./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor590805407
<...>
Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts.
execve("./syz-executor590805407", ["./syz-executor590805407"], 0x7ffcee338130 /* 10 vars */) = 0
brk(NULL) = 0x555555845000
brk(0x555555845c40) = 0x555555845c40
arch_prctl(ARCH_SET_FS, 0x555555845300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor590805407", 4096) = 27
brk(0x555555866c40) = 0x555555866c40
brk(0x555555867000) = 0x555555867000
mprotect(0x7f0306428000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
getpid() = 5003
mkdir("./syzkaller.SinMsu", 0700) = 0
chmod("./syzkaller.SinMsu", 0777) = 0
chdir("./syzkaller.SinMsu") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558455d0) = 5004
./strace-static-x86_64: Process 5004 attached
[pid 5004] chdir("./0") = 0
[pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5004] setpgid(0, 0) = 0
[pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5004] write(3, "1000", 4) = 4
[pid 5004] close(3) = 0
[pid 5004] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5004] memfd_create("syzkaller", 0) = 3
[pid 5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f02fdf67000
[ 57.139162][ T5004] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5004 'syz-executor590'
[pid 5004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5004] munmap(0x7f02fdf67000, 16777216) = 0
[pid 5004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5004] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5004] close(3) = 0
[pid 5004] mkdir("./bus", 0777) = 0
[ 57.317778][ T5004] loop0: detected capacity change from 0 to 32768
[ 57.329935][ T5004] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor590 (5004)
[ 57.350213][ T5004] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 57.359412][ T5004] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 57.370601][ T5004] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 57.381469][ T5004] BTRFS warning (device loop0): excessive commit interval 622039222
[ 57.389626][ T5004] BTRFS info (device loop0): force zlib compression, level 3
[ 57.397075][ T5004] BTRFS info (device loop0): using free space tree
[pid 5004] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "user_subvol_rm_allowed,noinode_cache,inode_cache,commit=0x00000000251390b6,compress-force,noacl,tree"...) = 0
[pid 5004] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5004] chdir("./bus") = 0
[pid 5004] ioctl(4, LOOP_CLR_FD) = 0
[pid 5004] close(4) = 0
[pid 5004] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[ 57.419485][ T5004] BTRFS info (device loop0): enabling ssd optimizations
[ 57.427072][ T5004] BTRFS info (device loop0): auto enabling async discard
[pid 5004] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5004] write(5, "5", 1) = 1
[ 57.460057][ T27] audit: type=1800 audit(1684789314.947:2): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor590" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 57.738780][ T5004] FAULT_INJECTION: forcing a failure.
[ 57.738780][ T5004] name failslab, interval 1, probability 0, space 0, times 1
[ 57.751978][ T5004] CPU: 0 PID: 5004 Comm: syz-executor590 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 57.761961][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 57.772014][ T5004] Call Trace:
[ 57.775287][ T5004]
[ 57.778211][ T5004] dump_stack_lvl+0x136/0x150
[ 57.782915][ T5004] should_fail_ex+0x4a3/0x5b0
[ 57.787613][ T5004] should_failslab+0x9/0x20
[ 57.792114][ T5004] kmem_cache_alloc+0x63/0x3b0
