./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2217316566
<...>
Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts.
execve("./syz-executor2217316566", ["./syz-executor2217316566"], 0x7ffe2f008ad0 /* 10 vars */) = 0
brk(NULL) = 0x5555635b5000
brk(0x5555635b5d00) = 0x5555635b5d00
arch_prctl(ARCH_SET_FS, 0x5555635b5380) = 0
set_tid_address(0x5555635b5650) = 5818
set_robust_list(0x5555635b5660, 24) = 0
rseq(0x5555635b5ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2217316566", 4096) = 28
getrandom("\xdc\xc2\xcb\x8a\x53\xee\x1d\x80", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555635b5d00
brk(0x5555635d6d00) = 0x5555635d6d00
brk(0x5555635d7000) = 0x5555635d7000
mprotect(0x7f7c638ec000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.e7lFSn", 0700) = 0
chmod("./syzkaller.e7lFSn", 0777) = 0
chdir("./syzkaller.e7lFSn") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5820 attached
<unfinished ...>
[pid 5820] set_robust_list(0x5555635b5660, 24 <unfinished ...>
[pid 5818] <... clone resumed>, child_tidptr=0x5555635b5650) = 5820
[pid 5820] <... set_robust_list resumed>) = 0
[pid 5820] chdir("./0") = 0
[pid 5820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5820] setpgid(0, 0) = 0
[pid 5820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5820] write(3, "1000", 4) = 4
[pid 5820] close(3) = 0
[pid 5820] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5820] write(1, "executing program\n", 18executing program
) = 18
[pid 5820] memfd_create("syzkaller", 0) = 3
[pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7c5b400000
[pid 5820] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072
[pid 5820] munmap(0x7f7c5b400000, 138412032) = 0
[pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5820] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5820] close(3) = 0
[pid 5820] close(4) = 0
[pid 5820] mkdir("./file0", 0777) = 0
[ 70.191249][ T5820] loop0: detected capacity change from 0 to 256
[ 70.208654][ T5820] =======================================================
[ 70.208654][ T5820] WARNING: The mand mount option has been deprecated and
[ 70.208654][ T5820] and is ignored by this kernel. Remove the mand
[ 70.208654][ T5820] option from the mount to silence this warning.
[pid 5820] mount("/dev/loop0", "./file0", "exfat", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_I_VERSION|MS_BORN, "umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=0x0"...) = 0
[pid 5820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5820] chdir("./file0") = 0
[pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 70.208654][ T5820] =======================================================
[ 70.244892][ T5820] exfat: Deprecated parameter 'namecase'
[ 70.259820][ T5820] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[pid 5820] mkdirat(AT_FDCWD, "./file0", 0700) = 0
[pid 5820] exit_group(0) = ?
[pid 5820] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5820, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[ 70.299787][ T5820] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555635b66f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 70.435195][ C1] ------------[ cut here ]------------
[ 70.440740][ C1] VFS: brelse: Trying to free free buffer
[ 70.446571][ C1] WARNING: CPU: 1 PID: 0 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0
[ 70.457163][ C1] Modules linked in:
[ 70.461084][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0
[ 70.471405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 70.481463][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 70.487196][ C1] Code: a4 30 dc ff f0 ff 0b eb 25 e8 da 56 78 ff 41 80 3c 2e 00 75 2a eb 30 e8 cc 56 78 ff 90 48 c7 c7 20 da 18 8c e8 9f ff 38 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 70.506820][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046
[ 70.512896][ C1] RAX: ce1525cec6b42700 RBX: ffff888075477b40 RCX: ffff88801d2d0000
[ 70.520895][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 70.528898][ C1] RBP: 0000000000000000 R08: ffffffff81600962 R09: 1ffff110170e519a
[ 70.536904][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838
[ 70.544904][ C1] R13: 0000000000000058 R14: 1ffff110170e7312 R15: ffff8880b8739890
[ 70.552970][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 70.561948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 70.568540][ C1] CR2: 00007ffd464c3d2c CR3: 0000000076328000 CR4: 00000000003526f0
[ 70.576520][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 70.584511][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 70.592488][ C1] Call Trace:
[ 70.595824][ C1] <IRQ>
[ 70.598689][ C1] ? __warn+0x165/0x4d0
[ 70.602863][ C1] ? invalidate_bh_lru+0x102/0x1b0
[ 70.607989][ C1] ? report_bug+0x2b3/0x500
[ 70.612506][ C1] ? invalidate_bh_lru+0x102/0x1b0
[ 70.617617][ C1] ? handle_bug+0x60/0x90
[ 70.621952][ C1] ? exc_invalid_op+0x1a/0x50
[ 70.626629][ C1] ? asm_exc_invalid_op+0x1a/0x20
[ 70.631661][ C1] ? __warn_printk+0x292/0x360
