./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1100545936 <...> Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. execve("./syz-executor1100545936", ["./syz-executor1100545936"], 0x7ffd7a50e1f0 /* 10 vars */) = 0 brk(NULL) = 0x5555571c6000 brk(0x5555571c6c40) = 0x5555571c6c40 arch_prctl(ARCH_SET_FS, 0x5555571c6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1100545936", 4096) = 28 brk(0x5555571e7c40) = 0x5555571e7c40 brk(0x5555571e8000) = 0x5555571e8000 mprotect(0x7f9272f41000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 16777216) = 0 mmap(NULL, 16777216, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f9271e83000 [ 54.610749][ T26] audit: type=1400 audit(1669117488.069:75): avc: denied { execmem } for pid=3636 comm="syz-executor110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 munmap(0x7f9271e83000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 [ 54.793144][ T26] audit: type=1400 audit(1669117488.249:76): avc: denied { read write } for pid=3636 comm="syz-executor110" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.818108][ T26] audit: type=1400 audit(1669117488.279:77): avc: denied { open } for pid=3636 comm="syz-executor110" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 mkdir("./file0", 0777) = 0 [ 54.820596][ T3636] loop0: detected capacity change from 0 to 32768 [ 54.842667][ T26] audit: type=1400 audit(1669117488.279:78): avc: denied { ioctl } for pid=3636 comm="syz-executor110" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.860003][ T3636] BTRFS: device fsid b193dc14-2683-4cd3-8a84-b5f6b1606026 devid 1 transid 8 /dev/loop0 scanned by syz-executor110 (3636) [ 54.874975][ T26] audit: type=1400 audit(1669117488.309:79): avc: denied { mounton } for pid=3636 comm="syz-executor110" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.915759][ T3636] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 54.924732][ T3636] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 open("./file0", O_RDONLY) = 3 [ 54.943522][ T3636] BTRFS info (device loop0): enabling ssd optimizations [ 54.954485][ T26] audit: type=1400 audit(1669117488.409:80): avc: denied { mount } for pid=3636 comm="syz-executor110" name="/" dev="loop0" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.007088][ T3636] BTRFS info (device loop0): balance: start -d -m [ 55.016213][ T3636] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 55.031705][ T45] ------------[ cut here ]------------ [ 55.039484][ T45] WARNING: CPU: 1 PID: 45 at fs/btrfs/block-group.c:3535 btrfs_chunk_alloc.cold+0x1a7/0x329 [ 55.050147][ T45] Modules linked in: [ 55.054078][ T45] CPU: 1 PID: 45 Comm: kworker/u4:3 Not tainted 6.1.0-rc6-syzkaller #0 [ 55.062782][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.073215][ T45] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 55.081122][ T45] RIP: 0010:btrfs_chunk_alloc.cold+0x1a7/0x329 [ 55.087644][ T45] Code: 89 c7 89 c6 88 44 24 4f e8 5d 2e c7 f7 45 84 ff 0f 84 6e 01 00 00 e8 df 31 c7 f7 44 89 f6 48 c7 c7 c0 5c 98 8a e8 fb a4 f2 ff <0f> 0b e9 10 ff ff ff e8 c4 31 c7 f7 48 8b 54 24 38 b8 ff ff 37 00 [ 55.107681][ T45] RSP: 0018:ffffc90000d6fa70 EFLAGS: 00010286 [ 55.113801][ T45] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 55.122218][ T45] RDX: ffff888018452080 RSI: ffffffff8164973c RDI: fffff520001adf40 [ 55.130560][ T45] RBP: ffff88807bed9800 R08: 0000000000000005 R09: 0000000000000000 [ 55.138920][ T45] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888075d88898 [ 55.147540][ T45] R13: ffff888020971000 R14: ffffffffffffffe4 R15: 0000000075d88801 [ 55.155569][ T45] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 55.164708][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.171607][ T45] CR2: 00007fa773a78250 CR3: 000000007d62e000 CR4: 00000000003506e0 [ 55.179695][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.187728][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.195691][ T45] Call Trace: [ 55.199079][ T45] [ 55.202023][ T45] ? btrfs_get_alloc_profile+0x2f4/0x7c0 [ 55.208316][ T45] flush_space+0x9ce/0xe90 [ 55.212827][ T45] ? find_held_lock+0x2d/0x110 [ 55.217676][ T45] ? trace_btrfs_trigger_flush+0x340/0x340 [ 55.223496][ T45] ? lock_downgrade+0x6e0/0x6e0 [ 55.228478][ T45] ? _raw_spin_unlock+0x28/0x40 [ 55.233352][ T45] btrfs_async_reclaim_metadata_space+0x53f/0xc00 [ 55.239842][ T45] process_one_work+0x9bf/0x1710 [ 55.244796][ T45] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 55.250298][ T45] ? rwlock_bug.part.0+0x90/0x90 [ 55.255442][ T45] ? _raw_spin_lock_irq+0x45/0x50 [ 55.260532][ T45] worker_thread+0x669/0x1090 [ 55.265223][ T45] ? process_one_work+0x1710/0x1710 [ 55.270519][ T45] kthread+0x2e8/0x3a0 [ 55.274616][ T45] ? kthread_complete_and_exit+0x40/0x40 [ 55.280349][ T45] ret_from_fork+0x1f/0x30 [ 55.284798][ T45] [ 55.287890][ T45] Kernel panic - not syncing: panic_on_warn set ... [ 55.294474][ T45] CPU: 0 PID: 45 Comm: kworker/u4:3 Not tainted 6.1.0-rc6-syzkaller #0 [ 55.302701][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.312745][ T45] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 55.320286][ T45] Call Trace: [ 55.323555][ T45] [ 55.326478][ T45] dump_stack_lvl+0xd1/0x138 [ 55.331157][ T45] panic+0x2cc/0x626 [ 55.335057][ T45] ? panic_print_sys_info.part.0+0x110/0x110 [ 55.341042][ T45] ? __warn.cold+0x24b/0x350 [ 55.345634][ T45] ? btrfs_chunk_alloc.cold+0x1a7/0x329 [ 55.351180][ T45] __warn.cold+0x25c/0x350 [ 55.355590][ T45] ? __wake_up_klogd.part.0+0x99/0xf0 [ 55.360961][ T45] ? btrfs_chunk_alloc.cold+0x1a7/0x329 [ 55.366501][ T45] report_bug+0x1c0/0x210 [ 55.370911][ T45] handle_bug+0x3c/0x70 [ 55.375055][ T45] exc_invalid_op+0x18/0x50 [ 55.379556][ T45] asm_exc_invalid_op+0x1a/0x20 [ 55.384401][ T45] RIP: 0010:btrfs_chunk_alloc.cold+0x1a7/0x329 [ 55.390560][ T45] Code: 89 c7 89 c6 88 44 24 4f e8 5d 2e c7 f7 45 84 ff 0f 84 6e 01 00 00 e8 df 31 c7 f7 44 89 f6 48 c7 c7 c0 5c 98 8a e8 fb a4 f2 ff <0f> 0b e9 10 ff ff ff e8 c4 31 c7 f7 48 8b 54 24 38 b8 ff ff 37 00 [ 55.410189][ T45] RSP: 0018:ffffc90000d6fa70 EFLAGS: 00010286 [ 55.416285][ T45] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 55.424266][ T45] RDX: ffff888018452080 RSI: ffffffff8164973c RDI: fffff520001adf40 [ 55.432244][ T45] RBP: ffff88807bed9800 R08: 0000000000000005 R09: 0000000000000000 [ 55.440222][ T45] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888075d88898 [ 55.448195][ T45] R13: ffff888020971000 R14: ffffffffffffffe4 R15: 0000000075d88801 [ 55.456171][ T45] ? vprintk+0x8c/0xa0 [ 55.460257][ T45] ? btrfs_get_alloc_profile+0x2f4/0x7c0 [ 55.465898][ T45] flush_space+0x9ce/0xe90 [ 55.470332][ T45] ? find_held_lock+0x2d/0x110 [ 55.475113][ T45] ? trace_btrfs_trigger_flush+0x340/0x340 [ 55.480952][ T45] ? lock_downgrade+0x6e0/0x6e0 [ 55.485842][ T45] ? _raw_spin_unlock+0x28/0x40 [ 55.490719][ T45] btrfs_async_reclaim_metadata_space+0x53f/0xc00 [ 55.497152][ T45] process_one_work+0x9bf/0x1710 [ 55.502101][ T45] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 55.507493][ T45] ? rwlock_bug.part.0+0x90/0x90 [ 55.512445][ T45] ? _raw_spin_lock_irq+0x45/0x50 [ 55.517480][ T45] worker_thread+0x669/0x1090 [ 55.522163][ T45] ? process_one_work+0x1710/0x1710 [ 55.527371][ T45] kthread+0x2e8/0x3a0 [ 55.531450][ T45] ? kthread_complete_and_exit+0x40/0x40 [ 55.537094][ T45] ret_from_fork+0x1f/0x30 [ 55.541544][ T45] [ 55.544718][ T45] Kernel Offset: disabled [ 55.549124][ T45] Rebooting in 86400 seconds..