[ 57.796969][ T5004] alloc_extent_state+0x23/0x2e0
[ 57.801927][ T5004] __set_extent_bit+0x5ab/0x15f0
[ 57.806870][ T5004] set_extent_bit+0x41/0x50
[ 57.811394][ T5004] btrfs_alloc_tree_block+0xb50/0x1480
[ 57.816860][ T5004] ? btrfs_alloc_logged_file_extent+0x600/0x600
[ 57.823108][ T5004] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 57.829093][ T5004] __btrfs_cow_block+0x3b2/0x1690
[ 57.834127][ T5004] ? update_ref_for_cow+0xaa0/0xaa0
[ 57.839319][ T5004] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980
[ 57.845651][ T5004] ? down_write_nested+0x153/0x200
[ 57.850758][ T5004] ? down_read_killable_nested+0x4f0/0x4f0
[ 57.856563][ T5004] btrfs_cow_block+0x2fa/0x820
[ 57.861327][ T5004] btrfs_search_slot+0x11c6/0x2da0
[ 57.866448][ T5004] ? balance_level+0x1f20/0x1f20
[ 57.871427][ T5004] ? btrfs_global_root+0xf5/0x120
[ 57.876452][ T5004] ? btrfs_extent_root+0x13f/0x1a0
[ 57.881573][ T5004] ? btrfs_csum_root+0x1a0/0x1a0
[ 57.886510][ T5004] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 57.892491][ T5004] ? find_held_lock+0x2d/0x110
[ 57.897341][ T5004] lookup_inline_extent_backref+0x311/0x1210
[ 57.903422][ T5004] ? hash_extent_data_ref+0xf0/0xf0
[ 57.908625][ T5004] ? fs_reclaim_acquire+0xba/0x160
[ 57.913734][ T5004] lookup_extent_backref+0x46/0x110
[ 57.918953][ T5004] __btrfs_free_extent+0x234/0x2d40
[ 57.924156][ T5004] ? lookup_extent_backref+0x110/0x110
[ 57.929626][ T5004] ? __btrfs_run_delayed_refs+0x539/0x3770
[ 57.935425][ T5004] ? lock_downgrade+0x690/0x690
[ 57.940293][ T5004] ? _raw_read_unlock+0x28/0x40
[ 57.945138][ T5004] ? btrfs_tree_mod_log_lowest_seq+0x86/0xb0
[ 57.951112][ T5004] ? btrfs_merge_delayed_refs+0x41e/0x560
[ 57.956840][ T5004] __btrfs_run_delayed_refs+0x151d/0x3770
[ 57.962590][ T5004] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.967790][ T5004] ? check_ref_cleanup+0x3e0/0x3e0
[ 57.973004][ T5004] ? lock_acquire.part.0+0x156/0x370
[ 57.978309][ T5004] ? lock_sync+0x190/0x190
[ 57.982726][ T5004] ? rcu_is_watching+0x12/0xb0
[ 57.987482][ T5004] btrfs_run_delayed_refs+0x19a/0x540
[ 57.992857][ T5004] ? btrfs_commit_transaction+0x136/0x3f90
[ 57.998716][ T5004] btrfs_commit_transaction+0x80d/0x3f90
[ 58.004445][ T5004] ? join_transaction+0x3e0/0x1050
[ 58.009551][ T5004] ? lock_acquire+0x32/0xc0
[ 58.014051][ T5004] ? join_transaction+0x3e0/0x1050
[ 58.019167][ T5004] ? create_pending_snapshots+0x2c0/0x2c0
[ 58.024883][ T5004] ? start_transaction+0x2aa/0x14c0
[ 58.030083][ T5004] btrfs_sync_fs+0x132/0x730
[ 58.034665][ T5004] ? __bpf_trace_btrfs__reserve_extent+0xf0/0xf0
[ 58.040991][ T5004] sync_fs_one_sb+0x10b/0x150
[ 58.045665][ T5004] iterate_supers+0x140/0x2a0
[ 58.050339][ T5004] ? vfs_fsync_range+0x230/0x230
[ 58.055268][ T5004] ksys_sync+0xac/0x150
[ 58.059419][ T5004] ? vfs_fsync+0x1f0/0x1f0
[ 58.063834][ T5004] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.069029][ T5004] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.074229][ T5004] ? ptrace_notify+0xfe/0x140
[ 58.078990][ T5004] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 58.085223][ T5004] __do_sys_sync+0xe/0x20
[ 58.089549][ T5004] do_syscall_64+0x39/0xb0
[ 58.093967][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.099857][ T5004] RIP: 0033:0x7f03063b49d9
[ 58.104263][ T5004] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.123953][ T5004] RSP: 002b:00007fff3a60c998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 58.132360][ T5004] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f03063b49d9
[pid 5004] sync() = 0
[pid 5004] exit_group(0) = ?
