DUID 00:04:a1:84:1b:e0:48:24:35:f8:15:f9:55:b5:79:ea:e6:3e forked to background, child pid 4660 [ 29.002844][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.014241][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 53.345824][ T4987] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4987 'syz-executor131' [ 53.481695][ T4987] loop0: detected capacity change from 0 to 32768 [ 53.491973][ T4987] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor131 (4987) [ 53.509601][ T4987] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 53.518461][ T4987] BTRFS info (device loop0): using free space tree [ 53.536991][ T4987] BTRFS info (device loop0): enabling ssd optimizations [ 53.544126][ T4987] BTRFS info (device loop0): auto enabling async discard [ 53.571238][ T27] audit: type=1800 audit(1687701820.860:2): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor131" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 53.595930][ T27] audit: type=1800 audit(1687701820.880:3): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor131" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 53.700508][ T5006] BTRFS info (device loop0): balance: start [ 53.707424][ T5006] BTRFS info (device loop0): balance: ended with status: 0 [ 53.714563][ T4987] ------------[ cut here ]------------ [ 53.720220][ T4987] BTRFS: Transaction aborted (error -28) [ 53.726297][ T4987] WARNING: CPU: 1 PID: 4987 at fs/btrfs/extent-tree.c:3053 __btrfs_free_extent+0x2325/0x2e50 [ 53.736700][ T4987] Modules linked in: [ 53.740618][ T4987] CPU: 1 PID: 4987 Comm: syz-executor131 Not tainted 6.4.0-rc7-syzkaller-00226-ga92b7d26c743 #0 [ 53.751380][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 53.761500][ T4987] RIP: 0010:__btrfs_free_extent+0x2325/0x2e50 [ 53.767652][ T4987] Code: 2a 07 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 e9 1b fb ff ff e8 4a 77 07 fe 48 c7 c7 c0 93 29 8b 44 89 e6 e8 eb f0 ce fd <0f> 0b e9 40 e4 ff ff 4d 89 e5 e8 2c 77 07 fe 45 31 c0 45 84 f6 41 [ 53.787336][ T4987] RSP: 0018:ffffc90003b5eb80 EFLAGS: 00010246 [ 53.793440][ T4987] RAX: 6e7d38560224fe00 RBX: ffff888076b20001 RCX: ffff88802cc98000 [ 53.801414][ T4987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 53.809417][ T4987] RBP: ffffc90003b5ed00 R08: ffffffff81530132 R09: fffff5200076bd25 [ 53.817763][ T4987] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffffe4 [ 53.825760][ T4987] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000001000 [ 53.833778][ T4987] FS: 00007f61b5702700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.842731][ T4987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.849428][ T4987] CR2: 0000559de4861668 CR3: 0000000075ac6000 CR4: 00000000003506e0 [ 53.857442][ T4987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.865454][ T4987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.873448][ T4987] Call Trace: [ 53.876717][ T4987] [ 53.879635][ T4987] ? __warn+0x162/0x4a0 [ 53.883827][ T4987] ? __btrfs_free_extent+0x2325/0x2e50 [ 53.889300][ T4987] ? report_bug+0x2b3/0x500 [ 