./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3958249796
<...>
forked to background, child pid 4737
[ 35.740580][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0
[ 35.751552][ T4738] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 36.127607][ T4813] sshd (4813) used greatest stack depth: 18576 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
execve("./syz-executor3958249796", ["./syz-executor3958249796"], 0x7ffc2fc090e0 /* 10 vars */) = 0
brk(NULL) = 0x55558f91c000
brk(0x55558f91cd00) = 0x55558f91cd00
arch_prctl(ARCH_SET_FS, 0x55558f91c380) = 0
set_tid_address(0x55558f91c650) = 5068
set_robust_list(0x55558f91c660, 24) = 0
rseq(0x55558f91cca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3958249796", 4096) = 28
getrandom("\x3b\x9e\xc9\x8c\xc4\x97\x08\xa2", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558f91cd00
brk(0x55558f93dd00) = 0x55558f93dd00
brk(0x55558f93e000) = 0x55558f93e000
mprotect(0x7f6e62acc000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6e5a600000
write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
munmap(0x7f6e5a600000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
syzkaller login: [ 57.847850][ T5068] loop0: detected capacity change from 0 to 128
[ 57.882927][ T5068] oldfs: cannot read superblock
[ 57.889020][ T5068] ------------[ cut here ]------------
[ 57.894653][ T5068] VFS: brelse: Trying to free free buffer
[ 57.900491][ T5068] WARNING: CPU: 0 PID: 5068 at fs/buffer.c:1235 invalidate_bh_lru+0x102/0x1b0
[ 57.909361][ T5068] Modules linked in:
[ 57.913287][ T5068] CPU: 0 PID: 5068 Comm: syz-executor395 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0
[ 57.923700][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 57.933760][ T5068] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 57.939486][ T5068] Code: 34 4f dd ff f0 ff 0b eb 25 e8 2a 3b 7c ff 41 80 3c 2e 00 75 2a eb 30 e8 1c 3b 7c ff 90 48 c7 c7 c0 dc d8 8b e8 9f b7 3e ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 57.959099][ T5068] RSP: 0018:ffffc90002e37908 EFLAGS: 00010046
[ 57.965166][ T5068] RAX: 89dfff8bc85d2100 RBX: ffff88807b4ed888 RCX: ffff88802376da00
[ 57.973141][ T5068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 57.981126][ T5068] RBP: 0000000000000000 R08: ffffffff81587f92 R09: 1ffff1101728519a
[ 57.989105][ T5068] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff8880b9439370
[ 57.997085][ T5068] R13: 0000000000000000 R14: 1ffff1101728726e R15: ffff8880b9439370
[ 58.005069][ T5068] FS: 000055558f91c380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 58.014011][ T5068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.020610][ T5068] CR2: 000055c99a55ebc8 CR3: 000000007f38e000 CR4: 00000000003506f0
[ 58.028596][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.036577][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.044559][ T5068] Call Trace:
[ 58.047843][ T5068]
[ 58.050781][ T5068] ? __warn+0x163/0x4e0
[ 58.054960][ T5068] ? invalidate_bh_lru+0x102/0x1b0
[ 58.060089][ T5068] ? report_bug+0x2b3/0x500
[ 58.064616][ T5068] ? invalidate_bh_lru+0x102/0x1b0
[ 58.069744][ T5068] ? handle_bug+0x3e/0x70
