./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1339310907 <...> Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. execve("./syz-executor1339310907", ["./syz-executor1339310907"], 0x7ffce8c7d0a0 /* 10 vars */) = 0 brk(NULL) = 0x55558f1fe000 brk(0x55558f1fed00) = 0x55558f1fed00 arch_prctl(ARCH_SET_FS, 0x55558f1fe380) = 0 set_tid_address(0x55558f1fe650) = 5828 set_robust_list(0x55558f1fe660, 24) = 0 rseq(0x55558f1feca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1339310907", 4096) = 28 getrandom("\x84\xd1\x34\x08\xf4\xd8\xea\x93", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f1fed00 brk(0x55558f21fd00) = 0x55558f21fd00 brk(0x55558f220000) = 0x55558f220000 mprotect(0x7f0b292ad000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x55558f1fe660, 24) = 0 [pid 5828] <... clone resumed>, child_tidptr=0x55558f1fe650) = 5829 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] setpgid(0, 0) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1000", 4) = 4 [pid 5829] close(3) = 0 executing program [pid 5829] write(1, "executing program\n", 18) = 18 [pid 5829] memfd_create("syzkaller", 0) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0b20c00000 [pid 5829] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 [pid 5829] munmap(0x7f0b20c00000, 138412032) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5829] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5829] close(3) = 0 [pid 5829] close(4) = 0 [pid 5829] mkdir("./file0", 0777) = 0 syzkaller login: [ 66.358476][ T5829] loop0: detected capacity change from 0 to 128 [ 66.392613][ T5829] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.401012][ T5829] Bad inode number on dev loop0: 2 is out of range [ 66.407724][ T5829] SysV FS: get root inode failed [ 66.412682][ T5829] oldfs: cannot read superblock [ 66.417819][ T5829] ------------[ cut here ]------------ [ 66.423415][ T5829] VFS: brelse: Trying to free free buffer [ 66.429219][ T5829] WARNING: CPU: 1 PID: 5829 at fs/buffer.c:1235 invalidate_bh_lru+0x102/0x1b0 [ 66.438631][ T5829] Modules linked in: [ 66.442540][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor133 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 66.453644][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.463801][ T5829] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 66.469538][ T5829] Code: 84 5b db ff f0 ff 0b eb 25 e8 ca bd 74 ff 41 80 3c 2e 00 75 2a eb 30 e8 bc bd 74 ff 90 48 c7 c7 60 7a 19 8c e8 bf b2 35 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 66.489173][ T5829] RSP: 0018:ffffc90002d6f8e8 EFLAGS: 00010046 [ 66.495360][ T5829] RAX: d0ea3ff62f4d9500 RBX: ffff888077516b40 RCX: ffff888034ab0000 [ 66.503361][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.511456][ T5829] RBP: 0000000000000000 R08: ffffffff8155d162 R09: 1ffff110170e519a [ 66.519462][ T5829] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739940 [ 66.527435][ T5829] R13: 0000000000000000 R14: 1ffff110170e7328 R15: ffff8880b8739940 [ 66.535411][ T5829] FS: 000055558f1fe380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 66.544358][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.550962][ T5829] CR2: 0000557ae05b65b0 CR3: 0000000056730000 CR4: 00000000003526f0 [ 66.558934][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.566994][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.574959][ T5829] Call Trace: [ 66.578242][ T5829] [ 