./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3222919838
<...>
Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
execve("./syz-executor3222919838", ["./syz-executor3222919838"], 0x7fff2b1a7fe0 /* 10 vars */) = 0
brk(NULL) = 0x55555697f000
brk(0x55555697fd00) = 0x55555697fd00
arch_prctl(ARCH_SET_FS, 0x55555697f380) = 0
set_tid_address(0x55555697f650) = 5041
set_robust_list(0x55555697f660, 24) = 0
rseq(0x55555697fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3222919838", 4096) = 28
getrandom("\x30\xbb\x7f\x29\xc9\xc5\x5d\x68", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555697fd00
brk(0x5555569a0d00) = 0x5555569a0d00
brk(0x5555569a1000) = 0x5555569a1000
mprotect(0x7fd6a63d3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
[ 74.953243][ T28] audit: type=1400 audit(1696099417.002:83): avc: denied { write } for pid=5038 comm="strace-static-x" path="pipe:[3552]" dev="pipefs" ino=3552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 74.978826][ T28] audit: type=1400 audit(1696099417.022:84): avc: denied { append } for pid=4466 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
mkdir("./syzkaller.XJevjn", 0700) = 0
chmod("./syzkaller.XJevjn", 0777) = 0
chdir("./syzkaller.XJevjn") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555697f650) = 5042
./strace-static-x86_64: Process 5042 attached
[ 75.001053][ T28] audit: type=1400 audit(1696099417.022:85): avc: denied { open } for pid=4466 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 75.026134][ T28] audit: type=1400 audit(1696099417.022:86): avc: denied { getattr } for pid=4466 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[pid 5042] set_robust_list(0x55555697f660, 24) = 0
[pid 5042] chdir("./0") = 0
[pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5042] setpgid(0, 0) = 0
[pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5042] write(3, "1000", 4) = 4
[pid 5042] close(3) = 0
[pid 5042] symlink("/dev/binderfs", "./binderfs") = 0
[ 75.049580][ T28] audit: type=1400 audit(1696099417.042:87): avc: denied { execmem } for pid=5041 comm="syz-executor322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 75.069881][ T28] audit: type=1400 audit(1696099417.072:88): avc: denied { read write } for pid=5041 comm="syz-executor322" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5042] memfd_create("syzkaller", 0) = 3
[pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd69df1b000
[ 75.096230][ T28] audit: type=1400 audit(1696099417.072:89): avc: denied { open } for pid=5041 comm="syz-executor322" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 75.101510][ T5042] syz-executor322[5042]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 75.120991][ T28] audit: type=1400 audit(1696099417.072:90): avc: denied { ioctl } for pid=5041 comm="syz-executor322" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5042] munmap(0x7fd69df1b000, 16777216) = 0
[pid 5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5042] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5042] close(3) = 0
[pid 5042] mkdir("./bus", 0777) = 0
[ 75.330510][ T5042] loop0: detected capacity change from 0 to 32768
[ 75.340884][ T28] audit: type=1400 audit(1696099417.392:91): avc: denied { mounton } for pid=5042 comm="syz-executor322" path="/root/syzkaller.XJevjn/0/bus" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 75.344964][ T5042] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor322 (5042)
[ 75.386900][ T5042] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 75.395992][ T5042] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 75.406872][ T5042] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 75.417860][ T5042] BTRFS warning (device loop0): excessive commit interval 622039222
[ 75.425923][ T5042] BTRFS info (device loop0): force zlib compression, level 3
[ 75.433345][ T5042] BTRFS info (device loop0): using free space tree
[pid 5042] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "user_subvol_rm_allowed,noinode_cache,inode_cache,commit=0x00000000251390b6,compress-force,noacl,tree"...) = 0
[pid 5042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5042] chdir("./bus") = 0
[pid 5042] ioctl(4, LOOP_CLR_FD) = 0
[pid 5042] close(4) = 0
[pid 5042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 5042] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5042] write(5, "5", 1) = 1
[ 75.460846][ T5042] BTRFS info (device loop0): enabling ssd optimizations
[ 75.467807][ T5042] BTRFS info (device loop0): auto enabling async discard
[ 75.480488][ T28] audit: type=1400 audit(1696099417.522:92): avc: denied { mount } for pid=5042 comm="syz-executor322" name="/" dev="loop0" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 75.855246][ T5042] FAULT_INJECTION: forcing a failure.
