kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
BUG: unable to handle page fault for address: ffff8880004524c0
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0011) - permissions violation
PGD 1a001067 P4D 1a001067 PUD 1a002067 PMD 80000000004001e3
Oops: Oops: 0011 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:0xffff8880004524c0
Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
RSP: 0018:ffffc90000007c98 EFLAGS: 00010246
RAX: ffffffff81ae1dd9 RBX: 0000000000000100 RCX: ffff888030414980
RDX: 0000000000000100 RSI: ffffffff8bc09540 RDI: ffffc9000d04f780
RBP: ffffc90000007d90 R08: ffffffff8f824277 R09: 1ffffffff1f0484e
R10: dffffc0000000000 R11: ffff8880004524c0 R12: 0000000000000000
R13: ffffc9000d04f780 R14: 1ffff92000000f98 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8880004524c0 CR3: 00000000378a9000 CR4: 0000000000352ef0
Call Trace:
expire_timers kernel/time/timer.c:1799 [inline]
__run_timers kernel/time/timer.c:2373 [inline]
__run_timer_base+0x61a/0x860 kernel/time/timer.c:2385
run_timer_base kernel/time/timer.c:2394 [inline]
run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2404
handle_softirqs+0x22b/0x7c0 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0x60/0x150 kernel/softirq.c:723
irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lockdep_unregister_key+0x2ce/0x350 kernel/locking/lockdep.c:6616
Code: 41 5d 41 5e 41 5f 5d e9 00 f1 08 00 89 c7 e8 79 07 00 00 e9 6c fe ff ff e8 6f 5e bd 09 41 f7 c7 00 02 00 00 74 bb fb 40 84 ed <75> ba eb cb 90 0f 0b 90 e9 2e ff ff ff 90 0f 0b 90 e9 36 ff ff ff
RSP: 0018:ffffc90000157c08 EFLAGS: 00000202
RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000046
RDX: ffffffff934453d8 RSI: ffffffff8d7acbf0 RDI: ffffffff8bc09560
RBP: ffff888030414901 R08: ffffffff81ab3a98 R09: ffffffff8df41aa0
R10: dffffc0000000000 R11: fffffbfff1f0484f R12: 0000000000000000
R13: ffff88801259f139 R14: 0000000000001000 R15: 0000000000000a03
wq_unregister_lockdep kernel/workqueue.c:4852 [inline]
pwq_release_workfn+0x6d5/0x870 kernel/workqueue.c:5148
kthread_worker_fn+0x4f0/0xb20 kernel/kthread.c:1005
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Modules linked in:
CR2: ffff8880004524c0
---[ end trace 0000000000000000 ]---
RIP: 0010:0xffff8880004524c0
Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
RSP: 0018:ffffc90000007c98 EFLAGS: 00010246
RAX: ffffffff81ae1dd9 RBX: 0000000000000100 RCX: ffff888030414980
RDX: 0000000000000100 RSI: ffffffff8bc09540 RDI: ffffc9000d04f780
RBP: ffffc90000007d90 R08: ffffffff8f824277 R09: 1ffffffff1f0484e
R10: dffffc0000000000 R11: ffff8880004524c0 R12: 0000000000000000
R13: ffffc9000d04f780 R14: 1ffff92000000f98 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8880004524c0 CR3: 00000000378a9000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess), 2 bytes skipped:
* 28: 00 00 add %al,(%rax) <-- trapping instruction
2a: 08 00 or %al,(%rax)