[pid 5004] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555846620 /* 4 entries */, 32768) = 104
[ 58.140322][ T5004] RDX: 00000000000009c0 RSI: 000000000000ffc2 RDI: 00007fff3a60c9c0
[ 58.148287][ T5004] RBP: 00007fff3a60c9c0 R08: 0000000000000001 R09: 00007fff3a60c9d0
[ 58.156262][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 58.164222][ T5004] R13: 00007fff3a60ca00 R14: 00007fff3a60c9e0 R15: 0000000000000000
[ 58.172199][ T5004]
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555584e660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555584e660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/bus") = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
getdents64(3, 0x555555846620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558455d0) = 5031
./strace-static-x86_64: Process 5031 attached
[pid 5031] chdir("./1") = 0
[pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5031] setpgid(0, 0) = 0
[pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5031] write(3, "1000", 4) = 4
[pid 5031] close(3) = 0
[pid 5031] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5031] memfd_create("syzkaller", 0) = 3
[pid 5031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f02fdf67000
[pid 5031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5031] munmap(0x7f02fdf67000, 16777216) = 0
[pid 5031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5031] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5031] close(3) = 0
[pid 5031] mkdir("./bus", 0777) = 0
[ 58.523511][ T5031] loop0: detected capacity change from 0 to 32768
[ 58.533941][ T5031] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor590 (5031)
[ 58.549675][ T5031] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 58.558952][ T5031] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 58.569977][ T5031] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 58.581075][ T5031] BTRFS warning (device loop0): excessive commit interval 622039222
[ 58.589592][ T5031] BTRFS info (device loop0): force zlib compression, level 3
[ 58.597114][ T5031] BTRFS info (device loop0): using free space tree
[ 58.614836][ T5031] BTRFS info (device loop0): enabling ssd optimizations
[pid 5031] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "user_subvol_rm_allowed,noinode_cache,inode_cache,commit=0x00000000251390b6,compress-force,noacl,tree"...) = 0
[pid 5031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5031] chdir("./bus") = 0
[pid 5031] ioctl(4, LOOP_CLR_FD) = 0
[pid 5031] close(4) = 0
[pid 5031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 5031] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5031] write(5, "5", 1) = 1
[ 58.621869][ T5031] BTRFS info (device loop0): auto enabling async discard
[ 58.637861][ T27] audit: type=1800 audit(1684789316.127:3): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor590" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 58.663029][ T5031] FAULT_INJECTION: forcing a failure.
[ 58.663029][ T5031] name failslab, interval 1, probability 0, space 0, times 0
[ 58.676374][ T5031] CPU: 0 PID: 5031 Comm: syz-executor590 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 58.686315][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 58.696399][ T5031] Call Trace:
[ 58.699705][ T5031]
[ 58.702666][ T5031] dump_stack_lvl+0x136/0x150
[ 58.707393][ T5031] should_fail_ex+0x4a3/0x5b0
[ 58.712119][ T5031] should_failslab+0x9/0x20
[ 58.716660][ T5031] kmem_cache_alloc+0x63/0x3b0
[ 58.721482][ T5031] btrfs_alloc_tree_block+0xbbb/0x1480
[ 58.727018][ T5031] ? btrfs_alloc_logged_file_extent+0x600/0x600
[ 58.733326][ T5031] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 58.739354][ T5031] __btrfs_cow_block+0x3b2/0x1690
