./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1197843165 <...> Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. execve("./syz-executor1197843165", ["./syz-executor1197843165"], 0x7ffd9ba875e0 /* 10 vars */) = 0 brk(NULL) = 0x555590681000 brk(0x555590681d00) = 0x555590681d00 arch_prctl(ARCH_SET_FS, 0x555590681380) = 0 set_tid_address(0x555590681650) = 5843 set_robust_list(0x555590681660, 24) = 0 rseq(0x555590681ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1197843165", 4096) = 28 getrandom("\x73\xed\xbb\xf2\x24\x3d\xfa\x05", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555590681d00 brk(0x5555906a2d00) = 0x5555906a2d00 brk(0x5555906a3000) = 0x5555906a3000 mprotect(0x7fcd4a12b000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached [pid 5845] set_robust_list(0x555590681660, 24 [pid 5843] <... clone resumed>, child_tidptr=0x555590681650) = 5845 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5846 attached [pid 5843] <... clone resumed>, child_tidptr=0x555590681650) = 5846 [pid 5846] set_robust_list(0x555590681660, 24 [pid 5845] <... openat resumed>) = 3 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] ioctl(3, LOOP_CLR_FD [pid 5846] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5845] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5847 attached [pid 5845] close(3 [pid 5843] <... clone resumed>, child_tidptr=0x555590681650) = 5847 [pid 5847] set_robust_list(0x555590681660, 24 [pid 5846] <... openat resumed>) = 3 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] ioctl(3, LOOP_CLR_FD [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5849 attached ./strace-static-x86_64: Process 5848 attached [pid 5847] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5846] close(3 [pid 5843] <... clone resumed>, child_tidptr=0x555590681650) = 5848 [pid 5849] set_robust_list(0x555590681660, 24 [pid 5848] set_robust_list(0x555590681660, 24 [pid 5846] <... close resumed>) = 0 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5850 attached [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5851 attached [pid 5850] set_robust_list(0x555590681660, 24 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5845] <... clone resumed>, child_tidptr=0x555590681650) = 5849 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5847] close(3 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... prctl resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5850] setpgid(0, 0 [pid 5849] <... prctl resumed>) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] setpgid(0, 0 [pid 5846] <... clone resumed>, child_tidptr=0x555590681650) = 5850 [pid 5849] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5852 attached [pid 5851] set_robust_list(0x555590681660, 24 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] <... clone resumed>, child_tidptr=0x555590681650) = 5851 [pid 5852] set_robust_list(0x555590681660, 24 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] <... setpgid resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5848] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5852] <... set_robust_list resumed>) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... clone resumed>, child_tidptr=0x555590681650) = 5852 [pid 5852] <... prctl resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... openat resumed>) = 3 [pid 5848] close(3 [pid 5850] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5852] write(3, "1000", 4 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] write(3, "1000", 4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... write resumed>) = 4 [pid 5852] close(3 [pid 5850] <... write resumed>) = 4 [pid 5850] close(3executing program [pid 5852] <... close resumed>) = 0 [pid 5851] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5850] <... close resumed>) = 0 [pid 5849] write(3, "1000", 4 [pid 5852] write(1, "executing program\n", 18 [pid 5851] close(3 [pid 5850] write(1, "executing program\n", 18 [pid 5852] <... write resumed>) = 18 [pid 5851] <... close resumed>) = 0 [pid 5849] <... write resumed>) = 4 executing program [pid 5852] memfd_create("syzkaller", 0 [pid 5850] <... write resumed>) = 18 [pid 5849] close(3executing program ) = 0 [pid 5849] write(1, "executing program\n", 18) = 18 ./strace-static-x86_64: Process 