./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1649437076
<...>
Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts.
execve("./syz-executor1649437076", ["./syz-executor1649437076"], 0x7ffffc7006f0 /* 10 vars */) = 0
brk(NULL) = 0x555556b97000
brk(0x555556b97c40) = 0x555556b97c40
arch_prctl(ARCH_SET_FS, 0x555556b97300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1649437076", 4096) = 28
brk(0x555556bb8c40) = 0x555556bb8c40
brk(0x555556bb9000) = 0x555556bb9000
mprotect(0x7f60075e9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5fff12b000
syzkaller login: [ 52.947195][ T5073] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5073 'syz-executor164'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f5fff12b000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 53.098295][ T5073] loop0: detected capacity change from 0 to 32768
[ 53.111560][ T5073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor164 (5073)
[ 53.130033][ T5073] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 53.139265][ T5073] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
creat("./bus", 000) = 4
[ 53.159515][ T5073] BTRFS info (device loop0): enabling ssd optimizations
[ 53.166553][ T5073] BTRFS info (device loop0): auto enabling async discard
open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 5
openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
ioctl(6, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
fallocate(4, 0, 0, 2622468) = 0
[ 53.196647][ T27] audit: type=1800 audit(1673283707.073:2): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor164" name="bus" dev="loop0" ino=263 res=0 errno=0
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7
write(7, "4", 1) = 1
[ 53.277743][ T5073] FAULT_INJECTION: forcing a failure.
[ 53.277743][ T5073] name failslab, interval 1, probability 0, space 0, times 1
[ 53.290719][ T5073] CPU: 1 PID: 5073 Comm: syz-executor164 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0
[ 53.300638][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 53.310823][ T5073] Call Trace:
[ 53.314130][ T5073]
[ 53.317077][ T5073] dump_stack_lvl+0xd1/0x138
[ 53.321719][ T5073] should_fail_ex.cold+0x5/0xa
[ 53.326534][ T5073] should_failslab+0x9/0x20
[ 53.331078][ T5073] __kmem_cache_alloc_node+0x5b/0x330
[ 53.336483][ T5073] ? ulist_add_merge.part.0+0x85/0x490
[ 53.341985][ T5073] kmalloc_trace+0x26/0x60
[ 53.346448][ T5073] ulist_add_merge.part.0+0x85/0x490
[ 53.351768][ T5073] ? rcu_read_lock_sched_held+0x3e/0x70
[ 53.357339][ T5073] ulist_add+0x106/0x160
[ 53.361580][ T5073] set_state_bits.isra.0+0x11f/0x1c0
[ 53.366878][ T5073] __set_extent_bit+0x420/0x1670
[ 53.367443][ T2838] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 53.371863][ T5073] set_record_extent_bits+0x60/0x70
[ 53.386138][ T5073] qgroup_reserve_data+0x239/0xbe0
[ 53.391258][ T5073] ? fault_in_readable+0x1c0/0x290
[ 53.396415][ T5073] btrfs_qgroup_reserve_data+0x2f/0xd0
[ 53.401869][ T5073] btrfs_check_data_free_space+0x111/0x280
[ 53.408454][ T5073] btrfs_buffered_write+0x519/0x1380
[ 53.413737][ T5073] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 53.419629][ T5073] ? lockdep_hardirqs_on+0x7d/0x100
[ 53.424824][ T5073] ? btrfs_check_nocow_lock+0x3c0/0x3c0
[ 53.430388][ T5073] ? __up_read+0x192/0x720
[ 53.434800][ T5073] ? up_write+0x520/0x520
[ 53.439132][ T5073] btrfs_do_write_iter+0xef0/0x1470
[ 53.444332][ T5073] ? btrfs_fdatawrite_range+0x110/0x110
[ 53.449878][ T5073] vfs_write+0x9ed/0xe10
[ 53.454129][ T5073] ? kernel_write+0x670/0x670
[ 53.458817][ T5073] ? find_held_lock+0x2d/0x110
[ 53.463580][ T5073] ? lock_downgrade+0x6e0/0x6e0
[ 53.468422][ T5073] ? __fget_light+0x20a/0x270
[ 53.473090][ T5073] ksys_write+0x12b/0x250
[ 53.477415][ T5073] ? __ia32_sys_read+0xb0/0xb0
[ 53.482168][ T5073] ? lockdep_hardirqs_on+0x7d/0x100
[ 53.487387][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50
[ 53.492590][ T5073] ? ptrace_notify+0xfe/0x140
[ 53.497259][ T5073] do_syscall_64+0x39/0xb0
[ 53.501672][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.507555][ T5073] RIP: 0033:0x7f6007577d09
[ 53.511957][ T5073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.531561][ T5073] RSP: 002b:00007ffc83b9a7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 53.539963][ T5073] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f6007577d09
[ 53.547924][ T5073] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 53.555886][ T5073] RBP: 00007ffc83b9a7b0 R08: 0000000000000001 R09: 00007f6007530034
[ 53.563845][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 53.571806][ T5073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.579776][ T5073]
[ 53.583767][ T5073] ------------[ cut here ]------------
[ 53.589332][ T5073] kernel BUG at fs/btrfs/extent-io-tree.c:379!