[ 75.855246][ T5042] name failslab, interval 1, probability 0, space 0, times 1
[ 75.868027][ T5042] CPU: 1 PID: 5042 Comm: syz-executor322 Not tainted 6.6.0-rc3-syzkaller-00146-g9f3ebbef746f #0
[ 75.878431][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 75.888484][ T5042] Call Trace:
[ 75.891782][ T5042]
[ 75.894714][ T5042] dump_stack_lvl+0x125/0x1b0
[ 75.899430][ T5042] should_fail_ex+0x496/0x5b0
[ 75.904120][ T5042] should_failslab+0x9/0x20
[ 75.908638][ T5042] kmem_cache_alloc+0x61/0x400
[ 75.913416][ T5042] alloc_extent_state+0x1b/0x2d0
[ 75.918375][ T5042] __set_extent_bit+0xb20/0x1530
[ 75.923331][ T5042] set_extent_bit+0x3b/0x50
[ 75.927847][ T5042] btrfs_alloc_tree_block+0xb60/0x1440
[ 75.933313][ T5042] ? btrfs_alloc_logged_file_extent+0x580/0x580
[ 75.939557][ T5042] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 75.945548][ T5042] __btrfs_cow_block+0x3ce/0x18f0
[ 75.950587][ T5042] ? update_ref_for_cow+0xc10/0xc10
[ 75.955795][ T5042] ? btrfs_qgroup_add_swapped_blocks+0x9d0/0x9d0
[ 75.962126][ T5042] ? reacquire_held_locks+0x4b0/0x4b0
[ 75.967508][ T5042] ? down_write_nested+0x153/0x200
[ 75.972618][ T5042] btrfs_cow_block+0x2f1/0x820
[ 75.977393][ T5042] btrfs_search_slot+0x12a0/0x30e0
[ 75.982504][ T5042] ? kasan_save_stack+0x33/0x50
[ 75.987353][ T5042] ? balance_level+0x2420/0x2420
[ 75.992289][ T5042] ? _raw_read_unlock+0x28/0x40
[ 75.997137][ T5042] ? btrfs_extent_root+0x166/0x1d0
[ 76.002257][ T5042] ? btrfs_csum_root+0x1d0/0x1d0
[ 76.007201][ T5042] lookup_inline_extent_backref+0x293/0x13d0
[ 76.013189][ T5042] ? hash_extent_data_ref+0xf0/0xf0
[ 76.018392][ T5042] lookup_extent_backref+0x46/0x110
[ 76.023609][ T5042] __btrfs_free_extent+0x2a6/0x2c80
[ 76.028818][ T5042] ? lookup_extent_backref+0x110/0x110
[ 76.034281][ T5042] ? __btrfs_run_delayed_refs+0x60a/0x3d10
[ 76.040091][ T5042] ? reacquire_held_locks+0x4b0/0x4b0
[ 76.045469][ T5042] ? _raw_read_unlock+0x28/0x40
[ 76.050322][ T5042] ? btrfs_merge_delayed_refs+0x47e/0x570
[ 76.056048][ T5042] __btrfs_run_delayed_refs+0xd57/0x3d10
[ 76.061697][ T5042] ? check_ref_cleanup+0x3e0/0x3e0
[ 76.066812][ T5042] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.072801][ T5042] ? lock_sync+0x190/0x190
[ 76.077226][ T5042] btrfs_run_delayed_refs+0x1a1/0x510
[ 76.082605][ T5042] btrfs_commit_transaction+0x788/0x3b40
[ 76.088249][ T5042] ? join_transaction+0x450/0xfe0
[ 76.093280][ T5042] ? join_transaction+0x42b/0xfe0
[ 76.098313][ T5042] ? btrfs_record_root_in_trans+0x15b/0x1b0
[ 76.104213][ T5042] ? create_pending_snapshots+0x2d0/0x2d0
[ 76.109946][ T5042] ? start_transaction+0x2a2/0x14f0
[ 76.115158][ T5042] btrfs_sync_fs+0x130/0x770
[ 76.119754][ T5042] ? btrfs_mount_root+0xdd0/0xdd0
[ 76.124799][ T5042] ? vfs_fsync_range+0x220/0x220
[ 76.129743][ T5042] sync_fs_one_sb+0x10c/0x150
[ 76.134425][ T5042] iterate_supers+0xfb/0x230
[ 76.139018][ T5042] ksys_sync+0xac/0x150
[ 76.143179][ T5042] ? vfs_fsync+0x200/0x200
[ 76.147598][ T5042] ? lockdep_hardirqs_on+0x7d/0x100
[ 76.152803][ T5042] ? _raw_spin_unlock_irq+0x2e/0x50
[ 76.158001][ T5042] ? ptrace_notify+0xf4/0x130
[ 76.162676][ T5042] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 76.168917][ T5042] __do_sys_sync+0xe/0x20
[ 76.173258][ T5042] do_syscall_64+0x38/0xb0
