./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2854039432
<...>
DUID 00:04:d6:b0:09:ff:72:32:c6:5d:c0:56:b1:2d:70:06:fa:56
forked to background, child pid 4659
[ 38.430354][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 38.447820][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts.
execve("./syz-executor2854039432", ["./syz-executor2854039432"], 0x7ffe9d6e1f10 /* 10 vars */) = 0
brk(NULL) = 0x5555566ab000
brk(0x5555566abc40) = 0x5555566abc40
arch_prctl(ARCH_SET_FS, 0x5555566ab300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2854039432", 4096) = 28
brk(0x5555566ccc40) = 0x5555566ccc40
brk(0x5555566cd000) = 0x5555566cd000
mprotect(0x7f631d77c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f63152b9000
write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
munmap(0x7f63152b9000, 65536) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "sysv", MS_RDONLY|MS_NOSUID|MS_SILENT, "\x22\x33\x87\x08") = -1 EINVAL (Invalid argument)
syzkaller login: [ 69.951702][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor285'
[ 69.967635][ T4991] loop0: detected capacity change from 0 to 128
[ 69.979660][ T4991] oldfs: cannot read superblock
[ 70.044817][ T4991] ------------[ cut here ]------------
[ 70.050509][ T4991] VFS: brelse: Trying to free free buffer
[ 70.056410][ T4991] WARNING: CPU: 0 PID: 4991 at fs/buffer.c:1194 invalidate_bh_lru+0xfc/0x1b0
[ 70.065631][ T4991] Modules linked in:
[ 70.069523][ T4991] CPU: 0 PID: 4991 Comm: syz-executor285 Not tainted 6.4.0-rc4-syzkaller-00265-g4ecd704a4c51 #0
[ 70.079926][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 70.089985][ T4991] RIP: 0010:invalidate_bh_lru+0xfc/0x1b0
[ 70.095616][ T4991] Code: 00 e8 d8 e3 df ff f0 ff 0b eb 21 e8 7e 0d 88 ff 41 80 3c 2e 00 75 26 eb 2c e8 70 0d 88 ff 48 c7 c7 00 a0 f7 8a e8 e4 8c 4f ff <0f> 0b 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c 89 ff
[ 70.115216][ T4991] RSP: 0018:ffffc90003c2f0a8 EFLAGS: 00010046
[ 70.121289][ T4991] RAX: 00caeea4101d0a00 RBX: ffff8880749ab400 RCX: ffff88802890d940
[ 70.129263][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 70.137229][ T4991] RBP: 0000000000000000 R08: ffffffff81530142 R09: ffffed1017305163
[ 70.145196][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9838078
[ 70.153165][ T4991] R13: 0000000000000000 R14: 1ffff1101730700f R15: ffff8880b9838078
[ 70.161135][ T4991] FS: 00005555566ab300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 70.170059][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 70.176640][ T4991] CR2: 000000000066c7e0 CR3: 000000007a0cd000 CR4: 00000000003506f0
[ 70.184607][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 70.192573][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 70.200538][ T4991] Call Trace:
[ 70.203812][ T4991]
[ 70.206749][ T4991] ? __warn+0x162/0x4a0
[ 70.210924][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.215959][ T4991] ? report_bug+0x2b3/0x500
[ 70.220481][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.225515][ T4991] ? handle_bug+0x3d/0x70
[ 70.229872][ T4991] ? exc_invalid_op+0x1a/0x50
[ 70.234554][ T4991] ? asm_exc_invalid_op+0x1a/0x20
[ 70.239594][ T4991] ? __warn_printk+0x292/0x360
[ 70.244376][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.249407][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.254563][ T4991] smp_call_function_many_cond+0x130b/0x1f60
[ 70.260561][ T4991] ? __bread_gfp+0x380/0x380
[ 70.265159][ T4991] ? invalidate_bh_lrus+0x30/0x30
