./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor301613382
<...>
DUID 00:04:7c:8f:25:e4:1e:61:d4:15:b8:1c:50:2a:7f:f5:0b:01
forked to background, child pid 3209
[ 29.735399][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.749438][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.171' (ECDSA) to the list of known hosts.
execve("./syz-executor301613382", ["./syz-executor301613382"], 0x7fffd85bc930 /* 10 vars */) = 0
brk(NULL) = 0x5555567a8000
brk(0x5555567a8c40) = 0x5555567a8c40
arch_prctl(ARCH_SET_FS, 0x5555567a8300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor301613382", 4096) = 27
brk(0x5555567c9c40) = 0x5555567c9c40
brk(0x5555567ca000) = 0x5555567ca000
mprotect(0x7efe2a1cb000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567a85d0) = 3632
./strace-static-x86_64: Process 3632 attached
[pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3632] setpgid(0, 0) = 0
[pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3632] write(3, "1000", 4) = 4
[pid 3632] close(3) = 0
[pid 3632] memfd_create("syzkaller", 0) = 3
[pid 3632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efe21cfe000
[pid 3632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 3632] munmap(0x7efe21cfe000, 16777216) = 0
[pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 3632] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 3632] close(3) = 0
[pid 3632] mkdir("./bus", 0777) = 0
syzkaller login: [ 57.705688][ T3632] loop0: detected capacity change from 0 to 32768
[ 57.720511][ T3632] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 57.729130][ T3632] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 57.741688][ T3632] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 57.751484][ T3295] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 57.760157][ T3295] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 57.818193][ T3295] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms
[ 57.828039][ T3295] gfs2: fsid=syz:syz.0: jid=0: Done
[ 57.833820][ T3632] gfs2: fsid=syz:syz.0: first mount done, others may mount
[pid 3632] mount("/dev/loop0", "./bus", "gfs2", MS_SYNCHRONOUS, "localflocks,ignore_local_fs,") = 0
[pid 3632] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 3632] chdir("./bus") = 0
[pid 3632] ioctl(4, LOOP_CLR_FD) = 0
[pid 3632] close(4) = 0
[ 58.001351][ T3632] ------------[ cut here ]------------
[ 58.007076][ T3632] WARNING: CPU: 0 PID: 3632 at include/linux/backing-dev.h:246 folio_account_dirtied+0x4e9/0x6e0
[ 58.017623][ T3632] Modules linked in:
[ 58.021515][ T3632] CPU: 0 PID: 3632 Comm: syz-executor301 Not tainted 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0
[ 58.031960][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 58.042013][ T3632] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0
[ 58.048080][ T3632] Code: 5d 41 5e 41 5f 5d c3 e8 d5 6d d0 ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6c c5 2b 00 e8 b7 6d d0 ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff
[ 58.067855][ T3632] RSP: 0018:ffffc90003b5f1d0 EFLAGS: 00010093
[ 58.073920][ T3632] RAX: ffffffff81ba32e9 RBX: 0000000000000000 RCX: ffff88802338ba80
[ 58.081883][ T3632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 58.089854][ T3632] RBP: ffff888140db2878 R08: ffffffff81ba306d R09: ffffed10281b6510
[ 58.097822][ T3632] R10: ffffed10281b6510 R11: 1ffff110281b650f R12: dffffc0000000000
[ 58.105792][ T3632] R13: ffffea00009efe40 R14: 0000000000000001 R15: 1ffff110281b650f
[ 58.113771][ T3632] FS: 00005555567a8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 58.122744][ T3632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.129326][ T3632] CR2: 00000000200001c8 CR3: 000000002675b000 CR4: 00000000003506f0
[ 58.137294][ T3632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.145266][ T3632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.153322][ T3632] Call Trace:
