./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor269242530 <...> Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. execve("./syz-executor269242530", ["./syz-executor269242530"], 0x7ffed31f87b0 /* 10 vars */) = 0 brk(NULL) = 0x55555597a000 brk(0x55555597ae00) = 0x55555597ae00 arch_prctl(ARCH_SET_FS, 0x55555597a480) = 0 set_tid_address(0x55555597a750) = 5044 set_robust_list(0x55555597a760, 24) = 0 rseq(0x55555597ada0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor269242530", 4096) = 27 getrandom("\xac\x6a\x91\x4a\x2f\xcc\x8f\x94", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555597ae00 brk(0x55555599be00) = 0x55555599be00 brk(0x55555599c000) = 0x55555599c000 mprotect(0x7f5552515000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f555245bbf0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5552463b80}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f555245bbf0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5552463b80}, NULL, 8) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f554a052000 [ 87.872185][ T5044] syz-executor269[5044]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f554a052000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 88.164699][ T5044] loop0: detected capacity change from 0 to 32768 [ 88.176614][ T5044] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 88.184973][ T5044] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 88.195760][ T5044] gfs2: fsid=loop0.0: journal 0 mapped with 3 extents in 0ms [ 88.204582][ T782] gfs2: fsid=loop0.0: jid=0, already locked for use [ 88.211250][ T782] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 88.264939][ T782] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 53ms [ 88.272430][ T782] gfs2: fsid=loop0.0: jid=0: Done [ 88.277727][ T5044] gfs2: fsid=loop0.0: first mount done, others may mount mount("/dev/loop0", "./file0", "gfs2", 0, "discard,localcaching,barrier,nosuiddir,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 88.460272][ T5044] ------------[ cut here ]------------ [ 88.465790][ T5044] WARNING: CPU: 1 PID: 5044 at fs/gfs2/rgrp.c:2628 gfs2_check_blk_type+0x2ca/0x340 [ 88.475231][ T5044] Modules linked in: [ 88.479221][ T5044] CPU: 1 PID: 5044 Comm: syz-executor269 Not tainted 6.5.0-next-20230830-syzkaller #0 [ 88.488874][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 88.499004][ T5044] RIP: 0010:gfs2_check_blk_type+0x2ca/0x340 [ 88.504970][ T5044] Code: 4c 89 f7 e8 88 60 f9 ff eb aa 89 44 24 04 89 4c 24 08 e8 79 ed 34 fe 48 63 44 24 04 8b 4c 24 08 e9 ae fe ff ff e8 86 2c df fd <0f> 0b e9 76 ff ff ff bb ea ff ff ff e9 79 ff ff ff e8 50 ed 34 fe [ 88.524697][ T5044] RSP: 0018:ffffc900039cf990 EFLAGS: 00010293 [ 88.530836][ T5044] RAX: 0000000000000000 RBX: 00000000fffffff9 RCX: 0000000000000000 [ 88.538880][ T5044] RDX: ffff88807e1f5940 RSI: ffffffff83a8b2ea RDI: 0000000000000005 [ 88.547103][ T5044] RBP: ffffc900039cfa90 R08: 0000000000000005 R09: 0000000000000000 [ 88.555126][ T5044] R10: 00000000fffffff9 R11: 0000000000000000 R12: 1ffff92000739f34 [ 88.563674][ T5044] R13: ffff888015680000 R14: ffffc900039cf9e0 R15: 0000000000000012 [ 88.571712][ T5044] FS: 000055555597a480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 88.580714][ T5044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.587345][ T5044] CR2: 0000000002487398 CR3: 000000007bf00000 CR4: 00000000003506e0 [ 