Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.659252][ T5072] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5072 'syz-executor246' [ 56.807006][ T5072] loop0: detected capacity change from 0 to 32768 [ 56.817219][ T5072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor246 (5072) [ 56.836844][ T5072] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 56.845682][ T5072] BTRFS info (device loop0): using free space tree [ 56.866093][ T5072] BTRFS info (device loop0): enabling ssd optimizations [ 56.873175][ T5072] BTRFS info (device loop0): auto enabling async discard [ 56.905030][ T27] audit: type=1800 audit(1674354064.787:2): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor246" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 56.930520][ T5072] FAULT_INJECTION: forcing a failure. [ 56.930520][ T5072] name failslab, interval 1, probability 0, space 0, times 1 [ 56.943515][ T5072] CPU: 1 PID: 5072 Comm: syz-executor246 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0 [ 56.953444][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 56.963533][ T5072] Call Trace: [ 56.966837][ T5072] [ 56.969787][ T5072] dump_stack_lvl+0xd1/0x138 [ 56.974471][ T5072] should_fail_ex.cold+0x5/0xa [ 56.979298][ T5072] ? btrfs_add_delayed_tree_ref+0x21d/0x1090 [ 56.985305][ T5072] should_failslab+0x9/0x20 [ 56.989853][ T5072] kmem_cache_alloc+0x5a/0x320 [ 56.994680][ T5072] btrfs_add_delayed_tree_ref+0x21d/0x1090 [ 57.000540][ T5072] ? btrfs_delete_ref_head+0x2c0/0x2c0 [ 57.006020][ T5072] ? find_held_lock+0x2d/0x110 [ 57.010823][ T5072] btrfs_free_tree_block+0x24c/0x990 [ 57.016143][ T5072] ? btrfs_finish_extent_commit+0x7e0/0x7e0 [ 57.022061][ T5072] ? btrfs_del_leaf+0x20e/0x320 [ 57.026957][ T5072] ? rwlock_bug.part.0+0x90/0x90 [ 57.031966][ T5072] ? lock_acquire+0x32/0xc0 [ 57.036488][ T5072] ? btrfs_del_leaf+0x19c/0x320 [ 57.041377][ T5072] btrfs_del_leaf+0x293/0x320 [ 57.046086][ T5072] btrfs_del_items+0x9f5/0xe20 [ 57.050885][ T5072] ? btrfs_duplicate_item+0x300/0x300 [ 57.056300][ T5072] ? btrfs_lookup_file_extent+0xcd/0x110 [ 57.061979][ T5072] ? btrfs_get_64+0x277/0x340 [ 57.066707][ T5072] ? btrfs_get_token_64+0x6a0/0x6a0 [ 57.071937][ T5072] ? btrfs_get_8+0xf2/0x170 [ 57.076474][ T5072] btrfs_drop_extents+0x1b37/0x2650 [ 57.081734][ T5072] ? btrfs_dirty_pages+0x320/0x320 [ 57.086872][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.092020][ T5072] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.097594][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.102735][ T5072] ? lock_acquire+0x32/0xc0 [ 57.107256][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.112411][ T5072] ? join_transaction+0x43e/0x10e0 [ 57.117551][ T5072] ? join_transaction+0x22e/0x10e0 [ 57.122734][ T5072] cow_file_range_inline+0x37e/0x7c0 [ 57.128066][ T5072] ? __set_extent_bit+0xff6/0x1650 [ 57.133228][ T5072] ? btrfs_update_time+0x2f0/0x2f0 [ 57.138385][ T5072] cow_file_range+0x987/0xd10 [ 57.143101][ T5072] ? test_range_bit+0x3c/0x4b0 [ 57.147891][ T5072] ? cow_file_range_inline+0x7c0/0x7c0 [ 57.153376][ T5072] ? free_extent_state+0x6e/0x440 [ 57.158438][ T5072] ? find_lock_delalloc_range+0x53d/0x690 [ 57.164187][ T5072] btrfs_run_delalloc_range+0x593/0x1340 [ 57.169858][ T5072] ? mark_lock.part.0+0xee/0x1910 [ 57.174912][ T5072] writepage_delalloc+0x1a6/0x3e0 [ 57.179965][ T5072] ? find_lock_delalloc_range+0x690/0x690 [ 57.185735][ T5072] __extent_writepage+0xff0/0x1560 [ 57.190884][ T5072] ? btrfs_do_readpage+0x1600/0x1600 [ 57.196199][ T5072] ? folio_clear_dirty_for_io+0x10f/0x770 [ 57.201942][ T5072] extent_write_cache_pages+0x445/0xd00 [ 57.207529][ T5072] ? __extent_writepage+0x1560/0x1560 [ 57.212935][ T5072] ? lock_chain_count+0x20/0x20 [ 57.217800][ T5072] ? find_held_lock+0x2d/0x110 [ 57.222598][ T5072] ? __lock_acquire+0x16c8/0x5780 [ 57.227664][ T5072] extent_writepages+0x1ae/0x450 [ 57.232631][ T5072] ? extent_write_locked_range+0xea0/0xea0 [ 57.238467][ T5072] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 57.244474][ T5072] ? find_held_lock+0x2d/0x110 [ 57.249277][ T5072] ? btrfs_readahead+0x20/0x20 [ 57.254058][ T5072] do_writepages+0x1a8/0x640 [ 57.258674][ T5072] ? writeback_set_ratelimit+0x150/0x150 [ 57.264321][ T5072] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.269887][ T5072] ? do_raw_spin_unlock+0x175/0x230 [ 57.275123][ T5072] ? _raw_spin_unlock+0x28/0x40 [ 57.280004][ T5072] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 57.286010][ T5072] filemap_fdatawrite_wbc+0x147/0x1b0 [ 57.291407][ T5072] __filemap_fdatawrite_range+0xb8/0xf0 [ 57.296991][ T5072] ? delete_from_page_cache_batch+0x8e0/0x8e0 [ 57.303195][ T5072] btrfs_fdatawrite_range+0x4a/0x110 [ 57.308510][ T5072] btrfs_do_write_iter+0xf24/0x1470 [ 57.313748][ T5072] ? btrfs_fdatawrite_range+0x110/0x110 [ 57.319331][ T5072] vfs_write+0x9ed/0xe10 [ 57.323601][ T5072] ? kernel_write+0x670/0x670 [ 57.328301][ T5072] ? build_open_flags+0x6f0/0x6f0 [ 57.333361][ T5072] ? build_open_flags+0x6f0/0x6f0 [ 57.338414][ T5072] ? __fget_light+0x20a/0x270 [ 57.343115][ T5072] ksys_write+0x12b/0x250 [ 57.347465][ T5072] ? __ia32_sys_read+0xb0/0xb0 [ 57.352263][ T5072] ? syscall_enter_from_user_mode+0x26/0xb0 [ 57.358179][ T5072] do_syscall_64+0x39/0xb0 [ 57.362620][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.368536][ T5072] RIP: 0033:0x7f98133a6c49 [ 57.372962][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.392582][ T5072] RSP: 002b:00007ffc24a20818 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.401010][ T5072] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f98133a6c49 [ 57.409021][ T5072] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000004 [ 57.417003][ T5072] RBP: 00007ffc24a20860 R08: 0000000000000002 R09: aaaaaaaaaaaa0102 [ 57.424999][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 57.432995][ T5072] R13: 00007f981341977c R14: 0000000000000003 R15: 0000000000000001 [ 57.441084][ T5072] [ 57.451223][ T5072] ------------[ cut here ]------------ [ 57.456813][ T5072] kernel BUG at fs/btrfs/extent-tree.c:3283! [ 57.463459][ T5072] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.469558][ T5072] CPU: 0 PID: 5072 Comm: syz-executor246 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0 [ 57.479466][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.489535][ T5072] RIP: 0010:btrfs_free_tree_block+0x266/0x990 [ 57.495633][ T5072] Code: 00 48 8b 74 24 10 31 d2 4c 89 e7 e8 e4 a7 16 00 31 ff 89 c6 89 44 24 10 e8 27 84 23 fe 8b 44 24 10 85 c0 74 26 e8 6a 87 23 fe <0f> 0b e8 63 87 23 fe 48 89 ee 48 c7 c7 fa ff ff ff c6 44 24 58 01 [ 57.515264][ T5072] RSP: 