./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor740785656 <...> Warning: Permanently added '10.128.1.186' (ECDSA) to the list of known hosts. execve("./syz-executor740785656", ["./syz-executor740785656"], 0x7ffc81686c70 /* 10 vars */) = 0 brk(NULL) = 0x55555611f000 brk(0x55555611fc40) = 0x55555611fc40 arch_prctl(ARCH_SET_FS, 0x55555611f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor740785656", 4096) = 27 brk(0x555556140c40) = 0x555556140c40 brk(0x555556141000) = 0x555556141000 mprotect(0x7f7d4692a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7d3e45f000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f7d3e45f000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 48.974060][ T5069] loop0: detected capacity change from 0 to 32768 [ 48.986414][ T5069] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 48.994810][ T5069] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.007353][ T5069] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 49.016554][ T5069] general protection fault, probably for non-canonical address 0xdffffc0000000097: 0000 [#1] PREEMPT SMP KASAN [ 49.028266][ T5069] KASAN: null-ptr-deref in range [0x00000000000004b8-0x00000000000004bf] [ 49.036655][ T5069] CPU: 0 PID: 5069 Comm: syz-executor740 Not tainted 6.1.0-syzkaller-14321-g0a924817d2ed #0 [ 49.046692][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 49.056911][ T5069] RIP: 0010:gfs2_rindex_update+0xaa/0x3a0 [ 49.062641][ T5069] Code: d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 9c 09 21 fe 48 8b 03 48 89 44 24 30 48 8d 98 b8 04 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 77 09 21 fe 48 8b 03 48 89 44 24 [ 49.082522][ T5069] RSP: 0018:ffffc90003cdf1e0 EFLAGS: 00010202 [ 49.088573][ T5069] RAX: 0000000000000097 RBX: 00000000000004b8 RCX: ffff88801cac57c0 [ 49.096549][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807db74000 [ 49.104497][ T5069] RBP: ffffc90003cdf2f0 R08: ffffffff83b6f150 R09: ffffed100e631e75 [ 49.112449][ T5069] R10: ffffed100e631e75 R11: 1ffff1100e631e74 R12: dffffc0000000000 [ 49.120413][ T5069] R13: 1ffff9200079be44 R14: 0000000000000000 R15: ffff88807db74000 [ 49.128380][ T5069] FS: 000055555611f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 49.137316][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.143903][ T5069] CR2: 00007fff25a94000 CR3: 00000000794e7000 CR4: 00000000003506f0 [ 49.151869][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.159827][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.167785][ T5069] Call Trace: [ 49.171066][ T5069] [ 49.173997][ T5069] ? gfs2_meta_buffer+0x218/0x3a0 [ 49.179059][ T5069] ? gfs2_ri_total+0x2a0/0x2a0 [ 49.183816][ T5069] ? gfs2_journal_wipe+0xa40/0xa40 [ 49.188917][ T5069] ? __wait_on_bit+0x158/0x170 [ 49.193675][ T5069] ? punch_hole+0x682/0x3a10 [ 49.198263][ T5069] punch_hole+0xef3/0x3a10 [ 49.202677][ T5069] ? bit_wait+0xc0/0xc0 [ 49.206837][ T5069] ? gfs2_meta_new+0x150/0x150 [ 49.211592][ T5069] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.217564][ T5069] ? gfs2_truncatei_resume+0x60/0x60 [ 49.222844][ T5069] ? gfs2_meta_buffer+0x218/0x3a0 [ 49.227862][ T5069] ? read_lock_is_recursive+0x10/0x10 [ 49.233228][ T5069] ? inode_dio_wait+0x2dc/0x390 [ 49.238073][ T5069] ? gfs2_inode_metasync+0xf0/0xf0 [ 49.243178][ T5069] ? _raw_spin_unlock+0x24/0x40 [ 49.248075][ T5069] ? gfs2_glock_nq+0xdaa/0x1700 [ 49.253023][ T5069] ? do_raw_spin_unlock+0x134/0x8a0 [ 49.258222][ T5069] gfs2_truncatei_resume+0x38/0x60 [ 49.263332][ T5069] gfs2_glock_wait+0x1d9/0x2a0 [ 49.268087][ T5069] init_journal+0x1631/0x22c0 [ 49.272755][ T5069] ? vsnprintf+0x1cb0/0x1cb0 [ 49.277348][ T5069] ? init_inodes+0xdc/0x340 [ 49.281842][ T5069] ? _compound_head+0x130/0x130 [ 49.286773][ T5069] ? ptr_to_hashval+0x70/0x70 [ 49.291441][ T5069] ? init_sb+0xb7b/0x12b0 [ 49.295766][ T5069] ? snprintf+0xc0/0x110 [ 49.299999][ T5069] ? init_inodes+0xdc/0x340 [ 49.304503][ T5069] ? vscnprintf+0x80/0x80 [ 49.308834][ T5069] init_inodes+0xdc/0x340 [ 49.313246][ T5069] gfs2_fill_super+0x1bb2/0x2700 [ 49.318288][ T5069] ? gfs2_reconfigure+0xce0/0xce0 [ 49.323303][ T5069] ? ptr_to_hashval+0x70/0x70 [ 49.327972][ T5069] ? up_write+0x19a/0x580 [ 49.332296][ T5069] ? init_locking+0xbd/0x220 [ 49.336882][ T5069] ? vscnprintf+0x80/0x80 [ 49.341199][ T5069] ? set_blocksize+0x1ec/0x390 [ 49.346040][ T5069] ? sb_set_blocksize+0x95/0xf0 [ 49.350881][ T5069] get_tree_bdev+0x400/0x620 [ 49.355474][ T5069] ? gfs2_reconfigure+0xce0/0xce0 [ 49.360490][ T5069] gfs2_get_tree+0x50/0x210 [ 49.364986][ T5069] ? bpf_lsm_capable+0x5/0x10 [ 49.369658][ T5069] vfs_get_tree+0x88/0x270 [ 49.374129][ T5069] do_new_mount+0x289/0xad0 [ 49.378652][ T5069] ? do_move_mount_old+0x150/0x150 [ 49.383764][ T5069] ? user_path_at_empty+0x149/0x1a0 [ 49.388959][ T5069] __se_sys_mount+0x2d3/0x3c0 [ 49.393625][ T5069] ? __x64_sys_mount+0xc0/0xc0 [ 49.398378][ T5069] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 49.404439][ T5069] ? __x64_sys_mount+0x1c/0xc0 [ 49.409291][ T5069] do_syscall_64+0x3d/0xb0 [ 49.413814][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.419724][ T5069] RIP: 0033:0x7f7d468acaea [ 49.424137][ T5069] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.443734][ T5069] RSP: 002b:00007fff25a93188 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 49.452224][ T5069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d468acaea [ 49.460184][ T5069] RDX: 00000000200124c0 RSI: 0000000020000040 RDI: 00007fff25a931a0 [ 49.468155][ T5069] RBP: 00007fff25a931a0 R08: 00007fff25a931e0 R09: 000000000001254b [ 49.476112][ T5069] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000004 [ 49.484071][ T5069] R13: 000055555611f2c0 R14: 0000000000000000 R15: 00007fff25a931e0 [ 49.492037][ T5069] [ 49.495043][ T5069] Modules linked in: [ 49.499138][ T5069] ---[ end trace 0000000000000000 ]--- [ 49.504657][ T5069] RIP: 0010:gfs2_rindex_update+0xaa/0x3a0 [ 49.510380][ T5069] Code: d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 9c 09 21 fe 48 8b 03 48 89 44 24 30 48 8d 98 b8 04 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 77 09 21 fe 48 8b 03 48 89 44 24 [ 49.530035][ T5069] RSP: 0018:ffffc90003cdf1e0 EFLAGS: 00010202 [ 49.536123][ T5069] RAX: 0000000000000097 RBX: 00000000000004b8 RCX: ffff88801cac57c0 [ 49.544079][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807db74000 [ 49.552159][ T5069] RBP: ffffc90003cdf2f0 R08: ffffffff83b6f150 R09: ffffed100e631e75 [ 49.560152][ T5069] R10: ffffed100e631e75 R11: 1ffff1100e631e74 R12: dffffc0000000000 [ 49.568157][ T5069] R13: 1ffff9200079be44 R14: 0000000000000000 R15: ffff88807db74000 [ 49.576164][ T5069] FS: 000055555611f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 49.585127][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.591791][ T5069] CR2: 00007fff25a94000 CR3: 00000000794e7000 CR4: 00000000003506f0 [ 49.599782][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.608039][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.616076][ T5069] Kernel panic - not syncing: Fatal exception [ 49.622322][ T5069] Kernel Offset: disabled [ 49.626731][ T5069] Rebooting in 86400 seconds..