./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor769540169 <...> Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts. execve("./syz-executor769540169", ["./syz-executor769540169"], 0x7ffdfd8ea2c0 /* 10 vars */) = 0 brk(NULL) = 0x555555a1f000 brk(0x555555a1fc40) = 0x555555a1fc40 arch_prctl(ARCH_SET_FS, 0x555555a1f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor769540169", 4096) = 27 brk(0x555555a40c40) = 0x555555a40c40 brk(0x555555a41000) = 0x555555a41000 mprotect(0x7fe86f22a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a1f5d0) = 5007 ./strace-static-x86_64: Process 5007 attached [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5007] setpgid(0, 0) = 0 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1000", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] memfd_create("syzkaller", 0) = 3 [pid 5007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe866d6a000 [ 78.001371][ T5007] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5007 'syz-executor769' [pid 5007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5007] munmap(0x7fe866d6a000, 16777216) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5007] close(3) = 0 [pid 5007] mkdir("./file0", 0777) = 0 [ 78.248627][ T5007] loop0: detected capacity change from 0 to 32768 [ 78.268339][ T5007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor769 (5007) [ 78.289912][ T5007] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 78.298827][ T5007] BTRFS info (device loop0): setting nodatacow, compression disabled [ 78.307080][ T5007] BTRFS info (device loop0): using free space tree [ 78.335271][ T5007] BTRFS info (device loop0): enabling ssd optimizations [pid 5007] mount("/dev/loop0", "./file0", "btrfs", MS_NODEV, "enospc_debug,nodatacow,subvolid=0x0000000000000005,nodatacow,") = 0 [pid 5007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5007] chdir("./file0") = 0 [pid 5007] ioctl(4, LOOP_CLR_FD) = 0 [pid 5007] close(4) = 0 [pid 5007] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 78.343323][ T5007] BTRFS info (device loop0): auto enabling async discard [pid 5007] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [pid 5007] openat(AT_FDCWD, "./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 5007] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5007] write(6, "5", 1) = 1 [ 78.443639][ T5007] FAULT_INJECTION: forcing a failure. [ 78.443639][ T5007] name failslab, interval 1, probability 0, space 0, times 1 [ 78.456709][ T5007] CPU: 0 PID: 5007 Comm: syz-executor769 Not tainted 6.4.0-rc1-next-20230512-syzkaller #0 [ 78.466665][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 78.476779][ T5007] Call Trace: [ 78.477581][ T42] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 78.480161][ T5007] [ 78.480198][ T5007] dump_stack_lvl+0x136/0x150 [ 78.497067][ T5007] should_fail_ex+0x4a3/0x5b0 [ 78.501820][ T5007] ? find_held_lock+0x2d/0x110 [ 78.506659][ T5007] should_failslab+0x9/0x20 [ 78.511228][ T5007] __kmem_cache_alloc_node+0x5b/0x320 [ 78.516648][ T5007] ? ulist_add_merge.part.0+0x85/0x4b0 [ 78.522160][ T5007] kmalloc_trace+0x26/0xe0 [ 78.526619][ T5007] ulist_add_merge.part.0+0x85/0x4b0 [ 78.532029][ T5007] ? rcu_is_watching+0x12/0xb0 [ 78.536829][ T5007] ulist_add+0x106/0x160 [ 78.541119][ T5007] set_state_bits.isra.0+0x11f/0x1c0 [ 78.546538][ T5007] __set_extent_bit+0x3ec/0x15f0 [ 78.551536][ T5007] set_record_extent_bits+0x5c/0x90 [ 78.556794][ T5007] qgroup_reserve_data+0x233/0xa80 [ 78.561954][ T5007] ? fault_in_readable+0x170/0x210 [ 78.567203][ T5007] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 78.572710][ T5007] btrfs_check_data_free_space+0x111/0x280 [ 78.578567][ T5007] btrfs_buffered_write+0x519/0x1380 [ 78.583915][ T5007] ? btrfs_check_nocow_lock+0x3c0/0x3c0 [ 78.589500][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.595524][ T5007] ? aa_path_link+0x2f0/0x2f0 [ 78.600243][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.606367][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.612399][ T5007] btrfs_do_write_iter+0xb60/0x1210 [ 78.617647][ T5007] ? btrfs_fdatawrite_range+0x110/0x110 [ 78.623237][ T5007] vfs_write+0x945/0xd50 [ 78.627520][ T5007] ? kernel_write+0x670/0x670 [ 78.632229][ T5007] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 78.637724][ T5007] ? find_held_lock+0x2d/0x110 [ 78.642540][ T5007] ? lock_downgrade+0x690/0x690 [ 78.647459][ T5007] ? __fget_light+0x20a/0x270 [ 78.652174][ T5007] ksys_write+0x12b/0x250 [ 78.656542][ T5007] ? __ia32_sys_read+0xb0/0xb0 [ 78.661370][ T5007] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.666612][ T5007] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.671854][ T5007] ? ptrace_notify+0xfe/0x140 [ 78.676573][ T5007] do_syscall_64+0x39/0xb0 [ 78.681041][ T5007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.686981][ T5007] RIP: 0033:0x7fe86f1b7689 [ 78.691425][ T5007] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.711066][ T5007] RSP: 002b:00007ffe51fa5698 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.719512][ T5007] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe86f1b7689 [ 78.727515][ T5007] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000005 [ 78.735513][ T5007] RBP: 00007ffe51fa56b0 R08: 0000000000000001 R09: 