./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2213789191 <...> Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. execve("./syz-executor2213789191", ["./syz-executor2213789191"], 0x7ffd3e3faf60 /* 10 vars */) = 0 brk(NULL) = 0x555556ce2000 brk(0x555556ce2c40) = 0x555556ce2c40 arch_prctl(ARCH_SET_FS, 0x555556ce2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2213789191", 4096) = 28 brk(0x555556d03c40) = 0x555556d03c40 brk(0x555556d04000) = 0x555556d04000 mprotect(0x7f5224359000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f521be8d000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f521be8d000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 53.939951][ T5067] loop0: detected capacity change from 0 to 32768 [ 53.949660][ T5067] ======================================================= [ 53.949660][ T5067] WARNING: The mand mount option has been deprecated and [ 53.949660][ T5067] and is ignored by this kernel. Remove the mand [ 53.949660][ T5067] option from the mount to silence this warning. [ 53.949660][ T5067] ======================================================= [ 53.990300][ T5067] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 53.998584][ T5067] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 54.009950][ T5067] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 54.019271][ T898] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 54.026119][ T898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 54.043603][ T898] kworker/0:2: attempt to access beyond end of device [ 54.043603][ T898] loop0: rw=0, sector=2101736, nr_sectors = 8 limit=32768 [ 54.079397][ T898] gfs2: fsid=syz:syz.0: jid=0: Failed [ 54.085836][ T5067] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 54.103605][ T5067] general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] PREEMPT SMP KASAN [ 54.115328][ T5067] KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] [ 54.123750][ T5067] CPU: 1 PID: 5067 Comm: syz-executor221 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 54.133804][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.143940][ T5067] RIP: 0010:gfs2_evict_inode+0xa26/0x14f0 [ 54.149675][ T5067] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 ba 1f fe bb 8c 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 4c 8d ac 24 e0 00 00 00 0f 85 46 09 00 00 8b 13 45 [ 54.169266][ T5067] RSP: 0018:ffffc90003c2f480 EFLAGS: 00010207 [ 54.175310][ T5067] RAX: 0000000000000011 RBX: 000000000000008c RCX: dffffc0000000000 [ 54.183285][ T5067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.191282][ T5067] RBP: ffffc90003c2f620 R08: ffffffff83bad2f8 R09: ffffed10042ae221 [ 54.199243][ T5067] R10: ffffed10042ae221 R11: 1ffff110042ae220 R12: ffff888021571278 [ 54.207278][ T5067] R13: ffff8880751298e0 R14: ffff88802acd0900 R15: ffff888075129428 [ 54.215234][ T5067] FS: 0000555556ce2300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 54.224146][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.230706][ T5067] CR2: 00007fb13e86c7f0 CR3: 0000000077316000 CR4: 00000000003506e0 [ 54.238668][ T5067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.246625][ T5067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.254592][ T5067] Call Trace: [ 54.257869][ T5067] [ 54.260792][ T5067] ? gfs2_drop_inode+0x240/0x240 [ 54.265711][ T5067] ? _raw_spin_unlock+0x24/0x40 [ 54.270537][ T5067] ? inode_wait_for_writeback+0x242/0x2c0 [ 54.276233][ T5067] ? evict+0x26f/0x620 [ 54.280279][ T5067] ? trace_sb_clear_inode_writeback+0x2b0/0x2b0 [ 54.286496][ T5067] ? evict+0x2a4/0x620 [ 54.290555][ T5067] ? do_raw_spin_unlock+0x134/0x8a0 [ 54.295744][ T5067] ? gfs2_drop_inode+0x240/0x240 [ 54.300661][ T5067] evict+0x2a4/0x620 [ 54.304534][ T5067] gfs2_jindex_free+0x3b9/0x470 [ 54.309372][ T5067] ? gfs2_setbit+0x600/0x600 [ 54.313964][ T5067] ? gfs2_glock_dq_uninit+0xd0/0xe0 [ 54.319161][ T5067] init_journal+0xec3/0x22c0 [ 54.323747][ T5067] ? vsnprintf+0x1cb0/0x1cb0 [ 54.328332][ T5067] ? init_inodes+0xdc/0x340 [ 54.332851][ T5067] ? _compound_head+0x130/0x130 [ 54.337710][ T5067] ? ptr_to_hashval+0x70/0x70 [ 54.342381][ T5067] ? init_sb+0xb7b/0x12b0 [ 54.346704][ T5067] ? snprintf+0xc0/0x110 [ 54.350953][ T5067] ? init_inodes+0xdc/0x340 [ 54.355433][ T5067] ? vscnprintf+0x80/0x80 [ 54.359742][ T5067] init_inodes+0xdc/0x340 [ 54.364059][ T5067] gfs2_fill_super+0x1bb2/0x2700 [ 54.368989][ T5067] ? gfs2_reconfigure+0xce0/0xce0 [ 54.374001][ T5067] ? ptr_to_hashval+0x70/0x70 [ 54.378654][ T5067] ? up_write+0x19a/0x580 [ 54.382988][ T5067] ? init_locking+0xbd/0x220 [ 54.387554][ T5067] ? vscnprintf+0x80/0x80 [ 54.391869][ T5067] ? set_blocksize+0x1ec/0x390 [ 54.396626][ T5067] ? sb_set_blocksize+0x95/0xf0 [ 54.401470][ T5067] get_tree_bdev+0x400/0x620 [ 54.406061][ T5067] ? gfs2_reconfigure+0xce0/0xce0 [ 54.411070][ T5067] gfs2_get_tree+0x50/0x210 [ 54.415550][ T5067] ? bpf_lsm_capable+0x5/0x10 [ 54.420206][ T5067] vfs_get_tree+0x88/0x270 [ 54.424602][ T5067] do_new_mount+0x289/0xad0 [ 54.429080][ T5067] ? do_move_mount_old+0x150/0x150 [ 54.434168][ T5067] ? user_path_at_empty+0x149/0x1a0 [ 54.439360][ T5067] __se_sys_mount+0x2d3/0x3c0 [ 54.444039][ T5067] ? __x64_sys_mount+0xc0/0xc0 [ 54.448791][ T5067] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 54.454754][ T5067] ? __x64_sys_mount+0x1c/0xc0 [ 54.459494][ T5067] do_syscall_64+0x3d/0xb0 [ 54.463900][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.469778][ T5067] RIP: 0033:0x7f52242daa9a [ 54.474172][ T5067] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.493841][ T5067] RSP: 002b:00007ffecfba02d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 54.502257][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f52242daa9a [ 54.510221][ T5067] RDX: 0000000020013400 RSI: 0000000020000000 RDI: 00007ffecfba02f0 [ 54.518229][ T5067] RBP: 00007ffecfba02f0 R08: 00007ffecfba0330 R09: 0000000000013415 [ 54.526207][ T5067] R10: 0000000000000c40 R11: 0000000000000282 R12: 0000000000000004 [ 54.534182][ T5067] R13: 0000555556ce22c0 R14: 0000000000000c40 R15: 00007ffecfba0330 [ 54.542165][ T5067] [ 54.545174][ T5067] Modules linked in: [ 54.549324][ T5067] ---[ end trace 0000000000000000 ]--- [ 54.554791][ T5067] RIP: 0010:gfs2_evict_inode+0xa26/0x14f0 [ 54.560560][ T5067] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 ba 1f fe bb 8c 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 4c 8d ac 24 e0 00 00 00 0f 85 46 09 00 00 8b 13 45 [ 54.580201][ T5067] RSP: 0018:ffffc90003c2f480 EFLAGS: 00010207 [ 54.586266][ T5067] RAX: 0000000000000011 RBX: 000000000000008c RCX: dffffc0000000000 [ 54.594245][ T5067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.602234][ T5067] RBP: ffffc90003c2f620 R08: ffffffff83bad2f8 R09: ffffed10042ae221 [ 54.610240][ T5067] R10: ffffed10042ae221 R11: 1ffff110042ae220 R12: ffff888021571278 [ 54.618223][ T5067] R13: ffff8880751298e0 R14: ffff88802acd0900 R15: ffff888075129428 [ 54.626232][ T5067] FS: 0000555556ce2300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 54.635209][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.641863][ T5067] CR2: 00007fb13e86c7f0 CR3: 0000000077316000 CR4: 00000000003506e0 [ 54.649852][ T5067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.657807][ T5067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.665799][ T5067] Kernel panic - not syncing: Fatal exception [ 54.672121][ T5067] Kernel Offset: disabled [ 54.676430][ T5067] Rebooting in 86400 seconds..