./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3496866945
<...>
Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts.
execve("./syz-executor3496866945", ["./syz-executor3496866945"], 0x7fff6f01dfb0 /* 10 vars */) = 0
brk(NULL) = 0x5555555fc000
brk(0x5555555fce00) = 0x5555555fce00
arch_prctl(ARCH_SET_FS, 0x5555555fc480) = 0
set_tid_address(0x5555555fc750) = 5036
set_robust_list(0x5555555fc760, 24) = 0
rseq(0x5555555fcda0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3496866945", 4096) = 28
getrandom("\x41\xa2\x39\xbb\x40\x3c\x19\x44", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555555fce00
brk(0x55555561de00) = 0x55555561de00
brk(0x55555561e000) = 0x55555561e000
mprotect(0x7f28ed9b3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f28ed904bc0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f28ed90d380}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f28ed904bc0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f28ed90d380}, NULL, 8) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555fc750) = 5037
./strace-static-x86_64: Process 5037 attached
[pid 5037] set_robust_list(0x5555555fc760, 24) = 0
[pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5037] setpgid(0, 0) = 0
[pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5037] write(3, "1000", 4) = 4
[pid 5037] close(3) = 0
[pid 5037] memfd_create("syzkaller", 0) = 3
[pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f28e54fb000
[ 73.170712][ T5037] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5037 'syz-executor349'
[pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5037] munmap(0x7f28e54fb000, 16777216) = 0
[pid 5037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5037] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5037] close(3) = 0
[pid 5037] mkdir("./bus", 0777) = 0
[ 73.393867][ T5037] loop0: detected capacity change from 0 to 32768
[ 73.406999][ T5037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor349 (5037)
[ 73.426817][ T5037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 73.436819][ T5037] BTRFS info (device loop0): doing ref verification
[ 73.446531][ T5037] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 73.460871][ T5037] BTRFS info (device loop0): force zlib compression, level 3
[ 73.470840][ T5037] BTRFS info (device loop0): allowing degraded mounts
[ 73.479794][ T5037] BTRFS info (device loop0): using free space tree
[pid 5037] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5037] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5037] chdir("./bus") = 0
[pid 5037] ioctl(4, LOOP_CLR_FD) = 0
[pid 5037] close(4) = 0
[pid 5037] open("./file0", O_RDONLY) = 4
[pid 5037] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5037] write(5, "32", 2) = 2
[ 73.507116][ T5037] BTRFS info (device loop0): auto enabling async discard
[ 73.527431][ T5037] FAULT_INJECTION: forcing a failure.
[ 73.527431][ T5037] name failslab, interval 1, probability 0, space 0, times 1
[ 73.541109][ T5037] CPU: 1 PID: 5037 Comm: syz-executor349 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0
[ 73.552089][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 73.564341][ T5037] Call Trace:
[ 73.567735][ T5037]
[ 73.571523][ T5037] dump_stack_lvl+0x125/0x1b0
[ 73.577646][ T5037] should_fail_ex+0x496/0x5b0
[ 73.582450][ T5037] should_failslab+0x9/0x20
