./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2663938182
<...>
DUID 00:04:9b:41:e3:df:54:6f:ca:1f:62:a0:1b:7c:64:71:74:ce
forked to background, child pid 3185
[ 25.245451][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 25.256955][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts.
execve("./syz-executor2663938182", ["./syz-executor2663938182"], 0x7ffc650a14c0 /* 10 vars */) = 0
brk(NULL) = 0x5555562b1000
brk(0x5555562b1c40) = 0x5555562b1c40
arch_prctl(ARCH_SET_FS, 0x5555562b1300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2663938182", 4096) = 28
brk(0x5555562d2c40) = 0x5555562d2c40
brk(0x5555562d3000) = 0x5555562d3000
mprotect(0x7fcd4d964000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3614 attached
, child_tidptr=0x5555562b15d0) = 3614
[pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3614] setpgid(0, 0) = 0
[pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3614] write(3, "1000", 4) = 4
[pid 3614] close(3) = 0
[pid 3614] openat(AT_FDCWD, "/dev/sg0", O_RDONLY) = 3
[pid 3614] ioctl(3, BLKTRACETEARDOWN) = -1 EINVAL (Invalid argument)
[pid 3614] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3614] write(4, "35", 2) = 2
[pid 3614] ioctl(3, BLKTRACESETUP, {act_mask=5, buf_size=6, buf_nr=43, start_lba=0, end_lba=0, pid=0}) = -1 EIO (Input/output error)
[pid 3614] exit_group(0) = ?
[pid 3614] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3614, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3615 attached
, child_tidptr=0x5555562b15d0) = 3615
[pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3615] setpgid(0, 0) = 0
[pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3615] write(3, "1000", 4) = 4
[pid 3615] close(3) = 0
[pid 3615] openat(AT_FDCWD, "/dev/sg0", O_RDONLY) = 3
[pid 3615] ioctl(3, BLKTRACETEARDOWN) = -1 EINVAL (Invalid argument)
[pid 3615] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3615] write(4, "35", 2) = 2
syzkaller login: [ 41.349281][ T3615] ------------[ cut here ]------------
[ 41.354837][ T3615] WARNING: CPU: 0 PID: 3615 at kernel/trace/blktrace.c:1099 get_probe_ref+0x31c/0x3e0
[ 41.364848][ T3615] Modules linked in:
[ 41.369379][ T3615] CPU: 0 PID: 3615 Comm: syz-executor266 Not tainted 5.19.0-rc3-syzkaller-00271-g6a0a17e6c6d1 #0
[ 41.380110][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.390412][ T3615] RIP: 0010:get_probe_ref+0x31c/0x3e0
[ 41.395814][ T3615] Code: 89 c3 31 ff 89 c6 e8 53 ea f8 ff 85 db 0f 85 c6 00 00 00 e8 26 e6 f8 ff 48 c7 c7 20 f7 b6 8c 5b e9 09 55 a4 08 e8 14 e6 f8 ff <0f> 0b e9 44 fd ff ff e8 08 e6 f8 ff 0f 0b e9 65 fd ff ff e8 fc e5
[ 41.415868][ T3615] RSP: 0018:ffffc900030efb98 EFLAGS: 00010293
[ 41.422217][ T3615] RAX: ffffffff818e980c RBX: 00000000fffffff4 RCX: ffff888023ffbb00
[ 41.430444][ T3615] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 41.438417][ T3615] RBP: ffff88801778f380 R08: ffffffff818e954a R09: fffff5200061df49
[ 41.446771][ T3615] R10: fffff5200061df49 R11: 1ffff9200061df48 R12: ffffc900030efca0
[ 41.455253][ T3615] R13: dffffc0000000000 R14: ffff88801778f3b0 R15: 1ffff11002ef1e76
[ 41.463801][ T3615] FS: 00005555562b1300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 41.472948][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.479718][ T3615] CR2: 00007ffe65dbb010 CR3: 0000000024d7a000 CR4: 00000000003506f0
[ 41.487691][ T3615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.496045][ T3615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.504272][ T3615] Call Trace:
[ 41.507578][ T3615]
[ 41.510761][ T3615] do_blk_trace_setup+0x7a0/0x980
[ 41.515813][ T3615] blk_trace_setup+0xfd/0x1b0
[ 41.520817][ T3615] ? __blk_trace_remove+0x160/0x160
[ 41.526029][ T3615] ? smk_access+0x490/0x490
[ 41.530789][ T3615] sg_ioctl+0x1477/0x2e50
[ 41.535135][ T3615] ? smack_file_ioctl+0x2f7/0x3a0
[ 41.540425][ T3615] ? sg_poll+0x3e0/0x3e0
[ 41.544667][ T3615] ? smack_file_alloc_security+0xd0/0xd0
[ 41.550607][ T3615] ? print_irqtrace_events+0x220/0x220
[ 41.556086][ T3615] ? vtime_user_exit+0x2b2/0x3e0
[ 41.561414][ T3615] ? bpf_lsm_file_ioctl+0x5/0x10
[ 41.566375][ T3615] ? security_file_ioctl+0x9d/0xb0
[ 41.572050][ T3615] ? sg_poll+0x3e0/0x3e0
[ 41.576408][ T3615] __se_sys_ioctl+0xfb/0x170
[ 41.581571][ T3615] do_syscall_64+0x2b/0x70
[ 41.586037][ T3615] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.592206][ T3615] RIP: 0033:0x7fcd4d8f76c9
[ 41.596619][ T3615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.616546][ T3615] RSP: 002b:00007ffe65dbaff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.625308][ T3615] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcd4d8f76c9
[ 41.633592][ T3615] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000003
[ 41.641895][ T3615] RBP: 00007ffe65dbb010 R08: 0000000000000002 R09: 0000000000000001
[ 41.650113][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 41.658085][ T3615] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 41.666319][ T3615]
[ 41.669619][ T3615] Kernel panic - not syncing: panic_on_warn set ...