5854 attached [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] memfd_create("syzkaller", 0 [pid 5850] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5855 attached [pid 5854] set_robust_list(0x555590681660, 24 [pid 5852] <... memfd_create resumed>) = 3 [pid 5849] <... memfd_create resumed>) = 3 [pid 5848] <... clone resumed>, child_tidptr=0x555590681650) = 5854 [pid 5850] <... memfd_create resumed>) = 3 [pid 5855] set_robust_list(0x555590681660, 24 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... mmap resumed>) = 0x7fcd41c00000 [pid 5851] <... clone resumed>, child_tidptr=0x555590681650) = 5855 [pid 5850] <... mmap resumed>) = 0x7fcd41c00000 [pid 5849] <... mmap resumed>) = 0x7fcd41c00000 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] setpgid(0, 0 [pid 5855] <... prctl resumed>) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3executing program ) = 0 [pid 5855] write(1, "executing program\n", 18) = 18 [pid 5855] memfd_create("syzkaller", 0 [pid 5854] <... setpgid resumed>) = 0 [pid 5855] <... memfd_create resumed>) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcd41c00000 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5854] write(3, "1000", 4) = 4 [pid 5854] close(3executing program ) = 0 [pid 5854] write(1, "executing program\n", 18) = 18 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcd41c00000 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... write resumed>) = 16777216 [pid 5849] munmap(0x7fcd41c00000, 138412032 [pid 5852] <... write resumed>) = 16777216 [pid 5850] <... write resumed>) = 16777216 [pid 5852] munmap(0x7fcd41c00000, 138412032 [pid 5850] munmap(0x7fcd41c00000, 138412032 [pid 5855] <... write resumed>) = 16777216 [pid 5855] munmap(0x7fcd41c00000, 138412032 [pid 5854] <... write resumed>) = 16777216 [pid 5854] munmap(0x7fcd41c00000, 138412032 [pid 5849] <... munmap resumed>) = 0 [pid 5852] <... munmap resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5855] <... munmap resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... openat resumed>) = 4 [pid 5852] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3) = 0 [pid 5855] <... openat resumed>) = 4 [pid 5849] close(4) = 0 [ 97.141540][ T44] cfg80211: failed to load regulatory.db [ 97.159899][ T5849] loop0: detected capacity change from 0 to 32768 [ 97.173260][ T5852] loop2: detected capacity change from 0 to 32768 [pid 5849] mkdir("./file1", 0777 [pid 5855] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... mkdir resumed>) = 0 [pid 5850] <... munmap resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] mount("/dev/loop0", "./file1", "gfs2", MS_NODIRATIME|MS_STRICTATIME, "quota_quantum=0x0000000000000004,suiddir,quota,barrier,acl,quota=off,discard,noloccookie,quota=on,lo"... [pid 5850] <... openat resumed>) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5855] <... ioctl resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 5855] close(3 [pid 5852] <... close resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5852] close(4 [pid 5855] close(4) = 0 [pid 5852] <... close resumed>) = 0 [pid 5855] mkdir("./file1", 0777 [pid 5852] mkdir("./file1", 0777 [pid 5855] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5852] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5855] mount("/dev/loop4", "./file1", "gfs2", MS_NODIRATIME|MS_STRICTATIME, "quota_quantum=0x0000000000000004,suiddir,quota,barrier,acl,quota=off,discard,noloccookie,quota=on,lo"... [pid 5852] mount("/dev/loop2", "./file1", "gfs2", MS_NODIRATIME|MS_STRICTATIME, "quota_quantum=0x0000000000000004,suiddir,quota,barrier,acl,quota=off,discard,noloccookie,quota=on,lo"... [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3) = 0 [ 97.187822][ T5855] loop4: detected capacity change from 0 to 32768 [ 97.199695][ T5850] loop1: detected capacity change from 0 to 32768 [ 97.219722][ T5849] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [pid 5850] close(4) = 0 [pid 5850] mkdir("./file1", 0777) = -1 EEXIST (File exists) [ 97.236371][ T5855] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 97.245877][ T5849] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.262595][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor119 Not tainted 6.15.0-next-20250528-syzkaller #0 PREEMPT(full) [ 