./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2710107109
<...>
forked to background, child pid 4645
no interfaces have a carrier
[ 39.874300][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0
[ 39.887355][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts.
execve("./syz-executor2710107109", ["./syz-executor2710107109"], 0x7fffad0c1580 /* 10 vars */) = 0
brk(NULL) = 0x555556e7e000
brk(0x555556e7ed00) = 0x555556e7ed00
arch_prctl(ARCH_SET_FS, 0x555556e7e3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2710107109", 4096) = 28
brk(0x555556e9fd00) = 0x555556e9fd00
brk(0x555556ea0000) = 0x555556ea0000
mprotect(0x7f5b939eb000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f5b939352b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5b93936860}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f5b939352b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5b93936860}, NULL, 8) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e7e690) = 5070
./strace-static-x86_64: Process 5070 attached
[pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5070] setpgid(0, 0) = 0
[pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5070] write(3, "1000", 4) = 4
[pid 5070] close(3) = 0
[pid 5070] memfd_create("syzkaller", 0) = 3
[pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5b8b52b000
syzkaller login: [ 65.706471][ T5070] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5070 'syz-executor271'
[pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5070] munmap(0x7f5b8b52b000, 16777216) = 0
[pid 5070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5070] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5070] close(3) = 0
[pid 5070] mkdir("./file0", 0777) = 0
[ 65.882829][ T5070] loop0: detected capacity change from 0 to 32768
[ 65.896098][ T5070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor271 (5070)
[ 65.917836][ T5070] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 65.926710][ T5070] BTRFS info (device loop0): using free space tree
[pid 5070] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
[pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5070] chdir("./file0") = 0
[pid 5070] ioctl(4, LOOP_CLR_FD) = 0
[pid 5070] close(4) = 0
[pid 5070] creat("./bus", 000) = 4
[ 65.953088][ T5070] BTRFS info (device loop0): enabling ssd optimizations
[ 65.960209][ T5070] BTRFS info (device loop0): auto enabling async discard
[pid 5070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 010) = 5
[pid 5070] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
[ 65.999897][ T27] audit: type=1800 audit(1679293677.788:2): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor271" name="bus" dev="loop0" ino=263 res=0 errno=0
[pid 5070] ioctl(6, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
[pid 5070] fallocate(4, 0, 0, 2622468) = 0
[pid 5070] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7
[pid 5070] write(7, "4", 1) = 1
[ 66.099618][ T5070] FAULT_INJECTION: forcing a failure.
[ 66.099618][ T5070] name failslab, interval 1, probability 0, space 0, times 1
[ 66.112777][ T5070] CPU: 0 PID: 5070 Comm: syz-executor271 Not tainted 6.3.0-rc2-syzkaller-00462-g5cdfdd6da323 #0
[ 66.123239][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 66.133339][ T5070] Call Trace:
[ 66.136697][ T5070]
[ 66.139674][ T5070] dump_stack_lvl+0x1e7/0x2d0
[ 66.144432][ T5070] ? do_syscall_64+0x41/0xc0
[ 66.149083][ T5070] ? nf_tcp_handle_invalid+0x650/0x650
[ 66.154598][ T5070] ? panic+0x770/0x770
[ 66.158760][ T5070] ? __lock_acquire+0x125b/0x1f80
