./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1897255270 <...> Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. execve("./syz-executor1897255270", ["./syz-executor1897255270"], 0x7fffe14b6400 /* 10 vars */) = 0 brk(NULL) = 0x555556402000 brk(0x555556402c40) = 0x555556402c40 arch_prctl(ARCH_SET_FS, 0x555556402300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1897255270", 4096) = 28 brk(0x555556423c40) = 0x555556423c40 brk(0x555556424000) = 0x555556424000 mprotect(0x7fe6a231d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe699e5a000 write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7fe699e5a000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "sysv", MS_RDONLY|MS_NOSUID|MS_SILENT, "\x22\x33\x87\x08") = -1 EINVAL (Invalid argument) syzkaller login: [ 53.765728][ T5068] loop0: detected capacity change from 0 to 128 [ 53.776781][ T5068] oldfs: cannot read superblock [ 53.858968][ C0] ------------[ cut here ]------------ [ 53.864492][ C0] VFS: brelse: Trying to free free buffer [ 53.870320][ C0] WARNING: CPU: 0 PID: 0 at fs/buffer.c:1145 brelse+0x78/0xa0 [ 53.877788][ C0] Modules linked in: [ 53.881673][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 53.890941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.900982][ C0] RIP: 0010:brelse+0x78/0xa0 [ 53.905569][ C0] Code: df be 04 00 00 00 e8 d7 08 e0 ff f0 ff 0b eb 1c e8 1d 6b 8a ff eb 15 e8 16 6b 8a ff 48 c7 c7 00 52 fe 8a 31 c0 e8 88 5d 51 ff <0f> 0b 5b 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c af 48 89 df e8 df [ 53.925167][ C0] RSP: 0018:ffffc90000007f18 EFLAGS: 00010046 [ 53.931225][ C0] RAX: 6478f26c57452300 RBX: ffff88807293b5d0 RCX: ffffffff8d0bb7c0 [ 53.939273][ C0] RDX: 0000000080010002 RSI: 0000000080010002 RDI: 0000000000000000 [ 53.947232][ C0] RBP: 0000000000000000 R08: ffffffff816f29ad R09: ffffed1017304f5b [ 53.955190][ C0] R10: ffffed1017304f5b R11: 1ffff11017304f5a R12: 0000000000000000 [ 53.963151][ C0] R13: 1ffff11017308526 R14: ffff8880b98360f8 R15: dffffc0000000000 [ 53.971112][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.980028][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.986601][ C0] CR2: 00007fe6a2280130 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 53.994563][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.002526][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.010487][ C0] Call Trace: [ 54.013759][ C0] [ 54.016596][ C0] __invalidate_bh_lrus+0x37/0x3c0 [ 54.021706][ C0] invalidate_bh_lru+0x66/0xb0 [ 54.026461][ C0] __flush_smp_call_function_queue+0x2cc/0xcd0 [ 54.032611][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 54.037630][ C0] __sysvec_call_function_single+0x62/0x70 [ 54.043430][ C0] sysvec_call_function_single+0x8c/0xb0 [ 54.049118][ C0] [ 54.052041][ C0] [ 54.054962][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 54.060932][ C0] RIP: 0010:acpi_idle_enter+0x43d/0x7e0 [ 54.066494][ C0] Code: ff e8 37 43 e2 f6 48 83 e3 08 44 8b 7c 24 04 0f 85 e8 00 00 00 e8 d3 f0 e8 f6 66 90 e8 5c 3e e2 f6 0f 00 2d 75 67 ad 00 fb f4 <9c> 8f 44 24 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 [ 54.086179][ C0] RSP: 0018:ffffffff8d007b80 EFLAGS: 000002d3 [ 54.092235][ C0] RAX: ffffffff8aa99764 RBX: 0000000000000000 RCX: ffffffff8d0bb7c0 [ 54.100194][ C0] RDX: 0000000000000000 RSI: ffffffff8aedbae0 RDI: ffffffff8b4bbfe0 [ 54.108153][ C0] RBP: ffffffff8d007c30 R08: ffffffff8aa99749 R09: fffffbfff1a176f9 [ 54.116116][ C0] R10: fffffbfff1a176f9 R11: 1ffffffff1a176f8 R12: ffffffff8d007bc0 [ 54.124075][ C0] R13: dffffc0000000000 R14: ffff8881452da000 R15: 0000000000000001 [ 54.132040][ C0] ? acpi_idle_enter+0x419/0x7e0 [ 54.136967][ C0] ? acpi_idle_enter+0x434/0x7e0 [ 54.141904][ C0] ? intel_idle_xstate+0x90/0x90 [ 54.146839][ C0] cpuidle_enter_state+0x50a/0xf10 [ 54.151947][ C0] ? rcu_lock_acquire+0x30/0x30 [ 54.156787][ C0] ? __lock_acquire+0x1f60/0x1f60 [ 54.161804][ C0] ? cpuidle_enter_s2idle+0x670/0x670 [ 54.167165][ C0] ? rcu_read_lock_sched_held+0x87/0x110 [ 54.172796][ C0] cpuidle_enter+0x59/0x90 [ 54.177212][ C0] do_idle+0x3b9/0x640 [ 54.181277][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 54.186488][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 54.192414][ C0] cpu_startup_entry+0x15/0x20 [ 54.197181][ C0] rest_init+0x24f/0x270 [ 54.201446][ C0] ? time_init+0x40/0x40 [ 54.205685][ C0] arch_call_rest_init+0xa/0x10 [ 54.210529][ C0] start_kernel+0x471/0x520 [ 54.215031][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 54.220934][ C0] [ 54.223951][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.231227][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 54.240507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.250571][ C0] Call Trace: [ 54.253849][ C0] [ 54.256685][ C0] dump_stack_lvl+0x1b1/0x290 [ 54.261363][ C0] ? nf_tcp_handle_invalid+0x630/0x630 [ 54.266820][ C0] ? panic+0x710/0x710 [ 54.270889][ C0] ? vscnprintf+0x59/0x80 [ 54.275215][ C0] ? __breadahead+0x1c0/0x200 [ 54.279888][ C0] panic+0x2d6/0x710 [ 54.283780][ C0] ? __warn+0x16d/0x2d0 [ 54.287953][ C0] ? memcpy_page_flushcache+0x100/0x100 [ 54.293517][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 54.299597][ C0] ? brelse+0x78/0xa0 [ 54.303582][ C0] __warn+0x284/0x2d0 [ 54.307560][ C0] ? brelse+0x78/0xa0 [ 54.311547][ C0] report_bug+0x1b3/0x2d0 [ 54.315896][ C0] handle_bug+0x3d/0x70 [ 54.320063][ C0] exc_invalid_op+0x16/0x40 [ 54.324569][ C0] asm_exc_invalid_op+0x16/0x20 [ 54.329417][ C0] RIP: 0010:brelse+0x78/0xa0 [ 54.334015][ C0] Code: df be 04 00 00 00 e8 d7 08 e0 ff f0 ff 0b eb 1c e8 1d 6b 8a ff eb 15 e8 16 6b 8a ff 48 c7 c7 00 52 fe 8a 31 c0 e8 88 5d 51 ff <0f> 0b 5b 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c af 48 89 df e8 df [ 54.353617][ C0] RSP: 0018:ffffc90000007f18 EFLAGS: 00010046 [ 54.359680][ C0] RAX: 6478f26c57452300 RBX: ffff88807293b5d0 RCX: ffffffff8d0bb7c0 [ 54.367642][ C0] RDX: 0000000080010002 RSI: 0000000080010002 RDI: 0000000000000000 [ 54.375667][ C0] RBP: 0000000000000000 R08: ffffffff816f29ad R09: ffffed1017304f5b [ 54.383645][ C0] R10: ffffed1017304f5b R11: 1ffff11017304f5a R12: 0000000000000000 [ 54.391616][ C0] R13: 1ffff11017308526 R14: ffff8880b98360f8 R15: dffffc0000000000 [ 54.399591][ C0] ? __wake_up_klogd+0xcd/0x100 [ 54.404452][ C0] ? brelse+0x78/0xa0 [ 54.408430][ C0] __invalidate_bh_lrus+0x37/0x3c0 [ 54.413539][ C0] invalidate_bh_lru+0x66/0xb0 [ 54.418303][ C0] __flush_smp_call_function_queue+0x2cc/0xcd0 [ 54.424457][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 54.429474][ C0] __sysvec_call_function_single+0x62/0x70 [ 54.435271][ C0] sysvec_call_function_single+0x8c/0xb0 [ 54.440896][ C0] [ 54.443819][ C0] [ 54.446740][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 54.452713][ C0] RIP: 0010:acpi_idle_enter+0x43d/0x7e0 [ 54.458249][ C0] Code: ff e8 37 43 e2 f6 48 83 e3 08 44 8b 7c 24 04 0f 85 e8 00 00 00 e8 d3 f0 e8 f6 66 90 e8 5c 3e e2 f6 0f 00 2d 75 67 ad 00 fb f4 <9c> 8f 44 24 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 [ 54.477847][ C0] RSP: 0018:ffffffff8d007b80 EFLAGS: 000002d3 [ 54.483903][ C0] RAX: ffffffff8aa99764 RBX: 0000000000000000 RCX: ffffffff8d0bb7c0 [ 54.491863][ C0] RDX: 0000000000000000 RSI: ffffffff8aedbae0 RDI: ffffffff8b4bbfe0 [ 54.499822][ C0] RBP: ffffffff8d007c30 R08: ffffffff8aa99749 R09: fffffbfff1a176f9 [ 54.507784][ C0] R10: fffffbfff1a176f9 R11: 1ffffffff1a176f8 R12: ffffffff8d007bc0 [ 54.515742][ C0] R13: dffffc0000000000 R14: ffff8881452da000 R15: 0000000000000001 [ 54.523708][ C0] ? acpi_idle_enter+0x419/0x7e0 [ 54.528639][ C0] ? acpi_idle_enter+0x434/0x7e0 [ 54.533575][ C0] ? intel_idle_xstate+0x90/0x90 [ 54.538512][ C0] cpuidle_enter_state+0x50a/0xf10 [ 54.543621][ C0] ? rcu_lock_acquire+0x30/0x30 [ 54.548465][ C0] ? __lock_acquire+0x1f60/0x1f60 [ 54.553479][ C0] ? cpuidle_enter_s2idle+0x670/0x670 [ 54.558845][ C0] ? rcu_read_lock_sched_held+0x87/0x110 [ 54.564474][ C0] cpuidle_enter+0x59/0x90 [ 54.568885][ C0] do_idle+0x3b9/0x640 [ 54.572952][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 54.578151][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 54.584061][ C0] cpu_startup_entry+0x15/0x20 [ 54.588814][ C0] rest_init+0x24f/0x270 [ 54.593056][ C0] ? time_init+0x40/0x40 [ 54.597295][ C0] arch_call_rest_init+0xa/0x10 [ 54.602139][ C0] start_kernel+0x471/0x520 [ 54.606638][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 54.612535][ C0] [ 54.615708][ C0] Kernel Offset: disabled [ 54.620088][ C0] Rebooting in 86400 seconds..