./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3284054756
<...>
DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b
forked to background, child pid 3210
[ 30.137645][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.163703][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.87' (ECDSA) to the list of known hosts.
execve("./syz-executor3284054756", ["./syz-executor3284054756"], 0x7ffc4d6feb30 /* 10 vars */) = 0
brk(NULL) = 0x555556210000
brk(0x555556210c40) = 0x555556210c40
arch_prctl(ARCH_SET_FS, 0x555556210300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3284054756", 4096) = 28
brk(0x555556231c40) = 0x555556231c40
brk(0x555556232000) = 0x555556232000
mprotect(0x7f27f5b60000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27ed695000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f27ed695000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 60.036160][ T3635] loop0: detected capacity change from 0 to 32768
[ 60.052587][ T3635] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 60.060881][ T3635] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 60.073599][ T3635] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 60.083193][ T150] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 60.090016][ T150] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 60.121808][ T150] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[ 60.129798][ T150] gfs2: fsid=syz:syz.0: jid=0: Done
mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_REC|MS_RELATIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open(".", O_RDONLY) = 4
[ 60.135561][ T3635] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 60.158277][ T3635] ------------[ cut here ]------------
[ 60.163899][ T3635] WARNING: CPU: 0 PID: 3635 at fs/gfs2/rgrp.c:2628 gfs2_check_blk_type+0x43d/0x660
[ 60.173419][ T3635] Modules linked in:
[ 60.177335][ T3635] CPU: 0 PID: 3635 Comm: syz-executor328 Not tainted 6.1.0-rc8-syzkaller-00164-g4cee37b3a4e6 #0
[ 60.187822][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.198112][ T3635] RIP: 0010:gfs2_check_blk_type+0x43d/0x660
[ 60.204088][ T3635] Code: 85 c6 01 00 00 8b 1b 89 df 44 89 f6 e8 1c ae cd fd 4c 89 74 24 10 44 39 f3 76 21 e8 6d ac cd fd 45 31 ed eb 6d e8 63 ac cd fd <0f> 0b 41 bf f9 ff ff ff 48 8b 5c 24 18 e9 41 01 00 00 e8 4c ac cd
[ 60.223733][ T3635] RSP: 0018:ffffc90003c0f8c0 EFLAGS: 00010293
[ 60.229804][ T3635] RAX: ffffffff83bcf389 RBX: 0000000000000012 RCX: ffff88802243ba80
[ 60.237884][ T3635] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000013
[ 60.245893][ T3635] RBP: ffffc90003c0f9d0 R08: ffffffff83bcf37f R09: ffffed100e7a15dd
[ 60.253890][ T3635] R10: ffffed100e7a15dd R11: 1ffff1100e7a15dc R12: 1ffff1100ea34806
[ 60.261886][ T3635] R13: ffff8880751a4000 R14: 1ffff1100ea34805 R15: 0000000000000013
[ 60.269846][ T3635] FS: 0000555556210300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 60.278807][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.285414][ T3635] CR2: 000055bda9265e90 CR3: 000000001d27a000 CR4: 00000000003506f0
[ 60.293416][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.301437][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.309420][ T3635] Call Trace:
[ 60.312776][ T3635]
[ 60.315729][ T3635] ? gfs2_free_di+0x3b0/0x3b0
[ 60.320501][ T3635] ? gfs2_inode_lookup+0xb66/0xd90
[ 60.325668][ T3635] ? gfs2_glock_wait+0x20c/0x2a0
[ 60.330616][ T3635] gfs2_inode_lookup+0xb66/0xd90
[ 60.335603][ T3635] ? set_meta_super+0x10/0x10
[ 60.340283][ T3635] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 60.346233][ T3635] ? _raw_spin_unlock+0x40/0x40
[ 60.351099][ T3635] ? gfs2_lookup_by_inum+0x4d/0xe0
[ 60.356264][ T3635] gfs2_lookup_by_inum+0x4d/0xe0
[ 60.361208][ T3635] gfs2_fh_to_dentry+0x12d/0x1f0
[ 60.366202][ T3635] exportfs_decode_fh_raw+0x115/0x600
[ 60.371648][ T3635] ? do_handle_open+0x950/0x950
[ 60.376530][ T3635] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 60.382540][ T3635] ? exportfs_encode_fh+0x420/0x420
[ 60.387747][ T3635] ? __might_fault+0xb6/0x110
[ 60.392474][ T3635] ? __might_sleep+0xc0/0xc0
[ 60.397080][ T3635] ? __might_fault+0xb6/0x110
[ 60.401831][ T3635] ? __lock_acquire+0x1f60/0x1f60
[ 60.406859][ T3635] ? rcu_read_lock_sched_held+0x87/0x110
[ 60.412542][ T3635] ? do_handle_open+0x950/0x950
[ 60.417397][ T3635] exportfs_decode_fh+0x38/0x70
[ 60.422313][ T3635] do_handle_open+0x485/0x950
[ 60.426998][ T3635] ? __x64_compat_sys_open_by_handle_at+0x80/0x80
[ 60.433473][ T3635] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 60.439472][ T3635] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 60.445536][ T3635] do_syscall_64+0x3d/0xb0
[ 60.449959][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.460664][ T3635] RIP: 0033:0x7f27f5ae1799
[ 60.465799][ T3635] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.485672][ T3635] RSP: 002b:00007ffd97d6fbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 60.494197][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27f5ae1799
[ 60.502260][ T3635] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 60.510220][ T3635] RBP: 00007f27f5aa1030 R08: 0000000000000000 R09: 0000000000000000
[ 60.518250][ T3635] R10: 00000000000124d6 R11: 0000000000000246 R12: 00007f27f5aa10c0
[ 60.526435][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.534464][ T3635]
[ 60.537514][ T3635] Kernel panic - not syncing: panic_on_warn set ...
