./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1513342279 <...> Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. execve("./syz-executor1513342279", ["./syz-executor1513342279"], 0x7ffff65989e0 /* 10 vars */) = 0 brk(NULL) = 0x5555573b5000 brk(0x5555573b5d00) = 0x5555573b5d00 arch_prctl(ARCH_SET_FS, 0x5555573b53c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1513342279", 4096) = 28 brk(0x5555573d6d00) = 0x5555573d6d00 brk(0x5555573d7000) = 0x5555573d7000 mprotect(0x7f0bc046d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f0bc03b7730, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f0bc03b87a0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f0bc03b7730, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f0bc03b87a0}, NULL, 8) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0bb7fad000 [ 70.362456][ T5016] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5016 'syz-executor151' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f0bb7fad000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 70.528623][ T5016] loop0: detected capacity change from 0 to 32768 [ 70.540573][ T5016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor151 (5016) [ 70.559620][ T5016] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 70.568606][ T5016] BTRFS info (device loop0): setting nodatacow, compression disabled mount("/dev/loop0", "./file0", "btrfs", MS_NODEV, "enospc_debug,nodatacow,subvolid=0x0000000000000005,nodatacow,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 70.577027][ T5016] BTRFS info (device loop0): using free space tree [ 70.597391][ T5016] BTRFS info (device loop0): enabling ssd optimizations [ 70.604397][ T5016] BTRFS info (device loop0): auto enabling async discard ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 openat(AT_FDCWD, "./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 write(6, "5", 1) = 1 [ 70.674452][ T5016] FAULT_INJECTION: forcing a failure. [ 70.674452][ T5016] name failslab, interval 1, probability 0, space 0, times 1 [ 70.687503][ T5016] CPU: 0 PID: 5016 Comm: syz-executor151 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 70.698042][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 70.708135][ T5016] Call Trace: [ 70.711445][ T5016] [ 70.714403][ T5016] dump_stack_lvl+0x1e7/0x2d0 [ 70.719158][ T5016] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.724672][ T5016] ? panic+0x770/0x770 [ 70.728801][ T5016] should_fail_ex+0x3aa/0x4e0 [ 70.733521][ T5016] should_failslab+0x9/0x20 [ 70.738060][ T5016] slab_pre_alloc_hook+0x59/0x2b0 [ 70.743141][ T5016] ? ulist_add_merge+0x14c/0x480 [ 70.748130][ T5016] __kmem_cache_alloc_node+0x4b/0x270 [ 70.753558][ T5016] ? ulist_add_merge+0x14c/0x480 [ 70.758550][ T5016] kmalloc_trace+0x2a/0xe0 [ 70.763097][ T5016] ulist_add_merge+0x14c/0x480 [ 70.767917][ T5016] insert_state_fast+0x15a/0x250 [ 70.772911][ T5016] __set_extent_bit+0x143e/0x1b00 [ 70.778003][ T5016] set_record_extent_bits+0x51/0x90 [ 70.783272][ T5016] qgroup_reserve_data+0x260/0x8e0 [ 70.788432][ T5016] ? fault_in_safe_writeable+0x260/0x260 [ 70.794122][ T5016] btrfs_qgroup_reserve_data+0x2e/0xc0 [ 70.799638][ T5016] btrfs_check_data_free_space+0x149/0x240 [ 70.805488][ T5016] btrfs_buffered_write+0x5c6/0x1380 [ 70.810846][ T5016] ? btrfs_do_write_iter+0x1020/0x1020 [ 70.816345][ T5016] ? finish_lock_switch+0x93/0x110 [ 70.821495][ T5016] ? finish_task_switch+0x134/0x650 [ 70.826735][ T5016] btrfs_do_write_iter+0x2b4/0x1020 [ 70.831989][ T5016] ? rcu_read_lock_any_held+0xb7/0x160 [ 70.837481][ T5016] ? rcu_read_lock_bh_held+0x120/0x120 [ 70.842950][ T5016] ? btrfs_check_nocow_unlock+0x40/0x40 [ 70.848609][ T5016] vfs_write+0x782/0xaf0 [ 70.852888][ T5016] ? file_end_write+0x250/0x250 [ 70.857767][ T5016] ? lockdep_hardirqs_on+0x98/0x140 [ 70.862993][ T5016] ? __fdget_pos+0x265/0x2f0 [ 70.867602][ T5016] ksys_write+0x1a0/0x2c0 [ 70.871966][ T5016] ? __ia32_sys_read+0x90/0x90 [ 70.876754][ T5016] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.882753][ T5016] ? syscall_enter_from_user_mode+0x8c/0x230 [ 70.888748][ T5016] do_syscall_64+0x41/0xc0 [ 70.893172][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.899118][ T5016] RIP: 0033:0x7f0bc03fa429 [ 70.899289][ T41] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 70.903547][ T5016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.932297][ T5016] RSP: 002b:00007ffdae344c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.940718][ T5016] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bc03fa429 [ 70.948695][ T5016] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000005 [ 70.956669][ T5016] RBP: 00007ffdae344c40 R08: 0000000000000001 R09: 00007f0bc03b0035 [ 70.964652][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.972625][ T5016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.980613][ T5016] [ 70.984673][ T5016] ------------[ cut here ]------------ [ 70.990218][ T5016] kernel BUG at fs/btrfs/extent-io-tree.c:379! [ 70.996473][ T5016] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 71.002554][ T5016] CPU: 0 PID: 5016 Comm: syz-executor151 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 71.012964][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 71.023019][ T5016] RIP: 0010:insert_state_fast+0x244/0x250 [ 71.028753][ T5016] Code: 33 fe e9 77 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 71 fe ff ff 4c 89 e7 e8 d6 0a 33 fe e9 64 fe ff ff e8 0c 55 da fd <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 [ 71.048373][ T5016] RSP: 0018:ffffc90003aff6a0 EFLAGS: 00010293 [ 71.054444][ T5016] RAX: ffffffff83b1aea4 RBX: dffffc0000000000 RCX: ffff888018ed8000 [ 71.062531][ T5016] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 71.070511][ T5016] RBP: 00000000fffffff4 R08: ffffffff83b1adc5 R09: 1ffffffff1a83f1e [ 71.078485][ T5016] R10: dffffc0000000000 R11: fffffbfff1a83f1f R12: 0000000000000000 [ 71.086475][ T5016] R13: ffff88802b1e5308 R14: ffff88807acfa600 R15: 0000000000000800 [ 71.094458][ T5016] FS: 00005555573b53c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 71.103410][ T5016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.110002][ T5016] CR2: 0000000020017000 CR3: 000000007765c000 CR4: 00000000003506f0 [ 71.117985][ T5016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.125960][ T5016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.133945][ T5016] Call Trace: [ 71.137235][ T5016] [ 71.140172][ T5016] ? __die_body+0x5e/0xa0 [ 71.144513][ T5016] ? die+0x87/0xb0 [ 71.148267][ T5016] ? do_trap+0x11e/0x350 [ 71.152520][ T5016] ? insert_state_fast+0x244/0x250 [ 71.157655][ T5016] ? insert_state_fast+0x244/0x250 [ 71.162794][ T5016] ? do_error_trap+0x141/0x1f0 [ 71.167560][ T5016] ? insert_state_fast+0x244/0x250 [ 71.172691][ T5016] ? do_int3+0x30/0x30 [ 71.176769][ T5016] ? handle_invalid_op+0x2c/0x40 [ 71.181712][ T5016] ? insert_state_fast+0x244/0x250 [ 71.186929][ T5016] ? exc_invalid_op+0x33/0x50 [ 71.191614][ T5016] ? asm_exc_invalid_op+0x1a/0x20 [ 71.196658][ T5016] ? insert_state_fast+0x165/0x250 [ 71.201781][ T5016] ? insert_state_fast+0x244/0x250 [ 71.206905][ T5016] ? insert_state_fast+0x244/0x250 [ 71.212034][ T5016] __set_extent_bit+0x143e/0x1b00 [ 71.217084][ T5016] set_record_extent_bits+0x51/0x90 [ 71.222295][ T5016] qgroup_reserve_data+0x260/0x8e0 [ 71.227411][ T5016] ? fault_in_safe_writeable+0x260/0x260 [ 71.233059][ T5016] btrfs_qgroup_reserve_data+0x2e/0xc0 [ 71.238522][ T5016] btrfs_check_data_free_space+0x149/0x240 [ 71.244331][ T5016] btrfs_buffered_write+0x5c6/0x1380 [ 71.249632][ T5016] ? btrfs_do_write_iter+0x1020/0x1020 [ 71.255102][ T5016] ? finish_lock_switch+0x93/0x110 [ 71.260238][ T5016] ? finish_task_switch+0x134/0x650 [ 71.265452][ T5016] btrfs_do_write_iter+0x2b4/0x1020 [ 71.270662][ T5016] ? rcu_read_lock_any_held+0xb7/0x160 [ 71.276129][ T5016] ? rcu_read_lock_bh_held+0x120/0x120 [ 71.281629][ T5016] ? btrfs_check_nocow_unlock+0x40/0x40 [ 71.287191][ T5016] vfs_write+0x782/0xaf0 [ 71.291450][ T5016] ? file_end_write+0x250/0x250 [ 71.296400][ T5016] ? lockdep_hardirqs_on+0x98/0x140 [ 71.301608][ T5016] ? __fdget_pos+0x265/0x2f0 [ 71.306302][ T5016] ksys_write+0x1a0/0x2c0 [ 71.310652][ T5016] ? __ia32_sys_read+0x90/0x90 [ 71.315425][ T5016] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.321413][ T5016] ? syscall_enter_from_user_mode+0x8c/0x230 [ 71.327423][ T5016] do_syscall_64+0x41/0xc0 [ 71.331853][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.337857][ T5016] RIP: 0033:0x7f0bc03fa429 [ 71.342285][ T5016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.361904][ T5016] RSP: 002b:00007ffdae344c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.370425][ T5016] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bc03fa429 [ 71.378404][ T5016] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000005 [ 71.386472][ T5016] RBP: 00007ffdae344c40 R08: 0000000000000001 R09: 00007f0bc03b0035 [ 71.394555][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.402550][ T5016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.410640][ T5016] [ 71.413667][ T5016] Modules linked in: [ 71.417963][ T5016] ---[ end trace 0000000000000000 ]--- [ 71.423444][ T5016] RIP: 0010:insert_state_fast+0x244/0x250 [ 71.429273][ T5016] Code: 33 fe e9 77 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 71 fe ff ff 4c 89 e7 e8 d6 0a 33 fe e9 64 fe ff ff e8 0c 55 da fd <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 [ 71.448949][ T5016] RSP: 0018:ffffc90003aff6a0 EFLAGS: 00010293 [ 71.455074][ T5016] RAX: ffffffff83b1aea4 RBX: dffffc0000000000 RCX: ffff888018ed8000 [ 71.463043][ T5016] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 71.471056][ T5016] RBP: 00000000fffffff4 R08: ffffffff83b1adc5 R09: 1ffffffff1a83f1e [ 71.479161][ T5016] R10: dffffc0000000000 R11: fffffbfff1a83f1f R12: 0000000000000000 [ 71.487183][ T5016] R13: ffff88802b1e5308 R14: ffff88807acfa600 R15: 0000000000000800 [ 71.495201][ T5016] FS: 00005555573b53c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 71.506516][ T5016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.513119][ T5016] CR2: 0000000020017000 CR3: 000000007765c000 CR4: 00000000003506f0 [ 71.521148][ T5016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.529214][ T5016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.537221][ T5016] Kernel panic - not syncing: Fatal exception [ 71.543581][ T5016] Kernel Offset: disabled [ 71.547913][ T5016] Rebooting in 86400 seconds..