./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor168326360 <...> Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. execve("./syz-executor168326360", ["./syz-executor168326360"], 0x7ffec7a8dce0 /* 10 vars */) = 0 brk(NULL) = 0x55556c6bc000 brk(0x55556c6bcd00) = 0x55556c6bcd00 arch_prctl(ARCH_SET_FS, 0x55556c6bc380) = 0 set_tid_address(0x55556c6bc650) = 5099 set_robust_list(0x55556c6bc660, 24) = 0 rseq(0x55556c6bcca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor168326360", 4096) = 27 getrandom("\xe1\x90\x53\x0c\x52\x6b\xe4\x52", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556c6bcd00 brk(0x55556c6ddd00) = 0x55556c6ddd00 brk(0x55556c6de000) = 0x55556c6de000 mprotect(0x7f6e64809000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6e5c200000 write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7f6e5c200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 72.970178][ T5099] loop0: detected capacity change from 0 to 128 [ 73.008038][ T5099] oldfs: cannot read superblock [ 73.013394][ T5099] ------------[ cut here ]------------ [ 73.018961][ T5099] VFS: brelse: Trying to free free buffer [ 73.024872][ T5099] WARNING: CPU: 1 PID: 5099 at fs/buffer.c:1241 invalidate_bh_lru+0x102/0x1b0 [ 73.033742][ T5099] Modules linked in: [ 73.037643][ T5099] CPU: 1 PID: 5099 Comm: syz-executor168 Not tainted 6.9.0-rc6-next-20240501-syzkaller #0 [ 73.047537][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 73.057599][ T5099] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 73.063330][ T5099] Code: a4 50 dd ff f0 ff 0b eb 25 e8 ca 9f 77 ff 41 80 3c 2e 00 75 2a eb 30 e8 bc 9f 77 ff 90 48 c7 c7 c0 f8 d8 8b e8 af ce 39 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 73.082954][ T5099] RSP: 0018:ffffc9000230f908 EFLAGS: 00010046 [ 73.089038][ T5099] RAX: 3c6ef3da2a937600 RBX: ffff8880799464e8 RCX: ffff88807e6c8000 [ 73.097019][ T5099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.104994][ T5099] RBP: 0000000000000000 R08: ffffffff81584682 R09: 1ffff110172a519a [ 73.112975][ T5099] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffff8880b9539540 [ 73.120963][ T5099] R13: 0000000000000000 R14: 1ffff110172a72a8 R15: ffff8880b9539540 [ 73.128945][ T5099] FS: 000055556c6bc380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 73.137878][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.144491][ T5099] CR2: 00007ffdc737af98 CR3: 0000000077794000 CR4: 00000000003506f0 [ 73.152478][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.160464][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.168445][ T5099] Call Trace: [ 73.171739][ T5099] [ 73.174677][ T5099] ? __warn+0x163/0x4e0 [ 73.178846][ T5099] ? invalidate_bh_lru+0x102/0x1b0 [ 73.183968][ T5099] ? report_bug+0x2b3/0x500 [ 73.188502][ T5099] ? invalidate_bh_lru+0x102/0x1b0 [ 73.193627][ T5099] ? handle_bug+0x3e/0x70 [ 73.197968][ T5099] ? exc_invalid_op+0x1a/0x50 [ 73.202661][ T5099] ? asm_exc_invalid_op+0x1a/0x20 [ 73.207701][ T5099] ? __warn_printk+0x292/0x360 [ 73.212499][ T5099] ? invalidate_bh_lru+0x102/0x1b0 [ 73.217619][ T5099] ? invalidate_bh_lru+0x101/0x1b0 [ 73.222741][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.228209][ T5099] smp_call_function_many_cond+0x15fe/0x2a00 [ 73.234233][ T5099] ? __pfx_has_bh_in_lru+0x10/0x10 [ 73.239355][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.244854][ T5099] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 73.251208][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.256675][ T5099] ? __pfx_has_bh_in_lru+0x10/0x10 [ 73.261794][ T5099] on_each_cpu_cond_mask+0x3f/0x80 [ 73.266921][ T5099] blkdev_flush_mapping+0xfb/0x270 [ 73.272053][ T5099] ? bdev_release+0x458/0x6f0 [ 73.276746][ T5099] bdev_release+0x462/0x6f0 [ 73.281267][ T5099] blkdev_release+0x15/0x20 [ 73.285798][ T5099] ? __pfx_blkdev_release+0x10/0x10 [ 73.291025][ T5099] __fput+0x406/0x8b0 [ 73.295047][ T5099] task_work_run+0x24f/0x310 [ 73.299660][ T5099] ? __pfx_task_work_run+0x10/0x10 [ 73.304815][ T5099] ? lockdep_hardirqs_on+0x99/0x150 [ 73.310030][ T5099] ptrace_notify+0x2d2/0x380 [ 73.314638][ T5099] ? kfree+0x149/0x350 [ 73.318717][ T5099] ? __pfx_ptrace_notify+0x10/0x10 [ 73.323882][ T5099] ? __se_sys_mount+0x37c/0x3c0 [ 73.328774][ T5099] ? __pfx___se_sys_mount+0x10/0x10 [ 73.333987][ T5099] syscall_exit_work+0xc6/0x190 [ 73.338869][ T5099] syscall_exit_to_user_mode+0x273/0x370 [ 73.344553][ T5099] do_syscall_64+0x102/0x240 [ 73.349180][ T5099] ? clear_bhb_loop+0x35/0x90 [ 73.353891][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.359800][ T5099] RIP: 0033:0x7f6e6478d8fa [ 73.364238][ T5099] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.383867][ T5099] RSP: 002b:00007fff46a5a958 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 73.392296][ T5099] RAX: ffffffffffffffea RBX: 00007fff46a5a970 RCX: 00007f6e6478d8fa [ 73.400546][ T5099] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007fff46a5a970 [ 73.408529][ T5099] RBP: 0000000000000004 R08: 00007fff46a5a9b0 R09: 0000000000009e47 [ 73.416513][ T5099] R10: 0000000000000404 R11: 0000000000000282 R12: 0000000000000404 [ 73.424577][ T5099] R13: 00007fff46a5a9b0 R14: 0000000000000003 R15: 0000000000010000 [ 73.432571][ T5099] [ 73.435593][ T5099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.442877][ T5099] CPU: 1 PID: 5099 Comm: syz-executor168 Not tainted 6.9.0-rc6-next-20240501-syzkaller #0 [ 73.452781][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 73.462841][ T5099] Call Trace: [ 73.466167][ T5099] [ 73.469119][ T5099] dump_stack_lvl+0x241/0x360 [ 73.473816][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.479037][ T5099] ? __pfx__printk+0x10/0x10 [ 73.483668][ T5099] ? vscnprintf+0x5d/0x90 [ 73.488037][ T5099] panic+0x349/0x860 [ 73.491966][ T5099] ? __warn+0x172/0x4e0 [ 73.496137][ T5099] ? __pfx_panic+0x10/0x10 [ 73.500583][ T5099] __warn+0x346/0x4e0 [ 73.504588][ T5099] ? invalidate_bh_lru+0x102/0x1b0 [ 73.509713][ T5099] report_bug+0x2b3/0x500 [ 73.514057][ T5099] ? invalidate_bh_lru+0x102/0x1b0 [ 73.519182][ T5099] handle_bug+0x3e/0x70 [ 73.523374][ T5099] exc_invalid_op+0x1a/0x50 [ 73.527904][ T5099] asm_exc_invalid_op+0x1a/0x20 [ 73.532769][ T5099] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 73.538499][ T5099] Code: a4 50 dd ff f0 ff 0b eb 25 e8 ca 9f 77 ff 41 80 3c 2e 00 75 2a eb 30 e8 bc 9f 77 ff 90 48 c7 c7 c0 f8 d8 8b e8 af ce 39 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 73.558122][ T5099] RSP: 0018:ffffc9000230f908 EFLAGS: 00010046 [ 73.564208][ T5099] RAX: 3c6ef3da2a937600 RBX: ffff8880799464e8 RCX: ffff88807e6c8000 [ 73.572197][ T5099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.580173][ T5099] RBP: 0000000000000000 R08: ffffffff81584682 R09: 1ffff110172a519a [ 73.588151][ T5099] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffff8880b9539540 [ 73.596128][ T5099] R13: 0000000000000000 R14: 1ffff110172a72a8 R15: ffff8880b9539540 [ 73.604119][ T5099] ? __warn_printk+0x292/0x360 [ 73.608909][ T5099] ? invalidate_bh_lru+0x101/0x1b0 [ 73.614037][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.619506][ T5099] smp_call_function_many_cond+0x15fe/0x2a00 [ 73.625505][ T5099] ? __pfx_has_bh_in_lru+0x10/0x10 [ 73.630635][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.636116][ T5099] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 73.642467][ T5099] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 73.647936][ T5099] ? __pfx_has_bh_in_lru+0x10/0x10 [ 73.653055][ T5099] on_each_cpu_cond_mask+0x3f/0x80 [ 73.658184][ T5099] blkdev_flush_mapping+0xfb/0x270 [ 73.663309][ T5099] ? bdev_release+0x458/0x6f0 [ 73.668002][ T5099] bdev_release+0x462/0x6f0 [ 73.672521][ T5099] blkdev_release+0x15/0x20 [ 73.677034][ T5099] ? __pfx_blkdev_release+0x10/0x10 [ 73.682286][ T5099] __fput+0x406/0x8b0 [ 73.686292][ T5099] task_work_run+0x24f/0x310 [ 73.690899][ T5099] ? __pfx_task_work_run+0x10/0x10 [ 73.696053][ T5099] ? lockdep_hardirqs_on+0x99/0x150 [ 73.701268][ T5099] ptrace_notify+0x2d2/0x380 [ 73.705884][ T5099] ? kfree+0x149/0x350 [ 73.709998][ T5099] ? __pfx_ptrace_notify+0x10/0x10 [ 73.715142][ T5099] ? __se_sys_mount+0x37c/0x3c0 [ 73.720048][ T5099] ? __pfx___se_sys_mount+0x10/0x10 [ 73.725260][ T5099] syscall_exit_work+0xc6/0x190 [ 73.730128][ T5099] syscall_exit_to_user_mode+0x273/0x370 [ 73.735786][ T5099] do_syscall_64+0x102/0x240 [ 73.740408][ T5099] ? clear_bhb_loop+0x35/0x90 [ 73.745102][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.751039][ T5099] RIP: 0033:0x7f6e6478d8fa [ 73.755463][ T5099] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.775079][ T5099] RSP: 002b:00007fff46a5a958 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 73.783514][ T5099] RAX: ffffffffffffffea RBX: 00007fff46a5a970 RCX: 00007f6e6478d8fa [ 73.791495][ T5099] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007fff46a5a970 [ 73.799477][ T5099] RBP: 0000000000000004 R08: 00007fff46a5a9b0 R09: 0000000000009e47 [ 73.807467][ T5099] R10: 0000000000000404 R11: 0000000000000282 R12: 0000000000000404 [ 73.815449][ T5099] R13: 00007fff46a5a9b0 R14: 0000000000000003 R15: 0000000000010000 [ 73.823453][ T5099] [ 73.826772][ T5099] Kernel Offset: disabled [ 73.831152][ T5099] Rebooting in 86400 seconds..