forked to background, child pid 4656 [ 37.356878][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.375088][ T4657] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 38.011241][ T4755] sshd (4755) used greatest stack depth: 22336 bytes left OK syzkaller Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 60.623153][ T27] audit: type=1804 audit(1675471213.359:2): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 [ 60.644478][ T27] audit: type=1800 audit(1675471213.359:3): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor101" name="bus" dev="sda1" ino=1137 res=0 errno=0 [ 60.665566][ T27] audit: type=1804 audit(1675471213.359:4): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 [ 60.687361][ T5094] syz-executor101[5094]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb5a3830 error 4 in syz-executor1016593629[7fdddb5d0000+9c000] likely on CPU 0 (core 0, socket 0) [ 60.694698][ T5082] syz-executor101[5082]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb5c4830 error 4 [ 60.707104][ T27] audit: type=1804 audit(1675471213.359:5): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 [ 60.707888][ T5082] in syz-executor1016593629[7fdddb5d0000+9c000] [ 60.717473][ T5094] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 60.764465][ T5082] likely on CPU 1 (core 0, socket 0) [ 60.767175][ T27] audit: type=1804 audit(1675471213.359:6): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 [ 60.770926][ T5082] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c executing program [ 60.791178][ T27] audit: type=1804 audit(1675471213.359:7): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 [ 60.822628][ T5101] syz-executor101[5101]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb582830 error 4 in syz-executor1016593629[7fdddb5d0000+9c000] likely on CPU 1 (core 0, socket 0) [ 60.833916][ T27] audit: type=1804 audit(1675471213.359:8): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor101" name="/root/bus" dev="sda1" ino=1137 res=1 errno=0 executing program executing program executing program executing program executing program executing program [ 60.848999][ T5101] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 63.881835][ T5513] BUG: Bad rss-counter state mm:ffff8880756f8000 type:MM_ANONPAGES val:1 [ 63.890947][ T5513] BUG: non-zero pgtables_bytes on freeing mm: 8192 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 65.580872][ T5734] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 65.592666][ T5734] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 65.601068][ T5734] CPU: 1 PID: 5734 Comm: syz-executor101 Not tainted 6.2.0-rc6-next-20230203-syzkaller #0 [ 65.610964][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 65.621020][ T5734] RIP: 0010:__blk_rq_map_sg+0x36e/0xfd0 [ 65.626687][ T5734] Code: 38 e8 36 5f 1a 00 48 89 c3 e8 de 7f 88 fd 48 8b 44 24 20 80 38 00 0f 85 fe 0b 00 00 48 8b 04 24 48 89 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 f3 0b 00 00 4c 8b 74 24 30 31 ff 48 8b 2b 41 [ 65.646315][ T5734] RSP: 0018:ffffc90004c6edf8 EFLAGS: 00010246 [ 65.652382][ T5734] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.660351][ T5734] RDX: ffff88807bc08000 RSI: ffffffff83fbeac2 RDI: 0000000000000007 [ 65.668333][ T5734] RBP: ffff888020f76238 R08: 0000000000000007 R09: 0000000000000000 [ 65.676390][ T5734] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 65.684361][ T5734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001a00 [ 65.692329][ T5734] FS: 00007fdddb5c6700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 65.701262][ T5734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.707849][ T5734] CR2: 00007ffd2f177960 CR3: 000000007d666000 CR4: 00000000003506e0 [ 65.715922][ T5734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.723904][ T5734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.731883][ T5734] Call Trace: [ 65.735172][ T5734] [ 65.738115][ T5734] scsi_alloc_sgtables+0x236/0xf70 [ 65.743240][ T5734] ? scsi_end_request+0xa20/0xa20 [ 65.748279][ T5734] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.753483][ T5734] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.759300][ T5734] sd_init_command+0x67a/0x32a0 [ 65.764250][ T5734] ? sd_completed_bytes+0x3f0/0x3f0 [ 65.769463][ T5734] ? lockdep_init_map_type+0x21e/0x810 [ 65.774946][ T5734] ? rcu_read_lock_sched_held+0x3e/0x70 [ 65.780545][ T5734] scsi_queue_rq+0x1e7b/0x3a40 [ 65.785331][ T5734] blk_mq_dispatch_rq_list+0x710/0x23f0 [ 65.790908][ T5734] ? blk_insert_cloned_request+0xa50/0xa50 [ 65.796740][ T5734] ? __blk_mq_get_driver_tag+0x19a/0x9f0 [ 65.802394][ T5734] blk_mq_do_dispatch_sched+0x95e/0xc20 [ 65.807957][ T5734] ? blk_mq_sched_mark_restart_hctx+0x80/0x80 [ 65.814048][ T5734] __blk_mq_sched_dispatch_requests+0x26d/0x3e0 [ 65.820298][ T5734] ? lock_sync+0x190/0x190 [ 65.824753][ T5734] ? blk_mq_do_dispatch_ctx+0x6c0/0x6c0 [ 65.830311][ T5734] blk_mq_sched_dispatch_requests+0x10a/0x190 [ 65.836390][ T5734] __blk_mq_run_hw_queue+0x2b7/0x480 [ 65.841693][ T5734] __blk_mq_delay_run_hw_queue+0x5f7/0x700 [ 65.847526][ T5734] ? sbitmap_any_bit_set+0xf8/0x130 [ 65.852742][ T5734] ? dd_has_work+0xc5/0x240 [ 65.857272][ T5734] ? dd_prepare_request+0x40/0x40 [ 65.862328][ T5734] blk_mq_run_hw_queue+0x3b5/0x560 [ 65.867468][ T5734] blk_mq_sched_insert_requests+0x1d9/0xb30 [ 65.873409][ T5734] blk_mq_flush_plug_list+0x39c/0xe10 [ 65.878808][ T5734] ? blk_mq_insert_requests+0x310/0x310 [ 65.884387][ T5734] ? iomap_iter+0x683/0x1530 [ 65.888984][ T5734] blk_finish_plug+0xbb/0x170 [ 65.893678][ T5734] __iomap_dio_rw+0xf85/0x1d80 [ 65.898456][ T5734] ? io_schedule_timeout+0x150/0x150 [ 65.903764][ T5734] ? iomap_dio_bio_iter+0x1440/0x1440 [ 65.909157][ T5734] ? lock_sync+0x190/0x190 [ 65.913592][ T5734] ? trace_lock_acquire+0x1f1/0x2b0 [ 65.918901][ T5734] iomap_dio_rw+0x40/0xa0 [ 65.923250][ T5734] ext4_file_read_iter+0x4be/0x690 [ 65.928409][ T5734] generic_file_splice_read+0x182/0x4b0 [ 65.934075][ T5734] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 65.940088][ T5734] ? add_to_pipe+0x3b0/0x3b0 [ 65.944703][ T5734] ? security_file_permission+0xaf/0xd0 [ 65.950269][ T5734] ? add_to_pipe+0x3b0/0x3b0 [ 65.954891][ T5734] do_splice_to+0x1b9/0x240 [ 65.959411][ T5734] ? direct_splice_actor+0x11c/0x180 [ 65.964730][ T5734] splice_direct_to_actor+0x2ab/0x8a0 [ 65.970130][ T5734] ? do_splice_direct+0x280/0x280 [ 65.975194][ T5734] ? folio_flags.constprop.0+0x150/0x150 [ 65.980852][ T5734] ? bpf_lsm_file_permission+0x9/0x10 [ 65.986249][ T5734] ? security_file_permission+0xaf/0xd0 [ 65.991827][ T5734] do_splice_direct+0x1ab/0x280 [ 65.996699][ T5734] ? splice_direct_to_actor+0x8a0/0x8a0 [ 66.002273][ T5734] do_sendfile+0xb19/0x12c0 [ 66.006810][ T5734] ? vfs_iocb_iter_write+0x480/0x480 [ 66.012121][ T5734] ? xfd_validate_state+0x5d/0x180 [ 66.017252][ T5734] __x64_sys_sendfile64+0x1d0/0x210 [ 66.022471][ T5734] ? __ia32_sys_sendfile+0x220/0x220 [ 66.027776][ T5734] ? syscall_enter_from_user_mode+0x26/0xb0 [ 66.033685][ T5734] do_syscall_64+0x39/0xb0 [ 66.038129][ T5734] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.044046][ T5734] RIP: 0033:0x7fdddb616759 [ 66.048495][ T5734] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.068117][ T5734] RSP: 002b:00007fdddb5c6318 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.076539][ T5734] RAX: ffffffffffffffda RBX: 00007fdddb69f428 RCX: 00007fdddb616759 [ 66.084514][ T5734] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 66.092497][ T5734] RBP: 00007fdddb69f420 R08: 0000000000000000 R09: 0000000000000000 [ 66.100475][ T5734] R10: 000000000000de00 R11: 0000000000000246 R12: 00007fdddb66c0b8 [ 66.108483][ T5734] R13: 00007ffd2f15c8df R14: 00007fdddb5c6400 R15: 0000000000022000 [ 66.116476][ T5734] [ 66.119499][ T5734] Modules linked in: [ 66.129236][ T5734] ---[ end trace 0000000000000000 ]--- [ 66.130993][ T5754] show_signal_msg: 1754 callbacks suppressed [ 66.131008][ T5754] syz-executor101[5754]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb582830 error 4 [ 66.134957][ T5734] RIP: 0010:__blk_rq_map_sg+0x36e/0xfd0 [ 66.141033][ T5751] syz-executor101[5751]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb582830 error 4 [ 66.150506][ T5734] Code: 38 e8 36 5f 1a 00 48 89 c3 e8 de 7f 88 fd 48 8b 44 24 20 80 38 00 0f 85 fe 0b 00 00 48 8b 04 24 48 89 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 f3 0b 00 00 4c 8b 74 24 30 31 ff 48 8b 2b 41 [ 66.155996][ T5755] syz-executor101[5755]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb582830 error 4 [ 66.165716][ T5734] RSP: 0018:ffffc90004c6edf8 EFLAGS: 00010246 [ 66.188214][ T5754] in syz-executor1016593629[7fdddb5d0000+9c000] [ 66.195836][ T5734] [ 66.201298][ T5756] syz-executor101[5756]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb582830 error 4 [ 66.207475][ T5734] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.209920][ T5751] in syz-executor1016593629[7fdddb5d0000+9c000] [ 66.219664][ T5734] RDX: ffff88807bc08000 RSI: ffffffff83fbeac2 RDI: 0000000000000007 [ 66.227599][ T5756] in syz-executor1016593629[7fdddb5d0000+9c000] [ 66.234478][ T5734] RBP: ffff888020f76238 R08: 0000000000000007 R09: 0000000000000000 [ 66.243479][ T5754] likely on CPU 0 (core 0, socket 0) [ 66.248892][ T5734] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 66.256817][ T5756] likely on CPU 0 (core 0, socket 0) [ 66.262259][ T5734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001a00 [ 66.270428][ T5755] in syz-executor1016593629[7fdddb5d0000+9c000] [ 66.275698][ T5760] syz-executor101[5760]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb561830 error 4 [ 66.283666][ T5751] likely on CPU 0 (core 0, socket 0) [ 66.290147][ T5734] FS: 00007fdddb5c6700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.301120][ T5754] [ 66.305255][ T5760] in syz-executor1016593629[7fdddb5d0000+9c000] [ 66.314372][ T5756] [ 66.316587][ T5734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.323277][ T5755] likely on CPU 0 (core 0, socket 0) [ 66.325345][ T5734] CR2: 0000000000000000 CR3: 000000007d666000 CR4: 00000000003506e0 [ 66.332125][ T5751] [ 66.337488][ T5760] likely on CPU 1 (core 0, socket 0) [ 66.345393][ T5754] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 66.347702][ T5734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.353273][ T5756] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 66.372677][ T5760] [ 66.380851][ T5755] [ 66.400373][ T5760] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 66.403733][ T5751] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 66.417299][ T5755] Code: 41 bd 01 00 00 00 e8 72 59 00 00 eb e0 41 57 41 bf 00 70 fe 20 41 56 41 55 41 bd 00 00 c0 fe 41 54 55 53 48 81 ec b8 1a 00 00 <48> 8b 04 25 00 00 00 00 48 8b 1c 25 08 00 00 00 48 89 7c 24 28 4c [ 66.424967][ T5762] syz-executor101[5762]: segfault at 0 ip 00007fdddb5d15fd sp 00007fdddb540830 error 4 [ 66.464204][ T5734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.482056][ T5734] Kernel panic - not syncing: Fatal exception [ 66.488283][ T5734] Kernel Offset: disabled [ 66.492627][ T5734] Rebooting in 86400 seconds..