./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3667129707
<...>
forked to background, child pid 4657
[ 52.637429][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.657501][ T4658] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 53.017311][ T4745] ssh-keygen (4745) used greatest stack depth: 22272 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts.
execve("./syz-executor3667129707", ["./syz-executor3667129707"], 0x7ffef08ba390 /* 10 vars */) = 0
brk(NULL) = 0x555556018000
brk(0x555556018c40) = 0x555556018c40
arch_prctl(ARCH_SET_FS, 0x555556018300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3667129707", 4096) = 28
brk(0x555556039c40) = 0x555556039c40
brk(0x55555603a000) = 0x55555603a000
mprotect(0x7fe4e14f4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560185d0) = 5082
./strace-static-x86_64: Process 5082 attached
[pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5082] setpgid(0, 0) = 0
[pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5082] write(3, "1000", 4) = 4
[pid 5082] close(3) = 0
[pid 5082] memfd_create("syzkaller", 0) = 3
[pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4d9002000
syzkaller login: [ 85.384348][ T5082] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5082 'syz-executor366'
[pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5082] munmap(0x7fe4d9002000, 16777216) = 0
[pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5082] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5082] close(3) = 0
[pid 5082] mkdir("./file1", 0777) = 0
[ 85.723663][ T5082] loop0: detected capacity change from 0 to 32768
[ 85.741816][ T5082] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 85.750654][ T5082] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 85.780769][ T5082] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 85.791361][ T898] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 85.798414][ T898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 85.903561][ T898] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 105ms
[ 85.914253][ T898] gfs2: fsid=syz:syz.0: jid=0: Done
[ 85.920667][ T5082] gfs2: fsid=syz:syz.0: first mount done, others may mount
[pid 5082] mount("/dev/loop0", "./file1", "gfs2", MS_SYNCHRONOUS|MS_SILENT|MS_LAZYTIME, "") = 0
[pid 5082] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5082] chdir("./file1") = 0
[pid 5082] ioctl(4, LOOP_CLR_FD) = 0
[pid 5082] close(4) = 0
[ 86.339291][ T5082] ------------[ cut here ]------------
[ 86.345134][ T5082] WARNING: CPU: 0 PID: 5082 at include/linux/backing-dev.h:253 __folio_mark_dirty+0xbcb/0xfa0
[ 86.355508][ T5082] Modules linked in:
[ 86.359428][ T5082] CPU: 0 PID: 5082 Comm: syz-executor366 Not tainted 6.2.0-next-20230222-syzkaller #0
[ 86.369085][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 86.379241][ T5082] RIP: 0010:__folio_mark_dirty+0xbcb/0xfa0
[ 86.385109][ T5082] Code: 78 70 48 89 44 24 10 e8 93 68 63 08 31 ff 89 c6 89 44 24 10 e8 96 85 d1 ff 8b 44 24 10 85 c0 0f 85 42 f9 ff ff e8 35 89 d1 ff <0f> 0b e9 36 f9 ff ff e8 29 89 d1 ff e8 14 e4 b9 ff 31 ff 41 89 c4
[ 86.404774][ T5082] RSP: 0018:ffffc90003c8f3b0 EFLAGS: 00010093
[ 86.410886][ T5082] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 86.418881][ T5082] RDX: ffff8880231b9d40 RSI: ffffffff81b31c6b RDI: 0000000000000005
[ 86.426874][ T5082] RBP: ffffea0001e4ab40 R08: 0000000000000005 R09: 0000000000000000
[ 86.434869][ T5082] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 86.442884][ T5082] R13: ffffffff8e78a380 R14: 0000000000000293 R15: ffff88807e304c50
[ 86.450881][ T5082] FS: 0000555556018300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 86.460204][ T5082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.466815][ T5082] CR2: 0000000020000080 CR3: 000000007af66000 CR4: 00000000003506f0
[ 86.474811][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 86.482811][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 86.490811][ T5082] Call Trace:
