bisecting cause commit starting from ad347abe4a9876b1f65f408ab467137e88f77eb4
building syzkaller on 1ba81399e2d03b53a7e631c4ab05f25af1fb1911
testing commit ad347abe4a9876b1f65f408ab467137e88f77eb4 with gcc (GCC) 10.2.1 20210217
kernel signature: c2d8cc2b680573b1fe5880a753a4343e3571c3459ec88ea869c66fc676422b4e
run #0: crashed: KASAN: out-of-bounds Read in __show_regs
run #1: crashed: BUG: sleeping function called from invalid context in lock_sock_nested
run #2: crashed: BUG: sleeping function called from invalid context in lock_sock_nested
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: crashed: BUG: sleeping function called from invalid context in lock_sock_nested
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
reproducer seems to be flaky
testing release v5.12
testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 with gcc (GCC) 10.2.1 20210217
kernel signature: 20a3195b0c2adea39c30d2e9f830a6fa425a34f031f28cd84a5fc4bf09ce8f4d
all runs: OK
# git bisect start ad347abe4a9876b1f65f408ab467137e88f77eb4 9f4ad9e425a1d3b6a34617b8ea226d56a119a717
Bisecting: 8305 revisions left to test after this (roughly 13 steps)
[77d51337d650086643e1e96b8a7e1e6cbf0b09ff] Merge tag 'mips_5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux

testing commit 77d51337d650086643e1e96b8a7e1e6cbf0b09ff with gcc (GCC) 10.2.1 20210217
kernel signature: 8d99080dce3fbe6f27e419d28ee2ed1f2f3298680935cf54314b35783e6bdcc5
all runs: OK
# git bisect good 77d51337d650086643e1e96b8a7e1e6cbf0b09ff
Bisecting: 4188 revisions left to test after this (roughly 12 steps)
[65ec0a7d24913b146cd1500d759b8c340319d55e] Merge tag 'pinctrl-v5.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

testing commit 65ec0a7d24913b146cd1500d759b8c340319d55e with gcc (GCC) 10.2.1 20210217
kernel signature: 538edaef9af46b7bb78f380635ce52fe256385a4444ed1ce44136b057b68e170
run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #8: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #9: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #10: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #11: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #12: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #13: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #14: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #15: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #16: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #17: basic kernel testing failed: WARNING in __nf_unregister_net_hook
run #18: crashed: WARNING in __nf_unregister_net_hook
run #19: crashed: WARNING in __nf_unregister_net_hook
# git bisect bad 65ec0a7d24913b146cd1500d759b8c340319d55e
Bisecting: 2006 revisions left to test after this (roughly 11 steps)
[56aa7b21a5a7d30484ab5833641cb172356225f1] Merge tag 'wireless-drivers-next-2021-04-18' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

testing commit 56aa7b21a5a7d30484ab5833641cb172356225f1 with gcc (GCC) 10.2.1 20210217
kernel signature: e1a689e97d0a0829faf7244a7ab6e78e6e5e17d31d5ae4484cf6c7ff827115f4
run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.1.122:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.1.122 port 22: Connection timed out
lost connection

run #1: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.1.123:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.1.123 port 22: Connection timed out
lost connection

run #2: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.0.196:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.0.196 port 22: Connection timed out
lost connection

run #3: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.10.8:./syz-fuzzer"]: exit status 1
ssh: connect to host 10.128.10.8 port 22: Connection timed out
lost connection

run #4: basic kernel testing failed: failed to copy test binary to VM: timedout ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "root@10.128.10.26:./syz-fuzzer"]
run #5: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb
run #6: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb
run #7: boot failed: KASAN: use-after-free Read in page_to_skb
run #8: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb
run #9: boot failed: KASAN: use-after-free Read in page_to_skb
run #10: boot failed: KASAN: use-after-free Read in page_to_skb
run #11: boot failed: KASAN: use-after-free Read in page_to_skb
run #12: boot failed: KASAN: use-after-free Read in page_to_skb
run #13: boot failed: KASAN: use-after-free Read in page_to_skb
run #14: boot failed: KASAN: use-after-free Read in page_to_skb
run #15: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb
run #16: boot failed: KASAN: use-after-free Read in page_to_skb
run #17: boot failed: KASAN: slab-out-of-bounds Read in page_to_skb
run #18: boot failed: KASAN: use-after-free Read in page_to_skb
run #19: boot failed: KASAN: use-after-free Read in page_to_skb
# git bisect skip 56aa7b21a5a7d30484ab5833641cb172356225f1
Bisecting: 2006 revisions left to test after this (roughly 11 steps)
[fb98734f79365d5aa0737a6fec0a8c84c05c8eaa] qtnfmac: remove meaningless goto statement and labels

