./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor839905183
<...>
forked to background, child pid 3207
no interfaces have a carrier
[ 27.450983][ T3208] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.460219][ T3208] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.164' (ECDSA) to the list of known hosts.
execve("./syz-executor839905183", ["./syz-executor839905183"], 0x7ffd28a5b8e0 /* 10 vars */) = 0
brk(NULL) = 0x5555561c4000
brk(0x5555561c4c40) = 0x5555561c4c40
arch_prctl(ARCH_SET_FS, 0x5555561c4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor839905183", 4096) = 27
brk(0x5555561e5c40) = 0x5555561e5c40
brk(0x5555561e6000) = 0x5555561e6000
mprotect(0x7fbb05d42000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbafd884000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fbafd884000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 54.474305][ T3628] loop0: detected capacity change from 0 to 32768
[ 54.486500][ T3628] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop0 scanned by syz-executor839 (3628)
[ 54.504170][ T3628] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 54.513630][ T3628] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", 0, "noflushoncommit,rescan_uuid_tree,noacl,noautodefrag,datacow,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0
[ 54.532777][ T3628] BTRFS info (device loop0): enabling ssd optimizations
[ 54.541649][ T3628] BTRFS info (device loop0): checking UUID tree
[ 54.579230][ T3628] ------------[ cut here ]------------
[ 54.584757][ T3628] WARNING: CPU: 1 PID: 3628 at fs/read_write.c:504 __kernel_write_iter+0x5a8/0x730
[ 54.594534][ T3628] Modules linked in:
[ 54.598699][ T3628] CPU: 1 PID: 3628 Comm: syz-executor839 Not tainted 6.1.0-syzkaller-00071-g3a28c2c89f4b #0
[ 54.609076][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.619415][ T3628] RIP: 0010:__kernel_write_iter+0x5a8/0x730
[ 54.625362][ T3628] Code: 8c e8 fc f9 c6 07 31 ff 89 c3 89 c6 e8 51 0a a5 ff 85 db 0f 85 06 bd ce 07 49 c7 c6 ea ff ff ff e9 11 ff ff ff e8 88 0d a5 ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 fe fe ff ff e8 75 0d a5 ff 4c 89 ea
[ 54.645389][ T3628] RSP: 0018:ffffc90003f5f6f0 EFLAGS: 00010293
[ 54.651758][ T3628] RAX: 0000000000000000 RBX: 00000000000a801d RCX: 0000000000000000
[ 54.660234][ T3628] RDX: ffff888020310000 RSI: ffffffff81db0fd8 RDI: 0000000000000005
[ 54.668482][ T3628] RBP: 1ffff920007ebee0 R08: 0000000000000005 R09: 0000000000000000
[ 54.676655][ T3628] R10: 0000000000000000 R11: 0000000000000005 R12: ffff888078b38f00
[ 54.684947][ T3628] R13: ffff888078b38f7c R14: 0000000000000000 R15: ffff888020795c08
[ 54.693292][ T3628] FS: 00005555561c4300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 54.702326][ T3628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.708968][ T3628] CR2: 00007ffd28a59ea8 CR3: 0000000072b95000 CR4: 0000000000350ee0
[ 54.716929][ T3628] Call Trace:
[ 54.720277][ T3628]
[ 54.723220][ T3628] ? vfs_read+0x930/0x930
[ 54.727541][ T3628] ? apparmor_file_permission+0x268/0x4e0
[ 54.733328][ T3628] ? bpf_lsm_file_permission+0x9/0x10
[ 54.738752][ T3628] ? security_file_permission+0xaf/0xd0