[ 76.177675][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.183573][ T5042] RIP: 0033:0x7fd6a635a169
[ 76.187987][ T5042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 76.207593][ T5042] RSP: 002b:00007ffc914bca78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 76.216007][ T5042] RAX: ffffffffffffffda RBX: 00007ffc914bcaa0 RCX: 00007fd6a635a169
[ 76.223977][ T5042] RDX: 00007fd6a6359230 RSI: 00007ffc914bcaa0 RDI: 00007ffc914bcaa0
[ 76.231950][ T5042] RBP: 0000000000000001 R08: 00007ffc914bc817 R09: 0000000000000080
[ 76.239927][ T5042] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc914bcad0
[ 76.247898][ T5042] R13: 00007ffc914bcb10 R14: 0000000001000000 R15: 0000000000000003
[ 76.255873][ T5042]
[pid 5042] sync() = 0
[pid 5042] exit_group(0) = ?
[pid 5042] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555569806f0 /* 4 entries */, 32768) = 104
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556988730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556988730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/bus") = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
getdents64(3, 0x5555569806f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached
, child_tidptr=0x55555697f650) = 5061
[pid 5061] set_robust_list(0x55555697f660, 24) = 0
[pid 5061] chdir("./1") = 0
[pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5061] setpgid(0, 0) = 0
[pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5061] write(3, "1000", 4) = 4
[pid 5061] close(3) = 0
[pid 5061] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5061] memfd_create("syzkaller", 0) = 3
[pid 5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd69df1b000
[pid 5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5061] munmap(0x7fd69df1b000, 16777216) = 0
[pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5061] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5061] close(3) = 0
[pid 5061] mkdir("./bus", 0777) = 0
[ 76.691322][ T5061] loop0: detected capacity change from 0 to 32768
[ 76.701971][ T5061] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor322 (5061)
[ 76.719075][ T5061] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 76.727846][ T5061] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 76.738679][ T5061] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 76.749497][ T5061] BTRFS warning (device loop0): excessive commit interval 622039222
[ 76.757499][ T5061] BTRFS info (device loop0): force zlib compression, level 3
[ 76.764948][ T5061] BTRFS info (device loop0): using free space tree
[pid 5061] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "user_subvol_rm_allowed,noinode_cache,inode_cache,commit=0x00000000251390b6,compress-force,noacl,tree"...) = 0
[pid 5061] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5061] chdir("./bus") = 0
[pid 5061] ioctl(4, LOOP_CLR_FD) = 0
[pid 5061] close(4) = 0
[pid 5061] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid 5061] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5061] write(5, "5", 1) = 1
[ 76.787220][ T5061] BTRFS info (device loop0): enabling ssd optimizations
[ 76.794215][ T5061] BTRFS info (device loop0): auto enabling async discard
[ 76.823731][ T5061] FAULT_INJECTION: forcing a failure.
