./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor409590377 <...> Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. execve("./syz-executor409590377", ["./syz-executor409590377"], 0x7fff7ed6de80 /* 10 vars */) = 0 brk(NULL) = 0x55557175d000 brk(0x55557175dd00) = 0x55557175dd00 arch_prctl(ARCH_SET_FS, 0x55557175d380) = 0 set_tid_address(0x55557175d650) = 5074 set_robust_list(0x55557175d660, 24) = 0 rseq(0x55557175dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor409590377", 4096) = 27 getrandom("\xbb\xa2\xca\xdc\xad\x32\xaa\x2b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557175dd00 brk(0x55557177ed00) = 0x55557177ed00 brk(0x55557177f000) = 0x55557177f000 mprotect(0x7fd426e91000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd41e800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fd41e800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 60.860823][ T5074] loop0: detected capacity change from 0 to 32768 [ 60.900508][ T5074] ======================================================= [ 60.900508][ T5074] WARNING: The mand mount option has been deprecated and [ 60.900508][ T5074] and is ignored by this kernel. Remove the mand [ 60.900508][ T5074] option from the mount to silence this warning. [ 60.900508][ T5074] ======================================================= [ 60.940684][ T5074] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 60.948111][ T5074] gfs2: fsid=.: Now mounting FS (format 1801)... [ 60.961472][ T5074] gfs2: fsid=..0: journal 0 mapped with 18 extents in 0ms [ 60.970719][ T7] gfs2: fsid=..0: jid=0, already locked for use [ 60.977180][ T7] gfs2: fsid=..0: jid=0: Looking at journal... [ 61.012598][ T7] gfs2: fsid=..0: jid=0: Journal head lookup took 35ms [ 61.020168][ T7] gfs2: fsid=..0: jid=0: Done [ 61.024940][ T5074] gfs2: fsid=..0: first mount done, others may mount [ 61.033378][ T5074] ------------[ cut here ]------------ [ 61.038892][ T5074] WARNING: CPU: 1 PID: 5074 at mm/page_alloc.c:4551 __alloc_pages+0x36a/0x6c0 [ 61.047813][ T5074] Modules linked in: [ 61.051730][ T5074] CPU: 1 PID: 5074 Comm: syz-executor409 Not tainted 6.9.0-rc6-syzkaller-00290-gb9158815de52 #0 [ 61.062216][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 61.072303][ T5074] RIP: 0010:__alloc_pages+0x36a/0x6c0 [ 61.077707][ T5074] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 28 e5 a7 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 61.097346][ T5074] RSP: 0018:ffffc900035f7420 EFLAGS: 00010246 [ 61.103408][ T5074] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 61.111430][ T5074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900035f74a8 [ 61.119419][ T5074] RBP: ffffc900035f7530 R08: ffffc900035f74a7 R09: 0000000000000000 [ 61.127423][ T5074] R10: ffffc900035f7480 R11: fffff520006bee95 R12: 1ffff920006bee8c [ 61.135380][ T5074] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff920006bee88 [ 61.143371][ T5074] FS: 000055557175d380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 61.152335][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.159023][ T5074] CR2: 00007fffacbd3000 CR3: 000000007a07a000 CR4: 00000000003506f0 [ 61.167062][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.175041][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.183167][ T5074] Call Trace: [ 61.186497][ T5074] [ 61.189425][ T5074] ? __warn+0x163/0x4e0 [ 61.193595][ T5074] ? __alloc_pages+0x36a/0x6c0 [ 61.198404][ T5074] ? report_bug+0x2b3/0x500 [ 61.202940][ T5074] ? __alloc_pages+0x36a/0x6c0 [ 61.207749][ T5074] ? handle_bug+0x3e/0x70 [ 61.212093][ T5074] ? exc_invalid_op+0x1a/0x50 [ 61.216817][ T5074] ? asm_exc_invalid_op+0x1a/0x20 [ 61.221856][ T5074] ? __alloc_pages+0x36a/0x6c0 [ 61.226684][ T5074] ? __pfx_glock_wake_function+0x10/0x10 [ 61.232328][ T5074] ? __pfx___alloc_pages+0x10/0x10 [ 61.237491][ T5074] ? gfs2_glock_get+0xba1/0x1040 [ 61.242436][ T5074] __kmalloc_large_node+0x91/0x1f0 [ 61.247600][ T5074] ? gfs2_ri_update+0x549/0x1830 [ 61.252558][ T5074] __kmalloc+0x320/0x4a0 [ 61.256848][ T5074] ? __raw_spin_lock_init+0x45/0x100 [ 61.262159][ T5074] gfs2_ri_update+0x549/0x1830 [ 61.266986][ T5074] ? __pfx_gfs2_ri_update+0x10/0x10 [ 61.272195][ T5074] ? inode_go_held+0xea/0x200 [ 61.276915][ T5074] ? gfs2_glock_wait+0x21a/0x2b0 [ 61.281860][ T5074] gfs2_rindex_update+0x304/0x3d0 [ 61.286921][ T5074] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 61.292558][ T5074] ? init_inodes+0x24d/0x320 [ 61.297200][ T5074] ? complete_all+0x2d/0x1e0 [ 61.301817][ T5074] init_inodes+0x24d/0x320 [ 61.306284][ T5074] gfs2_fill_super+0x1edb/0x26c0 [ 61.311235][ T5074] ? __pfx_gfs2_fill_super+0x10/0x10 [ 61.316550][ T5074] ? snprintf+0xda/0x120 [ 61.320800][ T5074] ? __pfx_lock_release+0x10/0x10 [ 61.325805][ T5074] ? do_raw_spin_lock+0x14f/0x370 [ 61.330881][ T5074] ? __pfx_snprintf+0x10/0x10 [ 61.335565][ T5074] ? set_blocksize+0x1df/0x390 [ 61.340371][ T5074] ? init_locking+0xbd/0x210 [ 61.344969][ T5074] ? sb_set_blocksize+0x99/0x100 [ 61.349944][ T5074] ? setup_bdev_super+0x4b7/0x5b0 [ 61.354976][ T5074] get_tree_bdev+0x3f7/0x570 [ 61.359603][ T5074] ? __pfx_gfs2_fill_super+0x10/0x10 [ 61.364910][ T5074] ? __pfx_get_tree_bdev+0x10/0x10 [ 61.370100][ T5074] gfs2_get_tree+0x54/0x220 [ 61.374623][ T5074] ? bpf_lsm_capable+0x9/0x10 [ 61.379364][ T5074] vfs_get_tree+0x90/0x2a0 [ 61.383797][ T5074] do_new_mount+0x2be/0xb40 [ 61.388352][ T5074] ? __pfx_do_new_mount+0x10/0x10 [ 61.393392][ T5074] __se_sys_mount+0x2d9/0x3c0 [ 61.398128][ T5074] ? __pfx___se_sys_mount+0x10/0x10 [ 61.403341][ T5074] ? do_syscall_64+0x102/0x240 [ 61.408149][ T5074] ? __x64_sys_mount+0x20/0xc0 [ 61.412922][ T5074] do_syscall_64+0xf5/0x240 [ 61.417484][ T5074] ? clear_bhb_loop+0x35/0x90 [ 61.422202][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.428166][ T5074] RIP: 0033:0x7fd426e0c93a [ 61.432593][ T5074] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.452277][ T5074] RSP: 002b:00007fffacbd27d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 61.460732][ T5074] RAX: ffffffffffffffda RBX: 00007fffacbd27e0 RCX: 00007fd426e0c93a [ 61.468735][ T5074] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 00007fffacbd27e0 [ 61.476737][ T5074] RBP: 0000000000000004 R08: 00007fffacbd2820 R09: 00000000000127be [ 61.484704][ T5074] R10: 0000000000008cd3 R11: 0000000000000282 R12: 00007fffacbd2820 [ 61.492713][ T5074] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001 [ 61.500755][ T5074] [ 61.503773][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.511031][ T5074] CPU: 1 PID: 5074 Comm: syz-executor409 Not tainted 6.9.0-rc6-syzkaller-00290-gb9158815de52 #0 [ 61.521418][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 61.531457][ T5074] Call Trace: [ 61.534717][ T5074] [ 61.537639][ T5074] dump_stack_lvl+0x241/0x360 [ 61.542320][ T5074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.547511][ T5074] ? __pfx__printk+0x10/0x10 [ 61.552099][ T5074] ? vscnprintf+0x5d/0x90 [ 61.556421][ T5074] panic+0x349/0x860 [ 61.560313][ T5074] ? __warn+0x172/0x4e0 [ 61.564508][ T5074] ? __pfx_panic+0x10/0x10 [ 61.568932][ T5074] __warn+0x346/0x4e0 [ 61.572907][ T5074] ? __alloc_pages+0x36a/0x6c0 [ 61.577668][ T5074] report_bug+0x2b3/0x500 [ 61.581991][ T5074] ? __alloc_pages+0x36a/0x6c0 [ 61.586752][ T5074] handle_bug+0x3e/0x70 [ 61.590897][ T5074] exc_invalid_op+0x1a/0x50 [ 61.595392][ T5074] asm_exc_invalid_op+0x1a/0x20 [ 61.600238][ T5074] RIP: 0010:__alloc_pages+0x36a/0x6c0 [ 61.605609][ T5074] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 28 e5 a7 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 61.625212][ T5074] RSP: 0018:ffffc900035f7420 EFLAGS: 00010246 [ 61.631453][ T5074] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 61.639458][ T5074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900035f74a8 [ 61.647439][ T5074] RBP: ffffc900035f7530 R08: ffffc900035f74a7 R09: 0000000000000000 [ 61.655415][ T5074] R10: ffffc900035f7480 R11: fffff520006bee95 R12: 1ffff920006bee8c [ 61.663409][ T5074] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff920006bee88 [ 61.671411][ T5074] ? __pfx_glock_wake_function+0x10/0x10 [ 61.677065][ T5074] ? __pfx___alloc_pages+0x10/0x10 [ 61.682198][ T5074] ? gfs2_glock_get+0xba1/0x1040 [ 61.687142][ T5074] __kmalloc_large_node+0x91/0x1f0 [ 61.692266][ T5074] ? gfs2_ri_update+0x549/0x1830 [ 61.697203][ T5074] __kmalloc+0x320/0x4a0 [ 61.701444][ T5074] ? __raw_spin_lock_init+0x45/0x100 [ 61.706728][ T5074] gfs2_ri_update+0x549/0x1830 [ 61.711585][ T5074] ? __pfx_gfs2_ri_update+0x10/0x10 [ 61.716779][ T5074] ? inode_go_held+0xea/0x200 [ 61.721454][ T5074] ? gfs2_glock_wait+0x21a/0x2b0 [ 61.726383][ T5074] gfs2_rindex_update+0x304/0x3d0 [ 61.731400][ T5074] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 61.736954][ T5074] ? init_inodes+0x24d/0x320 [ 61.741621][ T5074] ? complete_all+0x2d/0x1e0 [ 61.746226][ T5074] init_inodes+0x24d/0x320 [ 61.750658][ T5074] gfs2_fill_super+0x1edb/0x26c0 [ 61.755608][ T5074] ? __pfx_gfs2_fill_super+0x10/0x10 [ 61.760884][ T5074] ? snprintf+0xda/0x120 [ 61.765117][ T5074] ? __pfx_lock_release+0x10/0x10 [ 61.770132][ T5074] ? do_raw_spin_lock+0x14f/0x370 [ 61.775151][ T5074] ? __pfx_snprintf+0x10/0x10 [ 61.779816][ T5074] ? set_blocksize+0x1df/0x390 [ 61.784575][ T5074] ? init_locking+0xbd/0x210 [ 61.789155][ T5074] ? sb_set_blocksize+0x99/0x100 [ 61.794087][ T5074] ? setup_bdev_super+0x4b7/0x5b0 [ 61.799107][ T5074] get_tree_bdev+0x3f7/0x570 [ 61.803709][ T5074] ? __pfx_gfs2_fill_super+0x10/0x10 [ 61.808983][ T5074] ? __pfx_get_tree_bdev+0x10/0x10 [ 61.814091][ T5074] gfs2_get_tree+0x54/0x220 [ 61.818585][ T5074] ? bpf_lsm_capable+0x9/0x10 [ 61.823255][ T5074] vfs_get_tree+0x90/0x2a0 [ 61.827664][ T5074] do_new_mount+0x2be/0xb40 [ 61.832170][ T5074] ? __pfx_do_new_mount+0x10/0x10 [ 61.837191][ T5074] __se_sys_mount+0x2d9/0x3c0 [ 61.841864][ T5074] ? __pfx___se_sys_mount+0x10/0x10 [ 61.847052][ T5074] ? do_syscall_64+0x102/0x240 [ 61.851820][ T5074] ? __x64_sys_mount+0x20/0xc0 [ 61.856576][ T5074] do_syscall_64+0xf5/0x240 [ 61.861074][ T5074] ? clear_bhb_loop+0x35/0x90 [ 61.865743][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.871627][ T5074] RIP: 0033:0x7fd426e0c93a [ 61.876031][ T5074] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.895635][ T5074] RSP: 002b:00007fffacbd27d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 61.904053][ T5074] RAX: ffffffffffffffda RBX: 00007fffacbd27e0 RCX: 00007fd426e0c93a [ 61.912012][ T5074] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 00007fffacbd27e0 [ 61.919972][ T5074] RBP: 0000000000000004 R08: 00007fffacbd2820 R09: 00000000000127be [ 61.927935][ T5074] R10: 0000000000008cd3 R11: 0000000000000282 R12: 00007fffacbd2820 [ 61.935894][ T5074] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001 [ 61.943865][ T5074] [ 61.947150][ T5074] Kernel Offset: disabled [ 61.951608][ T5074] Rebooting in 86400 seconds..