Kernel pa[ 86.705657][ T5810] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __schedule+0x2543/0x4b30
Oops: general protection fault, probably for non-canonical address 0xdffffbff8e7d1b20: 0000 [#1] PREEMPT SMP KASAN PTI
------------[ cut here ]------------
precision 72119239 too large
WARNING: CPU: 0 PID: 5810 at lib/vsprintf.c:2721 set_precision lib/vsprintf.c:2721 [inline]
WARNING: CPU: 0 PID: 5810 at lib/vsprintf.c:2721 vsnprintf+0x1685/0x1da0 lib/vsprintf.c:2797
Modules linked in:
CPU: 0 UID: 0 PID: 5810 Comm: syz.1.97 Tainted: G B 6.11.0-rc4-next-20240822-syzkaller #0
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:set_precision lib/vsprintf.c:2721 [inline]
RIP: 0010:vsnprintf+0x1685/0x1da0 lib/vsprintf.c:2797
Code: 33 9d f5 90 0f 0b 90 90 e9 83 f6 ff ff e8 33 90 db f5 c6 05 f4 7f 4d 04 01 90 48 c7 c7 40 a9 34 8d 44 89 fe e8 5c 33 9d f5 90 <0f> 0b 90 90 e9 4f f9 ff ff 44 89 e1 80 e1 07 38 c1 0f 8c bf fe ff
RSP: 0000:ffffc900044c6cc0 EFLAGS: 00010046
RAX: 74872235db83aa00 RBX: 00000000000073c7 RCX: ffff88801af51e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900044c6db0 R08: ffffffff8155a632 R09: 1ffff1101720519a
R10: dffffc0000000000 R11: ffffed101720519b R12: ffffffff8d3457d1
R13: 73c7000000000000 R14: 00000a00ffffff02 R15: 00000000044c73c7
FS: 000055558df8b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32518ff8 CR3: 000000002aaa4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vprintk_store+0x480/0x1160 kernel/printk/printk.c:2255
vprintk_emit+0x39b/0xa10 kernel/printk/printk.c:2378
_printk+0xd5/0x120 kernel/printk/printk.c:2424
irq event stamp: 2842
hardirqs last enabled at (2841): [] asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
hardirqs last disabled at (2842): [] irqentry_enter+0x13/0x60 kernel/entry/common.c:243
softirqs last enabled at (2460): [] local_bh_disable include/linux/bottom_half.h:20 [inline]
softirqs last enabled at (2460): [] fpregs_lock arch/x86/include/asm/fpu/api.h:72 [inline]
softirqs last enabled at (2460): [] fpu_clone+0x25b/0xad0 arch/x86/kernel/fpu/core.c:630
softirqs last disabled at (2458): [] local_bh_disable include/linux/bottom_half.h:20 [inline]
softirqs last disabled at (2458): [] fpregs_lock arch/x86/include/asm/fpu/api.h:72 [inline]
softirqs last disabled at (2458): [] fpu_clone+0x25b/0xad0 arch/x86/kernel/fpu/core.c:630
---[ end trace 0000000000000000 ]---
Oops: general protection fault, probably for non-canonical address 0xdffffc0000020204: 0000 [#2] PREEMPT SMP KASAN PTI
KASAN: probably user-memory-access in range [0x0000000000101020-0x0000000000101027]
CPU: 0 UID: 0 PID: 5810 Comm: syz.1.97 Tainted: G B W 6.11.0-rc4-next-20240822-syzkaller #0
Tainted: [B]=BAD_PAGE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:string_nocheck lib/vsprintf.c:646 [inline]
RIP: 0010:string+0x1a5/0x2b0 lib/vsprintf.c:728
Code: 85 c0 0f 84 db 00 00 00 4c 89 7c 24 08 49 89 c7 49 ff cf 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 5d 4c 8d 6c 1d 00 41 0f b6 2c 1c 31 ff 89 ee
RSP: 0000:ffffc900044c6bf0 EFLAGS: 00010002
RAX: 0000000000020204 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: ffff88801af51e00 RSI: ffffffffffffffff RDI: 0000000000101020
RBP: ffffffff94fc424f R08: ffffffff8bb894a7 R09: ffffffff8bb85b44
R10: 0000000000000012 R11: ffff88801af51e00 R12: 0000000000101020
R13: 0000000000000000 R14: ffffffff94fc424f R15: fffffffffffffffe
FS: 000055558df8b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32518ff8 CR3: 000000002aaa4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
vsnprintf+0x1101/0x1da0 lib/vsprintf.c:2824
vscnprintf+0x42/0x90 lib/vsprintf.c:2930
printk_sprint+0x31/0x4b0 kernel/printk/printk.c:2192
vprintk_store+0x984/0x1160 kernel/printk/printk.c:2306
vprintk_emit+0x39b/0xa10 kernel/printk/printk.c:2378
_printk+0xd5/0x120 kernel/printk/printk.c:2424
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:serial_in drivers/tty/serial/8250/8250.h:137 [inline]
RIP: 0010:serial_lsr_in drivers/tty/serial/8250/8250.h:159 [inline]
RIP: 0010:wait_for_lsr drivers/tty/serial/8250/8250_port.c:2068 [inline]
RIP: 0010:serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3315 [inline]
RIP: 0010:serial8250_console_write+0x1350/0x1ed0 drivers/tty/serial/8250/8250_port.c:3393
Code: 76 06 e8 83 0c 4f fc e8 8e 18 4f fc 48 8b 44 24 58 42 0f b6 04 20 84 c0 75 7d 48 8b 44 24 20 0f b7 18 48 8b 84 24 b0 00 00 00 <42> 80 3c 20 00 74 0d 48 8b bc 24 a8 00 00 00 e8 bc 5d b7 fc 4d 8b
RSP: 0000:ffffc900044c74e0 EFLAGS: 00010046
RAX: ffffffff8e7d1b20 RBX: 0000000000000000 RCX: ffff88801af51e00
RDX: 0000000000000000 RSI: 0000000000000cfc RDI: 0000000000000000
RBP: ffffc900044c76b0 R08: ffffffff815e29e5 R09: 1ffff110040c4046
R10: dffffc0000000000 R11: ffffffff8bbb6190 R12: dffffc0000000000
R13: ffffffff94fd5ee0 R14: 0000000000002654 R15: ffffffff952dae60
FS: 000055558df8b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32518ff8 CR3: 000000002aaa4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 85 c0 test %eax,%eax
2: 0f 84 db 00 00 00 je 0xe3
8: 4c 89 7c 24 08 mov %r15,0x8(%rsp)
d: 49 89 c7 mov %rax,%r15
10: 49 ff cf dec %r15
13: 31 db xor %ebx,%ebx
15: 49 8d 3c 1c lea (%r12,%rbx,1),%rdi
19: 48 89 f8 mov %rdi,%rax
1c: 48 c1 e8 03 shr $0x3,%rax
20: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx
27: fc ff df
* 2a: 0f b6 04 08 movzbl (%rax,%rcx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 5d jne 0x8f
32: 4c 8d 6c 1d 00 lea 0x0(%rbp,%rbx,1),%r13
37: 41 0f b6 2c 1c movzbl (%r12,%rbx,1),%ebp
3c: 31 ff xor %edi,%edi
3e: 89 ee mov %ebp,%esi