[ 70.270292][ T4991] ? smp_call_function_many+0x40/0x40
[ 70.275681][ T4991] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 70.281679][ T4991] ? invalidate_bh_lrus+0x30/0x30
[ 70.286712][ T4991] ? __bread_gfp+0x380/0x380
[ 70.291309][ T4991] on_each_cpu_cond_mask+0x3f/0x80
[ 70.296440][ T4991] invalidate_bdev+0x8e/0xc0
[ 70.301036][ T4991] invalidate_disk+0x45/0xe0
[ 70.305644][ T4991] __loop_clr_fd+0x251/0x6a0
[ 70.310245][ T4991] lo_ioctl+0x16d1/0x2080
[ 70.314585][ T4991] ? read_lock_is_recursive+0x20/0x20
[ 70.319969][ T4991] ? lo_release+0x1f0/0x1f0
[ 70.324489][ T4991] ? mark_lock+0x9a/0x340
[ 70.328834][ T4991] ? __lock_acquire+0x1316/0x2070
[ 70.333893][ T4991] ? read_lock_is_recursive+0x20/0x20
[ 70.339280][ T4991] ? rcu_lock_release+0x5/0x30
[ 70.344059][ T4991] ? __lock_acquire+0x2070/0x2070
[ 70.349096][ T4991] ? unwind_next_frame+0x1a2f/0x2200
[ 70.354393][ T4991] ? preempt_count_add+0x93/0x180
[ 70.359425][ T4991] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 70.365515][ T4991] ? stack_trace_save+0x1c0/0x1c0
[ 70.370555][ T4991] ? is_bpf_text_address+0x253/0x270
[ 70.375851][ T4991] ? is_module_text_address+0x60/0x180
[ 70.381404][ T4991] ? stack_trace_save+0x1c0/0x1c0
[ 70.386440][ T4991] ? kernel_text_address+0xa3/0xe0
[ 70.391648][ T4991] ? __kernel_text_address+0xd/0x40
[ 70.396852][ T4991] ? unwind_get_return_address+0x4d/0x90
[ 70.402584][ T4991] ? arch_stack_walk+0xf7/0x140
[ 70.407481][ T4991] ? stack_trace_save+0x117/0x1c0
[ 70.412540][ T4991] ? stack_trace_snprint+0xf0/0xf0
[ 70.417669][ T4991] ? __stack_depot_save+0x20/0x650
[ 70.422798][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 70.428449][ T4991] ? kasan_set_track+0x61/0x70
[ 70.433223][ T4991] ? kasan_set_track+0x4f/0x70
[ 70.437995][ T4991] ? kasan_save_free_info+0x2b/0x40
[ 70.443223][ T4991] ? ____kasan_slab_free+0xd6/0x120
[ 70.448431][ T4991] ? __kmem_cache_free+0x264/0x3c0
[ 70.453544][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 70.459186][ T4991] ? security_file_ioctl+0x71/0xa0
[ 70.464325][ T4991] ? __se_sys_ioctl+0x47/0x160
[ 70.469104][ T4991] ? do_syscall_64+0x41/0xc0
[ 70.473711][ T4991] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 70.479806][ T4991] ? mark_lock+0x9a/0x340
[ 70.484159][ T4991] ? do_vfs_ioctl+0xc9e/0x2b10
[ 70.489037][ T4991] ? __x64_compat_sys_ioctl+0x90/0x90
[ 70.494425][ T4991] ? __lock_acquire+0x2070/0x2070
[ 70.499457][ T4991] ? lockdep_hardirqs_on+0x98/0x140
[ 70.504674][ T4991] ? __kmem_cache_free+0x264/0x3c0
[ 70.509800][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 70.515451][ T4991] ? blkdev_common_ioctl+0x108d/0x22c0
[ 70.521016][ T4991] ? blkdev_bszset+0x250/0x250
[ 70.525794][ T4991] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 70.531273][ T4991] ? _raw_spin_lock_irqsave+0x120/0x120
[ 70.536841][ T4991] ? __asan_memset+0x23/0x40
[ 70.541446][ T4991] ? smack_file_ioctl+0x295/0x390
[ 70.546486][ T4991] ? smack_file_alloc_security+0xe0/0xe0
[ 70.552135][ T4991] ? lo_release+0x1f0/0x1f0
[ 70.556658][ T4991] blkdev_ioctl+0x602/0x7a0
[ 70.561179][ T4991] ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 70.566658][ T4991] ? bpf_lsm_file_ioctl+0x9/0x10
[ 70.571604][ T4991] ? security_file_ioctl+0x81/0xa0
[ 70.576730][ T4991] ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 70.582204][ T4991] __se_sys_ioctl+0xf1/0x160
[ 70.586810][ T4991] do_syscall_64+0x41/0xc0
[ 70.591254][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 70.597155][ T4991] RIP: 0033:0x7f631d705627
