./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1838957821 <...> Warning: Permanently added '10.128.0.198' (ECDSA) to the list of known hosts. execve("./syz-executor1838957821", ["./syz-executor1838957821"], 0x7ffcf4bef030 /* 10 vars */) = 0 brk(NULL) = 0x5555563bd000 brk(0x5555563bdc40) = 0x5555563bdc40 arch_prctl(ARCH_SET_FS, 0x5555563bd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1838957821", 4096) = 28 brk(0x5555563dec40) = 0x5555563dec40 brk(0x5555563df000) = 0x5555563df000 mprotect(0x7f2fd4c29000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2fcc600000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f2fcc600000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 55.399049][ T3630] loop0: detected capacity change from 0 to 32768 [ 55.412534][ T3630] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 55.420884][ T3630] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 55.434000][ T3630] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 55.443616][ T151] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 55.450507][ T151] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 55.486379][ T151] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 55.494276][ T151] gfs2: fsid=syz:syz.0: jid=0: Done [ 55.499592][ T3630] gfs2: fsid=syz:syz.0: first mount done, others may mount mount("/dev/loop0", "./file0", "gfs2", MS_SYNCHRONOUS|MS_I_VERSION, "noloccookie,acl,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 55.607024][ T3630] ------------[ cut here ]------------ [ 55.612785][ T3630] WARNING: CPU: 1 PID: 3630 at include/linux/backing-dev.h:246 folio_account_dirtied+0x4e9/0x6e0 [ 55.623320][ T3630] Modules linked in: [ 55.627202][ T3630] CPU: 1 PID: 3630 Comm: syz-executor183 Not tainted 6.1.0-rc6-syzkaller-00308-g644e9524388a #0 [ 55.637614][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.647669][ T3630] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0 [ 55.653729][ T3630] Code: 5d 41 5e 41 5f 5d c3 e8 75 74 d0 ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 5c ba 2b 00 e8 57 74 d0 ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 55.673335][ T3630] RSP: 0018:ffffc90003a4f1f0 EFLAGS: 00010093 [ 55.679390][ T3630] RAX: ffffffff81ba2359 RBX: 0000000000000000 RCX: ffff88807d323a80 [ 55.687367][ T3630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.695329][ T3630] RBP: ffff88801e864978 R08: ffffffff81ba20dd R09: ffffed1003d0c930 [ 55.703289][ T3630] R10: ffffed1003d0c930 R11: 1ffff11003d0c92f R12: dffffc0000000000 [ 55.711249][ T3630] R13: ffffea000079cfc0 R14: 0000000000000001 R15: 1ffff11003d0c92f [ 55.719207][ T3630] FS: 00005555563bd300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 55.728120][ T3630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.734690][ T3630] CR2: 000055eb49a965e8 CR3: 000000001e738000 CR4: 00000000003506e0 [ 55.742649][ T3630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.750661][ T3630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.758621][ T3630] Call Trace: [ 55.761886][ T3630] [ 55.764809][ T3630] __folio_mark_dirty+0x125/0x260 [ 55.769827][ T3630] mark_buffer_dirty+0x253/0x550 [ 55.774755][ T3630] gfs2_unpin+0x10b/0xa20 [ 55.779081][ T3630] ? log_pull_tail+0x7e/0x390 [ 55.783755][ T3630] buf_lo_after_commit+0x172/0x1d0 [ 55.788857][ T3630] ? buf_lo_before_commit+0xe0/0xe0 [ 55.794039][ T3630] gfs2_log_flush+0x1179/0x26a0 [ 55.798899][ T3630] ? gfs2_ail_drain+0xdb0/0xdb0 [ 55.803758][ T3630] ? up_read+0x20/0x20 [ 55.807825][ T3630] ? gfs2_uevent+0x160/0x160 [ 55.812410][ T3630] gfs2_trans_end+0x392/0x560 [ 55.817110][ T3630] alloc_dinode+0x411/0x570 [ 55.821615][ T3630] ? munge_mode_uid_gid+0x4b0/0x4b0 [ 55.826811][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.832093][ T3630] ? check_and_update_goal+0x277/0x2f0 [ 55.837548][ T3630] ? gfs2_set_inode_flags+0xbf/0x1b0 [ 55.842827][ T3630] gfs2_create_inode+0xfff/0x1c30 [ 55.847859][ T3630] ? __gfs2_lookup+0x260/0x260 [ 55.852623][ T3630] ? gfs2_atomic_open+0xeb/0x230 [ 55.857564][ T3630] ? __gfs2_lookup+0xba/0x260 [ 55.862231][ T3630] ? gfs2_lookupi+0x650/0x650 [ 55.866907][ T3630] ? make_kgid+0x710/0x710 [ 55.871320][ T3630] gfs2_atomic_open+0xeb/0x230 [ 55.876072][ T3630] path_openat+0xf39/0x2df0 [ 55.880568][ T3630] ? gfs2_rename2+0x3000/0x3000 [ 55.885416][ T3630] ? do_filp_open+0x4f0/0x4f0 [ 55.890105][ T3630] do_filp_open+0x264/0x4f0 [ 55.894606][ T3630] ? vfs_tmpfile+0x490/0x490 [ 55.899189][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.904384][ T3630] ? _raw_spin_unlock+0x24/0x40 [ 55.909233][ T3630] ? alloc_fd+0x5a7/0x640 [ 55.913556][ T3630] do_sys_openat2+0x124/0x4e0 [ 55.918218][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.923401][ T3630] ? do_sys_open+0x220/0x220 [ 55.927975][ T3630] ? _raw_spin_unlock_irq+0x2a/0x40 [ 55.933159][ T3630] ? ptrace_notify+0x245/0x340 [ 55.937919][ T3630] __x64_sys_creat+0x11f/0x160 [ 55.942708][ T3630] ? __x64_compat_sys_openat+0x290/0x290 [ 55.948324][ T3630] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 55.954293][ T3630] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 55.960261][ T3630] do_syscall_64+0x3d/0xb0 [ 55.964667][ T3630] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.970543][ T3630] RIP: 0033:0x7f2fd4baa7a9 [ 55.974943][ T3630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.994624][ T3630] RSP: 002b:00007ffd26159398 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 56.003030][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fd4baa7a9 [ 56.010984][ T3630] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 0000000020000000 [ 56.018935][ T3630] RBP: 00007f2fd4b6a040 R08: 00000000000124e2 R09: 0000000000000000 [ 56.026892][ T3630] R10: 00007ffd26159260 R11: 0000000000000246 R12: 00007f2fd4b6a0d0 [ 56.034848][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.042813][ T3630] [ 56.045815][ T3630] Kernel panic - not syncing: panic_on_warn set ... [ 56.052379][ T3630] CPU: 1 PID: 3630 Comm: syz-executor183 Not tainted 6.1.0-rc6-syzkaller-00308-g644e9524388a #0 [ 56.062770][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.072895][ T3630] Call Trace: [ 56.076161][ T3630] [ 56.079075][ T3630] dump_stack_lvl+0x1b1/0x28e [ 56.083763][ T3630] ? nf_tcp_handle_invalid+0x62e/0x62e [ 56.089228][ T3630] ? panic+0x710/0x710 [ 56.093300][ T3630] ? vscnprintf+0x59/0x80 [ 56.097628][ T3630] ? folio_account_dirtied+0x490/0x6e0 [ 56.103076][ T3630] panic+0x2d6/0x710 [ 56.106963][ T3630] ? __warn+0x131/0x220 [ 56.111108][ T3630] ? memcpy_page_flushcache+0xfc/0xfc [ 56.116474][ T3630] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.121917][ T3630] __warn+0x1fa/0x220 [ 56.125884][ T3630] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.131326][ T3630] report_bug+0x1b3/0x2d0 [ 56.135644][ T3630] handle_bug+0x3d/0x70 [ 56.139782][ T3630] exc_invalid_op+0x16/0x40 [ 56.144267][ T3630] asm_exc_invalid_op+0x16/0x20 [ 56.149100][ T3630] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0 [ 56.155149][ T3630] Code: 5d 41 5e 41 5f 5d c3 e8 75 74 d0 ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 5c ba 2b 00 e8 57 74 d0 ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 56.174738][ T3630] RSP: 0018:ffffc90003a4f1f0 EFLAGS: 00010093 [ 56.180790][ T3630] RAX: ffffffff81ba2359 RBX: 0000000000000000 RCX: ffff88807d323a80 [ 56.188745][ T3630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.196699][ T3630] RBP: ffff88801e864978 R08: ffffffff81ba20dd R09: ffffed1003d0c930 [ 56.204652][ T3630] R10: ffffed1003d0c930 R11: 1ffff11003d0c92f R12: dffffc0000000000 [ 56.212617][ T3630] R13: ffffea000079cfc0 R14: 0000000000000001 R15: 1ffff11003d0c92f [ 56.220576][ T3630] ? folio_account_dirtied+0x26d/0x6e0 [ 56.226022][ T3630] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.231473][ T3630] __folio_mark_dirty+0x125/0x260 [ 56.236489][ T3630] mark_buffer_dirty+0x253/0x550 [ 56.241503][ T3630] gfs2_unpin+0x10b/0xa20 [ 56.245818][ T3630] ? log_pull_tail+0x7e/0x390 [ 56.250488][ T3630] buf_lo_after_commit+0x172/0x1d0 [ 56.255580][ T3630] ? buf_lo_before_commit+0xe0/0xe0 [ 56.260763][ T3630] gfs2_log_flush+0x1179/0x26a0 [ 56.265627][ T3630] ? gfs2_ail_drain+0xdb0/0xdb0 [ 56.270463][ T3630] ? up_read+0x20/0x20 [ 56.274516][ T3630] ? gfs2_uevent+0x160/0x160 [ 56.279092][ T3630] gfs2_trans_end+0x392/0x560 [ 56.284105][ T3630] alloc_dinode+0x411/0x570 [ 56.288601][ T3630] ? munge_mode_uid_gid+0x4b0/0x4b0 [ 56.293787][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.298968][ T3630] ? check_and_update_goal+0x277/0x2f0 [ 56.304414][ T3630] ? gfs2_set_inode_flags+0xbf/0x1b0 [ 56.309699][ T3630] gfs2_create_inode+0xfff/0x1c30 [ 56.314809][ T3630] ? __gfs2_lookup+0x260/0x260 [ 56.319566][ T3630] ? gfs2_atomic_open+0xeb/0x230 [ 56.324497][ T3630] ? __gfs2_lookup+0xba/0x260 [ 56.329247][ T3630] ? gfs2_lookupi+0x650/0x650 [ 56.333914][ T3630] ? make_kgid+0x710/0x710 [ 56.338322][ T3630] gfs2_atomic_open+0xeb/0x230 [ 56.343077][ T3630] path_openat+0xf39/0x2df0 [ 56.347568][ T3630] ? gfs2_rename2+0x3000/0x3000 [ 56.352418][ T3630] ? do_filp_open+0x4f0/0x4f0 [ 56.357091][ T3630] do_filp_open+0x264/0x4f0 [ 56.361580][ T3630] ? vfs_tmpfile+0x490/0x490 [ 56.366168][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.371355][ T3630] ? _raw_spin_unlock+0x24/0x40 [ 56.376192][ T3630] ? alloc_fd+0x5a7/0x640 [ 56.380515][ T3630] do_sys_openat2+0x124/0x4e0 [ 56.385179][ T3630] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.390363][ T3630] ? do_sys_open+0x220/0x220 [ 56.394937][ T3630] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.400143][ T3630] ? ptrace_notify+0x245/0x340 [ 56.404905][ T3630] __x64_sys_creat+0x11f/0x160 [ 56.409652][ T3630] ? __x64_compat_sys_openat+0x290/0x290 [ 56.415269][ T3630] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.421238][ T3630] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.427204][ T3630] do_syscall_64+0x3d/0xb0 [ 56.431609][ T3630] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.437515][ T3630] RIP: 0033:0x7f2fd4baa7a9 [ 56.441918][ T3630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.461505][ T3630] RSP: 002b:00007ffd26159398 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 56.469990][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fd4baa7a9 [ 56.478214][ T3630] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 0000000020000000 [ 56.486165][ T3630] RBP: 00007f2fd4b6a040 R08: 00000000000124e2 R09: 0000000000000000 [ 56.494116][ T3630] R10: 00007ffd26159260 R11: 0000000000000246 R12: 00007f2fd4b6a0d0 [ 56.502066][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.510029][ T3630] [ 56.513202][ T3630] Kernel Offset: disabled [ 56.517658][ T3630] Rebooting in 86400 seconds..