bisecting fixing commit since 24085f70a6e1b0cb647ec92623284641d8270637
building syzkaller on a885920d007a2f1ce91eb50f810255b190076cd1
testing commit 24085f70a6e1b0cb647ec92623284641d8270637 with gcc (GCC) 8.1.0
kernel signature: 29db8f719e37308a720a8a339356f232c680bc8cdcac5b219845d206235404de
run #0: crashed: WARNING in get_probe_ref
run #1: crashed: WARNING in get_probe_ref
run #2: crashed: WARNING in get_probe_ref
run #3: crashed: WARNING in get_probe_ref
run #4: crashed: WARNING in get_probe_ref
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
testing current HEAD b51594df17d0ce80b9f9f35394a1f42d7ac94472
testing commit b51594df17d0ce80b9f9f35394a1f42d7ac94472 with gcc (GCC) 8.1.0
kernel signature: 3d28749b15b2f444172e8c579f6eb3110e9dda6ec9a7ce57d51b54be38c26e8e
run #0: crashed: WARNING in get_probe_ref
run #1: crashed: WARNING in get_probe_ref
run #2: crashed: WARNING in get_probe_ref
run #3: crashed: WARNING in get_probe_ref
run #4: crashed: WARNING in get_probe_ref
run #5: crashed: WARNING in get_probe_ref
run #6: crashed: WARNING in get_probe_ref
run #7: crashed: WARNING in get_probe_ref
run #8: OK
run #9: OK
revisions tested: 2, total time: 33m13.722794868s (build: 10m33.870990123s, test: 21m53.175627356s)
the crash still happens on HEAD
commit msg: Merge tag 'docs-5.9-3' of git://git.lwn.net/linux
crash: WARNING in get_probe_ref
RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
R13: 000000000000022a R14: 00000000004c4586 R15: 00007f029821d6d4
------------[ cut here ]------------
WARNING: CPU: 0 PID: 8234 at kernel/trace/blktrace.c:1151 blk_register_tracepoints kernel/trace/blktrace.c:1183 [inline]
WARNING: CPU: 0 PID: 8234 at kernel/trace/blktrace.c:1151 get_probe_ref+0x222/0x2a0 kernel/trace/blktrace.c:327
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 8234 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xa3/0xcc lib/dump_stack.c:118
 panic+0x135/0x31a kernel/panic.c:231
 __warn.cold.13+0x20/0x25 kernel/panic.c:600
 report_bug+0xc0/0xf0 lib/bug.c:198
 handle_bug+0x35/0x90 arch/x86/kernel/traps.c:234
 exc_invalid_op+0x13/0x60 arch/x86/kernel/traps.c:254
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536
RIP: 0010:blk_register_tracepoints kernel/trace/blktrace.c:1151 [inline]
RIP: 0010:get_probe_ref+0x222/0x2a0 kernel/trace/blktrace.c:327
Code: 0f 85 8d 00 00 00 31 d2 48 c7 c6 30 f5 2d 81 48 c7 c7 00 0b 60 84 e8 ad c9 fe ff 85 c0 0f 84 07 fe ff ff 0f 0b e9 00 fe ff ff <0f> 0b e9 22 fe ff ff 0f 0b e9 38 fe ff ff 0f 0b e9 4e fe ff ff 0f
RSP: 0018:ffffc90002adfd60 EFLAGS: 00010282
RAX: 00000000fffffff4 RBX: ffff88810fc0c280 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff843052a8 RDI: 0000000000000286
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000001
R10: 0000000000000000 R11: fc167c4fa42bdc11 R12: ffff888128216f38
R13: 0000000000000000 R14: ffff88811d88f138 R15: 0000000001500000
 do_blk_trace_setup+0x20e/0x300 kernel/trace/blktrace.c:578
 __blk_trace_setup+0x53/0xb0 kernel/trace/blktrace.c:597
 blk_trace_setup+0x3e/0x60 kernel/trace/blktrace.c:615
 sg_ioctl_common+0x4c6/0xc60 drivers/scsi/sg.c:1120
 sg_ioctl+0x2e/0x60 drivers/scsi/sg.c:1163
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl fs/ioctl.c:739 [inline]
 __x64_sys_ioctl+0x7c/0xb0 fs/ioctl.c:739
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45c8a9
Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f029821cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000004e16e0 RCX: 000000000045c8a9
RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000004
RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
R13: 000000000000022a R14: 00000000004c4586 R15: 00007f029821d6d4
Kernel Offset: disabled
Rebooting in 86400 seconds..