][ C0] __slab_free+0x2ea/0x3d0
[ 64.839715][ C0] qlist_free_all+0x5e/0xc0
[ 64.844311][ C0] kasan_quarantine_reduce+0x14f/0x170
[ 64.849806][ C0] __kasan_slab_alloc+0x23/0x80
[ 64.854670][ C0] __kmalloc+0x1e2/0x4a0
[ 64.859118][ C0] tomoyo_realpath_from_path+0xcf/0x5e0
[ 64.868807][ C0] tomoyo_path_perm+0x2b7/0x740
[ 64.873720][ C0] security_inode_getattr+0xd8/0x130
[ 64.879279][ C0] vfs_getattr+0x45/0x430
[ 64.883613][ C0] vfs_fstatat+0xd6/0x190
[ 64.887932][ C0] __x64_sys_newfstatat+0x117/0x190
[ 64.893241][ C0] do_syscall_64+0xf5/0x240
[ 64.897755][ C0]
[ 64.900070][ C0] Memory state around the buggy address:
[ 64.905692][ C0] ffffc90003446e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.913743][ C0] ffffc90003446e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.921960][ C0] >ffffc90003446f00: 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00
[ 64.930004][ C0] ^
[ 64.935099][ C0] ffffc90003446f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.943146][ C0] ffffc90003447000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.951297][ C0] ==================================================================
[ 64.959376][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.966593][ C0] CPU: 0 PID: 5080 Comm: syz-executor102 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0
[ 64.979946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 64.990003][ C0] Call Trace:
[ 64.993293][ C0]
[ 64.996129][ C0] dump_stack_lvl+0x241/0x360
[ 65.000844][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 65.006043][ C0] ? __pfx__printk+0x10/0x10
[ 65.010627][ C0] ? rcu_is_watching+0x15/0xb0
[ 65.015385][ C0] ? vscnprintf+0x5d/0x90
[ 65.019706][ C0] panic+0x349/0x860
[ 65.023593][ C0] ? __pfx_lock_release+0x10/0x10
[ 65.028609][ C0] ? check_panic_on_warn+0x21/0xb0
[ 65.033715][ C0] ? __pfx_panic+0x10/0x10
[ 65.038121][ C0] ? do_raw_spin_unlock+0x13c/0x8b0
[ 65.043318][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 65.049206][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 65.055530][ C0] check_panic_on_warn+0x86/0xb0
[ 65.060475][ C0] ? profile_pc+0xd2/0x170
[ 65.064976][ C0] end_report+0x77/0x160
[ 65.069218][ C0] kasan_report+0x154/0x180
[ 65.073721][ C0] ? profile_pc+0xd2/0x170
[ 65.078133][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 65.084282][ C0] profile_pc+0xd2/0x170
[ 65.088521][ C0] profile_tick+0xd7/0x150
[ 65.092932][ C0] tick_nohz_handler+0x386/0x500
[ 65.097957][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 65.103416][ C0] __hrtimer_run_queues+0x55b/0xd50
[ 65.108621][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 65.114339][ C0] ? ktime_get_update_offsets_now+0x411/0x430
[ 65.120570][ C0] hrtimer_interrupt+0x396/0x990
[ 65.125520][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 65.131506][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 65.137134][ C0]
[ 65.140053][ C0]
[ 65.142976][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 65.149124][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[ 65.158289][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e a5 6f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 ab da f5 65 8b 05 34 d8 78 74 85 c0 74 43 48 c7 04 24 0e 36
[ 65.178963][ C0] RSP: 0018:ffffc90003446f20 EFLAGS: 00000206
[ 65.186538][ C0] RAX: 005aea1cd6d54c00 RBX: 1ffff92000688de8 RCX: ffffffff8172edda
[ 65.195565][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcab8a0 RDI: 0000000000000001
[ 65.203541][ C0] RBP: ffffc90003446fb0 R08: ffffffff92f35507 R09: 1ffffffff25e6aa0
