./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1005090534 <...> DUID 00:04:e6:bc:8e:bc:c3:7a:f3:fc:35:c5:a5:4f:9b:64:01:ce forked to background, child pid 4669 [ 48.060188][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.078948][ T4670] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.152' (ECDSA) to the list of known hosts. execve("./syz-executor1005090534", ["./syz-executor1005090534"], 0x7ffd49fe5e10 /* 10 vars */) = 0 brk(NULL) = 0x555557117000 brk(0x555557117c40) = 0x555557117c40 arch_prctl(ARCH_SET_FS, 0x555557117300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1005090534", 4096) = 28 brk(0x555557138c40) = 0x555557138c40 brk(0x555557139000) = 0x555557139000 mprotect(0x7f4bae486000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5005 attached , child_tidptr=0x5555571175d0) = 5005 [pid 5005] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5005] setsid() = 1 [pid 5005] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5005] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5005] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5005] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5005] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5005] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5005] unshare(CLONE_NEWNS) = 0 [pid 5005] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5005] unshare(CLONE_NEWIPC) = 0 [pid 5005] unshare(CLONE_NEWCGROUP) = 0 [pid 5005] unshare(CLONE_NEWUTS) = 0 [pid 5005] unshare(CLONE_SYSVSEM) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "16777216", 8) = 8 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "536870912", 9) = 9 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1024", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "8192", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1024", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1024", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5005] close(3) = 0 [pid 5005] getpid() = 1 [pid 5005] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<s_umount_key#45){+.+.}-{3:3}, at: deactivate_super+0xa9/0xd0 [ 77.291779][ T5005] #1: ffff8880763dcb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa8/0x660 [ 77.302395][ T5005] #2: ffff8880763dd060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2900 [ 77.312776][ T5005] #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x61/0x90 [ 77.322835][ T5005] Preemption disabled at: [ 77.322846][ T5005] [<0000000000000000>] 0x0 [ 77.331715][ T5005] CPU: 1 PID: 5005 Comm: syz-executor100 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 77.341628][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 77.351699][ T5005] Call Trace: [ 77.354979][ T5005] [ 77.357915][ T5005] dump_stack_lvl+0x136/0x150 [ 77.362646][ T5005] __might_resched+0x358/0x580 [ 77.367447][ T5005] gfs2_glock_wait+0x4e/0x2e0 [ 77.372182][ T5005] gfs2_glock_nq+0xd7a/0x17a0 [ 77.376875][ T5005] ? __gfs2_holder_init+0x18b/0x2f0 [ 77.382094][ T5005] gfs2_freeze_lock+0x64/0xe0 [ 77.386815][ T5005] gfs2_withdraw+0xe92/0x1490 [ 77.391543][ T5005] ? gfs2_freeze_unlock+0x50/0x50 [ 77.396611][ T5005] ? gfs2_lm+0x1f0/0x1f0 [ 77.400897][ T5005] ? gfs2_withdraw+0xe92/0x1490 [ 77.405795][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.410174][ T5005] ? gfs2_ail1_empty+0x33/0xa10 [ 77.415053][ T5005] gfs2_ail1_empty+0x829/0xa10 [ 77.419841][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 77.424905][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.429266][ T5005] ? gfs2_flush_revokes+0x61/0x90 [ 77.434328][ T5005] gfs2_flush_revokes+0x6c/0x90 [ 77.439205][ T5005] ? gfs2_log_write_page+0x3c0/0x3c0 [ 77.444519][ T5005] revoke_lo_before_commit+0x22/0x650 [ 77.449920][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 77.455164][ T5005] ? gfs2_log_write_page+0x3c0/0x3c0 [ 77.460483][ T5005] gfs2_log_flush+0x1021/0x2900 [ 77.465365][ T5005] ? gfs2_ail_drain+0x630/0x630 [ 77.470245][ T5005] do_sync+0x5ad/0xcf0 [ 77.474367][ T5005] ? gfs2_qa_put+0x160/0x160 [ 77.478999][ T5005] ? gfs2_quota_sync+0x3f5/0x660 [ 77.484156][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.488533][ T5005] gfs2_quota_sync+0x2e6/0x660 [ 77.493348][ T5005] gfs2_sync_fs+0x44/0xb0 [ 77.497725][ T5005] ? rgrp_unlock_local+0x20/0x20 [ 77.502688][ T5005] sync_filesystem.part.0+0x75/0x1d0 [ 77.508010][ T5005] sync_filesystem+0x8f/0xc0 [ 77.512636][ T5005] generic_shutdown_super+0x74/0x480 [ 77.517973][ T5005] kill_block_super+0xa1/0x100 [ 77.522773][ T5005] gfs2_kill_sb+0x378/0x430 [ 77.527309][ T5005] ? rcu_is_watching+0x12/0xb0 [ 77.532107][ T5005] deactivate_locked_super+0x98/0x160 [ 77.537517][ T5005] deactivate_super+0xb1/0xd0 [ 77.542227][ T5005] cleanup_mnt+0x2ae/0x3d0 [ 77.546684][ T5005] task_work_run+0x16f/0x270 [ 77.551302][ T5005] ? task_work_cancel+0x30/0x30 [ 77.556190][ T5005] do_exit+0xb0d/0x29f0 [ 77.560461][ T5005] ? lock_downgrade+0x690/0x690 [ 77.565356][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 77.570434][ T5005] ? mm_update_next_owner+0x7b0/0x7b0 [ 77.575837][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.580231][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.585470][ T5005] do_group_exit+0xd4/0x2a0 [ 77.590004][ T5005] __x64_sys_exit_group+0x3e/0x50 [ 77.595067][ T5005] do_syscall_64+0x39/0xb0 [ 77.599522][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.605459][ T5005] RIP: 0033:0x7f4bae3f79b9 [ 77.609903][ T5005] Code: Unable to access opcode bytes at 0x7f4bae3f798f. [ 77.616948][ T5005] RSP: 002b:00007ffe65b96588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.625387][ T5005] RAX: ffffffffffffffda RBX: 00007f4bae48c330 RCX: 00007f4bae3f79b9 [ 77.633391][ T5005] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 77.641406][ T5005] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000001f6db [ 77.649412][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bae48c330 [ 77.657410][ T5005] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 77.665423][ T5005] [ 77.669375][ T5005] BUG: scheduling while atomic: syz-executor100/5005/0x00000002 [ 77.677104][ T5005] 4 locks held by syz-executor100/5005: [ 77.682688][ T5005] #0: ffff88802c5dc0e0 (&type->s_umount_key#45){+.+.}-{3:3}, at: deactivate_super+0xa9/0xd0 [ 77.693111][ T5005] #1: ffff8880763dcb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa8/0x660 [ 77.703815][ T5005] #2: ffff8880763dd060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2900 [ 77.714226][ T5005] #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x61/0x90 [ 77.724286][ T5005] Modules linked in: [ 77.728371][ T5005] Preemption disabled at: [ 77.728387][ T5005] [<0000000000000000>] 0x0 [ 77.737184][ T5005] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 77.745978][ T5005] CPU: 1 PID: 5005 Comm: syz-executor100 Tainted: G W 6.4.0-rc2-next-20230515-syzkaller #0 [ 77.757366][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 77.767521][ T5005] Call Trace: [ 77.770809][ T5005] [ 77.773759][ T5005] dump_stack_lvl+0xd9/0x150 [ 77.778386][ T5005] panic+0x686/0x730 [ 77.782320][ T5005] ? panic_smp_self_stop+0xa0/0xa0 [ 77.787480][ T5005] ? syslog_print_all+0x3a0/0x3a0 [ 77.792530][ T5005] ? is_module_text_address+0x70/0x70 [ 77.797951][ T5005] ? get_usage_chars+0x220/0x220 [ 77.802934][ T5005] check_panic_on_warn+0xb1/0xc0 [ 77.807943][ T5005] __schedule_bug+0x122/0x180 [ 77.812650][ T5005] __schedule+0x3926/0x5790 [ 77.817185][ T5005] ? lockdep_unlock+0x11b/0x290 [ 77.822080][ T5005] ? io_schedule_timeout+0x150/0x150 [ 77.827407][ T5005] ? mark_lock.part.0+0xee/0x1970 [ 77.832510][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 77.838529][ T5005] ? print_usage_bug.part.0+0x660/0x660 [ 77.844123][ T5005] ? print_usage_bug.part.0+0x660/0x660 [ 77.849716][ T5005] schedule+0xde/0x1a0 [ 77.853816][ T5005] schedule_timeout+0x276/0x2b0 [ 77.858700][ T5005] ? usleep_range_state+0x1b0/0x1b0 [ 77.863929][ T5005] ? __wait_for_common+0x1c4/0x5c0 [ 77.869069][ T5005] ? lock_downgrade+0x690/0x690 [ 77.873964][ T5005] ? mark_held_locks+0x9f/0xe0 [ 77.878767][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.884009][ T5005] __wait_for_common+0x1ce/0x5c0 [ 77.888981][ T5005] ? usleep_range_state+0x1b0/0x1b0 [ 77.894257][ T5005] ? bit_wait_timeout+0x160/0x160 [ 77.899337][ T5005] ? gfs2_instantiate+0x1ec/0x250 [ 77.904407][ T5005] kthread_stop+0x18b/0x5b0 [ 77.908943][ T5005] gfs2_make_fs_ro+0x163/0x6d0 [ 77.913746][ T5005] ? gfs2_dirty_inode+0x8b0/0x8b0 [ 77.918808][ T5005] ? __gfs2_holder_init+0x18b/0x2f0 [ 77.924038][ T5005] gfs2_withdraw+0xec8/0x1490 [ 77.928757][ T5005] ? gfs2_freeze_unlock+0x50/0x50 [ 77.933999][ T5005] ? gfs2_lm+0x1f0/0x1f0 [ 77.938302][ T5005] ? gfs2_withdraw+0xe92/0x1490 [ 77.943385][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.947757][ T5005] ? gfs2_ail1_empty+0x33/0xa10 [ 77.952641][ T5005] gfs2_ail1_empty+0x829/0xa10 [ 77.957431][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 77.962492][ T5005] ? spin_bug+0x1c0/0x1c0 [ 77.966859][ T5005] ? gfs2_flush_revokes+0x61/0x90 [ 77.971912][ T5005] gfs2_flush_revokes+0x6c/0x90 [ 77.976780][ T5005] ? gfs2_log_write_page+0x3c0/0x3c0 [ 77.982112][ T5005] revoke_lo_before_commit+0x22/0x650 [ 77.987532][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 77.992772][ T5005] ? gfs2_log_write_page+0x3c0/0x3c0 [ 77.998094][ T5005] gfs2_log_flush+0x1021/0x2900 [ 78.002983][ T5005] ? gfs2_ail_drain+0x630/0x630 [ 78.007893][ T5005] do_sync+0x5ad/0xcf0 [ 78.012043][ T5005] ? gfs2_qa_put+0x160/0x160 [ 78.016664][ T5005] ? gfs2_quota_sync+0x3f5/0x660 [ 78.021641][ T5005] ? spin_bug+0x1c0/0x1c0 [ 78.026017][ T5005] gfs2_quota_sync+0x2e6/0x660 [ 78.030828][ T5005] gfs2_sync_fs+0x44/0xb0 [ 78.035188][ T5005] ? rgrp_unlock_local+0x20/0x20 [ 78.040149][ T5005] sync_filesystem.part.0+0x75/0x1d0 [ 78.045480][ T5005] sync_filesystem+0x8f/0xc0 [ 78.050099][ T5005] generic_shutdown_super+0x74/0x480 [ 78.055424][ T5005] kill_block_super+0xa1/0x100 [ 78.060218][ T5005] gfs2_kill_sb+0x378/0x430 [ 78.064838][ T5005] ? rcu_is_watching+0x12/0xb0 [ 78.069631][ T5005] deactivate_locked_super+0x98/0x160 [ 78.075040][ T5005] deactivate_super+0xb1/0xd0 [ 78.079754][ T5005] cleanup_mnt+0x2ae/0x3d0 [ 78.084211][ T5005] task_work_run+0x16f/0x270 [ 78.088831][ T5005] ? task_work_cancel+0x30/0x30 [ 78.093724][ T5005] do_exit+0xb0d/0x29f0 [ 78.097911][ T5005] ? lock_downgrade+0x690/0x690 [ 78.102815][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 78.107903][ T5005] ? mm_update_next_owner+0x7b0/0x7b0 [ 78.113295][ T5005] ? spin_bug+0x1c0/0x1c0 [ 78.117656][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.122908][ T5005] do_group_exit+0xd4/0x2a0 [ 78.127450][ T5005] __x64_sys_exit_group+0x3e/0x50 [ 78.132590][ T5005] do_syscall_64+0x39/0xb0 [ 78.137057][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.143083][ T5005] RIP: 0033:0x7f4bae3f79b9 [ 78.147516][ T5005] Code: Unable to access opcode bytes at 0x7f4bae3f798f. [ 78.154545][ T5005] RSP: 002b:00007ffe65b96588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 78.162989][ T5005] RAX: ffffffffffffffda RBX: 00007f4bae48c330 RCX: 00007f4bae3f79b9 [ 78.171253][ T5005] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 78.179249][ T5005] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000001f6db [ 78.187237][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bae48c330 [ 78.195400][ T5005] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 78.203402][ T5005] [ 78.206793][ T5005] Kernel Offset: disabled [ 78.211232][ T5005] Rebooting in 86400 seconds..