./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor688932548 <...> Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. execve("./syz-executor688932548", ["./syz-executor688932548"], 0x7ffcd73ed970 /* 10 vars */) = 0 brk(NULL) = 0x55555c338000 brk(0x55555c338d00) = 0x55555c338d00 arch_prctl(ARCH_SET_FS, 0x55555c338380) = 0 set_tid_address(0x55555c338650) = 5834 set_robust_list(0x55555c338660, 24) = 0 rseq(0x55555c338ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor688932548", 4096) = 27 getrandom("\xfe\x8f\x72\x1b\x17\x15\xf2\x81", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555c338d00 brk(0x55555c359d00) = 0x55555c359d00 brk(0x55555c35a000) = 0x55555c35a000 mprotect(0x7f38c3362000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached <unfinished ...> [pid 5835] set_robust_list(0x55555c338660, 24 <unfinished ...> [pid 5834] <... clone resumed>, child_tidptr=0x55555c338650) = 5835 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] getppid() = 0 [pid 5835] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5835] unshare(CLONE_NEWNS) = 0 [pid 5835] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5835] unshare(CLONE_NEWIPC) = 0 [pid 5835] unshare(CLONE_NEWCGROUP) = 0 [pid 5835] unshare(CLONE_NEWUTS) = 0 [pid 5835] unshare(CLONE_SYSVSEM) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "16777216", 8) = 8 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "536870912", 9) = 9 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "8192", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5835] close(3) = 0 [pid 5835] getpid() = 1 [pid 5835] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0 [pid 5835] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0 [pid 5835] unshare(CLONE_NEWNET) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "0 65535", 7) = 7 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "100000", 6) = 6 [pid 5835] close(3) = 0 [pid 5835] mkdir("./syz-tmp", 0777) = 0 [pid 5835] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 5835] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5835] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5835] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5835] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 5835] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 5835] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 5835] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5835] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5835] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 5835] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5835] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5835] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5835] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [ 96.425841][ T969] cfg80211: failed to load regulatory.db [pid 5835] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 5835] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5835] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 5835] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 5835] chdir("/") = 0 [pid 5835] umount2("./pivot", MNT_DETACH) = 0 [pid 5835] chroot("./newroot") = 0 [pid 5835] chdir("/") = 0 [pid 5835] mkdir("/dev/gadgetfs", 0777) = 0 [pid 5835] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0 [pid 5835] mkdir("/dev/binderfs", 0777) = 0 [pid 5835] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5835] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5835] write(1, "executing program\n", 18executing program ) = 18 [pid 5835] memfd_create("syzkaller", 0) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f38bae00000 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5835] munmap(0x7f38bae00000, 138412032) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5835] close(3) = 0 [pid 5835] close(4) = 0 [pid 5835] mkdir("./file1", 0777) = 0 [ 96.945818][ T5835] loop0: detected capacity change from 0 to 32768 [ 97.014766][ T5835] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.023054][ T5835] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.044871][ T5835] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 97.054895][ T972] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.063288][ T972] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.106646][ T972] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 97.116181][ T972] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.121847][ T5835] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5835] mount("/dev/loop0", "./file1", "gfs2", MS_NODIRATIME|MS_STRICTATIME, "quota_quantum=0x0000000000000004,suiddir,quota,barrier,acl,quota=off,discard,noloccookie,quota=on,lo"...) = 0 [pid 