[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.779537] can: request_module (can-proto-0) failed. [ 44.788328] can: request_module (can-proto-0) failed. [ 45.630774] IPVS: ftp: loaded support on port[0] = 21 [ 46.258085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.326744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.609095] tipc: TX() has been purged, node left! [ 48.046240] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.215' (ECDSA) to the list of known hosts. 2019/12/11 09:24:07 parsed 1 programs 2019/12/11 09:24:07 executed programs: 0 [ 53.331663] IPVS: ftp: loaded support on port[0] = 21 [ 53.393934] IPVS: ftp: loaded support on port[0] = 21 [ 53.412059] IPVS: ftp: loaded support on port[0] = 21 [ 53.418182] IPVS: ftp: loaded support on port[0] = 21 [ 53.419444] IPVS: ftp: loaded support on port[0] = 21 [ 53.428650] IPVS: ftp: loaded support on port[0] = 21 [ 53.441505] gfs2: fsid=loop4: Trying to join cluster "lock_nolock", "loop4" [ 53.448786] gfs2: fsid=loop4: Now mounting FS... [ 53.466493] gfs2: fsid=loop4.0: journal 0 mapped with 1 extents in 0ms [ 53.473632] gfs2: fsid=loop4.0: jid=0, already locked for use [ 53.479717] gfs2: fsid=loop4.0: jid=0: Looking at journal... [ 53.537938] gfs2: fsid=loop4.0: jid=0: Journal head lookup took 58ms [ 53.545200] gfs2: fsid=loop4.0: jid=0: Done [ 53.550230] gfs2: fsid=loop4.0: first mount done, others may mount [ 53.674269] gfs2: fsid=loop4.0: found 1 quota changes [ 53.728734] gfs2: fsid=loop1: Trying to join cluster "lock_nolock", "loop1" [ 53.729291] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 53.735929] gfs2: fsid=loop1: Now mounting FS... [ 53.744368] gfs2: fsid=loop1.0: journal 0 mapped with 1 extents in 0ms [ 53.747985] gfs2: fsid=loop0: Now mounting FS... [ 53.754904] gfs2: fsid=loop1.0: jid=0, already locked for use [ 53.762928] gfs2: fsid=loop3: Trying to join cluster "lock_nolock", "loop3" [ 53.765375] gfs2: fsid=loop1.0: jid=0: Looking at journal... RESULT: signal 0, coverage 0 errno 0 [ 53.778693] gfs2: fsid=loop3: Now mounting FS... [ 53.787819] gfs2: fsid=loop0.0: journal 0 mapped with 1 extents in 0ms [ 53.815143] ------------[ cut here ]------------ [ 53.820079] WARNING: CPU: 1 PID: 4430 at include/linux/backing-dev.h:348 account_page_dirtied+0x65a/0x870 [ 53.829781] Kernel panic - not syncing: panic_on_warn set ... [ 53.836197] CPU: 1 PID: 4430 Comm: syz-executor4 Not tainted 5.5.0-rc1-syzkaller #0 [ 53.837279] gfs2: fsid=loop0.0: jid=0, already locked for use [ 53.843994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.844026] Call Trace: [ 53.844039] dump_stack+0x12f/0x187 [ 53.844048] ? account_page_dirtied+0x65a/0x870 [ 53.849944] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 53.859263] panic+0x22a/0x4f5 [ 53.859269] ? add_taint.cold.7+0x11/0x11 [ 53.859282] __warn.cold.10+0x25/0x28 [ 53.859288] ? account_page_dirtied+0x65a/0x870 [ 53.859294] report_bug+0x1b0/0x270 [ 53.859302] do_error_trap+0x11b/0x200 [ 53.870019] gfs2: fsid=loop1.0: jid=0: Journal head lookup took 104ms [ 53.870149] do_invalid_op+0x36/0x40 [ 53.876190] gfs2: fsid=loop1.0: jid=0: Done [ 53.879112] ? account_page_dirtied+0x65a/0x870 [ 53.879121] invalid_op+0x23/0x30 [ 53.879127] RIP: 0010:account_page_dirtied+0x65a/0x870 [ 53.879133] Code: c1 ea 03 80 3c 02 00 0f 85 25 02 00 00 49 8b 86 90 01 00 00 be ff ff ff ff 48 8d 78 70 e8 6e fd cb ff 85 c0 0f 85 60 fb ff ff <0f> 0b e9 59 fb ff ff 4c 89 ee 4c 89 f7 e8 b4 50 28 00 e9 0a fb ff [ 53.879136] RSP: 0018:ffff8881c5ed7790 EFLAGS: 00010046 [ 53.879141] RAX: 0000000000000000 RBX: ffff8881c78ad368 RCX: ffff8881c5a76f18 [ 53.879144] RDX: 1ffffffff1065983 RSI: ffff8881c4c6f070 RDI: 0000000000000082 [ 53.879148] RBP: ffff8881c5ed77c0 R08: ffffed1038f15a6e R09: ffffed1038f15a6e [ 53.883835] gfs2: fsid=loop1.0: first mount done, others may mount [ 53.887204] R10: ffffed1038f15a6d R11: ffff8881c78ad36f R12: ffff8881c78ad1d8 [ 53.887208] R13: ffffea0007199a00 R14: ffff8881c78ad1d8 R15: 0000000000000282 [ 53.887233] __set_page_dirty+0x6f/0x250 [ 53.887241] mark_buffer_dirty+0x2c4/0x3c0 [ 53.887248] gfs2_unpin+0xdf/0xe00 [ 53.887258] buf_lo_after_commit+0x129/0x210 [ 53.887265] gfs2_log_flush+0x9c4/0x1fa0 [ 53.887272] ? lock_downgrade+0x900/0x900 [ 53.887281] ? log_write_header+0xeb0/0xeb0 [ 53.887288] ? mark_held_locks+0xb7/0x130 [ 53.887297] ? kfree+0x132/0x290 [ 53.887303] ? do_sync+0x48b/0xa60 [ 53.887310] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 54.012384] gfs2: fsid=loop1.0: found 1 quota changes [ 54.014861] ? kfree+0x132/0x290 [ 54.014870] ? trace_hardirqs_on+0x28/0x180 [ 54.014879] ? do_sync+0x48b/0xa60 [ 54.014887] do_sync+0x4dc/0xa60 [ 54.058753] ? gfs2_set_dqblk+0xb60/0xb60 [ 54.059725] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 209ms [ 54.062894] ? lock_downgrade+0x900/0x900 [ 54.062904] ? rwlock_bug.part.2+0x90/0x90 [ 54.062907] ? lock_acquire+0x194/0x3e0 [ 54.062915] ? do_raw_spin_unlock+0x16e/0x260 [ 54.069677] gfs2: fsid=loop0.0: jid=0: Done [ 54.073614] gfs2_quota_sync+0x254/0x4f0 [ 54.073627] gfs2_sync_fs+0x41/0xa0 [ 54.073637] sync_filesystem+0xd7/0x200 [ 54.073645] generic_shutdown_super+0x69/0x330 [ 54.073651] kill_block_super+0x96/0xe0 [ 54.073659] gfs2_kill_sb+0x100/0x150 [ 54.078388] gfs2: fsid=loop0.0: first mount done, others may mount [ 54.081843] deactivate_locked_super+0x7c/0xd0 [ 54.081849] deactivate_super+0x136/0x150 [ 54.081855] ? mount_bdev+0x340/0x340 [ 54.081863] ? dput.part.30+0x12d/0xab0 [ 54.081869] ? mnt_get_writers.isra.28+0xb3/0x140 [ 54.081880] cleanup_mnt+0x204/0x440 [ 54.145872] ? trace_hardirqs_on+0x28/0x180 [ 54.150197] __cleanup_mnt+0xd/0x10 [ 54.153819] task_work_run+0x10e/0x190 [ 54.157707] exit_to_usermode_loop+0x1be/0x210 [ 54.162294] do_syscall_64+0x50b/0x600 [ 54.166189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.166300] gfs2: fsid=loop0.0: found 1 quota changes [ 54.171365] RIP: 0033:0x4579d7 [ 54.171373] Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.171376] RSP: 002b:00007ffe79e78548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 54.171383] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000004579d7 [ 54.171386] RDX: 0000000000cdf9fb RSI: 0000000000000002 RDI: 00007ffe79e796b0 [ 54.171389] RBP: 00007ffe79e796b0 R08: 0000000000000000 R09: 0000000000000009 [ 54.171393] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000cdf940 [ 54.171396] R13: 0000000000000000 R14: 0000000000000002 R15: 000000000000d061 [ 54.177543] Kernel Offset: disabled [ 54.247252] Rebooting in 86400 seconds..