[ 58.744410][ T5031] ? update_ref_for_cow+0xaa0/0xaa0
[ 58.749636][ T5031] ? btrfs_qgroup_add_swapped_blocks+0x980/0x980
[ 58.756016][ T5031] ? down_write_nested+0x153/0x200
[ 58.761143][ T5031] ? down_read_killable_nested+0x4f0/0x4f0
[ 58.766973][ T5031] btrfs_cow_block+0x2fa/0x820
[ 58.771758][ T5031] btrfs_search_slot+0x11c6/0x2da0
[ 58.776905][ T5031] ? balance_level+0x1f20/0x1f20
[ 58.781851][ T5031] ? btrfs_global_root+0xf5/0x120
[ 58.786886][ T5031] ? btrfs_extent_root+0x13f/0x1a0
[ 58.792004][ T5031] ? btrfs_csum_root+0x1a0/0x1a0
[ 58.796950][ T5031] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 58.802955][ T5031] ? find_held_lock+0x2d/0x110
[ 58.807741][ T5031] lookup_inline_extent_backref+0x311/0x1210
[ 58.813751][ T5031] ? hash_extent_data_ref+0xf0/0xf0
[ 58.818968][ T5031] ? fs_reclaim_acquire+0xba/0x160
[ 58.824100][ T5031] lookup_extent_backref+0x46/0x110
[ 58.829321][ T5031] __btrfs_free_extent+0x234/0x2d40
[ 58.834552][ T5031] ? lookup_extent_backref+0x110/0x110
[ 58.840036][ T5031] ? __btrfs_run_delayed_refs+0x539/0x3770
[ 58.845860][ T5031] ? lock_downgrade+0x690/0x690
[ 58.850727][ T5031] ? _raw_read_unlock+0x28/0x40
[ 58.855621][ T5031] ? btrfs_tree_mod_log_lowest_seq+0x86/0xb0
[ 58.861619][ T5031] ? btrfs_merge_delayed_refs+0x41e/0x560
[ 58.867363][ T5031] __btrfs_run_delayed_refs+0x151d/0x3770
[ 58.873116][ T5031] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 58.879128][ T5031] ? check_ref_cleanup+0x3e0/0x3e0
[ 58.884273][ T5031] ? do_syscall_64+0x39/0xb0
[ 58.888934][ T5031] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.895037][ T5031] ? lock_sync+0x190/0x190
[ 58.899471][ T5031] ? rcu_is_watching+0x12/0xb0
[ 58.904273][ T5031] btrfs_run_delayed_refs+0x19a/0x540
[ 58.909684][ T5031] ? btrfs_commit_transaction+0x136/0x3f90
[ 58.915508][ T5031] btrfs_commit_transaction+0x80d/0x3f90
[ 58.921159][ T5031] ? join_transaction+0x3e0/0x1050
[ 58.926282][ T5031] ? lock_acquire+0x32/0xc0
[ 58.930798][ T5031] ? join_transaction+0x3e0/0x1050
[ 58.936021][ T5031] ? create_pending_snapshots+0x2c0/0x2c0
[ 58.941756][ T5031] ? start_transaction+0x2aa/0x14c0
[ 58.946978][ T5031] btrfs_sync_fs+0x132/0x730
[ 58.951584][ T5031] ? __bpf_trace_btrfs__reserve_extent+0xf0/0xf0
[ 58.957928][ T5031] sync_fs_one_sb+0x10b/0x150
[ 58.962618][ T5031] iterate_supers+0x140/0x2a0
[ 58.967308][ T5031] ? vfs_fsync_range+0x230/0x230
[ 58.972262][ T5031] ksys_sync+0xac/0x150
[ 58.976428][ T5031] ? vfs_fsync+0x1f0/0x1f0
[ 58.980856][ T5031] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.986151][ T5031] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.991381][ T5031] ? ptrace_notify+0xfe/0x140
[ 58.996076][ T5031] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 59.002325][ T5031] __do_sys_sync+0xe/0x20
[ 59.006676][ T5031] do_syscall_64+0x39/0xb0
[ 59.011109][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.017020][ T5031] RIP: 0033:0x7f03063b49d9
[ 59.021444][ T5031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.041318][ T5031] RSP: 002b:00007fff3a60c998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 59.049740][ T5031] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f03063b49d9
[ 59.057719][ T5031] RDX: 00000000000009c0 RSI: 000000000000ffc2 RDI: 00007fff3a60c9c0
[ 59.065693][ T5031] RBP: 00007fff3a60c9c0 R08: 0000000000000001 R09: 00007fff3a60c9d0
[ 59.073753][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 59.081817][ T5031] R13: 00007fff3a60ca00 R14: 00007fff3a60c9e0 R15: 0000000000000001
[ 59.089830][ T5031]
[ 59.100462][ T5031] BTRFS: error (device loop0: state A) in __btrfs_free_extent:3056: errno=-12 Out of memory
[ 59.111117][ T5031] BTRFS info (device loop0: state EA): forced readonly
[pid 5031] sync() = 0
[pid 5031] exit_group(0) = ?