[ 73.587291][ T5037] kmem_cache_alloc+0x33a/0x3b0
[ 73.592470][ T5037] btrfs_add_delayed_tree_ref+0x234/0x1000
[ 73.598319][ T5037] ? do_raw_spin_unlock+0x173/0x230
[ 73.604547][ T5037] ? btrfs_delete_ref_head+0x2c0/0x2c0
[ 73.610687][ T5037] btrfs_free_tree_block+0x241/0xb50
[ 73.616396][ T5037] ? btrfs_finish_extent_commit+0x8b0/0x8b0
[ 73.623012][ T5037] ? btrfs_tree_mod_log_insert_root+0x608/0x9b0
[ 73.630791][ T5037] __btrfs_cow_block+0xfbd/0x18f0
[ 73.636222][ T5037] ? update_ref_for_cow+0xc10/0xc10
[ 73.641817][ T5037] ? btrfs_qgroup_add_swapped_blocks+0x9d0/0x9d0
[ 73.648454][ T5037] ? down_write_nested+0x153/0x200
[ 73.654202][ T5037] btrfs_cow_block+0x2f1/0x820
[ 73.660232][ T5037] btrfs_search_slot+0x12a0/0x30e0
[ 73.666408][ T5037] ? lockdep_init_map_type+0x16d/0x7c0
[ 73.673167][ T5037] ? balance_level+0x2420/0x2420
[ 73.679018][ T5037] ? _raw_spin_unlock+0x28/0x40
[ 73.685731][ T5037] ? join_transaction+0x287/0x1090
[ 73.693963][ T5037] ? btrfs_record_root_in_trans+0x15b/0x1b0
[ 73.700799][ T5037] ? start_transaction+0x2a2/0x14d0
[ 73.707450][ T5037] btrfs_insert_empty_items+0xb7/0x1b0
[ 73.713607][ T5037] insert_balance_item.isra.0+0x167/0x1490
[ 73.719729][ T5037] ? bpf_ksym_find+0x124/0x1b0
[ 73.725335][ T5037] ? rcu_string_strdup+0x150/0x150
[ 73.731681][ T5037] ? rcu_is_watching+0x12/0xb0
[ 73.736929][ T5037] ? lock_release+0x4bf/0x680
[ 73.742096][ T5037] ? __stack_depot_save+0x247/0x510
[ 73.747551][ T5037] ? _raw_spin_unlock_irqrestore+0x3b/0x70
[ 73.754746][ T5037] ? __stack_depot_save+0x247/0x510
[ 73.760470][ T5037] ? rcu_is_watching+0x12/0xb0
[ 73.765890][ T5037] btrfs_balance+0x1064/0x3ef0
[ 73.770913][ T5037] ? btrfs_relocate_chunk+0x440/0x440
[ 73.776353][ T5037] btrfs_ioctl+0x1362/0x5cf0
[ 73.781241][ T5037] ? tomoyo_path_number_perm+0x190/0x590
[ 73.787060][ T5037] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 73.792992][ T5037] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 73.799496][ T5037] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 73.805659][ T5037] ? do_vfs_ioctl+0x379/0x1920
[ 73.810644][ T5037] ? vfs_fileattr_set+0xbf0/0xbf0
[ 73.817084][ T5037] ? rcu_is_watching+0x12/0xb0
[ 73.821943][ T5037] ? lock_release+0x4bf/0x680
[ 73.827493][ T5037] ? bpf_lsm_file_ioctl+0x9/0x10
[ 73.832915][ T5037] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 73.840425][ T5037] __x64_sys_ioctl+0x18f/0x210
[ 73.845492][ T5037] do_syscall_64+0x38/0xb0
[ 73.850316][ T5037] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 73.857489][ T5037] RIP: 0033:0x7f28ed93a699
[ 73.861914][ T5037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.883101][ T5037] RSP: 002b:00007ffff0582c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.892229][ T5037] RAX: ffffffffffffffda RBX: 00007ffff0582c50 RCX: 00007f28ed93a699
[ 73.900850][ T5037] RDX: 00000000200003c0 RSI: 00000000c4009420 RDI: 0000000000000004
[ 73.911368][ T5037] RBP: 0000000000000002 R08: 00007ffff05829e6 R09: 0000000000003233
[ 73.920297][ T5037] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffff0582ca0
[ 73.936729][ T5037] R13: 00007ffff0582f28 R14: 431bde82d7b634db R15: 00007f28ed98301d
[ 73.947760][ T5037]
[ 73.953378][ T5037] ------------[ cut here ]------------
[ 73.959766][ T5037] kernel BUG at fs/btrfs/extent-tree.c:3230!
