./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor405926686
<...>
Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts.
execve("./syz-executor405926686", ["./syz-executor405926686"], 0x7ffc769598f0 /* 10 vars */) = 0
brk(NULL) = 0x555581c2c000
brk(0x555581c2cd00) = 0x555581c2cd00
arch_prctl(ARCH_SET_FS, 0x555581c2c380) = 0
set_tid_address(0x555581c2c650) = 5828
set_robust_list(0x555581c2c660, 24) = 0
rseq(0x555581c2cca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor405926686", 4096) = 27
getrandom("\x45\x8d\x91\x9c\x77\xf6\x79\xb2", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555581c2cd00
brk(0x555581c4dd00) = 0x555581c4dd00
brk(0x555581c4e000) = 0x555581c4e000
mprotect(0x7f2fed7ae000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.Eiq484", 0700) = 0
chmod("./syzkaller.Eiq484", 0777) = 0
chdir("./syzkaller.Eiq484") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c2c650) = 5829
./strace-static-x86_64: Process 5829 attached
[pid 5829] set_robust_list(0x555581c2c660, 24) = 0
[pid 5829] chdir("./0") = 0
[pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5829] setpgid(0, 0) = 0
[pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5829] write(3, "1000", 4) = 4
[pid 5829] close(3) = 0
[pid 5829] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5829] write(1, "executing program\n", 18executing program
) = 18
[pid 5829] preadv(-1, NULL, 0, 76) = -1 EBADF (Bad file descriptor)
[pid 5829] memfd_create("syzkaller", 0) = 3
[pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2fe5200000
[pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5829] munmap(0x7f2fe5200000, 138412032) = 0
[pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5829] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5829] close(3) = 0
[pid 5829] close(4) = 0
[ 88.869921][ T5829] loop0: detected capacity change from 0 to 32768
[pid 5829] mkdir("./file0", 0777) = 0
[ 88.954322][ T5829] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 88.963489][ T5829] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 88.997322][ T5829] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 89.008843][ T873] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 89.016179][ T873] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 89.068808][ T873] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms
[ 89.078918][ T873] gfs2: fsid=syz:syz.0: jid=0: Done
[ 89.084893][ T5829] gfs2: fsid=syz:syz.0: first mount done, others may mount
[pid 5829] mount("/dev/loop0", "./file0", "gfs2", 0, "suiddir,lockproto=lock_nolock,quota,") = 0
[pid 5829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5829] chdir("./file0") = 0
[pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5829] exit_group(0) = ?
[pid 5829] +++ exited with 0 +++
[ 89.377810][ T5829] gfs2: fsid=syz:syz.0: found 1 quota changes
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=51 /* 0.51 s */} ---
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555581c2d6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 89.542035][ T5828] ------------[ cut here ]------------
[ 89.547936][ T5828] WARNING: CPU: 1 PID: 5828 at ./include/linux/backing-dev.h:254 __folio_mark_dirty+0xa3a/0xe80
[ 89.558440][ T5828] Modules linked in:
[ 89.562365][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor405 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[ 89.573498][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 89.583624][ T5828] RIP: 0010:__folio_mark_dirty+0xa3a/0xe80
[ 89.589509][ T5828] Code: e8 8b 70 c4 ff 4c 89 ef 48 8b 34 24 e8 2f 04 33 00 e9 4a fe ff ff e8 75 70 c4 ff 90 0f 0b 90 e9 08 fe ff ff e8 67 70 c4 ff 90 <0f> 0b 90 e9 00 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cc f7
[ 89.609218][ T5828] RSP: 0018:ffffc9000437f688 EFLAGS: 00010093
[ 89.615699][ T5828] RAX: ffffffff81daedd9 RBX: 0000000000000000 RCX: ffff88802df91e00
[ 89.623700][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 89.631806][ T5828] RBP: ffff888148c4ccf8 R08: ffffffff81dae7d5 R09: 1ffff1102918999f
[ 89.639824][ T5828] R10: dffffc0000000000 R11: ffffed10291899a0 R12: ffff888148c4cb88
