[ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 29.681117] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 [ 29.719535] BTRFS info (device loop3): using free space tree [ 29.754452] BTRFS info (device loop3): has skinny extents executing program [ 29.913840] BTRFS error (device loop3): fail to start transaction for status update: -28 executing program executing program executing program executing program [ 30.272793] BTRFS info (device loop3): using free space tree [ 30.291899] BTRFS info (device loop3): has skinny extents executing program [ 30.675357] ------------[ cut here ]------------ [ 30.680320] WARNING: CPU: 1 PID: 8070 at fs/btrfs/qgroup.c:3095 btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.689408] Kernel panic - not syncing: panic_on_warn set ... [ 30.689408] [ 30.696768] CPU: 1 PID: 8070 Comm: syz-executor155 Not tainted 4.14.302-syzkaller #0 [ 30.704639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 30.714023] Call Trace: [ 30.715626] BTRFS error (device loop3): fail to start transaction for status update: -28 [ 30.716601] dump_stack+0x1b2/0x281 [ 30.716619] panic+0x1f9/0x42d [ 30.716628] ? add_taint.cold+0x16/0x16 [ 30.735576] ? btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.740421] ? btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.745240] __warn.cold+0x20/0x44 [ 30.748755] ? ist_end_non_atomic+0x10/0x10 [ 30.753051] ? btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.757869] report_bug+0x208/0x250 [ 30.761472] do_error_trap+0x195/0x2d0 [ 30.765335] ? math_error+0x2d0/0x2d0 [ 30.769113] ? btrfs_async_reclaim_metadata_space+0xc20/0xc20 [ 30.774979] ? lock_downgrade+0x740/0x740 [ 30.779112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.783936] invalid_op+0x1b/0x40 [ 30.787364] RIP: 0010:btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.792789] RSP: 0018:ffff8880b3bdf348 EFLAGS: 00010297 [ 30.798151] RAX: ffff8880afc26580 RBX: ffff888094140400 RCX: 0000000000001000 [ 30.805402] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff888094140d20 [ 30.812646] RBP: 0000000000001000 R08: ffffffff8b9ace18 R09: 0000000000000002 [ 30.819893] R10: 0000000000000000 R11: ffff8880afc26580 R12: ffff8880978c5d80 [ 30.827141] R13: 0000000000000005 R14: ffff888094140958 R15: 0000000000000002 [ 30.834406] ? btrfs_qgroup_free_meta+0x3db/0x4d0 [ 30.843842] start_transaction+0x637/0xf30 [ 30.848061] ? btrfs_dirty_inode+0x1d0/0x1d0 [ 30.852444] btrfs_dirty_inode+0x166/0x1d0 [ 30.856656] btrfs_update_time+0x1ab/0x280 [ 30.860865] touch_atime+0x1ed/0x250 [ 30.864551] ? __atime_needs_update+0x930/0x930 [ 30.869196] generic_file_read_iter+0x12a3/0x21c0 [ 30.874016] ? iov_iter_init+0xa6/0x1c0 [ 30.877966] __vfs_read+0x449/0x620 [ 30.881572] ? btrfs_free_path+0x45/0x60 [ 30.885614] ? vfs_copy_file_range+0x9b0/0x9b0 [ 30.890168] ? ima_read_xattr+0x2c/0x50 [ 30.894125] ? do_filp_open+0x179/0x3c0 [ 30.898073] ? do_sys_open+0x296/0x410 [ 30.901986] integrity_kernel_read+0x11b/0x1b0 [ 30.906568] ? integrity_inode_free+0x300/0x300 [ 30.911212] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 30.916202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 30.921210] ima_calc_file_hash+0x3ee/0x780 [ 30.925515] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 30.930940] ? ima_alloc_tfm+0x9a/0xc0 [ 30.934800] ? ima_calc_file_hash+0x14a/0x780 [ 30.939287] ima_collect_measurement+0x39d/0x430 [ 30.944026] ? ima_get_action+0x70/0x70 [ 30.947972] ? vfs_getxattr_alloc+0xc8/0x2d0 [ 30.952356] ? ima_get_cache_status+0x170/0x170 [ 30.957000] process_measurement+0x78b/0xb20 [ 30.961390] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 30.966387] ? btrfs_lookup_dentry+0x10a0/0x10a0 [ 30.971116] ? apparmor_file_open+0x4ed/0x910 [ 30.975592] ? apparmor_file_alloc_security+0x800/0x800 [ 30.980932] ? lock_downgrade+0x740/0x740 [ 30.985056] ? security_file_open+0x82/0x190 [ 30.989437] ? file_ra_state_init+0xc4/0x1e0 [ 30.993819] ? generic_file_open+0x68/0x90 [ 30.998028] ? do_dentry_open+0x698/0xec0 [ 31.002252] ? find_first_non_hole+0x2c0/0x2c0 [ 31.006848] ? __inode_permission+0xcd/0x2f0 [ 31.011242] ? vfs_open+0x10d/0x220 [ 31.014853] path_openat+0x10ad/0x2970 [ 31.018726] ? path_lookupat+0x780/0x780 [ 31.022759] ? trace_hardirqs_on+0x10/0x10 [ 31.026979] do_filp_open+0x179/0x3c0 [ 31.030760] ? may_open_dev+0xe0/0xe0 [ 31.034631] ? lock_downgrade+0x740/0x740 [ 31.038753] ? do_raw_spin_unlock+0x164/0x220 [ 31.043222] ? _raw_spin_unlock+0x29/0x40 [ 31.047341] ? __alloc_fd+0x1be/0x490 [ 31.051118] do_sys_open+0x296/0x410 [ 31.054816] ? filp_open+0x60/0x60 [ 31.058339] ? do_syscall_64+0x4c/0x640 [ 31.062298] ? do_sys_open+0x410/0x410 [ 31.066181] do_syscall_64+0x1d5/0x640 [ 31.070055] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 31.075225] RIP: 0033:0x7f01089bb589 [ 31.078916] RSP: 002b:00007fff7ed41e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 31.086598] RAX: ffffffffffffffda RBX: 000000000000725a RCX: 00007f01089bb589 [ 31.093845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 31.101092] RBP: 00007fff7ed41e80 R08: 65732f636f72702f R09: 65732f636f72702f [ 31.108346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7ed41f2c [ 31.115590] R13: 00007fff7ed41f60 R14: 00007fff7ed41f40 R15: 0000000000000001 [ 31.123102] Kernel Offset: disabled [ 31.126774] Rebooting in 86400 seconds..