./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4190742650
<...>
DUID 00:04:03:2c:e5:fc:a2:19:b8:8b:c5:bf:62:63:19:3a:75:c6
forked to background, child pid 4869
[ 32.871730][ T4870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 32.897292][ T4870] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.246159][ T14] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts.
execve("./syz-executor4190742650", ["./syz-executor4190742650"], 0x7fff3831c9b0 /* 10 vars */) = 0
brk(NULL) = 0x5555571a5000
brk(0x5555571a5c40) = 0x5555571a5c40
arch_prctl(ARCH_SET_FS, 0x5555571a5300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4190742650", 4096) = 28
brk(0x5555571c6c40) = 0x5555571c6c40
brk(0x5555571c7000) = 0x5555571c7000
mprotect(0x7fb963386000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3
ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE) = 0
openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4
socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0
ioctl(4, NBD_SET_SOCK, 5) = 0
openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 7
ioctl(4, NBD_SET_SOCK, 5) = 0
[ 77.984852][ T5302] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN
[ 77.996580][ T5302] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef]
[ 78.004973][ T5302] CPU: 1 PID: 5302 Comm: syz-executor419 Not tainted 6.1.0-rc5-next-20221114-syzkaller #0
[ 78.014848][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 78.024901][ T5302] RIP: 0010:blk_mq_update_nr_hw_queues+0x308/0xfa0
[ 78.031468][ T5302] Code: 8d 47 18 49 89 6f 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 71 0a 00 00 49 8b 47 18 48 8d b8 e8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 4e 0b 00 00 48 8b b8 e8 00 00 00 4c 89 44 24 08
[ 78.051071][ T5302] RSP: 0018:ffffc90003a7fc00 EFLAGS: 00010206
[ 78.057130][ T5302] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 78.065120][ T5302] RDX: 000000000000001d RSI: 0000000000000002 RDI: 00000000000000e8
[ 78.073181][ T5302] RBP: ffff888146c60000 R08: ffff8880291a1458 R09: ffffffff8e54ab17
[ 78.081250][ T5302] R10: fffffbfff1ca9562 R11: 1ffffffff210d416 R12: ffffc90003a7fc68
[ 78.089232][ T5302] R13: ffff888146c60008 R14: ffff888146c603f8 R15: ffff8880291a1440
[ 78.097215][ T5302] FS: 00005555571a5300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 78.106159][ T5302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.112754][ T5302] CR2: 00000000005d84c8 CR3: 00000000220f1000 CR4: 00000000003506e0
[ 78.120734][ T5302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.128714][ T5302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.136693][ T5302] Call Trace:
[ 78.139966][ T5302] <TASK>
[ 78.142899][ T5302] ? blk_mq_map_swqueue+0x1200/0x1200
[ 78.148284][ T5302] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 78.154099][ T5302] nbd_start_device+0x153/0xc30
[ 78.158962][ T5302] ? bpf_lsm_capable+0x9/0x10
[ 78.163646][ T5302] ? security_capable+0x93/0xc0
[ 78.168508][ T5302] nbd_ioctl+0x220/0xc60
[ 78.172755][ T5302] ? blkdev_bszset+0x270/0x270
[ 78.177523][ T5302] ? nbd_start_device+0xc30/0xc30
[ 78.182553][ T5302] ? find_held_lock+0x2d/0x110
[ 78.187330][ T5302] ? ptrace_notify+0xfe/0x140
[ 78.192012][ T5302] ? nbd_start_device+0xc30/0xc30
[ 78.197050][ T5302] blkdev_ioctl+0x362/0xa10
[ 78.201554][ T5302] ? blkdev_common_ioctl+0x1ab0/0x1ab0
[ 78.207013][ T5302] ? bpf_lsm_file_ioctl+0x9/0x10
[ 78.211950][ T5302] ? blkdev_common_ioctl+0x1ab0/0x1ab0
[ 78.217434][ T5302] __x64_sys_ioctl+0x197/0x210
[ 78.222199][ T5302] do_syscall_64+0x39/0xb0
[ 78.226620][ T5302] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.232509][ T5302] RIP: 0033:0x7fb9633199b9
[ 78.236930][ T5302] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 78.256530][ T5302] RSP: 002b:00007ffcf320a868 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.264942][ T5302] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9633199b9
[ 78.273080][ T5302] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007
[ 78.281049][ T5302] RBP: 00007fb9632d9230 R08: 0000000000000000 R09: 0000000000000000
[ 78.289010][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9632d92c0
[ 78.296990][ T5302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 78.304963][ T5302] </TASK>
[ 78.307972][ T5302] Modules linked in:
[ 78.311996][ T5302] ---[ end trace 0000000000000000 ]---
[ 78.317502][ T5302] RIP: 0010:blk_mq_update_nr_hw_queues+0x308/0xfa0
[ 78.324019][ T5302] Code: 8d 47 18 49 89 6f 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 71 0a 00 00 49 8b 47 18 48 8d b8 e8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 4e 0b 00 00 48 8b b8 e8 00 00 00 4c 89 44 24 08
[ 78.343649][ T5302] RSP: 0018:ffffc90003a7fc00 EFLAGS: 00010206
[ 78.349727][ T5302] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 78.357723][ T5302] RDX: 000000000000001d RSI: 0000000000000002 RDI: 00000000000000e8
[ 78.365721][ T5302] RBP: ffff888146c60000 R08: ffff8880291a1458 R09: ffffffff8e54ab17
[ 78.373685][ T5302] R10: fffffbfff1ca9562 R11: 1ffffffff210d416 R12: ffffc90003a7fc68
[ 78.381722][ T5302] R13: ffff888146c60008 R14: ffff888146c603f8 R15: ffff8880291a1440
[ 78.389724][ T5302] FS: 00005555571a5300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 78.398685][ T5302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.405278][ T5302] CR2: 00007fb96335d1dc CR3: 00000000220f1000 CR4: 00000000003506f0
[ 78.413234][ T5302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.421318][ T5302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.429337][ T5302] Kernel panic - not syncing: Fatal exception
[ 78.435628][ T5302] Kernel Offset: disabled
[ 78.439964][ T5302] Rebooting in 86400 seconds..