./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1404449286 <...> Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. execve("./syz-executor1404449286", ["./syz-executor1404449286"], 0x7ffca0f86f50 /* 10 vars */) = 0 brk(NULL) = 0x555556830000 brk(0x555556830e00) = 0x555556830e00 arch_prctl(ARCH_SET_FS, 0x555556830480) = 0 set_tid_address(0x555556830750) = 5060 set_robust_list(0x555556830760, 24) = 0 rseq(0x555556830da0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1404449286", 4096) = 28 getrandom("\xe2\x91\x70\x49\xf8\x19\xfd\xa9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556830e00 brk(0x555556851e00) = 0x555556851e00 brk(0x555556852000) = 0x555556852000 mprotect(0x7fc7b1547000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fc7b14a2990, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fc7b14aa280}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fc7b14a2990, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fc7b14aa280}, NULL, 8) = 0 getrandom("\xc7\xd4\x46\x7c\xbe\x0b\x7a\x73", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.nLhVOX", 0700) = 0 chmod("./syzkaller.nLhVOX", 0777) = 0 chdir("./syzkaller.nLhVOX") = 0 mkdir("./0", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x555556830750) = 5061 [pid 5061] set_robust_list(0x555556830760, 24) = 0 [pid 5061] chdir("./0") = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] creat("./file0", 000) = 3 [pid 5061] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5061] write(4, "41", 2) = 2 [ 70.515283][ T5061] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 70.523286][ T5061] FAULT_INJECTION: forcing a failure. [ 70.523286][ T5061] name (null), interval 1, probability 0, space 0, times 1 [ 70.536137][ T5061] CPU: 1 PID: 5061 Comm: syz-executor140 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 70.546290][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 70.556637][ T5061] Call Trace: [ 70.559948][ T5061] [ 70.562885][ T5061] dump_stack_lvl+0x1e7/0x2d0 [ 70.567614][ T5061] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.573723][ T5061] ? panic+0x850/0x850 [ 70.577868][ T5061] ? __submit_bio+0x239/0x2e0 [ 70.582682][ T5061] ? blk_free_queue_rcu+0x40/0x40 [ 70.588190][ T5061] should_fail_ex+0x3aa/0x4e0 [ 70.593105][ T5061] null_queue_rq+0x26b/0x640 [ 70.598700][ T5061] null_queue_rqs+0x199/0x2b0 [ 70.603606][ T5061] ? null_queue_rq+0x640/0x640 [ 70.608391][ T5061] ? should_fail_bio+0xd5/0x110 [ 70.613264][ T5061] ? submit_bio_noacct+0xf7a/0x1b70 [ 70.618484][ T5061] ? blk_mq_flush_plug_list+0x272/0x1860 [ 70.624529][ T5061] blk_mq_flush_plug_list+0x56e/0x1860 [ 70.630118][ T5061] ? blk_mq_flush_plug_list+0x272/0x1860 [ 70.635796][ T5061] ? mpage_readahead+0x7da/0x920 [ 70.640793][ T5061] ? blk_mq_start_stopped_hw_queues+0x210/0x210 [ 70.647166][ T5061] ? end_bio_bh_io_sync+0x110/0x110 [ 70.653390][ T5061] __blk_flush_plug+0x446/0x4c0 [ 70.658282][ T5061] ? blk_check_plugged+0x250/0x250 [ 70.663421][ T5061] ? __lock_acquire+0x7f70/0x7f70 [ 70.668469][ T5061] blk_finish_plug+0x5d/0x80 [ 70.673076][ T5061] read_pages+0x639/0x830 [ 70.677538][ T5061] ? folio_add_lru+0x9d0/0x9d0 [ 70.682323][ T5061] ? folio_add_lru+0x27b/0x9d0 [ 70.687135][ T5061] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 70.692809][ T5061] ? filemap_add_folio+0x228/0x570 [ 70.697968][ T5061] ? __filemap_add_folio+0x1ac0/0x1ac0 [ 70.703459][ T5061] ? page_cache_ra_order+0xb1a/0xcc0 [ 70.708783][ T5061] page_cache_ra_unbounded+0x68e/0x7c0 [ 70.714355][ T5061] cramfs_read+0x4c9/0xa70 [ 70.721955][ T5061] ? cramfs_finalize_super+0xd0/0xd0 [ 70.728384][ T5061] ? cramfs_read_super+0xaf/0x970 [ 70.735045][ T5061] cramfs_read_super+0xbe/0x970 [ 70.740036][ T5061] cramfs_blkdev_fill_super+0x115/0x250 [ 70.746066][ T5061] ? cramfs_mtd_fill_super+0x440/0x440 [ 70.751577][ T5061] ? clear_nonspinnable+0x60/0x60 [ 70.756648][ T5061] get_tree_bdev+0x416/0x5b0 [ 70.761272][ T5061] ? cramfs_mtd_fill_super+0x440/0x440 [ 70.766773][ T5061] ? setup_bdev_super+0x630/0x630 [ 70.771822][ T5061] ? cap_capable+0x1b4/0x240 [ 70.776461][ T5061] vfs_get_tree+0x8c/0x280 [ 70.780907][ T5061] do_new_mount+0x28f/0xae0 [ 70.785468][ T5061] ? do_move_mount_old+0x170/0x170 [ 70.790785][ T5061] __se_sys_mount+0x2d9/0x3c0 [ 70.795487][ T5061] ? __x64_sys_mount+0xc0/0xc0 [ 70.800283][ T5061] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.806292][ T5061] ? __x64_sys_mount+0x20/0xc0 [ 70.811102][ T5061] do_syscall_64+0x44/0x110 [ 70.815621][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 70.821554][ T5061] RIP: 0033:0x7fc7b14d4929 [ 70.825996][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.845747][ T5061] RSP: 002b:00007ffef7df6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.854204][ T5061] RAX: ffffffffffffffda RBX: 00007ffef7df6e50 RCX: 00007fc7b14d4929 [ 70.862290][ T5061] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 70.870279][ T5061] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000003134 [ 70.878263][ T5061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.886274][ T5061] R13: 00007ffef7df72a8 R14: 00007ffef7df6eb0 R15: 0000000000000000 [ 70.894470][ T5061] [pid 5061] mount("/dev/nullb0", "./file0", "cramfs", 0, NULL [pid 5060] kill(-5061, SIGKILL) = 0 [pid 5060] kill(5061, SIGKILL) = 0 [pid 5060] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x5555568317f0 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(3, 0x5555568317f0 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5061] <... mount resumed>) = ? [pid 5061] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5061, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 77.314806][ T10] null_blk: rq ffff88801d089c80 timed out [ 77.320969][ T10] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 77.332470][ T5061] cramfs: wrong magic getdents64(3, 0x5555568317f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0") = 0 getdents64(3, 0x5555568317f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x555556830750) = 5062 [pid 5062] set_robust_list(0x555556830760, 24) = 0 [pid 5062] chdir("./1") = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] creat("./file0", 000) = 3 [pid 5062] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5062] write(4, "41", 2) = 2 [ 77.542215][ T5062] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 77.549496][ T5062] FAULT_INJECTION: forcing a failure. [ 77.549496][ T5062] name (null), interval 1, probability 0, space 0, times 0 [ 77.561972][ T5062] CPU: 1 PID: 5062 Comm: syz-executor140 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 77.572050][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 77.582117][ T5062] Call Trace: [ 77.585409][ T5062] [ 77.588347][ T5062] dump_stack_lvl+0x1e7/0x2d0 [ 77.593069][ T5062] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.598556][ T5062] ? panic+0x850/0x850 [ 77.602650][ T5062] ? __submit_bio+0x239/0x2e0 [ 77.607353][ T5062] ? blk_free_queue_rcu+0x40/0x40 [ 77.612405][ T5062] should_fail_ex+0x3aa/0x4e0 [ 77.617101][ T5062] null_queue_rq+0x26b/0x640 [ 77.621877][ T5062] null_queue_rqs+0x199/0x2b0 [ 77.626614][ T5062] ? null_queue_rq+0x640/0x640 [ 77.631404][ T5062] ? should_fail_bio+0xd5/0x110 [ 77.636276][ T5062] ? submit_bio_noacct+0xf7a/0x1b70 [ 77.641538][ T5062] ? blk_mq_flush_plug_list+0x272/0x1860 [ 77.647190][ T5062] blk_mq_flush_plug_list+0x56e/0x1860 [ 77.652663][ T5062] ? blk_mq_flush_plug_list+0x272/0x1860 [ 77.658333][ T5062] ? mpage_readahead+0x7da/0x920 [ 77.663326][ T5062] ? blk_mq_start_stopped_hw_queues+0x210/0x210 [ 77.669611][ T5062] ? end_bio_bh_io_sync+0x110/0x110 [ 77.674860][ T5062] __blk_flush_plug+0x446/0x4c0 [ 77.679753][ T5062] ? blk_check_plugged+0x250/0x250 [ 77.684890][ T5062] ? __lock_acquire+0x7f70/0x7f70 [ 77.689954][ T5062] blk_finish_plug+0x5d/0x80 [ 77.694569][ T5062] read_pages+0x639/0x830 [ 77.698911][ T5062] ? folio_add_lru+0x9d0/0x9d0 [ 77.703692][ T5062] ? folio_add_lru+0x27b/0x9d0 [ 77.708473][ T5062] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 77.714122][ T5062] ? filemap_add_folio+0x228/0x570 [ 77.719801][ T5062] ? __filemap_add_folio+0x1ac0/0x1ac0 [ 77.725398][ T5062] ? page_cache_ra_order+0xb1a/0xcc0 [ 77.731270][ T5062] page_cache_ra_unbounded+0x68e/0x7c0 [ 77.736803][ T5062] cramfs_read+0x4c9/0xa70 [ 77.741445][ T5062] ? cramfs_finalize_super+0xd0/0xd0 [ 77.746845][ T5062] ? cramfs_read_super+0xaf/0x970 [ 77.751922][ T5062] cramfs_read_super+0xbe/0x970 [ 77.756817][ T5062] cramfs_blkdev_fill_super+0x115/0x250 [ 77.762923][ T5062] ? cramfs_mtd_fill_super+0x440/0x440 [ 77.768444][ T5062] ? clear_nonspinnable+0x60/0x60 [ 77.773525][ T5062] get_tree_bdev+0x416/0x5b0 [ 77.778139][ T5062] ? cramfs_mtd_fill_super+0x440/0x440 [ 77.783653][ T5062] ? setup_bdev_super+0x630/0x630 [ 77.788746][ T5062] ? cap_capable+0x1b4/0x240 [ 77.793409][ T5062] vfs_get_tree+0x8c/0x280 [ 77.797883][ T5062] do_new_mount+0x28f/0xae0 [ 77.802414][ T5062] ? do_move_mount_old+0x170/0x170 [ 77.807554][ T5062] __se_sys_mount+0x2d9/0x3c0 [ 77.812249][ T5062] ? __x64_sys_mount+0xc0/0xc0 [ 77.817282][ T5062] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.823315][ T5062] ? __x64_sys_mount+0x20/0xc0 [ 77.828107][ T5062] do_syscall_64+0x44/0x110 [ 77.832650][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 77.838573][ T5062] RIP: 0033:0x7fc7b14d4929 [ 77.843007][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.862749][ T5062] RSP: 002b:00007ffef7df6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.871205][ T5062] RAX: ffffffffffffffda RBX: 00007ffef7df6e50 