./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor125474727 <...> Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. execve("./syz-executor125474727", ["./syz-executor125474727"], 0x7fff66d89c20 /* 10 vars */) = 0 brk(NULL) = 0x5555574f9000 brk(0x5555574f9d00) = 0x5555574f9d00 arch_prctl(ARCH_SET_FS, 0x5555574f9380) = 0 set_tid_address(0x5555574f9650) = 5031 set_robust_list(0x5555574f9660, 24) = 0 rseq(0x5555574f9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor125474727", 4096) = 27 getrandom("\x2d\x2a\xa9\x8b\xaa\x66\xc7\xa6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555574f9d00 brk(0x55555751ad00) = 0x55555751ad00 brk(0x55555751b000) = 0x55555751b000 mprotect(0x7ff4c0d56000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b88a1000 [ 60.864804][ T5031] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5031 'syz-executor125' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7ff4b88a1000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 61.003339][ T5031] loop0: detected capacity change from 0 to 32768 [ 61.013338][ T5031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor125 (5031) [ 61.027755][ T5031] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 61.036675][ T5031] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", MS_NODIRATIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0 dup(3) = 4 [ 61.051015][ T5031] BTRFS info (device loop0): enabling ssd optimizations [ 61.058033][ T5031] BTRFS info (device loop0): auto enabling async discard [ 61.080259][ T5031] ------------[ cut here ]------------ [ 61.085816][ T5031] WARNING: CPU: 1 PID: 5031 at fs/read_write.c:504 __kernel_write_iter+0x5d4/0x7e0 [ 61.095161][ T5031] Modules linked in: [ 61.099175][ T5031] CPU: 1 PID: 5031 Comm: syz-executor125 Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 61.109148][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 61.119282][ T5031] RIP: 0010:__kernel_write_iter+0x5d4/0x7e0 [ 61.125225][ T5031] Code: c7 60 cf b6 8c e8 dc 76 3e 08 31 ff 89 c5 89 c6 e8 91 69 9c ff 85 ed 75 1f 48 c7 c5 ea ff ff ff e9 0b ff ff ff e8 0c 6e 9c ff <0f> 0b 48 c7 c5 f7 ff ff ff e9 f8 fe ff ff e8 f9 6d 9c ff 48 b8 00 [ 61.145030][ T5031] RSP: 0018:ffffc90003a9f680 EFLAGS: 00010293 [ 61.151171][ T5031] RAX: 0000000000000000 RBX: ffff888016664000 RCX: 0000000000000000 [ 61.159238][ T5031] RDX: ffff88802564bb80 RSI: ffffffff81ea95e4 RDI: 0000000000000005 [ 61.167291][ T5031] RBP: 00000000000a801d R08: 0000000000000005 R09: 0000000000000000 [ 61.175309][ T5031] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880283a0008 [ 61.183380][ T5031] R13: 1ffff92000753ed2 R14: 0000000000000000 R15: ffff888016664050 [ 61.191424][ T5031] FS: 00005555574f9380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.200451][ T5031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.207114][ T5031] CR2: 00007fff66d87eb0 CR3: 000000007ce25000 CR4: 00000000003506e0 [ 61.215127][ T5031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.223179][ T5031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.231404][ T5031] Call Trace: [ 61.234703][ T5031] [ 61.237671][ T5031] ? __warn+0xe6/0x380 [ 61.241782][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.247123][ T5031] ? report_bug+0x3bc/0x580 [ 61.251660][ T5031] ? handle_bug+0x3c/0x70 [ 61.256033][ T5031] ? exc_invalid_op+0x17/0x40 [ 61.260750][ T5031] ? asm_exc_invalid_op+0x1a/0x20 [ 61.265851][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.271166][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.276532][ T5031] ? do_raw_spin_lock+0x12e/0x2b0 [ 61.281608][ T5031] ? vfs_read+0x930/0x930 [ 61.286122][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 61.291535][ T5031] ? security_file_permission+0x94/0x100 [ 61.297219][ T5031] kernel_write+0x1f8/0x6c0 [ 61.301752][ T5031] ? btrfs_destroy_cachep+0x30/0x30 [ 61.307007][ T5031] ? __kernel_write+0x140/0x140 [ 61.311940][ T5031] ? __kmalloc_node+0xea/0x110 [ 61.316779][ T5031] btrfs_ioctl_send+0x2313/0x6b70 [ 61.321882][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.326692][ T5031] ? changed_cb+0x3590/0x3590 [ 61.331392][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.336276][ T5031] ? lock_release+0x4bf/0x680 [ 61.340997][ T5031] ? __might_fault+0xe5/0x190 [ 61.345698][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 61.351243][ T5031] ? preempt_count_sub+0x150/0x150 [ 61.356432][ T5031] ? _copy_from_user+0x5d/0xf0 [ 61.361254][ T5031] _btrfs_ioctl_send+0x118/0x2f0 [ 61.366254][ T5031] ? btrfs_ioctl_encoded_read+0x920/0x920 [ 61.372018][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.376829][ T5031] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 61.382843][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.387650][ T5031] ? lock_release+0x4bf/0x680 [ 61.392367][ T5031] ? slab_free_freelist_hook+0x114/0x1e0 [ 61.398059][ T5031] ? tomoyo_path_number_perm+0x273/0x590 [ 61.403724][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 61.409160][ T5031] btrfs_ioctl+0x388c/0x5cf0 [ 61.413798][ T5031] ? tomoyo_path_number_perm+0x190/0x590 [ 61.419478][ T5031] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 61.425320][ T5031] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 61.431806][ T5031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.437772][ T5031] ? do_vfs_ioctl+0x379/0x1920 [ 61.442598][ T5031] ? vfs_fileattr_set+0xbf0/0xbf0 [ 61.447705][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.452565][ T5031] ? lock_release+0x4bf/0x680 [ 61.457320][ T5031] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.462299][ T5031] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 61.468785][ T5031] __x64_sys_ioctl+0x18f/0x210 [ 61.473601][ T5031] do_syscall_64+0x38/0xb0 [ 61.478074][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.484006][ T5031] RIP: 0033:0x7ff4c0cde649 [ 61.488462][ T5031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.508172][ T5031] RSP: 002b:00007ffc8ea9b8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.516647][ T5031] RAX: ffffffffffffffda RBX: 00007ffc8ea9bab8 RCX: 00007ff4c0cde649 [ 61.524645][ T5031] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000004 [ 61.532665][ T5031] RBP: 00007ff4c0d56610 R08: 00007ffc8ea9bab8 R09: 00007ffc8ea9bab8 [ 61.540693][ T5031] R10: 00007ffc8ea9bab8 R11: 0000000000000246 R12: 0000000000000001 [ 61.548732][ T5031] R13: 00007ffc8ea9baa8 R14: 0000000000000001 R15: 0000000000000001 [ 61.556766][ T5031] [ 61.559816][ T5031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.567191][ T5031] CPU: 1 PID: 5031 Comm: syz-executor125 Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 61.577100][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 61.587170][ T5031] Call Trace: [ 61.590456][ T5031] [ 61.593400][ T5031] dump_stack_lvl+0xd9/0x1b0 [ 61.598016][ T5031] panic+0x6a4/0x750 [ 61.601943][ T5031] ? panic_smp_self_stop+0xa0/0xa0 [ 61.607079][ T5031] ? show_trace_log_lvl+0x29d/0x3c0 [ 61.612312][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.617617][ T5031] check_panic_on_warn+0xab/0xb0 [ 61.622583][ T5031] __warn+0xf2/0x380 [ 61.626505][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.631821][ T5031] report_bug+0x3bc/0x580 [ 61.636176][ T5031] handle_bug+0x3c/0x70 [ 61.640357][ T5031] exc_invalid_op+0x17/0x40 [ 61.644900][ T5031] asm_exc_invalid_op+0x1a/0x20 [ 61.649776][ T5031] RIP: 0010:__kernel_write_iter+0x5d4/0x7e0 [ 61.655691][ T5031] Code: c7 60 cf b6 8c e8 dc 76 3e 