[ 89.647834][ T5828] R13: ffffea0001eaffc0 R14: 0000000000000001 R15: 1ffff1102918999f
[ 89.655847][ T5828] FS: 0000555581c2c380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 89.664805][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.671404][ T5828] CR2: 0000555581c356f8 CR3: 000000007925e000 CR4: 0000000000350ef0
[ 89.679420][ T5828] Call Trace:
[ 89.682730][ T5828]
[ 89.685677][ T5828] ? __warn+0x165/0x4d0
[ 89.689863][ T5828] ? __folio_mark_dirty+0xa3a/0xe80
[ 89.695153][ T5828] ? report_bug+0x2b3/0x500
[ 89.699833][ T5828] ? __folio_mark_dirty+0xa3a/0xe80
[ 89.705086][ T5828] ? handle_bug+0x60/0x90
[ 89.709525][ T5828] ? exc_invalid_op+0x1a/0x50
[ 89.714292][ T5828] ? asm_exc_invalid_op+0x1a/0x20
[ 89.719376][ T5828] ? __folio_mark_dirty+0x435/0xe80
[ 89.724617][ T5828] ? __folio_mark_dirty+0xa39/0xe80
[ 89.729860][ T5828] ? __folio_mark_dirty+0xa3a/0xe80
[ 89.735154][ T5828] ? __folio_mark_dirty+0xa39/0xe80
[ 89.740452][ T5828] mark_buffer_dirty+0x28e/0x440
[ 89.745517][ T5828] gfs2_unpin+0x129/0xa60
[ 89.750103][ T5828] buf_lo_after_commit+0x14f/0x1a0
[ 89.755386][ T5828] ? __pfx_buf_lo_after_commit+0x10/0x10
[ 89.761090][ T5828] gfs2_log_flush+0x118f/0x2610
[ 89.766050][ T5828] ? __pfx_gfs2_log_flush+0x10/0x10
[ 89.771294][ T5828] ? do_sync+0x9c2/0xc60
[ 89.775581][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.781251][ T5828] ? do_sync+0x9c2/0xc60
[ 89.785551][ T5828] do_sync+0xa0b/0xc60
[ 89.789672][ T5828] ? __pfx_do_sync+0x10/0x10
[ 89.794320][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.799984][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0
[ 89.805229][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.810903][ T5828] gfs2_quota_sync+0x3bc/0x4a0
[ 89.815721][ T5828] gfs2_sync_fs+0x4d/0xc0
[ 89.820090][ T5828] sync_filesystem+0xef/0x230
[ 89.824806][ T5828] generic_shutdown_super+0x72/0x2d0
[ 89.830131][ T5828] kill_block_super+0x44/0x90
[ 89.834842][ T5828] deactivate_locked_super+0xc6/0x130
[ 89.840280][ T5828] cleanup_mnt+0x41f/0x4b0
[ 89.844772][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.850425][ T5828] ? lockdep_hardirqs_on+0x99/0x150
[ 89.855661][ T5828] task_work_run+0x251/0x310
[ 89.860295][ T5828] ? __pfx_task_work_run+0x10/0x10
[ 89.865441][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.871127][ T5828] ? path_umount+0x284/0xf70
[ 89.875757][ T5828] ptrace_notify+0x2d2/0x380
[ 89.880454][ T5828] ? __pfx_ptrace_notify+0x10/0x10
[ 89.885596][ T5828] ? kmem_cache_free+0x195/0x410
[ 89.890602][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.897028][ T5828] ? __x64_sys_umount+0x123/0x170
[ 89.902122][ T5828] syscall_exit_work+0xc7/0x1d0
[ 89.907064][ T5828] syscall_exit_to_user_mode+0x24a/0x340
[ 89.912753][ T5828] do_syscall_64+0x100/0x230
[ 89.917487][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.923414][ T5828] RIP: 0033:0x7f2fed703347
[ 89.927841][ T5828] Code: 0a 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 89.947595][ T5828] RSP: 002b:00007fffc3894ea8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 89.956220][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2fed703347
[ 89.964216][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3894f60
[ 89.972253][ T5828] RBP: 00007fffc3894f60 R08: 0000000000000000 R09: 0000000000000000
[ 89.980283][ T5828] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fffc3895fc0
[ 89.988299][ T5828] R13: 0000555581c2d6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 89.996365][ T5828]
[ 89.999402][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 90.006707][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor405 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[ 90.017849][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 90.027934][ T5828] Call Trace:
[ 90.031237][ T5828]
[ 90.034187][ T5828] dump_stack_lvl+0x241/0x360
[ 90.038911][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.044147][ T5828] ? __pfx__printk+0x10/0x10
[ 90.048823][ T5828] ? _printk+0xd5/0x120
[ 90.053045][ T5828] ? __init_begin+0x41000/0x41000
