BUG: unable to handle page fault for address: ffffffffff600000 #PF: supervisor read access in kernel mode #PF: error_code(0x0001) - permissions violation PGD 2c24067 P4D 2c24067 PUD 2c26067 PMD 2c49067 PTE 8000000002c05165 Oops: 0001 [#1] SMP CPU: 1 PID: 2037 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:strncpy_from_kernel_nofault+0x55/0xb0 mm/maccess.c:92 Code: af 01 00 83 80 f8 15 00 00 01 31 f6 48 89 ea eb 17 48 83 c2 01 48 83 c3 01 48 89 d0 48 29 e8 84 c9 74 2e 4c 39 e0 7d 29 89 f0 <8a> 0a 85 c0 88 0b 74 df 65 48 8b 04 25 00 af 01 00 83 a8 f8 15 00 RSP: 0018:ffffc90000187d68 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90000187de0 RCX: 0000000000000010 RDX: ffffffffff600000 RSI: 0000000000000000 RDI: ffffffffff600000 RBP: ffffffffff600000 R08: ffffffffff600000 R09: 0000000000000000 R10: 0000000000080000 R11: 0000000000013000 R12: 0000000000000008 R13: ffff8881009a1b40 R14: ffff888109a43680 R15: ffff888237d2c218 FS: 00007feb7cea76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600000 CR3: 0000000111c26000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bpf_probe_read_kernel_str_common kernel/trace/bpf_trace.c:255 [inline] ____bpf_probe_read_compat_str kernel/trace/bpf_trace.c:303 [inline] bpf_probe_read_compat_str+0x53/0x90 kernel/trace/bpf_trace.c:296 ___bpf_prog_run+0xddc/0x1ef0 kernel/bpf/core.c:1564 __bpf_prog_run32+0x31/0x60 kernel/bpf/core.c:1784 bpf_dispatcher_nop_func include/linux/bpf.h:776 [inline] __bpf_prog_run include/linux/filter.h:625 [inline] bpf_prog_run include/linux/filter.h:632 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:1883 [inline] bpf_trace_run3+0x54/0xc0 kernel/trace/bpf_trace.c:1921 trace_sched_switch include/trace/events/sched.h:220 [inline] __schedule+0x357/0x790 kernel/sched/core.c:6373 schedule+0x53/0x90 kernel/sched/core.c:6459 exit_to_user_mode_loop kernel/entry/common.c:163 [inline] exit_to_user_mode_prepare+0xc0/0x160 kernel/entry/common.c:208 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline] syscall_exit_to_user_mode+0x12/0x30 kernel/entry/common.c:301 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7feb7d324da9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007feb7cea70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: 0000000000000004 RBX: 00007feb7d453f80 RCX: 00007feb7d324da9 RDX: 0000000000000010 RSI: 0000000020000280 RDI: 0000000000000011 RBP: 00007feb7d37147a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007feb7d453f80 R15: 00007ffc8da6dbd8 Modules linked in: CR2: ffffffffff600000 ---[ end trace 0ac7bcde12bd98d9 ]--- RIP: 0010:strncpy_from_kernel_nofault+0x55/0xb0 mm/maccess.c:92 Code: af 01 00 83 80 f8 15 00 00 01 31 f6 48 89 ea eb 17 48 83 c2 01 48 83 c3 01 48 89 d0 48 29 e8 84 c9 74 2e 4c 39 e0 7d 29 89 f0 <8a> 0a 85 c0 88 0b 74 df 65 48 8b 04 25 00 af 01 00 83 a8 f8 15 00 RSP: 0018:ffffc90000187d68 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90000187de0 RCX: 0000000000000010 RDX: ffffffffff600000 RSI: 0000000000000000 RDI: ffffffffff600000 RBP: ffffffffff600000 R08: ffffffffff600000 R09: 0000000000000000 R10: 0000000000080000 R11: 0000000000013000 R12: 0000000000000008 R13: ffff8881009a1b40 R14: ffff888109a43680 R15: ffff888237d2c218 FS: 00007feb7cea76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600000 CR3: 0000000111c26000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: af scas %es:(%rdi),%eax 1: 01 00 add %eax,(%rax) 3: 83 80 f8 15 00 00 01 addl $0x1,0x15f8(%rax) a: 31 f6 xor %esi,%esi c: 48 89 ea mov %rbp,%rdx f: eb 17 jmp 0x28 11: 48 83 c2 01 add $0x1,%rdx 15: 48 83 c3 01 add $0x1,%rbx 19: 48 89 d0 mov %rdx,%rax 1c: 48 29 e8 sub %rbp,%rax 1f: 84 c9 test %cl,%cl 21: 74 2e je 0x51 23: 4c 39 e0 cmp %r12,%rax 26: 7d 29 jge 0x51 28: 89 f0 mov %esi,%eax * 2a: 8a 0a mov (%rdx),%cl <-- trapping instruction 2c: 85 c0 test %eax,%eax 2e: 88 0b mov %cl,(%rbx) 30: 74 df je 0x11 32: 65 48 8b 04 25 00 af mov %gs:0x1af00,%rax 39: 01 00 3b: 83 .byte 0x83 3c: a8 f8 test $0xf8,%al 3e: 15 .byte 0x15