./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4229554467
<...>
forked to background, child pid 4660
[ 37.905946][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 37.928951][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 38.346058][ T4739] sshd (4739) used greatest stack depth: 19680 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts.
execve("./syz-executor4229554467", ["./syz-executor4229554467"], 0x7fff5574dfe0 /* 10 vars */) = 0
brk(NULL) = 0x5555556f9000
brk(0x5555556f9c40) = 0x5555556f9c40
arch_prctl(ARCH_SET_FS, 0x5555556f9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4229554467", 4096) = 28
brk(0x55555571ac40) = 0x55555571ac40
brk(0x55555571b000) = 0x55555571b000
mprotect(0x7fb118c7e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb1107c0000
syzkaller login: [ 71.921019][ T4995] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4995 'syz-executor422'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fb1107c0000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 72.097775][ T4995] loop0: detected capacity change from 0 to 32768
[ 72.110081][ T4995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor422 (4995)
[ 72.128766][ T4995] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[ 72.137917][ T4995] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", MS_NODIRATIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0
openat(AT_FDCWD, "/dev/ppp", O_RDONLY) = 4
[ 72.159663][ T4995] BTRFS info (device loop0): enabling ssd optimizations
[ 72.166843][ T4995] BTRFS info (device loop0): auto enabling async discard
[ 72.210051][ T4995] ------------[ cut here ]------------
[ 72.215547][ T4995] WARNING: CPU: 0 PID: 4995 at fs/read_write.c:504 __kernel_write_iter+0x604/0x710
[ 72.225016][ T4995] Modules linked in:
[ 72.228973][ T4995] CPU: 0 PID: 4995 Comm: syz-executor422 Not tainted 6.3.0-syzkaller-13164-g78b421b6a7c6 #0
[ 72.239122][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 72.249263][ T4995] RIP: 0010:__kernel_write_iter+0x604/0x710
[ 72.255231][ T4995] Code: 25 28 00 00 00 48 3b 84 24 e0 00 00 00 0f 85 18 01 00 00 4c 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bc ec 98 ff <0f> 0b 49 c7 c6 f7 ff ff ff eb a5 e8 ac ec 98 ff 4c 8b 74 24 18 eb
[ 72.274961][ T4995] RSP: 0018:ffffc90003bbf700 EFLAGS: 00010293
[ 72.281177][ T4995] RAX: ffffffff81f2a354 RBX: 00000000000a001d RCX: ffff88802a0b3b80
[ 72.289256][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 72.297333][ T4995] RBP: ffffc90003bbf830 R08: ffffffff81f29e29 R09: 0000000000000000
[ 72.305348][ T4995] R10: ffffc90003bbf8a0 R11: dffffc0000000001 R12: dffffc0000000000
[ 72.313441][ T4995] R13: 1ffff92000777eec R14: ffff88801e7ca000 R15: 1ffff11003cf940f
[ 72.321508][ T4995] FS: 00005555556f9300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 72.330617][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.337323][ T4995] CR2: 000055c8435d5000 CR3: 0000000023c8b000 CR4: 00000000003506f0
[ 72.345336][ T4995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 72.353422][ T4995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 72.361484][ T4995] Call Trace:
[ 72.364803][ T4995]
[ 72.367845][ T4995] ? lockdep_unlock+0x169/0x300
[ 72.372750][ T4995] ? vfs_read+0xb80/0xb80
