./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2556246350
<...>
DUID 00:04:a4:32:67:f0:55:bb:60:fb:9b:a6:3e:57:83:d8:2c:c8
forked to background, child pid 4668
[ 21.244401][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.256464][ T4669] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.182' (ECDSA) to the list of known hosts.
execve("./syz-executor2556246350", ["./syz-executor2556246350"], 0x7ffcbca57110 /* 10 vars */) = 0
brk(NULL) = 0x555556e0f000
brk(0x555556e0fc40) = 0x555556e0fc40
arch_prctl(ARCH_SET_FS, 0x555556e0f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2556246350", 4096) = 28
brk(0x555556e30c40) = 0x555556e30c40
brk(0x555556e31000) = 0x555556e31000
mprotect(0x7f1fd4a27000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1fcc569000
syzkaller login: [ 43.910253][ T4999] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4999 'syz-executor255'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f1fcc569000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 44.005444][ T4999] loop0: detected capacity change from 0 to 32768
[ 44.016507][ T4999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor255 (4999)
[ 44.033315][ T4999] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[ 44.041933][ T4999] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", MS_NODIRATIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0
openat(AT_FDCWD, "/dev/ppp", O_RDONLY) = 4
[ 44.058890][ T4999] BTRFS info (device loop0): enabling ssd optimizations
[ 44.065850][ T4999] BTRFS info (device loop0): auto enabling async discard
[ 44.096233][ T4999] ------------[ cut here ]------------
[ 44.101773][ T4999] WARNING: CPU: 0 PID: 4999 at fs/read_write.c:504 __kernel_write_iter+0x5f9/0x7a0
[ 44.111151][ T4999] Modules linked in:
[ 44.115050][ T4999] CPU: 0 PID: 4999 Comm: syz-executor255 Not tainted 6.4.0-rc6-syzkaller-00242-g1639fae5132b #0
[ 44.125519][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 44.135626][ T4999] RIP: 0010:__kernel_write_iter+0x5f9/0x7a0
[ 44.141575][ T4999] Code: 05 00 00 4c 89 e2 48 c7 c6 c0 c4 5b 8a 48 c7 c7 60 c4 5b 8a e8 a8 3f 82 ff 49 c7 c6 ea ff ff ff e9 c0 fe ff ff e8 67 5b 9e ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 ad fe ff ff e8 54 5b 9e ff 4c 89 ea
[ 44.161250][ T4999] RSP: 0018:ffffc90003aaf6c0 EFLAGS: 00010293
[ 44.167358][ T4999] RAX: 0000000000000000 RBX: 00000000000a001d RCX: 0000000000000000
[ 44.175427][ T4999] RDX: ffff88802367d940 RSI: ffffffff81e5eb79 RDI: 0000000000000005
[ 44.183474][ T4999] RBP: 1ffff92000755eda R08: 0000000000000005 R09: 0000000000000000
[ 44.191576][ T4999] R10: 0000000000000000 R11: 0000000000000005 R12: ffff888027d85180
[ 44.199623][ T4999] R13: ffff888027d851fc R14: 0000000000000000 R15: ffff888140b78808
[ 44.207617][ T4999] FS: 0000555556e0f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 44.216620][ T4999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.223293][ T4999] CR2: 0000000000c44388 CR3: 0000000022160000 CR4: 0000000000350ef0
[ 44.232127][ T4999] Call Trace:
[ 44.235406][ T4999]
[ 44.238391][ T4999] ? __warn+0xe6/0x390
[ 44.242475][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.247749][ T4999] ? report_bug+0x2da/0x500
[ 44.252316][ T4999] ? handle_bug+0x3c/0x70
[ 44.256653][ T4999] ? exc_invalid_op+0x18/0x50
[ 44.261388][ T4999] ? asm_exc_invalid_op+0x1a/0x20