0018:ffffc90003d1ecb0 EFLAGS: 00010293 [ 57.521354][ T5072] RAX: 0000000000000000 RBX: ffff888029183930 RCX: 0000000000000000 [ 57.529351][ T5072] RDX: ffff888029138000 RSI: ffffffff835e7276 RDI: 0000000000000005 [ 57.537348][ T5072] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 57.545334][ T5072] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888075bf3498 [ 57.553308][ T5072] R13: 1ffff920007a3d9a R14: 0000000000000001 R15: ffff8880293e8000 [ 57.561276][ T5072] FS: 0000555556ba93c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.570215][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.576801][ T5072] CR2: 00007f8730789aa0 CR3: 00000000287d0000 CR4: 00000000003506f0 [ 57.584759][ T5072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.592713][ T5072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.600668][ T5072] Call Trace: [ 57.603943][ T5072] [ 57.606875][ T5072] ? btrfs_finish_extent_commit+0x7e0/0x7e0 [ 57.612779][ T5072] ? btrfs_del_leaf+0x20e/0x320 [ 57.617633][ T5072] ? rwlock_bug.part.0+0x90/0x90 [ 57.622561][ T5072] ? lock_acquire+0x32/0xc0 [ 57.627065][ T5072] ? btrfs_del_leaf+0x19c/0x320 [ 57.631916][ T5072] btrfs_del_leaf+0x293/0x320 [ 57.636604][ T5072] btrfs_del_items+0x9f5/0xe20 [ 57.641380][ T5072] ? btrfs_duplicate_item+0x300/0x300 [ 57.647011][ T5072] ? btrfs_lookup_file_extent+0xcd/0x110 [ 57.652648][ T5072] ? btrfs_get_64+0x277/0x340 [ 57.657314][ T5072] ? btrfs_get_token_64+0x6a0/0x6a0 [ 57.662499][ T5072] ? btrfs_get_8+0xf2/0x170 [ 57.666998][ T5072] btrfs_drop_extents+0x1b37/0x2650 [ 57.672193][ T5072] ? btrfs_dirty_pages+0x320/0x320 [ 57.677293][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.682394][ T5072] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.687929][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.693039][ T5072] ? lock_acquire+0x32/0xc0 [ 57.697526][ T5072] ? join_transaction+0x3e0/0x10e0 [ 57.702646][ T5072] ? join_transaction+0x43e/0x10e0 [ 57.707747][ T5072] ? join_transaction+0x22e/0x10e0 [ 57.712855][ T5072] cow_file_range_inline+0x37e/0x7c0 [ 57.718128][ T5072] ? __set_extent_bit+0xff6/0x1650 [ 57.723222][ T5072] ? btrfs_update_time+0x2f0/0x2f0 [ 57.728323][ T5072] cow_file_range+0x987/0xd10 [ 57.733011][ T5072] ? test_range_bit+0x3c/0x4b0 [ 57.737762][ T5072] ? cow_file_range_inline+0x7c0/0x7c0 [ 57.743210][ T5072] ? free_extent_state+0x6e/0x440 [ 57.748233][ T5072] ? find_lock_delalloc_range+0x53d/0x690 [ 57.753956][ T5072] btrfs_run_delalloc_range+0x593/0x1340 [ 57.759578][ T5072] ? mark_lock.part.0+0xee/0x1910 [ 57.764590][ T5072] writepage_delalloc+0x1a6/0x3e0 [ 57.769604][ T5072] ? find_lock_delalloc_range+0x690/0x690 [ 57.775317][ T5072] __extent_writepage+0xff0/0x1560 [ 57.780418][ T5072] ? btrfs_do_readpage+0x1600/0x1600 [ 57.785711][ T5072] ? folio_clear_dirty_for_io+0x10f/0x770 [ 57.791421][ T5072] extent_write_cache_pages+0x445/0xd00 [ 57.796977][ T5072] ? __extent_writepage+0x1560/0x1560 [ 57.802361][ T5072] ? lock_chain_count+0x20/0x20 [ 57.807205][ T5072] ? find_held_lock+0x2d/0x110 [ 57.811967][ T5072] ? __lock_acquire+0x16c8/0x5780 [ 57.816993][ T5072] extent_writepages+0x1ae/0x450 [ 57.821933][ T5072] ? extent_write_locked_range+0xea0/0xea0 [ 57.827741][ T5072] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 57.833718][ T5072] ? find_held_lock+0x2d/0x110 [ 57.838499][ T5072] ? btrfs_readahead+0x20/0x20 [ 57.843268][ T5072] do_writepages+0x1a8/0x640 [ 57.847904][ T5072] ? writeback_set_ratelimit+0x150/0x150 [ 57.853558][ T5072] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.859112][ T5072] ? do_raw_spin_unlock+0x175/0x230 [ 57.864314][ T5072] ? _raw_spin_unlock+0x28/0x40 [ 57.869167][ T5072] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 57.875150][ T5072] filemap_fdatawrite_wbc+0x147/0x1b0 [ 57.880558][ T5072] __filemap_fdatawrite_range+0xb8/0xf0 [ 57.886107][ T5072] ? delete_from_page_cache_batch+0x8e0/0x8e0 [ 57.892195][ T5072] btrfs_fdatawrite_range+0x4a/0x110 [ 57.897479][ T5072] btrfs_do_write_iter+0xf24/0x1470 [ 57.902688][ T5072] ? btrfs_fdatawrite_range+0x110/0x110 [ 57.908232][ T5072] vfs_write+0x9ed/0xe10 [ 57.912472][ T5072] ? kernel_write+0x670/0x670 [ 57.917167][ T5072] ? build_open_flags+0x6f0/0x6f0 [ 57.922183][ T5072] ? build_open_flags+0x6f0/0x6f0 [ 57.927198][ T5072] ? __fget_light+0x20a/0x270 [ 57.931864][ T5072] ksys_write+0x12b/0x250 [ 57.936186][ T5072] ? __ia32_sys_read+0xb0/0xb0 [ 57.940957][ T5072] ? syscall_enter_from_user_mode+0x26/0xb0 [ 57.946865][ T5072] do_syscall_64+0x39/0xb0 [ 57.951297][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.957180][ T5072] RIP: 0033:0x7f98133a6c49 [ 57.961579][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.981172][ T5072] RSP: 002b:00007ffc24a20818 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.989573][ T5072] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f98133a6c49 [ 57.997594][ T5072] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000004 [ 58.005564][ T5072] RBP: 00007ffc24a20860 R08: 0000000000000002 R09: aaaaaaaaaaaa0102 [ 58.013546][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 58.021514][ T5072] R13: 00007f981341977c R14: 0000000000000003 R15: 0000000000000001 [ 58.029482][ T5072] [ 58.032487][ T5072] Modules linked in: [ 58.037095][ T5072] ---[ end trace 0000000000000000 ]--- [ 58.043103][ T5072] RIP: 0010:btrfs_free_tree_block+0x266/0x990 [ 58.049195][ T5072] Code: 00 48 8b 74 24 10 31 d2 4c 89 e7 e8 e4 a7 16 00 31 ff 89 c6 89 44 24 10 e8 27 84 23 fe 8b 44 24 10 85 c0 74 26 e8 6a 87 23 fe <0f> 0b e8 63 87 23 fe 48 89 ee 48 c7 c7 fa ff ff ff c6 44 24 58 01 [ 58.068880][ T5072] RSP: 0018:ffffc90003d1ecb0 EFLAGS: 00010293 [ 58.074986][ T5072] RAX: 0000000000000000 RBX: ffff888029183930 RCX: 0000000000000000 [ 58.082982][ T5072] RDX: ffff888029138000 RSI: ffffffff835e7276 RDI: 0000000000000005 [ 58.091412][ T5072] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 58.099375][ T5072] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888075bf3498 [ 58.107373][ T5072] R13: 1ffff920007a3d9a R14: 0000000000000001 R15: ffff8880293e8000 [ 58.115382][ T5072] FS: 0000555556ba93c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 58.124360][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.130990][ T5072] CR2: 000056463f81d300 CR3: 00000000287d0000 CR4: 00000000003506e0 [ 58.138949][ T5072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.146937][ T5072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.154931][ T5072] Kernel panic - not syncing: Fatal exception [ 58.161134][ T5072] Kernel Offset: disabled [ 58.165448][ T5072] Rebooting in 86400 seconds..