[ 58.074090][ T5068] ? exc_invalid_op+0x1a/0x50
[ 58.078783][ T5068] ? asm_exc_invalid_op+0x1a/0x20
[ 58.083827][ T5068] ? __warn_printk+0x292/0x360
[ 58.088613][ T5068] ? invalidate_bh_lru+0x102/0x1b0
[ 58.093744][ T5068] ? invalidate_bh_lru+0x101/0x1b0
[ 58.098869][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.104355][ T5068] smp_call_function_many_cond+0x15fe/0x2a00
[ 58.110357][ T5068] ? __pfx_has_bh_in_lru+0x10/0x10
[ 58.115482][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.120969][ T5068] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 58.127318][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.132785][ T5068] ? __pfx_has_bh_in_lru+0x10/0x10
[ 58.137907][ T5068] on_each_cpu_cond_mask+0x3f/0x80
[ 58.143038][ T5068] blkdev_flush_mapping+0x14c/0x2b0
[ 58.148259][ T5068] bdev_release+0x489/0x720
[ 58.152779][ T5068] ? __pfx_blkdev_release+0x10/0x10
[ 58.157994][ T5068] blkdev_release+0x15/0x20
[ 58.162512][ T5068] __fput+0x429/0x8a0
[ 58.166515][ T5068] task_work_run+0x24f/0x310
[ 58.171131][ T5068] ? __pfx_task_work_run+0x10/0x10
[ 58.176267][ T5068] ? lockdep_hardirqs_on+0x99/0x150
[ 58.181489][ T5068] ptrace_notify+0x2d2/0x380
[ 58.186099][ T5068] ? kfree+0x153/0x3a0
[ 58.190182][ T5068] ? __pfx_ptrace_notify+0x10/0x10
[ 58.195319][ T5068] ? __se_sys_mount+0x37c/0x3c0
[ 58.200194][ T5068] ? __pfx___se_sys_mount+0x10/0x10
[ 58.205419][ T5068] syscall_exit_work+0xc6/0x190
[ 58.210292][ T5068] syscall_exit_to_user_mode+0x273/0x370
[ 58.215948][ T5068] do_syscall_64+0x102/0x240
[ 58.220563][ T5068] ? clear_bhb_loop+0x35/0x90
[ 58.225259][ T5068] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.231172][ T5068] RIP: 0033:0x7f6e62a50bba
[ 58.235614][ T5068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.255236][ T5068] RSP: 002b:00007ffde3a6b258 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 58.263669][ T5068] RAX: ffffffffffffffea RBX: 00007ffde3a6b270 RCX: 00007f6e62a50bba
[ 58.271658][ T5068] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00007ffde3a6b270
[ 58.279643][ T5068] RBP: 0000000000000004 R08: 00007ffde3a6b2b0 R09: 00ff373737373737
[ 58.287627][ T5068] R10: 0000000000004000 R11: 0000000000000282 R12: 0000000000004000
[ 58.295610][ T5068] R13: 00007ffde3a6b2b0 R14: 0000000000000003 R15: 0000000000010000
[ 58.303757][ T5068]
[ 58.306785][ T5068] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 58.314180][ T5068] CPU: 0 PID: 5068 Comm: syz-executor395 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0
[ 58.324605][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 58.334764][ T5068] Call Trace:
[ 58.338091][ T5068]
[ 58.341048][ T5068] dump_stack_lvl+0x241/0x360
[ 58.345751][ T5068] ? __pfx_dump_stack_lvl+0x10/0x10
[ 58.350972][ T5068] ? __pfx__printk+0x10/0x10
[ 58.355591][ T5068] ? vscnprintf+0x5d/0x90
[ 58.359939][ T5068] panic+0x349/0x860
[ 58.363861][ T5068] ? __warn+0x172/0x4e0
[ 58.368046][ T5068] ? __pfx_panic+0x10/0x10
[ 58.372583][ T5068] __warn+0x346/0x4e0
[ 58.376591][ T5068] ? invalidate_bh_lru+0x102/0x1b0
[ 58.381725][ T5068] report_bug+0x2b3/0x500
[ 58.386084][ T5068] ? invalidate_bh_lru+0x102/0x1b0
