./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2851564883 <...> e=1 [ 47.082878][ T26] audit: type=1400 audit(1686403566.911:81): avc: denied { siginh } for pid=4842 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.134656][ T26] audit: type=1400 audit(1686403568.051:82): avc: denied { read } for pid=4429 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.134' (ECDSA) to the list of known hosts. execve("./syz-executor2851564883", ["./syz-executor2851564883"], 0x7fffecd83450 /* 10 vars */) = 0 brk(NULL) = 0x5555558f5000 brk(0x5555558f5c40) = 0x5555558f5c40 arch_prctl(ARCH_SET_FS, 0x5555558f5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2851564883", 4096) = 28 brk(0x555555916c40) = 0x555555916c40 brk(0x555555917000) = 0x555555917000 mprotect(0x7f58e642f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 [ 63.778432][ T26] audit: type=1400 audit(1686403583.691:83): avc: denied { write } for pid=4989 comm="strace-static-x" path="pipe:[29780]" dev="pipefs" ino=29780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 63.803660][ T26] audit: type=1400 audit(1686403583.711:84): avc: denied { execmem } for pid=4992 comm="syz-executor285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 4992 mkdir("./syzkaller.DmdZpE", 0700) = 0 chmod("./syzkaller.DmdZpE", 0777) = 0 chdir("./syzkaller.DmdZpE") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558f55d0) = 4993 ./strace-static-x86_64: Process 4993 attached [pid 4993] chdir("./0") = 0 [pid 4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] setpgid(0, 0) = 0 [pid 4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4993] write(3, "1000", 4) = 4 [pid 4993] close(3) = 0 [pid 4993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4993] memfd_create("syzkaller", 0) = 3 [pid 4993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f58ddf6d000 [ 63.825178][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor285' [ 63.842699][ T26] audit: type=1400 audit(1686403583.731:85): avc: denied { read write } for pid=4992 comm="syz-executor285" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.869829][ T26] audit: type=1400 audit(1686403583.731:86): avc: denied { open } for pid=4992 comm="syz-executor285" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.896047][ T26] audit: type=1400 audit(1686403583.731:87): avc: denied { ioctl } for pid=4992 comm="syz-executor285" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 4993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 4993] munmap(0x7f58ddf6d000, 16777216) = 0 [pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4993] close(3) = 0 [pid 4993] mkdir("./file0", 0777) = 0 [ 64.050819][ T4993] loop0: detected capacity change from 0 to 32768 [ 64.060789][ T26] audit: type=1400 audit(1686403583.971:88): avc: denied { mounton } for pid=4993 comm="syz-executor285" path="/root/syzkaller.DmdZpE/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.064161][ T4993] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor285 (4993) [ 64.099704][ T26] audit: type=1400 audit(1686403584.011:89): avc: denied { append } for pid=4429 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.122721][ T26] audit: type=1400 audit(1686403584.011:90): avc: denied { open } for pid=4429 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.151261][ T4993] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 64.154337][ T26] audit: type=1400 audit(1686403584.011:91): avc: denied { getattr } for pid=4429 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.160105][ T4993] BTRFS info (device loop0): using