[ 65.211504][ C0] R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: dffffc0000000000
[ 65.219470][ C0] R13: 1ffff92000688de4 R14: ffffc90003446f40 R15: 0000000000000246
[ 65.227438][ C0] ? mark_lock+0x9a/0x350
[ 65.231767][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 65.238090][ C0] ? __mod_zone_page_state+0xda/0x150
[ 65.243458][ C0] __rmqueue_pcplist+0x216d/0x2620
[ 65.248577][ C0] ? __pfx___rmqueue_pcplist+0x10/0x10
[ 65.254033][ C0] get_page_from_freelist+0x856/0x35b0
[ 65.259583][ C0] ? __pfx___might_resched+0x10/0x10
[ 65.264874][ C0] ? fs_reclaim_acquire+0x93/0x140
[ 65.269978][ C0] ? __pfx_get_page_from_freelist+0x10/0x10
[ 65.275947][ C0] ? prepare_alloc_pages+0x1da/0x5d0
[ 65.281227][ C0] __alloc_pages+0x256/0x6c0
[ 65.285812][ C0] ? __pfx___alloc_pages+0x10/0x10
[ 65.290917][ C0] ? policy_nodemask+0x2b0/0x800
[ 65.295849][ C0] alloc_pages_mpol+0x3e8/0x680
[ 65.300693][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10
[ 65.306066][ C0] ? __pfx___pte_alloc_kernel+0x10/0x10
[ 65.311607][ C0] ? alloc_pages+0xef/0x170
[ 65.316135][ C0] __get_free_pages+0xc/0x30
[ 65.321068][ C0] kasan_populate_vmalloc_pte+0x38/0xe0
[ 65.326636][ C0] __apply_to_page_range+0x8ec/0xe40
[ 65.332293][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10
[ 65.338567][ C0] ? __pfx___apply_to_page_range+0x10/0x10
[ 65.344378][ C0] ? do_raw_spin_unlock+0x13c/0x8b0
[ 65.349579][ C0] ? kmem_cache_alloc_node+0x1e2/0x380
[ 65.355645][ C0] ? alloc_vmap_area+0x746/0x22c0
[ 65.362755][ C0] alloc_vmap_area+0x1c35/0x22c0
[ 65.367710][ C0] ? __pfx_alloc_vmap_area+0x10/0x10
[ 65.373096][ C0] ? kmalloc_node_trace+0x1fd/0x3a0
[ 65.378592][ C0] ? __get_vm_area_node+0x125/0x3c0
[ 65.383814][ C0] __get_vm_area_node+0x16e/0x3c0
[ 65.388835][ C0] __vmalloc_node_range+0x3df/0x1490
[ 65.394113][ C0] ? profile_init+0xee/0x130
[ 65.398696][ C0] ? _printk+0xd5/0x120
[ 65.402852][ C0] ? __pfx___vmalloc_node_range+0x10/0x10
[ 65.408566][ C0] ? rcu_is_watching+0x15/0xb0
[ 65.413321][ C0] ? trace_kmalloc+0x1f/0xd0
[ 65.417902][ C0] ? __kmalloc+0x251/0x4a0
[ 65.422309][ C0] ? profile_init+0xee/0x130
[ 65.426891][ C0] ? __pfx_sysfs_kf_write+0x10/0x10
[ 65.432080][ C0] vzalloc+0x79/0x90
[ 65.435968][ C0] ? profile_init+0xee/0x130
[ 65.440639][ C0] profile_init+0xee/0x130
[ 65.445144][ C0] profiling_store+0x5e/0xc0
[ 65.449729][ C0] kernfs_fop_write_iter+0x3a1/0x500
[ 65.455024][ C0] vfs_write+0xa84/0xcb0
[ 65.463747][ C0] ? __pfx_vfs_write+0x10/0x10
[ 65.468582][ C0] ? lockdep_hardirqs_on+0x99/0x150
[ 65.473825][ C0] ? __fdget_pos+0x272/0x320
[ 65.478621][ C0] ksys_write+0x1a0/0x2c0
[ 65.483157][ C0] ? __pfx_ksys_write+0x10/0x10
[ 65.488287][ C0] ? do_syscall_64+0x102/0x240
[ 65.493081][ C0] do_syscall_64+0xf5/0x240
[ 65.497601][ C0] ? clear_bhb_loop+0x35/0x90
[ 65.502276][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.508185][ C0] RIP: 0033:0x7fa747296af9
[ 65.512629][ C0] Code: 48 83 c4 28 c3 e8 e7 18 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 65.532331][ C0] RSP: 002b:00007ffe02f5d9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 65.540832][ C0] RAX: ffffffffffffffda RBX: aaaaaaaaaaaa0102 RCX: 00007fa747296af9
[ 65.548794][ C0] RDX: 0000000000000015 RSI: 0000000020000040 RDI: 0000000000000003
[ 65.556758][ C0] RBP: 00007fa747314380 R08: 00007ffe02f5d757 R09: 0000000000000140
[ 65.571085][ C0] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000004
[ 65.579458][ C0] R13: 0000000000000003 R14: 00007ffe02f5d9e7 R15: 000000000000000c
[ 65.587464][ C0]
[ 65.590839][ C0] Kernel Offset: disabled
[ 65.595179][ C0] Rebooting in 86400 seconds..