testing commit fb98734f79365d5aa0737a6fec0a8c84c05c8eaa with gcc (GCC) 10.2.1 20210217
kernel signature: ac93fd6cf15fa3269801fc5491c8d64ab5e4ad58cf5f21dde974de99badbc70f
run #0: crashed: INFO: task hung in linkwatch_event
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad fb98734f79365d5aa0737a6fec0a8c84c05c8eaa
Bisecting: 976 revisions left to test after this (roughly 10 steps)
[72e6afe6b4b3aee69b2dae1ac8b32efc503b48ab] net: llc: Correct function name llc_pdu_set_pf_bit() in header

testing commit 72e6afe6b4b3aee69b2dae1ac8b32efc503b48ab with gcc (GCC) 10.2.1 20210217
kernel signature: 28a0acb85416b2de32462785b10c8f64a829e0687d281a0aea83009ad3458f1c
run #0: crashed: INFO: rcu detected stall in smp_call_function
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 72e6afe6b4b3aee69b2dae1ac8b32efc503b48ab
Bisecting: 488 revisions left to test after this (roughly 9 steps)
[b6b0e3667e1b2c796cd282d5ec385d5864ccb1ce] octeontx2-af: Avoid duplicate unicast rule in mcam_rules list

testing commit b6b0e3667e1b2c796cd282d5ec385d5864ccb1ce with gcc (GCC) 10.2.1 20210217
kernel signature: a7ee5e486b5ee1eaeb93ccb502ce110a976fd15b051d04ddb21e4c7e8c105f7d
run #0: crashed: WARNING in kvm_wait
run #1: crashed: WARNING in __cfg80211_ibss_joined
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad b6b0e3667e1b2c796cd282d5ec385d5864ccb1ce
Bisecting: 244 revisions left to test after this (roughly 8 steps)
[a3222a2da0a2d6c7682252d4bfdff05721a82b95] net/mlx5e: Allow to match on ICMP parameters

testing commit a3222a2da0a2d6c7682252d4bfdff05721a82b95 with gcc (GCC) 10.2.1 20210217
kernel signature: da9a6047ff55f241a7d12de69e7f246f4d44bd755d493754eb655bf34187170a
run #0: crashed: WARNING in kvm_wait
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: WARNING in kvm_wait
run #3: crashed: KASAN: out-of-bounds Read in __show_regs
run #4: crashed: UBSAN: shift-out-of-bounds in load_balance
run #5: crashed: UBSAN: shift-out-of-bounds in load_balance
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad a3222a2da0a2d6c7682252d4bfdff05721a82b95
Bisecting: 121 revisions left to test after this (roughly 7 steps)
[e56763ee50a3f28d2f70355ca43fb78d8539a183] FDDI: if_fddi.h: Update my e-mail address

testing commit e56763ee50a3f28d2f70355ca43fb78d8539a183 with gcc (GCC) 10.2.1 20210217
kernel signature: 8d6a22ece0ec27fa5cd64b278f9470d6f2d08e9eafe2e2f53d7b5a67059f6c2f
run #0: crashed: WARNING in kvm_wait
run #1: crashed: WARNING in kvm_wait
run #2: crashed: KASAN: stack-out-of-bounds Read in __show_regs
run #3: crashed: WARNING in kvm_wait
run #4: crashed: no output from test machine
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad e56763ee50a3f28d2f70355ca43fb78d8539a183
Bisecting: 60 revisions left to test after this (roughly 6 steps)
[13ec0216c3ace494ea8fafab5aa6925a5bc41796] Merge branch 'Add BTF_KIND_FLOAT support'

testing commit 13ec0216c3ace494ea8fafab5aa6925a5bc41796 with gcc (GCC) 10.2.1 20210217
kernel signature: 05dc9ab775baa3c2801e3b5526042f2912f1437578242cb0950bc134c727d7cd
run #0: crashed: WARNING in kvm_wait
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: UBSAN: shift-out-of-bounds in load_balance
run #4: crashed: no output from test machine
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: boot failed: WARNING in kvm_wait
# git bisect bad 13ec0216c3ace494ea8fafab5aa6925a5bc41796
Bisecting: 29 revisions left to test after this (roughly 5 steps)
[1e0ab70778bd86a90de438cc5e1535c115a7c396] Merge branch 'sock_map: clean up and refactor code for BPF_SK_SKB_VERDICT'

testing commit 1e0ab70778bd86a90de438cc5e1535c115a7c396 with gcc (GCC) 10.2.1 20210217
kernel signature: a442681b43dae2b8966396f4c69214b5675cf9ffe46f9c1a0a7338c51a2f0769
run #0: crashed: WARNING in __cfg80211_ibss_joined
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: unregister_netdevice: waiting for DEV to become free
run #4: crashed: no output from test machine
run #5: crashed: no output from test machine
run #6: crashed: UBSAN: shift-out-of-bounds in load_balance
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 1e0ab70778bd86a90de438cc5e1535c115a7c396
Bisecting: 15 revisions left to test after this (roughly 4 steps)
[e6ac593372aadacc14e02b198e4a1acfef1db595] bpf: Rename fixup_bpf_calls and add some comments

