./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1117105654 <...> forked to background, child pid 4639 no interfaces have a carrier [ 23.259258][ T4640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.269919][ T4640] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. execve("./syz-executor1117105654", ["./syz-executor1117105654"], 0x7ffd27cbe110 /* 10 vars */) = 0 brk(NULL) = 0x5555557a8000 brk(0x5555557a8c40) = 0x5555557a8c40 arch_prctl(ARCH_SET_FS, 0x5555557a8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1117105654", 4096) = 28 brk(0x5555557c9c40) = 0x5555557c9c40 brk(0x5555557ca000) = 0x5555557ca000 mprotect(0x7f2b29823000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 5061 mkdir("./syzkaller.h0BUOS", 0700) = 0 chmod("./syzkaller.h0BUOS", 0777) = 0 chdir("./syzkaller.h0BUOS") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557a85d0) = 5063 ./strace-static-x86_64: Process 5063 attached [pid 5063] chdir("./0") = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] memfd_create("syzkaller", 0) = 3 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2b21362000 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5063] munmap(0x7f2b21362000, 16777216) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file0", 0777) = 0 syzkaller login: [ 42.852067][ T5063] loop0: detected capacity change from 0 to 32768 [ 42.862491][ T5063] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop0 scanned by syz-executor111 (5063) [ 42.879583][ T5063] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 42.889084][ T5063] BTRFS info (device loop0): using free space tree [pid 5063] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file0") = 0 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [pid 5063] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5063] write(4, "17", 2) = 2 [ 42.907293][ T5063] BTRFS info (device loop0): enabling ssd optimizations [ 42.914378][ T5063] BTRFS info (device loop0): auto enabling async discard [ 42.931975][ T5063] FAULT_INJECTION: forcing a failure. [ 42.931975][ T5063] name failslab, interval 1, probability 0, space 0, times 1 [ 42.944845][ T5063] CPU: 1 PID: 5063 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 42.953525][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 42.963574][ T5063] Call Trace: [ 42.966843][ T5063] [ 42.969761][ T5063] dump_stack_lvl+0xd1/0x138 [ 42.974367][ T5063] should_fail_ex.cold+0x5/0xa [ 42.979138][ T5063] should_failslab+0x9/0x20 [ 42.983636][ T5063] __kmem_cache_alloc_node+0x5b/0x430 [ 42.989005][ T5063] ? join_transaction+0x145/0x10e0 [ 42.994115][ T5063] kmalloc_trace+0x26/0x60 [ 42.998529][ T5063] join_transaction+0x145/0x10e0 [ 43.003553][ T5063] start_transaction+0x3eb/0x1410 [ 43.008582][ T5063] btrfs_create_common+0x1a9/0x260 [ 43.013689][ T5063] ? btrfs_tmpfile+0x420/0x420 [ 43.018453][ T5063] ? do_raw_spin_unlock+0x175/0x230 [ 43.024080][ T5063] ? _raw_spin_unlock+0x28/0x40 [ 43.028930][ T5063] ? inode_init_owner+0x376/0x440 [ 43.033954][ T5063] btrfs_mkdir+0xc7/0x100 [ 43.038277][ T5063] vfs_mkdir+0x48d/0x740 [ 43.042518][ T5063] do_mkdirat+0x27b/0x2f0 [ 43.046845][ T5063] ? __ia32_sys_mknod+0xb0/0xb0 [ 43.051691][ T5063] ? getname_flags.part.0+0x1dd/0x4f0 [ 43.057147][ T5063] __x64_sys_mkdir+0xf6/0x140 [ 43.061821][ T5063] do_syscall_64+0x39/0xb0 [ 43.066329][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.072215][ T5063] RIP: 0033:0x7f2b297aec97 [ 43.076623][ T5063] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.096320][ T5063] RSP: 002b:00007ffe7ab6eaf8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [pid 5063] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5063] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5063] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5063, si_uid=0, si_status=SIGSEGV, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555557a9620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 43.104736][ T5063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b297aec97 [ 43.112696][ T5063] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000040 [ 43.120660][ T5063] RBP: 00007ffe7ab6eba0 R08: 0000000000000000 R09: 0000000020000000 [ 43.128620][ T5063] R10: 00007ffe7ab6ea76 R11: 0000000000000286 R12: 00000000ffffffff [ 43.136593][ T5063] R13: 0000000020000040 R14: 0000000020000140 R15: 0000000000000000 [ 43.144566][ T5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555557b1660 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555557b1660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x5555557a9620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5085 attached , child_tidptr=0x5555557a85d0) = 5085 [pid 5085] chdir("./1") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2b21362000 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5085] munmap(0x7f2b21362000, 16777216) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5085] close(3) = 0 [pid 5085] mkdir("./file0", 0777) = 0 [ 43.384334][ T5085] loop0: detected capacity change from 0 to 32768 [ 43.395949][ T5085] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 43.405394][ T5085] BTRFS info (device loop0): using free space tree [ 43.421107][ T5085] BTRFS info (device loop0): enabling ssd optimizations [pid 5085] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./file0") = 0 [pid 5085] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] close(4) = 0 [pid 5085] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5085] write(4, "17", 2) = 2 [ 43.428078][ T5085] BTRFS info (device loop0): auto enabling async discard [ 43.447676][ T5085] FAULT_INJECTION: forcing a failure. [ 43.447676][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 43.460558][ T5085] CPU: 0 PID: 5085 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 43.469252][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 43.479314][ T5085] Call Trace: [ 43.482594][ T5085] [ 43.485536][ T5085] dump_stack_lvl+0xd1/0x138 [ 43.490140][ T5085] should_fail_ex.cold+0x5/0xa [ 43.494922][ T5085] ? btrfs_set_inode_index_count+0xd5/0x340 [ 43.500825][ T5085] should_failslab+0x9/0x20 [ 43.505345][ T5085] kmem_cache_alloc+0x5a/0x430 [ 43.510142][ T5085] btrfs_set_inode_index_count+0xd5/0x340 [ 43.515879][ T5085] ? get_extent_allocation_hint+0x130/0x130 [ 43.521786][ T5085] ? btrfs_get_delayed_node+0xfd/0x5b0 [ 43.527269][ T5085] ? btrfs_async_run_delayed_root+0x720/0x720 [ 43.533368][ T5085] btrfs_create_new_inode+0x1fb1/0x26b0 [ 43.538950][ T5085] ? btrfs_link+0x7f0/0x7f0 [ 43.543563][ T5085] ? record_root_in_trans+0x2f7/0x3e0 [ 43.548958][ T5085] ? btrfs_record_root_in_trans+0x15a/0x1b0 [ 43.554864][ T5085] ? start_transaction+0x2aa/0x1410 [ 43.560077][ T5085] btrfs_create_common+0x1d4/0x260 [ 43.565192][ T5085] ? btrfs_tmpfile+0x420/0x420 [ 43.569961][ T5085] ? do_raw_spin_unlock+0x175/0x230 [ 