[ 73.967107][ T5037] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 73.974869][ T5037] CPU: 1 PID: 5037 Comm: syz-executor349 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0
[ 73.985332][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 73.998343][ T5037] RIP: 0010:btrfs_free_tree_block+0x788/0xb50
[ 74.006063][ T5037] Code: e8 7d 41 ff fd 31 ff 89 c5 89 c6 e8 22 97 16 fe 40 84 ed 0f 85 e5 fb ff ff e8 e4 9b 16 fe 0f 0b e9 d9 fb ff ff e8 d8 9b 16 fe <0f> 0b e8 d1 9b 16 fe 49 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48
[ 74.029407][ T5037] RSP: 0018:ffffc900039bf338 EFLAGS: 00010293
[ 74.035834][ T5037] RAX: 0000000000000000 RBX: ffff88807344a000 RCX: 0000000000000000
[ 74.044358][ T5037] RDX: ffff888024e50000 RSI: ffffffff83712ba8 RDI: 0000000000000005
[ 74.053140][ T5037] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 74.062695][ T5037] R10: 00000000fffffff4 R11: 0000000000000001 R12: 1ffff92000737e6c
[ 74.072602][ T5037] R13: ffff888076fbe000 R14: 0000000000000001 R15: ffff88807344a008
[ 74.081903][ T5037] FS: 00005555555fc480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 74.092390][ T5037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.101120][ T5037] CR2: 00007fff6f01bfa0 CR3: 0000000027664000 CR4: 00000000003506e0
[ 74.112088][ T5037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.123750][ T5037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.137260][ T5037] Call Trace:
[ 74.141428][ T5037]
[ 74.147948][ T5037] ? show_regs+0x8f/0xa0
[ 74.153923][ T5037] ? die+0x36/0xa0
[ 74.158129][ T5037] ? do_trap+0x22b/0x420
[ 74.163900][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.171954][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.178962][ T5037] ? do_error_trap+0xf4/0x230
[ 74.185111][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.191135][ T5037] ? handle_invalid_op+0x34/0x40
[ 74.196658][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.203081][ T5037] ? exc_invalid_op+0x2d/0x40
[ 74.210590][ T5037] ? asm_exc_invalid_op+0x1a/0x20
[ 74.215954][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.222942][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.231185][ T5037] ? btrfs_free_tree_block+0x788/0xb50
[ 74.239038][ T5037] ? btrfs_finish_extent_commit+0x8b0/0x8b0
[ 74.246309][ T5037] ? btrfs_tree_mod_log_insert_root+0x608/0x9b0
[ 74.252834][ T5037] __btrfs_cow_block+0xfbd/0x18f0
[ 74.258258][ T5037] ? update_ref_for_cow+0xc10/0xc10
[ 74.264469][ T5037] ? btrfs_qgroup_add_swapped_blocks+0x9d0/0x9d0
[ 74.273117][ T5037] ? down_write_nested+0x153/0x200
[ 74.279149][ T5037] btrfs_cow_block+0x2f1/0x820
[ 74.284233][ T5037] btrfs_search_slot+0x12a0/0x30e0
[ 74.290008][ T5037] ? lockdep_init_map_type+0x16d/0x7c0
[ 74.296982][ T5037] ? balance_level+0x2420/0x2420
[ 74.302037][ T5037] ? _raw_spin_unlock+0x28/0x40
[ 74.307110][ T5037] ? join_transaction+0x287/0x1090
[ 74.312620][ T5037] ? btrfs_record_root_in_trans+0x15b/0x1b0
[ 74.319693][ T5037] ? start_transaction+0x2a2/0x14d0
[ 74.325110][ T5037] btrfs_insert_empty_items+0xb7/0x1b0
[ 74.332325][ T5037] insert_balance_item.isra.0+0x167/0x1490
[ 74.340698][ T5037] ? bpf_ksym_find+0x124/0x1b0
[ 74.346383][ T5037] ? rcu_string_strdup+0x150/0x150
[ 74.352942][ T5037] ? rcu_is_watching+0x12/0xb0