66.581163][ T5829] ? __warn+0x168/0x4e0 [ 66.585348][ T5829] ? invalidate_bh_lru+0x102/0x1b0 [ 66.590457][ T5829] ? report_bug+0x2b3/0x500 [ 66.594959][ T5829] ? invalidate_bh_lru+0x102/0x1b0 [ 66.600066][ T5829] ? handle_bug+0x60/0x90 [ 66.604412][ T5829] ? exc_invalid_op+0x1a/0x50 [ 66.609093][ T5829] ? asm_exc_invalid_op+0x1a/0x20 [ 66.614110][ T5829] ? __warn_printk+0x292/0x360 [ 66.618867][ T5829] ? invalidate_bh_lru+0x102/0x1b0 [ 66.624081][ T5829] ? invalidate_bh_lru+0x101/0x1b0 [ 66.629224][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 66.634695][ T5829] smp_call_function_many_cond+0x1760/0x2ca0 [ 66.640683][ T5829] ? __pfx_has_bh_in_lru+0x10/0x10 [ 66.645972][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 66.651441][ T5829] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 66.657765][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 66.663223][ T5829] ? __pfx_has_bh_in_lru+0x10/0x10 [ 66.668329][ T5829] on_each_cpu_cond_mask+0x3f/0x80 [ 66.673475][ T5829] blkdev_flush_mapping+0xfe/0x270 [ 66.678617][ T5829] ? bdev_release+0x456/0x700 [ 66.683306][ T5829] bdev_release+0x460/0x700 [ 66.687825][ T5829] blkdev_release+0x15/0x20 [ 66.692337][ T5829] ? __pfx_blkdev_release+0x10/0x10 [ 66.697536][ T5829] __fput+0x23f/0x880 [ 66.701611][ T5829] task_work_run+0x24f/0x310 [ 66.706214][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 66.711331][ T5829] ? kasan_quarantine_put+0xdc/0x230 [ 66.716627][ T5829] ? lockdep_hardirqs_on+0x99/0x150 [ 66.721825][ T5829] ptrace_notify+0x2d2/0x380 [ 66.726513][ T5829] ? dput+0x37/0x2b0 [ 66.730433][ T5829] ? __se_sys_mount+0x379/0x3c0 [ 66.735312][ T5829] ? __pfx_ptrace_notify+0x10/0x10 [ 66.740441][ T5829] ? __se_sys_mount+0x379/0x3c0 [ 66.745317][ T5829] ? __pfx___se_sys_mount+0x10/0x10 [ 66.750531][ T5829] syscall_exit_work+0xc6/0x190 [ 66.755389][ T5829] syscall_exit_to_user_mode+0x279/0x370 [ 66.761021][ T5829] do_syscall_64+0x100/0x230 [ 66.765611][ T5829] ? clear_bhb_loop+0x35/0x90 [ 66.770278][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.776164][ T5829] RIP: 0033:0x7f0b29231dea [ 66.780578][ T5829] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.800355][ T5829] RSP: 002b:00007ffdc5b97d08 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 66.808785][ T5829] RAX: ffffffffffffffea RBX: 00007ffdc5b97d20 RCX: 00007f0b29231dea [ 66.816749][ T5829] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffdc5b97d20 [ 66.824711][ T5829] RBP: 0000000000000004 R08: 00007ffdc5b97d60 R09: 0000000000009eaf [ 66.832668][ T5829] R10: 0000000002000412 R11: 0000000000000282 R12: 0000000002000412 [ 66.840637][ T5829] R13: 00007ffdc5b97d60 R14: 0000000000000003 R15: 0000000000010000 [ 66.848697][ T5829] [ 66.851709][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.858990][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor133 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 66.870092][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.880233][ T5829] Call Trace: [ 66.883501][ T5829] [ 66.886428][ T5829] dump_stack_lvl+0x241/0x360 [ 66.891108][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.896311][ T5829] ? __pfx__printk+0x10/0x10 [ 66.900913][ T5829] ? vscnprintf+0x5d/0x90 [ 66.905256][ T5829] panic+0x349/0x880 [ 66.909161][ T5829] ? __warn+0x177/0x4e0 [ 66.913364][ T5829] ? __pfx_panic+0x10/0x10 [ 66.917829][ T5829] __warn+0x34b/0x4e0 [ 66.921839][ T5829] ? invalidate_bh_lru+0x102/0x1b0 [ 66.926970][ T5829] report_bug+0x2b3/0x500 [ 66.931359][ T5829] ? invalidate_bh_lru+0x102/0x1b0 [ 66.936478][ T5829] handle_bug+0x60/0x90 [ 66.940637][ T5829] exc_invalid_op+0x1a/0x50 [ 66.945134][ T5829] asm_exc_invalid_op+0x1a/0x20 [ 66.950157][ T5829] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 66.955983][ T5829] Code: 84 5b db ff f0 ff 0b eb 25 e8 ca bd 74 ff 41 80 3c 2e 00 75 2a eb 30 e8 bc bd 74 ff 90 48 c7 c7 60 7a 19 8c e8 bf b2 35 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 66.975613][ T5829] RSP: 0018:ffffc90002d6f8e8 EFLAGS: 00010046 [ 66.981687][ T5829] RAX: d0ea3ff62f4d9500 RBX: ffff888077516b40 RCX: ffff888034ab0000 [ 66.989659][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.997646][ T5829] RBP: 0000000000000000 R08: ffffffff8155d162 R09: 1ffff110170e519a [ 67.005606][ T5829] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739940 [ 67.013580][ T5829] R13: 0000000000000000 R14: 1ffff110170e7328 R15: ffff8880b8739940 [ 67.021602][ T5829] ? __warn_printk+0x292/0x360 [ 67.026370][ T5829] ? invalidate_bh_lru+0x101/0x1b0 [ 67.031485][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 67.036940][ T5829] smp_call_function_many_cond+0x1760/0x2ca0 [ 67.042923][ T5829] ? __pfx_has_bh_in_lru+0x10/0x10 [ 67.048069][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 67.053641][ T5829] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 67.060056][ T5829] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 67.065530][ T5829] ? __pfx_has_bh_in_lru+0x10/0x10 [ 67.070637][ T5829] on_each_cpu_cond_mask+0x3f/0x80 [ 67.075746][ T5829] blkdev_flush_mapping+0xfe/0x270 [ 67.080850][ T5829] ? bdev_release+0x456/0x700 [ 67.085521][ T5829] bdev_release+0x460/0x700 [ 67.090027][ T5829] blkdev_release+0x15/0x20 [ 67.094551][ T5829] ? __pfx_blkdev_release+0x10/0x10 [ 67.099740][ T5829] __fput+0x23f/0x880 [ 67.103716][ T5829] task_work_run+0x24f/0x310 [ 67.108300][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 67.113426][ T5829] ? kasan_quarantine_put+0xdc/0x230 [ 67.118730][ T5829] ? lockdep_hardirqs_on+0x99/0x150 [ 67.123937][ T5829] ptrace_notify+0x2d2/0x380 [ 67.128544][ T5829] ? dput+0x37/0x2b0 [ 67.132438][ T5829] ? __se_sys_mount+0x379/0x3c0 [ 67.137289][ T5829] ? __pfx_ptrace_notify+0x10/0x10 [ 67.142413][ T5829] ? __se_sys_mount+0x379/0x3c0 [ 67.147274][ T5829] ? __pfx___se_sys_mount+0x10/0x10 [ 67.152471][ T5829] syscall_exit_work+0xc6/0x190 [ 67.157322][ T5829] syscall_exit_to_user_mode+0x279/0x370 [ 67.162950][ T5829] do_syscall_64+0x100/0x230 [ 67.167534][ T5829] ? clear_bhb_loop+0x35/0x90 [ 67.172216][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.178122][ T5829] RIP: 0033:0x7f0b29231dea [ 67.182540][ T5829] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.202159][ T5829] RSP: 002b:00007ffdc5b97d08 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 67.210595][ T5829] RAX: ffffffffffffffea RBX: 00007ffdc5b97d20 RCX: 00007f0b29231dea [ 67.218569][ T5829] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffdc5b97d20 [ 67.226542][ T5829] RBP: 0000000000000004 R08: 00007ffdc5b97d60 R09: 0000000000009eaf [ 67.234533][ T5829] R10: 0000000002000412 R11: 0000000000000282 R12: 0000000002000412 [ 67.242723][ T5829] R13: 00007ffdc5b97d60 R14: 0000000000000003 R15: 0000000000010000 [ 67.250712][ T5829] [ 67.253993][ T5829] Kernel Offset: disabled [ 67.258405][ T5829] Rebooting in 86400 seconds..