43.575150][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 43.579994][ T5085] ? inode_init_owner+0x376/0x440 [ 43.585016][ T5085] btrfs_mkdir+0xc7/0x100 [ 43.589346][ T5085] vfs_mkdir+0x48d/0x740 [ 43.593589][ T5085] do_mkdirat+0x27b/0x2f0 [ 43.597922][ T5085] ? __ia32_sys_mknod+0xb0/0xb0 [ 43.602770][ T5085] ? getname_flags.part.0+0x1dd/0x4f0 [ 43.608230][ T5085] __x64_sys_mkdir+0xf6/0x140 [ 43.612907][ T5085] do_syscall_64+0x39/0xb0 [ 43.617322][ T5085] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.623206][ T5085] RIP: 0033:0x7f2b297aec97 [ 43.627615][ T5085] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.647216][ T5085] RSP: 002b:00007ffe7ab6eaf8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 43.655624][ T5085] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b297aec97 [ 43.663590][ T5085] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000040 [ 43.671556][ T5085] RBP: 00007ffe7ab6eba0 R08: 0000000000000000 R09: 0000000020000000 [pid 5085] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5085] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5085] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5085, si_uid=0, si_status=SIGSEGV, si_utime=5 /* 0.05 s */, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555557a9620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 43.679517][ T5085] R10: 00007ffe7ab6ea76 R11: 0000000000000286 R12: 00000000ffffffff [ 43.687486][ T5085] R13: 0000000020000040 R14: 0000000020000140 R15: 0000000000000000 [ 43.695474][ T5085] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555557b1660 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555557b1660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x5555557a9620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557a85d0) = 5104 ./strace-static-x86_64: Process 5104 attached [pid 5104] chdir("./2") = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2b21362000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5104] munmap(0x7f2b21362000, 16777216) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 43.876449][ T5104] loop0: detected capacity change from 0 to 32768 [ 43.888051][ T5104] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 43.897502][ T5104] BTRFS info (device loop0): using free space tree [ 43.912707][ T5104] BTRFS info (device loop0): enabling ssd optimizations [ 43.919742][ T5104] BTRFS info (device loop0): auto enabling async discard [pid 5104] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5104] write(4, "17", 2) = 2 [ 43.942774][ T5104] FAULT_INJECTION: forcing a failure. [ 43.942774][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 43.955615][ T5104] CPU: 0 PID: 5104 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 43.964301][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 43.974365][ T5104] Call Trace: [ 43.977646][ T5104] [ 43.980590][ T5104] dump_stack_lvl+0xd1/0x138 [ 43.985202][ T5104] should_fail_ex.cold+0x5/0xa [ 43.989987][ T5104] ? btrfs_set_inode_index_count+0xd5/0x340 [ 43.995899][ T5104] should_failslab+0x9/0x20 [ 44.000418][ T5104] kmem_cache_alloc+0x5a/0x430 [ 44.005198][ T5104] btrfs_set_inode_index_count+0xd5/0x340 [ 44.010936][ T5104] ? get_extent_allocation_hint+0x130/0x130 [ 44.016845][ T5104] ? btrfs_get_delayed_node+0xfd/0x5b0 [ 44.022331][ T5104] ? btrfs_async_run_delayed_root+0x720/0x720 [ 44.028429][ T5104] btrfs_create_new_inode+0x1fb1/0x26b0 [ 44.034002][ T5104] ? btrfs_link+0x7f0/0x7f0 [ 44.038536][ T5104] ? record_root_in_trans+0x2f7/0x3e0 [ 44.043927][ T5104] ? btrfs_record_root_in_trans+0x15a/0x1b0 [ 44.049839][ T5104] ? start_transaction+0x2aa/0x1410 [ 44.055064][ T5104] btrfs_create_common+0x1d4/0x260 [ 44.060188][ T5104] ? btrfs_tmpfile+0x420/0x420 [ 44.064963][ T5104] ? do_raw_spin_unlock+0x175/0x230 [ 44.070173][ T5104] ? _raw_spin_unlock+0x28/0x40 [ 44.075029][ T5104] ? inode_init_owner+0x376/0x440 [ 44.080041][ T5104] btrfs_mkdir+0xc7/0x100 [ 44.084360][ T5104] vfs_mkdir+0x48d/0x740 [ 44.088605][ T5104] do_mkdirat+0x27b/0x2f0 [ 44.092955][ T5104] ? __ia32_sys_mknod+0xb0/0xb0 [ 44.097805][ T5104] ? getname_flags.part.0+0x1dd/0x4f0 [ 44.103201][ T5104] __x64_sys_mkdir+0xf6/0x140 [ 44.107886][ T5104] do_syscall_64+0x39/0xb0 [ 44.112299][ T5104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.118197][ T5104] RIP: 0033:0x7f2b297aec97 [ 44.122683][ T5104] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 5104] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5104] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5104] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5104, si_uid=0, si_status=SIGSEGV, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555557a9620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 44.142280][ T5104] RSP: 002b:00007ffe7ab6eaf8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 44.150718][ T5104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b297aec97 [ 44.158683][ T5104] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000040 [ 44.166638][ T5104] RBP: 00007ffe7ab6eba0 R08: 0000000000000000 R09: 0000000020000000 [ 44.174603][ T5104] R10: 00007ffe7ab6ea76 R11: 0000000000000286 R12: 00000000ffffffff [ 44.182573][ T5104] R13: 0000000020000040 R14: 0000000020000140 R15: 0000000000000000 [ 44.190624][ T5104] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555557b1660 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555557b1660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x5555557a9620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557a85d0) = 5124 ./strace-static-x86_64: Process 5124 attached [pid 5124] chdir("./3") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2b21362000 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5124] munmap(0x7f2b21362000, 16777216) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [pid 5124] close(4) = 0 [pid 5124] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5124] write(4, "17", 2) = 2 [ 44.369563][ T5124] loop0: detected capacity change from 0 to 32768 [ 44.380021][ T5124] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 44.389454][ T5124] BTRFS info (device loop0): using free space tree [ 44.404776][ T5124] BTRFS info (device loop0): enabling ssd optimizations [ 44.411706][ T5124] BTRFS info (device loop0): auto enabling async discard [ 44.434915][ T5124] FAULT_INJECTION: forcing a failure. [ 44.434915][ T5124] name failslab, interval 1, probability 0, space 0, times 0 [ 44.449234][ T5124] CPU: 1 PID: 5124 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 44.457916][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 44.467973][ T5124] Call Trace: [ 44.471252][ T5124] [ 44.474189][ T5124] dump_stack_lvl+0xd1/0x138 [ 44.478796][ T5124] should_fail_ex.cold+0x5/0xa [ 44.483580][ T5124] ? btrfs_add_delayed_tree_ref+0x23f/0x1080 [ 44.489578][ T5124] should_failslab+0x9/0x20 [ 44.494184][ T5124] kmem_cache_alloc+0x5a/0x430 [ 44.498966][ T5124] btrfs_add_delayed_tree_ref+0x23f/0x1080 [ 44.504799][ T5124] ? btrfs_delete_ref_head+0x2c0/0x2c0 [ 44.510273][ T5124] ? rcu_read_lock_sched_held+0x3e/0x70 [ 44.515850][ T5124] ? trace_kmem_cache_alloc+0x35/0x100 [ 44.521324][ T5124] ? kmem_cache_alloc+0x234/0x430 [ 44.526365][ T5124] btrfs_alloc_tree_block+0xe38/0x1320 [ 44.531848][ T5124] ? btrfs_alloc_logged_file_extent+0x600/0x600 [ 44.538105][ T5124] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 44.544088][ T5124] ? memcpy+0x3d/0x60 [ 44.548066][ T5124] __btrfs_cow_block+0x3b2/0x1420 [ 44.553093][ T5124] ? update_ref_for_cow+0xb30/0xb30 [ 44.558287][ T5124] ? btrfs_qgroup_add_swapped_blocks+0x990/0x990 [ 44.564626][ T5124] btrfs_cow_block+0x2fa/0x950 [ 44.569392][ T5124] btrfs_search_slot+0x11c7/0x2c90 [ 44.574508][ T5124] ? split_leaf+0x13c0/0x13c0 [ 44.579183][ T5124] ? preempt_schedule_thunk+0x1a/0x20 [ 44.584554][ T5124] ? preempt_schedule_common+0x59/0xc0 [ 44.590022][ T5124] btrfs_insert_empty_items+0xbd/0x1c0 [ 44.595489][ T5124] btrfs_create_new_inode+0x7be/0x26b0 [ 44.600954][ T5124] ? btrfs_link+0x7f0/0x7f0 [ 44.605457][ T5124] ? record_root_in_trans+0x2f7/0x3e0 [ 44.610836][ T5124] btrfs_create_common+0x1d4/0x260 [ 44.615945][ T5124] ? btrfs_tmpfile+0x420/0x420 [ 44.620715][ T5124] ? do_raw_spin_unlock+0x175/0x230 [ 44.625992][ T5124] ? _raw_spin_unlock+0x28/0x40 [ 44.630836][ T5124] ? inode_init_owner+0x376/0x440 [ 44.635863][ T5124] btrfs_mkdir+0xc7/0x100 [ 44.640191][ T5124] vfs_mkdir+0x48d/0x740 [ 44.644434][ T5124] do_mkdirat+0x27b/0x2f0 [ 44.648763][ T5124] ? __ia32_sys_mknod+0xb0/0xb0 [ 44.653614][ T5124] ? getname_flags.part.0+0x1dd/0x4f0 [ 44.658986][ T5124] __x64_sys_mkdir+0xf6/0x140 [ 44.663672][ T5124] do_syscall_64+0x39/0xb0 [ 44.668084][ T5124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.674057][ T5124] RIP: 0033:0x7f2b297aec97 [ 44.678459][ T5124] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.698231][ T5124] RSP: 002b:00007ffe7ab6eaf8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 44.706635][ T5124] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b297aec97 [ 44.714681][ T5124] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000040 [ 44.722640][ T5124] RBP: 00007ffe7ab6eba0 R08: 0000000000000000 R09: 0000000020000000 [pid 5124] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5124] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5124] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5124, si_uid=0, si_status=SIGSEGV, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555557a9620 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 [ 44.730605][ T5124] R10: 00007ffe7ab6ea76 R11: 0000000000000286 R12: 00000000ffffffff [ 44.738568][ T5124] R13: 0000000020000040 R14: 0000000020000140 R15: 0000000000000000 [ 44.746544][ T5124] [ 44.754629][ T5124] BTRFS error (device loop0: state A): Transaction aborted (error -12) [ 44.762917][ T5124] BTRFS: error (device loop0: state A) in btrfs_create_new_inode:6484: errno=-12 Out of memory [ 44.773764][ T5124] BTRFS info (device loop0: state EA): forced readonly [ 44.804429][ T5061] ------------[ cut here ]------------ [ 44.810809][ T5061] WARNING: CPU: 0 PID: 5061 at fs/btrfs/space-info.h:199 btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 44.822379][ T5061] Modules linked in: [ 44.826310][ T5061] CPU: 0 PID: 5061 