[pid 5031] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555846620 /* 4 entries */, 32768) = 104
[ 59.118400][ T5031] BTRFS error (device loop0: state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -12
[ 59.132634][ T5031] BTRFS: error (device loop0: state EA) in btrfs_run_delayed_refs:2124: errno=-12 Out of memory
[ 59.195507][ T5003] ------------[ cut here ]------------
[ 59.201900][ T5003] WARNING: CPU: 0 PID: 5003 at fs/btrfs/space-info.h:198 btrfs_block_rsv_release+0x671/0x810
[ 59.212354][ T5003] Modules linked in:
[ 59.216510][ T5003] CPU: 0 PID: 5003 Comm: syz-executor590 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 59.226519][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 59.236726][ T5003] RIP: 0010:btrfs_block_rsv_release+0x671/0x810
[ 59.243025][ T5003] Code: c1 ea 03 80 3c 02 00 0f 85 8f 01 00 00 4d 8b 6e 60 48 89 de 4c 89 ef e8 0d 73 fb fd 49 39 dd 0f 83 65 ff ff ff e8 3f 77 fb fd <0f> 0b 45 31 ed e9 5e ff ff ff e8 30 77 fb fd 49 8d 7e 18 be ff ff
[ 59.262718][ T5003] RSP: 0018:ffffc900039ffaf0 EFLAGS: 00010293
[ 59.268929][ T5003] RAX: 0000000000000000 RBX: 0000000000160000 RCX: 0000000000000000
[ 59.276982][ T5003] RDX: ffff8880278f0000 RSI: ffffffff8388ac71 RDI: 0000000000000006
[ 59.285098][ T5003] RBP: ffff888022284000 R08: 0000000000000006 R09: 000000000015f000
[ 59.293451][ T5003] R10: 0000000000160000 R11: 0000000000094001 R12: 0000000000160000
[ 59.301541][ T5003] R13: 000000000015f000 R14: ffff888076081000 R15: 0000000000160000
[ 59.309704][ T5003] FS: 0000555555845300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 59.318802][ T5003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.325585][ T5003] CR2: 0000557b316dc478 CR3: 000000007492b000 CR4: 00000000003506f0
[ 59.333567][ T5003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.341649][ T5003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.349707][ T5003] Call Trace:
[ 59.353005][ T5003]
[ 59.356059][ T5003] btrfs_release_global_block_rsv+0x26/0x2e0
[ 59.362123][ T5003] btrfs_free_block_groups+0xa0c/0x11d0
[ 59.367955][ T5003] ? free_root_pointers+0x6fe/0x980
[ 59.373190][ T5003] close_ctree+0x550/0xda0
[ 59.377719][ T5003] ? do_raw_spin_unlock+0x175/0x230
[ 59.383042][ T5003] ? btrfs_cleanup_transaction.isra.0+0x11a0/0x11a0
[ 59.389713][ T5003] ? collect_domain_accesses+0x910/0x910
[ 59.395502][ T5003] ? __fsnotify_vfsmount_delete+0x20/0x20
[ 59.401267][ T5003] ? dispose_list+0x1e0/0x1e0
[ 59.406048][ T5003] ? fscrypt_destroy_keyring+0x1a/0x350
[ 59.411704][ T5003] ? btrfs_set_super+0x70/0x70
[ 59.416568][ T5003] generic_shutdown_super+0x158/0x480