[ 60.544081][ T3635] CPU: 0 PID: 3635 Comm: syz-executor328 Not tainted 6.1.0-rc8-syzkaller-00164-g4cee37b3a4e6 #0
[ 60.554473][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.564515][ T3635] Call Trace:
[ 60.567779][ T3635]
[ 60.570695][ T3635] dump_stack_lvl+0x1b1/0x28e
[ 60.575360][ T3635] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 60.580802][ T3635] ? panic+0x710/0x710
[ 60.584861][ T3635] ? vscnprintf+0x59/0x80
[ 60.589177][ T3635] ? gfs2_check_blk_type+0x400/0x660
[ 60.594453][ T3635] panic+0x2d6/0x710
[ 60.598347][ T3635] ? __warn+0x131/0x220
[ 60.602502][ T3635] ? memcpy_page_flushcache+0xfc/0xfc
[ 60.607889][ T3635] ? gfs2_check_blk_type+0x43d/0x660
[ 60.613194][ T3635] __warn+0x1fa/0x220
[ 60.617172][ T3635] ? gfs2_check_blk_type+0x43d/0x660
[ 60.622449][ T3635] report_bug+0x1b3/0x2d0
[ 60.626803][ T3635] handle_bug+0x3d/0x70
[ 60.630950][ T3635] exc_invalid_op+0x16/0x40
[ 60.635444][ T3635] asm_exc_invalid_op+0x16/0x20
[ 60.640292][ T3635] RIP: 0010:gfs2_check_blk_type+0x43d/0x660
[ 60.646178][ T3635] Code: 85 c6 01 00 00 8b 1b 89 df 44 89 f6 e8 1c ae cd fd 4c 89 74 24 10 44 39 f3 76 21 e8 6d ac cd fd 45 31 ed eb 6d e8 63 ac cd fd <0f> 0b 41 bf f9 ff ff ff 48 8b 5c 24 18 e9 41 01 00 00 e8 4c ac cd
[ 60.665773][ T3635] RSP: 0018:ffffc90003c0f8c0 EFLAGS: 00010293
[ 60.671831][ T3635] RAX: ffffffff83bcf389 RBX: 0000000000000012 RCX: ffff88802243ba80
[ 60.679794][ T3635] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000013
[ 60.687760][ T3635] RBP: ffffc90003c0f9d0 R08: ffffffff83bcf37f R09: ffffed100e7a15dd
[ 60.695722][ T3635] R10: ffffed100e7a15dd R11: 1ffff1100e7a15dc R12: 1ffff1100ea34806
[ 60.703686][ T3635] R13: ffff8880751a4000 R14: 1ffff1100ea34805 R15: 0000000000000013
[ 60.711651][ T3635] ? gfs2_check_blk_type+0x37f/0x660
[ 60.716928][ T3635] ? gfs2_check_blk_type+0x389/0x660
[ 60.722215][ T3635] ? gfs2_free_di+0x3b0/0x3b0
[ 60.726885][ T3635] ? gfs2_inode_lookup+0xb66/0xd90
[ 60.731992][ T3635] ? gfs2_glock_wait+0x20c/0x2a0
[ 60.736922][ T3635] gfs2_inode_lookup+0xb66/0xd90
[ 60.741857][ T3635] ? set_meta_super+0x10/0x10
[ 60.746524][ T3635] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 60.752502][ T3635] ? _raw_spin_unlock+0x40/0x40
[ 60.757350][ T3635] ? gfs2_lookup_by_inum+0x4d/0xe0
[ 60.762463][ T3635] gfs2_lookup_by_inum+0x4d/0xe0
[ 60.767397][ T3635] gfs2_fh_to_dentry+0x12d/0x1f0
[ 60.772327][ T3635] exportfs_decode_fh_raw+0x115/0x600
[ 60.777697][ T3635] ? do_handle_open+0x950/0x950
[ 60.782546][ T3635] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 60.788778][ T3635] ? exportfs_encode_fh+0x420/0x420
[ 60.793979][ T3635] ? __might_fault+0xb6/0x110
[ 60.798655][ T3635] ? __might_sleep+0xc0/0xc0
[ 60.803260][ T3635] ? __might_fault+0xb6/0x110
[ 60.807933][ T3635] ? __lock_acquire+0x1f60/0x1f60
[ 60.812945][ T3635] ? rcu_read_lock_sched_held+0x87/0x110
[ 60.818581][ T3635] ? do_handle_open+0x950/0x950
[ 60.823423][ T3635] exportfs_decode_fh+0x38/0x70
[ 60.828272][ T3635] do_handle_open+0x485/0x950
[ 60.833031][ T3635] ? __x64_compat_sys_open_by_handle_at+0x80/0x80
[ 60.839439][ T3635] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 60.845412][ T3635] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 60.851396][ T3635] do_syscall_64+0x3d/0xb0
[ 60.855830][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.861717][ T3635] RIP: 0033:0x7f27f5ae1799
[ 60.866132][ T3635] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.885733][ T3635] RSP: 002b:00007ffd97d6fbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 60.894136][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27f5ae1799
[ 60.902185][ T3635] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 60.910326][ T3635] RBP: 00007f27f5aa1030 R08: 0000000000000000 R09: 0000000000000000
[ 60.918287][ T3635] R10: 00000000000124d6 R11: 0000000000000246 R12: 00007f27f5aa10c0
[ 60.926249][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.934221][ T3635]
[ 60.937397][ T3635] Kernel Offset: disabled
[ 60.941777][ T3635] Rebooting in 86400 seconds..