./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2622037135 <...> Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. execve("./syz-executor2622037135", ["./syz-executor2622037135"], 0x7ffd34e227f0 /* 10 vars */) = 0 brk(NULL) = 0x555555b8a000 brk(0x555555b8ad00) = 0x555555b8ad00 arch_prctl(ARCH_SET_FS, 0x555555b8a380) = 0 set_tid_address(0x555555b8a650) = 5033 set_robust_list(0x555555b8a660, 24) = 0 rseq(0x555555b8aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2622037135", 4096) = 28 getrandom("\x48\x50\x03\xba\xd6\x3c\x3e\xb8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555b8ad00 brk(0x555555babd00) = 0x555555babd00 brk(0x555555bac000) = 0x555555bac000 mprotect(0x7faaa1579000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faa990c4000 [ 59.688424][ T5033] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5033 'syz-executor262' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7faa990c4000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 59.834030][ T5033] loop0: detected capacity change from 0 to 32768 [ 59.846094][ T5033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor262 (5033) [ 59.866873][ T5033] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 59.875865][ T5033] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", MS_NODIRATIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0 openat(AT_FDCWD, "/dev/ppp", O_RDONLY) = 4 [ 59.895007][ T5033] BTRFS info (device loop0): enabling ssd optimizations [ 59.902054][ T5033] BTRFS info (device loop0): auto enabling async discard [ 59.937862][ T5033] ------------[ cut here ]------------ [ 59.943369][ T5033] WARNING: CPU: 0 PID: 5033 at fs/read_write.c:504 __kernel_write_iter+0x5d4/0x7e0 [ 59.952807][ T5033] Modules linked in: [ 59.956753][ T5033] CPU: 0 PID: 5033 Comm: syz-executor262 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 [ 59.966735][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 59.976858][ T5033] RIP: 0010:__kernel_write_iter+0x5d4/0x7e0 [ 59.982794][ T5033] Code: c7 00 cb b6 8c e8 4c 7d 3d 08 31 ff 89 c5 89 c6 e8 f1 83 9c ff 85 ed 75 1f 48 c7 c5 ea ff ff ff e9 0b ff ff ff e8 6c 88 9c ff <0f> 0b 48 c7 c5 f7 ff ff ff e9 f8 fe ff ff e8 59 88 9c ff 48 b8 00 [ 60.002589][ T5033] RSP: 0018:ffffc9000388f680 EFLAGS: 00010293 [ 60.008725][ T5033] RAX: 0000000000000000 RBX: ffff88801625d900 RCX: 0000000000000000 [ 60.016877][ T5033] RDX: ffff88801b8c0000 RSI: ffffffff81ea6f74 RDI: 0000000000000005 [ 60.024878][ T5033] RBP: 00000000000a001d R08: 0000000000000005 R09: 0000000000000000 [ 60.032960][ T5033] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802874e808 [ 60.041053][ T5033] R13: 1ffff92000711ed2 R14: 0000000000000000 R15: ffff88801625d950 [ 60.049084][ T5033] FS: 0000555555b8a380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 60.058098][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.064714][ T5033] CR2: 00007ffd34e20cb0 CR3: 000000007407a000 CR4: 00000000003506f0 [ 60.072768][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.080842][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.088884][ T5033] Call Trace: [ 60.092157][ T5033] [ 60.095079][ T5033] ? __warn+0xe6/0x380 [ 60.099223][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.104524][ T5033] ? report_bug+0x3bc/0x580 [ 60.109085][ T5033] ? handle_bug+0x3c/0x70 [ 60.113427][ T5033] ? exc_invalid_op+0x17/0x40 [ 60.118151][ T5033] ? asm_exc_invalid_op+0x1a/0x20 [ 