[ 72.377215][ T4995] ? mark_lock+0x29d/0x340
[ 72.381684][ T4995] ? fsnotify_perm+0x67/0x590
[ 72.386492][ T4995] ? iov_iter_kvec+0x4e/0x1e0
[ 72.391224][ T4995] kernel_write+0x1d8/0x350
[ 72.395793][ T4995] ? __kernel_write+0x170/0x170
[ 72.400803][ T4995] ? btrfs_wait_ordered_extents+0xdbc/0xe20
[ 72.406799][ T4995] ? send_subvol+0x11c/0x4960
[ 72.411515][ T4995] send_subvol+0x1ab/0x4960
[ 72.416104][ T4995] ? __mutex_unlock_slowpath+0x21c/0x750
[ 72.421791][ T4995] ? btrfs_wait_ordered_extents+0xc34/0xe20
[ 72.427776][ T4995] ? mutex_unlock+0x10/0x10
[ 72.432315][ T4995] ? do_raw_spin_unlock+0x13b/0x8b0
[ 72.437603][ T4995] ? ensure_commit_roots_uptodate+0x280/0x280
[ 72.443722][ T4995] ? btrfs_remove_ordered_extent+0x9b0/0x9b0
[ 72.449785][ T4995] ? sort+0xdb/0x110
[ 72.453728][ T4995] ? sort_r+0x13b0/0x1430
[ 72.458149][ T4995] ? rcu_is_watching+0x15/0xb0
[ 72.462940][ T4995] ? btrfs_grab_root+0x320/0x320
[ 72.467936][ T4995] ? ensure_commit_roots_uptodate+0x26b/0x280
[ 72.474036][ T4995] btrfs_ioctl_send+0x2113/0x2750
[ 72.479133][ T4995] _btrfs_ioctl_send+0x2ff/0x430
[ 72.484184][ T4995] ? smack_file_ioctl+0x295/0x390
[ 72.489276][ T4995] ? btrfs_ioctl_set_received_subvol_32+0xb90/0xb90
[ 72.495933][ T4995] ? smack_file_alloc_security+0xe0/0xe0
[ 72.501595][ T4995] ? do_notify_parent+0xf50/0xf50
[ 72.506675][ T4995] btrfs_ioctl+0x907/0xd40
[ 72.511173][ T4995] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 72.517664][ T4995] __se_sys_ioctl+0xf1/0x160
[ 72.522470][ T4995] do_syscall_64+0x41/0xc0
[ 72.526966][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 72.532911][ T4995] RIP: 0033:0x7fb118c0c829
[ 72.537378][ T4995] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 72.557124][ T4995] RSP: 002b:00007fff766624e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 72.565567][ T4995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb118c0c829
[ 72.573649][ T4995] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003
[ 72.581691][ T4995] RBP: 00007fb118bcc0f0 R08: 0000000000000000 R09: 0000000000000000
[ 72.589734][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb118bcc180
[ 72.598220][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 72.606288][ T4995]
[ 72.609334][ T4995] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 72.616635][ T4995] CPU: 0 PID: 4995 Comm: syz-executor422 Not tainted 6.3.0-syzkaller-13164-g78b421b6a7c6 #0
[ 72.626722][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 72.636790][ T4995] Call Trace:
[ 72.640161][ T4995]
[ 72.643105][ T4995] dump_stack_lvl+0x1e7/0x2d0
[ 72.647805][ T4995] ? nf_tcp_handle_invalid+0x650/0x650
[ 72.653274][ T4995] ? panic+0x770/0x770
[ 72.657359][ T4995] ? vscnprintf+0x5d/0x80
[ 72.661733][ T4995] panic+0x30f/0x770
[ 72.665640][ T4995] ? __warn+0x171/0x4a0
[ 72.669820][ T4995] ? __memcpy_flushcache+0x2b0/0x2b0
[ 72.675157][ T4995] __warn+0x314/0x4a0
[ 72.679175][ T4995] ? __kernel_write_iter+0x604/0x710
[ 72.684499][ T4995] report_bug+0x2b3/0x500
[ 72.688858][ T4995] ? __kernel_write_iter+0x604/0x710
[ 72.694183][ T4995] handle_bug+0x3d/0x70
[ 72.698376][ T4995] exc_invalid_op+0x1a/0x50
[ 72.702915][ T4995] asm_exc_invalid_op+0x1a/0x20
[ 72.707796][ T4995] RIP: 0010:__kernel_write_iter+0x604/0x710