88.595353][ T5044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.603378][ T5044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.611414][ T5044] Call Trace: [ 88.614703][ T5044] [ 88.617685][ T5044] ? show_regs+0x8f/0xa0 [ 88.622004][ T5044] ? __warn+0xe6/0x380 [ 88.626092][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 88.631448][ T5044] ? report_bug+0x3bc/0x580 [ 88.636090][ T5044] ? handle_bug+0x3c/0x70 [ 88.640486][ T5044] ? exc_invalid_op+0x17/0x40 [ 88.645194][ T5044] ? asm_exc_invalid_op+0x1a/0x20 [ 88.650277][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 88.655611][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 88.660986][ T5044] ? gfs2_glock_async_wait+0x7f0/0x7f0 [ 88.666525][ T5044] ? gfs2_free_di+0x4a0/0x4a0 [ 88.671224][ T5044] ? gfs2_inode_lookup+0x6ef/0x890 [ 88.676427][ T5044] ? __gfs2_holder_init+0x18b/0x2f0 [ 88.681662][ T5044] gfs2_inode_lookup+0x6ef/0x890 [ 88.686686][ T5044] ? gfs2_create+0x50/0x50 [ 88.691162][ T5044] ? spin_bug+0x1d0/0x1d0 [ 88.695540][ T5044] ? gfs2_lookup_by_inum+0x48/0x100 [ 88.700816][ T5044] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 88.706691][ T5044] ? __stack_depot_save+0x247/0x510 [ 88.711907][ T5044] ? gfs2_get_name+0x400/0x400 [ 88.716736][ T5044] gfs2_lookup_by_inum+0x48/0x100 [ 88.721811][ T5044] gfs2_fh_to_dentry+0x1ac/0x230 [ 88.726812][ T5044] ? __kasan_kmalloc+0xa2/0xb0 [ 88.731719][ T5044] exportfs_decode_fh_raw+0x135/0x780 [ 88.737169][ T5044] ? drop_caches_sysctl_handler+0x190/0x190 [ 88.743112][ T5044] ? reconnect_path+0x9d0/0x9d0 [ 88.748046][ T5044] ? preempt_count_sub+0x150/0x150 [ 88.753217][ T5044] ? drop_caches_sysctl_handler+0x190/0x190 [ 88.759187][ T5044] exportfs_decode_fh+0x3c/0x90 [ 88.764091][ T5044] do_handle_open+0x352/0x5c0 [ 88.768831][ T5044] ? do_sys_name_to_handle+0x520/0x520 [ 88.774355][ T5044] ? rcu_is_watching+0x12/0xb0 [ 88.779187][ T5044] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 88.785213][ T5044] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.790477][ T5044] ? ptrace_notify+0xf4/0x130 [ 88.795191][ T5044] do_syscall_64+0x38/0xb0 [ 88.799676][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.805635][ T5044] RIP: 0033:0x7f555248fb49 [ 88.810112][ T5044] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.829801][ T5044] RSP: 002b:00007ffe12f847f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 88.838388][ T5044] RAX: ffffffffffffffda RBX: 00007ffe12f84810 RCX: 00007f555248fb49 [ 88.846471][ T5044] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 88.854473][ T5044] RBP: 00007ffe12f84818 R08: 0000000000012527 R09: 0000000000000000 [ 88.862506][ T5044] R10: 00007ffe12f846c0 R11: 0000000000000246 R12: 0000000000000000 [ 88.870537][ T5044] R13: 00007ffe12f84a78 R14: 0000000000000001 R15: 0000000000000001 [ 88.878560][ T5044] [ 88.881600][ T5044] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.889153][ T5044] CPU: 1 PID: 5044 Comm: syz-executor269 Not tainted 6.5.0-next-20230830-syzkaller #0 [ 88.898702][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 88.908760][ T5044] Call Trace: [ 88.912040][ T5044] [ 88.914975][ T5044] dump_stack_lvl+0xd9/0x1b0 [ 88.919611][ T5044] panic+0x6a6/0x750 [ 88.923521][ T5044] ? panic_smp_self_stop+0xa0/0xa0 [ 88.928658][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 88.933954][ T5044] check_panic_on_warn+0xab/0xb0 [ 