[ 53.595573][ T5073] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 53.601645][ T5073] CPU: 1 PID: 5073 Comm: syz-executor164 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0
[ 53.611530][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 53.621678][ T5073] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0
[ 53.627750][ T5073] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 7e e8 fa fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 65 e8 fa fd <0f> 0b 4c 89 ef e8 3b cf 48 fe e9 e6 fe ff ff 4c 89 ef e8 2e cf 48
[ 53.647364][ T5073] RSP: 0018:ffffc90003ccf850 EFLAGS: 00010293
[ 53.653431][ T5073] RAX: 0000000000000000 RBX: ffff8880793fa480 RCX: 0000000000000000
[ 53.661398][ T5073] RDX: ffff8880238bd7c0 RSI: ffffffff8386c4eb RDI: 0000000000000005
[ 53.669363][ T5073] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[ 53.677331][ T5073] R10: 00000000fffffff4 R11: 0000000000000000 R12: 0000000000000800
[ 53.685295][ T5073] R13: ffff8880793fa4fc R14: 0000000000000fff R15: 0000000000000000
[ 53.693269][ T5073] FS: 0000555556b97300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 53.702202][ T5073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.708783][ T5073] CR2: 00007ffffc6febb0 CR3: 000000002a4f7000 CR4: 00000000003506e0
[ 53.716753][ T5073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.724718][ T5073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.732689][ T5073] Call Trace:
[ 53.735962][ T5073]
[ 53.738930][ T5073] __set_extent_bit+0x420/0x1670
[ 53.743876][ T5073] set_record_extent_bits+0x60/0x70
[ 53.749075][ T5073] qgroup_reserve_data+0x239/0xbe0
[ 53.754187][ T5073] ? fault_in_readable+0x1c0/0x290
[ 53.759307][ T5073] btrfs_qgroup_reserve_data+0x2f/0xd0
[ 53.764770][ T5073] btrfs_check_data_free_space+0x111/0x280
[ 53.770582][ T5073] btrfs_buffered_write+0x519/0x1380
[ 53.775875][ T5073] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 53.781780][ T5073] ? lockdep_hardirqs_on+0x7d/0x100
[ 53.786984][ T5073] ? btrfs_check_nocow_lock+0x3c0/0x3c0
[ 53.792536][ T5073] ? __up_read+0x192/0x720
[ 53.796959][ T5073] ? up_write+0x520/0x520
[ 53.801314][ T5073] btrfs_do_write_iter+0xef0/0x1470
[ 53.806523][ T5073] ? btrfs_fdatawrite_range+0x110/0x110
[ 53.812078][ T5073] vfs_write+0x9ed/0xe10
[ 53.816328][ T5073] ? kernel_write+0x670/0x670
[ 53.821006][ T5073] ? find_held_lock+0x2d/0x110
[ 53.825777][ T5073] ? lock_downgrade+0x6e0/0x6e0
[ 53.830626][ T5073] ? __fget_light+0x20a/0x270
[ 53.835309][ T5073] ksys_write+0x12b/0x250
[ 53.839656][ T5073] ? __ia32_sys_read+0xb0/0xb0
[ 53.844420][ T5073] ? lockdep_hardirqs_on+0x7d/0x100
[ 53.849636][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50
[ 53.854852][ T5073] ? ptrace_notify+0xfe/0x140
[ 53.859541][ T5073] do_syscall_64+0x39/0xb0
[ 53.863974][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.869928][ T5073] RIP: 0033:0x7f6007577d09
[ 53.874340][ T5073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.893949][ T5073] RSP: 002b:00007ffc83b9a7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 53.902360][ T5073] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f6007577d09
[ 53.910325][ T5073] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 53.918293][ T5073] RBP: 00007ffc83b9a7b0 R08: 0000000000000001 R09: 00007f6007530034
[ 53.926259][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 53.934225][ T5073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.942199][ T5073]
[ 53.945211][ T5073] Modules linked in:
[ 53.949251][ T5073] ---[ end trace 0000000000000000 ]---
[ 53.954732][ T5073] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0
[ 53.960800][ T5073] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 7e e8 fa fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 65 e8 fa fd <0f> 0b 4c 89 ef e8 3b cf 48 fe e9 e6 fe ff ff 4c 89 ef e8 2e cf 48
[ 53.980442][ T5073] RSP: 0018:ffffc90003ccf850 EFLAGS: 00010293
[ 53.986532][ T5073] RAX: 0000000000000000 RBX: ffff8880793fa480 RCX: 0000000000000000
[ 53.994522][ T5073] RDX: ffff8880238bd7c0 RSI: ffffffff8386c4eb RDI: 0000000000000005
[ 54.002494][ T5073] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[ 54.010506][ T5073] R10: 00000000fffffff4 R11: 0000000000000000 R12: 0000000000000800
[ 54.018500][ T5073] R13: ffff8880793fa4fc R14: 0000000000000fff R15: 0000000000000000
[ 54.026484][ T5073] FS: 0000555556b97300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 54.035444][ T5073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.042015][ T5073] CR2: 00007ffffc6febb0 CR3: 000000002a4f7000 CR4: 00000000003506e0
[ 54.050000][ T5073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.058000][ T5073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.065998][ T5073] Kernel panic - not syncing: Fatal exception
[ 54.072208][ T5073] Kernel Offset: disabled
[ 54.076527][ T5073] Rebooting in 86400 seconds..