53.893849][ T4987] ? __btrfs_free_extent+0x2325/0x2e50 [ 53.899322][ T4987] ? handle_bug+0x3d/0x70 [ 53.903687][ T4987] ? exc_invalid_op+0x1a/0x50 [ 53.908371][ T4987] ? asm_exc_invalid_op+0x1a/0x20 [ 53.913780][ T4987] ? __warn_printk+0x292/0x360 [ 53.918559][ T4987] ? __btrfs_free_extent+0x2325/0x2e50 [ 53.924068][ T4987] ? read_lock_is_recursive+0x20/0x20 [ 53.929458][ T4987] ? __btrfs_inc_extent_ref+0x5f0/0x5f0 [ 53.935067][ T4987] ? _raw_read_unlock+0x28/0x40 [ 53.939925][ T4987] ? do_raw_spin_unlock+0x13b/0x8b0 [ 53.945178][ T4987] __btrfs_run_delayed_refs+0xef9/0x3fc0 [ 53.950900][ T4987] ? btrfs_run_delayed_refs+0x480/0x480 [ 53.956915][ T4987] ? stack_trace_snprint+0xf0/0xf0 [ 53.962056][ T4987] ? read_lock_is_recursive+0x20/0x20 [ 53.967484][ T4987] btrfs_run_delayed_refs+0x140/0x480 [ 53.972873][ T4987] btrfs_commit_transaction+0x427/0x3370 [ 53.978550][ T4987] ? join_transaction+0xbfd/0xe80 [ 53.983609][ T4987] ? do_raw_spin_lock+0x14d/0x3a0 [ 53.988650][ T4987] ? btrfs_commit_transaction_async+0x450/0x450 [ 53.994919][ T4987] ? slab_post_alloc_hook+0x83/0x3a0 [ 54.000218][ T4987] ? join_transaction+0xc52/0xe80 [ 54.005297][ T4987] ? join_transaction+0xc28/0xe80 [ 54.010338][ T4987] ? btrfs_record_root_in_trans+0x12d/0x180 [ 54.016271][ T4987] ? start_transaction+0x3de/0x1080 [ 54.021487][ T4987] btrfs_sync_file+0xcb3/0x10e0 [ 54.026394][ T4987] ? btrfs_release_file+0x130/0x130 [ 54.031599][ T4987] ? do_raw_spin_lock+0x14d/0x3a0 [ 54.036676][ T4987] ? do_raw_spin_unlock+0x13b/0x8b0 [ 54.041893][ T4987] btrfs_do_write_iter+0xccd/0x1270 [ 54.047140][ T4987] ? btrfs_check_nocow_unlock+0x40/0x40 [ 54.052696][ T4987] do_iter_write+0x7b1/0xcb0 [ 54.057334][ T4987] ? vfs_iter_write+0xa0/0xa0 [ 54.062043][ T4987] ? vfs_iter_write+0x6d/0xa0 [ 54.066783][ T4987] iter_file_splice_write+0x843/0xfe0 [ 54.072172][ T4987] ? btrfs_inode_lock+0x58/0xd0 [ 54.077096][ T4987] ? splice_from_pipe+0x230/0x230 [ 54.082141][ T4987] ? direct_splice_read+0xa10/0xa10 [ 54.087419][ T4987] ? splice_from_pipe+0x230/0x230 [ 54.092449][ T4987] direct_splice_actor+0xe7/0x1c0 [ 54.097504][ T4987] splice_direct_to_actor+0x4c4/0xbd0 [ 54.102888][ T4987] ? do_splice_direct+0x3d0/0x3d0 [ 54.107939][ T4987] ? pipe_to_sendpage+0x350/0x350 [ 54.112968][ T4987] ? fsnotify_perm+0x67/0x590 [ 54.117675][ T4987] ? bpf_lsm_file_permission+0x9/0x10 [ 54.123057][ T4987] do_splice_direct+0x283/0x3d0 [ 54.127949][ T4987] ? splice_direct_to_actor+0xbd0/0xbd0 [ 54.133519][ T4987] ? rcu_read_lock_any_held+0xb7/0x160 [ 54.138977][ T4987] do_sendfile+0x620/0xff0 [ 54.143455][ T4987] ? do_pwritev+0x360/0x360 [ 54.147961][ T4987] ? restore_fpregs_from_fpstate+0x100/0x250 [ 54.153977][ T4987] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 54.159968][ T4987] __se_sys_sendfile64+0x17c/0x1e0 [ 54.165116][ T4987] ? __x64_sys_sendfile64+0xb0/0xb0 [ 54.170319][ T4987] ? syscall_enter_from_user_mode+0x32/0x230 [ 54.176348][ T4987] ? lockdep_hardirqs_on+0x98/0x140 [ 54.181554][ T4987] ? syscall_enter_from_user_mode+0x32/0x230 [ 54.187568][ T4987] do_syscall_64+0x41/0xc0 [ 54.191990][ T4987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.197928][ T4987] RIP: 0033:0x7f61b57561f9 [ 54.202354][ T4987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.222024][ T4987] RSP: 002b:00007f61b57022f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 54.230478][ T4987] RAX: ffffffffffffffda RBX: 00007f61b57df6e0 RCX: 00007f61b57561f9 [ 54.238492][ T4987] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 54.246490][ T4987] RBP: 00007f61b57ac66c R08: 0000000000000000 R09: 0000000000000000 [ 54.254490][ T4987] R10: 000000000880000c R11: 0000000000000246 R12: 0000000020000600 [ 54.262486][ T4987] R13: 0030656c69662f2e R14: 0000000000000000 R15: 00007f61b57df6e8 [ 54.270520][ T4987] [ 54.273590][ T4987] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.280947][ T4987] CPU: 1 PID: 4987 Comm: syz-executor131 Not tainted 6.4.0-rc7-syzkaller-00226-ga92b7d26c743 #0 [ 54.291343][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 54.301385][ T4987] Call Trace: [ 54.304654][ T4987] [ 54.307578][ T4987] dump_stack_lvl+0x1e7/0x2d0 [ 54.312243][ T4987] ? nf_tcp_handle_invalid+0x650/0x650 [ 54.317694][ T4987] ? panic+0x770/0x770 [ 54.321755][ T4987] ? vscnprintf+0x5d/0x80 [ 54.326074][ T4987] panic+0x30f/0x770 [ 54.329961][ T4987] ? __warn+0x171/0x4a0 [ 54.334114][ T4987] ? __memcpy_flushcache+0x2b0/0x2b0 [ 54.339410][ T4987] __warn+0x314/0x4a0 [ 54.343390][ T4987] ? __btrfs_free_extent+0x2325/0x2e50 [ 54.348845][ T4987] report_bug+0x2b3/0x500 [ 54.353162][ T4987] ? __btrfs_free_extent+0x2325/0x2e50 [ 54.358616][ T4987] handle_bug+0x3d/0x70 [ 54.362760][ T4987] exc_invalid_op+0x1a/0x50 [ 54.367256][ T4987] asm_exc_invalid_op+0x1a/0x20 [ 54.372099][ T4987] RIP: 0010:__btrfs_free_extent+0x2325/0x2e50 [ 54.378159][ T4987] Code: 2a 07 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 e9 1b fb ff ff e8 4a 77 07 fe 48 c7 c7 c0 93 29 8b 44 89 e6 e8 eb f0 ce fd <0f> 0b e9 40 e4 ff ff 4d 89 e5 e8 2c 77 07 fe 45 31 c0 45 84 f6 41 [ 54.397756][ T4987] RSP: 0018:ffffc90003b5eb80 EFLAGS: 00010246 [ 54.403819][ T4987] RAX: 6e7d38560224fe00 RBX: ffff888076b20001 RCX: ffff88802cc98000 [ 54.411784][ T4987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 54.419741][ T4987] RBP: ffffc90003b5ed00 R08: ffffffff81530132 R09: fffff5200076bd25 [ 54.427705][ T4987] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffffe4 [ 54.435663][ T4987] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000001000 [ 54.443628][ T4987] ? __warn_printk+0x292/0x360 [ 54.448401][ T4987] ? read_lock_is_recursive+0x20/0x20 [ 54.453775][ T4987] ? __btrfs_inc_extent_ref+0x5f0/0x5f0 [ 54.459316][ T4987] ? _raw_read_unlock+0x28/0x40 [ 54.464161][ T4987] ? do_raw_spin_unlock+0x13b/0x8b0 [ 54.469356][ T4987] __btrfs_run_delayed_refs+0xef9/0x3fc0 [ 54.475012][ T4987] ? btrfs_run_delayed_refs+0x480/0x480 [ 54.480549][ T4987] ? stack_trace_snprint+0xf0/0xf0 [ 54.485665][ T4987] ? read_lock_is_recursive+0x20/0x20 [ 54.491035][ T4987] btrfs_run_delayed_refs+0x140/0x480 [ 54.496405][ T4987] btrfs_commit_transaction+0x427/0x3370 [ 54.502036][ T4987] ? join_transaction+0xbfd/0xe80 [ 54.507049][ T4987] ? do_raw_spin_lock+0x14d/0x3a0 [ 54.512074][ T4987] ? btrfs_commit_transaction_async+0x450/0x450 [ 54.518306][ T4987] ? slab_post_alloc_hook+0x83/0x3a0 [ 54.523583][ T4987] ? join_transaction+0xc52/0xe80 [ 54.528598][ T4987] ? join_transaction+0xc28/0xe80 [ 54.533612][ T4987] ? btrfs_record_root_in_trans+0x12d/0x180 [ 54.539498][ T4987] ? start_transaction+0x3de/0x1080 [ 54.544698][ T4987] btrfs_sync_file+0xcb3/0x10e0 [ 54.549547][ T4987] ? btrfs_release_file+0x130/0x130 [ 54.554732][ T4987] ? do_raw_spin_lock+0x14d/0x3a0 [ 54.559755][ T4987] ? do_raw_spin_unlock+0x13b/0x8b0 [ 54.564953][ T4987] btrfs_do_write_iter+0xccd/0x1270 [ 54.570152][ T4987] ? btrfs_check_nocow_unlock+0x40/0x40 [ 54.575694][ T4987] do_iter_write+0x7b1/0xcb0 [ 54.580287][ T4987] ? vfs_iter_write+0xa0/0xa0 [ 54.584973][ T4987] ? vfs_iter_write+0x6d/0xa0 [ 54.589646][ T4987] iter_file_splice_write+0x843/0xfe0 [ 54.595009][ T4987] ? btrfs_inode_lock+0x58/0xd0 [ 54.599865][ T4987] ? splice_from_pipe+0x230/0x230 [ 54.604883][ T4987] ? direct_splice_read+0xa10/0xa10 [ 54.610074][ T4987] ? splice_from_pipe+0x230/0x230 [ 54.615088][ T4987] direct_splice_actor+0xe7/0x1c0 [ 54.620102][ T4987] splice_direct_to_actor+0x4c4/0xbd0 [ 54.625469][ T4987] ? do_splice_direct+0x3d0/0x3d0 [ 54.630479][ T4987] ? pipe_to_sendpage+0x350/0x350 [ 54.635491][ T4987] ? fsnotify_perm+0x67/0x590 [ 54.640161][ T4987] ? bpf_lsm_file_permission+0x9/0x10 [ 54.645525][ T4987] do_splice_direct+0x283/0x3d0 [ 54.650367][ T4987] ? splice_direct_to_actor+0xbd0/0xbd0 [ 54.655900][ T4987] ? rcu_read_lock_any_held+0xb7/0x160 [ 54.661361][ T4987] do_sendfile+0x620/0xff0 [ 54.665781][ T4987] ? do_pwritev+0x360/0x360 [ 54.670272][ T4987] ? restore_fpregs_from_fpstate+0x100/0x250 [ 54.676242][ T4987] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 54.682217][ T4987] __se_sys_sendfile64+0x17c/0x1e0 [ 54.687323][ T4987] ? __x64_sys_sendfile64+0xb0/0xb0 [ 54.692516][ T4987] ? syscall_enter_from_user_mode+0x32/0x230 [ 54.698486][ T4987] ? lockdep_hardirqs_on+0x98/0x140 [ 54.703675][ T4987] ? syscall_enter_from_user_mode+0x32/0x230 [ 54.709648][ T4987] do_syscall_64+0x41/0xc0 [ 54.714053][ T4987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.719940][ T4987] RIP: 0033:0x7f61b57561f9 [ 54.724347][ T4987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.743943][ T4987] RSP: 002b:00007f61b57022f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 54.752344][ T4987] RAX: ffffffffffffffda RBX: 00007f61b57df6e0 RCX: 00007f61b57561f9 [ 54.760303][ T4987] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 54.768263][ T4987] RBP: 00007f61b57ac66c R08: 0000000000000000 R09: 0000000000000000 [ 54.776224][ T4987] R10: 000000000880000c R11: 0000000000000246 R12: 0000000020000600 [ 54.784197][ T4987] R13: 0030656c69662f2e R14: 0000000000000000 R15: 00007f61b57df6e8 [ 54.792194][ T4987] [ 54.795378][ T4987] Kernel Offset: disabled [ 54.799788][ T4987] Rebooting in 86400 seconds..