[ 76.823731][ T5061] name failslab, interval 1, probability 0, space 0, times 0
[ 76.836458][ T5061] CPU: 1 PID: 5061 Comm: syz-executor322 Not tainted 6.6.0-rc3-syzkaller-00146-g9f3ebbef746f #0
[ 76.846890][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 76.856962][ T5061] Call Trace:
[ 76.860256][ T5061]
[ 76.863198][ T5061] dump_stack_lvl+0x125/0x1b0
[ 76.867909][ T5061] should_fail_ex+0x496/0x5b0
[ 76.872608][ T5061] should_failslab+0x9/0x20
[ 76.877138][ T5061] kmem_cache_alloc+0x61/0x400
[ 76.881927][ T5061] btrfs_alloc_tree_block+0xbc3/0x1440
[ 76.887413][ T5061] ? btrfs_alloc_logged_file_extent+0x580/0x580
[ 76.893683][ T5061] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.899695][ T5061] __btrfs_cow_block+0x3ce/0x18f0
[ 76.904757][ T5061] ? update_ref_for_cow+0xc10/0xc10
[ 76.909986][ T5061] ? btrfs_qgroup_add_swapped_blocks+0x9d0/0x9d0
[ 76.916338][ T5061] ? reacquire_held_locks+0x4b0/0x4b0
[ 76.921737][ T5061] ? down_write_nested+0x153/0x200
[ 76.926882][ T5061] btrfs_cow_block+0x2f1/0x820
[ 76.931682][ T5061] btrfs_search_slot+0x12a0/0x30e0
[ 76.936816][ T5061] ? kasan_save_stack+0x33/0x50
[ 76.941694][ T5061] ? balance_level+0x2420/0x2420
[ 76.946649][ T5061] ? _raw_read_unlock+0x28/0x40
[ 76.951520][ T5061] ? btrfs_extent_root+0x166/0x1d0
[ 76.956660][ T5061] ? btrfs_csum_root+0x1d0/0x1d0
[ 76.961628][ T5061] lookup_inline_extent_backref+0x293/0x13d0
[ 76.967634][ T5061] ? hash_extent_data_ref+0xf0/0xf0
[ 76.972856][ T5061] lookup_extent_backref+0x46/0x110
[ 76.978087][ T5061] __btrfs_free_extent+0x2a6/0x2c80
[ 76.983316][ T5061] ? lookup_extent_backref+0x110/0x110
[ 76.988794][ T5061] ? __btrfs_run_delayed_refs+0x60a/0x3d10
[ 76.994624][ T5061] ? reacquire_held_locks+0x4b0/0x4b0
[ 77.000025][ T5061] ? _raw_read_unlock+0x28/0x40
[ 77.004899][ T5061] ? btrfs_merge_delayed_refs+0x47e/0x570
[ 77.010644][ T5061] __btrfs_run_delayed_refs+0xd57/0x3d10
[ 77.016305][ T5061] ? check_ref_cleanup+0x3e0/0x3e0
[ 77.021441][ T5061] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.027450][ T5061] ? lock_sync+0x190/0x190
[ 77.031898][ T5061] btrfs_run_delayed_refs+0x1a1/0x510
[ 77.037294][ T5061] btrfs_commit_transaction+0x788/0x3b40
[ 77.042959][ T5061] ? join_transaction+0x450/0xfe0
[ 77.048010][ T5061] ? join_transaction+0x42b/0xfe0
[ 77.053056][ T5061] ? btrfs_record_root_in_trans+0x15b/0x1b0
[ 77.058949][ T5061] ? create_pending_snapshots+0x2d0/0x2d0
[ 77.064662][ T5061] ? start_transaction+0x2a2/0x14f0
[ 77.069862][ T5061] btrfs_sync_fs+0x130/0x770
[ 77.074447][ T5061] ? btrfs_mount_root+0xdd0/0xdd0
[ 77.079466][ T5061] ? vfs_fsync_range+0x220/0x220
[ 77.084395][ T5061] sync_fs_one_sb+0x10c/0x150
[ 77.089074][ T5061] iterate_supers+0xfb/0x230
[ 77.093682][ T5061] ksys_sync+0xac/0x150
[ 77.097871][ T5061] ? vfs_fsync+0x200/0x200
[ 77.102302][ T5061] ? lockdep_hardirqs_on+0x7d/0x100
[ 77.107503][ T5061] ? _raw_spin_unlock_irq+0x2e/0x50
[ 77.112711][ T5061] ? ptrace_notify+0xf4/0x130
[ 77.117388][ T5061] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 77.123638][ T5061] __do_sys_sync+0xe/0x20
[ 77.127962][ T5061] do_syscall_64+0x38/0xb0