08 31 ff 89 c5 89 c6 e8 91 69 9c ff 85 ed 75 1f 48 c7 c5 ea ff ff ff e9 0b ff ff ff e8 0c 6e 9c ff <0f> 0b 48 c7 c5 f7 ff ff ff e9 f8 fe ff ff e8 f9 6d 9c ff 48 b8 00 [ 61.675332][ T5031] RSP: 0018:ffffc90003a9f680 EFLAGS: 00010293 [ 61.681418][ T5031] RAX: 0000000000000000 RBX: ffff888016664000 RCX: 0000000000000000 [ 61.689416][ T5031] RDX: ffff88802564bb80 RSI: ffffffff81ea95e4 RDI: 0000000000000005 [ 61.697490][ T5031] RBP: 00000000000a801d R08: 0000000000000005 R09: 0000000000000000 [ 61.705484][ T5031] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880283a0008 [ 61.713477][ T5031] R13: 1ffff92000753ed2 R14: 0000000000000000 R15: ffff888016664050 [ 61.721478][ T5031] ? __kernel_write_iter+0x5d4/0x7e0 [ 61.726791][ T5031] ? do_raw_spin_lock+0x12e/0x2b0 [ 61.731848][ T5031] ? vfs_read+0x930/0x930 [ 61.736197][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 61.741605][ T5031] ? security_file_permission+0x94/0x100 [ 61.747264][ T5031] kernel_write+0x1f8/0x6c0 [ 61.751788][ T5031] ? btrfs_destroy_cachep+0x30/0x30 [ 61.757025][ T5031] ? __kernel_write+0x140/0x140 [ 61.761907][ T5031] ? __kmalloc_node+0xea/0x110 [ 61.766712][ T5031] btrfs_ioctl_send+0x2313/0x6b70 [ 61.771786][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.776572][ T5031] ? changed_cb+0x3590/0x3590 [ 61.781282][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.786067][ T5031] ? lock_release+0x4bf/0x680 [ 61.790774][ T5031] ? __might_fault+0xe5/0x190 [ 61.795498][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 61.800912][ T5031] ? preempt_count_sub+0x150/0x150 [ 61.806066][ T5031] ? _copy_from_user+0x5d/0xf0 [ 61.810871][ T5031] _btrfs_ioctl_send+0x118/0x2f0 [ 61.815841][ T5031] ? btrfs_ioctl_encoded_read+0x920/0x920 [ 61.821677][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.826460][ T5031] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 61.832468][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.837271][ T5031] ? lock_release+0x4bf/0x680 [ 61.841999][ T5031] ? slab_free_freelist_hook+0x114/0x1e0 [ 61.847671][ T5031] ? tomoyo_path_number_perm+0x273/0x590 [ 61.853330][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 61.858737][ T5031] btrfs_ioctl+0x388c/0x5cf0 [ 61.863361][ T5031] ? tomoyo_path_number_perm+0x190/0x590 [ 61.869016][ T5031] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 61.874845][ T5031] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 61.881297][ T5031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.887228][ T5031] ? do_vfs_ioctl+0x379/0x1920 [ 61.892029][ T5031] ? vfs_fileattr_set+0xbf0/0xbf0 [ 61.897093][ T5031] ? rcu_is_watching+0x12/0xb0 [ 61.901880][ T5031] ? lock_release+0x4bf/0x680 [ 61.906592][ T5031] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.911553][ T5031] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 61.918000][ T5031] __x64_sys_ioctl+0x18f/0x210 [ 61.922803][ T5031] do_syscall_64+0x38/0xb0 [ 61.927244][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.933165][ T5031] RIP: 0033:0x7ff4c0cde649 [ 61.937592][ T5031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.957219][ T5031] RSP: 002b:00007ffc8ea9b8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.965682][ T5031] RAX: ffffffffffffffda RBX: 00007ffc8ea9bab8 RCX: 00007ff4c0cde649 [ 61.973766][ T5031] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000004 [ 61.981755][ T5031] RBP: 00007ff4c0d56610 R08: 00007ffc8ea9bab8 R09: 00007ffc8ea9bab8 [ 61.989744][ T5031] R10: 00007ffc8ea9bab8 R11: 0000000000000246 R12: 0000000000000001 [ 61.997731][ T5031] R13: 00007ffc8ea9baa8 R14: 0000000000000001 R15: 0000000000000001 [ 62.005728][ T5031] [ 62.009072][ T5031] Kernel Offset: disabled [ 62.013398][ T5031] Rebooting in 86400 seconds..