./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3251428612 <...> forked to background, child pid 4640 no interfaces have a carrier [ 28.270107][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.279439][ T4641] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. execve("./syz-executor3251428612", ["./syz-executor3251428612"], 0x7ffdad6db250 /* 10 vars */) = 0 brk(NULL) = 0x555556c8c000 brk(0x555556c8cc40) = 0x555556c8cc40 arch_prctl(ARCH_SET_FS, 0x555556c8c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3251428612", 4096) = 28 brk(0x555556cadc40) = 0x555556cadc40 brk(0x555556cae000) = 0x555556cae000 mprotect(0x7f4c99ec4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556c8c5d0) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] memfd_create("syzkaller", 0) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4c919d2000 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5062] munmap(0x7f4c919d2000, 16777216) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file1", 0777) = 0 syzkaller login: [ 56.205867][ T5062] loop0: detected capacity change from 0 to 32768 [ 56.218925][ T5062] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 56.227278][ T5062] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 56.250706][ T5062] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 56.259889][ T893] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 56.266857][ T893] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 56.327611][ T893] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 60ms [ 56.335397][ T893] gfs2: fsid=syz:syz.0: jid=0: Done [ 56.340927][ T5062] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5062] mount("/dev/loop0", "./file1", "gfs2", MS_SYNCHRONOUS|MS_SILENT|MS_LAZYTIME, "") = 0 [pid 5062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file1") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [ 56.606004][ T5062] ------------[ cut here ]------------ [ 56.611748][ T5062] WARNING: CPU: 1 PID: 5062 at include/linux/backing-dev.h:253 __folio_mark_dirty+0xba8/0xf50 [ 56.622005][ T5062] Modules linked in: [ 56.625880][ T5062] CPU: 1 PID: 5062 Comm: syz-executor325 Not tainted 6.2.0-rc5-syzkaller-00108-g83abd4d4c4be #0 [ 56.636269][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 56.646307][ T5062] RIP: 0010:__folio_mark_dirty+0xba8/0xf50 [ 56.652095][ T5062] Code: 78 70 48 89 44 24 10 e8 b6 e5 57 08 31 ff 89 c6 89 44 24 10 e8 b9 b7 d2 ff 8b 44 24 10 85 c0 0f 85 62 f9 ff ff e8 f8 ba d2 ff <0f> 0b e9 56 f9 ff ff e8 ec ba d2 ff e8 c7 e6 57 08 31 ff 41 89 c4 [ 56.671695][ T5062] RSP: 0018:ffffc90003ddf3a8 EFLAGS: 00010093 [ 56.677763][ T5062] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 56.685727][ T5062] RDX: ffff88801f51d7c0 RSI: ffffffff81aea6f8 RDI: 0000000000000005 [ 56.693688][ T5062] RBP: ffffea0001fab340 R08: 0000000000000005 R09: 0000000000000000 [ 56.701650][ T5062] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888144cc1d78 [ 56.709611][ T5062] R13: ffffffff8e72f5c0 R14: 0000000000000293 R15: ffff888029390c48 [ 56.717578][ T5062] FS: 0000555556c8c300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 56.726500][ T5062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.733080][ T5062] CR2: 00000000200000c0 CR3: 000000002b2b8000 CR4: 0000000000350ee0 [ 56.741045][ T5062] Call Trace: [ 56.744312][ T5062] [ 56.747239][ T5062] mark_buffer_dirty+0x70d/0xa40 [ 56.752173][ T5062] gfs2_unpin+0x109/0xcf0 [ 56.756516][ T5062] buf_lo_after_commit+0x144/0x210 [ 56.761632][ T5062] ? gfs2_unpin+0xcf0/0xcf0 [ 56.766133][ T5062] gfs2_log_flush+0x140f/0x28a0 [ 56.770990][ T5062] ? gfs2_ail_drain+0x630/0x630 [ 56.775841][ T5062] ? gfs2_log_commit+0xabe/0x10f0 [ 56.780861][ T5062] ? rcu_read_lock_sched_held+0x3e/0x70 [ 56.786411][ T5062] gfs2_trans_end+0x4d0/0x960 [ 56.791086][ T5062] gfs2_create_inode+0x178c/0x3330 [ 56.796202][ T5062] ? gfs2_getattr+0x4b0/0x4b0 [ 56.800874][ T5062] ? d_add+0x3d6/0x780 [ 56.804951][ T5062] ? _raw_spin_unlock+0x28/0x40 [ 56.809798][ T5062] ? d_add+0x3d6/0x780 [ 56.813864][ T5062] ? gfs2_atomic_open+0xb3/0x250 [ 56.818797][ T5062] ? __gfs2_lookup+0x19b/0x280 [ 56.823557][ T5062] ? gfs2_lookupi+0x640/0x640 [ 56.828231][ T5062] ? from_kgid+0x8b/0xd0 [ 56.832472][ T5062] ? from_kuid_munged+0x130/0x130 [ 56.837500][ T5062] gfs2_atomic_open+0xb3/0x250 [ 56.842261][ T5062] ? __gfs2_lookup+0x280/0x280 [ 56.847021][ T5062] lookup_open.isra.0+0xb6c/0x1270 [ 56.852137][ T5062] ? link_path_walk.part.0+0xdf0/0xdf0 [ 56.857613][ T5062] path_openat+0x975/0x2a50 [ 56.862120][ T5062] ? path_lookupat+0x840/0x840 [ 56.866890][ T5062] do_filp_open+0x1ba/0x410 [ 56.871398][ T5062] ? may_open_dev+0xf0/0xf0 [ 56.875902][ T5062] ? find_held_lock+0x2d/0x110 [ 56.880673][ T5062] ? do_raw_spin_lock+0x124/0x2b0 [ 56.885690][ T5062] ? rwlock_bug.part.0+0x90/0x90 [ 56.890628][ T5062] ? _raw_spin_unlock+0x28/0x40 [ 56.895473][ T5062] ? alloc_fd+0x2d8/0x6d0 [ 56.899822][ T5062] do_sys_openat2+0x16d/0x4c0 [ 56.904500][ T5062] ? build_open_flags+0x6f0/0x6f0 [ 56.909524][ T5062] ? ptrace_notify+0xfe/0x140 [ 56.914193][ T5062] ? lock_downgrade+0x6e0/0x6e0 [ 56.919037][ T5062] __x64_sys_open+0x11d/0x1c0 [ 56.923704][ T5062] ? do_sys_open+0x150/0x150 [ 56.928287][ T5062] ? _raw_spin_unlock_irq+0x2e/0x50 [ 56.933479][ T5062] ? ptrace_notify+0xfe/0x140 [ 56.938150][ T5062] do_syscall_64+0x39/0xb0 [ 56.942586][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.948471][ T5062] RIP: 0033:0x7f4c99e1f1e9 [ 56.952874][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.972472][ T5062] RSP: 002b:00007ffc21bc8d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 56.980878][ T5062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c99e1f1e9 [ 56.988838][ T5062] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0 [ 56.996799][ T5062] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000001 [ 57.004757][ T5062] R10: 00007ffc21bc8c00 R11: 0000000000000246 R12: 00007ffc21bc8d60 [ 57.012718][ T5062] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 57.020691][ T5062] [ 57.023699][ T5062] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.030963][ T5062] CPU: 1 PID: 5062 Comm: syz-executor325 Not tainted 6.2.0-rc5-syzkaller-00108-g83abd4d4c4be #0 [ 57.041362][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.051406][ T5062] Call Trace: [ 57.054674][ T5062] [ 57.057594][ T5062] dump_stack_lvl+0xd1/0x138 [ 57.062181][ T5062] panic+0x2cc/0x626 [ 57.066073][ T5062] ? panic_print_sys_info.part.0+0x110/0x110 [ 57.072059][ T5062] ? __folio_mark_dirty+0xba8/0xf50 [ 57.077250][ T5062] check_panic_on_warn.cold+0x19/0x35 [ 57.082620][ T5062] __warn+0xf2/0x1a0 [ 57.086512][ T5062] ? __folio_mark_dirty+0xba8/0xf50 [ 57.091702][ T5062] report_bug+0x1c0/0x210 [ 57.096029][ T5062] handle_bug+0x3c/0x70 [ 57.100183][ T5062] exc_invalid_op+0x18/0x50 [ 57.104683][ T5062] asm_exc_invalid_op+0x1a/0x20 [ 57.109527][ T5062] RIP: 0010:__folio_mark_dirty+0xba8/0xf50 [ 57.115324][ T5062] Code: 78 70 48 89 44 24 10 e8 b6 e5 57 08 31 ff 89 c6 89 44 24 10 e8 b9 b7 d2 ff 8b 44 