5835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] chdir("./file1") = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5835] exit_group(1) = ? [ 97.287637][ T5835] gfs2: fsid=syz:syz.0: found 1 quota changes [ 97.346534][ T5835] ------------[ cut here ]------------ [ 97.352333][ T5835] WARNING: CPU: 0 PID: 5835 at ./include/linux/backing-dev.h:255 __folio_mark_dirty+0xa4f/0xeb0 [ 97.362810][ T5835] Modules linked in: [ 97.366838][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor688 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 97.379271][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 97.389340][ T5835] RIP: 0010:__folio_mark_dirty+0xa4f/0xeb0 [ 97.395188][ T5835] Code: 48 c7 c7 80 39 74 8b e8 5f d5 8a ff 90 0f 0b 90 90 e9 9e f7 ff ff e8 00 79 c6 ff 90 0f 0b 90 e9 23 fe ff ff e8 f2 78 c6 ff 90 <0f> 0b 90 e9 3e fa ff ff 89 c2 80 e2 07 80 c2 03 38 ca 0f 8c b6 f7 [ 97.414788][ T5835] RSP: 0018:ffffc90003a47608 EFLAGS: 00010093 [ 97.420886][ T5835] RAX: ffffffff81f9575e RBX: ffffea0001da2b00 RCX: ffff8880279c5a00 [ 97.428884][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.436850][ T5835] RBP: 0000000000000001 R08: ffff888023dd1eff R09: 1ffff110047ba3df [ 97.444822][ T5835] R10: dffffc0000000000 R11: ffffed10047ba3e0 R12: ffff888023dd1d88 [ 97.452962][ T5835] R13: 1ffff110047ba3df R14: 0000000000000000 R15: ffff888023dd1ef8 [ 97.460937][ T5835] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 97.469861][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.476453][ T5835] CR2: 00007f38c3366130 CR3: 0000000074cdc000 CR4: 0000000000350ef0 [ 97.484431][ T5835] Call Trace: [ 97.487708][ T5835] <TASK> [ 97.490662][ T5835] ? __pfx_wake_up_bit+0x10/0x10 [ 97.495614][ T5835] mark_buffer_dirty+0x271/0x410 [ 97.500573][ T5835] gfs2_unpin+0x125/0x9c0 [ 97.504954][ T5835] buf_lo_after_commit+0x15e/0x1b0 [ 97.510185][ T5835] ? __pfx_buf_lo_after_commit+0x10/0x10 [ 97.515821][ T5835] gfs2_log_flush+0x10a2/0x24c0 [ 97.520702][ T5835] ? __pfx_gfs2_log_flush+0x10/0x10 [ 97.525999][ T5835] ? do_sync+0x9cd/0xc60 [ 97.530239][ T5835] ? kfree+0x193/0x440 [ 97.534308][ T5835] do_sync+0xa1d/0xc60 [ 97.538404][ T5835] ? __pfx_do_sync+0x10/0x10 [ 97.543028][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.548667][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.554304][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 97.559505][ T5835] gfs2_quota_sync+0x359/0x460 [ 97.564278][ T5835] gfs2_sync_fs+0x4c/0xb0 [ 97.568630][ T5835] sync_filesystem+0xee/0x230 [ 97.573313][ T5835] generic_shutdown_super+0x6f/0x2c0 [ 97.578618][ T5835] kill_block_super+0x44/0x90 [ 97.583291][ T5835] deactivate_locked_super+0xbc/0x130 [ 97.588655][ T5835] cleanup_mnt+0x425/0x4c0 [ 97.593071][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.598698][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.603912][ T5835] task_work_run+0x1d4/0x260 [ 97.608540][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 97.613650][ T5835] ? kmem_cache_free+0x192/0x3f0 [ 97.618591][ T5835] do_exit+0x8d6/0x2550 [ 97.622755][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.628394][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.634029][ T5835] ? __pfx_do_exit+0x10/0x10 [ 97.638621][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.644249][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.649443][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.655071][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.660272][ T5835] do_group_exit+0x21c/0x2d0 [ 97.664889][ T5835] __x64_sys_exit_group+0x3f/0x40 [ 97.669909][ T5835] x64_sys_call+0x21ba/0x21c0 [ 97.674577][ T5835] do_syscall_64+0xf6/0x210 [ 97.679079][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.684708][ T5835] ? exc_page_fault+0x91/0x110 [ 97.689474][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.695377][ T5835] RIP: 0033:0x7f38c32d9b09 [ 97.699785][ T5835] Code: Unable to access opcode bytes at 0x7f38c32d9adf. [ 97.706793][ T5835] RSP: 002b:00007ffd97102ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 97.715213][ T5835] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f38c32d9b09 [ 97.723180][ T5835] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 97.731145][ T5835] RBP: 00007f38c33682b0 R08: ffffffffffffffb8 R09: 00000000000125dc [ 97.739113][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38c33682b0 [ 97.747082][ T5835] R13: 0000000000000000 R14: 00007f38c3369020 R15: 00007f38c32a8050 [ 97.755072][ T5835] </TASK> [ 97.758100][ T5835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.765372][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor688 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 97.777779][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 97.787829][ T5835] Call