./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3503252511
<...>
Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts.
execve("./syz-executor3503252511", ["./syz-executor3503252511"], 0x7fffa35ea530 /* 10 vars */) = 0
brk(NULL) = 0x555586e7d000
brk(0x555586e7dd00) = 0x555586e7dd00
arch_prctl(ARCH_SET_FS, 0x555586e7d380) = 0
set_tid_address(0x555586e7d650) = 5817
set_robust_list(0x555586e7d660, 24) = 0
rseq(0x555586e7dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3503252511", 4096) = 28
getrandom("\xd4\x8b\x5e\x22\x39\x16\xce\xf0", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555586e7dd00
brk(0x555586e9ed00) = 0x555586e9ed00
brk(0x555586e9f000) = 0x555586e9f000
mprotect(0x7f18eb186000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.7euvfI", 0700) = 0
chmod("./syzkaller.7euvfI", 0777) = 0
chdir("./syzkaller.7euvfI") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5818 attached
, child_tidptr=0x555586e7d650) = 5818
[pid 5818] set_robust_list(0x555586e7d660, 24) = 0
[pid 5818] chdir("./0") = 0
[pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5818] setpgid(0, 0) = 0
[pid 5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5818] write(3, "1000", 4) = 4
[pid 5818] close(3) = 0
[pid 5818] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5818] write(1, "executing program\n", 18executing program
) = 18
[pid 5818] memfd_create("syzkaller", 0) = 3
[pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18e2c00000
[pid 5818] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072
[pid 5818] munmap(0x7f18e2c00000, 138412032) = 0
[pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5818] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5818] close(3) = 0
[pid 5818] close(4) = 0
[pid 5818] mkdir("./file1", 0777) = 0
[ 64.057609][ T5818] loop0: detected capacity change from 0 to 256
[pid 5818] mount("/dev/loop0", "./file1", "exfat", 0, "") = 0
[pid 5818] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5818] chdir("./file1") = 0
[pid 5818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5818] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = -1 EROFS (Read-only file system)
[pid 5818] exit_group(0) = ?
[pid 5818] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5818, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555586e7e6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 64.106653][ T5818] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d)
[ 64.135238][ T5818] exFAT-fs (loop0): error, in sector 160, dentry 11 should be unused, but 0xc1
[ 64.144555][ T5818] exFAT-fs (loop0): Filesystem has been set read-only
[ 64.181769][ T5817] ------------[ cut here ]------------
[ 64.187331][ T5817] VFS: brelse: Trying to free free buffer
[ 64.193156][ T5817] WARNING: CPU: 0 PID: 5817 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0
[ 64.202020][ T5817] Modules linked in:
[ 64.205921][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor350 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[ 64.217014][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 64.227061][ T5817] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 64.232774][ T5817] Code: 44 f4 da ff f0 ff 0b eb 25 e8 9a 35 73 ff 41 80 3c 2e 00 75 2a eb 30 e8 8c 35 73 ff 90 48 c7 c7 a0 ce 18 8c e8 3f dc 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 64.252369][ T5817] RSP: 0018:ffffc90003f578c8 EFLAGS: 00010046
[ 64.258426][ T5817] RAX: b31b7b3106cff300 RBX: ffff888077ff9230 RCX: ffff88802b7dbc00
[ 64.266392][ T5817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 64.274360][ T5817] RBP: 0000000000000000 R08: ffffffff81601b22 R09: 1ffff110170c519a
