RBP: 00007fe93695e1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffd2847f6f R14: 00007fe93695e300 R15: 0000000000022000 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 13451 at kernel/trace/blktrace.c:1141 blk_register_tracepoints+0x309/0x3e0 kernel/trace/blktrace.c:1141 Modules linked in: CPU: 1 PID: 13451 Comm: syz-executor.4 Not tainted 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:blk_register_tracepoints+0x309/0x3e0 kernel/trace/blktrace.c:1141 netlink: 'syz-executor.5': attribute type 10 has an invalid length. Code: 48 c7 c7 60 a3 65 85 e8 b5 cc fb ff 31 ff 89 c3 89 c6 e8 3a 89 f9 ff 85 db 0f 85 c6 00 00 00 5b e9 dc 8f f9 ff e8 d7 8f f9 ff <0f> 0b e9 1e fd ff ff e8 cb 8f f9 ff 0f 0b e9 3f fd ff ff e8 bf 8f RSP: 0018:ffff8880511ffbc8 EFLAGS: 00010216 RAX: 00000000000173e9 RBX: 00000000fffffff4 RCX: ffffc900023b3000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 RDX: 0000000000040000 RSI: ffffffff8146d359 RDI: 0000000000000005 RBP: ffff888017fd9700 R08: 0000000000000001 R09: ffffffff850393a7 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff888017fd9730 R15: 0000000000000000 FS: 00007fe93695e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CPU: 0 PID: 13450 Comm: syz-executor.7 Not tainted 5.10.185 #1 CR2: 00007f349b33b004 CR3: 000000004a386000 CR4: 0000000000350ee0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 Call Trace: should_failslab+0x5/0x20 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 kmem_cache_zalloc include/linux/slab.h:654 [inline] __kernfs_new_node+0xd4/0x850 fs/kernfs/dir.c:635 kernfs_new_node fs/kernfs/dir.c:697 [inline] kernfs_create_dir_ns+0x9c/0x230 fs/kernfs/dir.c:1033 kernfs_create_dir include/linux/kernfs.h:561 [inline] cgroup_create kernel/cgroup/cgroup.c:5328 [inline] cgroup_mkdir+0x318/0xf50 kernel/cgroup/cgroup.c:5462 kernfs_iop_mkdir+0x14d/0x1e0 fs/kernfs/dir.c:1134 vfs_mkdir+0x493/0x700 fs/namei.c:3712 do_mkdirat+0x150/0x2b0 fs/namei.c:3734 get_probe_ref kernel/trace/blktrace.c:327 [inline] do_blk_trace_setup+0x9db/0xc10 kernel/trace/blktrace.c:578 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fa988c79b19 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:597 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa9861ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007fa988d8cf60 RCX: 00007fa988c79b19 RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000004 RBP: 00007fa9861ef1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 blk_trace_setup+0x43/0x60 kernel/trace/blktrace.c:615 R13: 00007ffe50cd59af R14: 00007fa9861ef300 R15: 0000000000022000 sg_ioctl_common+0x634/0x2570 drivers/scsi/sg.c:1115 sg_ioctl+0x8f/0x120 drivers/scsi/sg.c:1158 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fe9393e8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe93695e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe9394fbf60 RCX: 00007fe9393e8b19 RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007fe93695e1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffd2847f6f R14: 00007fe93695e300 R15: 0000000000022000 irq event stamp: 1219 hardirqs last enabled at (1227): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2561 hardirqs last disabled at (1236): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2476 softirqs last enabled at (880): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (875): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace d1a2d5c6b073ca02 ]--- netlink: 'syz-executor.5': attribute type 10 has an invalid length. audit: type=1326 audit(1688017696.899:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13447 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15e164eb19 code=0x0 EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ------------[ cut here ]------------ WARNING: CPU: 0 PID: 13464 at kernel/tracepoint.c:425 tracepoint_remove_func kernel/tracepoint.c:425 [inline] WARNING: CPU: 0 PID: 13464 at kernel/tracepoint.c:425 tracepoint_probe_unregister+0x776/0xd20 kernel/tracepoint.c:572 Modules linked in: CPU: 0 PID: 13464 Comm: syz-executor.4 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:tracepoint_remove_func kernel/tracepoint.c:425 [inline] RIP: 0010:tracepoint_probe_unregister+0x776/0xd20 kernel/tracepoint.c:572 Code: ff ff be c0 0c 00 00 48 c7 c7 ff ff ff ff 89 c2 e8 8f af 19 00 48 89 44 24 10 e9 58 fa ff ff 41 bc fe ff ff ff e8 da ba fd ff <0f> 0b e9 7b fd ff ff e8 ce ba fd ff 48 89 de 48 c7 c7 00 f0 ff ff RSP: 0018:ffff88801eb47cb0 EFLAGS: 00010212 RAX: 00000000000109bb RBX: 0000000000000000 RCX: ffffc90003dc0000 RDX: 0000000000040000 RSI: ffffffff8142a856 RDI: 0000000000000005 RBP: ffff888017fd9700 R08: 0000000000000001 R09: ffffffff850393a7 R10: 0000000000000000 R11: 0000000000000001 R12: 00000000fffffffe R13: ffffffff81473c00 R14: 0000000000008000 R15: 0000000000001276 FS: 00007fe93691c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff4c022afe8 CR3: 000000004a386000 CR4: 0000000000350ef0 Call Trace: unregister_trace_block_rq_insert include/trace/events/block.h:190 [inline] blk_unregister_tracepoints+0x16a/0x180 kernel/trace/blktrace.c:1194 put_probe_ref kernel/trace/blktrace.c:335 [inline] blk_trace_cleanup kernel/trace/blktrace.c:343 [inline] __blk_trace_remove+0x1b0/0x1e0 kernel/trace/blktrace.c:356 blk_trace_remove+0x26/0x40 kernel/trace/blktrace.c:366 sg_ioctl_common+0xc8e/0x2570 drivers/scsi/sg.c:1124 sg_ioctl+0x8f/0x120 drivers/scsi/sg.c:1158 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fe9393e8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe93691c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe9394fc0e0 RCX: 00007fe9393e8b19 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 RBP: 00007fe939442f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd2847f6f R14: 00007fe93691c300 R15: 0000000000022000 irq event stamp: 2181 hardirqs last enabled at (2193): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2561 hardirqs last disabled at (2206): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2476 softirqs last enabled at (1846): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (1833): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace d1a2d5c6b073ca03 ]--- netlink: 'syz-executor.5': attribute type 10 has an invalid length. netlink: 1568 bytes leftover after parsing attributes in process `syz-executor.2'. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 13482 Comm: syz-executor.7 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 mem_pool_alloc mm/kmemleak.c:423 [inline] create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:578 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] slab_post_alloc_hook mm/slab.h:534 [inline] slab_alloc_node mm/slub.c:2896 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x159/0x310 mm/slub.c:2909 kmem_cache_zalloc include/linux/slab.h:654 [inline] __kernfs_new_node+0xd4/0x850 fs/kernfs/dir.c:635 kernfs_new_node fs/kernfs/dir.c:697 [inline] kernfs_create_dir_ns+0x9c/0x230 fs/kernfs/dir.c:1033 kernfs_create_dir include/linux/kernfs.h:561 [inline] cgroup_create kernel/cgroup/cgroup.c:5328 [inline] cgroup_mkdir+0x318/0xf50 kernel/cgroup/cgroup.c:5462 kernfs_iop_mkdir+0x14d/0x1e0 fs/kernfs/dir.c:1134 vfs_mkdir+0x493/0x700 fs/namei.c:3712 do_mkdirat+0x150/0x2b0 fs/namei.c:3734 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fa988c79b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa9861ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007fa988d8cf60 RCX: 00007fa988c79b19 RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000004 RBP: 00007fa9861ef1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffe50cd59af R14: 00007fa9861ef300 R15: 0000000000022000 netlink: 1568 bytes leftover after parsing attributes in process `syz-executor.2'. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 13487 Comm: syz-executor.4 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 mem_pool_alloc mm/kmemleak.c:423 [inline] create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:578 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] slab_post_alloc_hook mm/slab.h:534 [inline] slab_alloc_node mm/slub.c:2896 [inline] slab_alloc mm/slub.c:2904 [inline] __kmalloc+0x16e/0x390 mm/slub.c:3967 kmalloc include/linux/slab.h:557 [inline] allocate_probes kernel/tracepoint.c:109 [inline] func_add kernel/tracepoint.c:207 [inline] tracepoint_add_func+0x35b/0x1000 kernel/tracepoint.c:359 tracepoint_probe_register_prio kernel/tracepoint.c:532 [inline] tracepoint_probe_register+0xa1/0xf0 kernel/tracepoint.c:552 register_trace_block_rq_insert include/trace/events/block.h:190 [inline] blk_register_tracepoints+0x1b/0x3e0 kernel/trace/blktrace.c:1140 get_probe_ref kernel/trace/blktrace.c:327 [inline] do_blk_trace_setup+0x9db/0xc10 kernel/trace/blktrace.c:578 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:597 blk_trace_setup+0x43/0x60 kernel/trace/blktrace.c:615 sg_ioctl_common+0x634/0x2570 drivers/scsi/sg.c:1115 sg_ioctl+0x8f/0x120 drivers/scsi/sg.c:1158 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fe9393e8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe93695e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe9394fbf60 RCX: 00007fe9393e8b19 RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007fe93695e1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffd2847f6f R14: 00007fe93695e300 R15: 0000000000022000 EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue EXT4-fs error (device loop0): __ext4_new_inode:1068: comm syz-executor.0: reserved inode found cleared - inode=1 netlink: 'syz-executor.5': attribute type 10 has an invalid length. FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 13504 Comm: syz-executor.7 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 radix_tree_node_alloc.constprop.0+0x1e3/0x300 lib/radix-tree.c:251 idr_get_free+0x4b5/0x8f0 lib/radix-tree.c:1504 idr_alloc_u32+0x170/0x2d0 lib/idr.c:46 idr_alloc_cyclic+0x102/0x230 lib/idr.c:125 __kernfs_new_node+0x117/0x850 fs/kernfs/dir.c:641 kernfs_new_node fs/kernfs/dir.c:697 [inline] kernfs_create_dir_ns+0x9c/0x230 fs/kernfs/dir.c:1033 kernfs_create_dir include/linux/kernfs.h:561 [inline] cgroup_create kernel/cgroup/cgroup.c:5328 [inline] cgroup_mkdir+0x318/0xf50 kernel/cgroup/cgroup.c:5462 kernfs_iop_mkdir+0x14d/0x1e0 fs/kernfs/dir.c:1134 vfs_mkdir+0x493/0x700 fs/namei.c:3712 do_mkdirat+0x150/0x2b0 fs/namei.c:3734 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fa988c79b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa9861ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007fa988d8cf60 RCX: 00007fa988c79b19 RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000004 RBP: 00007fa9861ef1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffe50cd59af R14: 00007fa9861ef300 R15: 0000000000022000 audit: type=1326 audit(1688017697.733:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13447 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15e164eb19 code=0x0 Process accounting paused FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 13509 Comm: syz-executor.4 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] __kmalloc+0x72/0x390 mm/slub.c:3967 kmalloc include/linux/slab.h:557 [inline] allocate_probes kernel/tracepoint.c:109 [inline] func_add