[ OK ] Started System Logging Service. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.366413] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 [ 40.383690] BTRFS info (device loop0): enabling inode map caching [ 40.395759] BTRFS info (device loop0): force clearing of disk cache [ 40.402823] BTRFS info (device loop0): disabling free space tree [ 40.409177] BTRFS info (device loop0): has skinny extents [ 40.427735] BTRFS info (device loop0): clearing free space tree [ 40.434471] BTRFS info (device loop0): clearing 1 ro feature flag [ 40.440958] BTRFS info (device loop0): clearing 2 ro feature flag [ 40.468221] FAULT_INJECTION: forcing a failure. [ 40.468221] name failslab, interval 1, probability 0, space 0, times 1 [ 40.480439] CPU: 1 PID: 8097 Comm: syz-executor378 Not tainted 4.19.211-syzkaller #0 [ 40.488327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 40.497671] Call Trace: [ 40.500268] dump_stack+0x1fc/0x2ef [ 40.503896] should_fail.cold+0xa/0xf [ 40.507689] ? __x64_sys_fsync+0x6b/0xc0 [ 40.511730] ? setup_fault_attr+0x200/0x200 [ 40.516029] ? insert_state+0x29c/0x3b0 [ 40.519983] __should_failslab+0x115/0x180 [ 40.524202] should_failslab+0x5/0x10 [ 40.527982] kmem_cache_alloc+0x277/0x370 [ 40.532112] btrfs_add_delayed_tree_ref+0xfe/0xb40 [ 40.537027] ? check_preemption_disabled+0x41/0x280 [ 40.542038] ? btrfs_select_ref_head+0x3a0/0x3a0 [ 40.546778] ? btrfs_alloc_tree_block+0xfbe/0x15f0 [ 40.551701] btrfs_alloc_tree_block+0x1124/0x15f0 [ 40.556536] ? btrfs_reserve_extent+0x440/0x440 [ 40.561192] ? depot_save_stack+0x258/0x410 [ 40.565497] ? mark_held_locks+0xf0/0xf0 [ 40.569540] alloc_tree_block_no_bg_flush+0x1b6/0x250 [ 40.574720] __btrfs_cow_block+0x3c7/0x10a0 [ 40.579060] ? update_ref_for_cow+0xaf0/0xaf0 [ 40.583551] ? btrfs_tree_read_unlock_blocking+0x290/0x290 [ 40.589156] btrfs_cow_block+0x276/0x840 [ 40.593210] btrfs_search_slot+0x66a/0x1ee0 [ 40.597516] ? check_preemption_disabled+0x41/0x280 [ 40.602510] ? split_leaf+0x1240/0x1240 [ 40.606467] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 40.611462] btrfs_update_root+0xc9/0x6b0 [ 40.615590] ? btrfs_init_free_ino_ctl+0x330/0x330 [ 40.620495] ? btrfs_set_root_node+0x240/0x240 [ 40.625058] ? radix_tree_tag_clear+0x193/0x2f0 [ 40.629706] commit_fs_roots+0x3b5/0x530 [ 40.633746] ? btrfs_commit_transaction+0x891/0x2480 [ 40.638830] ? btrfs_trans_release_metadata+0x480/0x480 [ 40.644169] ? lock_acquire+0x170/0x3c0 [ 40.648122] ? btrfs_first_delayed_node+0x18/0x80 [ 40.652944] ? do_raw_spin_unlock+0x171/0x230 [ 40.657428] ? _raw_spin_unlock+0x29/0x40 [ 40.661558] btrfs_commit_transaction+0x8ca/0x2480 [ 40.666488] ? btrfs_apply_pending_changes+0x150/0x150 [ 40.671746] ? lock_downgrade+0x720/0x720 [ 40.675879] ? dput+0x1d5/0x640 [ 40.679146] btrfs_sync_file+0xbbf/0xd90 [ 40.683190] ? start_ordered_ops+0x1f0/0x1f0 [ 40.687583] ? ksys_write+0x1c8/0x2a0 [ 40.691448] ? start_ordered_ops+0x1f0/0x1f0 [ 40.695846] vfs_fsync_range+0x13a/0x220 [ 40.699914] __x64_sys_fsync+0x6b/0xc0 [ 40.703798] do_syscall_64+0xf9/0x620 [ 40.707580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.712748] RIP: 0033:0x7fb0238c9ee9 [ 40.716441] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 40.735323] RSP: 002b:00007ffddcbd4ad8 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 40.743010] RAX: ffffffffffffffda RBX: 00007ffddcbd4b38 RCX: 00007fb0238c9ee9 [ 40.750349] RDX: 0000000000000ae0 RSI: 000000000000c0fc RDI: 0000000000000005 [ 40.757618] RBP: 00007ffddcbd4ae0 R08: 0000000000000002 R09: 0000000000003732 [ 40.764874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.772124] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 