./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor842295480 <...> Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. execve("./syz-executor842295480", ["./syz-executor842295480"], 0x7ffe9db688d0 /* 10 vars */) = 0 brk(NULL) = 0x55558244b000 brk(0x55558244bd00) = 0x55558244bd00 arch_prctl(ARCH_SET_FS, 0x55558244b380) = 0 set_tid_address(0x55558244b650) = 5817 set_robust_list(0x55558244b660, 24) = 0 rseq(0x55558244bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor842295480", 4096) = 27 getrandom("\xf2\xe1\x23\xe7\x33\x65\x8a\x5b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558244bd00 brk(0x55558246cd00) = 0x55558246cd00 brk(0x55558246d000) = 0x55558246d000 mprotect(0x7f8ddb58e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558244b650) = 5818 ./strace-static-x86_64: Process 5818 attached [pid 5818] set_robust_list(0x55558244b660, 24) = 0 [pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5818] getppid() = 0 [pid 5818] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5818] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5818] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5818] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5818] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5818] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5818] unshare(CLONE_NEWNS) = 0 [pid 5818] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] unshare(CLONE_NEWIPC) = 0 [pid 5818] unshare(CLONE_NEWCGROUP) = 0 [pid 5818] unshare(CLONE_NEWUTS) = 0 [pid 5818] unshare(CLONE_SYSVSEM) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "16777216", 8) = 8 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "536870912", 9) = 9 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1024", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "8192", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1024", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1024", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5818] close(3) = 0 [pid 5818] getpid() = 1 [pid 5818] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0 [pid 5818] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0 [pid 5818] unshare(CLONE_NEWNET) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "0 65535", 7) = 7 [pid 5818] close(3) = 0 [pid 5818] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "100000", 6) = 6 [pid 5818] close(3) = 0 [pid 5818] mkdir("./syz-tmp", 0777) = 0 [pid 5818] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 5818] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5818] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5818] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 5818] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 5818] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 5818] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5818] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5818] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 5818] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5818] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 5818] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 5818] chdir("/") = 0 [pid 5818] umount2("./pivot", MNT_DETACH) = 0 [pid 5818] chroot("./newroot") = 0 [pid 5818] chdir("/") = 0 [pid 5818] mkdir("/dev/gadgetfs", 0777) = 0 [pid 5818] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0 [pid 5818] mkdir("/dev/binderfs", 0777) = 0 [pid 5818] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 5818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5818] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5818] write(1, "executing program\n", 18executing program ) = 18 [pid 5818] memfd_create("syzkaller", 0) = 3 [pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8dd3000000 [pid 5818] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5818] munmap(0x7f8dd3000000, 138412032) = 0 [pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5818] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5818] close(3) = 0 [pid 