[ 44.266520][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.271865][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.277162][ T4999] ? vfs_read+0x8a0/0x8a0
[ 44.281551][ T4999] ? apparmor_file_permission+0x272/0x4e0
[ 44.287290][ T4999] ? bpf_lsm_file_permission+0x9/0x10
[ 44.292698][ T4999] ? security_file_permission+0xaf/0xd0
[ 44.298353][ T4999] kernel_write+0x1c1/0x670
[ 44.302861][ T4999] ? btrfs_destroy_cachep+0x30/0x30
[ 44.308528][ T4999] ? __kernel_write+0x110/0x110
[ 44.313491][ T4999] btrfs_ioctl_send+0x2317/0x67b0
[ 44.318938][ T4999] ? changed_cb+0x3530/0x3530
[ 44.323623][ T4999] ? __might_fault+0xe2/0x190
[ 44.328350][ T4999] ? lock_downgrade+0x690/0x690
[ 44.333227][ T4999] ? _copy_from_user+0x5c/0xf0
[ 44.338049][ T4999] _btrfs_ioctl_send+0x100/0x2d0
[ 44.343005][ T4999] ? btrfs_ioctl_encoded_write+0xed0/0xed0
[ 44.348863][ T4999] ? lockdep_hardirqs_on+0x7d/0x100
[ 44.354080][ T4999] ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 44.359781][ T4999] btrfs_ioctl+0x3c0f/0x5b30
[ 44.364378][ T4999] ? tomoyo_path_number_perm+0x166/0x570
[ 44.370060][ T4999] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 44.375874][ T4999] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 44.382326][ T4999] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 44.388358][ T4999] ? do_vfs_ioctl+0x132/0x1670
[ 44.393125][ T4999] ? vfs_fileattr_set+0xc40/0xc40
[ 44.398207][ T4999] ? find_held_lock+0x2d/0x110
[ 44.402999][ T4999] ? name_to_dev_t+0x62/0x9e0
[ 44.407661][ T4999] ? lock_downgrade+0x690/0x690
[ 44.412557][ T4999] ? bpf_lsm_file_ioctl+0x9/0x10
[ 44.417504][ T4999] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 44.423954][ T4999] __x64_sys_ioctl+0x197/0x210
[ 44.428749][ T4999] do_syscall_64+0x39/0xb0
[ 44.433144][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.439071][ T4999] RIP: 0033:0x7f1fd49b5829
[ 44.443487][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 44.463250][ T4999] RSP: 002b:00007ffc6c424138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 44.471688][ T4999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1fd49b5829
[ 44.479705][ T4999] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003
[ 44.487687][ T4999] RBP: 00007f1fd49750f0 R08: 0000000000000000 R09: 0000000000000000
[ 44.495701][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1fd4975180
[ 44.503717][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 44.511729][ T4999]
[ 44.514745][ T4999] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 44.522016][ T4999] CPU: 0 PID: 4999 Comm: syz-executor255 Not tainted 6.4.0-rc6-syzkaller-00242-g1639fae5132b #0
[ 44.532404][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 44.542433][ T4999] Call Trace:
[ 44.545688][ T4999]
[ 44.548597][ T4999] dump_stack_lvl+0xd9/0x150
[ 44.553350][ T4999] panic+0x686/0x730
[ 44.557229][ T4999] ? panic_smp_self_stop+0xa0/0xa0
[ 44.562320][ T4999] ? show_trace_log_lvl+0x284/0x390
[ 44.567503][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.572766][ T4999] check_panic_on_warn+0xb1/0xc0
[ 44.577684][ T4999] __warn+0xf2/0x390
[ 44.581567][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.586840][ T4999] report_bug+0x2da/0x500
[ 44.591154][ T4999] handle_bug+0x3c/0x70
[ 44.595290][ T4999] exc_invalid_op+0x18/0x50
