./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2468020135
<...>
DUID 00:04:e3:38:52:80:67:3f:e9:c9:a2:47:22:a3:59:23:7d:1e
forked to background, child pid 5485
[ 31.865733][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 31.874951][ T5486] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
execve("./syz-executor2468020135", ["./syz-executor2468020135"], 0x7ffc8fa5b810 /* 10 vars */) = 0
brk(NULL) = 0x55556c163000
brk(0x55556c163d00) = 0x55556c163d00
arch_prctl(ARCH_SET_FS, 0x55556c163380) = 0
set_tid_address(0x55556c163650) = 5816
set_robust_list(0x55556c163660, 24) = 0
rseq(0x55556c163ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2468020135", 4096) = 28
getrandom("\x6f\xcc\x4c\x12\xb3\x78\xed\xd7", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556c163d00
brk(0x55556c184d00) = 0x55556c184d00
brk(0x55556c185000) = 0x55556c185000
mprotect(0x7f1f4014f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.yeQ82H", 0700) = 0
chmod("./syzkaller.yeQ82H", 0777) = 0
chdir("./syzkaller.yeQ82H") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5818 attached
, child_tidptr=0x55556c163650) = 5818
[pid 5818] set_robust_list(0x55556c163660, 24) = 0
[pid 5818] chdir("./0") = 0
[pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5818] setpgid(0, 0) = 0
[pid 5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5818] write(3, "1000", 4) = 4
[pid 5818] close(3) = 0
[pid 5818] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5818] write(1, "executing program\n", 18executing program
) = 18
[pid 5818] memfd_create("syzkaller", 0) = 3
[pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1f37c00000
[pid 5818] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072
[pid 5818] munmap(0x7f1f37c00000, 138412032) = 0
[pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5818] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5818] close(3) = 0
[pid 5818] close(4) = 0
[pid 5818] mkdir("./bus", 0777) = 0
syzkaller login: [ 53.867020][ T5818] loop0: detected capacity change from 0 to 256
[ 53.899087][ T5818] exfat: Deprecated parameter 'utf8'
[ 53.904389][ T5818] exfat: Deprecated parameter 'utf8'
[pid 5818] mount("/dev/loop0", "./bus", "exfat", MS_DIRSYNC|MS_NODIRATIME|MS_RELATIME, "time_offset=0x0000000000000006,allow_utime=00000000000000000077777,utf8,utf8,errors=continue,") = 0
[pid 5818] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5818] chdir("./bus") = 0
[pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5818] mkdir("./bus", 0777) = 0
[pid 5818] mount(NULL, "./bus", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\x4b\xd4\x12\xb5\x45\x6d\x51\x47\xd4\x11\x75\x45\x5d\x51\x4f\x3c\x24\xea\x8b\xde\xd8\x1f\x1f\x11\x99\x95\x69\x24\x86\x60\x63\x31\x14\x9b\x88\xa6\x42\x5e\xba\x38\x5b\x8a\xe1\xd8\x4a\xb4\x16\x6d\xc4\x53\x62\x24\x8e\xc0\xf6\xa2\xa5\x4b\x10\xcf\x88\x0e\x62\x0c\x76\x14\x7f\x13\x63\xf1\x39\xd1\x59\x8c\xc7\x2e\xe2\x05\xd1\x55\x74\x13\xdd\xc5\x8b\xa2\x87\x68\xe5\x7a\x8a\x5e\x62\x32\xf6\x16\x7d\xc4\x34\xec"...) = -1 EINVAL (Invalid argument)
[pid 5818] exit_group(0) = ?
