./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3045303778 <...> Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. execve("./syz-executor3045303778", ["./syz-executor3045303778"], 0x7ffe9c3dd9b0 /* 10 vars */) = 0 brk(NULL) = 0x55556aeb6000 brk(0x55556aeb6d00) = 0x55556aeb6d00 arch_prctl(ARCH_SET_FS, 0x55556aeb6380) = 0 set_tid_address(0x55556aeb6650) = 5075 set_robust_list(0x55556aeb6660, 24) = 0 rseq(0x55556aeb6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3045303778", 4096) = 28 getrandom("\x3a\x32\x26\x35\x13\x06\xc2\xc4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556aeb6d00 brk(0x55556aed7d00) = 0x55556aed7d00 brk(0x55556aed8000) = 0x55556aed8000 mprotect(0x7f18039f1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached , child_tidptr=0x55556aeb6650) = 5076 [pid 5076] set_robust_list(0x55556aeb6660, 24) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] memfd_create("syzkaller", 0) = 3 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f17fb400000 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5076] munmap(0x7f17fb400000, 138412032) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5076] close(3) = 0 [pid 5076] close(4) = 0 [pid 5076] mkdir("./file0", 0777) = 0 syzkaller login: [ 75.864336][ T5076] loop0: detected capacity change from 0 to 32768 [ 75.951857][ T5076] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=data_checksum=crc64,str_hash=crc64,nojournal_transaction_names,nocow [ 75.965791][ T5076] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.990581][ T5076] bcachefs (loop0): alloc_read... done [ 75.996448][ T5076] bcachefs (loop0): stripes_read... done [pid 5076] mount("/dev/loop0", "./file0", "bcachefs", 0, "str_hash=crc64,data_checksum=crc64,metadata_checksum=crc32c,nocow,") = 0 [pid 5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] chdir("./file0") = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5076] ioctl(4, LOOP_CLR_FD) = 0 [pid 5076] close(4) = 0 [pid 5076] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = 4 [ 76.002344][ T5076] bcachefs (loop0): snapshots_read... done [ 76.012358][ T5076] bcachefs (loop0): journal_replay... done [ 76.018349][ T5076] bcachefs (loop0): resume_logged_ops... done [ 76.024737][ T5076] bcachefs (loop0): going read-write [ 76.035109][ T5076] bcachefs (loop0): done starting filesystem [pid 5076] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 5 [pid 5076] ioctl(5, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x20000000 [pid 5075] kill(-5076, SIGKILL) = 0 [pid 5075] kill(5076, SIGKILL) = 0 [pid 5075] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x55556aeb76f0 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, 0x55556aeb76f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [ 87.126178][ T57] cfg80211: failed to load regulatory.db [ 107.439959][ T5076] ------------[ cut here ]------------ [ 107.445650][ T5076] btree trans held srcu lock (delaying memory reclaim) for 29 seconds [ 107.446037][ T5076] WARNING: CPU: 0 PID: 5076 at fs/bcachefs/btree_iter.c:2873 bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.464883][ T5076] Modules linked in: [ 107.468836][ T5076] CPU: 0 PID: 5076 Comm: syz-executor304 Not tainted 6.9.0-rc6-syzkaller-00131-gf03359bca01b #0 [ 107.479327][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 107.489446][ T5076] RIP: 0010:bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.495623][ T5076] Code: 2b 1f 48 c1 eb 02 48 b9 c3 f5 28 5c 8f c2 f5 28 48 89 d8 48 f7 e1 48 c1 ea 02 48 c7 c7 40 26 11 8c 48 89 d6 e8 e0 a5 49 fd 90 <0f> 0b 90 90 e9 c0 fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 38 fb ff [ 107.515373][ T5076] RSP: 0018:ffffc90003edf1b0 EFLAGS: 00010246 [ 107.521532][ T5076] RAX: bf0e0aad7b822500 RBX: 00000000000002da RCX: ffff888029225a00 [ 107.529576][ T5076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.537567][ T5076] RBP: 00000000ffffac70 R08: ffffffff81588e32 R09: 1ffff1101728519a [ 107.545641][ T5076] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000 [ 107.553738][ T5076] R13: 1ffff11003c1100d R14: 1ffff11003c11008 R15: ffff88801e088068 [ 107.561815][ T5076] FS: 000055556aeb6380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 107.570839][ T5076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.577459][ T5076] CR2: 0000559d71bf4968 CR3: 000000001b6f2000 CR4: 00000000003506f0 [ 107.585531][ T5076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.593617][ T5076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.601661][ T5076] Call Trace: [ 107.604963][ T5076] [ 107.607967][ T5076] ? __warn+0x163/0x4e0 [ 107.612165][ T5076] ? bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.617725][ T5076] ? report_bug+0x2b3/0x500 [ 107.622357][ T5076] ? bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.628021][ T5076] ? handle_bug+0x3e/0x70 [ 107.632359][ T5076] ? exc_invalid_op+0x1a/0x50 [ 107.637048][ T5076] ? asm_exc_invalid_op+0x1a/0x20 [ 107.642175][ T5076] ? __warn_printk+0x292/0x360 [ 107.646995][ T5076] ? bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.652683][ T5076] bch2_trans_begin+0x1482/0x1920 [ 107.657765][ T5076] ? bch2_quota_acct+0x644/0x780 [ 107.662789][ T5076] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.668535][ T5076] ? __pfx_bch2_trans_begin+0x10/0x10 [ 107.673946][ T5076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.680033][ T5076] bch2_fallocate_dispatch+0x1181/0x3810 [ 107.685768][ T5076] ? __pfx_bch2_fallocate_dispatch+0x10/0x10 [ 107.691898][ T5076] ? mark_lock+0x9a/0x350 [ 107.696295][ T5076] ? __lock_acquire+0x1346/0x1fd0 [ 107.701431][ T5076] ? bch2_fallocate_dispatch+0xcff/0x3810 [ 107.707213][ T5076] ? __pfx_lock_acquire+0x10/0x10 [ 107.712336][ T5076] ? rcu_read_lock_any_held+0xb7/0x160 [ 107.717922][ T5076] vfs_fallocate+0x564/0x6c0 [ 107.722589][ T5076] do_vfs_ioctl+0x2592/0x2e50 [ 107.727283][ T5076] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.732398][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.738822][ T5076] ? tomoyo_path_number_perm+0x208/0x880 [ 107.744474][ T5076] ? __pfx_lock_release+0x10/0x10 [ 107.749595][ T5076] ? kfree+0x153/0x3a0 [ 107.753725][ T5076] ? tomoyo_path_number_perm+0x71a/0x880 [ 107.759460][ T5076] ? tomoyo_path_number_perm+0x208/0x880 [ 107.765139][ T5076] ? smack_log+0x123/0x540 [ 107.769628][ T5076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.775640][ T5076] ? __pfx_smack_log+0x10/0x10 [ 107.780509][ T5076] ? smk_access+0x4ab/0x4e0 [ 107.785053][ T5076] ? smk_tskacc+0x300/0x370 [ 107.789635][ T5076] ? smack_file_ioctl+0x2a1/0x3a0 [ 107.794694][ T5076] ? __pfx_smack_file_ioctl+0x10/0x10 [ 107.800147][ T5076] ? __pfx_ptrace_notify+0x10/0x10 [ 107.805315][ T5076] ? bpf_lsm_file_ioctl+0x9/0x10 [ 107.810340][ T5076] ? security_file_ioctl+0x87/0xb0 [ 107.815491][ T5076] __se_sys_ioctl+0x81/0x170 [ 107.820181][ T5076] do_syscall_64+0xf5/0x240 [ 107.824730][ T5076] ? clear_bhb_loop+0x35/0x90 [ 107.829501][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.835435][ T5076] RIP: 0033:0x7f180396cb19 [ 107.839935][ T5076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 107.859679][ T5076] RSP: 002b:00007ffe82aad958 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.868331][ T5076] RAX: ffffffffffffffda RBX: 0073746e6576652e RCX: 00007f180396cb19 [ 107.876421][ T5076] RDX: 0000000020000000 RSI: 0000000040305828 RDI: 0000000000000005 [ 107.884478][ T5076] RBP: 652e79726f6d656d R08: 000055556aeb74c0 R09: 000055556aeb74c0 [ 107.892557][ T5076] R10: 000055556aeb74c0 R11: 0000000000000246 R12: 00007ffe82aad980 [ 107.900588][ T5076] R13: 00007ffe82aadba8 R14: 431bde82d7b634db R15: 00007f18039b503b [ 107.908664][ T5076] [ 107.911700][ T5076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.919064][ T5076] CPU: 0 PID: 5076 Comm: syz-executor304 Not tainted 6.9.0-rc6-syzkaller-00131-gf03359bca01b #0 [ 107.929471][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 107.939542][ T5076] Call Trace: [ 107.942818][ T5076] [ 107.945768][ T5076] dump_stack_lvl+0x241/0x360 [ 107.950462][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.955665][ T5076] ? __pfx__printk+0x10/0x10 [ 107.960270][ T5076] ? _printk+0xd5/0x120 [ 