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 44.835005][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 44.845117][ T5061] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 44.852598][ T5061] Code: fd e9 77 fb ff ff e8 4b f7 fc fd 4d 89 e6 48 89 de 49 f7 de 4c 89 f7 e8 8a f3 fc fd 49 39 de 0f 86 b5 fc ff ff e8 2c f7 fc fd <0f> 0b 31 db e9 af fc ff ff e8 1e f7 fc fd 48 8d 7d 18 be ff ff ff [ 44.872257][ T5061] RSP: 0018:ffffc90003e0fa90 EFLAGS: 00010293 [ 44.878365][ T5061] RAX: 0000000000000000 RBX: 00000000000df000 RCX: 0000000000000000 [ 44.886384][ T5061] RDX: ffff888029838000 RSI: ffffffff83846b94 RDI: 0000000000000006 [ 44.894428][ T5061] RBP: ffff888074e36800 R08: 0000000000000006 R09: 00000000000e0000 [ 44.902402][ T5061] R10: 00000000000df000 R11: 0000000000000000 R12: fffffffffff20000 [ 44.910400][ T5061] R13: ffff888074e36860 R14: 00000000000e0000 R15: 0000000000000002 [ 44.918426][ T5061] FS: 00005555557a8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 44.927493][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.934099][ T5061] CR2: 00007ffe7ab6dbfc CR3: 000000001c928000 CR4: 0000000000350ef0 [ 44.942052][ T5061] Call Trace: [ 44.945356][ T5061] [ 44.948288][ T5061] btrfs_block_rsv_release+0x519/0x650 [ 44.953872][ T5061] btrfs_release_global_block_rsv+0x26/0x2e0 [ 44.959866][ T5061] btrfs_free_block_groups+0x958/0x1110 [ 44.965455][ T5061] close_ctree+0xd23/0xdcf [ 44.969875][ T5061] ? btrfs_cleanup_one_transaction.cold+0x5d/0x5d [ 44.976315][ T5061] ? hook_sb_remount+0xf0/0xf0 [ 44.981093][ T5061] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 44.986846][ T5061] ? dispose_list+0x1e0/0x1e0 [ 44.991537][ T5061] ? parse_rescue_options.cold+0x21d/0x21d [ 44.997380][ T5061] generic_shutdown_super+0x158/0x410 [ 45.002773][ T5061] kill_anon_super+0x3a/0x60 [ 45.007389][ T5061] btrfs_kill_super+0x3c/0x50 [ 45.012166][ T5061] deactivate_locked_super+0x98/0x160 [ 45.017560][ T5061] deactivate_super+0xb1/0xd0 [ 45.022248][ T5061] cleanup_mnt+0x2ae/0x3d0 [ 45.026691][ T5061] task_work_run+0x16f/0x270 [ 45.031292][ T5061] ? task_work_cancel+0x30/0x30 [ 45.036191][ T5061] ? __x64_sys_umount+0x118/0x190 [ 45.041237][ T5061] ptrace_notify+0x118/0x140 [ 45.045887][ T5061] syscall_exit_to_user_mode_prepare+0x129/0x280 [ 45.052233][ T5061] syscall_exit_to_user_mode+0xd/0x50 [ 45.057653][ T5061] do_syscall_64+0x46/0xb0 [ 45.062090][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.068010][ T5061] RIP: 0033:0x7f2b297b0e57 [ 45.072423][ T5061] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.092061][ T5061] RSP: 002b:00007ffe7ab6dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 45.100497][ T5061] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2b297b0e57 [ 45.108487][ T5061] RDX: 00007ffe7ab6dca9 RSI: 000000000000000a RDI: 00007ffe7ab6dca0 [ 45.116475][ T5061] RBP: 00007ffe7ab6dca0 R08: 00000000ffffffff R09: 00007ffe7ab6da80 [ 45.124461][ T5061] R10: 00005555557a9653 R11: 0000000000000206 R12: 00007ffe7ab6ed20 [ 45.132431][ T5061] R13: 00005555557a95f0 R14: 00007ffe7ab6dc10 R15: 0000000000000004 [ 45.140435][ T5061] [ 45.143555][ T5061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 45.150815][ T5061] CPU: 0 PID: 5061 Comm: syz-executor111 Not tainted 6.2.0-rc5-syzkaller #0 [ 45.159549][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 45.169581][ T5061] Call Trace: [ 45.172924][ T5061] [ 45.175834][ T5061] dump_stack_lvl+0xd1/0x138 [ 45.180412][ T5061] panic+0x2cc/0x626 [ 45.184290][ T5061] ? panic_print_sys_info.part.0+0x110/0x110 [ 45.190254][ T5061] ? btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 45.197082][ T5061] check_panic_on_warn.cold+0x19/0x35 [ 45.202437][ T5061] __warn+0xf2/0x1a0 [ 45.206316][ T5061] ? btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 45.213168][ T5061] report_bug+0x1c0/0x210 [ 45.217489][ T5061] handle_bug+0x3c/0x70 [ 45.221640][ T5061] exc_invalid_op+0x18/0x50 [ 45.226228][ T5061] asm_exc_invalid_op+0x1a/0x20 [ 45.231066][ T5061] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 45.238521][ T5061] Code: fd e9 77 fb ff ff e8 4b f7 fc fd 4d 89 e6 48 89 de 49 f7 de 4c 89 f7 e8 8a f3 fc fd 49 39 de 0f 86 b5 fc ff ff e8 2c f7 fc fd <0f> 0b 31 db e9 af fc ff ff e8 1e f7 fc fd 48 8d 7d 18 be ff ff ff [ 45.258202][ T5061] RSP: 0018:ffffc90003e0fa90 EFLAGS: 00010293 [ 45.264258][ T5061] RAX: 0000000000000000 RBX: 00000000000df000 RCX: 0000000000000000 [ 45.272215][ T5061] RDX: ffff888029838000 RSI: ffffffff83846b94 RDI: 0000000000000006 [ 45.280173][ T5061] RBP: ffff888074e36800 R08: 0000000000000006 R09: 00000000000e0000 [ 45.288131][ T5061] R10: 00000000000df000 R11: 0000000000000000 R12: fffffffffff20000 [ 45.296089][ T5061] R13: ffff888074e36860 R14: 00000000000e0000 R15: 0000000000000002 [ 45.304061][ T5061] ? btrfs_space_info_update_bytes_may_use+0x524/0x820 [ 45.310915][ T5061] btrfs_block_rsv_release+0x519/0x650 [ 45.316371][ T5061] btrfs_release_global_block_rsv+0x26/0x2e0 [ 45.322344][ T5061] btrfs_free_block_groups+0x958/0x1110 [ 45.327889][ T5061] close_ctree+0xd23/0xdcf [ 45.332298][ T5061] ? btrfs_cleanup_one_transaction.cold+0x5d/0x5d [ 45.338790][ T5061] ? hook_sb_remount+0xf0/0xf0 [ 45.343550][ T5061] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 45.349278][ T5061] ? dispose_list+0x1e0/0x1e0 [ 45.353953][ T5061] ? parse_rescue_options.cold+0x21d/0x21d [ 45.359755][ T5061] generic_shutdown_super+0x158/0x410 [ 45.365121][ T5061] kill_anon_super+0x3a/0x60 [ 45.369704][ T5061] btrfs_kill_super+0x3c/0x50 [ 45.374380][ T5061] deactivate_locked_super+0x98/0x160 [ 45.379746][ T5061] deactivate_super+0xb1/0xd0 [ 45.384415][ T5061] cleanup_mnt+0x2ae/0x3d0 [ 45.388826][ T5061] task_work_run+0x16f/0x270 [ 45.393412][ T5061] ? task_work_cancel+0x30/0x30 [ 45.398259][ T5061] ? __x64_sys_umount+0x118/0x190 [ 45.403278][ T5061] ptrace_notify+0x118/0x140 [ 45.407857][ T5061] syscall_exit_to_user_mode_prepare+0x129/0x280 [ 45.414186][ T5061] syscall_exit_to_user_mode+0xd/0x50 [ 45.419546][ T5061] do_syscall_64+0x46/0xb0 [ 45.423958][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.429839][ T5061] RIP: 0033:0x7f2b297b0e57 [ 45.434240][ T5061] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.453844][ T5061] RSP: 002b:00007ffe7ab6dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 45.462334][ T5061] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2b297b0e57 [ 45.470293][ T5061] RDX: 00007ffe7ab6dca9 RSI: 000000000000000a RDI: 00007ffe7ab6dca0 [ 45.478249][ T5061] RBP: 00007ffe7ab6dca0 R08: 00000000ffffffff R09: 00007ffe7ab6da80 [ 45.486212][ T5061] R10: 00005555557a9653 R11: 0000000000000206 R12: 00007ffe7ab6ed20 [ 45.494176][ T5061] R13: 00005555557a95f0 R14: 00007ffe7ab6dc10 R15: 0000000000000004 [ 45.502156][ T5061] [ 45.506188][ T5061] Kernel Offset: disabled [ 45.510589][ T5061] Rebooting in 86400 seconds..