[ 70.601577][ T4991] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 24 44 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 70.621190][ T4991] RSP: 002b:00007fff5b45e448 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.629614][ T4991] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f631d705627
[ 70.637624][ T4991] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004
[ 70.645599][ T4991] RBP: 00007fff5b45e450 R08: 00007fff5b45e490 R09: 0000000000009df6
[ 70.653572][ T4991] R10: 0000000000008003 R11: 0000000000000246 R12: 0000000000000004
[ 70.661543][ T4991] R13: 00005555566ab2c0 R14: 00007fff5b45e490 R15: 0000000000000000
[ 70.669533][ T4991]
[ 70.672553][ T4991] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 70.679834][ T4991] CPU: 0 PID: 4991 Comm: syz-executor285 Not tainted 6.4.0-rc4-syzkaller-00265-g4ecd704a4c51 #0
[ 70.690246][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 70.700302][ T4991] Call Trace:
[ 70.703585][ T4991]
[ 70.706524][ T4991] dump_stack_lvl+0x1e7/0x2d0
[ 70.711219][ T4991] ? nf_tcp_handle_invalid+0x650/0x650
[ 70.716691][ T4991] ? panic+0x770/0x770
[ 70.720769][ T4991] ? vscnprintf+0x5d/0x80
[ 70.725114][ T4991] panic+0x30f/0x770
[ 70.729018][ T4991] ? __warn+0x171/0x4a0
[ 70.733266][ T4991] ? __memcpy_flushcache+0x2b0/0x2b0
[ 70.738609][ T4991] __warn+0x314/0x4a0
[ 70.742630][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.747678][ T4991] report_bug+0x2b3/0x500
[ 70.752022][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.757064][ T4991] handle_bug+0x3d/0x70
[ 70.761232][ T4991] exc_invalid_op+0x1a/0x50
[ 70.765764][ T4991] asm_exc_invalid_op+0x1a/0x20
[ 70.770659][ T4991] RIP: 0010:invalidate_bh_lru+0xfc/0x1b0
[ 70.776312][ T4991] Code: 00 e8 d8 e3 df ff f0 ff 0b eb 21 e8 7e 0d 88 ff 41 80 3c 2e 00 75 26 eb 2c e8 70 0d 88 ff 48 c7 c7 00 a0 f7 8a e8 e4 8c 4f ff <0f> 0b 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c 89 ff
[ 70.795945][ T4991] RSP: 0018:ffffc90003c2f0a8 EFLAGS: 00010046
[ 70.802032][ T4991] RAX: 00caeea4101d0a00 RBX: ffff8880749ab400 RCX: ffff88802890d940
[ 70.810013][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 70.817988][ T4991] RBP: 0000000000000000 R08: ffffffff81530142 R09: ffffed1017305163
[ 70.825973][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9838078
[ 70.833960][ T4991] R13: 0000000000000000 R14: 1ffff1101730700f R15: ffff8880b9838078
[ 70.841943][ T4991] ? __warn_printk+0x292/0x360
[ 70.846744][ T4991] ? invalidate_bh_lru+0xfc/0x1b0
[ 70.851779][ T4991] smp_call_function_many_cond+0x130b/0x1f60
[ 70.857777][ T4991] ? __bread_gfp+0x380/0x380
[ 70.862376][ T4991] ? invalidate_bh_lrus+0x30/0x30
[ 70.867417][ T4991] ? smp_call_function_many+0x40/0x40
[ 70.872803][ T4991] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 70.878800][ T4991] ? invalidate_bh_lrus+0x30/0x30
[ 70.883867][ T4991] ? __bread_gfp+0x380/0x380
[ 70.888461][ T4991] on_each_cpu_cond_mask+0x3f/0x80
[ 70.893585][ T4991] invalidate_bdev+0x8e/0xc0
[ 70.898185][ T4991] invalidate_disk+0x45/0xe0
[ 70.902792][ T4991] __loop_clr_fd+0x251/0x6a0
[ 70.907396][ T4991] lo_ioctl+0x16d1/0x2080
[ 70.911735][ T4991] ? read_lock_is_recursive+0x20/0x20
[ 70.917116][ T4991] ? lo_release+0x1f0/0x1f0
[ 70.921641][ T4991] ? mark_lock+0x9a/0x340
[ 70.925986][ T4991] ? __lock_acquire+0x1316/0x2070
[ 70.931042][ T4991] ? read_lock_is_recursive+0x20/0x20
[ 70.936423][ T4991] ? rcu_lock_release+0x5/0x30
