Warning: Permanently added '[localhost]:24089' (ED25519) to the list of known hosts. executing program [ 69.681816][ T5315] loop0: detected capacity change from 0 to 32768 [ 69.696283][ T5315] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor405 (5315) [ 69.728074][ T5315] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.731726][ T5315] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 69.734640][ T5315] BTRFS info (device loop0): using free-space-tree [ 69.868874][ T41] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 69.879557][ T5315] FAULT_INJECTION: forcing a failure. [ 69.879557][ T5315] name failslab, interval 1, probability 0, space 0, times 1 [ 69.884335][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor405 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 69.888613][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.892811][ T5315] Call Trace: [ 69.894044][ T5315] [ 69.895269][ T5315] dump_stack_lvl+0x241/0x360 [ 69.897226][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.899255][ T5315] ? __pfx__printk+0x10/0x10 [ 69.901190][ T5315] ? fs_reclaim_acquire+0x93/0x130 [ 69.903149][ T5315] ? __pfx___might_resched+0x10/0x10 [ 69.905213][ T5315] should_fail_ex+0x3b0/0x4e0 [ 69.907158][ T5315] ? __btrfs_free_extent+0x35e/0x3a10 [ 69.909245][ T5315] should_failslab+0xac/0x100 [ 69.911093][ T5315] ? __btrfs_free_extent+0x35e/0x3a10 [ 69.913118][ T5315] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 69.916049][ T5315] __btrfs_free_extent+0x35e/0x3a10 [ 69.918200][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 69.920164][ T5315] ? __pfx___btrfs_free_extent+0x10/0x10 [ 69.922308][ T5315] ? __lock_acquire+0x1fc0/0x2050 [ 69.924179][ T5315] ? do_raw_read_unlock+0x3c/0x80 [ 69.926115][ T5315] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.928028][ T5315] __btrfs_run_delayed_refs+0x112e/0x4680 [ 69.930211][ T5315] ? validate_chain+0x15c0/0x5920 [ 69.932156][ T5315] ? __pfx_validate_chain+0x10/0x10 [ 69.934449][ T5315] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 69.937182][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 69.939382][ T5315] ? __lock_acquire+0x1384/0x2050 [ 69.941549][ T5315] btrfs_run_delayed_refs+0xe3/0x2c0 [ 69.943703][ T5315] btrfs_commit_transaction+0x4be/0x3740 [ 69.945821][ T5315] ? btrfs_commit_transaction+0x17f/0x3740 [ 69.948159][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 69.950061][ T5315] ? __asan_memset+0x23/0x50 [ 69.951878][ T5315] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 69.954176][ T5315] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 69.956376][ T5315] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.958292][ T5315] ? join_transaction+0x405/0xd70 [ 69.960177][ T5315] ? btrfs_record_root_in_trans+0x12d/0x190 [ 69.962392][ T5315] ? start_transaction+0x455/0x1670 [ 69.964318][ T5315] try_flush_qgroup+0x1ec/0x340 [ 69.966126][ T5315] ? kfree+0x1a0/0x440 [ 69.967594][ T5315] ? __pfx_try_flush_qgroup+0x10/0x10 [ 69.969493][ T5315] ? qgroup_reserve_data+0x6ab/0x8d0 [ 69.971469][ T5315] btrfs_qgroup_reserve_data+0x68/0xb0 [ 69.973579][ T5315] btrfs_check_data_free_space+0x149/0x240 [ 69.975855][ T5315] btrfs_buffered_write+0x5c7/0x1360 [ 69.977987][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 69.980069][ T5315] ? aa_file_perm+0x137/0xf50 [ 69.982178][ T5315] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 69.984530][ T5315] ? __lock_acquire+0x1384/0x2050 [ 69.986521][ T5315] btrfs_do_write_iter+0x279/0x760 [ 69.988611][ T5315] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 69.990810][ T5315] do_iter_readv_writev+0x600/0x880 [ 69.992793][ T5315] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 69.994943][ T5315] ? rcu_read_lock_any_held+0xb7/0x160 [ 69.997041][ T5315] vfs_writev+0x376/0xba0 [ 69.998731][ T5315] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 70.000893][ T5315] ? sb_end_write+0xe9/0x1c0 [ 70.002701][ T5315] ? __pfx_vfs_writev+0x10/0x10 [ 70.004683][ T5315] ? vfs_write+0x730/0xd30 [ 70.006343][ T5315] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.008525][ T5315] __se_sys_pwritev2+0x1ca/0x2d0 [ 70.010758][ T5315] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 70.012809][ T5315] ? do_syscall_64+0x100/0x230 [ 70.014588][ T5315] ? __x64_sys_pwritev2+0x21/0xf0 [ 70.016478][ T5315] do_syscall_64+0xf3/0x230 [ 70.018196][ T5315] ? clear_bhb_loop+0x35/0x90 [ 70.019943][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.022279][ T5315] RIP: 0033:0x7f52a2607cd9 [ 70.024835][ T5315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.031978][ T5315] RSP: 002b:00007ffc4c848278 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 70.035187][ T5315] RAX: ffffffffffffffda RBX: 00007ffc4c8482b0 RCX: 00007f52a2607cd9 [ 70.038181][ T5315] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 70.041181][ T5315] RBP: 0000000000000001 R08: 0000000000000009 R09: 0000000000000008 [ 70.044214][ T5315] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 70.047230][ T5315] R13: 0000000000000000 R14: 431bde82d7b634db R15: 00007ffc4c8482f0 [ 70.050267][ T5315] [ 70.064578][ T5315] BTRFS error (device loop0): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 70.069613][ T5315] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 70.073016][ T5315] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2215: errno=-12 Out of memory [ 70.077697][ T5315] BTRFS info (device loop0 state EA): forced readonly [ 70.095991][ T5314] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.101997][ T5314] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 70.105590][ T5314] BTRFS error (device loop0 state EA): qgroup reserved space leaked executing program [ 70.420452][ T5334] loop0: detected capacity change from 0 to 32768 [ 70.442525][ T5334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor405 (5334) [ 70.467978][ T5334] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.476619][ T5334] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 70.479700][ T5334] BTRFS info (device loop0): using free-space-tree [ 70.527345][ T41] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 70.538810][ T5334] FAULT_INJECTION: forcing a failure. [ 70.538810][ T5334] name failslab, interval 1, probability 0, space 0, times 0 [ 70.554119][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz-executor405 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 70.558418][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.562537][ T5334] Call Trace: [ 70.563847][ T5334] [ 70.565021][ T5334] dump_stack_lvl+0x241/0x360 [ 70.566924][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.568956][ T5334] ? __pfx__printk+0x10/0x10 [ 70.570728][ T5334] ? fs_reclaim_acquire+0x93/0x130 [ 70.572599][ T5334] ? __pfx___might_resched+0x10/0x10 [ 70.574684][ T5334] should_fail_ex+0x3b0/0x4e0 [ 70.576659][ T5334] ? __btrfs_free_extent+0x35e/0x3a10 [ 70.578737][ T5334] should_failslab+0xac/0x100 [ 70.580472][ T5334] ? __btrfs_free_extent+0x35e/0x3a10 [ 70.582450][ T5334] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 70.584498][ T5334] __btrfs_free_extent+0x35e/0x3a10 [ 70.586490][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.588407][ T5334] ? __pfx___btrfs_free_extent+0x10/0x10 [ 70.590498][ T5334] ? __lock_acquire+0x1fc0/0x2050 [ 70.592431][ T5334] ? do_raw_read_unlock+0x3c/0x80 [ 70.594307][ T5334] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.596302][ T5334] __btrfs_run_delayed_refs+0x112e/0x4680 [ 70.598441][ T5334] ? validate_chain+0x11e/0x5920 [ 70.600378][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.602460][ T5334] ? __pfx_validate_chain+0x10/0x10 [ 70.604407][ T5334] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 70.606746][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.608580][ T5334] ? __lock_acquire+0x1384/0x2050 [ 70.610452][ T5334] btrfs_run_delayed_refs+0xe3/0x2c0 [ 70.612406][ T5334] btrfs_commit_transaction+0x4be/0x3740 [ 70.614303][ T5334] ? btrfs_commit_transaction+0x17f/0x3740 [ 70.616324][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.618029][ T5334] ? __asan_memset+0x23/0x50 [ 70.619686][ T5334] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 70.621852][ T5334] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 70.623948][ T5334] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.625903][ T5334] ? join_transaction+0x405/0xd70 [ 70.627774][ T5334] ? btrfs_record_root_in_trans+0x12d/0x190 [ 70.630107][ T5334] ? start_transaction+0x455/0x1670 [ 70.632101][ T5334] try_flush_qgroup+0x1ec/0x340 [ 70.633926][ T5334] ? kfree+0x1a0/0x440 [ 70.635585][ T5334] ? __pfx_try_flush_qgroup+0x10/0x10 [ 70.637609][ T5334] ? qgroup_reserve_data+0x6ab/0x8d0 [ 70.639645][ T5334] btrfs_qgroup_reserve_data+0x68/0xb0 [ 70.641720][ T5334] btrfs_check_data_free_space+0x149/0x240 [ 70.643873][ T5334] btrfs_buffered_write+0x5c7/0x1360 [ 70.645909][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.647882][ T5334] ? aa_file_perm+0x137/0xf50 [ 70.649666][ T5334] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 70.651711][ T5334] ? __lock_acquire+0x1384/0x2050 [ 70.653681][ T5334] btrfs_do_write_iter+0x279/0x760 [ 70.655673][ T5334] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 70.657764][ T5334] do_iter_readv_writev+0x600/0x880 [ 70.659645][ T5334] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 70.661810][ T5334] ? rcu_read_lock_any_held+0xb7/0x160 [ 70.663882][ T5334] vfs_writev+0x376/0xba0 [ 70.665485][ T5334] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 70.667767][ T5334] ? sb_end_write+0xe9/0x1c0 [ 70.669600][ T5334] ? __pfx_vfs_writev+0x10/0x10 [ 70.671434][ T5334] ? vfs_write+0x730/0xd30 [ 70.673230][ T5334] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.675303][ T5334] __se_sys_pwritev2+0x1ca/0x2d0 [ 70.677312][ T5334] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 