./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1457983676 <...> Warning: Permanently added '10.128.1.95' (ECDSA) to the list of known hosts. execve("./syz-executor1457983676", ["./syz-executor1457983676"], 0x7ffe965b00c0 /* 10 vars */) = 0 brk(NULL) = 0x555556675000 brk(0x555556675c40) = 0x555556675c40 arch_prctl(ARCH_SET_FS, 0x555556675300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1457983676", 4096) = 28 brk(0x555556696c40) = 0x555556696c40 brk(0x555556697000) = 0x555556697000 mprotect(0x7f70fdaf4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70f5636000 [ 58.028859][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor145' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f70f5636000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 58.169604][ T4991] loop0: detected capacity change from 0 to 32768 [ 58.180833][ T4991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor145 (4991) [ 58.201984][ T4991] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 58.210890][ T4991] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", MS_NODIRATIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0 dup(3) = 4 [ 58.230417][ T4991] BTRFS info (device loop0): enabling ssd optimizations [ 58.237496][ T4991] BTRFS info (device loop0): auto enabling async discard [ 58.280185][ T4991] ------------[ cut here ]------------ [ 58.285808][ T4991] WARNING: CPU: 0 PID: 4991 at fs/read_write.c:504 __kernel_write_iter+0x604/0x710 [ 58.295622][ T4991] Modules linked in: [ 58.299727][ T4991] CPU: 0 PID: 4991 Comm: syz-executor145 Not tainted 6.3.0-syzkaller-13466-gfc4354c6e5c2 #0 [ 58.311180][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 58.321357][ T4991] RIP: 0010:__kernel_write_iter+0x604/0x710 [ 58.327317][ T4991] Code: 25 28 00 00 00 48 3b 84 24 e0 00 00 00 0f 85 18 01 00 00 4c 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac f3 98 ff <0f> 0b 49 c7 c6 f7 ff ff ff eb a5 e8 9c f3 98 ff 4c 8b 74 24 18 eb [ 58.347240][ T4991] RSP: 0018:ffffc90003c0f700 EFLAGS: 00010293 [ 58.353397][ T4991] RAX: ffffffff81f27394 RBX: 00000000000a801d RCX: ffff88801eedd940 [ 58.361470][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.371457][ T4991] RBP: ffffc90003c0f830 R08: ffffffff81f26e69 R09: 0000000000000000 [ 58.379700][ T4991] R10: ffffc90003c0f8a0 R11: dffffc0000000001 R12: dffffc0000000000 [ 58.387700][ T4991] R13: 1ffff92000781eec R14: ffff88802a61ec80 R15: 1ffff110054c3d9f [ 58.396035][ T4991] FS: 0000555556675300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.405223][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.411973][ T4991] CR2: 00007fc67e9932a9 CR3: 000000007b7e0000 CR4: 00000000003506f0 [ 58.420006][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.427986][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.436027][ T4991] Call Trace: [ 58.439531][ T4991] [ 58.442530][ T4991] ? lockdep_unlock+0x169/0x300 [ 58.447409][ T4991] ? vfs_read+0xb00/0xb00 [ 58.451823][ T4991] ? mark_lock+0x29d/0x340 [ 58.456305][ T4991] ? fsnotify_perm+0x67/0x590 [ 58.461050][ T4991] ? iov_iter_kvec+0x4e/0x1e0 [ 58.465830][ T4991] kernel_write+0x1d8/0x350 [ 58.470413][ T4991] ? __kernel_write+0x170/0x170 [ 58.475304][ T4991] ? btrfs_wait_ordered_extents+0xdbc/0xe20 [ 58.481444][ T4991] ? send_subvol+0x11c/0x4960 [ 58.486138][ T4991] send_subvol+0x1ab/0x4960 [ 58.490672][ T4991] ? __mutex_unlock_slowpath+0x21c/0x750 [ 58.496327][ T4991] ? btrfs_wait_ordered_extents+0xc34/0xe20 [ 58.502311][ T4991] ? mutex_unlock+0x10/0x10 [ 58.506863][ T4991] ? do_raw_spin_unlock+0x13b/0x8b0 [ 58.512148][ T4991] ? ensure_commit_roots_uptodate+0x280/0x280 [ 58.518299][ T4991] ? btrfs_remove_ordered_extent+0x9b0/0x9b0 [ 58.524349][ T4991] ? sort+0xdb/0x110 [ 58.528382][ T4991] ? sort_r+0x1340/0x1430 [ 58.532744][ T4991] ? rcu_is_watching+0x15/0xb0 [ 58.537515][ T4991] ? btrfs_grab_root+0x320/0x320 [ 58.542571][ T4991] ? ensure_commit_roots_uptodate+0x26b/0x280 [ 58.548669][ T4991] btrfs_ioctl_send+0x2113/0x2750 [ 58.553698][ T4991] _btrfs_ioctl_send+0x2ff/0x430 [ 58.558691][ T4991] ? smack_file_ioctl+0x295/0x390 [ 58.563893][ T4991] ? btrfs_ioctl_set_received_subvol_32+0xb90/0xb90 [ 58.570603][ T4991] ? smack_file_alloc_security+0xe0/0xe0 [ 58.576427][ T4991] ? do_notify_parent+0xf50/0xf50 [ 58.581613][ T4991] btrfs_ioctl+0x907/0xd40 [ 58.586096][ T4991] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 58.592601][ T4991] __se_sys_ioctl+0xf1/0x160 [ 58.597411][ T4991] do_syscall_64+0x41/0xc0 [ 58.601928][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.608161][ T4991] RIP: 0033:0x7f70fda82809 [ 58.612864][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.633590][ T4991] RSP: 002b:00007ffdc5263c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.642760][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70fda82809 [ 58.650894][ T4991] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000004 [ 58.659177][ T4991] RBP: 00007f70fda420d0 R08: 0000000000000000 R09: 0000000000000000 [ 58.667155][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70fda42160 [ 58.675192][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.683204][ T4991] [ 58.686212][ T4991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.693488][ T4991] CPU: 0 PID: 4991 Comm: syz-executor145 Not tainted 6.3.0-syzkaller-13466-gfc4354c6e5c2 #0 [ 58.703557][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 58.713611][ T4991] Call Trace: [ 58.717018][ T4991] [ 58.719959][ T4991] dump_stack_lvl+0x1e7/0x2d0 [ 58.724643][ T4991] ? nf_tcp_handle_invalid+0x650/0x650 [ 58.730102][ T4991] ? panic+0x770/0x770 [ 58.734177][ T4991] ? vscnprintf+0x5d/0x80 [ 58.738590][ T4991] panic+0x30f/0x770 [ 58.742578][ T4991] ? __warn+0x171/0x4a0 [ 58.746733][ T4991] ? __memcpy_flushcache+0x2b0/0x2b0 [ 58.752042][ T4991] __warn+0x314/0x4a0 [ 58.756085][ T4991] ? __kernel_write_iter+0x604/0x710 [ 58.761370][ T4991] report_bug+0x2b3/0x500 [ 58.765689][ T4991] ? __kernel_write_iter+0x604/0x710 [ 58.770994][ T4991] handle_bug+0x3d/0x70 [ 58.775145][ T4991] exc_invalid_op+0x1a/0x50 [ 58.779650][ T4991] asm_exc_invalid_op+0x1a/0x20 [ 58.784504][ T4991] RIP: 0010:__kernel_write_iter+0x604/0x710 [ 58.790391][ T4991] Code: 25 28 00 00 00 48 3b 84 24 e0 00 00 00 0f 85 