================================================================== BUG: KASAN: user-memory-access in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: user-memory-access in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] BUG: KASAN: user-memory-access in tag_get lib/radix-tree.c:115 [inline] BUG: KASAN: user-memory-access in node_tag_set lib/radix-tree.c:943 [inline] BUG: KASAN: user-memory-access in __radix_tree_delete+0x10d/0x3a0 lib/radix-tree.c:1373 Read of size 8 at addr 000000001400032d by task syz.1.181/6663 CPU: 0 UID: 0 PID: 6663 Comm: syz.1.181 Not tainted 6.14.0-rc4-syzkaller-gece144f151ac #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_report+0xe3/0x5b0 mm/kasan/report.c:524 kasan_report+0x143/0x180 mm/kasan/report.c:634 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] tag_get lib/radix-tree.c:115 [inline] node_tag_set lib/radix-tree.c:943 [inline] __radix_tree_delete+0x10d/0x3a0 lib/radix-tree.c:1373 radix_tree_delete_item+0x2e0/0x3f0 lib/radix-tree.c:1430 free_pid+0x1a6/0x290 kernel/pid.c:155 __unhash_process kernel/exit.c:128 [inline] __exit_signal kernel/exit.c:200 [inline] release_task+0xdb7/0x1830 kernel/exit.c:257 exit_notify kernel/exit.c:775 [inline] do_exit+0x1afc/0x28e0 kernel/exit.c:958 do_group_exit+0x207/0x2c0 kernel/exit.c:1087 get_signal+0x168c/0x1720 kernel/signal.c:3036 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa2cdd8cde9 Code: Unable to access opcode bytes at 0x7fa2cdd8cdbf. RSP: 002b:00007fa2cec190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fa2cdfa5fa8 RCX: 00007fa2cdd8cde9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa2cdfa5fac RBP: 00007fa2cdfa5fa0 R08: 7fffffffffffffff R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa2cdfa5fac R13: 0000000000000000 R14: 00007fffe4eff2a0 R15: 00007fffe4eff388 ==================================================================