[ 77.132368][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.138262][ T5061] RIP: 0033:0x7fd6a635a169
[ 77.142689][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.162304][ T5061] RSP: 002b:00007ffc914bca78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 77.170704][ T5061] RAX: ffffffffffffffda RBX: 00007ffc914bcaa0 RCX: 00007fd6a635a169
[ 77.178676][ T5061] RDX: 00007fd6a6359230 RSI: 00007ffc914bcaa0 RDI: 00007ffc914bcaa0
[ 77.186651][ T5061] RBP: 0000000000000001 R08: 00007ffc914bc817 R09: 0000000000000080
[ 77.194608][ T5061] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc914bcad0
[ 77.202576][ T5061] R13: 00007ffc914bcb10 R14: 0000000001000000 R15: 0000000000000003
[ 77.210556][ T5061]
[ 77.216840][ T5061] BTRFS: error (device loop0: state A) in __btrfs_free_extent:3094: errno=-12 Out of memory
[ 77.227645][ T5061] BTRFS info (device loop0: state EA): forced readonly
[pid 5061] sync() = 0
[pid 5061] exit_group(0) = ?
[pid 5061] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} ---
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555569806f0 /* 4 entries */, 32768) = 104
[ 77.234911][ T5061] BTRFS error (device loop0: state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -12
[ 77.248708][ T5061] BTRFS: error (device loop0: state EA) in btrfs_run_delayed_refs:2163: errno=-12 Out of memory
[ 77.298913][ T5041] ------------[ cut here ]------------
[ 77.305296][ T5041] WARNING: CPU: 1 PID: 5041 at fs/btrfs/space-info.h:198 btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.317331][ T5041] Modules linked in:
[ 77.321640][ T5041] CPU: 1 PID: 5041 Comm: syz-executor322 Not tainted 6.6.0-rc3-syzkaller-00146-g9f3ebbef746f #0
[ 77.332292][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 77.342483][ T5041] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.349958][ T5041] Code: fd e9 69 fc ff ff e8 a7 d8 f0 fd 49 89 ee 4c 89 e6 49 f7 de 4c 89 f7 e8 a6 d3 f0 fd 4d 39 f4 0f 83 7c fd ff ff e8 88 d8 f0 fd <0f> 0b 45 31 e4 e9 75 fd ff ff e8 79 d8 f0 fd 48 8d 7b 18 be ff ff
[ 77.369598][ T5041] RSP: 0018:ffffc9000349fab8 EFLAGS: 00010293
[ 77.375692][ T5041] RAX: 0000000000000000 RBX: ffff88801f541800 RCX: 0000000000000000
[ 77.383684][ T5041] RDX: ffff88807d0420c0 RSI: ffffffff8395ec88 RDI: 0000000000000006
[ 77.391680][ T5041] RBP: ffffffffffea0000 R08: 0000000000000006 R09: 0000000000160000
[ 77.399637][ T5041] R10: 000000000015f000 R11: ffff88807b6e4a00 R12: 000000000015f000
[ 77.407630][ T5041] R13: ffff88801f541860 R14: 0000000000160000 R15: 0000000000000005
[ 77.415626][ T5041] FS: 000055555697f380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 77.424610][ T5041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.431241][ T5041] CR2: 00005555569886f8 CR3: 00000000223a7000 CR4: 00000000003506e0
[ 77.439218][ T5041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 77.447241][ T5041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 77.455250][ T5041] Call Trace:
[ 77.458544][ T5041]
[ 77.461512][ T5041] ? show_regs+0x8f/0xa0
[ 77.465767][ T5041] ? __warn+0xe6/0x380