97.262626][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.262647][ T5855] Call Trace: [ 97.262656][ T5855] [ 97.262670][ T5855] dump_stack_lvl+0x189/0x250 [ 97.262714][ T5855] ? kernfs_path_from_node+0x2c/0x260 [ 97.262749][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.262768][ T5855] ? __pfx__printk+0x10/0x10 [ 97.262793][ T5855] ? kernfs_path_from_node+0x2c/0x260 [ 97.262818][ T5855] ? kernfs_path_from_node+0x2c/0x260 [ 97.262848][ T5855] ? kernfs_path_from_node+0x22c/0x260 [ 97.262874][ T5855] ? kernfs_path_from_node+0x2c/0x260 [ 97.262904][ T5855] sysfs_create_dir_ns+0x259/0x280 [pid 5850] mount("/dev/loop1", "./file1", "gfs2", MS_NODIRATIME|MS_STRICTATIME, "quota_quantum=0x0000000000000004,suiddir,quota,barrier,acl,quota=off,discard,noloccookie,quota=on,lo"... [pid 5854] <... munmap resumed>) = 0 [ 97.262933][ T5855] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 97.262963][ T5855] ? do_raw_spin_unlock+0x122/0x240 [ 97.262992][ T5855] kobject_add_internal+0x59f/0xb40 [ 97.263042][ T5855] kobject_init_and_add+0x125/0x190 [ 97.263080][ T5855] ? __pfx_kobject_init_and_add+0x10/0x10 [ 97.263115][ T5855] ? __raw_spin_lock_init+0x45/0x100 [ 97.263207][ T5855] ? __init_swait_queue_head+0xa9/0x150 [ 97.263238][ T5855] gfs2_sys_fs_add+0x237/0x470 [ 97.263275][ T5855] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 97.263316][ T5855] ? is_dynamic_key+0xd6/0x1c0 [ 97.263344][ T5855] ? __pfx_alloc_workqueue+0x10/0x10 [ 97.263416][ T5855] gfs2_fill_super+0x1348/0x2010 [ 97.263459][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.263491][ T5855] ? sb_set_blocksize+0x104/0x180 [ 97.263522][ T5855] ? setup_bdev_super+0x4c1/0x5b0 [ 97.263548][ T5855] get_tree_bdev_flags+0x40e/0x4d0 [ 97.263570][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.263596][ T5855] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 97.263620][ T5855] ? rcu_is_watching+0x15/0xb0 [ 97.263646][ T5855] gfs2_get_tree+0x51/0x1e0 [ 97.263675][ T5855] vfs_get_tree+0x92/0x2b0 [ 97.263701][ T5855] do_new_mount+0x24a/0xa40 [ 97.263736][ T5855] __se_sys_mount+0x317/0x410 [ 97.263768][ T5855] ? __pfx___se_sys_mount+0x10/0x10 [ 97.263791][ T5855] ? rcu_is_watching+0x15/0xb0 [ 97.263817][ T5855] ? __x64_sys_mount+0x20/0xc0 [ 97.263845][ T5855] do_syscall_64+0xfa/0x3b0 [ 97.263875][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.263903][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.263924][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 97.263950][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.263970][ T5855] RIP: 0033:0x7fcd4a0a6f1a [ 97.263999][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.264016][ T5855] RSP: 002b:00007ffeb3c8b198 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 97.264039][ T5855] RAX: ffffffffffffffda RBX: 00007ffeb3c8b1b0 RCX: 00007fcd4a0a6f1a [ 97.264053][ T5855] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007ffeb3c8b1b0 [ 97.264067][ T5855] RBP: 0000200000001c00 R08: 00007ffeb3c8b1f0 R09: 00000000000125dc [ 97.264081][ T5855] R10: 0000000001000800 R11: 0000000000000282 R12: 0000200000000240 [ 97.264094][ T5855] R13: 00007ffeb3c8b1f0 R14: 0000000000000003 R15: 0000000001000800 [ 97.264123][ T5855] [ 97.264161][ T5855] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 97.313182][ T5852] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 97.314538][ T5855] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 97.349915][ T5850] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 97.359579][ T5855] ================================================================== [ 97.366478][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor119 Not tainted 6.15.0-next-20250528-syzkaller #0 PREEMPT(full) [ 97.366513][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.366527][ T5852] Call Trace: [ 97.366536][ T5852] [ 97.366545][ T5852] dump_stack_lvl+0x189/0x250 [ 97.366575][ T5852] ? kernfs_path_from_node+0x2c/0x260 [ 97.366609][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.366631][ T5852] ? __pfx__printk+0x10/0x10 [ 97.366659][ T5852] ? kernfs_path_from_node+0x2c/0x260 [ 97.366687][ T5852] ? kernfs_path_from_node+0x2c/0x260 [ 97.366721][ T5852] ? kernfs_path_from_node+0x22c/0x260 [ 97.366749][ T5852] ? kernfs_path_from_node+0x2c/0x260 [ 