70.679490][ T5334] ? do_syscall_64+0x100/0x230 [ 70.681383][ T5334] ? __x64_sys_pwritev2+0x21/0xf0 [ 70.683419][ T5334] do_syscall_64+0xf3/0x230 [ 70.685266][ T5334] ? clear_bhb_loop+0x35/0x90 [ 70.687152][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.689895][ T5334] RIP: 0033:0x7f52a2607cd9 [ 70.691684][ T5334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.699040][ T5334] RSP: 002b:00007ffc4c848278 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 70.702215][ T5334] RAX: ffffffffffffffda RBX: 00007ffc4c8482b0 RCX: 00007f52a2607cd9 [ 70.705300][ T5334] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 70.708334][ T5334] RBP: 0000000000000001 R08: 0000000000000009 R09: 0000000000000008 [ 70.711257][ T5334] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc4c8482ac [ 70.714435][ T5334] R13: 0000000000000001 R14: 431bde82d7b634db R15: 00007ffc4c8482f0 [ 70.717373][ T5334] [ 70.758666][ T5334] BTRFS error (device loop0): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 70.763236][ T5334] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 70.768137][ T5334] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2215: errno=-12 Out of memory [ 70.771788][ T5334] BTRFS info (device loop0 state EA): forced readonly [ 70.775188][ T5334] BUG: MAX_LOCK_DEPTH too low! [ 70.777061][ T5334] turning off the locking correctness validator. [ 70.780270][ T5334] depth: 48 max: 48! [ 70.781712][ T5334] 48 locks held by syz-executor405/5334: [ 70.783643][ T5334] #0: ffff8880408d8420 (sb_writers#10){.+.+}-{0:0}, at: vfs_writev+0x2d1/0xba0 [ 70.786674][ T5334] #1: ffff888046a03030 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: btrfs_inode_lock+0x87/0xe0 [ 70.790621][ T5334] #2: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.794430][ T5334] #3: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.798341][ T5334] #4: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.802356][ T5334] #5: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.806359][ T5334] #6: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.810531][ T5334] #7: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.814831][ T5334] #8: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.818739][ T5334] #9: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.822342][ T5334] #10: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.826112][ T5334] #11: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.829940][ T5334] #12: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.833887][ T5334] #13: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.837907][ T5334] #14: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.841669][ T5334] #15: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.845535][ T5334] #16: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.849347][ T5334] #17: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.853116][ T5334] #18: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.857016][ T5334] #19: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.860780][ T5334] #20: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.864534][ T5334] #21: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.868382][ T5334] #22: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.872181][ T5334] #23: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.875901][ T5334] #24: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.879386][ T5334] #25: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.882824][ T5334] #26: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.886189][ T5334] #27: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.889253][ T5334] #28: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.892725][ T5334] #29: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.896600][ T5334] #30: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.900612][ T5334] #31: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.904410][ T5334] #32: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.908052][ T5334] #33: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.911652][ T5334] #34: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.915528][ T5334] #35: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.919432][ T5334] #36: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.923175][ T5334] #37: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.927007][ T5334] #38: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.930596][ T5334] #39: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.934239][ T5334] #40: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.938057][ T5334] #41: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.941656][ T5334] #42: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.945359][ T5334] #43: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.948906][ T5334] #44: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.952323][ T5334] #45: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.955788][ T5334] #46: ffff88804313aa58 (btrfs-tree-01){++++}-{3:3}, at: btrfs_try_tree_read_lock+0x1c/0x240 [ 70.959263][ T5334] #47: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: find_extent_buffer_nolock+0x21/0x320 [ 70.962876][ T5334] INFO: lockdep is turned off. [ 70.964697][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz-executor405 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 70.968641][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.972484][ T5334] Call Trace: [ 70.973747][ T5334] [ 70.974872][ T5334] dump_stack_lvl+0x241/0x360 [ 70.976632][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.978625][ T5334] ? __pfx__printk+0x10/0x10 [ 70.980338][ T5334] __lock_acquire+0x10ee/0x2050 [ 70.982199][ T5334] lock_acquire+0x1ed/0x550 [ 70.983905][ T5334] ? find_extent_buffer_nolock+0x21/0x320 [ 70.986040][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 70.987972][ T5334] ? get_eb_offset_in_folio+0xd5/0x220 [ 70.990026][ T5334] ? btrfs_get_64+0x2ad/0x500 [ 70.991832][ T5334] ? find_extent_buffer_nolock+0x21/0x320 [ 70.993752][ T5334] find_extent_buffer_nolock+0x3e/0x320 [ 70.995860][ T5334] ? find_extent_buffer_nolock+0x21/0x320 [ 70.998029][ T5334] find_extent_buffer+0x24/0x340 [ 70.999996][ T5334] read_block_for_search+0x348/0x920 [ 71.001976][ T5334] ? __pfx_read_block_for_search+0x10/0x10 [ 71.003943][ T5334] ? btrfs_try_tree_read_lock+0xb0/0x240 [ 71.006028][ T5334] btrfs_search_slot+0x120d/0x30d0 [ 71.008084][ T5334] ? do_syscall_64+0xf3/0x230 [ 71.009874][ T5334] ? __pfx_btrfs_search_slot+0x10/0x10 [ 71.011937][ T5334] btrfs_lookup_file_extent+0x14c/0x210 [ 71.014049][ T5334] ? __pfx_btrfs_lookup_file_extent+0x10/0x10 [ 71.016694][ T5334] ? can_nocow_extent+0x144/0x940 [ 71.018554][ T5334] ? rcu_is_watching+0x15/0xb0 [ 71.020405][ T5334] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 71.022363][ T5334] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 71.024461][ T5334] can_nocow_extent+0x1c5/0x940 [ 71.026391][ T5334] ? __pfx_can_nocow_extent+0x10/0x10 [ 71.028365][ T5334] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.030244][ T5334] btrfs_check_nocow_lock+0x274/0x400 [ 71.032154][ T5334] ? __pfx_btrfs_check_nocow_lock+0x10/0x10 [ 71.034214][ T5334] ? btrfs_check_data_free_space+0x1e6/0x240 [ 71.036205][ T5334] btrfs_buffered_write+0x63f/0x1360 [ 71.038058][ T5334] ? __pfx_lock_acquire+0x10/0x10 [ 71.039760][ T5334] ? aa_file_perm+0x137/0xf50 [ 71.041297][ T5334] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 71.043291][ T5334] ? __lock_acquire+0x1384/0x2050 [ 71.045013][ T5334] btrfs_do_write_iter+0x279/0x760 [ 71.046694][ T5334] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 71.048642][ T5334] do_iter_readv_writev+0x600/0x880 [ 71.050528][ T5334] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 71.052699][ T5334] ? rcu_read_lock_any_held+0xb7/0x160 [ 71.054738][ T5334] vfs_writev+0x376/0xba0 [ 71.056322][ T5334] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 71.058466][ T5334] ? sb_end_write+0xe9/0x1c0 [ 71.060074][ T5334] ? __pfx_vfs_writev+0x10/0x10 [ 71.061875][ T5334] ? vfs_write+0x730/0xd30 [ 71.063524][ T5334] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.065472][ T5334] __se_sys_pwritev2+0x1ca/0x2d0 [ 71.067295][ T5334] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 71.069346][ T5334] ? do_syscall_64+0x100/0x230 [ 71.071201][ T5334] ? __x64_sys_pwritev2+0x21/0xf0 [ 71.073084][ T5334] do_syscall_64+0xf3/0x230 [ 71.074906][ T5334] ? clear_bhb_loop+0x35/0x90 [ 71.076722][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.078953][ T5334] RIP: 0033:0x7f52a2607cd9 [ 71.080702][ T5334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.087899][ T5334] RSP: 002b:00007ffc4c848278 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 71.091001][ T5334] RAX: ffffffffffffffda RBX: 00007ffc4c8482b0 RCX: 00007f52a2607cd9 [ 71.093945][ T5334] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 71.096865][ T5334] RBP: 0000000000000001 R08: 0000000000000009 R09: 0000000000000008 [ 71.099852][ T5334] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc4c8482ac [ 71.102852][ T5334] R13: 0000000000000001 R14: 431bde82d7b634db R15: 00007ffc4c8482f0 [ 71.105940][ T5334] VM DIAGNOSIS: 09:44:27 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff34e3360 RBX=ffffffff9a719ec0 RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000cefe6f8 R8 =ffffffff854ae416 R9 =1ffff11003d92046 R10=dffffc0000000000 R11=ffffffff854ae3d0 R12=dffffc0000000000 R13=ffffffff9a414f00 R14=00000000000003fd R15=dffffc0000000000 RIP=ffffffff854ae446 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ed9c380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005636a5a56a38 CR3=0000000043166000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c848290 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000