[ 72.713719][ T4995] Code: 25 28 00 00 00 48 3b 84 24 e0 00 00 00 0f 85 18 01 00 00 4c 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bc ec 98 ff <0f> 0b 49 c7 c6 f7 ff ff ff eb a5 e8 ac ec 98 ff 4c 8b 74 24 18 eb
[ 72.733339][ T4995] RSP: 0018:ffffc90003bbf700 EFLAGS: 00010293
[ 72.739415][ T4995] RAX: ffffffff81f2a354 RBX: 00000000000a001d RCX: ffff88802a0b3b80
[ 72.747394][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 72.755372][ T4995] RBP: ffffc90003bbf830 R08: ffffffff81f29e29 R09: 0000000000000000
[ 72.763349][ T4995] R10: ffffc90003bbf8a0 R11: dffffc0000000001 R12: dffffc0000000000
[ 72.771328][ T4995] R13: 1ffff92000777eec R14: ffff88801e7ca000 R15: 1ffff11003cf940f
[ 72.779315][ T4995] ? __kernel_write_iter+0xd9/0x710
[ 72.784530][ T4995] ? __kernel_write_iter+0x604/0x710
[ 72.789843][ T4995] ? lockdep_unlock+0x169/0x300
[ 72.794720][ T4995] ? vfs_read+0xb80/0xb80
[ 72.799078][ T4995] ? mark_lock+0x29d/0x340
[ 72.803517][ T4995] ? fsnotify_perm+0x67/0x590
[ 72.808203][ T4995] ? iov_iter_kvec+0x4e/0x1e0
[ 72.812895][ T4995] kernel_write+0x1d8/0x350
[ 72.817417][ T4995] ? __kernel_write+0x170/0x170
[ 72.822281][ T4995] ? btrfs_wait_ordered_extents+0xdbc/0xe20
[ 72.828188][ T4995] ? send_subvol+0x11c/0x4960
[ 72.832879][ T4995] send_subvol+0x1ab/0x4960
[ 72.837404][ T4995] ? __mutex_unlock_slowpath+0x21c/0x750
[ 72.843054][ T4995] ? btrfs_wait_ordered_extents+0xc34/0xe20
[ 72.849053][ T4995] ? mutex_unlock+0x10/0x10
[ 72.853573][ T4995] ? do_raw_spin_unlock+0x13b/0x8b0
[ 72.858797][ T4995] ? ensure_commit_roots_uptodate+0x280/0x280
[ 72.864881][ T4995] ? btrfs_remove_ordered_extent+0x9b0/0x9b0
[ 72.870869][ T4995] ? sort+0xdb/0x110
[ 72.874776][ T4995] ? sort_r+0x13b0/0x1430
[ 72.879112][ T4995] ? rcu_is_watching+0x15/0xb0
[ 72.883880][ T4995] ? btrfs_grab_root+0x320/0x320
[ 72.888822][ T4995] ? ensure_commit_roots_uptodate+0x26b/0x280
[ 72.894911][ T4995] btrfs_ioctl_send+0x2113/0x2750
[ 72.899952][ T4995] _btrfs_ioctl_send+0x2ff/0x430
[ 72.904982][ T4995] ? smack_file_ioctl+0x295/0x390
[ 72.910041][ T4995] ? btrfs_ioctl_set_received_subvol_32+0xb90/0xb90
[ 72.916640][ T4995] ? smack_file_alloc_security+0xe0/0xe0
[ 72.922284][ T4995] ? do_notify_parent+0xf50/0xf50
[ 72.927326][ T4995] btrfs_ioctl+0x907/0xd40
[ 72.931764][ T4995] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 72.938236][ T4995] __se_sys_ioctl+0xf1/0x160
[ 72.942844][ T4995] do_syscall_64+0x41/0xc0
[ 72.947291][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 72.953196][ T4995] RIP: 0033:0x7fb118c0c829
[ 72.957618][ T4995] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 72.977236][ T4995] RSP: 002b:00007fff766624e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 72.985657][ T4995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb118c0c829
[ 72.993632][ T4995] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003
[ 73.001624][ T4995] RBP: 00007fb118bcc0f0 R08: 0000000000000000 R09: 0000000000000000
[ 73.009603][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb118bcc180
[ 73.017586][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 73.025571][ T4995]
[ 73.028839][ T4995] Kernel Offset: disabled
[ 73.033254][ T4995] Rebooting in 86400 seconds..