[ 77.469825][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.476769][ T5041] ? report_bug+0x3bc/0x580
[ 77.481313][ T5041] ? handle_bug+0x3c/0x70
[ 77.485632][ T5041] ? exc_invalid_op+0x17/0x40
[ 77.490344][ T5041] ? asm_exc_invalid_op+0x1a/0x20
[ 77.495384][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.502260][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.509119][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.515993][ T5041] btrfs_block_rsv_release+0x566/0x670
[ 77.521520][ T5041] btrfs_release_global_block_rsv+0x26/0x2e0
[ 77.527489][ T5041] btrfs_free_block_groups+0xbb6/0x13d0
[ 77.533060][ T5041] ? free_root_pointers+0x701/0x980
[ 77.538271][ T5041] close_ctree+0x8c4/0xdd0
[ 77.542727][ T5041] ? btrfs_cleanup_transaction.isra.0+0x1200/0x1200
[ 77.549334][ T5041] ? find_rule+0x370/0x370
[ 77.553798][ T5041] ? __fsnotify_vfsmount_delete+0x20/0x20
[ 77.559545][ T5041] ? dispose_list+0x1e0/0x1e0
[ 77.564261][ T5041] ? fscrypt_destroy_keyring+0x1e/0x390
[ 77.569839][ T5041] ? btrfs_set_super+0x70/0x70
[ 77.574646][ T5041] generic_shutdown_super+0x161/0x3c0
[ 77.580071][ T5041] kill_anon_super+0x3a/0x60
[ 77.584681][ T5041] btrfs_kill_super+0x3b/0x50
[ 77.589348][ T5041] deactivate_locked_super+0x9a/0x170
[ 77.594750][ T5041] deactivate_super+0xde/0x100
[ 77.599549][ T5041] cleanup_mnt+0x222/0x3d0
[ 77.604009][ T5041] task_work_run+0x14d/0x240
[ 77.608618][ T5041] ? task_work_cancel+0x30/0x30
[ 77.613503][ T5041] ptrace_notify+0x10c/0x130
[ 77.618100][ T5041] syscall_exit_to_user_mode_prepare+0x120/0x220
[ 77.624454][ T5041] syscall_exit_to_user_mode+0xd/0x60
[ 77.629843][ T5041] do_syscall_64+0x44/0xb0
[ 77.634286][ T5041] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.640227][ T5041] RIP: 0033:0x7fd6a635b3c7
[ 77.644641][ T5041] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 77.664329][ T5041] RSP: 002b:00007ffc914bb988 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 77.672776][ T5041] RAX: 0000000000000000 RBX: 0000000000012a99 RCX: 00007fd6a635b3c7
[ 77.680803][ T5041] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc914bba40
[ 77.688790][ T5041] RBP: 00007ffc914bba40 R08: 0000000000000000 R09: 0000000000000000
[ 77.696809][ T5041] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc914bcab0
[ 77.704806][ T5041] R13: 00005555569806c0 R14: 0000000000000002 R15: 431bde82d7b634db
[ 77.712808][ T5041]
[ 77.715832][ T5041] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.723093][ T5041] CPU: 1 PID: 5041 Comm: syz-executor322 Not tainted 6.6.0-rc3-syzkaller-00146-g9f3ebbef746f #0
[ 77.733488][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 77.743527][ T5041] Call Trace:
[ 77.746794][ T5041]
[ 77.749711][ T5041] dump_stack_lvl+0xd9/0x1b0
[ 77.754291][ T5041] panic+0x6a6/0x750
[ 77.758175][ T5041] ? panic_smp_self_stop+0xa0/0xa0
[ 77.763274][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.770116][ T5041] check_panic_on_warn+0xab/0xb0
[ 77.775038][ T5041] __warn+0xf2/0x380
[ 77.778918][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.785750][ T5041] report_bug+0x3bc/0x580