Trace: [ 97.791099][ T5835] <TASK> [ 97.794021][ T5835] dump_stack_lvl+0x99/0x250 [ 97.798642][ T5835] ? __asan_memcpy+0x40/0x70 [ 97.803225][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.808545][ T5835] ? __pfx__printk+0x10/0x10 [ 97.813141][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.818779][ T5835] panic+0x2db/0x790 [ 97.822718][ T5835] ? __pfx_panic+0x10/0x10 [ 97.827173][ T5835] ? show_trace_log_lvl+0x4fb/0x550 [ 97.832404][ T5835] __warn+0x31b/0x4b0 [ 97.836405][ T5835] ? __folio_mark_dirty+0xa4f/0xeb0 [ 97.841610][ T5835] ? __folio_mark_dirty+0xa4f/0xeb0 [ 97.846805][ T5835] report_bug+0x2be/0x4f0 [ 97.851141][ T5835] ? __folio_mark_dirty+0xa4f/0xeb0 [ 97.856340][ T5835] ? __folio_mark_dirty+0xa4f/0xeb0 [ 97.861617][ T5835] ? __folio_mark_dirty+0xa51/0xeb0 [ 97.866831][ T5835] handle_bug+0x84/0x160 [ 97.871087][ T5835] exc_invalid_op+0x1a/0x50 [ 97.875594][ T5835] asm_exc_invalid_op+0x1a/0x20 [ 97.880460][ T5835] RIP: 0010:__folio_mark_dirty+0xa4f/0xeb0 [ 97.886287][ T5835] Code: 48 c7 c7 80 39 74 8b e8 5f d5 8a ff 90 0f 0b 90 90 e9 9e f7 ff ff e8 00 79 c6 ff 90 0f 0b 90 e9 23 fe ff ff e8 f2 78 c6 ff 90 <0f> 0b 90 e9 3e fa ff ff 89 c2 80 e2 07 80 c2 03 38 ca 0f 8c b6 f7 [ 97.905899][ T5835] RSP: 0018:ffffc90003a47608 EFLAGS: 00010093 [ 97.911981][ T5835] RAX: ffffffff81f9575e RBX: ffffea0001da2b00 RCX: ffff8880279c5a00 [ 97.919966][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.927932][ T5835] RBP: 0000000000000001 R08: ffff888023dd1eff R09: 1ffff110047ba3df [ 97.935891][ T5835] R10: dffffc0000000000 R11: ffffed10047ba3e0 R12: ffff888023dd1d88 [ 97.943875][ T5835] R13: 1ffff110047ba3df R14: 0000000000000000 R15: ffff888023dd1ef8 [ 97.951861][ T5835] ? __folio_mark_dirty+0xa4e/0xeb0 [ 97.957072][ T5835] ? __folio_mark_dirty+0xa4e/0xeb0 [ 97.962272][ T5835] ? __pfx_wake_up_bit+0x10/0x10 [ 97.967216][ T5835] mark_buffer_dirty+0x271/0x410 [ 97.972157][ T5835] gfs2_unpin+0x125/0x9c0 [ 97.976508][ T5835] buf_lo_after_commit+0x15e/0x1b0 [ 97.981616][ T5835] ? __pfx_buf_lo_after_commit+0x10/0x10 [ 97.987246][ T5835] gfs2_log_flush+0x10a2/0x24c0 [ 97.992107][ T5835] ? __pfx_gfs2_log_flush+0x10/0x10 [ 97.997303][ T5835] ? do_sync+0x9cd/0xc60 [ 98.001541][ T5835] ? kfree+0x193/0x440 [ 98.005782][ T5835] do_sync+0xa1d/0xc60 [ 98.009857][ T5835] ? __pfx_do_sync+0x10/0x10 [ 98.014450][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.020084][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.025883][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 98.031094][ T5835] gfs2_quota_sync+0x359/0x460 [ 98.035874][ T5835] gfs2_sync_fs+0x4c/0xb0 [ 98.040203][ T5835] sync_filesystem+0xee/0x230 [ 98.044886][ T5835] generic_shutdown_super+0x6f/0x2c0 [ 98.050167][ T5835] kill_block_super+0x44/0x90 [ 98.054852][ T5835] deactivate_locked_super+0xbc/0x130 [ 98.060224][ T5835] cleanup_mnt+0x425/0x4c0 [ 98.064648][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.070372][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.075582][ T5835] task_work_run+0x1d4/0x260 [ 98.080181][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 98.085296][ T5835] ? kmem_cache_free+0x192/0x3f0 [ 98.090242][ T5835] do_exit+0x8d6/0x2550 [ 98.094410][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.100042][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.105674][ T5835] ? __pfx_do_exit+0x10/0x10 [ 98.110303][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.115951][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.121149][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.126788][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.132004][ T5835] do_group_exit+0x21c/0x2d0 [ 98.136641][ T5835] __x64_sys_exit_group+0x3f/0x40 [ 98.141695][ T5835] x64_sys_call+0x21ba/0x21c0 [ 98.146386][ T5835] do_syscall_64+0xf6/0x210 [ 98.150910][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.156549][ T5835] ? exc_page_fault+0x91/0x110 [ 98.161320][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.167218][ T5835] RIP: 0033:0x7f38c32d9b09 [ 98.171630][ T5835] Code: Unable to access opcode bytes at 0x7f38c32d9adf. [ 98.178650][ T5835] RSP: 002b:00007ffd97102ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 98.187097][ T5835] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f38c32d9b09 [ 98.195087][ T5835] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 98.203068][ T5835] RBP: 00007f38c33682b0 R08: ffffffffffffffb8 R09: 00000000000125dc [ 98.211071][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38c33682b0 [ 98.219060][ T5835] R13: 0000000000000000 R14: 00007f38c3369020 R15: 00007f38c32a8050 [ 98.227072][ T5835] </TASK> [ 98.230767][ T5835] Kernel Offset: disabled [ 98.235129][ T5835] Rebooting in 86400 seconds..