5818] close(4) = 0 [pid 5818] mkdir("./file0", 0777) = 0 syzkaller login: [ 60.246047][ T5818] loop0: detected capacity change from 0 to 256 [ 60.278533][ T5818] ======================================================= [ 60.278533][ T5818] WARNING: The mand mount option has been deprecated and [pid 5818] mount("/dev/loop0", "./file0", "exfat", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_I_VERSION|MS_BORN, "umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=0x0"...) = 0 [pid 5818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5818] chdir("./file0") = 0 [ 60.278533][ T5818] and is ignored by this kernel. Remove the mand [ 60.278533][ T5818] option from the mount to silence this warning. [ 60.278533][ T5818] ======================================================= [ 60.313959][ T5818] exfat: Deprecated parameter 'namecase' [ 60.327806][ T5818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5818] mknod("./file0", 000) = 0 [pid 5818] exit_group(1) = ? [ 60.398889][ T5818] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 60.438525][ C0] ------------[ cut here ]------------ [ 60.444058][ C0] VFS: brelse: Trying to free free buffer [ 60.449974][ C0] WARNING: CPU: 0 PID: 3603 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0 [ 60.458879][ C0] Modules linked in: [ 60.462800][ C0] CPU: 0 UID: 0 PID: 3603 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 60.473662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 60.483739][ C0] Workqueue: netns cleanup_net [ 60.488547][ C0] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 60.494289][ C0] Code: a4 30 dc ff f0 ff 0b eb 25 e8 5a 50 78 ff 41 80 3c 2e 00 75 2a eb 30 e8 4c 50 78 ff 90 48 c7 c7 20 ee 18 8c e8 6f f3 38 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 60.513996][ C0] RSP: 0018:ffffc90000007f30 EFLAGS: 00010046 [ 60.520076][ C0] RAX: 33453e1cb0f7c000 RBX: ffff88807295b970 RCX: ffff8880329e5a00 [ 60.528066][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.536047][ C0] RBP: 0000000000000000 R08: ffffffff81601962 R09: 1ffff110170c519a [ 60.544031][ C0] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838 [ 60.552021][ C0] R13: 0000000000000000 R14: 1ffff110170c7307 R15: ffff8880b8639838 [ 60.560007][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 60.568959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.575554][ C0] CR2: 00007f8ddb592130 CR3: 00000000790be000 CR4: 00000000003526f0 [ 60.583542][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.591527][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.599513][ C0] Call Trace: [ 60.602802][ C0] <IRQ> [ 60.605651][ C0] ? __warn+0x165/0x4d0 [ 60.609823][ C0] ? invalidate_bh_lru+0x102/0x1b0 [ 60.614965][ C0] ? report_bug+0x2b3/0x500 [ 60.619484][ C0] ? invalidate_bh_lru+0x102/0x1b0 [ 60.624632][ C0] ? handle_bug+0x60/0x90 [ 60.628975][ C0] ? exc_invalid_op+0x1a/0x50 [ 60.633663][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 60.638716][ C0] ? __warn_printk+0x292/0x360 [ 60.643499][ C0] ? invalidate_bh_lru+0x102/0x1b0 [ 60.648721][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.654200][ C0] __flush_smp_call_function_queue+0x3fc/0x1620 [ 60.660465][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.665953][ C0] __sysvec_call_function_single+0xb8/0x430 [ 60.671871][ C0] sysvec_call_function_single+0x9e/0xc0 [ 60.677522][ C0] </IRQ> [ 60.680464][ C0] <TASK> [ 60.683403][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 60.689428][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 60.695963][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e f6 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 53 27 aa f5 65 8b 05 c4 79 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 60.715586][ C0] RSP: 0018:ffffc9000cb0f0c0 EFLAGS: 00000206 [ 60.721668][ C0] RAX: 33453e1cb0f7c000 RBX: 1ffff92001961e1c RCX: ffffffff817b270a [ 60.729661][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 60.737665][ C0] RBP: ffffc9000cb0f150 R08: ffffffff942708b7 R09: 1ffffffff284e116 [ 60.745658][ C0] R10: dffffc0000000000 R11: fffffbfff284e117 R12: dffffc0000000000 [ 60.753656][ C0] R13: 1ffff92001961e18 R14: ffffc9000cb0f0e0 R15: 0000000000000246 [ 60.761658][ C0] ? mark_lock+0x9a/0x360 [ 60.766018][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 60.772373][ C0] debug_check_no_obj_freed+0x561/0x580 [ 60.777969][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 60.784061][ C0] ? page_ext_get+0x1d6/0x2a0 [ 60.788764][ C0] free_unref_page+0x4c6/0x1000 [ 60.793643][ C0] __put_partials+0x160/0x1c0 [ 60.798347][ C0] ? put_cpu_partial+0x14c/0x250 [ 60.803301][ C0] put_cpu_partial+0x17c/0x250 [ 60.808083][ C0] ? put_cpu_partial+0x70/0x250 [ 60.812956][ C0] __slab_free+0x290/0x380 [ 60.817390][ C0] ? __phys_addr+0xba/0x170 [ 60.821909][ C0] qlist_free_all+0x9a/0x140 [ 60.826533][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 60.832012][ C0] __kasan_slab_alloc+0x23/0x80 [ 60.836882][ C0] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 60.842796][ C0] ? __alloc_skb+0x1c3/0x440 [ 60.847408][ C0] __alloc_skb+0x1c3/0x440 [ 60.851841][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.857065][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 60.862021][ C0] ? addrconf_ifdown+0x1871/0x1bd0 [ 60.867158][ C0] inet6_netconf_notify_devconf+0xfc/0x1c0 [ 60.872988][ C0] addrconf_ifdown+0x1887/0x1bd0 [ 60.877954][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 60.883261][ C0] ? tls_dev_event+0x8f6/0x10c0 [ 60.888147][ C0] addrconf_notify+0x3cb/0x1020 [ 60.893019][ C0] notifier_call_chain+0x1a5/0x3f0 [ 60.898152][ C0] unregister_netdevice_many_notify+0xedd/0x1da0 [ 60.904514][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 60.911292][ C0] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 60.916787][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 60.922789][ C0] cleanup_net+0x75d/0xd50 [ 60.927222][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 60.932175][ C0] ? process_scheduled_works+0x976/0x1840 [ 60.937916][ C0] process_scheduled_works+0xa66/0x1840 [ 60.943501][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 60.949509][ C0] ? assign_work+0x364/0x3d0 [ 60.954121][ C0] worker_thread+0x870/0xd30 [ 60.958737][ C0] ? __kthread_parkme+0x169/0x1d0 [ 60.963777][ C0] ? __pfx_worker_thread+0x10/0x10 [ 60.968907][ C0] kthread+0x2f0/0x390 [ 60.972995][ C0] ? __pfx_worker_thread+0x10/0x10 [ 60.978118][ C0] ? __pfx_kthread+0x10/0x10 [ 60.982727][ C0] ret_from_fork+0x4b/0x80 [ 60.987157][ C0] ? __pfx_kthread+0x10/0x10 [ 60.991761][ C0] ret_from_fork_asm+0x1a/0x30 [ 60.996556][ C0] </TASK> [ 60.999594][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.006891][ C0] CPU: 0 UID: 0 PID: 3603 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 61.017759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 61.027833][ C0] Workqueue: netns cleanup_net [ 61.032618][ C0] Call Trace: [ 61.035905][ C0] <IRQ> [ 61.038758][ C0] dump_stack_lvl+0x241/0x360 [ 61.043456][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.048679][ C0] ? __pfx__printk+0x10/0x10 [ 61.053315][ C0] ? vscnprintf+0x5d/0x90 [ 61.057666][ C0] panic+0x349/0x880 [ 61.061577][ C0] ? __warn+0x174/0x4d0 [ 61.065745][ C0] ? __pfx_panic+0x10/0x10 [ 61.070183][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 61.075150][ C0] __warn+0x344/0x4d0 [ 61.079140][ C0] ? invalidate_bh_lru+0x102/0x1b0 [ 61.084270][ C0] report_bug+0x2b3/0x500 [ 61.088614][ C0] ? invalidate_bh_lru+0x102/0x1b0 [ 61.093756][ C0] handle_bug+0x60/0x90 [ 61.097921][ C0] exc_invalid_op+0x1a/0x50 [ 61.102446][ C0] asm_exc_invalid_op+0x1a/0x20 [ 61.107323][ C0] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 61.113063][ C0] Code: a4 30 dc ff f0 ff 0b eb 25 e8 5a 50 78 ff 41 80 3c 2e 00 75 2a eb 30 e8 4c 50 78 ff 90 48 c7 c7 20 ee 18 8c e8 6f f3 38 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 61.132686][ C0] RSP: 0018:ffffc90000007f30 EFLAGS: 00010046 [ 61.138772][ C0] RAX: 33453e1cb0f7c000 RBX: ffff88807295b970 RCX: ffff8880329e5a00 [ 