[ 54.744302][ T3628] kernel_write+0x1c1/0x630
[ 54.748844][ T3628] ? btrfs_drop_inode+0x170/0x170
[ 54.753899][ T3628] ? __kernel_write+0x110/0x110
[ 54.758815][ T3628] btrfs_ioctl_send+0x21ae/0x64e0
[ 54.763868][ T3628] ? changed_cb+0x35e0/0x35e0
[ 54.768886][ T3628] ? __might_fault+0xd9/0x180
[ 54.773597][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 54.778532][ T3628] ? _copy_from_user+0xfd/0x170
[ 54.783424][ T3628] _btrfs_ioctl_send+0x231/0x2e0
[ 54.788726][ T3628] ? defrag_collect_targets+0x1430/0x1430
[ 54.794450][ T3628] ? tomoyo_path_number_perm+0x242/0x570
[ 54.800336][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 54.805224][ T3628] ? __kmem_cache_free+0xaf/0x3b0
[ 54.810324][ T3628] btrfs_ioctl+0x39c1/0x5c40
[ 54.814952][ T3628] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 54.820825][ T3628] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 54.827275][ T3628] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 54.833256][ T3628] ? do_vfs_ioctl+0x132/0x1600
[ 54.838063][ T3628] ? vfs_fileattr_set+0xbe0/0xbe0
[ 54.843084][ T3628] ? find_held_lock+0x2d/0x110
[ 54.847894][ T3628] ? name_to_dev_t+0x12/0x990
[ 54.852598][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 54.857463][ T3628] ? bpf_lsm_file_ioctl+0x9/0x10
[ 54.862475][ T3628] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 54.868967][ T3628] __x64_sys_ioctl+0x197/0x210
[ 54.873728][ T3628] do_syscall_64+0x39/0xb0
[ 54.878223][ T3628] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.884145][ T3628] RIP: 0033:0x7fbb05cd0b49
[ 54.888616][ T3628] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.908299][ T3628] RSP: 002b:00007fff41188348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 54.916731][ T3628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb05cd0b49
[ 54.924774][ T3628] RDX: 00000000200003c0 RSI: 0000000040489426 RDI: 0000000000000003
[ 54.932925][ T3628] RBP: 00007fbb05c90410 R08: 0000000000000000 R09: 0000000000000000
[ 54.940987][ T3628] R10: 00000000000051af R11: 0000000000000246 R12: 00007fbb05c904a0
[ 54.949087][ T3628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.957321][ T3628]
[ 54.960390][ T3628] Kernel panic - not syncing: panic_on_warn set ...
[ 54.966982][ T3628] CPU: 1 PID: 3628 Comm: syz-executor839 Not tainted 6.1.0-syzkaller-00071-g3a28c2c89f4b #0
[ 54.977039][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.987093][ T3628] Call Trace:
[ 54.990363][ T3628]
[ 54.993282][ T3628] dump_stack_lvl+0xd1/0x138
[ 54.997869][ T3628] panic+0x2cc/0x626
[ 55.001847][ T3628] ? panic_print_sys_info.part.0+0x110/0x110
[ 55.007846][ T3628] ? __warn.cold+0x24b/0x350
[ 55.012430][ T3628] ? __kernel_write_iter+0x5a8/0x730
[ 55.017806][ T3628] __warn.cold+0x25c/0x350
[ 55.022248][ T3628] ? __kernel_write_iter+0x5a8/0x730
[ 55.027625][ T3628] report_bug+0x1c0/0x210
[ 55.031968][ T3628] handle_bug+0x3c/0x70
[ 55.036130][ T3628] exc_invalid_op+0x18/0x50
[ 55.040637][ T3628] asm_exc_invalid_op+0x1a/0x20
[ 55.045486][ T3628] RIP: 0010:__kernel_write_iter+0x5a8/0x730