testing commit e6ac593372aadacc14e02b198e4a1acfef1db595 with gcc (GCC) 10.2.1 20210217
kernel signature: ace4e03d6dcb2c5a0aa09bd953bf7721adabecdb1acdaf91eaa0557cc33121d5
run #0: crashed: WARNING in kvm_wait
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: WARNING in __cfg80211_ibss_joined
run #4: crashed: UBSAN: shift-out-of-bounds in load_balance
run #5: OK
run #6: crashed: UBSAN: shift-out-of-bounds in load_balance
run #7: OK
run #8: OK
run #9: crashed: WARNING in kvm_wait
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad e6ac593372aadacc14e02b198e4a1acfef1db595
Bisecting: 7 revisions left to test after this (roughly 3 steps)
[a10787e6d58c24b51e91c19c6d16c5da89fcaa4b] bpf: Enable task local storage for tracing programs

testing commit a10787e6d58c24b51e91c19c6d16c5da89fcaa4b with gcc (GCC) 10.2.1 20210217
kernel signature: 0816ccafad37d4bcb09580d216103102bb75d09239fa7d53c07a1ea360804097
run #0: crashed: WARNING in kvm_wait
run #1: crashed: KASAN: stack-out-of-bounds Read in __show_regs
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: KASAN: out-of-bounds Read in unwind_next_frame
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad a10787e6d58c24b51e91c19c6d16c5da89fcaa4b
Bisecting: 2 revisions left to test after this (roughly 2 steps)
[ab5bd583b9289666e918f9e5f672d33ccdfd49b2] virtio-net: Support IFF_TX_SKB_NO_LINEAR flag

testing commit ab5bd583b9289666e918f9e5f672d33ccdfd49b2 with gcc (GCC) 10.2.1 20210217
kernel signature: 09ef8215c5b48a7e0afcd30b08a49abf558f3ceea9595e605791eac289747ddf
run #0: crashed: WARNING in kvm_wait
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: INFO: task hung in switchdev_deferred_process_work
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad ab5bd583b9289666e918f9e5f672d33ccdfd49b2
Bisecting: 1 revision left to test after this (roughly 1 step)
[2463e073497385ef63c220571013a2b89e9b95cc] netdevice: Add missing IFF_PHONY_HEADROOM self-definition

testing commit 2463e073497385ef63c220571013a2b89e9b95cc with gcc (GCC) 10.2.1 20210217
kernel signature: 2b2446118a3073754850894c8ab623575e44919d9992f0200a64e99f43b130bf
run #0: crashed: UBSAN: shift-out-of-bounds in load_balance
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: KASAN: out-of-bounds Read in unwind_next_frame
run #3: crashed: UBSAN: shift-out-of-bounds in load_balance
run #4: crashed: no output from test machine
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 2463e073497385ef63c220571013a2b89e9b95cc
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[b9fc8b4a591811546fec2dbef7e9f809362100c9] bpf: Add kernel/modules BTF presence checks to bpftool feature command

testing commit b9fc8b4a591811546fec2dbef7e9f809362100c9 with gcc (GCC) 10.2.1 20210217
kernel signature: 3c1f84ac0c25185982d41075bd0fc4f960e97c8ec881b8019db82b70209e4762
run #0: crashed: UBSAN: shift-out-of-bounds in load_balance
run #1: crashed: UBSAN: shift-out-of-bounds in load_balance
run #2: crashed: UBSAN: shift-out-of-bounds in load_balance
run #3: crashed: KASAN: stack-out-of-bounds Read in __show_regs
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad b9fc8b4a591811546fec2dbef7e9f809362100c9
b9fc8b4a591811546fec2dbef7e9f809362100c9 is the first bad commit
commit b9fc8b4a591811546fec2dbef7e9f809362100c9
Author: Grant Seltzer <grantseltzer@gmail.com>
Date:   Mon Feb 22 19:58:46 2021 +0000

    bpf: Add kernel/modules BTF presence checks to bpftool feature command
    
    This adds both the CONFIG_DEBUG_INFO_BTF and CONFIG_DEBUG_INFO_BTF_MODULES
    kernel compile option to output of the bpftool feature command.
    
    This is relevant for developers that want to account for data structure
    definition differences between kernels.
    
