./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2540185579 <...> Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. execve("./syz-executor2540185579", ["./syz-executor2540185579"], 0x7ffe1ce15510 /* 10 vars */) = 0 brk(NULL) = 0x555556129000 brk(0x555556129d40) = 0x555556129d40 arch_prctl(ARCH_SET_FS, 0x5555561293c0) = 0 set_tid_address(0x555556129690) = 5828 set_robust_list(0x5555561296a0, 24) = 0 rseq(0x555556129ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2540185579", 4096) = 28 getrandom("\x25\xa8\x3b\xd0\x22\x53\x89\x5e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556129d40 brk(0x55555614ad40) = 0x55555614ad40 brk(0x55555614b000) = 0x55555614b000 mprotect(0x7f8bbcf19000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.hrJanF", 0700) = 0 chmod("./syzkaller.hrJanF", 0777) = 0 chdir("./syzkaller.hrJanF") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556129690) = 5829 ./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x5555561296a0, 24) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] getppid() = 0 [pid 5829] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5829] unshare(CLONE_NEWNS) = 0 [pid 5829] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5829] unshare(CLONE_NEWIPC) = 0 [pid 5829] unshare(CLONE_NEWCGROUP) = 0 [pid 5829] unshare(CLONE_NEWUTS) = 0 [pid 5829] unshare(CLONE_SYSVSEM) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "16777216", 8) = 8 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "536870912", 9) = 9 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "8192", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5829] close(3) = 0 [pid 5829] getpid() = 1 [pid 5829] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[3]}, 88) = 3 [pid 5833] rseq(0x7f8bbce4cfe0, 0x20, 0, 0x53053053 [pid 5832] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... rseq resumed>) = 0 [pid 5832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] set_robust_list(0x7f8bbce4c9a0, 24 [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5832] <... futex resumed>) = 0 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8bb4a00000 [pid 5833] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5833] munmap(0x7f8bb4a00000, 138412032) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5833] close(3) = 0 [pid 5833] close(4) = 0 [pid 5833] mkdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", 0777) = 0 [pid 5833] mount("/dev/loop0", "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", "exfat", MS_NOSUID|MS_NOEXEC|MS_POSIXACL|MS_RELATIME|MS_I_VERSION, "") = 0 [pid 5833] openat(AT_FDCWD, "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", O_RDONLY|O_DIRECTORY) = 3 [pid 5833] chdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b") = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 61.797243][ T5833] loop0: detected capacity change from 0 to 256 [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... futex resumed>) = 0 [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 0 [pid 5832] <... futex resumed>) = 1 [pid 5833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 004 [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... open resumed>) = 4 [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5833] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... mount resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5833] open("./bus", O_RDONLY|O_LARGEFILE|O_NOFOLLOW|FASYNC [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... open resumed>) = 5 [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... futex resumed>) = 0 [pid 5833] ioctl(5, LOOP_SET_STATUS64, {lo_offset=0x2, lo_number=0, lo_flags=0, lo_file_name="\xef\x35\x9f\x41\x3b\xb9\x38\x52\xf7\xd6\xa4\xae\x6d\xdd\xfb\xd1\xce\x5d\x29\xc2\xee\x5e\x5c\x9d", ...} [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... ioctl resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f8bbcf1f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 0 [pid 5833] openat(AT_FDCWD, "memory.events.local", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5832] <... futex resumed>) = 1 [pid 5832] futex(0x7f8bbcf1f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... openat resumed>) = -1 EROFS (Read-only file system) [pid 5833] futex(0x7f8bbcf1f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5833] futex(0x7f8bbcf1f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] close(3) = 0 [pid 5832] close(4) = 0 [pid 5832] close(5) = 0 [pid 5832] close(6) = -1 EBADF (Bad file descriptor) [pid 5832] close(7) = -1 EBADF (Bad file descriptor) [ 61.958420][ T5833] loop0: detected capacity change from 256 to 255 [ 61.979468][ T5833] exFAT-fs (loop0): error, in sector 160, dentry 2 should be unused, but 0xff [ 61.988677][ T5833] exFAT-fs (loop0): Filesystem has been set read-only [pid 5832] close(8) = -1 EBADF (Bad file descriptor) [pid 5832] close(9) = -1 EBADF (Bad file descriptor) [pid 5832] close(10) = -1 EBADF (Bad file descriptor) [pid 5832] close(11) = -1 EBADF (Bad file descriptor) [pid 5832] close(12) = -1 EBADF (Bad file descriptor) [pid 5832] close(13) = -1 EBADF (Bad file descriptor) [pid 5832] close(14) = -1 EBADF (Bad file descriptor) [pid 5832] close(15) = -1 EBADF (Bad file descriptor) [pid 5832] close(16) = -1 EBADF (Bad file descriptor) [pid 5832] close(17) = -1 EBADF (Bad file descriptor) [pid 5832] close(18) = -1 EBADF (Bad file descriptor) [pid 5832] close(19) = -1 EBADF (Bad file descriptor) [pid 5832] close(20) = -1 EBADF (Bad file descriptor) [pid 5832] close(21) = -1 EBADF (Bad file descriptor) [pid 5832] close(22) = -1 EBADF (Bad file descriptor) [pid 5832] close(23) = -1 EBADF (Bad file descriptor) [pid 5832] close(24) = -1 EBADF (Bad file descriptor) [pid 5832] close(25) = -1 EBADF (Bad file descriptor) [pid 5832] close(26) = -1 EBADF (Bad file descriptor) [pid 5832] close(27) = -1 EBADF (Bad file descriptor) [pid 5832] close(28) = -1 EBADF (Bad file descriptor) [pid 5832] close(29) = -1 EBADF (Bad file descriptor) [pid 5832] exit_group(0) = ? [pid 5833] <... futex resumed>) = ? [pid 5833] +++ exited with 0 +++ [pid 5832] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555612a730 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./0/binderfs") = 0 [pid 5829] umount2("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 5829] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 5829] openat(AT_FDCWD, "\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555556132770 /* 3 entries */, 32768) = 88 [pid 5829] umount2("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b\x2f\x6d\x65\x6d\x6f\x72\x79\x2e\x65\x76\x65\x6e\x74\x73\x2e\x6c\x6f\x63\x61\x6c", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b\x2f\x6d\x65\x6d\x6f\x72\x79\x2e\x65\x76\x65\x6e\x74\x73\x2e\x6c\x6f\x63\x61\x6c", {st_mode=S_IFREG|0700, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b\x2f\x6d\x65\x6d\x6f\x72\x79\x2e\x65\x76\x65\x6e\x74\x73\x2e\x6c\x6f\x63\x61\x6c") = -1 EROFS (Read-only file system) [pid 5829] getdents64(4, 0x555556132770, 32768) = -1 EIO (Input/output error) [ 62.466186][ T5829] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x0000ffff) [pid 5829] close(4) = 0 [pid 5829] rmdir("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b") = -1 EBUSY (Device or resource busy) [pid 5829] umount2("\x2e\x2f\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 5829] exit_group(1) = ? [ 62.519381][ T5829] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x0000ffff) [ 62.582985][ C1] ------------[ cut here ]------------ [ 62.588498][ C1] VFS: brelse: Trying to free free buffer [ 62.594341][ C1] WARNING: CPU: 1 PID: 909 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0 [ 62.603124][ C1] Modules linked in: [ 62.607032][ C1] CPU: 1 UID: 0 PID: 909 Comm: kworker/1:2 Not tainted 6.12.0-next-20241122-syzkaller #0 [ 62.616827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 62.626883][ C1] Workqueue: events free_ipc [ 62.631494][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 62.637209][ C1] Code: 44 ee da ff f0 ff 0b eb 25 e8 ba fa 6f ff 41 80 3c 2e 00 75 2a eb 30 e8 ac fa 6f ff 90 48 c7 c7 20 e1 18 8c e8 2f 99 30 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 62.656808][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046 [ 62.662869][ C1] RAX: 360e115da576fd00 RBX: ffff88807cb8ba58 RCX: ffff888025a59e00 [ 62.670876][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.678859][ C1] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170e519a [ 62.686831][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838 [ 62.694796][ C1] R13: 0000000000000000 R14: 1ffff110170e7307 R15: ffff8880b8739838 [ 62.703256][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 62.712214][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.718819][ C1] CR2: 00007ffda2c3cd6c CR3: 000000000e736000 CR4: 00000000003526f0 [ 62.726793][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.734756][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.742723][ C1] Call Trace: [ 62.746004][ C1] [ 62.748849][ C1] ? __warn+0x168/0x4e0 [ 62.753004][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 62.758115][ C1] ? report_bug+0x2b3/0x500 [ 62.762622][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 62.767730][ C1] ? handle_bug+0x60/0x90 [ 62.772055][ C1] ? exc_invalid_op+0x1a/0x50 [ 62.776724][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 62.781742][ C1] ? __warn_printk+0x292/0x360 [ 62.786500][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 62.791615][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 62.797108][ C1] __flush_smp_call_function_queue+0x3fc/0x1690 [ 62.803364][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 62.808834][ C1] __sysvec_call_function_single+0xb8/0x430 [ 62.814722][ C1] sysvec_call_function_single+0x9e/0xc0 [ 62.820355][ C1] [ 62.823280][ C1] [ 62.826202][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 62.832178][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 62.838679][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 59 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 71 a2 f5 65 8b 05 a4 c4 38 74 85 c0 74 43 48 c7 04 24 0e 36 [ 62.858278][ C1] RSP: 0018:ffffc90004017660 EFLAGS: 00000206 [ 62.864339][ C1] RAX: 360e115da576fd00 RBX: 1ffff92000802ed0 RCX: ffffffff817b230a [ 62.872307][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9640 RDI: 0000000000000001 [ 62.880270][ C1] RBP: ffffc900040176f0 R08: ffffffff9428a897 R09: 1ffffffff2851512 [ 62.888234][ C1] R10: dffffc0000000000 R11: fffffbfff2851513 R12: dffffc0000000000 [ 62.896215][ C1] R13: 1ffff92000802ecc R14: ffffc90004017680 R15: 0000000000000246 [ 62.904212][ C1] ? mark_lock+0x9a/0x360 [ 62.908564][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 62.914916][ C1] debug_object_active_state+0x239/0x360 [ 62.920548][ C1] ? __pfx_debug_object_active_state+0x10/0x10 [ 62.926704][ C1] ? __pfx___d_free+0x10/0x10 [ 62.931380][ C1] call_rcu+0xb5/0xa70 [ 62.935448][ C1] ? __dentry_kill+0x482/0x630 [ 62.940234][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 62.945256][ C1] ? __pfx_lock_release+0x10/0x10 [ 62.950278][ C1] ? __pfx_call_rcu+0x10/0x10 [ 62.954975][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 62.960169][ C1] ? _raw_spin_unlock+0x28/0x50 [ 62.965019][ C1] __dentry_kill+0x497/0x630 [ 62.969613][ C1] ? proc_invalidate_siblings_dcache+0x2b/0x6e0 [ 62.975850][ C1] ? dput+0x37/0x2b0 [ 62.979744][ C1] dput+0x19f/0x2b0 [ 62.983571][ C1] proc_invalidate_siblings_dcache+0x431/0x6e0 [ 62.989726][ C1] drop_sysctl_table+0x1e1/0x570 [ 62.994673][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 62.999712][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 63.005205][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 63.010255][ C1] ? __pfx___might_resched+0x10/0x10 [ 63.015548][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.020929][ C1] unregister_sysctl_table+0x41/0x60 [ 63.026215][ C1] retire_ipc_sysctls+0x5e/0x80 [ 63.031085][ C1] free_ipc+0x13d/0x290 [ 63.035238][ C1] ? process_scheduled_works+0x976/0x1850 [ 63.040956][ C1] process_scheduled_works+0xa63/0x1850 [ 63.046514][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 63.052495][ C1] ? assign_work+0x364/0x3d0 [ 63.057082][ C1] worker_thread+0x870/0xd30 [ 63.061672][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.067570][ C1] ? __kthread_parkme+0x169/0x1d0 [ 63.072587][ C1] ? __pfx_worker_thread+0x10/0x10 [ 63.077695][ C1] kthread+0x2f0/0x390 [ 63.081758][ C1] ? __pfx_worker_thread+0x10/0x10 [ 63.086869][ C1] ? __pfx_kthread+0x10/0x10 [ 63.091454][ C1] ret_from_fork+0x4b/0x80 [ 63.095859][ C1] ? __pfx_kthread+0x10/0x10 [ 63.100449][ C1] ret_from_fork_asm+0x1a/0x30 [ 63.105220][ C1] [ 63.108242][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.115517][ C1] CPU: 1 UID: 0 PID: 909 Comm: kworker/1:2 Not tainted 6.12.0-next-20241122-syzkaller #0 [ 63.125309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 63.135356][ C1] Workqueue: events free_ipc [ 63.139950][ C1] Call Trace: [ 63.143221][ C1] [ 63.146058][ C1] dump_stack_lvl+0x241/0x360 [ 63.150731][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.155922][ C1] ? __pfx__printk+0x10/0x10 [ 63.160501][ C1] ? _printk+0xd5/0x120 [ 63.164646][ C1] ? __init_begin+0x41000/0x41000 [ 63.169685][ C1] ? vscnprintf+0x5d/0x90 [ 63.174009][ C1] panic+0x349/0x880 [ 63.177924][ C1] ? __warn+0x177/0x4e0 [ 63.182158][ C1] ? __pfx_panic+0x10/0x10 [ 63.186564][ C1] ? show_trace_log_lvl+0x3b2/0x410 [ 63.191766][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 63.196699][ C1] __warn+0x34b/0x4e0 [ 63.200682][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 63.205788][ C1] report_bug+0x2b3/0x500 [ 63.210114][ C1] ? invalidate_bh_lru+0x102/0x1b0 [ 63.215219][ C1] handle_bug+0x60/0x90 [ 63.219364][ C1] exc_invalid_op+0x1a/0x50 [ 63.223858][ C1] asm_exc_invalid_op+0x1a/0x20 [ 63.228699][ C1] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 63.234423][ C1] Code: 44 ee da ff f0 ff 0b eb 25 e8 ba fa 6f ff 41 80 3c 2e 00 75 2a eb 30 e8 ac fa 6f ff 90 48 c7 c7 20 e1 18 8c e8 2f 99 30 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 63.254023][ C1] RSP: 0018:ffffc90000a18f30 EFLAGS: 00010046 [ 63.260092][ C1] RAX: 360e115da576fd00 RBX: ffff88807cb8ba58 RCX: ffff888025a59e00 [ 63.268056][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.276014][ C1] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170e519a [ 63.283975][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b8739838 [ 63.291938][ C1] R13: 0000000000000000 R14: 1ffff110170e7307 R15: ffff8880b8739838 [ 63.299906][ C1] ? __warn_printk+0x292/0x360 [ 63.304684][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 63.310140][ C1] __flush_smp_call_function_queue+0x3fc/0x1690 [ 63.316389][ C1] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 63.321849][ C1] __sysvec_call_function_single+0xb8/0x430 [ 63.327736][ C1] sysvec_call_function_single+0x9e/0xc0 [ 63.333367][ C1] [ 63.336296][ C1] [ 63.339219][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 63.345197][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 63.351709][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 59 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 71 a2 f5 65 8b 05 a4 c4 38 74 85 c0 74 43 48 c7 04 24 0e 36 [ 63.371304][ C1] RSP: 0018:ffffc90004017660 EFLAGS: 00000206 [ 63.377365][ C1] RAX: 360e115da576fd00 RBX: 1ffff92000802ed0 RCX: ffffffff817b230a [ 63.385340][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9640 RDI: 0000000000000001 [ 63.393304][ C1] RBP: ffffc900040176f0 R08: ffffffff9428a897 R09: 1ffffffff2851512 [ 63.401264][ C1] R10: dffffc0000000000 R11: fffffbfff2851513 R12: dffffc0000000000 [ 63.409230][ C1] R13: 1ffff92000802ecc R14: ffffc90004017680 R15: 0000000000000246 [ 63.417195][ C1] ? mark_lock+0x9a/0x360 [ 63.421526][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 63.427857][ C1] debug_object_active_state+0x239/0x360 [ 63.433484][ C1] ? __pfx_debug_object_active_state+0x10/0x10 [ 63.439633][ C1] ? __pfx___d_free+0x10/0x10 [ 63.444300][ C1] call_rcu+0xb5/0xa70 [ 63.448363][ C1] ? __dentry_kill+0x482/0x630 [ 63.453119][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 63.458142][ C1] ? __pfx_lock_release+0x10/0x10 [ 63.463160][ C1] ? __pfx_call_rcu+0x10/0x10 [ 63.467846][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.473043][ C1] ? _raw_spin_unlock+0x28/0x50 [ 63.478070][ C1] __dentry_kill+0x497/0x630 [ 63.482659][ C1] ? proc_invalidate_siblings_dcache+0x2b/0x6e0 [ 63.488891][ C1] ? dput+0x37/0x2b0 [ 63.492781][ C1] dput+0x19f/0x2b0 [ 63.496586][ C1] proc_invalidate_siblings_dcache+0x431/0x6e0 [ 63.502848][ C1] drop_sysctl_table+0x1e1/0x570 [ 63.507802][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 63.512854][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 63.518322][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 63.523361][ C1] ? __pfx___might_resched+0x10/0x10 [ 63.528654][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.534035][ C1] unregister_sysctl_table+0x41/0x60 [ 63.539319][ C1] retire_ipc_sysctls+0x5e/0x80 [ 63.544162][ C1] free_ipc+0x13d/0x290 [ 63.548311][ C1] ? process_scheduled_works+0x976/0x1850 [ 63.554026][ C1] process_scheduled_works+0xa63/0x1850 [ 63.559580][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 63.565585][ C1] ? assign_work+0x364/0x3d0 [ 63.570199][ C1] worker_thread+0x870/0xd30 [ 63.574802][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.580701][ C1] ? __kthread_parkme+0x169/0x1d0 [ 63.585723][ C1] ? __pfx_worker_thread+0x10/0x10 [ 63.590837][ C1] kthread+0x2f0/0x390 [ 63.594988][ C1] ? __pfx_worker_thread+0x10/0x10 [ 63.600326][ C1] ? __pfx_kthread+0x10/0x10 [ 63.605124][ C1] ret_from_fork+0x4b/0x80 [ 63.609546][ C1] ? __pfx_kthread+0x10/0x10 [ 63.614138][ C1] ret_from_fork_asm+0x1a/0x30 [ 63.618935][ C1] [ 63.622207][ C1] Kernel Offset: disabled [ 63.626545][ C1] Rebooting in 86400 seconds..