[ 70.636425][ C1] ? invalidate_bh_lru+0x102/0x1b0
[ 70.641583][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 70.647075][ C1] __flush_smp_call_function_queue+0x3fc/0x1620
[ 70.653377][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 70.658861][ C1] __sysvec_call_function_single+0xb8/0x430
[ 70.664763][ C1] sysvec_call_function_single+0x9e/0xc0
[ 70.670603][ C1] </IRQ>
[ 70.673823][ C1] <TASK>
[ 70.676916][ C1] asm_sysvec_call_function_single+0x1a/0x20
[ 70.682917][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30
[ 70.688200][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 f6 a7 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[ 70.707911][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246
[ 70.713991][ C1] RAX: ffff88801d2d0000 RBX: ffff888141ac7864 RCX: 000000000001d949
[ 70.722074][ C1] RDX: 0000000000000001 RSI: ffff888141ac7800 RDI: ffff888141ac7864
[ 70.730186][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b
[ 70.738248][ C1] R10: dffffc0000000000 R11: ffffffff8bc09c00 R12: ffff8881417c8800
[ 70.746317][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10e120
[ 70.754491][ C1] ? __pfx_acpi_idle_enter+0x10/0x10
[ 70.759790][ C1] acpi_idle_enter+0xe4/0x140
[ 70.764478][ C1] cpuidle_enter_state+0x109/0x470
[ 70.769782][ C1] ? __pfx_menu_select+0x10/0x10
[ 70.774897][ C1] cpuidle_enter+0x5d/0xa0
[ 70.779335][ C1] do_idle+0x372/0x5c0
[ 70.783763][ C1] ? __pfx_do_idle+0x10/0x10
[ 70.788439][ C1] cpu_startup_entry+0x42/0x60
[ 70.793329][ C1] start_secondary+0x102/0x110
[ 70.799094][ C1] common_startup_64+0x13e/0x147
[ 70.804066][ C1] </TASK>
[ 70.807107][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 70.814402][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0
[ 70.824726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 70.834882][ C1] Call Trace:
[ 70.838200][ C1] <IRQ>
[ 70.841087][ C1] dump_stack_lvl+0x241/0x360
[ 70.845798][ C1] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.850994][ C1] ? __pfx__printk+0x10/0x10
[ 70.855584][ C1] ? vscnprintf+0x5d/0x90
[ 70.859994][ C1] panic+0x349/0x880
[ 70.863892][ C1] ? __warn+0x174/0x4d0
[ 70.868080][ C1] ? __pfx_panic+0x10/0x10
[ 70.872582][ C1] ? common_startup_64+0x13e/0x147
[ 70.877807][ C1] __warn+0x344/0x4d0
[ 70.881785][ C1] ? invalidate_bh_lru+0x102/0x1b0
[ 70.886894][ C1] report_bug+0x2b3/0x500
[ 70.891307][ C1] ? invalidate_bh_lru+0x102/0x1b0
[ 70.896473][ C1] handle_bug+0x60/0x90
[ 70.901785][ C1] exc_invalid_op+0x1a/0x50
[ 70.906410][ C1] asm_exc_invalid_op+0x1a/0x20
[ 70.911364][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 70.917140][ C1] Code: a4 30 dc ff f0 ff 0b eb 25 e8 da 56 78 ff 41 80 3c 2e 00 75 2a eb 30 e8 cc 56 78 ff 90 48 c7 c7 20 da 18 8c e8 9f ff 38 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 70.936856][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046
[ 70.942959][ C1] RAX: ce1525cec6b42700 RBX: ffff888075477b40 RCX: ffff88801d2d0000
[ 70.950930][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[ 70.958897][ C1] RBP: 0000000000000000 R08: ffffffff81600962 R09: 1ffff110170e519a
[ 70.966864][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838
[ 70.974828][ C1] R13: 0000000000000058 R14: 1ffff110170e7312 R15: ffff8880b8739890
[ 70.982796][ C1] ? __warn_printk+0x292/0x360
[ 70.987582][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 70.993041][ C1] __flush_smp_call_function_queue+0x3fc/0x1620
[ 70.999369][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 71.005027][ C1] __sysvec_call_function_single+0xb8/0x430
[ 71.011387][ C1] sysvec_call_function_single+0x9e/0xc0
[ 71.017048][ C1] </IRQ>
[ 71.019989][ C1] <TASK>
[ 71.022925][ C1] asm_sysvec_call_function_single+0x1a/0x20
[ 71.028973][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30
[ 71.034382][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 f6 a7 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[ 71.054002][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246
[ 71.060081][ C1] RAX: ffff88801d2d0000 RBX: ffff888141ac7864 RCX: 000000000001d949
[ 71.068049][ C1] RDX: 0000000000000001 RSI: ffff888141ac7800 RDI: ffff888141ac7864
[ 71.076034][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b
[ 71.084008][ C1] R10: dffffc0000000000 R11: ffffffff8bc09c00 R12: ffff8881417c8800
[ 71.091976][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10e120
[ 71.100139][ C1] ? __pfx_acpi_idle_enter+0x10/0x10
[ 71.105437][ C1] acpi_idle_enter+0xe4/0x140
[ 71.110233][ C1] cpuidle_enter_state+0x109/0x470
[ 71.115436][ C1] ? __pfx_menu_select+0x10/0x10
[ 71.120376][ C1] cpuidle_enter+0x5d/0xa0
[ 71.124964][ C1] do_idle+0x372/0x5c0
[ 71.129033][ C1] ? __pfx_do_idle+0x10/0x10
[ 71.133642][ C1] cpu_startup_entry+0x42/0x60
[ 71.138407][ C1] start_secondary+0x102/0x110
[ 71.143170][ C1] common_startup_64+0x13e/0x147
[ 71.148110][ C1] </TASK>
[ 71.151271][ C1] Kernel Offset: disabled
[ 71.155614][ C1] Rebooting in 86400 seconds..