000000000000000d [ 78.743507][ T5007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 78.751508][ T5007] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 78.759613][ T5007] [ 78.763578][ T5007] ------------[ cut here ]------------ [ 78.769086][ T5007] kernel BUG at fs/btrfs/extent-io-tree.c:379! [ 78.775298][ T5007] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 78.781387][ T5007] CPU: 0 PID: 5007 Comm: syz-executor769 Not tainted 6.4.0-rc1-next-20230512-syzkaller #0 [ 78.791447][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 78.801520][ T5007] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 78.807632][ T5007] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 fe aa f7 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 e5 aa f7 fd <0f> 0b 4c 89 ef e8 3b a7 4a fe e9 e6 fe ff ff 4c 89 ef e8 2e a7 4a [ 78.827885][ T5007] RSP: 0018:ffffc90003a6f858 EFLAGS: 00010293 [ 78.834002][ T5007] RAX: 0000000000000000 RBX: ffff88802cb4a780 RCX: 0000000000000000 [ 78.842004][ T5007] RDX: ffff88807db20000 RSI: ffffffff838c6b4b RDI: 0000000000000005 [ 78.850000][ T5007] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 78.857995][ T5007] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 78.865991][ T5007] R13: ffff88802cb4a7fc R14: 0000000000012fff R15: 0000000000000000 [ 78.873984][ T5007] FS: 0000555555a1f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.882944][ T5007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.889636][ T5007] CR2: 0000000020017000 CR3: 000000002aa54000 CR4: 00000000003506f0 [ 78.897631][ T5007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.905629][ T5007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.913622][ T5007] Call Trace: [ 78.916931][ T5007] [ 78.919928][ T5007] __set_extent_bit+0x3ec/0x15f0 [ 78.924919][ T5007] set_record_extent_bits+0x5c/0x90 [ 78.930175][ T5007] qgroup_reserve_data+0x233/0xa80 [ 78.935367][ T5007] ? fault_in_readable+0x170/0x210 [ 78.940530][ T5007] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 78.946043][ T5007] btrfs_check_data_free_space+0x111/0x280 [ 78.951903][ T5007] btrfs_buffered_write+0x519/0x1380 [ 78.957251][ T5007] ? btrfs_check_nocow_lock+0x3c0/0x3c0 [ 78.962861][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.968890][ T5007] ? aa_path_link+0x2f0/0x2f0 [ 78.973607][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.979652][ T5007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.985790][ T5007] btrfs_do_write_iter+0xb60/0x1210 [ 78.991036][ T5007] ? btrfs_fdatawrite_range+0x110/0x110 [ 78.996650][ T5007] vfs_write+0x945/0xd50 [ 79.000934][ T5007] ? kernel_write+0x670/0x670 [ 79.005643][ T5007] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 79.011133][ T5007] ? find_held_lock+0x2d/0x110 [ 79.015937][ T5007] ? lock_downgrade+0x690/0x690 [ 79.020843][ T5007] ? __fget_light+0x20a/0x270 [ 79.025842][ T5007] ksys_write+0x12b/0x250 [ 79.030219][ T5007] ? __ia32_sys_read+0xb0/0xb0 [ 79.035112][ T5007] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.040431][ T5007] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.045675][ T5007] ? ptrace_notify+0xfe/0x140 [ 79.050389][ T5007] do_syscall_64+0x39/0xb0 [ 79.054864][ T5007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.060852][ T5007] RIP: 0033:0x7fe86f1b7689 [ 79.065316][ T5007] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.084992][ T5007] RSP: 002b:00007ffe51fa5698 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.093451][ T5007] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe86f1b7689 [ 79.101455][ T5007] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000005 [ 79.109453][ T5007] RBP: 00007ffe51fa56b0 R08: 0000000000000001 R09: 000000000000000d [ 79.117444][ T5007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 79.125433][ T5007] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 79.133435][ T5007] [ 79.136501][ T5007] Modules linked in: [ 79.140589][ T5007] ---[ end trace 0000000000000000 ]--- [ 79.146222][ T5007] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 79.152429][ T5007] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 fe aa f7 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 e5 aa f7 fd <0f> 0b 4c 89 ef e8 3b a7 4a fe e9 e6 fe ff ff 4c 89 ef e8 2e a7 4a [ 79.172157][ T5007] RSP: 0018:ffffc90003a6f858 EFLAGS: 00010293 [ 79.178287][ T5007] RAX: 0000000000000000 RBX: ffff88802cb4a780 RCX: 0000000000000000 [ 79.186453][ T5007] RDX: ffff88807db20000 RSI: ffffffff838c6b4b RDI: 0000000000000005 [ 79.194612][ T5007] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 79.203492][ T5007] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 79.211559][ T5007] R13: ffff88802cb4a7fc R14: 0000000000012fff R15: 0000000000000000 [ 79.219587][ T5007] FS: 0000555555a1f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 79.228615][ T5007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.235307][ T5007] CR2: 0000000020017000 CR3: 000000002aa54000 CR4: 00000000003506f0 [ 79.243396][ T5007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.251541][ T5007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.259583][ T5007] Kernel panic - not syncing: Fatal exception [ 79.265978][ T5007] Kernel Offset: disabled [ 79.270320][ T5007] Rebooting in 86400 seconds..