./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2696173762 <...> Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. execve("./syz-executor2696173762", ["./syz-executor2696173762"], 0x7fff5adcaee0 /* 10 vars */) = 0 brk(NULL) = 0x555556fc2000 brk(0x555556fc2d00) = 0x555556fc2d00 arch_prctl(ARCH_SET_FS, 0x555556fc2380) = 0 set_tid_address(0x555556fc2650) = 5061 set_robust_list(0x555556fc2660, 24) = 0 rseq(0x555556fc2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2696173762", 4096) = 28 getrandom("\xae\xb9\x52\xba\x3b\x5d\xc1\xe3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556fc2d00 brk(0x555556fe3d00) = 0x555556fe3d00 brk(0x555556fe4000) = 0x555556fe4000 mprotect(0x7f337b336000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3372e73000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f3372e73000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 56.175439][ T5061] loop0: detected capacity change from 0 to 32768 [ 56.208759][ T5061] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 56.216728][ T5061] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 56.231535][ T5061] gfs2: fsid=loop0.0: journal 0 mapped with 3 extents in 0ms [ 56.240647][ T4803] gfs2: fsid=loop0.0: jid=0, already locked for use [ 56.247595][ T4803] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 56.284951][ T4803] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 37ms [ 56.292445][ T4803] gfs2: fsid=loop0.0: jid=0: Done [ 56.298014][ T5061] gfs2: fsid=loop0.0: first mount done, others may mount mount("/dev/loop0", "./file0", "gfs2", 0, "discard,localcaching,barrier,nosuiddir,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 56.454656][ T5061] ------------[ cut here ]------------ [ 56.460159][ T5061] WARNING: CPU: 1 PID: 5061 at fs/gfs2/rgrp.c:2630 gfs2_check_blk_type+0x449/0x670 [ 56.469527][ T5061] Modules linked in: [ 56.473455][ T5061] CPU: 1 PID: 5061 Comm: syz-executor269 Not tainted 6.6.0-syzkaller-16201-gb57b17e88bf5 #0 [ 56.483570][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 56.493658][ T5061] RIP: 0010:gfs2_check_blk_type+0x449/0x670 [ 56.499559][ T5061] Code: 85 d2 01 00 00 8b 1b 89 df 44 89 f6 e8 90 5f c4 fd 4c 89 74 24 10 44 39 f3 76 21 e8 01 5e c4 fd 45 31 ed eb 6e e8 f7 5d c4 fd <0f> 0b 41 bf f9 ff ff ff 48 8b 5c 24 18 e9 46 01 00 00 e8 e0 5d c4 [ 56.519239][ T5061] RSP: 0018:ffffc90003be78e0 EFLAGS: 00010293 [ 56.525333][ T5061] RAX: ffffffff83ca63a8 RBX: ffff88801c902028 RCX: ffff88801d138000 [ 56.533344][ T5061] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000013 [ 56.541316][ T5061] RBP: ffffc90003be79f0 R08: ffffffff83ca639e R09: 1ffff1100f219800 [ 56.549323][ T5061] R10: dffffc0000000000 R11: ffffed100f219801 R12: 1ffff11003920406 [ 56.557329][ T5061] R13: ffff88801c902000 R14: 0000000000000012 R15: 0000000000000013 [ 56.565322][ T5061] FS: 0000555556fc2380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 56.574287][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.580854][ T5061] CR2: 000055a634324c80 CR3: 0000000019746000 CR4: 00000000003506f0 [ 56.588847][ T5061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.596848][ T5061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.604865][ T5061] Call Trace: [ 56.608155][ T5061] [ 56.611095][ T5061] ? __warn+0x162/0x4a0 [ 56.615284][ T5061] ? gfs2_check_blk_type+0x449/0x670 [ 56.620556][ T5061] ? report_bug+0x2b3/0x500 [ 56.625090][ T5061] ? gfs2_check_blk_type+0x449/0x670 [ 56.630379][ T5061] ? handle_bug+0x3d/0x70 [ 56.634750][ T5061] ? exc_invalid_op+0x1a/0x50 [ 56.639430][ T5061] ? asm_exc_invalid_op+0x1a/0x20 [ 56.644492][ T5061] ? gfs2_check_blk_type+0x38e/0x670 [ 56.649781][ T5061] ? gfs2_check_blk_type+0x398/0x670 [ 56.655107][ T5061] ? gfs2_check_blk_type+0x449/0x670 [ 56.660401][ T5061] ? gfs2_free_di+0x3c0/0x3c0 [ 56.665118][ T5061] ? gfs2_inode_lookup+0xb01/0xc50 [ 56.670237][ T5061] ? gfs2_glock_wait+0x213/0x2b0 [ 56.675222][ T5061] gfs2_inode_lookup+0xb01/0xc50 [ 56.680178][ T5061] ? gfs2_lookup_by_inum+0x51/0xf0 [ 56.685316][ T5061] ? set_meta_super+0x10/0x10 [ 56.689996][ T5061] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.695977][ T5061] ? verify_lock_unused+0x140/0x140 [ 56.701189][ T5061] ? gfs2_lookup_by_inum+0x51/0xf0 [ 56.706337][ T5061] ? __stack_depot_save+0x4dc/0x650 [ 56.711552][ T5061] gfs2_lookup_by_inum+0x51/0xf0 [ 56.716552][ T5061] gfs2_fh_to_dentry+0x135/0x200 [ 56.721509][ T5061] exportfs_decode_fh_raw+0x14b/0x5d0 [ 56.726927][ T5061] ? do_handle_open+0x650/0x650 [ 56.731782][ T5061] ? exportfs_encode_fh+0x3f0/0x3f0 [ 56.737049][ T5061] ? do_handle_open+0x650/0x650 [ 56.741903][ T5061] exportfs_decode_fh+0x3c/0x70 [ 56.746785][ T5061] do_handle_open+0x490/0x650 [ 56.751468][ T5061] ? __x64_compat_sys_open_by_handle_at+0x80/0x80 [ 56.757922][ T5061] ? syscall_enter_from_user_mode+0x32/0x230 [ 56.763933][ T5061] ? syscall_enter_from_user_mode+0x8c/0x230 [ 56.769903][ T5061] do_syscall_64+0x44/0x110 [ 56.774444][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.780342][ T5061] RIP: 0033:0x7f337b2b0609 [ 56.784785][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.804416][ T5061] RSP: 002b:00007ffe5d676f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 56.812851][ T5061] RAX: ffffffffffffffda RBX: 00007ffe5d677118 RCX: 00007f337b2b0609 [ 56.820824][ T5061] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.828828][ T5061] RBP: 00007f337b336610 R08: 0000000000012527 R09: 00007ffe5d677118 [ 56.836840][ T5061] R10: 00007ffe5d676e00 R11: 0000000000000246 R12: 0000000000000001 [ 56.844867][ T5061] R13: 00007ffe5d677108 R14: 0000000000000001 R15: 0000000000000001 [ 56.852925][ T5061] [ 56.855959][ T5061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.863230][ T5061] CPU: 1 PID: 5061 Comm: syz-executor269 Not tainted 6.6.0-syzkaller-16201-gb57b17e88bf5 #0 [ 56.873278][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 56.883326][ T5061] Call Trace: [ 56.886593][ T5061] [ 56.889516][ T5061] dump_stack_lvl+0x1e7/0x2d0 [ 56.894203][ T5061] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.899654][ T5061] ? panic+0x850/0x850 [ 56.903721][ T5061] ? vscnprintf+0x5d/0x80 [ 56.908042][ T5061] panic+0x349/0x850 [ 56.911931][ T5061] ? __warn+0x171/0x4a0 [ 56.916074][ T5061] ? __memcpy_flushcache+0x2b0/0x2b0 [ 56.921365][ T5061] __warn+0x314/0x4a0 [ 