./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3225864873 <...> Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. execve("./syz-executor3225864873", ["./syz-executor3225864873"], 0x7ffc1ccbd3b0 /* 10 vars */) = 0 brk(NULL) = 0x555555fa8000 brk(0x555555fa8d00) = 0x555555fa8d00 arch_prctl(ARCH_SET_FS, 0x555555fa8380) = 0 set_tid_address(0x555555fa8650) = 5015 set_robust_list(0x555555fa8660, 24) = 0 rseq(0x555555fa8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3225864873", 4096) = 28 getrandom("\x87\xb5\x2e\x71\x4b\xfe\xe6\x8c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555fa8d00 brk(0x555555fc9d00) = 0x555555fc9d00 brk(0x555555fca000) = 0x555555fca000 mprotect(0x7fd505a70000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 63.306841][ T26] audit: type=1400 audit(1690901284.129:83): avc: denied { write } for pid=5012 comm="strace-static-x" path="pipe:[1804]" dev="pipefs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 63.331926][ T26] audit: type=1400 audit(1690901284.159:84): avc: denied { execmem } for pid=5015 comm="syz-executor322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd4fd5bb000 [ 63.333013][ T5015] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5015 'syz-executor322' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fd4fd5bb000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 63.505536][ T26] audit: type=1400 audit(1690901284.329:85): avc: denied { read write } for pid=5015 comm="syz-executor322" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.508015][ T5015] loop0: detected capacity change from 0 to 32768 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 [ 63.530821][ T26] audit: type=1400 audit(1690901284.329:86): avc: denied { open } for pid=5015 comm="syz-executor322" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.547180][ T5015] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor322 (5015) [ 63.562221][ T26] audit: type=1400 audit(1690901284.329:87): avc: denied { ioctl } for pid=5015 comm="syz-executor322" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.600166][ T26] audit: type=1400 audit(1690901284.359:88): avc: denied { mounton } for pid=5015 comm="syz-executor322" path="/root/bus" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.612649][ T5015] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 63.631858][ T5015] BTRFS info (device loop0): doing ref verification [ 63.638803][ T5015] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 63.649702][ T5015] BTRFS info (device loop0): force zlib compression, level 3 [ 63.657236][ T5015] BTRFS info (device loop0): allowing degraded mounts [ 63.663993][ T5015] BTRFS info (device loop0): using free space tree [ 63.683759][ T5015] BTRFS info (device loop0): auto enabling async discard mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 [ 63.695102][ T26] audit: type=1400 audit(1690901284.519:89): avc: denied { mount } for pid=5015 comm="syz-executor322" name="/" dev="loop0" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.742560][ T5015] BTRFS info (device loop0): balance: start -susage=7,stripes=0..23665 [ 63.755296][ T5015] ------------[ cut here ]------------ [ 63.760964][ T5015] BTRFS: Transaction aborted (error -28) [ 63.767157][ T5015] WARNING: CPU: 1 PID: 5015 at fs/btrfs/block-group.c:2659 btrfs_create_pending_block_groups+0xec7/0x11c0 [ 63.778593][ T5015] Modules linked in: [ 63.782536][ T5015] CPU: 1 PID: 5015 Comm: syz-executor322 Not tainted 6.5.0-rc4-syzkaller #0 [ 63.791356][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 63.801508][ T5015] RIP: 0010:btrfs_create_pending_block_groups+0xec7/0x11c0 [ 63.808836][ T5015] Code: fd 44 89 f6 48 c7 c7 c0 d7 b7 8a e8 03 f2 b9 fd 0f 0b e9 88 fe ff ff e8 97 30 f3 fd 89 de 48 c7 c7 c0 d7 b7 8a e8 e9 f1 b9 fd <0f> 0b e9 3d fe ff ff e8 fd 59 46 fe e9 61 f8 ff ff e8 f3 59 46 fe [ 63.828597][ T5015] RSP: 0018:ffffc900034af6c0 EFLAGS: 00010286 [ 63.834855][ T5015] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 63.843301][ T5015] RDX: ffff88802a2f40c0 RSI: ffffffff814be346 RDI: 0000000000000001 [ 63.851448][ T5015] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 63.859509][ T5015] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888023dcc9c0 [ 63.867609][ T5015] R13: ffff888023dcc800 R14: ffff888023dcc850 R15: dffffc0000000000 [ 63.875665][ T5015] FS: 0000555555fa8380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 63.884705][ T5015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.891322][ T5015] CR2: 0000000020002280 CR3: 000000002d811000 CR4: 00000000003506e0 [ 63.899415][ T5015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.907499][ T5015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.915572][ T5015] Call Trace: [ 63.918876][ T5015] [ 63.921838][ T5015] ? __warn+0xe6/0x380 [ 63.926030][ T5015] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 63.932645][ T5015] ? report_bug+0x3bc/0x580 [ 63.937207][ T5015] ? handle_bug+0x3c/0x70 [ 63.941554][ T5015] ? exc_invalid_op+0x17/0x40 [ 63.946297][ T5015] ? asm_exc_invalid_op+0x1a/0x20 [ 63.951336][ T5015] ? __warn_printk+0x1a6/0x350 [ 63.956162][ T5015] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 63.962774][ T5015] ? btrfs_inc_block_group_ro+0x447/0x610 [ 63.968576][ T5015] ? btrfs_read_block_groups+0x17b0/0x17b0 [ 63.974447][ T5015] ? __mutex_unlock_slowpath+0xe0/0x640 [ 63.980008][ T5015] ? spin_bug+0x1d0/0x1d0 [ 63.984419][ T5015] ? do_raw_spin_unlock+0x173/0x230 [ 63.989643][ T5015] ? btrfs_trans_release_metadata+0x172/0x230 [ 63.995808][ T5015] __btrfs_end_transaction+0xf1/0x940 [ 64.001193][ T5015] btrfs_inc_block_group_ro+0x44f/0x610 [ 64.006815][ T5015] btrfs_relocate_block_group+0x216/0xd90 [ 64.012560][ T5015] btrfs_relocate_chunk+0x143/0x440 [ 64.017833][ T5015] btrfs_balance+0x20fc/0x3ef0 [ 64.022640][ T5015] ? btrfs_relocate_chunk+0x440/0x440 [ 64.028110][ T5015] btrfs_ioctl+0x1362/0x5cf0 [ 64.032727][ T5015] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 64.039193][ T5015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.045167][ T5015] ? do_vfs_ioctl+0x379/0x1910 [ 64.049933][ T5015] ? vfs_fileattr_set+0xbf0/0xbf0 [ 64.055024][ T5015] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x460 [ 64.061549][ T5015] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x460 [ 64.068245][ T5015] ? selinux_bprm_creds_for_exec+0xb30/0xb30 [ 64.074251][ T5015] ? find_held_lock+0x2d/0x110 [ 64.079089][ T5015] ? selinux_file_ioctl+0x17d/0x270 [ 64.084406][ T5015] ? selinux_file_ioctl+0xb5/0x270 [ 64.089543][ T5015] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 64.096088][ T5015] __x64_sys_ioctl+0x18f/0x210 [ 64.100886][ T5015] do_syscall_64+0x38/0xb0 [ 64.105378][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.111287][ T5015] RIP: 0033:0x7fd5059f89f9 [ 64.115873][ T5015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.135551][ T5015] RSP: 002b:00007ffd1f3fcb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.143958][ T5015] RAX: ffffffffffffffda RBX: 00007ffd1f3fcd58 RCX: 00007fd5059f89f9 [ 64.152015][ T5015] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 64.160077][ T5015] RBP: 00007fd505a70610 R08: 0000000000000000 R09: 00007ffd1f3fcd58 [ 64.168107][ T5015] R10: 00000000000050e9 R11: 0000000000000246 R12: 0000000000000001 [ 64.176173][ T5015] R13: 00007ffd1f3fcd48 R14: 0000000000000001 R15: 0000000000000001 [ 64.184149][ T5015] [ 64.187209][ T5015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.188396][ T26] audit: type=1400 audit(1690901285.009:90): avc: denied { append } for pid=4452 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.188440][ T26] audit: type=1400 audit(1690901285.009:91): avc: denied { open } for pid=4452 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.188479][ T26] audit: type=1400 audit(1690901285.009:92): avc: denied { getattr } for pid=4452 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.261334][ T5015] CPU: 1 PID: 5015 Comm: syz-executor322 Not tainted 6.5.0-rc4-syzkaller #0 [ 64.270004][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 64.280053][ T5015] Call Trace: [ 64.283327][ T5015] [ 64.286249][ T5015] dump_stack_lvl+0xd9/0x1b0 [ 64.290833][ T5015] panic+0x6a4/0x750 [ 64.294729][ T5015] ? panic_smp_self_stop+0xa0/0xa0 [ 64.299852][ T5015] ? show_trace_log_lvl+0x29d/0x3c0 [ 64.305063][ T5015] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 64.311667][ T5015] check_panic_on_warn+0xab/0xb0 [ 64.316625][ T5015] __warn+0xf2/0x380 [ 64.320535][ T5015] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 64.327138][ T5015] report_bug+0x3bc/0x580 [ 64.331489][ T5015] handle_bug+0x3c/0x70 [ 64.335656][ T5015] exc_invalid_op+0x17/0x40 [ 64.340174][ T5015] asm_exc_invalid_op+0x1a/0x20 [ 64.345039][ T5015] RIP: 0010:btrfs_create_pending_block_groups+0xec7/0x11c0 [ 64.352279][ T5015] Code: fd 44 89 f6 48 c7 c7 c0 d7 b7 8a e8 03 f2 b9 fd 0f 0b e9 88 fe ff ff e8 97 30 f3 fd 89 de 48 c7 c7 c0 d7 b7 8a e8 e9 f1 b9 fd <0f> 0b e9 3d fe ff ff e8 fd 59 46 fe e9 61 f8 ff ff e8 f3 59 46 fe [ 64.371899][ T5015] RSP: 0018:ffffc900034af6c0 EFLAGS: 00010286 [ 64.377979][ T5015] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 64.385961][ T5015] RDX: ffff88802a2f40c0 RSI: ffffffff814be346 RDI: 0000000000000001 [ 64.393954][ T5015] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 64.402036][ T5015] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888023dcc9c0 [ 64.410035][ T5015] R13: ffff888023dcc800 R14: ffff888023dcc850 R15: dffffc0000000000 [ 64.418025][ T5015] ? __warn_printk+0x1a6/0x350 [ 64.422815][ T5015] ? btrfs_inc_block_group_ro+0x447/0x610 [ 64.428556][ T5015] ? btrfs_read_block_groups+0x17b0/0x17b0 [ 64.434388][ T5015] ? __mutex_unlock_slowpath+0xe0/0x640 [ 64.439951][ T5015] ? spin_bug+0x1d0/0x1d0 [ 64.444332][ T5015] ? do_raw_spin_unlock+0x173/0x230 [ 64.449566][ T5015] ? btrfs_trans_release_metadata+0x172/0x230 [ 64.455674][ T5015] __btrfs_end_transaction+0xf1/0x940 [ 64.461071][ T5015] btrfs_inc_block_group_ro+0x44f/0x610 [ 64.466727][ T5015] btrfs_relocate_block_group+0x216/0xd90 [ 64.472732][ T5015] btrfs_relocate_chunk+0x143/0x440 [ 64.477945][ T5015] btrfs_balance+0x20fc/0x3ef0 [ 64.482730][ T5015] ? btrfs_relocate_chunk+0x440/0x440 [ 64.488117][ T5015] btrfs_ioctl+0x1362/0x5cf0 [ 64.492731][ T5015] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 64.499165][ T5015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.505082][ T5015] ? do_vfs_ioctl+0x379/0x1910 [ 64.509868][ T5015] ? vfs_fileattr_set+0xbf0/0xbf0 [ 64.514913][ T5015] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x460 [ 64.521447][ T5015] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x460 [ 64.527979][ T5015] ? selinux_bprm_creds_for_exec+0xb30/0xb30 [ 64.533984][ T5015] ? find_held_lock+0x2d/0x110 [ 64.538942][ T5015] ? selinux_file_ioctl+0x17d/0x270 [ 64.544598][ T5015] ? selinux_file_ioctl+0xb5/0x270 [ 64.549743][ T5015] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 64.556187][ T5015] __x64_sys_ioctl+0x18f/0x210 [ 64.560990][ T5015] do_syscall_64+0x38/0xb0 [ 64.565434][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.571343][ T5015] RIP: 0033:0x7fd5059f89f9 [ 64.575767][ T5015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.595477][ T5015] RSP: 002b:00007ffd1f3fcb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.605123][ T5015] RAX: ffffffffffffffda RBX: 00007ffd1f3fcd58 RCX: 00007fd5059f89f9 [ 64.613106][ T5015] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 64.621084][ T5015] RBP: 00007fd505a70610 R08: 0000000000000000 R09: 00007ffd1f3fcd58 [ 64.629064][ T5015] R10: 00000000000050e9 R11: 0000000000000246 R12: 0000000000000001 [ 64.637047][ T5015] R13: 00007ffd1f3fcd48 R14: 0000000000000001 R15: 0000000000000001 [ 64.645031][ T5015] [ 64.648132][ T5015] Kernel Offset: disabled [ 64.652544][ T5015] Rebooting in 86400 seconds..