[ 44.599771][ T4999] asm_exc_invalid_op+0x1a/0x20
[ 44.604600][ T4999] RIP: 0010:__kernel_write_iter+0x5f9/0x7a0
[ 44.610467][ T4999] Code: 05 00 00 4c 89 e2 48 c7 c6 c0 c4 5b 8a 48 c7 c7 60 c4 5b 8a e8 a8 3f 82 ff 49 c7 c6 ea ff ff ff e9 c0 fe ff ff e8 67 5b 9e ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 ad fe ff ff e8 54 5b 9e ff 4c 89 ea
[ 44.630060][ T4999] RSP: 0018:ffffc90003aaf6c0 EFLAGS: 00010293
[ 44.636138][ T4999] RAX: 0000000000000000 RBX: 00000000000a001d RCX: 0000000000000000
[ 44.644100][ T4999] RDX: ffff88802367d940 RSI: ffffffff81e5eb79 RDI: 0000000000000005
[ 44.652058][ T4999] RBP: 1ffff92000755eda R08: 0000000000000005 R09: 0000000000000000
[ 44.660012][ T4999] R10: 0000000000000000 R11: 0000000000000005 R12: ffff888027d85180
[ 44.667970][ T4999] R13: ffff888027d851fc R14: 0000000000000000 R15: ffff888140b78808
[ 44.675933][ T4999] ? __kernel_write_iter+0x5f9/0x7a0
[ 44.681224][ T4999] ? vfs_read+0x8a0/0x8a0
[ 44.685639][ T4999] ? apparmor_file_permission+0x272/0x4e0
[ 44.691355][ T4999] ? bpf_lsm_file_permission+0x9/0x10
[ 44.696720][ T4999] ? security_file_permission+0xaf/0xd0
[ 44.702434][ T4999] kernel_write+0x1c1/0x670
[ 44.706928][ T4999] ? btrfs_destroy_cachep+0x30/0x30
[ 44.712138][ T4999] ? __kernel_write+0x110/0x110
[ 44.717007][ T4999] btrfs_ioctl_send+0x2317/0x67b0
[ 44.722046][ T4999] ? changed_cb+0x3530/0x3530
[ 44.726712][ T4999] ? __might_fault+0xe2/0x190
[ 44.731479][ T4999] ? lock_downgrade+0x690/0x690
[ 44.736329][ T4999] ? _copy_from_user+0x5c/0xf0
[ 44.741087][ T4999] _btrfs_ioctl_send+0x100/0x2d0
[ 44.746015][ T4999] ? btrfs_ioctl_encoded_write+0xed0/0xed0
[ 44.751814][ T4999] ? lockdep_hardirqs_on+0x7d/0x100
[ 44.757006][ T4999] ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 44.762663][ T4999] btrfs_ioctl+0x3c0f/0x5b30
[ 44.767258][ T4999] ? tomoyo_path_number_perm+0x166/0x570
[ 44.772886][ T4999] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 44.778681][ T4999] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 44.785085][ T4999] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 44.791039][ T4999] ? do_vfs_ioctl+0x132/0x1670
[ 44.795820][ T4999] ? vfs_fileattr_set+0xc40/0xc40
[ 44.800844][ T4999] ? find_held_lock+0x2d/0x110
[ 44.805599][ T4999] ? name_to_dev_t+0x62/0x9e0
[ 44.810267][ T4999] ? lock_downgrade+0x690/0x690
[ 44.815113][ T4999] ? bpf_lsm_file_ioctl+0x9/0x10
[ 44.820045][ T4999] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 44.826451][ T4999] __x64_sys_ioctl+0x197/0x210
[ 44.831212][ T4999] do_syscall_64+0x39/0xb0
[ 44.835633][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.841519][ T4999] RIP: 0033:0x7f1fd49b5829
[ 44.845918][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 44.865515][ T4999] RSP: 002b:00007ffc6c424138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 44.873918][ T4999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1fd49b5829
[ 44.881879][ T4999] RDX: 0000000020000140 RSI: 0000000040489426 RDI: 0000000000000003
[ 44.889835][ T4999] RBP: 00007f1fd49750f0 R08: 0000000000000000 R09: 0000000000000000
[ 44.897790][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1fd4975180
[ 44.905767][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 44.913738][ T4999]
[ 44.917548][ T4999] Kernel Offset: disabled
[ 44.921929][ T4999] Rebooting in 86400 seconds..