[ 59.421969][ T5003] kill_anon_super+0x3a/0x60
[ 59.426622][ T5003] btrfs_kill_super+0x3c/0x50
[ 59.431335][ T5003] deactivate_locked_super+0x98/0x160
[ 59.436782][ T5003] deactivate_super+0xb1/0xd0
[ 59.441518][ T5003] cleanup_mnt+0x2ae/0x3d0
[ 59.446003][ T5003] task_work_run+0x16f/0x270
[ 59.450618][ T5003] ? task_work_cancel+0x30/0x30
[ 59.455563][ T5003] ? __x64_sys_umount+0x118/0x190
[ 59.460666][ T5003] ptrace_notify+0x118/0x140
[ 59.465626][ T5003] syscall_exit_to_user_mode_prepare+0x129/0x220
[ 59.472268][ T5003] syscall_exit_to_user_mode+0xd/0x50
[ 59.477744][ T5003] do_syscall_64+0x46/0xb0
[ 59.482291][ T5003] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.488267][ T5003] RIP: 0033:0x7f03063b5d77
[ 59.492701][ T5003] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.512382][ T5003] RSP: 002b:00007fff3a60b8a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 59.520852][ T5003] RAX: 0000000000000000 RBX: 000000000000e3ca RCX: 00007f03063b5d77
[ 59.528911][ T5003] RDX: 00007fff3a60b967 RSI: 000000000000000a RDI: 00007fff3a60b960
[ 59.536948][ T5003] RBP: 00007fff3a60b960 R08: 00000000ffffffff R09: 00007fff3a60b740
[ 59.544969][ T5003] R10: 0000555555846633 R11: 0000000000000202 R12: 00007fff3a60c9e0
[ 59.553310][ T5003] R13: 00005555558465f0 R14: 00007fff3a60b8d0 R15: 0000000000000002
[ 59.561352][ T5003]
[ 59.565825][ T5003] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 59.573092][ T5003] CPU: 0 PID: 5003 Comm: syz-executor590 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 59.582968][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 59.593010][ T5003] Call Trace:
[ 59.596296][ T5003]
[ 59.599215][ T5003] dump_stack_lvl+0xd9/0x150
[ 59.603808][ T5003] panic+0x686/0x730
[ 59.607699][ T5003] ? panic_smp_self_stop+0xa0/0xa0
[ 59.612803][ T5003] ? show_trace_log_lvl+0x285/0x390
[ 59.618017][ T5003] ? btrfs_block_rsv_release+0x671/0x810
[ 59.623646][ T5003] check_panic_on_warn+0xb1/0xc0
[ 59.628594][ T5003] __warn+0xf2/0x390
[ 59.632504][ T5003] ? btrfs_block_rsv_release+0x671/0x810
[ 59.638154][ T5003] report_bug+0x2da/0x500
[ 59.642503][ T5003] handle_bug+0x3c/0x70
[ 59.646685][ T5003] exc_invalid_op+0x18/0x50
[ 59.651192][ T5003] asm_exc_invalid_op+0x1a/0x20
[ 59.656056][ T5003] RIP: 0010:btrfs_block_rsv_release+0x671/0x810
[ 59.662317][ T5003] Code: c1 ea 03 80 3c 02 00 0f 85 8f 01 00 00 4d 8b 6e 60 48 89 de 4c 89 ef e8 0d 73 fb fd 49 39 dd 0f 83 65 ff ff ff e8 3f 77 fb fd <0f> 0b 45 31 ed e9 5e ff ff ff e8 30 77 fb fd 49 8d 7e 18 be ff ff
[ 59.681925][ T5003] RSP: 0018:ffffc900039ffaf0 EFLAGS: 00010293