[ 58.156599][ T3632]
[ 58.159532][ T3632] __folio_mark_dirty+0x125/0x260
[ 58.164557][ T3632] mark_buffer_dirty+0x253/0x550
[ 58.169500][ T3632] gfs2_unpin+0x10b/0xa20
[ 58.173848][ T3632] ? log_pull_tail+0x7e/0x390
[ 58.178535][ T3632] buf_lo_after_commit+0x172/0x1d0
[ 58.183642][ T3632] ? buf_lo_before_commit+0xe0/0xe0
[ 58.188850][ T3632] gfs2_log_flush+0x1179/0x26a0
[ 58.193719][ T3632] ? gfs2_ail_drain+0xdb0/0xdb0
[ 58.198568][ T3632] ? up_read+0x20/0x20
[ 58.202629][ T3632] ? gfs2_uevent+0x160/0x160
[ 58.207228][ T3632] gfs2_trans_end+0x392/0x560
[ 58.212006][ T3632] alloc_dinode+0x411/0x570
[ 58.216514][ T3632] ? munge_mode_uid_gid+0x4b0/0x4b0
[ 58.221713][ T3632] ? do_raw_spin_unlock+0x134/0x8a0
[ 58.226909][ T3632] ? check_and_update_goal+0x277/0x2f0
[ 58.232377][ T3632] ? gfs2_set_inode_flags+0xbf/0x1b0
[ 58.237669][ T3632] gfs2_create_inode+0xfff/0x1c30
[ 58.242794][ T3632] ? __gfs2_lookup+0x260/0x260
[ 58.247582][ T3632] ? gfs2_atomic_open+0xeb/0x230
[ 58.252521][ T3632] ? __gfs2_lookup+0xba/0x260
[ 58.257194][ T3632] ? gfs2_lookupi+0x650/0x650
[ 58.261872][ T3632] ? make_kgid+0x710/0x710
[ 58.266292][ T3632] gfs2_atomic_open+0xeb/0x230
[ 58.271058][ T3632] path_openat+0xf39/0x2df0
[ 58.275564][ T3632] ? gfs2_rename2+0x3000/0x3000
[ 58.280428][ T3632] ? do_filp_open+0x4f0/0x4f0
[ 58.285119][ T3632] do_filp_open+0x264/0x4f0
[ 58.289637][ T3632] ? vfs_tmpfile+0x490/0x490
[ 58.294237][ T3632] ? do_raw_spin_unlock+0x134/0x8a0
[ 58.299441][ T3632] ? _raw_spin_unlock+0x24/0x40
[ 58.304293][ T3632] ? alloc_fd+0x5a7/0x640
[ 58.308639][ T3632] do_sys_openat2+0x124/0x4e0
[ 58.313313][ T3632] ? print_irqtrace_events+0x220/0x220
[ 58.318767][ T3632] ? ptrace_stop+0x74d/0x970
[ 58.323358][ T3632] ? do_sys_open+0x220/0x220
[ 58.327945][ T3632] ? lockdep_hardirqs_on+0x8d/0x130
[ 58.333145][ T3632] ? _raw_spin_unlock_irq+0x2a/0x40
[ 58.338343][ T3632] ? ptrace_notify+0x245/0x340
[ 58.343105][ T3632] __x64_sys_openat+0x243/0x290
[ 58.347962][ T3632] ? __ia32_sys_open+0x270/0x270
[ 58.352903][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 58.358884][ T3632] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 58.364864][ T3632] do_syscall_64+0x3d/0xb0
[ 58.369297][ T3632] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.375271][ T3632] RIP: 0033:0x7efe2a14b209
[ 58.379709][ T3632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.399309][ T3632] RSP: 002b:00007ffc0564a558 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 58.407719][ T3632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe2a14b209
[ 58.415689][ T3632] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c
[ 58.423664][ T3632] RBP: 0000000000000000 R08: 0000000000000002 R09: 00007efe2a1cbec0
[ 58.431628][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0564a580
[ 58.439591][ T3632] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 58.447573][ T3632]
[ 58.450589][ T3632] Kernel panic - not syncing: panic_on_warn set ...
[ 58.457165][ T3632] CPU: 0 PID: 3632 Comm: syz-executor301 Not tainted 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0
[ 58.467575][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 58.477622][ T3632] Call Trace:
[ 58.480895][ T3632]
[ 58.483817][ T3632] dump_stack_lvl+0x1b1/0x28e
[ 58.488710][ T3632] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 58.494164][ T3632] ? panic+0x710/0x710
[ 58.498236][ T3632] ? vscnprintf+0x59/0x80
[ 58.502573][ T3632] ? folio_account_dirtied+0x400/0x6e0
[ 58.508026][ T3632] panic+0x2d6/0x710
[ 58.511922][ T3632] ? __warn+0x131/0x220
[ 58.516076][ T3632] ? memcpy_page_flushcache+0xfc/0xfc
[ 58.521455][ T3632] ? folio_account_dirtied+0x4e9/0x6e0
[ 58.526912][ T3632] __warn+0x1fa/0x220
[ 58.530894][ T3632] ? folio_account_dirtied+0x4e9/0x6e0
[ 58.536346][ T3632] report_bug+0x1b3/0x2d0
[ 58.540677][ T3632] handle_bug+0x3d/0x70
[ 58.544825][ T3632] exc_invalid_op+0x16/0x40