56.925336][ T5061] ? gfs2_check_blk_type+0x449/0x670 [ 56.930613][ T5061] report_bug+0x2b3/0x500 [ 56.934937][ T5061] ? gfs2_check_blk_type+0x449/0x670 [ 56.940215][ T5061] handle_bug+0x3d/0x70 [ 56.944365][ T5061] exc_invalid_op+0x1a/0x50 [ 56.948860][ T5061] asm_exc_invalid_op+0x1a/0x20 [ 56.953703][ T5061] RIP: 0010:gfs2_check_blk_type+0x449/0x670 [ 56.959587][ T5061] Code: 85 d2 01 00 00 8b 1b 89 df 44 89 f6 e8 90 5f c4 fd 4c 89 74 24 10 44 39 f3 76 21 e8 01 5e c4 fd 45 31 ed eb 6e e8 f7 5d c4 fd <0f> 0b 41 bf f9 ff ff ff 48 8b 5c 24 18 e9 46 01 00 00 e8 e0 5d c4 [ 56.979184][ T5061] RSP: 0018:ffffc90003be78e0 EFLAGS: 00010293 [ 56.985242][ T5061] RAX: ffffffff83ca63a8 RBX: ffff88801c902028 RCX: ffff88801d138000 [ 56.993204][ T5061] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000013 [ 57.001162][ T5061] RBP: ffffc90003be79f0 R08: ffffffff83ca639e R09: 1ffff1100f219800 [ 57.009126][ T5061] R10: dffffc0000000000 R11: ffffed100f219801 R12: 1ffff11003920406 [ 57.017086][ T5061] R13: ffff88801c902000 R14: 0000000000000012 R15: 0000000000000013 [ 57.025057][ T5061] ? gfs2_check_blk_type+0x38e/0x670 [ 57.030334][ T5061] ? gfs2_check_blk_type+0x398/0x670 [ 57.035618][ T5061] ? gfs2_free_di+0x3c0/0x3c0 [ 57.040286][ T5061] ? gfs2_inode_lookup+0xb01/0xc50 [ 57.045393][ T5061] ? gfs2_glock_wait+0x213/0x2b0 [ 57.050326][ T5061] gfs2_inode_lookup+0xb01/0xc50 [ 57.055261][ T5061] ? gfs2_lookup_by_inum+0x51/0xf0 [ 57.060366][ T5061] ? set_meta_super+0x10/0x10 [ 57.065032][ T5061] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 57.070919][ T5061] ? verify_lock_unused+0x140/0x140 [ 57.076109][ T5061] ? gfs2_lookup_by_inum+0x51/0xf0 [ 57.081216][ T5061] ? __stack_depot_save+0x4dc/0x650 [ 57.086412][ T5061] gfs2_lookup_by_inum+0x51/0xf0 [ 57.091343][ T5061] gfs2_fh_to_dentry+0x135/0x200 [ 57.096275][ T5061] exportfs_decode_fh_raw+0x14b/0x5d0 [ 57.101640][ T5061] ? do_handle_open+0x650/0x650 [ 57.106483][ T5061] ? exportfs_encode_fh+0x3f0/0x3f0 [ 57.111696][ T5061] ? do_handle_open+0x650/0x650 [ 57.116533][ T5061] exportfs_decode_fh+0x3c/0x70 [ 57.121381][ T5061] do_handle_open+0x490/0x650 [ 57.126058][ T5061] ? __x64_compat_sys_open_by_handle_at+0x80/0x80 [ 57.132472][ T5061] ? syscall_enter_from_user_mode+0x32/0x230 [ 57.138452][ T5061] ? syscall_enter_from_user_mode+0x8c/0x230 [ 57.144429][ T5061] do_syscall_64+0x44/0x110 [ 57.148925][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 57.154810][ T5061] RIP: 0033:0x7f337b2b0609 [ 57.159225][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.178821][ T5061] RSP: 002b:00007ffe5d676f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 57.187225][ T5061] RAX: ffffffffffffffda RBX: 00007ffe5d677118 RCX: 00007f337b2b0609 [ 57.195186][ T5061] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 57.203155][ T5061] RBP: 00007f337b336610 R08: 0000000000012527 R09: 00007ffe5d677118 [ 57.211115][ T5061] R10: 00007ffe5d676e00 R11: 0000000000000246 R12: 0000000000000001 [ 57.219077][ T5061] R13: 00007ffe5d677108 R14: 0000000000000001 R15: 0000000000000001 [ 57.227046][ T5061] [ 57.230234][ T5061] Kernel Offset: disabled [ 57.234603][ T5061] Rebooting in 86400 seconds..