[ 66.163848][ T5070] should_fail_ex+0x3aa/0x4e0
[ 66.168590][ T5070] should_failslab+0x9/0x20
[ 66.173141][ T5070] slab_pre_alloc_hook+0x59/0x2b0
[ 66.178231][ T5070] ? ulist_add_merge+0x14c/0x470
[ 66.183225][ T5070] __kmem_cache_alloc_node+0x4b/0x290
[ 66.187763][ T46] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 66.188642][ T5070] ? ulist_add_merge+0x14c/0x470
[ 66.188692][ T5070] kmalloc_trace+0x2a/0xe0
[ 66.188723][ T5070] ulist_add_merge+0x14c/0x470
[ 66.188758][ T5070] insert_state_fast+0x15a/0x250
[ 66.216937][ T5070] __set_extent_bit+0x1408/0x1ab0
[ 66.222000][ T5070] set_record_extent_bits+0x56/0x90
[ 66.227222][ T5070] qgroup_reserve_data+0x26e/0x8f0
[ 66.232365][ T5070] btrfs_qgroup_reserve_data+0x2e/0xc0
[ 66.237849][ T5070] btrfs_check_data_free_space+0x149/0x240
[ 66.243677][ T5070] btrfs_buffered_write+0x5cf/0x1610
[ 66.249033][ T5070] ? btrfs_do_write_iter+0x1270/0x1270
[ 66.254539][ T5070] ? __lock_acquire+0x1f80/0x1f80
[ 66.259605][ T5070] ? __up_read+0x2bd/0x690
[ 66.264061][ T5070] ? up_read+0x20/0x20
[ 66.268184][ T5070] btrfs_do_write_iter+0xea6/0x1270
[ 66.273470][ T5070] ? btrfs_check_nocow_unlock+0x40/0x40
[ 66.279147][ T5070] vfs_write+0x7b2/0xbb0
[ 66.283449][ T5070] ? file_end_write+0x250/0x250
[ 66.288337][ T5070] ? lockdep_hardirqs_on+0x98/0x140
[ 66.293576][ T5070] ? __fdget_pos+0x265/0x2f0
[ 66.298195][ T5070] ksys_write+0x1a0/0x2c0
[ 66.302550][ T5070] ? __ia32_sys_read+0x90/0x90
[ 66.307346][ T5070] ? syscall_enter_from_user_mode+0x32/0x260
[ 66.313544][ T5070] ? syscall_enter_from_user_mode+0x8c/0x260
[ 66.319549][ T5070] do_syscall_64+0x41/0xc0
[ 66.323988][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 66.329900][ T5070] RIP: 0033:0x7f5b93978b89
[ 66.334326][ T5070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 66.353975][ T5070] RSP: 002b:00007ffd37f8f918 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 66.362434][ T5070] RAX: ffffffffffffffda RBX: 00007ffd37f8f978 RCX: 00007f5b93978b89
[ 66.370434][ T5070] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 66.378439][ T5070] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000034
[ 66.386428][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd37f8f920
[ 66.394413][ T5070] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 66.402413][ T5070]
[ 66.406145][ T5070] ------------[ cut here ]------------
[ 66.411675][ T5070] kernel BUG at fs/btrfs/extent-io-tree.c:379!
[ 66.417875][ T5070] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 66.423956][ T5070] CPU: 0 PID: 5070 Comm: syz-executor271 Not tainted 6.3.0-rc2-syzkaller-00462-g5cdfdd6da323 #0
[ 66.434374][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 66.444430][ T5070] RIP: 0010:insert_state_fast+0x244/0x250
[ 66.450195][ T5070] Code: 34 fe e9 77 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 71 fe ff ff 4c 89 e7 e8 06 78 34 fe e9 64 fe ff ff e8 8c c6 de fd <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53
[ 66.469809][ T5070] RSP: 0018:ffffc90003b8f680 EFLAGS: 00010293
[ 66.475883][ T5070] RAX: ffffffff83aba694 RBX: dffffc0000000000 RCX: ffff888029a81d40
[ 66.483860][ T5070] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 66.491845][ T5070] RBP: 00000000fffffff4 R08: ffffffff83aba5b5 R09: fffffbfff1a02ba3
[ 66.499824][ T5070] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 66.507808][ T5070] R13: ffff88802a488c88 R14: ffff888075e6af00 R15: 0000000000000800