[ 74.361074][ T5037] ? lock_release+0x4bf/0x680
[ 74.366843][ T5037] ? __stack_depot_save+0x247/0x510
[ 74.372861][ T5037] ? _raw_spin_unlock_irqrestore+0x3b/0x70
[ 74.379848][ T5037] ? __stack_depot_save+0x247/0x510
[ 74.385649][ T5037] ? rcu_is_watching+0x12/0xb0
[ 74.391651][ T5037] btrfs_balance+0x1064/0x3ef0
[ 74.398445][ T5037] ? btrfs_relocate_chunk+0x440/0x440
[ 74.405236][ T5037] btrfs_ioctl+0x1362/0x5cf0
[ 74.411393][ T5037] ? tomoyo_path_number_perm+0x190/0x590
[ 74.418483][ T5037] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 74.424917][ T5037] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 74.432366][ T5037] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 74.438518][ T5037] ? do_vfs_ioctl+0x379/0x1920
[ 74.445119][ T5037] ? vfs_fileattr_set+0xbf0/0xbf0
[ 74.450890][ T5037] ? rcu_is_watching+0x12/0xb0
[ 74.458219][ T5037] ? lock_release+0x4bf/0x680
[ 74.464254][ T5037] ? bpf_lsm_file_ioctl+0x9/0x10
[ 74.470489][ T5037] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 74.478362][ T5037] __x64_sys_ioctl+0x18f/0x210
[ 74.483858][ T5037] do_syscall_64+0x38/0xb0
[ 74.488509][ T5037] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 74.495131][ T5037] RIP: 0033:0x7f28ed93a699
[ 74.501940][ T5037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 74.527616][ T5037] RSP: 002b:00007ffff0582c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.541108][ T5037] RAX: ffffffffffffffda RBX: 00007ffff0582c50 RCX: 00007f28ed93a699
[ 74.551666][ T5037] RDX: 00000000200003c0 RSI: 00000000c4009420 RDI: 0000000000000004
[ 74.561679][ T5037] RBP: 0000000000000002 R08: 00007ffff05829e6 R09: 0000000000003233
[ 74.571884][ T5037] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffff0582ca0
[ 74.580059][ T5037] R13: 00007ffff0582f28 R14: 431bde82d7b634db R15: 00007f28ed98301d
[ 74.590423][ T5037]
[ 74.593983][ T5037] Modules linked in:
[ 74.598784][ T5037] ---[ end trace 0000000000000000 ]---
[ 74.604491][ T5037] RIP: 0010:btrfs_free_tree_block+0x788/0xb50
[ 74.610863][ T5037] Code: e8 7d 41 ff fd 31 ff 89 c5 89 c6 e8 22 97 16 fe 40 84 ed 0f 85 e5 fb ff ff e8 e4 9b 16 fe 0f 0b e9 d9 fb ff ff e8 d8 9b 16 fe <0f> 0b e8 d1 9b 16 fe 49 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48
[ 74.633634][ T5037] RSP: 0018:ffffc900039bf338 EFLAGS: 00010293
[ 74.642439][ T5037] RAX: 0000000000000000 RBX: ffff88807344a000 RCX: 0000000000000000
[ 74.651814][ T5037] RDX: ffff888024e50000 RSI: ffffffff83712ba8 RDI: 0000000000000005
[ 74.663737][ T5037] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 74.675006][ T5037] R10: 00000000fffffff4 R11: 0000000000000001 R12: 1ffff92000737e6c
[ 74.687195][ T5037] R13: ffff888076fbe000 R14: 0000000000000001 R15: ffff88807344a008
[ 74.697250][ T5037] FS: 00005555555fc480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 74.708065][ T5037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.716713][ T5037] CR2: 00007fff6f01bfa0 CR3: 0000000027664000 CR4: 00000000003506e0
[ 74.726430][ T5037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.736366][ T5037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.747290][ T5037] Kernel panic - not syncing: Fatal exception
[ 74.754131][ T5037] Kernel Offset: disabled
[ 74.758920][ T5037] Rebooting in 86400 seconds..