88.938908][ T5044] __warn+0xf2/0x380 [ 88.942819][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 88.948126][ T5044] report_bug+0x3bc/0x580 [ 88.952483][ T5044] handle_bug+0x3c/0x70 [ 88.956648][ T5044] exc_invalid_op+0x17/0x40 [ 88.961187][ T5044] asm_exc_invalid_op+0x1a/0x20 [ 88.966068][ T5044] RIP: 0010:gfs2_check_blk_type+0x2ca/0x340 [ 88.971986][ T5044] Code: 4c 89 f7 e8 88 60 f9 ff eb aa 89 44 24 04 89 4c 24 08 e8 79 ed 34 fe 48 63 44 24 04 8b 4c 24 08 e9 ae fe ff ff e8 86 2c df fd <0f> 0b e9 76 ff ff ff bb ea ff ff ff e9 79 ff ff ff e8 50 ed 34 fe [ 88.991706][ T5044] RSP: 0018:ffffc900039cf990 EFLAGS: 00010293 [ 88.997796][ T5044] RAX: 0000000000000000 RBX: 00000000fffffff9 RCX: 0000000000000000 [ 89.005869][ T5044] RDX: ffff88807e1f5940 RSI: ffffffff83a8b2ea RDI: 0000000000000005 [ 89.013857][ T5044] RBP: ffffc900039cfa90 R08: 0000000000000005 R09: 0000000000000000 [ 89.021853][ T5044] R10: 00000000fffffff9 R11: 0000000000000000 R12: 1ffff92000739f34 [ 89.029840][ T5044] R13: ffff888015680000 R14: ffffc900039cf9e0 R15: 0000000000000012 [ 89.037836][ T5044] ? gfs2_check_blk_type+0x2ca/0x340 [ 89.043161][ T5044] ? gfs2_glock_async_wait+0x7f0/0x7f0 [ 89.048658][ T5044] ? gfs2_free_di+0x4a0/0x4a0 [ 89.053368][ T5044] ? gfs2_inode_lookup+0x6ef/0x890 [ 89.058518][ T5044] ? __gfs2_holder_init+0x18b/0x2f0 [ 89.063736][ T5044] gfs2_inode_lookup+0x6ef/0x890 [ 89.068713][ T5044] ? gfs2_create+0x50/0x50 [ 89.073159][ T5044] ? spin_bug+0x1d0/0x1d0 [ 89.077523][ T5044] ? gfs2_lookup_by_inum+0x48/0x100 [ 89.082757][ T5044] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 89.088597][ T5044] ? __stack_depot_save+0x247/0x510 [ 89.093838][ T5044] ? gfs2_get_name+0x400/0x400 [ 89.098631][ T5044] gfs2_lookup_by_inum+0x48/0x100 [ 89.103695][ T5044] gfs2_fh_to_dentry+0x1ac/0x230 [ 89.108662][ T5044] ? __kasan_kmalloc+0xa2/0xb0 [ 89.113462][ T5044] exportfs_decode_fh_raw+0x135/0x780 [ 89.118890][ T5044] ? drop_caches_sysctl_handler+0x190/0x190 [ 89.124816][ T5044] ? reconnect_path+0x9d0/0x9d0 [ 89.129713][ T5044] ? preempt_count_sub+0x150/0x150 [ 89.134864][ T5044] ? drop_caches_sysctl_handler+0x190/0x190 [ 89.140782][ T5044] exportfs_decode_fh+0x3c/0x90 [ 89.145666][ T5044] do_handle_open+0x352/0x5c0 [ 89.150387][ T5044] ? do_sys_name_to_handle+0x520/0x520 [ 89.155893][ T5044] ? rcu_is_watching+0x12/0xb0 [ 89.160703][ T5044] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 89.166725][ T5044] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.171960][ T5044] ? ptrace_notify+0xf4/0x130 [ 89.176744][ T5044] do_syscall_64+0x38/0xb0 [ 89.181179][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.187087][ T5044] RIP: 0033:0x7f555248fb49 [ 89.191516][ T5044] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.211154][ T5044] RSP: 002b:00007ffe12f847f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 89.219683][ T5044] RAX: ffffffffffffffda RBX: 00007ffe12f84810 RCX: 00007f555248fb49 [ 89.227704][ T5044] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 89.235694][ T5044] RBP: 00007ffe12f84818 R08: 0000000000012527 R09: 0000000000000000 [ 89.243683][ T5044] R10: 00007ffe12f846c0 R11: 0000000000000246 R12: 0000000000000000 [ 89.251677][ T5044] R13: 00007ffe12f84a78 R14: 0000000000000001 R15: 0000000000000001 [ 89.259674][ T5044] [ 89.262908][ T5044] Kernel Offset: disabled [ 89.267243][ T5044] Rebooting in 86400 seconds..