[ 55.051381][ T3628] Code: 8c e8 fc f9 c6 07 31 ff 89 c3 89 c6 e8 51 0a a5 ff 85 db 0f 85 06 bd ce 07 49 c7 c6 ea ff ff ff e9 11 ff ff ff e8 88 0d a5 ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 fe fe ff ff e8 75 0d a5 ff 4c 89 ea
[ 55.070993][ T3628] RSP: 0018:ffffc90003f5f6f0 EFLAGS: 00010293
[ 55.077054][ T3628] RAX: 0000000000000000 RBX: 00000000000a801d RCX: 0000000000000000
[ 55.085024][ T3628] RDX: ffff888020310000 RSI: ffffffff81db0fd8 RDI: 0000000000000005
[ 55.092996][ T3628] RBP: 1ffff920007ebee0 R08: 0000000000000005 R09: 0000000000000000
[ 55.100965][ T3628] R10: 0000000000000000 R11: 0000000000000005 R12: ffff888078b38f00
[ 55.109017][ T3628] R13: ffff888078b38f7c R14: 0000000000000000 R15: ffff888020795c08
[ 55.116996][ T3628] ? __kernel_write_iter+0x5a8/0x730
[ 55.122300][ T3628] ? vfs_read+0x930/0x930
[ 55.126632][ T3628] ? apparmor_file_permission+0x268/0x4e0
[ 55.132536][ T3628] ? bpf_lsm_file_permission+0x9/0x10
[ 55.137908][ T3628] ? security_file_permission+0xaf/0xd0
[ 55.143463][ T3628] kernel_write+0x1c1/0x630
[ 55.148314][ T3628] ? btrfs_drop_inode+0x170/0x170
[ 55.153336][ T3628] ? __kernel_write+0x110/0x110
[ 55.158196][ T3628] btrfs_ioctl_send+0x21ae/0x64e0
[ 55.163228][ T3628] ? changed_cb+0x35e0/0x35e0
[ 55.167898][ T3628] ? __might_fault+0xd9/0x180
[ 55.172575][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 55.177434][ T3628] ? _copy_from_user+0xfd/0x170
[ 55.182291][ T3628] _btrfs_ioctl_send+0x231/0x2e0
[ 55.187233][ T3628] ? defrag_collect_targets+0x1430/0x1430
[ 55.192960][ T3628] ? tomoyo_path_number_perm+0x242/0x570
[ 55.198599][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 55.203458][ T3628] ? __kmem_cache_free+0xaf/0x3b0
[ 55.208485][ T3628] btrfs_ioctl+0x39c1/0x5c40
[ 55.213079][ T3628] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 55.218890][ T3628] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 55.225308][ T3628] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 55.231207][ T3628] ? do_vfs_ioctl+0x132/0x1600
[ 55.235971][ T3628] ? vfs_fileattr_set+0xbe0/0xbe0
[ 55.241000][ T3628] ? find_held_lock+0x2d/0x110
[ 55.245765][ T3628] ? name_to_dev_t+0x12/0x990
[ 55.250442][ T3628] ? lock_downgrade+0x6e0/0x6e0
[ 55.255302][ T3628] ? bpf_lsm_file_ioctl+0x9/0x10
[ 55.260235][ T3628] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 55.266651][ T3628] __x64_sys_ioctl+0x197/0x210
[ 55.271416][ T3628] do_syscall_64+0x39/0xb0
[ 55.275840][ T3628] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.281733][ T3628] RIP: 0033:0x7fbb05cd0b49
[ 55.286140][ T3628] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.305750][ T3628] RSP: 002b:00007fff41188348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.314166][ T3628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb05cd0b49
[ 55.322144][ T3628] RDX: 00000000200003c0 RSI: 0000000040489426 RDI: 0000000000000003
[ 55.330112][ T3628] RBP: 00007fbb05c90410 R08: 0000000000000000 R09: 0000000000000000
[ 55.338075][ T3628] R10: 00000000000051af R11: 0000000000000246 R12: 00007fbb05c904a0
[ 55.346038][ T3628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.354030][ T3628]
[ 55.357957][ T3628] Kernel Offset: disabled
[ 55.362338][ T3628] Rebooting in 86400 seconds..