[ 70.941197][ T4991] ? __lock_acquire+0x2070/0x2070
[ 70.946234][ T4991] ? unwind_next_frame+0x1a2f/0x2200
[ 70.951529][ T4991] ? preempt_count_add+0x93/0x180
[ 70.956558][ T4991] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 70.962721][ T4991] ? stack_trace_save+0x1c0/0x1c0
[ 70.967757][ T4991] ? is_bpf_text_address+0x253/0x270
[ 70.973059][ T4991] ? is_module_text_address+0x60/0x180
[ 70.978532][ T4991] ? stack_trace_save+0x1c0/0x1c0
[ 70.983591][ T4991] ? kernel_text_address+0xa3/0xe0
[ 70.988717][ T4991] ? __kernel_text_address+0xd/0x40
[ 70.993929][ T4991] ? unwind_get_return_address+0x4d/0x90
[ 70.999619][ T4991] ? arch_stack_walk+0xf7/0x140
[ 71.004579][ T4991] ? stack_trace_save+0x117/0x1c0
[ 71.009622][ T4991] ? stack_trace_snprint+0xf0/0xf0
[ 71.014751][ T4991] ? __stack_depot_save+0x20/0x650
[ 71.019874][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 71.025554][ T4991] ? kasan_set_track+0x61/0x70
[ 71.030338][ T4991] ? kasan_set_track+0x4f/0x70
[ 71.035108][ T4991] ? kasan_save_free_info+0x2b/0x40
[ 71.040316][ T4991] ? ____kasan_slab_free+0xd6/0x120
[ 71.045524][ T4991] ? __kmem_cache_free+0x264/0x3c0
[ 71.050642][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 71.056285][ T4991] ? security_file_ioctl+0x71/0xa0
[ 71.061505][ T4991] ? __se_sys_ioctl+0x47/0x160
[ 71.066280][ T4991] ? do_syscall_64+0x41/0xc0
[ 71.070876][ T4991] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.076981][ T4991] ? mark_lock+0x9a/0x340
[ 71.081327][ T4991] ? do_vfs_ioctl+0xc9e/0x2b10
[ 71.086128][ T4991] ? __x64_compat_sys_ioctl+0x90/0x90
[ 71.091513][ T4991] ? __lock_acquire+0x2070/0x2070
[ 71.096546][ T4991] ? lockdep_hardirqs_on+0x98/0x140
[ 71.101756][ T4991] ? __kmem_cache_free+0x264/0x3c0
[ 71.106883][ T4991] ? tomoyo_path_number_perm+0x663/0x840
[ 71.112540][ T4991] ? blkdev_common_ioctl+0x108d/0x22c0
[ 71.118018][ T4991] ? blkdev_bszset+0x250/0x250
[ 71.122797][ T4991] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 71.128270][ T4991] ? _raw_spin_lock_irqsave+0x120/0x120
[ 71.133828][ T4991] ? __asan_memset+0x23/0x40
[ 71.138431][ T4991] ? smack_file_ioctl+0x295/0x390
[ 71.143472][ T4991] ? smack_file_alloc_security+0xe0/0xe0
[ 71.149117][ T4991] ? lo_release+0x1f0/0x1f0
[ 71.153638][ T4991] blkdev_ioctl+0x602/0x7a0
[ 71.158158][ T4991] ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 71.163631][ T4991] ? bpf_lsm_file_ioctl+0x9/0x10
[ 71.168579][ T4991] ? security_file_ioctl+0x81/0xa0
[ 71.173700][ T4991] ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 71.179170][ T4991] __se_sys_ioctl+0xf1/0x160
[ 71.183773][ T4991] do_syscall_64+0x41/0xc0
[ 71.188207][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.194113][ T4991] RIP: 0033:0x7f631d705627
[ 71.198555][ T4991] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 24 44 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 71.218165][ T4991] RSP: 002b:00007fff5b45e448 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 71.226584][ T4991] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f631d705627
[ 71.234559][ T4991] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004
[ 71.242535][ T4991] RBP: 00007fff5b45e450 R08: 00007fff5b45e490 R09: 0000000000009df6
[ 71.250515][ T4991] R10: 0000000000008003 R11: 0000000000000246 R12: 0000000000000004
[ 71.258503][ T4991] R13: 00005555566ab2c0 R14: 00007fff5b45e490 R15: 0000000000000000
[ 71.266490][ T4991]
[ 71.269724][ T4991] Kernel Offset: disabled
[ 71.274124][ T4991] Rebooting in 86400 seconds..