[ 90.058116][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.063777][ T5828] ? vscnprintf+0x5d/0x90
[ 90.068264][ T5828] panic+0x349/0x880
[ 90.072319][ T5828] ? __warn+0x174/0x4d0
[ 90.076508][ T5828] ? __pfx_panic+0x10/0x10
[ 90.080970][ T5828] __warn+0x344/0x4d0
[ 90.085018][ T5828] ? __folio_mark_dirty+0xa3a/0xe80
[ 90.090282][ T5828] report_bug+0x2b3/0x500
[ 90.094657][ T5828] ? __folio_mark_dirty+0xa3a/0xe80
[ 90.099906][ T5828] handle_bug+0x60/0x90
[ 90.104109][ T5828] exc_invalid_op+0x1a/0x50
[ 90.108705][ T5828] asm_exc_invalid_op+0x1a/0x20
[ 90.113597][ T5828] RIP: 0010:__folio_mark_dirty+0xa3a/0xe80
[ 90.119482][ T5828] Code: e8 8b 70 c4 ff 4c 89 ef 48 8b 34 24 e8 2f 04 33 00 e9 4a fe ff ff e8 75 70 c4 ff 90 0f 0b 90 e9 08 fe ff ff e8 67 70 c4 ff 90 <0f> 0b 90 e9 00 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cc f7
[ 90.139131][ T5828] RSP: 0018:ffffc9000437f688 EFLAGS: 00010093
[ 90.145337][ T5828] RAX: ffffffff81daedd9 RBX: 0000000000000000 RCX: ffff88802df91e00
[ 90.153384][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 90.161377][ T5828] RBP: ffff888148c4ccf8 R08: ffffffff81dae7d5 R09: 1ffff1102918999f
[ 90.169437][ T5828] R10: dffffc0000000000 R11: ffffed10291899a0 R12: ffff888148c4cb88
[ 90.177477][ T5828] R13: ffffea0001eaffc0 R14: 0000000000000001 R15: 1ffff1102918999f
[ 90.185627][ T5828] ? __folio_mark_dirty+0x435/0xe80
[ 90.190879][ T5828] ? __folio_mark_dirty+0xa39/0xe80
[ 90.196140][ T5828] ? __folio_mark_dirty+0xa39/0xe80
[ 90.201396][ T5828] mark_buffer_dirty+0x28e/0x440
[ 90.206430][ T5828] gfs2_unpin+0x129/0xa60
[ 90.210819][ T5828] buf_lo_after_commit+0x14f/0x1a0
[ 90.215987][ T5828] ? __pfx_buf_lo_after_commit+0x10/0x10
[ 90.221768][ T5828] gfs2_log_flush+0x118f/0x2610
[ 90.226689][ T5828] ? __pfx_gfs2_log_flush+0x10/0x10
[ 90.231930][ T5828] ? do_sync+0x9c2/0xc60
[ 90.236244][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.241900][ T5828] ? do_sync+0x9c2/0xc60
[ 90.246195][ T5828] do_sync+0xa0b/0xc60
[ 90.250307][ T5828] ? __pfx_do_sync+0x10/0x10
[ 90.254965][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.260636][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0
[ 90.265874][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.271540][ T5828] gfs2_quota_sync+0x3bc/0x4a0
[ 90.276438][ T5828] gfs2_sync_fs+0x4d/0xc0
[ 90.280853][ T5828] sync_filesystem+0xef/0x230
[ 90.285590][ T5828] generic_shutdown_super+0x72/0x2d0
[ 90.290938][ T5828] kill_block_super+0x44/0x90
[ 90.295717][ T5828] deactivate_locked_super+0xc6/0x130
[ 90.301185][ T5828] cleanup_mnt+0x41f/0x4b0
[ 90.305637][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.311279][ T5828] ? lockdep_hardirqs_on+0x99/0x150
[ 90.316550][ T5828] task_work_run+0x251/0x310
[ 90.321229][ T5828] ? __pfx_task_work_run+0x10/0x10
[ 90.326393][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.332058][ T5828] ? path_umount+0x284/0xf70
[ 90.336748][ T5828] ptrace_notify+0x2d2/0x380
[ 90.341417][ T5828] ? __pfx_ptrace_notify+0x10/0x10
[ 90.346562][ T5828] ? kmem_cache_free+0x195/0x410
[ 90.351581][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 90.357263][ T5828] ? __x64_sys_umount+0x123/0x170
[ 90.362328][ T5828] syscall_exit_work+0xc7/0x1d0
[ 90.367219][ T5828] syscall_exit_to_user_mode+0x24a/0x340
[ 90.372893][ T5828] do_syscall_64+0x100/0x230
[ 90.377518][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.383439][ T5828] RIP: 0033:0x7f2fed703347
[ 90.387859][ T5828] Code: 0a 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 90.407573][ T5828] RSP: 002b:00007fffc3894ea8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 90.416015][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2fed703347
[ 90.424000][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3894f60
[ 90.431991][ T5828] RBP: 00007fffc3894f60 R08: 0000000000000000 R09: 0000000000000000
[ 90.439994][ T5828] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fffc3895fc0
[ 90.448003][ T5828] R13: 0000555581c2d6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 90.456016][ T5828]
[ 90.459492][ T5828] Kernel Offset: disabled
[ 90.464040][ T5828] Rebooting in 86400 seconds..