kernel/tracepoint.c:207 [inline] tracepoint_add_func+0x35b/0x1000 kernel/tracepoint.c:359 tracepoint_probe_register_prio kernel/tracepoint.c:532 [inline] tracepoint_probe_register+0xa1/0xf0 kernel/tracepoint.c:552 register_trace_block_rq_issue include/trace/events/block.h:204 [inline] blk_register_tracepoints+0x48/0x3e0 kernel/trace/blktrace.c:1142 get_probe_ref kernel/trace/blktrace.c:327 [inline] do_blk_trace_setup+0x9db/0xc10 kernel/trace/blktrace.c:578 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:597 blk_trace_setup+0x43/0x60 kernel/trace/blktrace.c:615 sg_ioctl_common+0x634/0x2570 drivers/scsi/sg.c:1115 sg_ioctl+0x8f/0x120 drivers/scsi/sg.c:1158 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fe9393e8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe93695e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe9394fbf60 RCX: 00007fe9393e8b19 RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007fe93695e1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffd2847f6f R14: 00007fe93695e300 R15: 0000000000022000 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 13509 at kernel/trace/blktrace.c:1143 blk_register_tracepoints+0x315/0x3e0 kernel/trace/blktrace.c:1143 Modules linked in: CPU: 0 PID: 13509 Comm: syz-executor.4 Tainted: G W 5.10.185 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:blk_register_tracepoints+0x315/0x3e0 kernel/trace/blktrace.c:1143 Code: 31 ff 89 c3 89 c6 e8 3a 89 f9 ff 85 db 0f 85 c6 00 00 00 5b e9 dc 8f f9 ff e8 d7 8f f9 ff 0f 0b e9 1e fd ff ff e8 cb 8f f9 ff <0f> 0b e9 3f fd ff ff e8 bf 8f f9 ff 0f 0b e9 60 fd ff ff e8 b3 8f RSP: 0018:ffff8880524efbc8 EFLAGS: 00010216 RAX: 0000000000021182 RBX: 00000000fffffff4 RCX: ffffc900023b3000 RDX: 0000000000040000 RSI: ffffffff8146d365 RDI: 0000000000000005 RBP: ffff88800da08e00 R08: 0000000000000001 R09: ffffffff850393a7 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88800da08e30 R15: 0000000000000000 FS: 00007fe93695e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe9394f2950 CR3: 000000003d842000 CR4: 0000000000350ef0 Call Trace: get_probe_ref kernel/trace/blktrace.c:327 [inline] do_blk_trace_setup+0x9db/0xc10 kernel/trace/blktrace.c:578 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:597 blk_trace_setup+0x43/0x60 kernel/trace/blktrace.c:615 sg_ioctl_common+0x634/0x2570 drivers/scsi/sg.c:1115 sg_ioctl+0x8f/0x120 drivers/scsi/sg.c:1158 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fe9393e8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe93695e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe9394fbf60 RCX: 00007fe9393e8b19 RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007fe93695e1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffd2847f6f R14: 00007fe93695e300 R15: 0000000000022000 irq event stamp: 1365 hardirqs last enabled at (1375): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2561 hardirqs last disabled at (1386): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2476 softirqs last enabled at (980): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (975): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace d1a2d5c6b073ca04 ]--- ---------------- Code disassembly (best guess), 1 bytes skipped: 0: ff c3 inc %ebx 2: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1) 9: 00 00 00 c: 0f 1f 40 00 nopl 0x0(%rax) 10: 48 89 f8 mov %rdi,%rax 13: 48 89 f7 mov %rsi,%rdi 16: 48 89 d6 mov %rdx,%rsi 19: 48 89 ca mov %rcx,%rdx 1c: 4d 89 c2 mov %r8,%r10 1f: 4d 89 c8 mov %r9,%r8 22: 4c 8b 4c 24 08 mov 0x8(%rsp),%r9 27: 0f 05 syscall * 29: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 2f: 73 01 jae 0x32 31: c3 retq 32: 48 c7 c1 bc ff ff ff mov $0xffffffffffffffbc,%rcx 39: f7 d8 neg %eax 3b: 64 89 01 mov %eax,%fs:(%rcx) 3e: 48 rex.W