60.123216][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.128539][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.133835][ T5033] ? do_raw_spin_lock+0x12e/0x2b0 [ 60.138911][ T5033] ? vfs_read+0x930/0x930 [ 60.143256][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 60.148675][ T5033] ? security_file_permission+0x94/0x100 [ 60.154330][ T5033] kernel_write+0x1f8/0x6c0 [ 60.158909][ T5033] ? btrfs_destroy_cachep+0x30/0x30 [ 60.164142][ T5033] ? __kernel_write+0x140/0x140 [ 60.169047][ T5033] ? __kmalloc_node+0xea/0x110 [ 60.173834][ T5033] btrfs_ioctl_send+0x2313/0x6b70 [ 60.178940][ T5033] ? changed_cb+0x3590/0x3590 [ 60.183644][ T5033] ? __might_fault+0xe5/0x190 [ 60.188377][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 60.193777][ T5033] ? preempt_count_sub+0x150/0x150 [ 60.198962][ T5033] ? _copy_from_user+0x5d/0xf0 [ 60.203755][ T5033] _btrfs_ioctl_send+0x118/0x2f0 [ 60.208730][ T5033] ? btrfs_ioctl_encoded_read+0x920/0x920 [ 60.214468][ T5033] ? kasan_quarantine_put+0x102/0x230 [ 60.219895][ T5033] ? find_held_lock+0x2d/0x110 [ 60.224680][ T5033] ? tomoyo_path_number_perm+0x273/0x590 [ 60.230359][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 60.235788][ T5033] btrfs_ioctl+0x388c/0x5cf0 [ 60.240378][ T5033] ? tomoyo_path_number_perm+0x190/0x590 [ 60.246046][ T5033] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 60.251880][ T5033] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 60.258371][ T5033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.264295][ T5033] ? do_vfs_ioctl+0x379/0x1920 [ 60.269104][ T5033] ? vfs_fileattr_set+0xbf0/0xbf0 [ 60.274158][ T5033] ? find_held_lock+0x2d/0x110 [ 60.279014][ T5033] ? bpf_lsm_file_ioctl+0x9/0x10 [ 60.283979][ T5033] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 60.290459][ T5033] __x64_sys_ioctl+0x18f/0x210 [ 60.295258][ T5033] do_syscall_64+0x38/0xb0 [ 60.299764][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.305747][ T5033] RIP: 0033:0x7faaa1501689 [ 60.310159][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.329872][ T5033] RSP: 002b:00007ffc64b02918 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.338350][ T5033] RAX: ffffffffffffffda RBX: 00007ffc64b02ae8 RCX: 00007faaa1501689 [ 60.346370][ T5033] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003 [ 60.354348][ T5033] RBP: 00007faaa1579610 R08: 00007ffc64b02ae8 R09: 00007ffc64b02ae8 [ 60.362349][ T5033] R10: 00007ffc64b02ae8 R11: 0000000000000246 R12: 0000000000000001 [ 60.370379][ T5033] R13: 00007ffc64b02ad8 R14: 0000000000000001 R15: 0000000000000001 [ 60.378417][ T5033] [ 60.381444][ T5033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.388798][ T5033] CPU: 0 PID: 5033 Comm: syz-executor262 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 [ 60.398679][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 60.408740][ T5033] Call Trace: [ 60.412023][ T5033] [ 60.414955][ T5033] dump_stack_lvl+0xd9/0x1b0 [ 60.419573][ T5033] panic+0x6a4/0x750 [ 60.423481][ T5033] ? panic_smp_self_stop+0xa0/0xa0 [ 60.428604][ T5033] ? show_trace_log_lvl+0x29d/0x3c0 [ 60.433827][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.439125][ T5033] check_panic_on_warn+0xab/0xb0 [ 60.444078][ T5033] __warn+0xf2/0x380 [ 60.447987][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.453290][ T5033] report_bug+0x3bc/0x580 [ 60.457643][ T5033] handle_bug+0x3c/0x70 [ 60.461805][ T5033] exc_invalid_op+0x17/0x40 [ 60.466320][ T5033] asm_exc_invalid_op+0x1a/0x20 [ 60.471193][ T5033] RIP: 0010:__kernel_write_iter+0x5d4/0x7e0 [ 60.477098][ T5033] Code: c7 00 cb b6 8c e8 4c 7d 3d 08 31 ff 89 c5 89 c6 e8 f1 83 9c ff 85 ed 75 1f 48 c7 c5 ea ff ff ff e9 0b ff ff ff e8 6c 88 9c ff <0f> 0b 48 c7 c5 f7 ff ff ff e9 f8 fe ff ff e8 59 88 9c ff 48 b8 00 [ 60.496717][ T5033] RSP: 0018:ffffc9000388f680 EFLAGS: 00010293 [ 60.502792][ T5033] RAX: 0000000000000000 RBX: ffff88801625d900 RCX: 0000000000000000 [ 60.510962][ T5033] RDX: ffff88801b8c0000 RSI: ffffffff81ea6f74 RDI: 0000000000000005 [ 60.518939][ T5033] RBP: 00000000000a001d R08: 0000000000000005 R09: 0000000000000000 [ 60.526913][ T5033] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802874e808 [ 60.534890][ T5033] R13: 1ffff92000711ed2 R14: 0000000000000000 R15: ffff88801625d950 [ 60.542875][ T5033] ? __kernel_write_iter+0x5d4/0x7e0 [ 60.548176][ T5033] ? do_raw_spin_lock+0x12e/0x2b0 [ 60.553234][ T5033] ? vfs_read+0x930/0x930 [ 60.557576][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 60.563055][ T5033] ? security_file_permission+0x94/0x100 [ 60.568708][ T5033] kernel_write+0x1f8/0x6c0 [ 60.573393][ T5033] ? btrfs_destroy_cachep+0x30/0x30 [ 60.578615][ T5033] ? __kernel_write+0x140/0x140 [ 60.583482][ T5033] ? __kmalloc_node+0xea/0x110 [ 60.588271][ T5033] btrfs_ioctl_send+0x2313/0x6b70 [ 60.593336][ T5033] ? changed_cb+0x3590/0x3590 [ 60.598033][ T5033] ? __might_fault+0xe5/0x190 [ 60.602816][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 60.608212][ T5033] ? preempt_count_sub+0x150/0x150 [ 60.613353][ T5033] ? _copy_from_user+0x5d/0xf0 [ 60.618138][ T5033] _btrfs_ioctl_send+0x118/0x2f0 [ 60.623090][ T5033] ? btrfs_ioctl_encoded_read+0x920/0x920 [ 60.628826][ T5033] ? kasan_quarantine_put+0x102/0x230 [ 60.634213][ T5033] ? find_held_lock+0x2d/0x110 [ 60.639002][ T5033] ? tomoyo_path_number_perm+0x273/0x590 [ 60.644658][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 60.650049][ T5033] btrfs_ioctl+0x388c/0x5cf0 [ 60.654658][ T5033] ? tomoyo_path_number_perm+0x190/0x590 [ 60.660314][ T5033] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 60.666145][ T5033] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 60.672581][ T5033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.678498][ T5033] ? do_vfs_ioctl+0x379/0x1920 [ 60.683281][ T5033] ? vfs_fileattr_set+0xbf0/0xbf0 [ 60.688336][ T5033] ? find_held_lock+0x2d/0x110 [ 60.693127][ T5033] ? bpf_lsm_file_ioctl+0x9/0x10 [ 60.698083][ T5033] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 60.704522][ T5033] __x64_sys_ioctl+0x18f/0x210 [ 60.709309][ T5033] do_syscall_64+0x38/0xb0 [ 60.713862][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.719782][ T5033] RIP: 0033:0x7faaa1501689 [ 60.724206][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.743823][ T5033] RSP: 002b:00007ffc64b02918 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.752250][ T5033] RAX: ffffffffffffffda RBX: 00007ffc64b02ae8 RCX: 00007faaa1501689 [ 60.760226][ T5033] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003 [ 60.768199][ T5033] RBP: 00007faaa1579610 R08: 00007ffc64b02ae8 R09: 00007ffc64b02ae8 [ 60.777831][ T5033] R10: 00007ffc64b02ae8 R11: 0000000000000246 R12: 0000000000000001 [ 60.785808][ T5033] R13: 00007ffc64b02ad8 R14: 0000000000000001 R15: 0000000000000001 [ 60.793801][ T5033] [ 60.797029][ T5033] Kernel Offset: disabled [ 60.801428][ T5033] Rebooting in 86400 seconds..