./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor931287304 <...> DUID 00:04:a3:03:08:15:93:78:e3:1f:4c:1c:fb:56:e6:f5:4b:05 forked to background, child pid 4813 [ 28.435175][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.445243][ T4814] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. execve("./syz-executor931287304", ["./syz-executor931287304"], 0x7ffdee215d50 /* 10 vars */) = 0 brk(NULL) = 0x555557259000 brk(0x555557259c40) = 0x555557259c40 arch_prctl(ARCH_SET_FS, 0x555557259300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor931287304", 4096) = 27 brk(0x55555727ac40) = 0x55555727ac40 brk(0x55555727b000) = 0x55555727b000 mprotect(0x7f41f0601000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE|NBD_FLAG_SEND_CACHE|0x7800) = 0 ioctl(3, NBD_SET_SOCK, 4) = 0 openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 6 socketpair(AF_UNIX, SOCK_STREAM, 0, [7, 8]) = 0 ioctl(6, NBD_SET_SOCK, 7) = 0 syzkaller login: [ 47.442541][ T5234] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN [ 47.454263][ T5234] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef] [ 47.462654][ T5234] CPU: 0 PID: 5234 Comm: syz-executor931 Not tainted 6.1.0-rc3-next-20221102-syzkaller #0 [ 47.472522][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 47.482572][ T5234] RIP: 0010:blk_mq_update_nr_hw_queues+0x304/0xe40 [ 47.489079][ T5234] Code: 8d 47 18 49 89 6f 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 f7 09 00 00 49 8b 47 18 48 8d b8 e8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 12 09 00 00 48 8b b8 e8 00 00 00 4c 89 44 24 08 [ 47.508668][ T5234] RSP: 0018:ffffc90003cdfc08 EFLAGS: 00010206 [ 47.514719][ T5234] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 47.522682][ T5234] RDX: 000000000000001d RSI: 0000000000000002 RDI: 00000000000000e8 [ 47.530647][ T5234] RBP: ffff88801dbd0000 R08: ffff888027c89398 R09: ffffffff8de2e517 [ 47.538611][ T5234] R10: fffffbfff1bc5ca2 R11: 0000000000000000 R12: ffffc90003cdfc70 [ 47.546576][ T5234] R13: ffff88801dbd0008 R14: ffff88801dbd03f8 R15: ffff888027c89380 [ 47.554540][ T5234] FS: 0000555557259300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 47.563465][ T5234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.570044][ T5234] CR2: 00000000005d84c8 CR3: 000000007a7cb000 CR4: 00000000003506f0 [ 47.578011][ T5234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.585973][ T5234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.593934][ T5234] Call Trace: [ 47.597203][ T5234] [ 47.600129][ T5234] ? blk_mq_update_nr_hw_queues+0x0/0xe40 [ 47.605961][ T5234] ? tomoyo_path_number_perm+0x0/0x570 [ 47.611431][ T5234] nbd_start_device+0x153/0xc30 [ 47.616285][ T5234] ? bpf_lsm_quotactl-0xb/0x10 [ 47.621052][ T5234] ? security_capable+0x8f/0xc0 [ 47.625927][ T5234] nbd_ioctl+0x5a1/0xbd0 [ 47.630186][ T5234] ? blkdev_common_ioctl+0x0/0x1a30 [ 47.635397][ T5234] ? nbd_ioctl+0x0/0xbd0 [ 47.639653][ T5234] ? find_held_lock+0x2d/0x110 [ 47.644417][ T5234] ? ptrace_notify+0xfa/0x140 [ 47.649093][ T5234] ? nbd_ioctl+0x0/0xbd0 [ 47.653332][ T5234] blkdev_ioctl+0x36e/0x800 [ 47.657833][ T5234] ? blkdev_ioctl+0x0/0x800 [ 47.662332][ T5234] ? bpf_lsm_mmap_addr-0xb/0x10 [ 47.667182][ T5234] ? blkdev_ioctl+0x0/0x800 [ 47.671680][ T5234] __x64_sys_ioctl+0x193/0x200 [ 47.676453][ T5234] do_syscall_64+0x35/0xb0 [ 47.680874][ T5234] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 47.686774][ T5234] RIP: 0033:0x7f41f05946b9 [ 47.691180][ T5234] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 47.710782][ T5234] RSP: 002b:00007fff1b23e808 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.719186][ T5234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41f05946b9 [ 47.727155][ T5234] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 47.735128][ T5234] RBP: 00007f41f05541c0 R08: 0000000000000000 R09: 0000000000000000 [ 47.743106][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41f0554250 [ 47.751076][ T5234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.759052][ T5234] [ 47.762064][ T5234] Modules linked in: [ 47.766112][ T5234] ---[ end trace 0000000000000000 ]--- [ 47.771648][ T5234] RIP: 0010:blk_mq_update_nr_hw_queues+0x304/0xe40 [ 47.778210][ T5234] Code: 8d 47 18 49 89 6f 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 f7 09 00 00 49 8b 47 18 48 8d b8 e8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 12 09 00 00 48 8b b8 e8 00 00 00 4c 89 44 24 08 [ 47.797883][ T5234] RSP: 0018:ffffc90003cdfc08 EFLAGS: 00010206 [ 47.803984][ T5234] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 47.811950][ T5234] RDX: 000000000000001d RSI: 0000000000000002 RDI: 00000000000000e8 [ 47.819954][ T5234] RBP: ffff88801dbd0000 R08: ffff888027c89398 R09: ffffffff8de2e517 [ 47.827941][ T5234] R10: fffffbfff1bc5ca2 R11: 0000000000000000 R12: ffffc90003cdfc70 [ 47.835932][ T5234] R13: ffff88801dbd0008 R14: ffff88801dbd03f8 R15: ffff888027c89380 [ 47.843923][ T5234] FS: 0000555557259300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 47.852886][ T5234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.859473][ T5234] CR2: 00000000005d84c8 CR3: 000000007a7cb000 CR4: 00000000003506f0 [ 47.867462][ T5234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.875579][ T5234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.883744][ T5234] Kernel panic - not syncing: Fatal exception [ 47.889965][ T5234] Kernel Offset: disabled [ 47.894277][ T5234] Rebooting in 86400 seconds..