40.788465] BTRFS warning (device loop0): Skipping commit of aborted transaction. [ 40.788478] ------------[ cut here ]------------ [ 40.788758] WARNING: CPU: 1 PID: 8097 at fs/btrfs/transaction.c:1872 cleanup_transaction+0x1bf/0x250 [ 40.810255] Kernel panic - not syncing: panic_on_warn set ... [ 40.810255] [ 40.817606] CPU: 1 PID: 8097 Comm: syz-executor378 Not tainted 4.19.211-syzkaller #0 [ 40.825466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 40.834801] Call Trace: [ 40.837392] dump_stack+0x1fc/0x2ef [ 40.841005] panic+0x26a/0x50e [ 40.844178] ? __warn_printk+0xf3/0xf3 [ 40.848058] ? cleanup_transaction+0x1bf/0x250 [ 40.852621] ? __probe_kernel_read+0x130/0x1b0 [ 40.857183] ? __warn.cold+0x5/0x5a [ 40.860791] ? __warn+0xe4/0x200 [ 40.864139] ? cleanup_transaction+0x1bf/0x250 [ 40.868703] __warn.cold+0x20/0x5a [ 40.872225] ? cleanup_transaction+0x1bf/0x250 [ 40.876786] report_bug+0x262/0x2b0 [ 40.880416] do_error_trap+0x1d7/0x310 [ 40.884285] ? math_error+0x310/0x310 [ 40.888073] ? irq_work_claim+0xa6/0xc0 [ 40.892044] ? irq_work_queue+0x29/0x80 [ 40.896005] ? error_entry+0x72/0xd0 [ 40.899699] ? trace_hardirqs_off_caller+0x6e/0x210 [ 40.904722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.909552] invalid_op+0x14/0x20 [ 40.912999] RIP: 0010:cleanup_transaction+0x1bf/0x250 [ 40.918168] Code: 89 e6 bf fb ff ff ff e8 5f ed 7b fe 41 83 fc fb 0f 84 d5 b9 13 05 e8 e0 eb 7b fe 44 89 e6 48 c7 c7 80 af a4 88 e8 b6 23 0c 05 <0f> 0b e8 ca eb 7b fe 44 89 e1 ba 50 07 00 00 48 89 ef 48 c7 c6 a0 [ 40.937052] RSP: 0018:ffff8880955cfb18 EFLAGS: 00010282 [ 40.942398] RAX: 0000000000000000 RBX: 1ffff11012ab9f6a RCX: 0000000000000000 [ 40.949664] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1012ab9f55 [ 40.956917] RBP: ffff88808e3e3bd0 R08: 0000000000000001 R09: 0000000000000000 [ 40.964168] R10: 0000000000000005 R11: 0000000000000000 R12: 00000000fffffff4 [ 40.971419] R13: ffff88808e3e3c20 R14: ffff88808e3e3bf0 R15: 0000000000000000 [ 40.978703] ? vprintk_func+0x81/0x180 [ 40.982581] ? cleanup_transaction+0x1bf/0x250 [ 40.987166] ? wait_current_trans+0x390/0x390 [ 40.991642] ? wait_woken+0x250/0x250 [ 40.995424] ? __wake_up_common+0x650/0x650 [ 40.999725] ? __mutex_unlock_slowpath+0xea/0x610 [ 41.004550] ? btrfs_first_delayed_node+0x18/0x80 [ 41.009375] ? btrfs_trans_release_chunk_metadata+0x43/0x540 [ 41.015155] ? do_raw_spin_unlock+0x171/0x230 [ 41.019635] ? btrfs_trans_release_chunk_metadata+0x43/0x540 [ 41.025415] btrfs_commit_transaction+0x1de7/0x2480 [ 41.030419] ? btrfs_apply_pending_changes+0x150/0x150 [ 41.035687] ? lock_downgrade+0x720/0x720 [ 41.039828] ? dput+0x1d5/0x640 [ 41.043102] btrfs_sync_file+0xbbf/0xd90 [ 41.047146] ? start_ordered_ops+0x1f0/0x1f0 [ 41.051541] ? ksys_write+0x1c8/0x2a0 [ 41.055322] ? start_ordered_ops+0x1f0/0x1f0 [ 41.059710] vfs_fsync_range+0x13a/0x220 [ 41.063752] __x64_sys_fsync+0x6b/0xc0 [ 41.067621] do_syscall_64+0xf9/0x620 [ 41.071405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.076575] RIP: 0033:0x7fb0238c9ee9 [ 41.080268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.099260] RSP: 002b:00007ffddcbd4ad8 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 41.106971] RAX: ffffffffffffffda RBX: 00007ffddcbd4b38 RCX: 00007fb0238c9ee9 [ 41.114318] RDX: 0000000000000ae0 RSI: 000000000000c0fc RDI: 0000000000000005 [ 41.121568] RBP: 00007ffddcbd4ae0 R08: 0000000000000002 R09: 0000000000003732 [ 41.128818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.136068] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 41.143639] Kernel Offset: disabled [ 41.147313] Rebooting in 86400 seconds..