107.964433][ T5076] ? vscnprintf+0x5d/0x90 [ 107.968766][ T5076] panic+0x349/0x860 [ 107.972665][ T5076] ? __warn+0x172/0x4e0 [ 107.976826][ T5076] ? __pfx_panic+0x10/0x10 [ 107.981244][ T5076] ? show_trace_log_lvl+0x4e6/0x520 [ 107.986456][ T5076] __warn+0x346/0x4e0 [ 107.990466][ T5076] ? bch2_trans_srcu_unlock+0x4f1/0x600 [ 107.996062][ T5076] report_bug+0x2b3/0x500 [ 108.000413][ T5076] ? bch2_trans_srcu_unlock+0x4f1/0x600 [ 108.006001][ T5076] handle_bug+0x3e/0x70 [ 108.010170][ T5076] exc_invalid_op+0x1a/0x50 [ 108.014691][ T5076] asm_exc_invalid_op+0x1a/0x20 [ 108.019549][ T5076] RIP: 0010:bch2_trans_srcu_unlock+0x4f1/0x600 [ 108.025710][ T5076] Code: 2b 1f 48 c1 eb 02 48 b9 c3 f5 28 5c 8f c2 f5 28 48 89 d8 48 f7 e1 48 c1 ea 02 48 c7 c7 40 26 11 8c 48 89 d6 e8 e0 a5 49 fd 90 <0f> 0b 90 90 e9 c0 fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 38 fb ff [ 108.045313][ T5076] RSP: 0018:ffffc90003edf1b0 EFLAGS: 00010246 [ 108.051380][ T5076] RAX: bf0e0aad7b822500 RBX: 00000000000002da RCX: ffff888029225a00 [ 108.059357][ T5076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.067346][ T5076] RBP: 00000000ffffac70 R08: ffffffff81588e32 R09: 1ffff1101728519a [ 108.075340][ T5076] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000 [ 108.083331][ T5076] R13: 1ffff11003c1100d R14: 1ffff11003c11008 R15: ffff88801e088068 [ 108.091321][ T5076] ? __warn_printk+0x292/0x360 [ 108.096110][ T5076] bch2_trans_begin+0x1482/0x1920 [ 108.101144][ T5076] ? bch2_quota_acct+0x644/0x780 [ 108.106087][ T5076] ? __mutex_unlock_slowpath+0x21d/0x750 [ 108.111720][ T5076] ? __pfx_bch2_trans_begin+0x10/0x10 [ 108.117092][ T5076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.123081][ T5076] bch2_fallocate_dispatch+0x1181/0x3810 [ 108.128750][ T5076] ? __pfx_bch2_fallocate_dispatch+0x10/0x10 [ 108.134735][ T5076] ? mark_lock+0x9a/0x350 [ 108.139068][ T5076] ? __lock_acquire+0x1346/0x1fd0 [ 108.144105][ T5076] ? bch2_fallocate_dispatch+0xcff/0x3810 [ 108.149830][ T5076] ? __pfx_lock_acquire+0x10/0x10 [ 108.154860][ T5076] ? rcu_read_lock_any_held+0xb7/0x160 [ 108.160330][ T5076] vfs_fallocate+0x564/0x6c0 [ 108.164952][ T5076] do_vfs_ioctl+0x2592/0x2e50 [ 108.169631][ T5076] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.174669][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.180994][ T5076] ? tomoyo_path_number_perm+0x208/0x880 [ 108.186633][ T5076] ? __pfx_lock_release+0x10/0x10 [ 108.191665][ T5076] ? kfree+0x153/0x3a0 [ 108.195756][ T5076] ? tomoyo_path_number_perm+0x71a/0x880 [ 108.201390][ T5076] ? tomoyo_path_number_perm+0x208/0x880 [ 108.207025][ T5076] ? smack_log+0x123/0x540 [ 108.211456][ T5076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.217442][ T5076] ? __pfx_smack_log+0x10/0x10 [ 108.222215][ T5076] ? smk_access+0x4ab/0x4e0 [ 108.226738][ T5076] ? smk_tskacc+0x300/0x370 [ 108.231258][ T5076] ? smack_file_ioctl+0x2a1/0x3a0 [ 108.236303][ T5076] ? __pfx_smack_file_ioctl+0x10/0x10 [ 108.241722][ T5076] ? __pfx_ptrace_notify+0x10/0x10 [ 108.246860][ T5076] ? bpf_lsm_file_ioctl+0x9/0x10 [ 108.251814][ T5076] ? security_file_ioctl+0x87/0xb0 [ 108.256937][ T5076] __se_sys_ioctl+0x81/0x170 [ 108.261533][ T5076] do_syscall_64+0xf5/0x240 [ 108.266043][ T5076] ? clear_bhb_loop+0x35/0x90 [ 108.270720][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.276612][ T5076] RIP: 0033:0x7f180396cb19 [ 108.281025][ T5076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 108.300631][ T5076] RSP: 002b:00007ffe82aad958 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.309060][ T5076] RAX: ffffffffffffffda RBX: 0073746e6576652e RCX: 00007f180396cb19 [ 108.317040][ T5076] RDX: 0000000020000000 RSI: 0000000040305828 RDI: 0000000000000005 [ 108.325017][ T5076] RBP: 652e79726f6d656d R08: 000055556aeb74c0 R09: 000055556aeb74c0 [ 108.332997][ T5076] R10: 000055556aeb74c0 R11: 0000000000000246 R12: 00007ffe82aad980 [ 108.340998][ T5076] R13: 00007ffe82aadba8 R14: 431bde82d7b634db R15: 00007f18039b503b [ 108.349006][ T5076] [ 108.352183][ T5076] Kernel Offset: disabled [ 108.356579][ T5076] Rebooting in 86400 seconds..