[ 86.494108][ T5082]
[ 86.497067][ T5082] mark_buffer_dirty+0x3e8/0x570
[ 86.502047][ T5082] gfs2_unpin+0x109/0xcf0
[ 86.506419][ T5082] buf_lo_after_commit+0x144/0x210
[ 86.511566][ T5082] ? gfs2_unpin+0xcf0/0xcf0
[ 86.516186][ T5082] gfs2_log_flush+0x140f/0x2900
[ 86.521081][ T5082] ? gfs2_ail_drain+0x630/0x630
[ 86.525962][ T5082] ? gfs2_log_commit+0xabe/0x10f0
[ 86.531016][ T5082] ? rcu_read_lock_sched_held+0x3e/0x70
[ 86.536620][ T5082] gfs2_trans_end+0x6db/0xa00
[ 86.541337][ T5082] gfs2_create_inode+0x16f4/0x3460
[ 86.546506][ T5082] ? gfs2_getattr+0x4b0/0x4b0
[ 86.551227][ T5082] ? d_add+0x3d6/0x780
[ 86.555351][ T5082] ? _raw_spin_unlock+0x28/0x40
[ 86.560231][ T5082] ? d_add+0x3d6/0x780
[ 86.564341][ T5082] ? gfs2_atomic_open+0xb3/0x250
[ 86.572009][ T5082] ? __gfs2_lookup+0x19b/0x280
[ 86.576831][ T5082] ? gfs2_lookupi+0x640/0x640
[ 86.581565][ T5082] ? from_vfsuid+0x170/0x170
[ 86.586194][ T5082] gfs2_atomic_open+0xb3/0x250
[ 86.591016][ T5082] ? __gfs2_lookup+0x280/0x280
[ 86.595819][ T5082] lookup_open.isra.0+0xcdf/0x1400
[ 86.600982][ T5082] ? link_path_walk.part.0+0xd60/0xd60
[ 86.606501][ T5082] ? path_openat+0x90f/0x2750
[ 86.611229][ T5082] ? path_openat+0x90f/0x2750
[ 86.615942][ T5082] ? lock_acquire+0x32/0xc0
[ 86.620485][ T5082] ? path_openat+0x90f/0x2750
[ 86.625214][ T5082] ? down_write_killable_nested+0x250/0x250
[ 86.631155][ T5082] ? __mnt_want_write+0x1fe/0x2e0
[ 86.636318][ T5082] path_openat+0x975/0x2750
[ 86.640880][ T5082] ? path_lookupat+0x840/0x840
[ 86.645682][ T5082] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 86.651742][ T5082] do_filp_open+0x1ba/0x410
[ 86.656306][ T5082] ? may_open_dev+0xf0/0xf0
[ 86.660860][ T5082] ? find_held_lock+0x2d/0x110
[ 86.665688][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 86.670764][ T5082] ? spin_bug+0x1c0/0x1c0
[ 86.675145][ T5082] ? _raw_spin_unlock+0x28/0x40
[ 86.680049][ T5082] ? alloc_fd+0x2e4/0x750
[ 86.684435][ T5082] do_sys_openat2+0x16d/0x4c0
[ 86.689150][ T5082] ? build_open_flags+0x6f0/0x6f0
[ 86.694215][ T5082] ? ptrace_notify+0xfe/0x140
[ 86.698952][ T5082] __x64_sys_open+0x11d/0x1c0
[ 86.703660][ T5082] ? do_sys_open+0x150/0x150
[ 86.708286][ T5082] ? _raw_spin_unlock_irq+0x2e/0x50
[ 86.713521][ T5082] ? ptrace_notify+0xfe/0x140
[ 86.718238][ T5082] do_syscall_64+0x39/0xb0
[ 86.722695][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.728621][ T5082] RIP: 0033:0x7fe4e144f1e9
[ 86.733060][ T5082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 86.752694][ T5082] RSP: 002b:00007ffec5ac6f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 86.761139][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4e144f1e9
[ 86.769132][ T5082] RDX: 0000000000000000 RSI: 000000000014d842 RDI: 0000000020000080
[ 86.777122][ T5082] RBP: 0000000000000000 R08: 0000000000000002 R09: 00007fe4e14f4ec0
[ 86.785118][ T5082] R10: 00007ffec5ac6df0 R11: 0000000000000246 R12: 00007ffec5ac6f50
[ 86.793112][ T5082] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 86.801131][ T5082]
[ 86.804176][ T5082] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.811484][ T5082] CPU: 0 PID: 5082 Comm: syz-executor366 Not tainted 6.2.0-next-20230222-syzkaller #0
[ 86.821054][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 86.831132][ T5082] Call Trace:
[ 86.834538][ T5082]
[ 86.837490][ T5082] dump_stack_lvl+0xd9/0x150
[ 86.842126][ T5082] panic+0x61b/0x6c0
[ 86.846055][ T5082] ? panic_smp_self_stop+0x90/0x90
[ 86.851217][ T5082] ? show_trace_log_lvl+0x285/0x390
[ 86.856480][ T5082] ? __folio_mark_dirty+0xbcb/0xfa0
[ 86.861725][ T5082] check_panic_on_warn+0xb1/0xc0
[ 86.866706][ T5082] __warn+0xf2/0x4f0
[ 86.870642][ T5082] ? __folio_mark_dirty+0xbcb/0xfa0
[ 86.875890][ T5082] report_bug+0x2da/0x500
[ 86.880271][ T5082] handle_bug+0x3c/0x70
[ 86.884464][ T5082] exc_invalid_op+0x18/0x50
[ 86.889008][ T5082] asm_exc_invalid_op+0x1a/0x20