[ 59.687996][ T5003] RAX: 0000000000000000 RBX: 0000000000160000 RCX: 0000000000000000
[ 59.695970][ T5003] RDX: ffff8880278f0000 RSI: ffffffff8388ac71 RDI: 0000000000000006
[ 59.703940][ T5003] RBP: ffff888022284000 R08: 0000000000000006 R09: 000000000015f000
[ 59.711927][ T5003] R10: 0000000000160000 R11: 0000000000094001 R12: 0000000000160000
[ 59.720001][ T5003] R13: 000000000015f000 R14: ffff888076081000 R15: 0000000000160000
[ 59.727985][ T5003] ? btrfs_block_rsv_release+0x671/0x810
[ 59.733646][ T5003] btrfs_release_global_block_rsv+0x26/0x2e0
[ 59.739648][ T5003] btrfs_free_block_groups+0xa0c/0x11d0
[ 59.745208][ T5003] ? free_root_pointers+0x6fe/0x980
[ 59.750419][ T5003] close_ctree+0x550/0xda0
[ 59.754845][ T5003] ? do_raw_spin_unlock+0x175/0x230
[ 59.760083][ T5003] ? btrfs_cleanup_transaction.isra.0+0x11a0/0x11a0
[ 59.766686][ T5003] ? collect_domain_accesses+0x910/0x910
[ 59.772357][ T5003] ? __fsnotify_vfsmount_delete+0x20/0x20
[ 59.778092][ T5003] ? dispose_list+0x1e0/0x1e0
[ 59.782871][ T5003] ? fscrypt_destroy_keyring+0x1a/0x350
[ 59.788425][ T5003] ? btrfs_set_super+0x70/0x70
[ 59.793195][ T5003] generic_shutdown_super+0x158/0x480
[ 59.798583][ T5003] kill_anon_super+0x3a/0x60
[ 59.803188][ T5003] btrfs_kill_super+0x3c/0x50
[ 59.807894][ T5003] deactivate_locked_super+0x98/0x160
[ 59.813282][ T5003] deactivate_super+0xb1/0xd0
[ 59.817984][ T5003] cleanup_mnt+0x2ae/0x3d0
[ 59.822414][ T5003] task_work_run+0x16f/0x270
[ 59.827013][ T5003] ? task_work_cancel+0x30/0x30
[ 59.831876][ T5003] ? __x64_sys_umount+0x118/0x190
[ 59.837006][ T5003] ptrace_notify+0x118/0x140
[ 59.841609][ T5003] syscall_exit_to_user_mode_prepare+0x129/0x220
[ 59.847950][ T5003] syscall_exit_to_user_mode+0xd/0x50
[ 59.853346][ T5003] do_syscall_64+0x46/0xb0
[ 59.857780][ T5003] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.863688][ T5003] RIP: 0033:0x7f03063b5d77
[ 59.868110][ T5003] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.887726][ T5003] RSP: 002b:00007fff3a60b8a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 59.896493][ T5003] RAX: 0000000000000000 RBX: 000000000000e3ca RCX: 00007f03063b5d77
[ 59.904467][ T5003] RDX: 00007fff3a60b967 RSI: 000000000000000a RDI: 00007fff3a60b960
[ 59.912456][ T5003] RBP: 00007fff3a60b960 R08: 00000000ffffffff R09: 00007fff3a60b740
[ 59.920517][ T5003] R10: 0000555555846633 R11: 0000000000000202 R12: 00007fff3a60c9e0
[ 59.928488][ T5003] R13: 00005555558465f0 R14: 00007fff3a60b8d0 R15: 0000000000000002
[ 59.936476][ T5003]
[ 59.939654][ T5003] Kernel Offset: disabled
[ 59.944096][ T5003] Rebooting in 86400 seconds..