./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2870121566
<...>
Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts.
execve("./syz-executor2870121566", ["./syz-executor2870121566"], 0x7fff89332490 /* 10 vars */) = 0
brk(NULL) = 0x55555b904000
brk(0x55555b904d00) = 0x55555b904d00
arch_prctl(ARCH_SET_FS, 0x55555b904380) = 0
set_tid_address(0x55555b904650) = 5239
set_robust_list(0x55555b904660, 24) = 0
rseq(0x55555b904ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2870121566", 4096) = 28
getrandom("\xc6\x2e\xfc\xb2\xfe\xca\x90\x61", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555b904d00
brk(0x55555b925d00) = 0x55555b925d00
brk(0x55555b926000) = 0x55555b926000
mprotect(0x7f3b20c30000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.RviJXQ", 0700) = 0
chmod("./syzkaller.RviJXQ", 0777) = 0
chdir("./syzkaller.RviJXQ") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5240 attached
, child_tidptr=0x55555b904650) = 5240
[pid 5240] set_robust_list(0x55555b904660, 24) = 0
[pid 5240] chdir("./0") = 0
[pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5240] setpgid(0, 0) = 0
[pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5240] write(3, "1000", 4) = 4
[pid 5240] close(3) = 0
[pid 5240] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5240] write(1, "executing program\n", 18) = 18
[pid 5240] memfd_create("syzkaller", 0) = 3
[pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3b18600000
[pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5240] munmap(0x7f3b18600000, 138412032) = 0
[pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5240] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5240] close(3) = 0
[pid 5240] close(4) = 0
[pid 5240] mkdir("./file0", 0777) = 0
[ 118.415955][ T5240] loop0: detected capacity change from 0 to 32768
[ 118.457846][ T5240] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 118.466245][ T5240] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 118.497796][ T5240] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 118.508312][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 118.515187][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 118.559470][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms
[ 118.567903][ T8] gfs2: fsid=syz:syz.0: jid=0: Done
[ 118.573555][ T5240] gfs2: fsid=syz:syz.0: first mount done, others may mount
[pid 5240] mount("/dev/loop0", "./file0", "gfs2", 0, "quota,lockproto=lock_nolock,statfs_quantum=0x0ffff,") = 0
[pid 5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5240] chdir("./file0") = 0
[pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5240] exit_group(0) = ?
[pid 5240] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=53 /* 0.53 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55555b9056f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 118.843904][ T5240] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 118.899474][ T5239] ------------[ cut here ]------------
[ 118.905177][ T5239] WARNING: CPU: 1 PID: 5239 at include/linux/backing-dev.h:254 __folio_mark_dirty+0x879/0xe20
[ 118.915449][ T5239] Modules linked in:
[ 118.919367][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz-executor287 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0
[ 118.930588][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 118.940678][ T5239] RIP: 0010:__folio_mark_dirty+0x879/0xe20
[ 118.946583][ T5239] Code: f3 8b e8 5a 35 88 ff 90 0f 0b 90 90 e9 81 f9 ff ff e8 ab 11 c6 ff 4c 89 f7 48 8b 34 24 e8 af 42 33 00 eb 87 e8 98 11 c6 ff 90 <0f> 0b 90 e9 cd fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 95 f9
[ 118.966329][ T5239] RSP: 0018:ffffc90003abf6b0 EFLAGS: 00010093
[ 118.972407][ T5239] RAX: ffffffff81cd7a48 RBX: 0000000000000000 RCX: ffff888029bd8000
[ 118.980382][ T5239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 118.988363][ T5239] RBP: ffff88801d894cf8 R08: ffffffff81cd7611 R09: 1ffff11003b1299f