18 01 00 00 4c 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac f3 98 ff <0f> 0b 49 c7 c6 f7 ff ff ff eb a5 e8 9c f3 98 ff 4c 8b 74 24 18 eb [ 58.810157][ T4991] RSP: 0018:ffffc90003c0f700 EFLAGS: 00010293 [ 58.816341][ T4991] RAX: ffffffff81f27394 RBX: 00000000000a801d RCX: ffff88801eedd940 [ 58.824724][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.832709][ T4991] RBP: ffffc90003c0f830 R08: ffffffff81f26e69 R09: 0000000000000000 [ 58.840770][ T4991] R10: ffffc90003c0f8a0 R11: dffffc0000000001 R12: dffffc0000000000 [ 58.848926][ T4991] R13: 1ffff92000781eec R14: ffff88802a61ec80 R15: 1ffff110054c3d9f [ 58.856931][ T4991] ? __kernel_write_iter+0xd9/0x710 [ 58.862321][ T4991] ? __kernel_write_iter+0x604/0x710 [ 58.867619][ T4991] ? lockdep_unlock+0x169/0x300 [ 58.872496][ T4991] ? vfs_read+0xb00/0xb00 [ 58.877007][ T4991] ? mark_lock+0x29d/0x340 [ 58.881528][ T4991] ? fsnotify_perm+0x67/0x590 [ 58.886312][ T4991] ? iov_iter_kvec+0x4e/0x1e0 [ 58.890999][ T4991] kernel_write+0x1d8/0x350 [ 58.895696][ T4991] ? __kernel_write+0x170/0x170 [ 58.900572][ T4991] ? btrfs_wait_ordered_extents+0xdbc/0xe20 [ 58.906550][ T4991] ? send_subvol+0x11c/0x4960 [ 58.911224][ T4991] send_subvol+0x1ab/0x4960 [ 58.915735][ T4991] ? __mutex_unlock_slowpath+0x21c/0x750 [ 58.921489][ T4991] ? btrfs_wait_ordered_extents+0xc34/0xe20 [ 58.927429][ T4991] ? mutex_unlock+0x10/0x10 [ 58.931946][ T4991] ? do_raw_spin_unlock+0x13b/0x8b0 [ 58.937274][ T4991] ? ensure_commit_roots_uptodate+0x280/0x280 [ 58.943357][ T4991] ? btrfs_remove_ordered_extent+0x9b0/0x9b0 [ 58.949387][ T4991] ? sort+0xdb/0x110 [ 58.953394][ T4991] ? sort_r+0x1340/0x1430 [ 58.957987][ T4991] ? rcu_is_watching+0x15/0xb0 [ 58.962951][ T4991] ? btrfs_grab_root+0x320/0x320 [ 58.968094][ T4991] ? ensure_commit_roots_uptodate+0x26b/0x280 [ 58.974259][ T4991] btrfs_ioctl_send+0x2113/0x2750 [ 58.979315][ T4991] _btrfs_ioctl_send+0x2ff/0x430 [ 58.985210][ T4991] ? smack_file_ioctl+0x295/0x390 [ 58.990240][ T4991] ? btrfs_ioctl_set_received_subvol_32+0xb90/0xb90 [ 58.997094][ T4991] ? smack_file_alloc_security+0xe0/0xe0 [ 59.003019][ T4991] ? do_notify_parent+0xf50/0xf50 [ 59.008321][ T4991] btrfs_ioctl+0x907/0xd40 [ 59.012740][ T4991] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 59.019154][ T4991] __se_sys_ioctl+0xf1/0x160 [ 59.023828][ T4991] do_syscall_64+0x41/0xc0 [ 59.028265][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.034277][ T4991] RIP: 0033:0x7f70fda82809 [ 59.038781][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.058560][ T4991] RSP: 002b:00007ffdc5263c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.067353][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70fda82809 [ 59.075355][ T4991] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000004 [ 59.083463][ T4991] RBP: 00007f70fda420d0 R08: 0000000000000000 R09: 0000000000000000 [ 59.091519][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70fda42160 [ 59.099691][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.107686][ T4991] [ 59.110929][ T4991] Kernel Offset: disabled [ 59.115314][ T4991] Rebooting in 86400 seconds..