[ 77.790078][ T5041] handle_bug+0x3c/0x70
[ 77.794239][ T5041] exc_invalid_op+0x17/0x40
[ 77.798731][ T5041] asm_exc_invalid_op+0x1a/0x20
[ 77.803575][ T5041] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.811035][ T5041] Code: fd e9 69 fc ff ff e8 a7 d8 f0 fd 49 89 ee 4c 89 e6 49 f7 de 4c 89 f7 e8 a6 d3 f0 fd 4d 39 f4 0f 83 7c fd ff ff e8 88 d8 f0 fd <0f> 0b 45 31 e4 e9 75 fd ff ff e8 79 d8 f0 fd 48 8d 7b 18 be ff ff
[ 77.830640][ T5041] RSP: 0018:ffffc9000349fab8 EFLAGS: 00010293
[ 77.836704][ T5041] RAX: 0000000000000000 RBX: ffff88801f541800 RCX: 0000000000000000
[ 77.844670][ T5041] RDX: ffff88807d0420c0 RSI: ffffffff8395ec88 RDI: 0000000000000006
[ 77.852635][ T5041] RBP: ffffffffffea0000 R08: 0000000000000006 R09: 0000000000160000
[ 77.860602][ T5041] R10: 000000000015f000 R11: ffff88807b6e4a00 R12: 000000000015f000
[ 77.868566][ T5041] R13: ffff88801f541860 R14: 0000000000160000 R15: 0000000000000005
[ 77.876534][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.883398][ T5041] ? btrfs_space_info_update_bytes_may_use+0x448/0x590
[ 77.890256][ T5041] btrfs_block_rsv_release+0x566/0x670
[ 77.895716][ T5041] btrfs_release_global_block_rsv+0x26/0x2e0
[ 77.901701][ T5041] btrfs_free_block_groups+0xbb6/0x13d0
[ 77.907253][ T5041] ? free_root_pointers+0x701/0x980
[ 77.912457][ T5041] close_ctree+0x8c4/0xdd0
[ 77.916883][ T5041] ? btrfs_cleanup_transaction.isra.0+0x1200/0x1200
[ 77.923480][ T5041] ? find_rule+0x370/0x370
[ 77.927895][ T5041] ? __fsnotify_vfsmount_delete+0x20/0x20
[ 77.933624][ T5041] ? dispose_list+0x1e0/0x1e0
[ 77.938303][ T5041] ? fscrypt_destroy_keyring+0x1e/0x390
[ 77.943855][ T5041] ? btrfs_set_super+0x70/0x70
[ 77.948622][ T5041] generic_shutdown_super+0x161/0x3c0
[ 77.954005][ T5041] kill_anon_super+0x3a/0x60
[ 77.958605][ T5041] btrfs_kill_super+0x3b/0x50
[ 77.963285][ T5041] deactivate_locked_super+0x9a/0x170
[ 77.968781][ T5041] deactivate_super+0xde/0x100
[ 77.973563][ T5041] cleanup_mnt+0x222/0x3d0
[ 77.977985][ T5041] task_work_run+0x14d/0x240
[ 77.982583][ T5041] ? task_work_cancel+0x30/0x30
[ 77.987438][ T5041] ptrace_notify+0x10c/0x130
[ 77.992028][ T5041] syscall_exit_to_user_mode_prepare+0x120/0x220
[ 77.998358][ T5041] syscall_exit_to_user_mode+0xd/0x60
[ 78.003737][ T5041] do_syscall_64+0x44/0xb0
[ 78.008157][ T5041] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.014054][ T5041] RIP: 0033:0x7fd6a635b3c7
[ 78.018464][ T5041] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 78.038075][ T5041] RSP: 002b:00007ffc914bb988 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 78.046492][ T5041] RAX: 0000000000000000 RBX: 0000000000012a99 RCX: 00007fd6a635b3c7
[ 78.054461][ T5041] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc914bba40
[ 78.062430][ T5041] RBP: 00007ffc914bba40 R08: 0000000000000000 R09: 0000000000000000
[ 78.070399][ T5041] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc914bcab0
[ 78.078365][ T5041] R13: 00005555569806c0 R14: 0000000000000002 R15: 431bde82d7b634db
[ 78.086337][ T5041]
[ 78.089517][ T5041] Kernel Offset: disabled
[ 78.093938][ T5041] Rebooting in 86400 seconds..