24 10 85 c0 0f 85 62 f9 ff ff e8 f8 ba d2 ff <0f> 0b e9 56 f9 ff ff e8 ec ba d2 ff e8 c7 e6 57 08 31 ff 41 89 c4 [ 57.134925][ T5062] RSP: 0018:ffffc90003ddf3a8 EFLAGS: 00010093 [ 57.140985][ T5062] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 57.148950][ T5062] RDX: ffff88801f51d7c0 RSI: ffffffff81aea6f8 RDI: 0000000000000005 [ 57.156913][ T5062] RBP: ffffea0001fab340 R08: 0000000000000005 R09: 0000000000000000 [ 57.164872][ T5062] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888144cc1d78 [ 57.172836][ T5062] R13: ffffffff8e72f5c0 R14: 0000000000000293 R15: ffff888029390c48 [ 57.180809][ T5062] ? __folio_mark_dirty+0xba8/0xf50 [ 57.186012][ T5062] ? __folio_mark_dirty+0xba8/0xf50 [ 57.191203][ T5062] mark_buffer_dirty+0x70d/0xa40 [ 57.196135][ T5062] gfs2_unpin+0x109/0xcf0 [ 57.200471][ T5062] buf_lo_after_commit+0x144/0x210 [ 57.205585][ T5062] ? gfs2_unpin+0xcf0/0xcf0 [ 57.210083][ T5062] gfs2_log_flush+0x140f/0x28a0 [ 57.214939][ T5062] ? gfs2_ail_drain+0x630/0x630 [ 57.219790][ T5062] ? gfs2_log_commit+0xabe/0x10f0 [ 57.224812][ T5062] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.230363][ T5062] gfs2_trans_end+0x4d0/0x960 [ 57.235035][ T5062] gfs2_create_inode+0x178c/0x3330 [ 57.240157][ T5062] ? gfs2_getattr+0x4b0/0x4b0 [ 57.244832][ T5062] ? d_add+0x3d6/0x780 [ 57.248909][ T5062] ? _raw_spin_unlock+0x28/0x40 [ 57.253752][ T5062] ? d_add+0x3d6/0x780 [ 57.257931][ T5062] ? gfs2_atomic_open+0xb3/0x250 [ 57.262870][ T5062] ? __gfs2_lookup+0x19b/0x280 [ 57.267631][ T5062] ? gfs2_lookupi+0x640/0x640 [ 57.272305][ T5062] ? from_kgid+0x8b/0xd0 [ 57.276549][ T5062] ? from_kuid_munged+0x130/0x130 [ 57.281573][ T5062] gfs2_atomic_open+0xb3/0x250 [ 57.286330][ T5062] ? __gfs2_lookup+0x280/0x280 [ 57.291088][ T5062] lookup_open.isra.0+0xb6c/0x1270 [ 57.296199][ T5062] ? link_path_walk.part.0+0xdf0/0xdf0 [ 57.301677][ T5062] path_openat+0x975/0x2a50 [ 57.306180][ T5062] ? path_lookupat+0x840/0x840 [ 57.310943][ T5062] do_filp_open+0x1ba/0x410 [ 57.315441][ T5062] ? may_open_dev+0xf0/0xf0 [ 57.319944][ T5062] ? find_held_lock+0x2d/0x110 [ 57.324715][ T5062] ? do_raw_spin_lock+0x124/0x2b0 [ 57.329733][ T5062] ? rwlock_bug.part.0+0x90/0x90 [ 57.334666][ T5062] ? _raw_spin_unlock+0x28/0x40 [ 57.339508][ T5062] ? alloc_fd+0x2d8/0x6d0 [ 57.343836][ T5062] do_sys_openat2+0x16d/0x4c0 [ 57.348504][ T5062] ? build_open_flags+0x6f0/0x6f0 [ 57.353517][ T5062] ? ptrace_notify+0xfe/0x140 [ 57.358186][ T5062] ? lock_downgrade+0x6e0/0x6e0 [ 57.363029][ T5062] __x64_sys_open+0x11d/0x1c0 [ 57.367700][ T5062] ? do_sys_open+0x150/0x150 [ 57.372278][ T5062] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.377468][ T5062] ? ptrace_notify+0xfe/0x140 [ 57.382138][ T5062] do_syscall_64+0x39/0xb0 [ 57.386553][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.392436][ T5062] RIP: 0033:0x7f4c99e1f1e9 [ 57.396856][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.416453][ T5062] RSP: 002b:00007ffc21bc8d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 57.424855][ T5062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c99e1f1e9 [ 57.432816][ T5062] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0 [ 57.440776][ T5062] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000001 [ 57.448736][ T5062] R10: 00007ffc21bc8c00 R11: 0000000000000246 R12: 00007ffc21bc8d60 [ 57.456696][ T5062] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 57.464665][ T5062] [ 57.468754][ T5062] Kernel Offset: disabled [ 57.473212][ T5062] Rebooting in 86400 seconds..