free space tree [pid 4993] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 4993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4993] chdir("./file0") = 0 [pid 4993] ioctl(4, LOOP_CLR_FD) = 0 [pid 4993] close(4) = 0 [pid 4993] open("./file0", O_RDONLY) = 4 [pid 4993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 4993] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 4993] write(6, "23", 2) = 2 [ 64.206554][ T4993] BTRFS info (device loop0): enabling ssd optimizations [ 64.213978][ T4993] BTRFS info (device loop0): auto enabling async discard [ 64.226259][ T26] audit: type=1400 audit(1686403584.141:92): avc: denied { mount } for pid=4993 comm="syz-executor285" name="/" dev="loop0" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.253916][ T4993] FAULT_INJECTION: forcing a failure. [ 64.253916][ T4993] name failslab, interval 1, probability 0, space 0, times 1 [ 64.267285][ T4993] CPU: 0 PID: 4993 Comm: syz-executor285 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0 [ 64.277733][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 64.287798][ T4993] Call Trace: [ 64.291063][ T4993] [ 64.294017][ T4993] dump_stack_lvl+0x136/0x150 [ 64.298794][ T4993] should_fail_ex+0x4a3/0x5b0 [ 64.303465][ T4993] should_failslab+0x9/0x20 [ 64.307961][ T4993] kmem_cache_alloc+0x5d/0x3f0 [ 64.312804][ T4993] ? set_extent_bit+0x41/0x50 [ 64.317465][ T4993] btrfs_alloc_tree_block+0xbcd/0x1490 [ 64.322912][ T4993] ? btrfs_alloc_logged_file_extent+0x600/0x600 [ 64.329168][ T4993] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 64.335191][ T4993] __btrfs_cow_block+0x3b2/0x1690 [ 64.340259][ T4993] ? update_ref_for_cow+0xb50/0xb50 [ 64.345578][ T4993] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980 [ 64.351948][ T4993] ? down_write_nested+0x153/0x200 [ 64.357093][ T4993] btrfs_cow_block+0x2fa/0x820 [ 64.361899][ T4993] btrfs_search_slot+0x11c6/0x2da0 [ 64.367048][ T4993] ? split_leaf+0x13e0/0x13e0 [ 64.371761][ T4993] ? btrfs_global_root+0xf5/0x120 [ 64.376824][ T4993] ? btrfs_extent_root+0x13f/0x1a0 [ 64.381955][ T4993] ? btrfs_csum_root+0x1a0/0x1a0 [ 64.386903][ T4993] ? mark_lock.part.0+0xee/0x1970 [ 64.391943][ T4993] ? find_held_lock+0x2d/0x110 [ 64.396720][ T4993] lookup_inline_extent_backref+0x311/0x1210 [ 64.402708][ T4993] ? hash_extent_data_ref+0xf0/0xf0 [ 64.407912][ T4993] ? mark_held_locks+0x9f/0xe0 [ 64.412688][ T4993] lookup_extent_backref+0x46/0x110 [ 64.417892][ T4993] __btrfs_free_extent+0x234/0x27e0 [ 64.423186][ T4993] ? lookup_extent_backref+0x110/0x110 [ 64.428649][ T4993] ? preempt_schedule_thunk+0x1a/0x20 [ 64.434035][ T4993] ? preempt_schedule_common+0x45/0xb0 [ 64.439502][ T4993] ? preempt_schedule_thunk+0x1a/0x20 [ 64.444888][ T4993] __btrfs_run_delayed_refs+0x151d/0x3770 [ 64.450619][ T4993] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 64.456610][ T4993] ? check_ref_cleanup+0x3e0/0x3e0 [ 64.461727][ T4993] ? lock_sync+0x190/0x190 [ 64.466436][ T4993] btrfs_run_delayed_refs+0x19a/0x540 [ 64.471824][ T4993] btrfs_commit_transaction+0x80d/0x3fa0 [ 64.477464][ T4993] ? spin_bug+0x1c0/0x1c0 [ 64.481889][ T4993] ? btrfs_put_transaction+0x4c0/0x4c0 [ 64.487371][ T4993] ? join_transaction+0x22e/0x10e0 [ 64.492494][ T4993] ? create_pending_snapshots+0x2c0/0x2c0 [ 64.498230][ T4993] ? start_transaction+0x2aa/0x14c0 [ 64.503455][ T4993] btrfs_mksubvol+0xa6f/0x1310 [ 64.508239][ T4993] ? create_subvol+0x16f0/0x16f0 [ 64.513195][ T4993] ? make_vfsuid+0x113/0x170 [ 64.517803][ T4993] btrfs_mksnapshot+0xaf/0xf0 [ 64.522493][ T4993] __btrfs_ioctl_snap_create+0x42b/0x4d0 [ 64.528136][ T4993] btrfs_ioctl_snap_create+0x15f/0x200 [ 64.533600][ T4993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.539504][ T4993] btrfs_ioctl+0x50e/0x5b30 [ 64.544014][ T4993] ? tomoyo_path_number_perm+0x166/0x570 [ 64.549659][ T4993] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 64.555485][ T4993] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 64.561927][ T4993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.567851][ T4993] ? do_vfs_ioctl+0x132/0x1670 [ 64.572624][ T4993] ? vfs_fileattr_set+0xc40/0xc40 [ 64.577661][ T4993] ? ioctl_has_perm.constprop.0.isra.0+0x28c/0x420 [ 64.584178][ T4993] ? ioctl_has_perm.constprop.0.isra.0+0x295/0x420 [ 64.590692][ T4993] ? selinux_bprm_creds_for_exec+0xb20/0xb20 [ 64.596679][ T4993] ? find_held_lock+0x2d/0x110 [ 64.601449][ T4993] ? do_one_initcall+0x270/0x540 [ 64.606401][ T4993] ? lock_downgrade+0x690/0x690 [ 64.611259][ T4993] ? selinux_file_ioctl+0xba/0x280 [ 64.616383][ T4993] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 64.622813][ T4993] __x64_sys_ioctl+0x197/0x210 [ 64.627583][ T4993] do_syscall_64+0x39/0xb0 [ 64.632005][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.637922][ T4993] RIP: 0033:0x7f58e63baa29 [ 64.642338][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.661969][ T4993] RSP: 002b:00007ffd4fb2a578 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.670406][ T4993] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f58e63baa29 [ 64.678386][ T4993] RDX: 00000000200000c0 RSI: 0000000050009401 RDI: 0000000000000004 [ 64.686374][ T4993] RBP: 00007ffd4fb2a5a0 R08: 0000000000000002 R09: 00007ffd4fb2a5b0 [ 64.694355][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 64.702344][ T4993] R13: 00007ffd4fb2a5e0 R14: 00007ffd4fb2a5c0 R15: 0000000000000000 [ 64.710325][ T4993] [ 64.716048][ T4993] BTRFS: error (device loop0: state A) in __btrfs_free_extent:3053: errno=-12 Out of memory [ 64.726892][ T4993] BTRFS info (device loop0: state EA): forced readonly [ 64.734760][ T4993] BTRFS error (device loop0: state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 64.749273][ T4993] BTRFS: error (device loop0: state EA) in btrfs_run_delayed_refs:2127: errno=-12 Out of memory [pid 4993] ioctl(4, BTRFS_IOC_SNAP_CREATE, {fd=5, name="\x42\x99\xc6\x3c\x6a\xca\x4b\xec\x68\x72\xd2\x02\x80\x8d\xda\x69\x34\x9c\x62\x54\x02\x9b\xbc\x4a\x38\xfb\x4e\x91\xbb\xa4\x82\x6c\xd7\x77\xcb\x59\x74\x4a\xdd\x18\x26\x71\x40\x88\x2a\x98\x37\x3f\xbb\xf4\xb5\xb0\x7c"}) = -1 ENOMEM (Cannot allocate memory) [pid 4993] exit_group(0) = ? [pid 4993] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4993, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555558f6620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 64.836376][ T4992] ------------[ cut here ]------------ [ 64.842028][ T4992] WARNING: CPU: 1 PID: 4992 at fs/btrfs/space-info.h:198 btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 64.853921][ T4992] Modules linked in: [ 64.857857][ T4992] CPU: 1 PID: 4992 Comm: syz-executor285 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0 [ 64.868295][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 64.878382][ T4992] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 64.885876][ T4992] Code: fd e9 40 fc ff ff e8 fd 1d fc fd 49 89 ed 4c 89 e6 49 f7 dd 4c 89 ef e8 ac 19 fc fd 4d 39 e5 0f 86 2a fd ff ff e8 de 1d fc fd <0f> 0b 31 ed e9 24 fd ff ff e8 d0 1d fc fd 48 8d 7b 18 be ff ff ff [ 64.905731][ T4992] RSP: 0018:ffffc9000333fab0 EFLAGS: 00010293 [ 64.911815][ T4992] RAX: 0000000000000000 RBX: ffff88807c2f3800 RCX: 0000000000000000 [ 64.920000][ T4992] RDX: ffff888079cd2140 RSI: ffffffff838749d2 RDI: 0000000000000006 [ 64.928110][ T4992] RBP: ffffffffffea0000 R08: 0000000000000006 R09: 0000000000160000 [ 64.936225][ T4992] R10: 000000000015f000 R11: 1ffffffff2195c47 R12: 000000000015f000 [ 64.944207][ T4992] R13: 0000000000160000 R14: ffff88807c2f3860 R15: ffff88807c2f3800 [ 64.952223][ T4992] FS: 00005555558f5300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 64.961193][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.967805][ T4992] CR2: 00007fff0c1a0f08 CR3: 000000007ce6f000 CR4: 00000000003506e0 [ 64.975904][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.983864][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.991866][ T4992] Call Trace: [ 64.995262][ T4992] [ 64.998185][ T4992] ? __warn+0xe6/0x390 [ 65.002247][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.009124][ T4992] ? report_bug+0x2da/0x500 [ 65.013655][ T4992] ? handle_bug+0x3c/0x70 [ 65.018021][ T4992] ? exc_invalid_op+0x18/0x50 [ 65.022710][ T4992] ? asm_exc_invalid_op+0x1a/0x20 [ 65.027778][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.034665][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.041505][ T4992] btrfs_block_rsv_release+0x4af/0x5e0 [ 65.047016][ T4992] btrfs_release_global_block_rsv+0x26/0x2e0 [ 65.053042][ T4992] btrfs_free_block_groups+0xa0c/0x11d0 [ 65.058666][ T4992] ? free_root_pointers+0x6fe/0x980 [ 65.063884][ T4992] close_ctree+0x552/0xf60 [ 65.068466][ T4992] ? btrfs_cleanup_transaction.isra.0+0x1340/0x1340 [ 65.075107][ T4992] ? collect_domain_accesses+0x900/0x900 [ 65.080737][ T4992] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 65.086502][ T4992] ? dispose_list+0x1e0/0x1e0 [ 65.091236][ T4992] ? fscrypt_destroy_keyring+0x1a/0x350 [ 65.096838][ T4992] ? btrfs_set_super+0x70/0x70 [ 65.101623][ T4992] generic_shutdown_super+0x158/0x480 [ 65.107035][ T4992] kill_anon_super+0x3a/0x60 [ 65.111644][ T4992] btrfs_kill_super+0x3c/0x50 [ 65.116360][ T4992] deactivate_locked_super+0x98/0x160 [ 65.121758][ T4992] deactivate_super+0xb1/0xd0 [ 65.126470][ T4992] cleanup_mnt+0x2ae/0x3d0 [ 65.130906][ T4992] task_work_run+0x16f/0x270 [ 65.135540][ T4992] ? task_work_cancel+0x30/0x30 [ 65.140424][ T4992] ? __x64_sys_umount+0x118/0x190 [ 65.145483][ T4992] ptrace_notify+0x118/0x140 [ 65.150085][ T4992] syscall_exit_to_user_mode_prepare+0x129/0x220 [ 65.156454][ T4992] syscall_exit_to_user_mode+0xd/0x50 [ 65.161845][ T4992] do_syscall_64+0x46/0xb0 [ 65.166310][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.172236][ T4992] RIP: 0033:0x7f58e63bbdc7 [ 65.176710][ T4992] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.196354][ T4992] RSP: 002b:00007ffd4fb29488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 65.204798][ T4992] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58e63bbdc7 [ 65.212785][ T4992] RDX: 00007ffd4fb29549 RSI: 000000000000000a RDI: 00007ffd4fb29540 [ 65.220795][ T4992] RBP: 00007ffd4fb29540 R08: 00000000ffffffff R09: 00007ffd4fb29320 [ 65.228800][ T4992] R10: 00005555558f6653 R11: 0000000000000206 R12: 00007ffd4fb2a5c0 [ 65.236825][ T4992] R13: 00005555558f65f0 R14: 00007ffd4fb294b0 R15: 0000000000000001 [ 65.244830][ T4992] [ 65.247840][ T4992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.255108][ T4992] CPU: 1 PID: 4992 Comm: syz-executor285 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0 [ 65.265503][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 65.275543][ T4992] Call Trace: [ 65.278807][ T4992] [ 65.281726][ T4992] dump_stack_lvl+0xd9/0x150 [ 65.286315][ T4992] panic+0x686/0x730 [ 65.290231][ T4992] ? panic_smp_self_stop+0xa0/0xa0 [ 65.295354][ T4992] ? show_trace_log_lvl+0x284/0x390 [ 65.300566][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.307421][ T4992] check_panic_on_warn+0xb1/0xc0 [ 65.312368][ T4992] __warn+0xf2/0x390 [ 65.316272][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.323126][ T4992] report_bug+0x2da/0x500 [ 65.327472][ T4992] handle_bug+0x3c/0x70 [ 65.331630][ T4992] exc_invalid_op+0x18/0x50 [ 65.336137][ T4992] asm_exc_invalid_op+0x1a/0x20 [ 65.341001][ T4992] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.348466][ T4992] Code: fd e9 40 fc ff ff e8 fd 1d fc fd 49 89 ed 4c 89 e6 49 f7 dd 4c 89 ef e8 ac 19 fc fd 4d 39 e5 0f 86 2a fd ff ff e8 de 1d fc fd <0f> 0b 31 ed e9 24 fd ff ff e8 d0 1d fc fd 48 8d 7b 18 be ff ff ff [ 65.368254][ T4992] RSP: 0018:ffffc9000333fab0 EFLAGS: 00010293 [ 65.374327][ T4992] RAX: 0000000000000000 RBX: ffff88807c2f3800 RCX: 0000000000000000 [ 65.382299][ T4992] RDX: ffff888079cd2140 RSI: ffffffff838749d2 RDI: 0000000000000006 [ 65.390271][ T4992] RBP: ffffffffffea0000 R08: 0000000000000006 R09: 0000000000160000 [ 65.398242][ T4992] R10: 000000000015f000 R11: 1ffffffff2195c47 R12: 000000000015f000 [ 65.406214][ T4992] R13: 0000000000160000 R14: ffff88807c2f3860 R15: ffff88807c2f3800 [ 65.414189][ T4992] ? btrfs_space_info_update_bytes_may_use+0x452/0x590 [ 65.421051][ T4992] btrfs_block_rsv_release+0x4af/0x5e0 [ 65.426516][ T4992] btrfs_release_global_block_rsv+0x26/0x2e0 [ 65.432500][ T4992] btrfs_free_block_groups+0xa0c/0x11d0 [ 65.438054][ T4992] ? free_root_pointers+0x6fe/0x980 [ 65.443266][ T4992] close_ctree+0x552/0xf60 [ 65.447710][ T4992] ? btrfs_cleanup_transaction.isra.0+0x1340/0x1340 [ 65.454341][ T4992] ? collect_domain_accesses+0x900/0x900 [ 65.459983][ T4992] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 65.465798][ T4992] ? dispose_list+0x1e0/0x1e0 [ 65.470483][ T4992] ? fscrypt_destroy_keyring+0x1a/0x350 [ 65.476033][ T4992] ? btrfs_set_super+0x70/0x70 [ 65.480805][ T4992] generic_shutdown_super+0x158/0x480 [ 65.486189][ T4992] kill_anon_super+0x3a/0x60 [ 65.490784][ T4992] btrfs_kill_super+0x3c/0x50 [ 65.495469][ T4992] deactivate_locked_super+0x98/0x160 [ 65.500853][ T4992] deactivate_super+0xb1/0xd0 [ 65.505549][ T4992] cleanup_mnt+0x2ae/0x3d0 [ 65.509973][ T4992] task_work_run+0x16f/0x270 [ 65.514575][ T4992] ? task_work_cancel+0x30/0x30 [ 65.519437][ T4992] ? __x64_sys_umount+0x118/0x190 [ 65.524470][ T4992] ptrace_notify+0x118/0x140 [ 65.529063][ T4992] syscall_exit_to_user_mode_prepare+0x129/0x220 [ 65.535409][ T4992] syscall_exit_to_user_mode+0xd/0x50 [ 65.540877][ T4992] do_syscall_64+0x46/0xb0 [ 65.545300][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.551203][ T4992] RIP: 0033:0x7f58e63bbdc7 [ 65.555618][ T4992] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.576441][ T4992] RSP: 002b:00007ffd4fb29488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 65.584859][ T4992] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58e63bbdc7 [ 65.592829][ T4992] RDX: 00007ffd4fb29549 RSI: 000000000000000a RDI: 00007ffd4fb29540 [ 65.600801][ T4992] RBP: 00007ffd4fb29540 R08: 00000000ffffffff R09: 00007ffd4fb29320 [ 65.608770][ T4992] R10: 00005555558f6653 R11: 0000000000000206 R12: 00007ffd4fb2a5c0 [ 65.616743][ T4992] R13: 00005555558f65f0 R14: 00007ffd4fb294b0 R15: 0000000000000001 [ 65.624817][ T4992] [ 65.628004][ T4992] Kernel Offset: disabled [ 65.632421][ T4992] Rebooting in 86400 seconds..