[ 58.549321][ T3632] asm_exc_invalid_op+0x16/0x20
[ 58.554164][ T3632] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0
[ 58.560222][ T3632] Code: 5d 41 5e 41 5f 5d c3 e8 d5 6d d0 ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6c c5 2b 00 e8 b7 6d d0 ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff
[ 58.579824][ T3632] RSP: 0018:ffffc90003b5f1d0 EFLAGS: 00010093
[ 58.585887][ T3632] RAX: ffffffff81ba32e9 RBX: 0000000000000000 RCX: ffff88802338ba80
[ 58.593852][ T3632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 58.601814][ T3632] RBP: ffff888140db2878 R08: ffffffff81ba306d R09: ffffed10281b6510
[ 58.609784][ T3632] R10: ffffed10281b6510 R11: 1ffff110281b650f R12: dffffc0000000000
[ 58.617755][ T3632] R13: ffffea00009efe40 R14: 0000000000000001 R15: 1ffff110281b650f
[ 58.625726][ T3632] ? folio_account_dirtied+0x26d/0x6e0
[ 58.631198][ T3632] ? folio_account_dirtied+0x4e9/0x6e0
[ 58.636661][ T3632] __folio_mark_dirty+0x125/0x260
[ 58.641704][ T3632] mark_buffer_dirty+0x253/0x550
[ 58.646645][ T3632] gfs2_unpin+0x10b/0xa20
[ 58.650966][ T3632] ? log_pull_tail+0x7e/0x390
[ 58.655651][ T3632] buf_lo_after_commit+0x172/0x1d0
[ 58.660761][ T3632] ? buf_lo_before_commit+0xe0/0xe0
[ 58.665955][ T3632] gfs2_log_flush+0x1179/0x26a0
[ 58.670828][ T3632] ? gfs2_ail_drain+0xdb0/0xdb0
[ 58.675677][ T3632] ? up_read+0x20/0x20
[ 58.679736][ T3632] ? gfs2_uevent+0x160/0x160
[ 58.684327][ T3632] gfs2_trans_end+0x392/0x560
[ 58.689009][ T3632] alloc_dinode+0x411/0x570
[ 58.693517][ T3632] ? munge_mode_uid_gid+0x4b0/0x4b0
[ 58.698715][ T3632] ? do_raw_spin_unlock+0x134/0x8a0
[ 58.703908][ T3632] ? check_and_update_goal+0x277/0x2f0
[ 58.709373][ T3632] ? gfs2_set_inode_flags+0xbf/0x1b0
[ 58.714658][ T3632] gfs2_create_inode+0xfff/0x1c30
[ 58.719695][ T3632] ? __gfs2_lookup+0x260/0x260
[ 58.724471][ T3632] ? gfs2_atomic_open+0xeb/0x230
[ 58.729411][ T3632] ? __gfs2_lookup+0xba/0x260
[ 58.734258][ T3632] ? gfs2_lookupi+0x650/0x650
[ 58.738942][ T3632] ? make_kgid+0x710/0x710
[ 58.743447][ T3632] gfs2_atomic_open+0xeb/0x230
[ 58.748224][ T3632] path_openat+0xf39/0x2df0
[ 58.752752][ T3632] ? gfs2_rename2+0x3000/0x3000
[ 58.757628][ T3632] ? do_filp_open+0x4f0/0x4f0
[ 58.762318][ T3632] do_filp_open+0x264/0x4f0
[ 58.766828][ T3632] ? vfs_tmpfile+0x490/0x490
[ 58.771453][ T3632] ? do_raw_spin_unlock+0x134/0x8a0
[ 58.776788][ T3632] ? _raw_spin_unlock+0x24/0x40
[ 58.781641][ T3632] ? alloc_fd+0x5a7/0x640
[ 58.786065][ T3632] do_sys_openat2+0x124/0x4e0
[ 58.790737][ T3632] ? print_irqtrace_events+0x220/0x220
[ 58.796188][ T3632] ? ptrace_stop+0x74d/0x970
[ 58.800775][ T3632] ? do_sys_open+0x220/0x220
[ 58.805366][ T3632] ? lockdep_hardirqs_on+0x8d/0x130
[ 58.810563][ T3632] ? _raw_spin_unlock_irq+0x2a/0x40
[ 58.815770][ T3632] ? ptrace_notify+0x245/0x340
[ 58.820541][ T3632] __x64_sys_openat+0x243/0x290
[ 58.825397][ T3632] ? __ia32_sys_open+0x270/0x270
[ 58.830336][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 58.836317][ T3632] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 58.842297][ T3632] do_syscall_64+0x3d/0xb0
[ 58.846714][ T3632] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.852601][ T3632] RIP: 0033:0x7efe2a14b209
[ 58.857011][ T3632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.876612][ T3632] RSP: 002b:00007ffc0564a558 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 58.885110][ T3632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe2a14b209
[ 58.893159][ T3632] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c
[ 58.901122][ T3632] RBP: 0000000000000000 R08: 0000000000000002 R09: 00007efe2a1cbec0
[ 58.909083][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0564a580
[ 58.917046][ T3632] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 58.925024][ T3632]
[ 58.928194][ T3632] Kernel Offset: disabled
[ 58.932690][ T3632] Rebooting in 86400 seconds..