[ 86.893886][ T5082] RIP: 0010:__folio_mark_dirty+0xbcb/0xfa0
[ 86.899747][ T5082] Code: 78 70 48 89 44 24 10 e8 93 68 63 08 31 ff 89 c6 89 44 24 10 e8 96 85 d1 ff 8b 44 24 10 85 c0 0f 85 42 f9 ff ff e8 35 89 d1 ff <0f> 0b e9 36 f9 ff ff e8 29 89 d1 ff e8 14 e4 b9 ff 31 ff 41 89 c4
[ 86.919394][ T5082] RSP: 0018:ffffc90003c8f3b0 EFLAGS: 00010093
[ 86.925495][ T5082] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 86.933579][ T5082] RDX: ffff8880231b9d40 RSI: ffffffff81b31c6b RDI: 0000000000000005
[ 86.941572][ T5082] RBP: ffffea0001e4ab40 R08: 0000000000000005 R09: 0000000000000000
[ 86.949576][ T5082] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 86.957568][ T5082] R13: ffffffff8e78a380 R14: 0000000000000293 R15: ffff88807e304c50
[ 86.965595][ T5082] ? __folio_mark_dirty+0xbcb/0xfa0
[ 86.970854][ T5082] mark_buffer_dirty+0x3e8/0x570
[ 86.975832][ T5082] gfs2_unpin+0x109/0xcf0
[ 86.980218][ T5082] buf_lo_after_commit+0x144/0x210
[ 86.985362][ T5082] ? gfs2_unpin+0xcf0/0xcf0
[ 86.989931][ T5082] gfs2_log_flush+0x140f/0x2900
[ 86.994826][ T5082] ? gfs2_ail_drain+0x630/0x630
[ 86.999706][ T5082] ? gfs2_log_commit+0xabe/0x10f0
[ 87.004754][ T5082] ? rcu_read_lock_sched_held+0x3e/0x70
[ 87.010347][ T5082] gfs2_trans_end+0x6db/0xa00
[ 87.015065][ T5082] gfs2_create_inode+0x16f4/0x3460
[ 87.020234][ T5082] ? gfs2_getattr+0x4b0/0x4b0
[ 87.024954][ T5082] ? d_add+0x3d6/0x780
[ 87.029084][ T5082] ? _raw_spin_unlock+0x28/0x40
[ 87.033969][ T5082] ? d_add+0x3d6/0x780
[ 87.038078][ T5082] ? gfs2_atomic_open+0xb3/0x250
[ 87.043059][ T5082] ? __gfs2_lookup+0x19b/0x280
[ 87.047876][ T5082] ? gfs2_lookupi+0x640/0x640
[ 87.052638][ T5082] ? from_vfsuid+0x170/0x170
[ 87.057265][ T5082] gfs2_atomic_open+0xb3/0x250
[ 87.062065][ T5082] ? __gfs2_lookup+0x280/0x280
[ 87.066870][ T5082] lookup_open.isra.0+0xcdf/0x1400
[ 87.072037][ T5082] ? link_path_walk.part.0+0xd60/0xd60
[ 87.077532][ T5082] ? path_openat+0x90f/0x2750
[ 87.082259][ T5082] ? path_openat+0x90f/0x2750
[ 87.086973][ T5082] ? lock_acquire+0x32/0xc0
[ 87.091505][ T5082] ? path_openat+0x90f/0x2750
[ 87.096232][ T5082] ? down_write_killable_nested+0x250/0x250
[ 87.102179][ T5082] ? __mnt_want_write+0x1fe/0x2e0
[ 87.107249][ T5082] path_openat+0x975/0x2750
[ 87.111830][ T5082] ? path_lookupat+0x840/0x840
[ 87.116734][ T5082] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 87.122760][ T5082] do_filp_open+0x1ba/0x410
[ 87.127306][ T5082] ? may_open_dev+0xf0/0xf0
[ 87.131850][ T5082] ? find_held_lock+0x2d/0x110
[ 87.136662][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 87.141723][ T5082] ? spin_bug+0x1c0/0x1c0
[ 87.146108][ T5082] ? _raw_spin_unlock+0x28/0x40
[ 87.150997][ T5082] ? alloc_fd+0x2e4/0x750
[ 87.155369][ T5082] do_sys_openat2+0x16d/0x4c0
[ 87.160074][ T5082] ? build_open_flags+0x6f0/0x6f0
[ 87.165127][ T5082] ? ptrace_notify+0xfe/0x140
[ 87.169841][ T5082] __x64_sys_open+0x11d/0x1c0
[ 87.174552][ T5082] ? do_sys_open+0x150/0x150
[ 87.179178][ T5082] ? _raw_spin_unlock_irq+0x2e/0x50
[ 87.184406][ T5082] ? ptrace_notify+0xfe/0x140
[ 87.189139][ T5082] do_syscall_64+0x39/0xb0
[ 87.193587][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 87.199506][ T5082] RIP: 0033:0x7fe4e144f1e9
[ 87.203944][ T5082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 87.223576][ T5082] RSP: 002b:00007ffec5ac6f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 87.232128][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4e144f1e9
[ 87.240133][ T5082] RDX: 0000000000000000 RSI: 000000000014d842 RDI: 0000000020000080
[ 87.248134][ T5082] RBP: 0000000000000000 R08: 0000000000000002 R09: 00007fe4e14f4ec0
[ 87.256130][ T5082] R10: 00007ffec5ac6df0 R11: 0000000000000246 R12: 00007ffec5ac6f50
[ 87.264125][ T5082] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 87.272146][ T5082]
[ 87.275436][ T5082] Kernel Offset: disabled
[ 87.279972][ T5082] Rebooting in 86400 seconds..