61.146754][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.154738][ C0] RBP: 0000000000000000 R08: ffffffff81601962 R09: 1ffff110170c519a [ 61.162721][ C0] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838 [ 61.170705][ C0] R13: 0000000000000000 R14: 1ffff110170c7307 R15: ffff8880b8639838 [ 61.178694][ C0] ? __warn_printk+0x292/0x360 [ 61.183501][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 61.188990][ C0] __flush_smp_call_function_queue+0x3fc/0x1620 [ 61.195265][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 61.200757][ C0] __sysvec_call_function_single+0xb8/0x430 [ 61.206675][ C0] sysvec_call_function_single+0x9e/0xc0 [ 61.212352][ C0] </IRQ> [ 61.215289][ C0] <TASK> [ 61.218227][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 61.224229][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 61.230761][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e f6 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 53 27 aa f5 65 8b 05 c4 79 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 61.250396][ C0] RSP: 0018:ffffc9000cb0f0c0 EFLAGS: 00000206 [ 61.256492][ C0] RAX: 33453e1cb0f7c000 RBX: 1ffff92001961e1c RCX: ffffffff817b270a [ 61.264488][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 61.272479][ C0] RBP: ffffc9000cb0f150 R08: ffffffff942708b7 R09: 1ffffffff284e116 [ 61.280465][ C0] R10: dffffc0000000000 R11: fffffbfff284e117 R12: dffffc0000000000 [ 61.288451][ C0] R13: 1ffff92001961e18 R14: ffffc9000cb0f0e0 R15: 0000000000000246 [ 61.296439][ C0] ? mark_lock+0x9a/0x360 [ 61.300794][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 61.307142][ C0] debug_check_no_obj_freed+0x561/0x580 [ 61.312721][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 61.318815][ C0] ? page_ext_get+0x1d6/0x2a0 [ 61.323517][ C0] free_unref_page+0x4c6/0x1000 [ 61.328392][ C0] __put_partials+0x160/0x1c0 [ 61.333086][ C0] ? put_cpu_partial+0x14c/0x250 [ 61.338040][ C0] put_cpu_partial+0x17c/0x250 [ 61.342819][ C0] ? put_cpu_partial+0x70/0x250 [ 61.347695][ C0] __slab_free+0x290/0x380 [ 61.352129][ C0] ? __phys_addr+0xba/0x170 [ 61.356652][ C0] qlist_free_all+0x9a/0x140 [ 61.361263][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 61.366749][ C0] __kasan_slab_alloc+0x23/0x80 [ 61.371629][ C0] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 61.377552][ C0] ? __alloc_skb+0x1c3/0x440 [ 61.382170][ C0] __alloc_skb+0x1c3/0x440 [ 61.386613][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.391839][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 61.396801][ C0] ? addrconf_ifdown+0x1871/0x1bd0 [ 61.401949][ C0] inet6_netconf_notify_devconf+0xfc/0x1c0 [ 61.407781][ C0] addrconf_ifdown+0x1887/0x1bd0 [ 61.412752][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 61.418063][ C0] ? tls_dev_event+0x8f6/0x10c0 [ 61.422950][ C0] addrconf_notify+0x3cb/0x1020 [ 61.427824][ C0] notifier_call_chain+0x1a5/0x3f0 [ 61.432960][ C0] unregister_netdevice_many_notify+0xedd/0x1da0 [ 61.439361][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 61.446140][ C0] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 61.451635][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 61.457635][ C0] cleanup_net+0x75d/0xd50 [ 61.462072][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 61.467029][ C0] ? process_scheduled_works+0x976/0x1840 [ 61.472839][ C0] process_scheduled_works+0xa66/0x1840 [ 61.478425][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 61.484513][ C0] ? assign_work+0x364/0x3d0 [ 61.489127][ C0] worker_thread+0x870/0xd30 [ 61.493742][ C0] ? __kthread_parkme+0x169/0x1d0 [ 61.498786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 61.503918][ C0] kthread+0x2f0/0x390 [ 61.508004][ C0] ? __pfx_worker_thread+0x10/0x10 [ 61.513134][ C0] ? __pfx_kthread+0x10/0x10 [ 61.517743][ C0] ret_from_fork+0x4b/0x80 [ 61.522175][ C0] ? __pfx_kthread+0x10/0x10 [ 61.526781][ C0] ret_from_fork_asm+0x1a/0x30 [ 61.531584][ C0] </TASK> [ 61.534937][ C0] Kernel Offset: disabled [ 61.539298][ C0] Rebooting in 86400 seconds..