[ 64.282330][ T5817] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838
[ 64.290294][ T5817] R13: 0000000000000018 R14: 1ffff110170c730a R15: ffff8880b8639850
[ 64.298268][ T5817] FS: 0000555586e7d380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 64.307190][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 64.313767][ T5817] CR2: 0000555586e866f8 CR3: 000000007aa9a000 CR4: 00000000003526f0
[ 64.321735][ T5817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 64.330135][ T5817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 64.338102][ T5817] Call Trace:
[ 64.341424][ T5817]
[ 64.344348][ T5817] ? __warn+0x165/0x4d0
[ 64.348521][ T5817] ? invalidate_bh_lru+0x102/0x1b0
[ 64.353635][ T5817] ? report_bug+0x2b3/0x500
[ 64.358144][ T5817] ? invalidate_bh_lru+0x102/0x1b0
[ 64.363257][ T5817] ? handle_bug+0x60/0x90
[ 64.367606][ T5817] ? exc_invalid_op+0x1a/0x50
[ 64.372302][ T5817] ? asm_exc_invalid_op+0x1a/0x20
[ 64.377340][ T5817] ? __warn_printk+0x292/0x360
[ 64.382111][ T5817] ? invalidate_bh_lru+0x102/0x1b0
[ 64.387232][ T5817] ? invalidate_bh_lru+0x101/0x1b0
[ 64.392341][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.397796][ T5817] smp_call_function_many_cond+0x1760/0x2c60
[ 64.403780][ T5817] ? __pfx_has_bh_in_lru+0x10/0x10
[ 64.408886][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.414350][ T5817] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 64.420680][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.426130][ T5817] ? __pfx_has_bh_in_lru+0x10/0x10
[ 64.431235][ T5817] on_each_cpu_cond_mask+0x3f/0x80
[ 64.436348][ T5817] blkdev_flush_mapping+0xfe/0x270
[ 64.441470][ T5817] ? bdev_release+0x456/0x700
[ 64.446141][ T5817] bdev_release+0x460/0x700
[ 64.450648][ T5817] blkdev_release+0x15/0x20
[ 64.455144][ T5817] ? __pfx_blkdev_release+0x10/0x10
[ 64.460344][ T5817] __fput+0x23c/0xa50
[ 64.464335][ T5817] task_work_run+0x24f/0x310
[ 64.468926][ T5817] ? __pfx_task_work_run+0x10/0x10
[ 64.474038][ T5817] ? path_umount+0x284/0xf70
[ 64.478623][ T5817] ptrace_notify+0x2d2/0x380
[ 64.483216][ T5817] ? __pfx_ptrace_notify+0x10/0x10
[ 64.488323][ T5817] ? kmem_cache_free+0x195/0x410
[ 64.493260][ T5817] ? __x64_sys_umount+0x123/0x170
[ 64.498293][ T5817] syscall_exit_work+0xc7/0x1d0
[ 64.503144][ T5817] syscall_exit_to_user_mode+0x24a/0x340
[ 64.508780][ T5817] do_syscall_64+0x100/0x230
[ 64.513368][ T5817] ? clear_bhb_loop+0x35/0x90
[ 64.518072][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.523980][ T5817] RIP: 0033:0x7f18eb112347
[ 64.528433][ T5817] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 64.548036][ T5817] RSP: 002b:00007fff53b3ca28 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 64.556450][ T5817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f18eb112347
[ 64.564416][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff53b3cae0
[ 64.572384][ T5817] RBP: 00007fff53b3cae0 R08: 0000000000000000 R09: 0000000000000000
[ 64.580352][ T5817] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff53b3db40
[ 64.588327][ T5817] R13: 0000555586e7e6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 64.596304][ T5817]
[ 64.599336][ T5817] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 64.606630][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor350 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[ 64.617729][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 64.627777][ T5817] Call Trace:
[ 64.631052][ T5817]
[ 64.633985][ T5817] dump_stack_lvl+0x241/0x360
[ 64.638665][ T5817] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.643913][ T5817] ? __pfx__printk+0x10/0x10