97.366784][ T5852] sysfs_create_dir_ns+0x259/0x280 [ 97.366817][ T5852] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 97.366850][ T5852] ? do_raw_spin_unlock+0x122/0x240 [ 97.366884][ T5852] kobject_add_internal+0x59f/0xb40 [ 97.366931][ T5852] kobject_init_and_add+0x125/0x190 [ 97.366974][ T5852] ? __pfx_kobject_init_and_add+0x10/0x10 [ 97.367012][ T5852] ? __raw_spin_lock_init+0x45/0x100 [ 97.367041][ T5852] ? __init_swait_queue_head+0xa9/0x150 [ 97.367075][ T5852] gfs2_sys_fs_add+0x237/0x470 [ 97.367209][ T5852] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 97.367253][ T5852] ? is_dynamic_key+0xd6/0x1c0 [ 97.367284][ T5852] ? __pfx_alloc_workqueue+0x10/0x10 [ 97.367330][ T5852] gfs2_fill_super+0x1348/0x2010 [ 97.367377][ T5852] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.367411][ T5852] ? sb_set_blocksize+0x104/0x180 [ 97.367447][ T5852] ? setup_bdev_super+0x4c1/0x5b0 [ 97.367475][ T5852] get_tree_bdev_flags+0x40e/0x4d0 [ 97.367499][ T5852] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.367528][ T5852] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 97.367554][ T5852] ? rcu_is_watching+0x15/0xb0 [ 97.367583][ T5852] gfs2_get_tree+0x51/0x1e0 [ 97.367615][ T5852] vfs_get_tree+0x92/0x2b0 [ 97.367644][ T5852] do_new_mount+0x24a/0xa40 [ 97.367681][ T5852] __se_sys_mount+0x317/0x410 [ 97.367717][ T5852] ? __pfx___se_sys_mount+0x10/0x10 [ 97.367743][ T5852] ? rcu_is_watching+0x15/0xb0 [ 97.367770][ T5852] ? __x64_sys_mount+0x20/0xc0 [ 97.367801][ T5852] do_syscall_64+0xfa/0x3b0 [ 97.367833][ T5852] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.367864][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.367887][ T5852] ? clear_bhb_loop+0x60/0xb0 [ 97.367915][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.367937][ T5852] RIP: 0033:0x7fcd4a0a6f1a [ 97.367958][ T5852] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.367977][ T5852] RSP: 002b:00007ffeb3c8b198 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 97.368001][ T5852] RAX: ffffffffffffffda RBX: 00007ffeb3c8b1b0 RCX: 00007fcd4a0a6f1a [ 97.368018][ T5852] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007ffeb3c8b1b0 [ 97.368034][ T5852] RBP: 0000200000001c00 R08: 00007ffeb3c8b1f0 R09: 00000000000125dc [ 97.368050][ T5852] R10: 0000000001000800 R11: 0000000000000282 R12: 0000200000000240 [ 97.368064][ T5852] R13: 00007ffeb3c8b1f0 R14: 0000000000000003 R15: 0000000001000800 [ 97.368106][ T5852] [ 97.368137][ T5852] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 97.368474][ T5855] BUG: KASAN: null-ptr-deref in gfs2_drop_inode+0x20c/0x3a0 [ 97.958502][ T5855] Read of size 8 at addr 00000000000000a8 by task syz-executor119/5855 [ 97.966879][ T5855] [ 97.969315][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor119 Not tainted 6.15.0-next-20250528-syzkaller #0 PREEMPT(full) [ 97.969338][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.969349][ T5855] Call Trace: [ 97.969359][ T5855] [ 97.969368][ T5855] dump_stack_lvl+0x189/0x250 [ 97.969390][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.969406][ T5855] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 97.969432][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 97.969459][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 97.969483][ T5855] kasan_report+0x118/0x150 [ 97.969504][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 97.969531][ T5855] kasan_check_range+0x2b0/0x2c0 [ 97.969552][ T5855] gfs2_drop_inode+0x20c/0x3a0 [ 97.969578][ T5855] iput+0x45a/0x9d0 [ 97.969603][ T5855] gfs2_fill_super+0x1418/0x2010 [ 97.969631][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.969653][ T5855] ? sb_set_blocksize+0x104/0x180 [ 97.969677][ T5855] ? setup_bdev_super+0x4c1/0x5b0 [ 97.969696][ T5855] get_tree_bdev_flags+0x40e/0x4d0 [ 97.969714][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 97.969735][ T5855] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 97.969752][ T5855] ? rcu_is_watching+0x15/0xb0 [ 97.969771][ T5855] gfs2_get_tree+0x51/0x1e0 [ 97.969793][ T5855] vfs_get_tree+0x92/0x2b0 [ 97.969811][ T5855] do_new_mount+0x24a/0xa40 [ 97.969834][ T5855] __se_sys_mount+0x317/0x410 [ 97.969857][ T5855] ? __pfx___se_sys_mount+0x10/0x10 [ 97.969877][ T5855] ? rcu_is_watching+0x15/0xb0 [ 97.969894][ T5855] ? __x64_sys_mount+0x20/0xc0 [ 97.969914][ T5855] do_syscall_64+0xfa/0x3b0 [ 97.969940][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.969963][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.969979][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 97.969998][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.970016][ T5855] RIP: 0033:0x7fcd4a0a6f1a [ 97.970032][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.970047][ T5855] RSP: 002b:00007ffeb3c8b198 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 97.970067][ T5855] RAX: ffffffffffffffda RBX: 00007ffeb3c8b1b0 RCX: 00007fcd4a0a6f1a [ 97.970080][ T5855] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007ffeb3c8b1b0 [ 97.970092][ T5855] RBP: 0000200000001c00 R08: 00007ffeb3c8b1f0 R09: 00000000000125dc [ 97.970104][ T5855] R10: 0000000001000800 R11: 0000000000000282 R12: 0000200000000240 [ 97.970116][ T5855] R13: 00007ffeb3c8b1f0 R14: 0000000000000003 R15: 0000000001000800 [ 97.970134][ T5855] [ 97.970140][ T5855] ================================================================== [ 98.236104][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.243330][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor119 Not tainted 6.15.0-next-20250528-syzkaller #0 PREEMPT(full) [ 98.254884][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.265165][ T5855] Call Trace: [ 98.268491][ T5855] [ 98.271443][ T5855] dump_stack_lvl+0x99/0x250 [ 98.276059][ T5855] ? __asan_memcpy+0x40/0x70 [ 98.280792][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.286246][ T5855] ? __pfx__printk+0x10/0x10 [ 98.291384][ T5855] panic+0x2db/0x790 [ 98.295299][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.300563][ T5855] ? __pfx_panic+0x10/0x10 [ 98.305003][ T5855] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 98.310915][ T5855] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 98.316832][ T5855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 98.323186][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 98.328153][ T5855] check_panic_on_warn+0x89/0xb0 [ 98.333125][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 98.338174][ T5855] end_report+0x78/0x160 [ 98.342425][ T5855] kasan_report+0x129/0x150 [ 98.346963][ T5855] ? gfs2_drop_inode+0x20c/0x3a0 [ 98.352586][ T5855] kasan_check_range+0x2b0/0x2c0 [ 98.357828][ T5855] gfs2_drop_inode+0x20c/0x3a0 [ 98.362724][ T5855] iput+0x45a/0x9d0 [ 98.366574][ T5855] gfs2_fill_super+0x1418/0x2010 [ 98.371744][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 98.377419][ T5855] ? sb_set_blocksize+0x104/0x180 [ 98.382484][ T5855] ? setup_bdev_super+0x4c1/0x5b0 [ 98.388104][ T5855] get_tree_bdev_flags+0x40e/0x4d0 [ 98.393792][ T5855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 98.399175][ T5855] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 98.404868][ T5855] ? rcu_is_watching+0x15/0xb0 [ 98.409752][ T5855] gfs2_get_tree+0x51/0x1e0 [ 98.414370][ T5855] vfs_get_tree+0x92/0x2b0 [ 98.418822][ T5855] do_new_mount+0x24a/0xa40 [ 98.423397][ T5855] __se_sys_mount+0x317/0x410 [ 98.428109][ T5855] ? __pfx___se_sys_mount+0x10/0x10 [ 98.433410][ T5855] ? rcu_is_watching+0x15/0xb0 [ 98.438187][ T5855] ? __x64_sys_mount+0x20/0xc0 [ 98.442966][ T5855] do_syscall_64+0xfa/0x3b0 [ 98.447493][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.452903][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.458996][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 98.463718][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.469622][ T5855] RIP: 0033:0x7fcd4a0a6f1a [ 98.474057][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.493871][ T5855] RSP: 002b:00007ffeb3c8b198 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 98.502335][ T5855] RAX: ffffffffffffffda RBX: 00007ffeb3c8b1b0 RCX: 00007fcd4a0a6f1a [ 98.510329][ T5855] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007ffeb3c8b1b0 [ 98.518352][ T5855] RBP: 0000200000001c00 R08: 00007ffeb3c8b1f0 R09: 00000000000125dc [ 98.526348][ T5855] R10: 0000000001000800 R11: 0000000000000282 R12: 0000200000000240 [ 98.534536][ T5855] R13: 00007ffeb3c8b1f0 R14: 0000000000000003 R15: 0000000001000800 [ 98.542810][ T5855] [ 98.546236][ T5855] Kernel Offset: disabled [ 98.550601][ T5855] Rebooting in 86400 seconds..