[ 58.391215][ T5068] handle_bug+0x3e/0x70
[ 58.395392][ T5068] exc_invalid_op+0x1a/0x50
[ 58.399923][ T5068] asm_exc_invalid_op+0x1a/0x20
[ 58.404795][ T5068] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 58.410532][ T5068] Code: 34 4f dd ff f0 ff 0b eb 25 e8 2a 3b 7c ff 41 80 3c 2e 00 75 2a eb 30 e8 1c 3b 7c ff 90 48 c7 c7 c0 dc d8 8b e8 9f b7 3e ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 58.430162][ T5068] RSP: 0018:ffffc90002e37908 EFLAGS: 00010046
[ 58.436242][ T5068] RAX: 89dfff8bc85d2100 RBX: ffff88807b4ed888 RCX: ffff88802376da00
[ 58.444229][ T5068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 58.452217][ T5068] RBP: 0000000000000000 R08: ffffffff81587f92 R09: 1ffff1101728519a
[ 58.460205][ T5068] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff8880b9439370
[ 58.468193][ T5068] R13: 0000000000000000 R14: 1ffff1101728726e R15: ffff8880b9439370
[ 58.476200][ T5068] ? __warn_printk+0x292/0x360
[ 58.480994][ T5068] ? invalidate_bh_lru+0x101/0x1b0
[ 58.486123][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.491602][ T5068] smp_call_function_many_cond+0x15fe/0x2a00
[ 58.497610][ T5068] ? __pfx_has_bh_in_lru+0x10/0x10
[ 58.502751][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.508244][ T5068] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 58.514612][ T5068] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 58.520120][ T5068] ? __pfx_has_bh_in_lru+0x10/0x10
[ 58.525253][ T5068] on_each_cpu_cond_mask+0x3f/0x80
[ 58.530391][ T5068] blkdev_flush_mapping+0x14c/0x2b0
[ 58.535608][ T5068] bdev_release+0x489/0x720
[ 58.540133][ T5068] ? __pfx_blkdev_release+0x10/0x10
[ 58.545347][ T5068] blkdev_release+0x15/0x20
[ 58.549864][ T5068] __fput+0x429/0x8a0
[ 58.553869][ T5068] task_work_run+0x24f/0x310
[ 58.558481][ T5068] ? __pfx_task_work_run+0x10/0x10
[ 58.563620][ T5068] ? lockdep_hardirqs_on+0x99/0x150
[ 58.568843][ T5068] ptrace_notify+0x2d2/0x380
[ 58.573460][ T5068] ? kfree+0x153/0x3a0
[ 58.577565][ T5068] ? __pfx_ptrace_notify+0x10/0x10
[ 58.582723][ T5068] ? __se_sys_mount+0x37c/0x3c0
[ 58.587602][ T5068] ? __pfx___se_sys_mount+0x10/0x10
[ 58.592821][ T5068] syscall_exit_work+0xc6/0x190
[ 58.597698][ T5068] syscall_exit_to_user_mode+0x273/0x370
[ 58.603445][ T5068] do_syscall_64+0x102/0x240
[ 58.608055][ T5068] ? clear_bhb_loop+0x35/0x90
[ 58.612756][ T5068] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.618662][ T5068] RIP: 0033:0x7f6e62a50bba
[ 58.623090][ T5068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.642719][ T5068] RSP: 002b:00007ffde3a6b258 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 58.651156][ T5068] RAX: ffffffffffffffea RBX: 00007ffde3a6b270 RCX: 00007f6e62a50bba
[ 58.659159][ T5068] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00007ffde3a6b270
[ 58.667166][ T5068] RBP: 0000000000000004 R08: 00007ffde3a6b2b0 R09: 00ff373737373737
[ 58.675154][ T5068] R10: 0000000000004000 R11: 0000000000000282 R12: 0000000000004000
[ 58.683165][ T5068] R13: 00007ffde3a6b2b0 R14: 0000000000000003 R15: 0000000000010000
[ 58.691173][ T5068]
[ 58.694463][ T5068] Kernel Offset: disabled
[ 58.698836][ T5068] Rebooting in 86400 seconds..