[ 41.676210][ T3615] CPU: 0 PID: 3615 Comm: syz-executor266 Not tainted 5.19.0-rc3-syzkaller-00271-g6a0a17e6c6d1 #0
[ 41.686704][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.696758][ T3615] Call Trace:
[ 41.700113][ T3615]
[ 41.703045][ T3615] dump_stack_lvl+0x1e3/0x2cb
[ 41.707724][ T3615] ? bfq_pos_tree_add_move+0x436/0x436
[ 41.713291][ T3615] ? panic+0x76e/0x76e
[ 41.717357][ T3615] ? vscnprintf+0x59/0x80
[ 41.721679][ T3615] ? get_probe_ref+0x310/0x3e0
[ 41.726443][ T3615] panic+0x312/0x76e
[ 41.730356][ T3615] ? __warn+0x131/0x220
[ 41.734521][ T3615] ? fb_is_primary_device+0xcc/0xcc
[ 41.739719][ T3615] ? get_probe_ref+0x31c/0x3e0
[ 41.744489][ T3615] __warn+0x1fa/0x220
[ 41.748580][ T3615] ? get_probe_ref+0x31c/0x3e0
[ 41.753352][ T3615] report_bug+0x1b3/0x2d0
[ 41.757696][ T3615] handle_bug+0x3d/0x70
[ 41.761862][ T3615] exc_invalid_op+0x16/0x40
[ 41.766357][ T3615] asm_exc_invalid_op+0x1b/0x20
[ 41.771210][ T3615] RIP: 0010:get_probe_ref+0x31c/0x3e0
[ 41.776599][ T3615] Code: 89 c3 31 ff 89 c6 e8 53 ea f8 ff 85 db 0f 85 c6 00 00 00 e8 26 e6 f8 ff 48 c7 c7 20 f7 b6 8c 5b e9 09 55 a4 08 e8 14 e6 f8 ff <0f> 0b e9 44 fd ff ff e8 08 e6 f8 ff 0f 0b e9 65 fd ff ff e8 fc e5
[ 41.796392][ T3615] RSP: 0018:ffffc900030efb98 EFLAGS: 00010293
[ 41.802487][ T3615] RAX: ffffffff818e980c RBX: 00000000fffffff4 RCX: ffff888023ffbb00
[ 41.810471][ T3615] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 41.818468][ T3615] RBP: ffff88801778f380 R08: ffffffff818e954a R09: fffff5200061df49
[ 41.826441][ T3615] R10: fffff5200061df49 R11: 1ffff9200061df48 R12: ffffc900030efca0
[ 41.834432][ T3615] R13: dffffc0000000000 R14: ffff88801778f3b0 R15: 1ffff11002ef1e76
[ 41.842434][ T3615] ? get_probe_ref+0x5a/0x3e0
[ 41.847118][ T3615] ? get_probe_ref+0x31c/0x3e0
[ 41.852214][ T3615] ? get_probe_ref+0x31c/0x3e0
[ 41.857003][ T3615] do_blk_trace_setup+0x7a0/0x980
[ 41.862072][ T3615] blk_trace_setup+0xfd/0x1b0
[ 41.866800][ T3615] ? __blk_trace_remove+0x160/0x160
[ 41.872025][ T3615] ? smk_access+0x490/0x490
[ 41.876544][ T3615] sg_ioctl+0x1477/0x2e50
[ 41.880906][ T3615] ? smack_file_ioctl+0x2f7/0x3a0
[ 41.885938][ T3615] ? sg_poll+0x3e0/0x3e0
[ 41.890234][ T3615] ? smack_file_alloc_security+0xd0/0xd0
[ 41.895867][ T3615] ? print_irqtrace_events+0x220/0x220
[ 41.901321][ T3615] ? vtime_user_exit+0x2b2/0x3e0
[ 41.906256][ T3615] ? bpf_lsm_file_ioctl+0x5/0x10
[ 41.911187][ T3615] ? security_file_ioctl+0x9d/0xb0
[ 41.916292][ T3615] ? sg_poll+0x3e0/0x3e0
[ 41.920539][ T3615] __se_sys_ioctl+0xfb/0x170
[ 41.925128][ T3615] do_syscall_64+0x2b/0x70
[ 41.929563][ T3615] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.935480][ T3615] RIP: 0033:0x7fcd4d8f76c9
[ 41.939902][ T3615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.959588][ T3615] RSP: 002b:00007ffe65dbaff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.967999][ T3615] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcd4d8f76c9
[ 41.975965][ T3615] RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000003
[ 41.983959][ T3615] RBP: 00007ffe65dbb010 R08: 0000000000000002 R09: 0000000000000001
[ 41.991949][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 41.999925][ T3615] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 42.007917][ T3615]
[ 42.011249][ T3615] Kernel Offset: disabled
[ 42.015743][ T3615] Rebooting in 86400 seconds..