[ 66.515789][ T5070] FS: 0000555556e7e3c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 66.524811][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 66.531404][ T5070] CR2: 00007f69463fd690 CR3: 00000000744fd000 CR4: 00000000003506f0
[ 66.539384][ T5070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 66.547360][ T5070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 66.555348][ T5070] Call Trace:
[ 66.558645][ T5070]
[ 66.561596][ T5070] __set_extent_bit+0x1408/0x1ab0
[ 66.566662][ T5070] set_record_extent_bits+0x56/0x90
[ 66.571883][ T5070] qgroup_reserve_data+0x26e/0x8f0
[ 66.577021][ T5070] btrfs_qgroup_reserve_data+0x2e/0xc0
[ 66.582492][ T5070] btrfs_check_data_free_space+0x149/0x240
[ 66.588327][ T5070] btrfs_buffered_write+0x5cf/0x1610
[ 66.593642][ T5070] ? btrfs_do_write_iter+0x1270/0x1270
[ 66.599125][ T5070] ? __lock_acquire+0x1f80/0x1f80
[ 66.604155][ T5070] ? __up_read+0x2bd/0x690
[ 66.608588][ T5070] ? up_read+0x20/0x20
[ 66.612674][ T5070] btrfs_do_write_iter+0xea6/0x1270
[ 66.617904][ T5070] ? btrfs_check_nocow_unlock+0x40/0x40
[ 66.623469][ T5070] vfs_write+0x7b2/0xbb0
[ 66.627734][ T5070] ? file_end_write+0x250/0x250
[ 66.632815][ T5070] ? lockdep_hardirqs_on+0x98/0x140
[ 66.638041][ T5070] ? __fdget_pos+0x265/0x2f0
[ 66.642679][ T5070] ksys_write+0x1a0/0x2c0
[ 66.647040][ T5070] ? __ia32_sys_read+0x90/0x90
[ 66.651821][ T5070] ? syscall_enter_from_user_mode+0x32/0x260
[ 66.657824][ T5070] ? syscall_enter_from_user_mode+0x8c/0x260
[ 66.663816][ T5070] do_syscall_64+0x41/0xc0
[ 66.668252][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 66.674182][ T5070] RIP: 0033:0x7f5b93978b89
[ 66.678607][ T5070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 66.698224][ T5070] RSP: 002b:00007ffd37f8f918 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 66.706733][ T5070] RAX: ffffffffffffffda RBX: 00007ffd37f8f978 RCX: 00007f5b93978b89
[ 66.714718][ T5070] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 66.722698][ T5070] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000034
[ 66.730693][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd37f8f920
[ 66.738678][ T5070] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 66.746666][ T5070]
[ 66.749687][ T5070] Modules linked in:
[ 66.753830][ T5070] ---[ end trace 0000000000000000 ]---
[ 66.759348][ T5070] RIP: 0010:insert_state_fast+0x244/0x250
[ 66.765136][ T5070] Code: 34 fe e9 77 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 71 fe ff ff 4c 89 e7 e8 06 78 34 fe e9 64 fe ff ff e8 8c c6 de fd <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53
[ 66.784812][ T5070] RSP: 0018:ffffc90003b8f680 EFLAGS: 00010293
[ 66.790931][ T5070] RAX: ffffffff83aba694 RBX: dffffc0000000000 RCX: ffff888029a81d40
[ 66.798952][ T5070] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 66.806959][ T5070] RBP: 00000000fffffff4 R08: ffffffff83aba5b5 R09: fffffbfff1a02ba3
[ 66.815022][ T5070] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 66.823152][ T5070] R13: ffff88802a488c88 R14: ffff888075e6af00 R15: 0000000000000800
[ 66.831186][ T5070] FS: 0000555556e7e3c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 66.840214][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 66.846809][ T5070] CR2: 00007f69463fd690 CR3: 00000000744fd000 CR4: 00000000003506f0
[ 66.854852][ T5070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 66.862879][ T5070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 66.870904][ T5070] Kernel panic - not syncing: Fatal exception
[ 66.877150][ T5070] Kernel Offset: disabled
[ 66.881483][ T5070] Rebooting in 86400 seconds..