[ 64.648500][ T5817] ? _printk+0xd5/0x120
[ 64.652656][ T5817] ? __init_begin+0x41000/0x41000
[ 64.657673][ T5817] ? vscnprintf+0x5d/0x90
[ 64.661997][ T5817] panic+0x349/0x880
[ 64.665885][ T5817] ? __warn+0x174/0x4d0
[ 64.670054][ T5817] ? __pfx_panic+0x10/0x10
[ 64.674476][ T5817] __warn+0x344/0x4d0
[ 64.678451][ T5817] ? invalidate_bh_lru+0x102/0x1b0
[ 64.683559][ T5817] report_bug+0x2b3/0x500
[ 64.687884][ T5817] ? invalidate_bh_lru+0x102/0x1b0
[ 64.692991][ T5817] handle_bug+0x60/0x90
[ 64.697144][ T5817] exc_invalid_op+0x1a/0x50
[ 64.701642][ T5817] asm_exc_invalid_op+0x1a/0x20
[ 64.706489][ T5817] RIP: 0010:invalidate_bh_lru+0x102/0x1b0
[ 64.712203][ T5817] Code: 44 f4 da ff f0 ff 0b eb 25 e8 9a 35 73 ff 41 80 3c 2e 00 75 2a eb 30 e8 8c 35 73 ff 90 48 c7 c7 a0 ce 18 8c e8 3f dc 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
[ 64.731800][ T5817] RSP: 0018:ffffc90003f578c8 EFLAGS: 00010046
[ 64.737861][ T5817] RAX: b31b7b3106cff300 RBX: ffff888077ff9230 RCX: ffff88802b7dbc00
[ 64.745827][ T5817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 64.753791][ T5817] RBP: 0000000000000000 R08: ffffffff81601b22 R09: 1ffff110170c519a
[ 64.761753][ T5817] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838
[ 64.769716][ T5817] R13: 0000000000000018 R14: 1ffff110170c730a R15: ffff8880b8639850
[ 64.777685][ T5817] ? __warn_printk+0x292/0x360
[ 64.782453][ T5817] ? invalidate_bh_lru+0x101/0x1b0
[ 64.787554][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.793009][ T5817] smp_call_function_many_cond+0x1760/0x2c60
[ 64.798987][ T5817] ? __pfx_has_bh_in_lru+0x10/0x10
[ 64.804093][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.809554][ T5817] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 64.815880][ T5817] ? __pfx_invalidate_bh_lru+0x10/0x10
[ 64.821328][ T5817] ? __pfx_has_bh_in_lru+0x10/0x10
[ 64.826432][ T5817] on_each_cpu_cond_mask+0x3f/0x80
[ 64.831537][ T5817] blkdev_flush_mapping+0xfe/0x270
[ 64.836641][ T5817] ? bdev_release+0x456/0x700
[ 64.841313][ T5817] bdev_release+0x460/0x700
[ 64.845813][ T5817] blkdev_release+0x15/0x20
[ 64.850308][ T5817] ? __pfx_blkdev_release+0x10/0x10
[ 64.855504][ T5817] __fput+0x23c/0xa50
[ 64.859489][ T5817] task_work_run+0x24f/0x310
[ 64.864077][ T5817] ? __pfx_task_work_run+0x10/0x10
[ 64.869181][ T5817] ? path_umount+0x284/0xf70
[ 64.873766][ T5817] ptrace_notify+0x2d2/0x380
[ 64.878352][ T5817] ? __pfx_ptrace_notify+0x10/0x10
[ 64.883454][ T5817] ? kmem_cache_free+0x195/0x410
[ 64.888393][ T5817] ? __x64_sys_umount+0x123/0x170
[ 64.893409][ T5817] syscall_exit_work+0xc7/0x1d0
[ 64.898257][ T5817] syscall_exit_to_user_mode+0x24a/0x340
[ 64.903887][ T5817] do_syscall_64+0x100/0x230
[ 64.908496][ T5817] ? clear_bhb_loop+0x35/0x90
[ 64.913626][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.919550][ T5817] RIP: 0033:0x7f18eb112347
[ 64.923977][ T5817] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 64.943586][ T5817] RSP: 002b:00007fff53b3ca28 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 64.952000][ T5817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f18eb112347
[ 64.959968][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff53b3cae0
[ 64.967929][ T5817] RBP: 00007fff53b3cae0 R08: 0000000000000000 R09: 0000000000000000
[ 64.975896][ T5817] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff53b3db40
[ 64.983861][ T5817] R13: 0000555586e7e6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 64.991837][ T5817]
[ 64.995103][ T5817] Kernel Offset: disabled
[ 64.999450][ T5817] Rebooting in 86400 seconds..