./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1433154378 <...> Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. execve("./syz-executor1433154378", ["./syz-executor1433154378"], 0x7ffca0033c90 /* 10 vars */) = 0 brk(NULL) = 0x55555bffe000 brk(0x55555bffed00) = 0x55555bffed00 arch_prctl(ARCH_SET_FS, 0x55555bffe380) = 0 set_tid_address(0x55555bffe650) = 5827 set_robust_list(0x55555bffe660, 24) = 0 rseq(0x55555bffeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1433154378", 4096) = 28 getrandom("\xa1\x09\xf0\xe5\x9d\x35\x08\x52", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555bffed00 brk(0x55555c01fd00) = 0x55555c01fd00 brk(0x55555c020000) = 0x55555c020000 mprotect(0x7f6fc640e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.PvSR5E", 0700) = 0 chmod("./syzkaller.PvSR5E", 0777) = 0 chdir("./syzkaller.PvSR5E") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5828 attached [pid 5828] set_robust_list(0x55555bffe660, 24 [pid 5827] <... clone resumed>, child_tidptr=0x55555bffe650) = 5828 [pid 5828] <... set_robust_list resumed>) = 0 [pid 5828] chdir("./0") = 0 [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5828] setpgid(0, 0) = 0 [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5828] write(3, "1000", 4) = 4 [pid 5828] close(3) = 0 [pid 5828] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5828] write(1, "executing program\n", 18) = 18 [pid 5828] memfd_create("syzkaller", 0) = 3 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6fbde00000 [pid 5828] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5828] munmap(0x7f6fbde00000, 138412032) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5828] close(3) = 0 [pid 5828] close(4) = 0 [pid 5828] mkdir("./file0", 0777) = 0 [ 61.459036][ T5828] loop0: detected capacity change from 0 to 256 [ 61.499802][ T5828] ======================================================= [ 61.499802][ T5828] WARNING: The mand mount option has been deprecated and [ 61.499802][ T5828] and is ignored by this kernel. Remove the mand [ 61.499802][ T5828] option from the mount to silence this warning. [ 61.499802][ T5828] ======================================================= [ 61.534987][ T5828] exfat: Deprecated parameter 'namecase' [pid 5828] mount("/dev/loop0", "./file0", "exfat", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_I_VERSION|MS_BORN, "umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=0x0"...) = 0 [pid 5828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5828] chdir("./file0") = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 61.547482][ T5828] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [pid 5828] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 5828] exit_group(0) = ? [pid 5828] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 61.607367][ T5828] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555bfff6f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 61.691536][ C1] ------------[ cut here ]------------ [ 61.697045][ C1] VFS: brelse: Trying to free free buffer [ 61.702887][ C1] WARNING: CPU: 1 PID: 0 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0 [ 61.711505][ C1] Modules linked in: [ 61.715412][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-next-20241122-syzkaller #0 [ 61.724864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.734924][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 61.740645][ C1] Code: 44 ee da ff f0 ff 0b eb 25 e8 ba fa 6f ff 41 80 3c 2e 00 75 2a eb 30 e8 ac fa 6f ff 90 48 c7 c7 20 e1 18 8c e8 2f 99 30 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 61.760246][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046 [ 61.766339][ C1] RAX: 276620665cab4d00 RBX: ffff88807c7ce7a0 RCX: ffff88801cee0000 [ 61.774324][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.782287][ C1] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170e519a [ 61.790268][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838 [ 61.798261][ C1] R13: 0000000000000000 R14: 1ffff110170e7307 R15: ffff8880b8739838 [ 61.806234][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 61.815175][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.821760][ C1] CR2: 000000000045bdd0 CR3: 0000000033be0000 CR4: 00000000003526f0 [ 61.829732][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.837701][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.845758][ C1] Call Trace: [ 61.849120][ C1] [ 61.851965][ C1] ? __warn+0x168/0x4e0 [ 61.856123][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 61.861232][ C1] ? report_bug+0x2b3/0x500 [ 61.865739][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 61.870846][ C1] ? handle_bug+0x60/0x90 [ 61.875166][ C1] ? exc_invalid_op+0x1a/0x50 [ 61.879834][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 61.885026][ C1] ? __warn_printk+0x292/0x360 [ 61.889786][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 61.894894][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 61.900348][ C1] __flush_smp_call_function_queue+0x3fc/0x1690 [ 61.906580][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 61.912042][ C1] __sysvec_call_function_single+0xb8/0x430 [ 61.917963][ C1] sysvec_call_function_single+0x9e/0xc0 [ 61.923612][ C1] [ 61.926543][ C1] [ 61.929471][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 61.935452][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 61.940743][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 25 da 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 61.960349][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 61.966416][ C1] RAX: ffff88801cee0000 RBX: ffff888143ea2864 RCX: 000000000001bdd9 [ 61.974384][ C1] RDX: 0000000000000001 RSI: ffff888143ea2800 RDI: ffff888143ea2864 [ 61.982436][ C1] RBP: 000000000003a9f8 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 61.990411][ C1] R10: dffffc0000000000 R11: ffffffff8bc88150 R12: ffff88801fb82000 [ 61.998389][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f110580 [ 62.006352][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 62.011638][ C1] acpi_idle_enter+0xe4/0x140 [ 62.016305][ C1] cpuidle_enter_state+0x109/0x470 [ 62.021407][ C1] ? __pfx_menu_select+0x10/0x10 [ 62.026337][ C1] cpuidle_enter+0x5d/0xa0 [ 62.030748][ C1] do_idle+0x372/0x5c0 [ 62.034811][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.041133][ C1] ? __pfx_do_idle+0x10/0x10 [ 62.045719][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 62.051618][ C1] ? complete+0xb4/0x1c0 [ 62.055858][ C1] cpu_startup_entry+0x42/0x60 [ 62.060614][ C1] start_secondary+0x102/0x110 [ 62.065369][ C1] common_startup_64+0x13e/0x147 [ 62.070308][ C1] [ 62.073328][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 62.080601][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-next-20241122-syzkaller #0 [ 62.090042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.100082][ C1] Call Trace: [ 62.103350][ C1] [ 62.106190][ C1] dump_stack_lvl+0x241/0x360 [ 62.110861][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.116049][ C1] ? __pfx__printk+0x10/0x10 [ 62.120626][ C1] ? _printk+0xd5/0x120 [ 62.124776][ C1] ? __init_begin+0x41000/0x41000 [ 62.129797][ C1] ? vscnprintf+0x5d/0x90 [ 62.134126][ C1] panic+0x349/0x880 [ 62.138009][ C1] ? __warn+0x177/0x4e0 [ 62.142155][ C1] ? __pfx_panic+0x10/0x10 [ 62.146565][ C1] ? show_trace_log_lvl+0x3b2/0x410 [ 62.151757][ C1] ? common_startup_64+0x13e/0x147 [ 62.156862][ C1] __warn+0x34b/0x4e0 [ 62.160835][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 62.165938][ C1] report_bug+0x2b3/0x500 [ 62.170264][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 62.175367][ C1] handle_bug+0x60/0x90 [ 62.179515][ C1] exc_invalid_op+0x1a/0x50 [ 62.184012][ C1] asm_exc_invalid_op+0x1a/0x20 [ 62.188857][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 62.194588][ C1] Code: 44 ee da ff f0 ff 0b eb 25 e8 ba fa 6f ff 41 80 3c 2e 00 75 2a eb 30 e8 ac fa 6f ff 90 48 c7 c7 20 e1 18 8c e8 2f 99 30 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 62.214183][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046 [ 62.220243][ C1] RAX: 276620665cab4d00 RBX: ffff88807c7ce7a0 RCX: ffff88801cee0000 [ 62.228202][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.236160][ C1] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170e519a [ 62.244124][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838 [ 62.252086][ C1] R13: 0000000000000000 R14: 1ffff110170e7307 R15: ffff8880b8739838 [ 62.260050][ C1] ? __warn_printk+0x292/0x360 [ 62.264808][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 62.270267][ C1] __flush_smp_call_function_queue+0x3fc/0x1690 [ 62.276508][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 62.281962][ C1] __sysvec_call_function_single+0xb8/0x430 [ 62.287848][ C1] sysvec_call_function_single+0x9e/0xc0 [ 62.293472][ C1] [ 62.296411][ C1] [ 62.299331][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 62.305390][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 62.310666][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 25 da 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 62.330260][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 62.336315][ C1] RAX: ffff88801cee0000 RBX: ffff888143ea2864 RCX: 000000000001bdd9 [ 62.344274][ C1] RDX: 0000000000000001 RSI: ffff888143ea2800 RDI: ffff888143ea2864 [ 62.352244][ C1] RBP: 000000000003a9f8 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 62.360201][ C1] R10: dffffc0000000000 R11: ffffffff8bc88150 R12: ffff88801fb82000 [ 62.368161][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f110580 [ 62.376119][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 62.381404][ C1] acpi_idle_enter+0xe4/0x140 [ 62.386075][ C1] cpuidle_enter_state+0x109/0x470 [ 62.391264][ C1] ? __pfx_menu_select+0x10/0x10 [ 62.396196][ C1] cpuidle_enter+0x5d/0xa0 [ 62.400609][ C1] do_idle+0x372/0x5c0 [ 62.404670][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.410991][ C1] ? __pfx_do_idle+0x10/0x10 [ 62.415573][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 62.421462][ C1] ? complete+0xb4/0x1c0 [ 62.425793][ C1] cpu_startup_entry+0x42/0x60 [ 62.430550][ C1] start_secondary+0x102/0x110 [ 62.435307][ C1] common_startup_64+0x13e/0x147 [ 62.440245][ C1] [ 62.443509][ C1] Kernel Offset: disabled [ 62.447845][ C1] Rebooting in 86400 seconds..