[pid 5818] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5818, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55556c1646f0 /* 4 entries */, 32768) = 104
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 53.913215][ T5818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 53.929557][ T5818] exFAT-fs (loop0): error, in sector 160, dentry 12 should be unused, but 0x85
[ 53.955330][ T5816] ------------[ cut here ]------------
[ 53.960799][ T5816] VFS: brelse: Trying to free free buffer
[ 53.966599][ T5816] WARNING: CPU: 0 PID: 5816 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0
[ 53.975442][ T5816] Modules linked in:
[ 53.979319][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor246 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0
[ 53.990406][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 54.000442][ T5816] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 54.006174][ T5816] Code: 44 f4 da ff f0 ff 0b eb 25 e8 5a 30 73 ff 41 80 3c 2e 00 75 2a eb 30 e8 4c 30 73 ff 90 48 c7 c7 e0 ce 18 8c e8 0f d7 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 54.025787][ T5816] RSP: 0018:ffffc90003dff8c8 EFLAGS: 00010046
[ 54.031843][ T5816] RAX: a696d048040ac700 RBX: ffff888073c517a0 RCX: ffff888036270000
[ 54.039799][ T5816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 54.047755][ T5816] RBP: 0000000000000000 R08: ffffffff81601b22 R09: 1ffff110170c519a
[ 54.055712][ T5816] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838
[ 54.063686][ T5816] R13: 0000000000000058 R14: 1ffff110170c7312 R15: ffff8880b8639890
[ 54.071666][ T5816] FS: 000055556c163380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 54.080583][ T5816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.087149][ T5816] CR2: 00007ffefbacaf58 CR3: 0000000023c0c000 CR4: 00000000003526f0
[ 54.095105][ T5816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.103064][ T5816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.111021][ T5816] Call Trace:
[ 54.114284][ T5816]
[ 54.117205][ T5816] ? __warn+0x165/0x4d0
[ 54.121345][ T5816] ? invalidate_bh_lru+0x102/0x1b0
[ 54.126441][ T5816] ? report_bug+0x2b3/0x500
[ 54.130929][ T5816] ? invalidate_bh_lru+0x102/0x1b0
[ 54.136022][ T5816] ? handle_bug+0x60/0x90
[ 54.140330][ T5816] ? exc_invalid_op+0x1a/0x50
[ 54.144984][ T5816] ? asm_exc_invalid_op+0x1a/0x20
[ 54.149995][ T5816] ? __warn_printk+0x292/0x360
[ 54.154742][ T5816] ? invalidate_bh_lru+0x102/0x1b0
[ 54.159838][ T5816] ? invalidate_bh_lru+0x101/0x1b0
[ 54.164926][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.170367][ T5816] smp_call_function_many_cond+0x1760/0x2c60
[ 54.176335][ T5816] ? __pfx_has_bh_in_lru+0x10/0x10
[ 54.181532][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.187934][ T5816] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 54.194261][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.199699][ T5816] ? __pfx_has_bh_in_lru+0x10/0x10
[ 54.204790][ T5816] on_each_cpu_cond_mask+0x3f/0x80
[ 54.209885][ T5816] blkdev_flush_mapping+0xfe/0x270
[ 54.214981][ T5816] ? bdev_release+0x456/0x700
[ 54.219657][ T5816] bdev_release+0x460/0x700
[ 54.224146][ T5816] blkdev_release+0x15/0x20
[ 54.228631][ T5816] ? __pfx_blkdev_release+0x10/0x10
[ 54.233808][ T5816] __fput+0x23c/0xa50
[ 54.237775][ T5816] task_work_run+0x24f/0x310
[ 54.242347][ T5816] ? __pfx_task_work_run+0x10/0x10
[ 54.247439][ T5816] ? path_umount+0x284/0xf70
[ 54.252012][ T5816] ptrace_notify+0x2d2/0x380
[ 54.256586][ T5816] ? __pfx_ptrace_notify+0x10/0x10
[ 54.261680][ T5816] ? kmem_cache_free+0x195/0x410
[ 54.266600][ T5816] ? __x64_sys_umount+0x123/0x170
[ 54.271603][ T5816] syscall_exit_work+0xc7/0x1d0
[ 54.276442][ T5816] syscall_exit_to_user_mode+0x24a/0x340
[ 54.282057][ T5816] do_syscall_64+0x100/0x230
[ 54.286637][ T5816] ? clear_bhb_loop+0x35/0x90
[ 54.291295][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 54.297178][ T5816] RIP: 0033:0x7f1f400db587
[ 54.301574][ T5816] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 54.321161][ T5816] RSP: 002b:00007ffefbacb708 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 54.329561][ T5816] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1f400db587
[ 54.337514][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefbacb7c0