RCX: 00007fc7b14d4929 [ 77.879391][ T5062] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 77.887476][ T5062] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000003134 [ 77.895476][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7df6e9c [ 77.903492][ T5062] R13: 00007ffef7df6ed0 R14: 00007ffef7df6eb0 R15: 0000000000000001 [ 77.911623][ T5062] [pid 5062] mount("/dev/nullb0", "./file0", "cramfs", 0, NULL [pid 5060] kill(-5062, SIGKILL) = 0 [pid 5060] kill(5062, SIGKILL) = 0 [pid 5060] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x5555568317f0 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(3, 0x5555568317f0 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5062] <... mount resumed>) = ? [pid 5062] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5062, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 83.714165][ T10] null_blk: rq ffff88801d08a400 timed out [ 83.720030][ T10] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 83.730595][ T5062] cramfs: wrong magic getdents64(3, 0x5555568317f0 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/file0") = 0 getdents64(3, 0x5555568317f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x555556830750) = 5063 [pid 5063] set_robust_list(0x555556830760, 24) = 0 [pid 5063] chdir("./2") = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] creat("./file0", 000) = 3 [pid 5063] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5063] write(4, "41", 2) = 2 [ 83.962757][ T5063] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 83.969999][ T5063] FAULT_INJECTION: forcing a failure. [ 83.969999][ T5063] name (null), interval 1, probability 0, space 0, times 1 [ 83.982587][ T5063] CPU: 1 PID: 5063 Comm: syz-executor140 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 83.992664][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 84.002815][ T5063] Call Trace: [ 84.006099][ T5063] [ 84.009030][ T5063] dump_stack_lvl+0x1e7/0x2d0 [ 84.013738][ T5063] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.019239][ T5063] ? panic+0x850/0x850 [ 84.023338][ T5063] ? __submit_bio+0x239/0x2e0 [ 84.028207][ T5063] ? blk_free_queue_rcu+0x40/0x40 [ 84.033244][ T5063] ? wbt_issue+0xe0/0x180 [ 84.037580][ T5063] ? wbt_track+0x1e0/0x1e0 [ 84.042003][ T5063] should_fail_ex+0x3aa/0x4e0 [ 84.046809][ T5063] null_queue_rq+0x36d/0x640 [ 84.051417][ T5063] null_queue_rqs+0x199/0x2b0 [ 84.056120][ T5063] ? null_queue_rq+0x640/0x640 [ 84.060919][ T5063] ? should_fail_bio+0xd5/0x110 [ 84.065783][ T5063] ? submit_bio_noacct+0xf7a/0x1b70 [ 84.071364][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 84.077027][ T5063] blk_mq_flush_plug_list+0x56e/0x1860 [ 84.082541][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 84.088200][ T5063] ? mpage_readahead+0x7da/0x920 [ 84.093166][ T5063] ? blk_mq_start_stopped_hw_queues+0x210/0x210 [ 84.099422][ T5063] ? end_bio_bh_io_sync+0x110/0x110 [ 84.104649][ T5063] __blk_flush_plug+0x446/0x4c0 [ 84.109614][ T5063] ? blk_check_plugged+0x250/0x250 [ 84.114761][ T5063] ? __lock_acquire+0x7f70/0x7f70 [ 84.119841][ T5063] blk_finish_plug+0x5d/0x80 [ 84.124916][ T5063] read_pages+0x639/0x830 [ 84.129386][ T5063] ? folio_add_lru+0x9d0/0x9d0 [ 84.134358][ T5063] ? folio_add_lru+0x27b/0x9d0 [ 84.139276][ T5063] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 84.145019][ T5063] ? filemap_add_folio+0x228/0x570 [ 84.150166][ T5063] ? __filemap_add_folio+0x1ac0/0x1ac0 [ 84.155657][ T5063] ? page_cache_ra_order+0xb1a/0xcc0 [ 84.160990][ T5063] page_cache_ra_unbounded+0x68e/0x7c0 [ 84.166483][ T5063] cramfs_read+0x4c9/0xa70 [ 84.170935][ T5063] ? cramfs_finalize_super+0xd0/0xd0 [ 84.176248][ T5063] ? cramfs_read_super+0xaf/0x970 [ 84.181328][ T5063] cramfs_read_super+0xbe/0x970 [ 84.186220][ T5063] cramfs_blkdev_fill_super+0x115/0x250 [ 84.191930][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 84.197433][ T5063] ? clear_nonspinnable+0x60/0x60 [ 84.202594][ T5063] get_tree_bdev+0x416/0x5b0 [ 84.207217][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 84.212706][ T5063] ? setup_bdev_super+0x630/0x630 [ 84.217892][ T5063] ? cap_capable+0x1b4/0x240 [ 84.222528][ T5063] vfs_get_tree+0x8c/0x280 [ 84.227050][ T5063] do_new_mount+0x28f/0xae0 [ 84.231589][ T5063] ? do_move_mount_old+0x170/0x170 [ 84.236783][ T5063] __se_sys_mount+0x2d9/0x3c0 [ 84.241481][ T5063] ? __x64_sys_mount+0xc0/0xc0 [ 84.246256][ T5063] ? syscall_enter_from_user_mode+0x32/0x230 [ 84.252259][ T5063] ? __x64_sys_mount+0x20/0xc0 [ 84.257034][ T5063] do_syscall_64+0x44/0x110 [ 84.261553][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.267467][ T5063] RIP: 0033:0x7fc7b14d4929 [ 84.271889][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.291505][ T5063] RSP: 002b:00007ffef7df6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.299933][ T5063] RAX: ffffffffffffffda RBX: 00007ffef7df6e50 RCX: 00007fc7b14d4929 [ 84.308021][ T5063] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 84.316029][ T5063] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000003134 [ 84.324210][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7df6e9c [ 84.332372][ T5063] R13: 00007ffef7df6ed0 R14: 00007ffef7df6eb0 R15: 0000000000000002 [ 84.340386][ T5063] [ 84.344313][ T5063] ------------[ cut here ]------------ [ 84.349821][ T5063] WARNING: CPU: 1 PID: 5063 at block/blk-mq.c:1258 blk_mq_start_request+0x40b/0x670 [ 84.359433][ T5063] Modules linked in: [ 84.363552][ T5063] CPU: 1 PID: 5063 Comm: syz-executor140 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 84.373907][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 84.384047][ T5063] RIP: 0010:blk_mq_start_request+0x40b/0x670 [ 84.390184][ T5063] Code: 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 01 00 00 41 89 1e 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 da 27 fd <0f> 0b e9 f3 fd ff ff e8 69 da 27 fd 0f 0b e9 48 fc ff ff e8 5d da [ 84.409992][ T5063] RSP: 0018:ffffc900042ff318 EFLAGS: 00010293 [ 84.416123][ T5063] RAX: ffffffff8466e18b RBX: 1ffff11003a11582 RCX: ffff88802558bb80 [ 84.424310][ T5063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 84.432407][ T5063] RBP: 0000000000000001 R08: ffffffff8466df78 R09: 1ffffffff21ba482 [ 84.440454][ T5063] R10: dffffc0000000000 R11: fffffbfff21ba483 R12: ffff88801d08ab80 [ 84.448577][ T5063] R13: dffffc0000000000 R14: ffff888141b43c98 R15: ffff88801d08ac14 [ 84.456610][ T5063] FS: 0000555556830480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 84.465611][ T5063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.472324][ T5063] CR2: 00007fc7b1507ca0 CR3: 000000007f82f000 CR4: 00000000003506f0 [ 84.480483][ T5063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.488526][ T5063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.496649][ T5063] Call Trace: [ 84.499974][ T5063] [ 84.502910][ T5063] ? __warn+0x162/0x4a0 [ 84.507214][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.512641][ T5063] ? report_bug+0x2b3/0x500 [ 84.517241][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.522691][ T5063] ? handle_bug+0x3d/0x70 [ 84.527151][ T5063] ? exc_invalid_op+0x1a/0x50 [ 84.531862][ T5063] ? asm_exc_invalid_op+0x1a/0x20 [ 84.537095][ T5063] ? blk_mq_start_request+0x1f8/0x670 [ 84.542528][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.548865][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.554346][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.559755][ T5063] null_queue_rq+0x32c/0x640 [ 84.564470][ T5063] blk_mq_request_issue_directly+0x3cd/0x710 [ 84.570514][ T5063] ? blk_insert_cloned_request+0x6d0/0x6d0 [ 84.576392][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 84.582151][ T5063] ? null_queue_rqs+0x22d/0x2b0 [ 84.587091][ T5063] ? __lock_acquire+0x7f70/0x7f70 [ 84.592274][ T5063] blk_mq_plug_issue_direct+0x27c/0x5d0 [ 84.597946][ T5063] ? submit_bio_noacct+0xf7a/0x1b70 [ 84.603277][ T5063] ? blk_mq_flush_plug_list+0x698/0x1860 [ 84.609019][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 84.614725][ T5063] blk_mq_flush_plug_list+0x842/0x1860 [ 84.620230][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 84.625937][ T5063] ? mpage_readahead+0x7da/0x920 [ 84.630948][ T5063] ? blk_mq_start_stopped_hw_queues+0x210/0x210 [ 84.637299][ T5063] ? end_bio_bh_io_sync+0x110/0x110 [ 84.642565][ T5063] __blk_flush_plug+0x446/0x4c0 [ 84.647544][ T5063] ? blk_check_plugged+0x250/0x250 [ 84.652680][ T5063] ? __lock_acquire+0x7f70/0x7f70 [ 84.657914][ T5063] blk_finish_plug+0x5d/0x80 [ 84.662553][ T5063] read_pages+0x639/0x830 [ 84.666969][ T5063] ? folio_add_lru+0x9d0/0x9d0 [ 84.671772][ T5063] ? folio_add_lru+0x27b/0x9d0 [ 84.676616][ T5063] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 84.682276][ T5063] ? filemap_add_folio+0x228/0x570 [ 84.687456][ T5063] ? __filemap_add_folio+0x1ac0/0x1ac0 [ 84.692984][ T5063] ? page_cache_ra_order+0xb1a/0xcc0 [ 84.698376][ T5063] page_cache_ra_unbounded+0x68e/0x7c0 [ 84.703938][ T5063] cramfs_read+0x4c9/0xa70 [ 84.708414][ T5063] ? cramfs_finalize_super+0xd0/0xd0 [ 84.713734][ T5063] ? cramfs_read_super+0xaf/0x970 [ 84.719064][ T5063] cramfs_read_super+0xbe/0x970 [ 84.724006][ T5063] cramfs_blkdev_fill_super+0x115/0x250 [ 84.729586][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 84.735206][ T5063] ? clear_nonspinnable+0x60/0x60 [ 84.740311][ T5063] get_tree_bdev+0x416/0x5b0 [ 84.744988][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 84.750836][ T5063] ? setup_bdev_super+0x630/0x630 [ 84.755944][ T5063] ? cap_capable+0x1b4/0x240 [ 84.760633][ T5063] vfs_get_tree+0x8c/0x280 [ 84.765182][ T5063] do_new_mount+0x28f/0xae0 [ 84.769766][ T5063] ? do_move_mount_old+0x170/0x170 [ 84.774950][ T5063] __se_sys_mount+0x2d9/0x3c0 [ 84.779671][ T5063] ? __x64_sys_mount+0xc0/0xc0 [ 84.784513][ T5063] ? syscall_enter_from_user_mode+0x32/0x230 [ 84.790535][ T5063] ? __x64_sys_mount+0x20/0xc0 [ 84.795488][ T5063] do_syscall_64+0x44/0x110 [ 84.800040][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.806006][ T5063] RIP: 0033:0x7fc7b14d4929 [ 84.810449][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.830133][ T5063] RSP: 002b:00007ffef7df6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.838699][ T5063] RAX: ffffffffffffffda RBX: 00007ffef7df6e50 RCX: 00007fc7b14d4929 [ 84.846737][ T5063] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 84.854887][ T5063] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000003134 [ 84.862906][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7df6e9c [ 84.870972][ T5063] R13: 00007ffef7df6ed0 R14: 00007ffef7df6eb0 R15: 0000000000000002 [ 84.879142][ T5063] [ 84.882210][ T5063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.889584][ T5063] CPU: 1 PID: 5063 Comm: syz-executor140 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 84.899761][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 84.909927][ T5063] Call Trace: [ 84.913400][ T5063] [ 84.916533][ T5063] dump_stack_lvl+0x1e7/0x2d0 [ 84.921248][ T5063] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.926724][ T5063] ? panic+0x850/0x850 [ 84.930828][ T5063] ? _printk+0xd5/0x120 [ 84.935099][ T5063] ? vscnprintf+0x5d/0x80 [ 84.939467][ T5063] panic+0x349/0x850 [ 84.943480][ T5063] ? __warn+0x171/0x4a0 [ 84.947681][ T5063] ? __memcpy_flushcache+0x2b0/0x2b0 [ 84.953457][ T5063] ? show_trace_log_lvl+0x4e4/0x520 [ 84.958710][ T5063] __warn+0x314/0x4a0 [ 84.962718][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.968140][ T5063] report_bug+0x2b3/0x500 [ 84.972611][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 84.978009][ T5063] handle_bug+0x3d/0x70 [ 84.982191][ T5063] exc_invalid_op+0x1a/0x50 [ 84.986718][ T5063] asm_exc_invalid_op+0x1a/0x20 [ 84.991600][ T5063] RIP: 0010:blk_mq_start_request+0x40b/0x670 [ 84.997619][ T5063] Code: 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 01 00 00 41 89 1e 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 da 27 fd <0f> 0b e9 f3 fd ff ff e8 69 da 27 fd 0f 0b e9 48 fc ff ff e8 5d da [ 85.017433][ T5063] RSP: 0018:ffffc900042ff318 EFLAGS: 00010293 [ 85.023523][ T5063] RAX: ffffffff8466e18b RBX: 1ffff11003a11582 RCX: ffff88802558bb80 [ 85.031522][ T5063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 85.039514][ T5063] RBP: 0000000000000001 R08: ffffffff8466df78 R09: 1ffffffff21ba482 [ 85.047517][ T5063] R10: dffffc0000000000 R11: fffffbfff21ba483 R12: ffff88801d08ab80 [ 85.055517][ T5063] R13: dffffc0000000000 R14: ffff888141b43c98 R15: ffff88801d08ac14 [ 85.063658][ T5063] ? blk_mq_start_request+0x1f8/0x670 [ 85.069093][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 85.074518][ T5063] ? blk_mq_start_request+0x40b/0x670 [ 85.080014][ T5063] null_queue_rq+0x32c/0x640 [ 85.084675][ T5063] blk_mq_request_issue_directly+0x3cd/0x710 [ 85.090687][ T5063] ? blk_insert_cloned_request+0x6d0/0x6d0 [ 85.096515][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 85.102173][ T5063] ? null_queue_rqs+0x22d/0x2b0 [ 85.107079][ T5063] ? __lock_acquire+0x7f70/0x7f70 [ 85.112130][ T5063] blk_mq_plug_issue_direct+0x27c/0x5d0 [ 85.117711][ T5063] ? submit_bio_noacct+0xf7a/0x1b70 [ 85.122943][ T5063] ? blk_mq_flush_plug_list+0x698/0x1860 [ 85.128599][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 85.134252][ T5063] blk_mq_flush_plug_list+0x842/0x1860 [ 85.139820][ T5063] ? blk_mq_flush_plug_list+0x272/0x1860 [ 85.145472][ T5063] ? mpage_readahead+0x7da/0x920 [ 85.150433][ T5063] ? blk_mq_start_stopped_hw_queues+0x210/0x210 [ 85.156688][ T5063] ? end_bio_bh_io_sync+0x110/0x110 [ 85.161925][ T5063] __blk_flush_plug+0x446/0x4c0 [ 85.166814][ T5063] ? blk_check_plugged+0x250/0x250 [ 85.171933][ T5063] ? __lock_acquire+0x7f70/0x7f70 [ 85.177156][ T5063] blk_finish_plug+0x5d/0x80 [ 85.181759][ T5063] read_pages+0x639/0x830 [ 85.186098][ T5063] ? folio_add_lru+0x9d0/0x9d0 [ 85.190876][ T5063] ? folio_add_lru+0x27b/0x9d0 [ 85.195653][ T5063] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 85.201295][ T5063] ? filemap_add_folio+0x228/0x570 [ 85.206419][ T5063] ? __filemap_add_folio+0x1ac0/0x1ac0 [ 85.211892][ T5063] ? page_cache_ra_order+0xb1a/0xcc0 [ 85.217224][ T5063] page_cache_ra_unbounded+0x68e/0x7c0 [ 85.222911][ T5063] cramfs_read+0x4c9/0xa70 [ 85.227356][ T5063] ? cramfs_finalize_super+0xd0/0xd0 [ 85.232679][ T5063] ? cramfs_read_super+0xaf/0x970 [ 85.237769][ T5063] cramfs_read_super+0xbe/0x970 [ 85.242672][ T5063] cramfs_blkdev_fill_super+0x115/0x250 [ 85.248458][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 85.253978][ T5063] ? clear_nonspinnable+0x60/0x60 [ 85.259047][ T5063] get_tree_bdev+0x416/0x5b0 [ 85.263673][ T5063] ? cramfs_mtd_fill_super+0x440/0x440 [ 85.269162][ T5063] ? setup_bdev_super+0x630/0x630 [ 85.274253][ T5063] ? cap_capable+0x1b4/0x240 [ 85.278934][ T5063] vfs_get_tree+0x8c/0x280 [ 85.283494][ T5063] do_new_mount+0x28f/0xae0 [ 85.288033][ T5063] ? do_move_mount_old+0x170/0x170 [ 85.293193][ T5063] __se_sys_mount+0x2d9/0x3c0 [ 85.297893][ T5063] ? __x64_sys_mount+0xc0/0xc0 [ 85.302689][ T5063] ? syscall_enter_from_user_mode+0x32/0x230 [ 85.308701][ T5063] ? __x64_sys_mount+0x20/0xc0 [ 85.313484][ T5063] do_syscall_64+0x44/0x110 [ 85.318006][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.324005][ T5063] RIP: 0033:0x7fc7b14d4929 [ 85.328428][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.348052][ T5063] RSP: 002b:00007ffef7df6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.356515][ T5063] RAX: ffffffffffffffda RBX: 00007ffef7df6e50 RCX: 00007fc7b14d4929 [ 85.364512][ T5063] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 85.372503][ T5063] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000003134 [ 85.380587][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7df6e9c [ 85.388613][ T5063] R13: 00007ffef7df6ed0 R14: 00007ffef7df6eb0 R15: 0000000000000002 [ 85.396619][ T5063] [ 85.399890][ T5063] Kernel Offset: disabled [ 85.404491][ T5063] Rebooting in 86400 seconds..