[ 118.996359][ T5239] R10: dffffc0000000000 R11: ffffed1003b129a0 R12: 0000000000000001
[ 119.004350][ T5239] R13: ffff88801d894b88 R14: ffffea0001ed37c0 R15: 1ffff11003b1299f
[ 119.012340][ T5239] FS: 000055555b904380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 119.021271][ T5239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.027852][ T5239] CR2: 000000000045bdd0 CR3: 0000000079766000 CR4: 00000000003506f0
[ 119.035997][ T5239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 119.044043][ T5239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 119.052031][ T5239] Call Trace:
[ 119.055314][ T5239]
[ 119.058252][ T5239] ? __warn+0x163/0x4e0
[ 119.062443][ T5239] ? __folio_mark_dirty+0x879/0xe20
[ 119.067745][ T5239] ? report_bug+0x2b3/0x500
[ 119.072286][ T5239] ? __folio_mark_dirty+0x879/0xe20
[ 119.077510][ T5239] ? handle_bug+0x3e/0x70
[ 119.081867][ T5239] ? exc_invalid_op+0x1a/0x50
[ 119.086550][ T5239] ? asm_exc_invalid_op+0x1a/0x20
[ 119.091581][ T5239] ? __folio_mark_dirty+0x441/0xe20
[ 119.096780][ T5239] ? __folio_mark_dirty+0x878/0xe20
[ 119.101981][ T5239] ? __folio_mark_dirty+0x879/0xe20
[ 119.107210][ T5239] mark_buffer_dirty+0x2a4/0x520
[ 119.112176][ T5239] gfs2_unpin+0x129/0xa60
[ 119.116549][ T5239] buf_lo_after_commit+0x14f/0x1a0
[ 119.121688][ T5239] ? __pfx_buf_lo_after_commit+0x10/0x10
[ 119.127335][ T5239] gfs2_log_flush+0x118d/0x2610
[ 119.132206][ T5239] ? __pfx_gfs2_log_flush+0x10/0x10
[ 119.137413][ T5239] ? kfree+0x149/0x360
[ 119.141524][ T5239] do_sync+0xa0b/0xc60
[ 119.145605][ T5239] ? __pfx_do_sync+0x10/0x10
[ 119.150330][ T5239] ? do_raw_spin_unlock+0x13c/0x8b0
[ 119.155648][ T5239] gfs2_quota_sync+0x3bc/0x4a0
[ 119.160442][ T5239] gfs2_sync_fs+0x4d/0xc0
[ 119.164785][ T5239] sync_filesystem+0xed/0x230
[ 119.169478][ T5239] generic_shutdown_super+0x72/0x2d0
[ 119.174858][ T5239] kill_block_super+0x44/0x90
[ 119.179543][ T5239] deactivate_locked_super+0xc4/0x130
[ 119.184920][ T5239] cleanup_mnt+0x41f/0x4b0
[ 119.189356][ T5239] ? lockdep_hardirqs_on+0x99/0x150
[ 119.194581][ T5239] task_work_run+0x24f/0x310
[ 119.199181][ T5239] ? __pfx_task_work_run+0x10/0x10
[ 119.204295][ T5239] ? path_umount+0x284/0xf70
[ 119.208909][ T5239] ptrace_notify+0x2d2/0x380
[ 119.213505][ T5239] ? __pfx_path_umount+0x10/0x10
[ 119.218448][ T5239] ? __pfx_ptrace_notify+0x10/0x10
[ 119.223578][ T5239] ? __x64_sys_umount+0x123/0x170
[ 119.228712][ T5239] ? __pfx___x64_sys_umount+0x10/0x10
[ 119.234110][ T5239] syscall_exit_work+0xc6/0x190
[ 119.239036][ T5239] syscall_exit_to_user_mode+0x279/0x370
[ 119.244680][ T5239] do_syscall_64+0x100/0x230
[ 119.249271][ T5239] ? clear_bhb_loop+0x35/0x90
[ 119.253950][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.259868][ T5239] RIP: 0033:0x7f3b20b85307
[ 119.264554][ T5239] Code: 0a 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 119.284182][ T5239] RSP: 002b:00007ffc2e98a558 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 119.292617][ T5239] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3b20b85307
[ 119.300590][ T5239] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e98a610
[ 119.308582][ T5239] RBP: 00007ffc2e98a610 R08: 0000000000000000 R09: 0000000000000000
[ 119.316574][ T5239] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc2e98b670
[ 119.324553][ T5239] R13: 000055555b9056c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 119.332573][ T5239]
[ 119.335596][ T5239] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 119.342871][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz-executor287 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0
[ 119.353973][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 119.364035][ T5239] Call Trace:
[ 119.367319][ T5239]
[ 119.370273][ T5239] dump_stack_lvl+0x241/0x360
[ 119.374982][ T5239] ? __pfx_dump_stack_lvl+0x10/0x10
[ 119.380200][ T5239] ? __pfx__printk+0x10/0x10