    Signed-off-by: Grant Seltzer <grantseltzer@gmail.com>
    Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
    Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
    Acked-by: Martin KaFai Lau <kafai@fb.com>
    Link: https://lore.kernel.org/bpf/20210222195846.155483-1-grantseltzer@gmail.com

 tools/bpf/bpftool/feature.c | 4 ++++
 1 file changed, 4 insertions(+)

parent commit d310ec03a34e92a77302edb804f7d68ee4f01ba0 wasn't tested
testing commit d310ec03a34e92a77302edb804f7d68ee4f01ba0 with gcc (GCC) 10.2.1 20210217
kernel signature: 3c1f84ac0c25185982d41075bd0fc4f960e97c8ec881b8019db82b70209e4762
culprit signature: 3c1f84ac0c25185982d41075bd0fc4f960e97c8ec881b8019db82b70209e4762
parent  signature: 3c1f84ac0c25185982d41075bd0fc4f960e97c8ec881b8019db82b70209e4762
Reproducer flagged being flaky
revisions tested: 17, total time: 4h43m43.448380015s (build: 2h5m42.286215706s, test: 2h35m52.816188646s)
first bad commit: b9fc8b4a591811546fec2dbef7e9f809362100c9 bpf: Add kernel/modules BTF presence checks to bpftool feature command
recipients (to): ["andrii@kernel.org" "daniel@iogearbox.net" "grantseltzer@gmail.com" "kafai@fb.com"]
recipients (cc): []
crash: KASAN: stack-out-of-bounds Read in __show_regs
RIP: 0010:devkmsg_poll+0xdf/0x180 kernel/printk/printk.c:833
Code: 8b 3d d5 8b 14 09 e8 f0 8d 00 00 84 c0 75 23 48 c7 c7 40 a2 75 8a e8 a0 31 ea 06 e8 fb 50 00 00 e8 b6 14 1a 00 fb 48 83 c4 08 <44> 89 e0 5b 5d 41 5c c3 48 b8 00 00 00 00 00 fc ff df 48 89 da 48
RSP: 27a5d400:ffff888027a5d400 EFLAGS: ffffc900015ffc30 ORIG_RAX: ffffffff883c8f10
RAX: 0000000000000006 RBX: 0000000041b58ab3 RCX: 1ffff920002bff82
==================================================================
BUG: KASAN: stack-out-of-bounds in __show_regs.cold+0xa8/0x508 arch/x86/kernel/process_64.c:82
Read of size 8 at addr ffffc900015ffc18 by task ksoftirqd/1/18

CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0xa5/0xe6 lib/dump_stack.c:120
 print_address_description.constprop.0.cold+0x5/0x2f8 mm/kasan/report.c:230
 __kasan_report mm/kasan/report.c:396 [inline]
 kasan_report.cold+0x79/0xd5 mm/kasan/report.c:413
 __show_regs.cold+0xa8/0x508 arch/x86/kernel/process_64.c:82
 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:298
 sched_show_task kernel/sched/core.c:7327 [inline]
 sched_show_task+0x443/0x590 kernel/sched/core.c:7301
 show_state_filter+0xf2/0x2d0 kernel/sched/core.c:7370
 kbd_keycode drivers/tty/vt/keyboard.c:1512 [inline]
 kbd_event+0x6fe/0x13a0 drivers/tty/vt/keyboard.c:1531
 input_to_handler+0x336/0x4a0 drivers/input/input.c:118
 input_pass_values.part.0+0x1be/0x550 drivers/input/input.c:145
 input_pass_values drivers/input/input.c:134 [inline]
 input_handle_event+0x215/0x1160 drivers/input/input.c:415
 input_event drivers/input/input.c:446 [inline]
 input_event+0x54/0x80 drivers/input/input.c:438
 hidinput_hid_event+0x3a7/0x1700 drivers/hid/hid-input.c:1405
 hid_process_event+0x358/0x590 drivers/hid/hid-core.c:1519
 hid_input_field drivers/hid/hid-core.c:1577 [inline]
 hid_report_raw_event+0xa18/0xfe0 drivers/hid/hid-core.c:1783
 hid_input_report+0x26f/0x4b0 drivers/hid/hid-core.c:1850
 hid_irq_in+0x4b0/0x620 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1656
 dummy_timer+0xeb8/0x2eb0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x163/0x4b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x52a/0x8b0 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:343
 run_ksoftirqd kernel/softirq.c:650 [inline]
 run_ksoftirqd+0x2d/0x60 kernel/softirq.c:642
 smpboot_thread_fn+0x561/0x8e0 kernel/smpboot.c:165
 kthread+0x36f/0x450 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294


Memory state around the buggy address:
 ffffc900015ffb00: f1 f1 04 f2 00 f2 f2 f2 00 00 00 f3 f3 f3 f3 f3
 ffffc900015ffb80: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00
>ffffc900015ffc00: f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00
                            ^
 ffffc900015ffc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffffc900015ffd00: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00
==================================================================