[ 54.345465][ T5816] RBP: 00007ffefbacb7c0 R08: 0000000000000000 R09: 0000000000000000
[ 54.353417][ T5816] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffefbacc830
[ 54.361371][ T5816] R13: 000055556c1646c0 R14: 431bde82d7b634db R15: 00007ffefbacc850
[ 54.369327][ T5816]
[ 54.372337][ T5816] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 54.379595][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor246 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0
[ 54.390679][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 54.400715][ T5816] Call Trace:
[ 54.404000][ T5816]
[ 54.406916][ T5816] dump_stack_lvl+0x241/0x360
[ 54.411581][ T5816] ? __pfx_dump_stack_lvl+0x10/0x10
[ 54.416760][ T5816] ? __pfx__printk+0x10/0x10
[ 54.421333][ T5816] ? _printk+0xd5/0x120
[ 54.425472][ T5816] ? __init_begin+0x41000/0x41000
[ 54.430480][ T5816] ? vscnprintf+0x5d/0x90
[ 54.434790][ T5816] panic+0x349/0x880
[ 54.438668][ T5816] ? __warn+0x174/0x4d0
[ 54.442805][ T5816] ? __pfx_panic+0x10/0x10
[ 54.447207][ T5816] __warn+0x344/0x4d0
[ 54.451193][ T5816] ? invalidate_bh_lru+0x102/0x1b0
[ 54.456290][ T5816] report_bug+0x2b3/0x500
[ 54.460603][ T5816] ? invalidate_bh_lru+0x102/0x1b0
[ 54.465710][ T5816] handle_bug+0x60/0x90
[ 54.469851][ T5816] exc_invalid_op+0x1a/0x50
[ 54.474332][ T5816] asm_exc_invalid_op+0x1a/0x20
[ 54.479172][ T5816] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 54.484876][ T5816] Code: 44 f4 da ff f0 ff 0b eb 25 e8 5a 30 73 ff 41 80 3c 2e 00 75 2a eb 30 e8 4c 30 73 ff 90 48 c7 c7 e0 ce 18 8c e8 0f d7 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 54.504462][ T5816] RSP: 0018:ffffc90003dff8c8 EFLAGS: 00010046
[ 54.510513][ T5816] RAX: a696d048040ac700 RBX: ffff888073c517a0 RCX: ffff888036270000
[ 54.518488][ T5816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 54.526441][ T5816] RBP: 0000000000000000 R08: ffffffff81601b22 R09: 1ffff110170c519a
[ 54.534391][ T5816] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838
[ 54.542346][ T5816] R13: 0000000000000058 R14: 1ffff110170c7312 R15: ffff8880b8639890
[ 54.550301][ T5816] ? __warn_printk+0x292/0x360
[ 54.555051][ T5816] ? invalidate_bh_lru+0x101/0x1b0
[ 54.560166][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.565608][ T5816] smp_call_function_many_cond+0x1760/0x2c60
[ 54.571578][ T5816] ? __pfx_has_bh_in_lru+0x10/0x10
[ 54.576673][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.582115][ T5816] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 54.588434][ T5816] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 54.593872][ T5816] ? __pfx_has_bh_in_lru+0x10/0x10
[ 54.598965][ T5816] on_each_cpu_cond_mask+0x3f/0x80
[ 54.604061][ T5816] blkdev_flush_mapping+0xfe/0x270
[ 54.609159][ T5816] ? bdev_release+0x456/0x700
[ 54.613817][ T5816] bdev_release+0x460/0x700
[ 54.618306][ T5816] blkdev_release+0x15/0x20
[ 54.622793][ T5816] ? __pfx_blkdev_release+0x10/0x10
[ 54.627973][ T5816] __fput+0x23c/0xa50
[ 54.631942][ T5816] task_work_run+0x24f/0x310
[ 54.636515][ T5816] ? __pfx_task_work_run+0x10/0x10
[ 54.641611][ T5816] ? path_umount+0x284/0xf70
[ 54.646180][ T5816] ptrace_notify+0x2d2/0x380
[ 54.650774][ T5816] ? __pfx_ptrace_notify+0x10/0x10
[ 54.655874][ T5816] ? kmem_cache_free+0x195/0x410
[ 54.660796][ T5816] ? __x64_sys_umount+0x123/0x170
[ 54.665801][ T5816] syscall_exit_work+0xc7/0x1d0
[ 54.670635][ T5816] syscall_exit_to_user_mode+0x24a/0x340
[ 54.676259][ T5816] do_syscall_64+0x100/0x230
[ 54.680832][ T5816] ? clear_bhb_loop+0x35/0x90
[ 54.685488][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 54.691386][ T5816] RIP: 0033:0x7f1f400db587
[ 54.695781][ T5816] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 54.715369][ T5816] RSP: 002b:00007ffefbacb708 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 54.723764][ T5816] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1f400db587
[ 54.731715][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefbacb7c0
[ 54.739666][ T5816] RBP: 00007ffefbacb7c0 R08: 0000000000000000 R09: 0000000000000000
[ 54.747618][ T5816] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffefbacc830
[ 54.755571][ T5816] R13: 000055556c1646c0 R14: 431bde82d7b634db R15: 00007ffefbacc850
[ 54.763544][ T5816]
[ 54.766822][ T5816] Kernel Offset: disabled
[ 54.771135][ T5816] Rebooting in 86400 seconds..