[ 119.384802][ T5239] ? _printk+0xd5/0x120
[ 119.388971][ T5239] ? vscnprintf+0x5d/0x90
[ 119.393397][ T5239] panic+0x349/0x860
[ 119.397307][ T5239] ? __warn+0x172/0x4e0
[ 119.401463][ T5239] ? __pfx_panic+0x10/0x10
[ 119.405910][ T5239] ? show_trace_log_lvl+0x4e6/0x520
[ 119.411152][ T5239] __warn+0x346/0x4e0
[ 119.415138][ T5239] ? __folio_mark_dirty+0x879/0xe20
[ 119.420345][ T5239] report_bug+0x2b3/0x500
[ 119.424769][ T5239] ? __folio_mark_dirty+0x879/0xe20
[ 119.429972][ T5239] handle_bug+0x3e/0x70
[ 119.434130][ T5239] exc_invalid_op+0x1a/0x50
[ 119.438636][ T5239] asm_exc_invalid_op+0x1a/0x20
[ 119.443488][ T5239] RIP: 0010:__folio_mark_dirty+0x879/0xe20
[ 119.449300][ T5239] Code: f3 8b e8 5a 35 88 ff 90 0f 0b 90 90 e9 81 f9 ff ff e8 ab 11 c6 ff 4c 89 f7 48 8b 34 24 e8 af 42 33 00 eb 87 e8 98 11 c6 ff 90 <0f> 0b 90 e9 cd fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 95 f9
[ 119.469115][ T5239] RSP: 0018:ffffc90003abf6b0 EFLAGS: 00010093
[ 119.475189][ T5239] RAX: ffffffff81cd7a48 RBX: 0000000000000000 RCX: ffff888029bd8000
[ 119.483161][ T5239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 119.491147][ T5239] RBP: ffff88801d894cf8 R08: ffffffff81cd7611 R09: 1ffff11003b1299f
[ 119.499134][ T5239] R10: dffffc0000000000 R11: ffffed1003b129a0 R12: 0000000000000001
[ 119.507200][ T5239] R13: ffff88801d894b88 R14: ffffea0001ed37c0 R15: 1ffff11003b1299f
[ 119.515213][ T5239] ? __folio_mark_dirty+0x441/0xe20
[ 119.520430][ T5239] ? __folio_mark_dirty+0x878/0xe20
[ 119.525681][ T5239] mark_buffer_dirty+0x2a4/0x520
[ 119.530638][ T5239] gfs2_unpin+0x129/0xa60
[ 119.534987][ T5239] buf_lo_after_commit+0x14f/0x1a0
[ 119.540108][ T5239] ? __pfx_buf_lo_after_commit+0x10/0x10
[ 119.545751][ T5239] gfs2_log_flush+0x118d/0x2610
[ 119.550621][ T5239] ? __pfx_gfs2_log_flush+0x10/0x10
[ 119.555823][ T5239] ? kfree+0x149/0x360
[ 119.559903][ T5239] do_sync+0xa0b/0xc60
[ 119.563991][ T5239] ? __pfx_do_sync+0x10/0x10
[ 119.568689][ T5239] ? do_raw_spin_unlock+0x13c/0x8b0
[ 119.573898][ T5239] gfs2_quota_sync+0x3bc/0x4a0
[ 119.578677][ T5239] gfs2_sync_fs+0x4d/0xc0
[ 119.583035][ T5239] sync_filesystem+0xed/0x230
[ 119.587755][ T5239] generic_shutdown_super+0x72/0x2d0
[ 119.593043][ T5239] kill_block_super+0x44/0x90
[ 119.597723][ T5239] deactivate_locked_super+0xc4/0x130
[ 119.603098][ T5239] cleanup_mnt+0x41f/0x4b0
[ 119.607518][ T5239] ? lockdep_hardirqs_on+0x99/0x150
[ 119.612729][ T5239] task_work_run+0x24f/0x310
[ 119.617348][ T5239] ? __pfx_task_work_run+0x10/0x10
[ 119.622464][ T5239] ? path_umount+0x284/0xf70
[ 119.627063][ T5239] ptrace_notify+0x2d2/0x380
[ 119.631689][ T5239] ? __pfx_path_umount+0x10/0x10
[ 119.636660][ T5239] ? __pfx_ptrace_notify+0x10/0x10
[ 119.641801][ T5239] ? __x64_sys_umount+0x123/0x170
[ 119.646825][ T5239] ? __pfx___x64_sys_umount+0x10/0x10
[ 119.652206][ T5239] syscall_exit_work+0xc6/0x190
[ 119.657078][ T5239] syscall_exit_to_user_mode+0x279/0x370
[ 119.662755][ T5239] do_syscall_64+0x100/0x230
[ 119.667348][ T5239] ? clear_bhb_loop+0x35/0x90
[ 119.672030][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.677946][ T5239] RIP: 0033:0x7f3b20b85307
[ 119.682359][ T5239] Code: 0a 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 119.701963][ T5239] RSP: 002b:00007ffc2e98a558 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 119.710382][ T5239] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3b20b85307
[ 119.718454][ T5239] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e98a610
[ 119.726423][ T5239] RBP: 00007ffc2e98a610 R08: 0000000000000000 R09: 0000000000000000
[ 119.734391][ T5239] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc2e98b670
[ 119.742362][ T5239] R13: 000055555b9056c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 119.750346][ T5239]
[ 119.753699][ T5239] Kernel Offset: disabled
[ 119.758192][ T5239] Rebooting in 86400 seconds..