./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor870023064 <...> Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. execve("./syz-executor870023064", ["./syz-executor870023064"], 0x7ffebc4a5270 /* 10 vars */) = 0 brk(NULL) = 0x55555d1b0000 brk(0x55555d1b0d00) = 0x55555d1b0d00 arch_prctl(ARCH_SET_FS, 0x55555d1b0380) = 0 set_tid_address(0x55555d1b0650) = 5056 set_robust_list(0x55555d1b0660, 24) = 0 rseq(0x55555d1b0ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor870023064", 4096) = 27 getrandom("\x8c\xec\x2d\x2f\x0c\x76\xdf\x96", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555d1b0d00 brk(0x55555d1d1d00) = 0x55555d1d1d00 brk(0x55555d1d2000) = 0x55555d1d2000 mprotect(0x7f1b50e83000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1b48800000 write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7f1b48800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 60.111426][ T5056] loop0: detected capacity change from 0 to 128 [ 60.157444][ T5056] oldfs: cannot read superblock [ 60.162797][ T5056] ------------[ cut here ]------------ [ 60.168316][ T5056] VFS: brelse: Trying to free free buffer [ 60.174124][ T5056] WARNING: CPU: 0 PID: 5056 at fs/buffer.c:1235 invalidate_bh_lru+0x102/0x1b0 [ 60.182986][ T5056] Modules linked in: [ 60.186868][ T5056] CPU: 0 PID: 5056 Comm: syz-executor870 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 60.197085][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.207499][ T5056] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 60.213700][ T5056] Code: 64 41 dd ff f0 ff 0b eb 25 e8 ba 3d 7d ff 41 80 3c 2e 00 75 2a eb 30 e8 ac 3d 7d ff 90 48 c7 c7 20 d0 b8 8b e8 df 11 40 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 60.233311][ T5056] RSP: 0018:ffffc9000411f908 EFLAGS: 00010046 [ 60.239382][ T5056] RAX: 3e48b8a36cf33900 RBX: ffff888076d554e8 RCX: ffff88802ec40000 [ 60.247346][ T5056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.255338][ T5056] RBP: 0000000000000000 R08: ffffffff8157cb22 R09: 1ffff110172851a2 [ 60.263304][ T5056] R10: dffffc0000000000 R11: ffffed10172851a3 R12: ffff8880b9439030 [ 60.271279][ T5056] R13: 0000000000000000 R14: 1ffff11017287206 R15: ffff8880b9439030 [ 60.279241][ T5056] FS: 000055555d1b0380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 60.288166][ T5056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.294742][ T5056] CR2: 0000560bb27e2310 CR3: 00000000288bc000 CR4: 00000000003506f0 [ 60.302794][ T5056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.310767][ T5056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.318727][ T5056] Call Trace: [ 60.322002][ T5056] [ 60.324923][ T5056] ? __warn+0x163/0x4b0 [ 60.329076][ T5056] ? invalidate_bh_lru+0x102/0x1b0 [ 60.334188][ T5056] ? report_bug+0x2b3/0x500 [ 60.338697][ T5056] ? invalidate_bh_lru+0x102/0x1b0 [ 60.343808][ T5056] ? handle_bug+0x3e/0x70 [ 60.348128][ T5056] ? exc_invalid_op+0x1a/0x50 [ 60.352799][ T5056] ? asm_exc_invalid_op+0x1a/0x20 [ 60.357819][ T5056] ? __warn_printk+0x292/0x360 [ 60.362578][ T5056] ? invalidate_bh_lru+0x102/0x1b0 [ 60.367685][ T5056] ? invalidate_bh_lru+0x101/0x1b0 [ 60.372790][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.378247][ T5056] smp_call_function_many_cond+0x15ca/0x2960 [ 60.384223][ T5056] ? __pfx_has_bh_in_lru+0x10/0x10 [ 60.389333][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.394883][ T5056] ? filemap_write_and_wait_range+0x248/0x2c0 [ 60.400944][ T5056] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 60.407965][ T5056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 60.413939][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.419390][ T5056] ? __pfx_has_bh_in_lru+0x10/0x10 [ 60.424501][ T5056] on_each_cpu_cond_mask+0x3f/0x80 [ 60.429610][ T5056] blkdev_flush_mapping+0x14c/0x2b0 [ 60.434807][ T5056] bdev_release+0x6e8/0xa20 [ 60.439309][ T5056] ? __pfx_blkdev_release+0x10/0x10 [ 60.444497][ T5056] blkdev_release+0x15/0x20 [ 60.448993][ T5056] __fput+0x429/0x8a0 [ 60.452980][ T5056] task_work_run+0x24f/0x310 [ 60.457592][ T5056] ? __pfx_task_work_run+0x10/0x10 [ 60.462722][ T5056] ? lockdep_hardirqs_on+0x99/0x150 [ 60.467953][ T5056] ptrace_notify+0x2d2/0x380 [ 60.472556][ T5056] ? kfree+0x14a/0x380 [ 60.476654][ T5056] ? __pfx_ptrace_notify+0x10/0x10 [ 60.481770][ T5056] ? __se_sys_mount+0x37c/0x3c0 [ 60.486652][ T5056] ? __pfx___se_sys_mount+0x10/0x10 [ 60.491871][ T5056] syscall_exit_work+0xbd/0x170 [ 60.496735][ T5056] syscall_exit_to_user_mode+0x273/0x360 [ 60.502395][ T5056] do_syscall_64+0x10a/0x240 [ 60.507009][ T5056] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.512932][ T5056] RIP: 0033:0x7f1b50e07bba [ 60.517355][ T5056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.536984][ T5056] RSP: 002b:00007ffdb42ccc38 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 60.545427][ T5056] RAX: ffffffffffffffea RBX: 00007ffdb42ccc50 RCX: 00007f1b50e07bba [ 60.553410][ T5056] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00007ffdb42ccc50 [ 60.561373][ T5056] RBP: 0000000000000004 R08: 00007ffdb42ccc90 R09: 00ff373737373737 [ 60.569336][ T5056] R10: 0000000000004000 R11: 0000000000000282 R12: 0000000000004000 [ 60.577299][ T5056] R13: 00007ffdb42ccc90 R14: 0000000000000003 R15: 0000000000010000 [ 60.585274][ T5056] [ 60.588287][ T5056] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.595567][ T5056] CPU: 0 PID: 5056 Comm: syz-executor870 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 60.606489][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.616545][ T5056] Call Trace: [ 60.619834][ T5056] [ 60.622769][ T5056] dump_stack_lvl+0x241/0x360 [ 60.627448][ T5056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.632636][ T5056] ? __pfx__printk+0x10/0x10 [ 60.637230][ T5056] ? vscnprintf+0x5d/0x90 [ 60.641557][ T5056] panic+0x349/0x860 [ 60.645452][ T5056] ? __warn+0x172/0x4b0 [ 60.649603][ T5056] ? __pfx_panic+0x10/0x10 [ 60.654022][ T5056] __warn+0x31e/0x4b0 [ 60.657998][ T5056] ? invalidate_bh_lru+0x102/0x1b0 [ 60.663106][ T5056] report_bug+0x2b3/0x500 [ 60.667426][ T5056] ? invalidate_bh_lru+0x102/0x1b0 [ 60.672540][ T5056] handle_bug+0x3e/0x70 [ 60.676711][ T5056] exc_invalid_op+0x1a/0x50 [ 60.681208][ T5056] asm_exc_invalid_op+0x1a/0x20 [ 60.686051][ T5056] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 60.691853][ T5056] Code: 64 41 dd ff f0 ff 0b eb 25 e8 ba 3d 7d ff 41 80 3c 2e 00 75 2a eb 30 e8 ac 3d 7d ff 90 48 c7 c7 20 d0 b8 8b e8 df 11 40 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 60.712753][ T5056] RSP: 0018:ffffc9000411f908 EFLAGS: 00010046 [ 60.718814][ T5056] RAX: 3e48b8a36cf33900 RBX: ffff888076d554e8 RCX: ffff88802ec40000 [ 60.726780][ T5056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.734744][ T5056] RBP: 0000000000000000 R08: ffffffff8157cb22 R09: 1ffff110172851a2 [ 60.742707][ T5056] R10: dffffc0000000000 R11: ffffed10172851a3 R12: ffff8880b9439030 [ 60.750667][ T5056] R13: 0000000000000000 R14: 1ffff11017287206 R15: ffff8880b9439030 [ 60.758634][ T5056] ? __warn_printk+0x292/0x360 [ 60.763403][ T5056] ? invalidate_bh_lru+0x101/0x1b0 [ 60.768515][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.773970][ T5056] smp_call_function_many_cond+0x15ca/0x2960 [ 60.779944][ T5056] ? __pfx_has_bh_in_lru+0x10/0x10 [ 60.785064][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.790529][ T5056] ? filemap_write_and_wait_range+0x248/0x2c0 [ 60.796590][ T5056] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 60.802943][ T5056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 60.808949][ T5056] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 60.814444][ T5056] ? __pfx_has_bh_in_lru+0x10/0x10 [ 60.819576][ T5056] on_each_cpu_cond_mask+0x3f/0x80 [ 60.824697][ T5056] blkdev_flush_mapping+0x14c/0x2b0 [ 60.830075][ T5056] bdev_release+0x6e8/0xa20 [ 60.834630][ T5056] ? __pfx_blkdev_release+0x10/0x10 [ 60.840078][ T5056] blkdev_release+0x15/0x20 [ 60.845701][ T5056] __fput+0x429/0x8a0 [ 60.849877][ T5056] task_work_run+0x24f/0x310 [ 60.854556][ T5056] ? __pfx_task_work_run+0x10/0x10 [ 60.859665][ T5056] ? lockdep_hardirqs_on+0x99/0x150 [ 60.864861][ T5056] ptrace_notify+0x2d2/0x380 [ 60.869445][ T5056] ? kfree+0x14a/0x380 [ 60.873511][ T5056] ? __pfx_ptrace_notify+0x10/0x10 [ 60.878617][ T5056] ? __se_sys_mount+0x37c/0x3c0 [ 60.883467][ T5056] ? __pfx___se_sys_mount+0x10/0x10 [ 60.888661][ T5056] syscall_exit_work+0xbd/0x170 [ 60.893523][ T5056] syscall_exit_to_user_mode+0x273/0x360 [ 60.899162][ T5056] do_syscall_64+0x10a/0x240 [ 60.903744][ T5056] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.909634][ T5056] RIP: 0033:0x7f1b50e07bba [ 60.914043][ T5056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.933643][ T5056] RSP: 002b:00007ffdb42ccc38 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 60.942053][ T5056] RAX: ffffffffffffffea RBX: 00007ffdb42ccc50 RCX: 00007f1b50e07bba [ 60.950022][ T5056] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00007ffdb42ccc50 [ 60.957990][ T5056] RBP: 0000000000000004 R08: 00007ffdb42ccc90 R09: 00ff373737373737 [ 60.965971][ T5056] R10: 0000000000004000 R11: 0000000000000282 R12: 0000000000004000 [ 60.973931][ T5056] R13: 00007ffdb42ccc90 R14: 0000000000000003 R15: 0000000000010000 [ 60.981914][ T5056] [ 60.985165][ T5056] Kernel Offset: disabled [ 60.989544][ T5056] Rebooting in 86400 seconds..