./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3045784302 <...> syzkaller syzkaller login: [ 55.549818][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 55.549838][ T26] audit: type=1400 audit(1687647726.200:77): avc: denied { transition } for pid=4964 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.600912][ T26] audit: type=1400 audit(1687647726.200:78): avc: denied { noatsecure } for pid=4964 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.633620][ T26] audit: type=1400 audit(1687647726.210:79): avc: denied { write } for pid=4964 comm="sh" path="pipe:[29679]" dev="pipefs" ino=29679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.661743][ T26] audit: type=1400 audit(1687647726.210:80): avc: denied { rlimitinh } for pid=4964 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.680753][ T26] audit: type=1400 audit(1687647726.210:81): avc: denied { siginh } for pid=4964 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.484330][ T26] audit: type=1400 audit(1687647727.140:82): avc: denied { read } for pid=4430 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.78' (ECDSA) to the list of known hosts. execve("./syz-executor3045784302", ["./syz-executor3045784302"], 0x7fff3514f360 /* 10 vars */) = 0 brk(NULL) = 0x555556d4e000 brk(0x555556d4ec40) = 0x555556d4ec40 arch_prctl(ARCH_SET_FS, 0x555556d4e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3045784302", 4096) = 28 brk(0x555556d6fc40) = 0x555556d6fc40 brk(0x555556d70000) = 0x555556d70000 mprotect(0x7f3b2ce36000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 [ 70.781158][ T26] audit: type=1400 audit(1687647741.430:83): avc: denied { write } for pid=4989 comm="strace-static-x" path="pipe:[29778]" dev="pipefs" ino=29778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=784, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4992}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x2e\x00\x00\x00\x98\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 784 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 access("/proc/net", R_OK) = 0 access("/proc/net/unix", R_OK) = 0 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 70.824788][ T26] audit: type=1400 audit(1687647741.480:84): avc: denied { execmem } for pid=4992 comm="syz-executor304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.844950][ T26] audit: type=1400 audit(1687647741.490:85): avc: denied { create } for pid=4992 comm="syz-executor304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4992}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3b24975000 [ 70.868120][ T26] audit: type=1400 audit(1687647741.500:86): avc: denied { create } for pid=4989 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.879280][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-executor304' [ 70.903653][ T26] audit: type=1400 audit(1687647741.500:87): avc: denied { write } for pid=4989 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.938152][ T26] audit: type=1400 audit(1687647741.500:88): avc: denied { nlmsg_read } for pid=4989 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.965812][ T26] audit: type=1400 audit(1687647741.500:89): avc: denied { read } for pid=4989 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.987599][ T26] audit: type=1400 audit(1687647741.500:90): avc: denied { write } for pid=4992 comm="syz-executor304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.008899][ T26] audit: type=1400 audit(1687647741.500:91): avc: denied { read } for pid=4992 comm="syz-executor304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.030005][ T26] audit: type=1400 audit(1687647741.580:92): avc: denied { read } for pid=4662 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f3b24975000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 71.137647][ T4992] loop0: detected capacity change from 0 to 32768 [ 71.150894][ T4992] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor304 (4992) [ 71.171027][ T4992] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 71.180546][ T4992] BTRFS info (device loop0): force clearing of disk cache [ 71.187710][ T4992] BTRFS info (device loop0): setting nodatasum [ 71.193965][ T4992] BTRFS info (device loop0): allowing degraded mounts [ 71.200737][ T4992] BTRFS info (device loop0): enabling disk space caching [ 71.207807][ T4992] BTRFS info (device loop0): disk space caching is enabled [ 71.230128][ T4992] BTRFS info (device loop0): enabling ssd optimizations [ 71.237200][ T4992] BTRFS info (device loop0): auto enabling async discard [ 71.246720][ T4992] BTRFS info (device loop0): rebuilding free space tree [ 71.266371][ T4992] BTRFS info (device loop0): disabling free space tree [ 71.274373][ T4992] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [ 71.284532][ T4992] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.299195][ T4992] BTRFS info (device loop0): checking UUID tree creat("./bus", 000) = 5 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 write(6, "11", 2) = 2 [ 71.356438][ T1044] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 71.373487][ T4992] FAULT_INJECTION: forcing a failure. [ 71.373487][ T4992] name failslab, interval 1, probability 0, space 0, times 1 [ 71.386845][ T4992] CPU: 0 PID: 4992 Comm: syz-executor304 Not tainted 6.4.0-rc7-syzkaller-00226-ga92b7d26c743 #0 [ 71.397388][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 71.407482][ T4992] Call Trace: [ 71.410788][ T4992] [ 71.414189][ T4992] dump_stack_lvl+0x136/0x150 [ 71.418935][ T4992] should_fail_ex+0x4a3/0x5b0 [ 71.423931][ T4992] should_failslab+0x9/0x20 [ 71.428471][ T4992] __kmem_cache_alloc_node+0x5b/0x3f0 [ 71.433970][ T4992] kmalloc_trace+0x26/0xe0 [ 71.438404][ T4992] ulist_add_merge.part.0+0x85/0x4b0 [ 71.443694][ T4992] ulist_add+0x106/0x160 [ 71.447942][ T4992] set_state_bits.isra.0+0x11f/0x1c0 [ 71.453245][ T4992] __set_extent_bit+0xb81/0x15f0 [ 71.458202][ T4992] set_record_extent_bits+0x5c/0x90 [ 71.463409][ T4992] qgroup_reserve_data+0x233/0xa80 [ 71.468527][ T4992] ? __kmem_cache_alloc_node+0x170/0x3f0 [ 71.474268][ T4992] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 71.479750][ T4992] btrfs_fallocate+0x801/0x27f0 [ 71.485054][ T4992] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 71.491243][ T4992] ? do_raw_spin_lock+0x124/0x2b0 [ 71.496313][ T4992] ? spin_bug+0x1c0/0x1c0 [ 71.500679][ T4992] ? lock_sync+0x190/0x190 [ 71.505123][ T4992] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 71.511207][ T4992] vfs_fallocate+0x48b/0xe40 [ 71.515820][ T4992] __x64_sys_fallocate+0xd3/0x140 [ 71.520860][ T4992] do_syscall_64+0x39/0xb0 [ 71.525284][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.531194][ T4992] RIP: 0033:0x7f3b2cdc2399 [ 71.535613][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.555317][ T4992] RSP: 002b:00007ffc1540df58 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 71.563740][ T4992] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3b2cdc2399 [ 71.571722][ T4992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 71.579698][ T4992] RBP: 0000000000000006 R08: 0000000000000002 R09: 0000000000000000 [ 71.587673][ T4992] R10: 0000000000280404 R11: 0000000000000246 R12: 0000000000000004 [ 71.595672][ T4992] R13: 00007ffc1540df90 R14: 0000000000000003 R15: 00007ffc1540df8a [ 71.603649][ T4992] [ 71.607281][ T4992] ------------[ cut here ]------------ [ 71.612789][ T4992] kernel BUG at fs/btrfs/extent-io-tree.c:379! [ 71.619071][ T4992] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 71.625170][ T4992] CPU: 0 PID: 4992 Comm: syz-executor304 Not tainted 6.4.0-rc7-syzkaller-00226-ga92b7d26c743 #0 [ 71.635692][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 71.645863][ T4992] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 71.651988][ T4992] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 ce 5b f8 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 b5 5b f8 fd <0f> 0b 4c 89 ef e8 3b 32 4a fe e9 e6 fe ff ff 4c 89 ef e8 2e 32 4a [ 71.671977][ T4992] RSP: 0018:ffffc900033efa88 EFLAGS: 00010293 [ 71.678080][ T4992] RAX: 0000000000000000 RBX: ffff888029a0c240 RCX: 0000000000000000 [ 71.686089][ T4992] RDX: ffff88807af561c0 RSI: ffffffff838b0f8b RDI: 0000000000000005 [ 71.694187][ T4992] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 71.702160][ T4992] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 71.710125][ T4992] R13: ffff888029a0c2bc R14: 0000000000280fff R15: 0000000000000000 [ 71.718098][ T4992] FS: 0000555556d4e300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 71.728158][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.734740][ T4992] CR2: 00007ffddc408468 CR3: 000000002d352000 CR4: 00000000003506f0 [ 71.742717][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.751036][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.759834][ T4992] Call Trace: [ 71.763108][ T4992] [ 71.766036][ T4992] ? die+0x32/0x90 [ 71.769869][ T4992] ? do_trap+0x1b2/0x3f0 [ 71.774288][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.779855][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.785328][ T4992] ? do_error_trap+0xb1/0x170 [ 71.790019][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.796278][ T4992] ? handle_invalid_op+0x2c/0x30 [ 71.801219][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.806694][ T4992] ? exc_invalid_op+0x2f/0x50 [ 71.811460][ T4992] ? asm_exc_invalid_op+0x1a/0x20 [ 71.816500][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.821974][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.827458][ T4992] ? set_state_bits.isra.0+0x17b/0x1c0 [ 71.832931][ T4992] __set_extent_bit+0xb81/0x15f0 [ 71.837887][ T4992] set_record_extent_bits+0x5c/0x90 [ 71.843085][ T4992] qgroup_reserve_data+0x233/0xa80 [ 71.848200][ T4992] ? __kmem_cache_alloc_node+0x170/0x3f0 [ 71.853850][ T4992] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 71.859396][ T4992] btrfs_fallocate+0x801/0x27f0 [ 71.864343][ T4992] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 71.870419][ T4992] ? do_raw_spin_lock+0x124/0x2b0 [ 71.875913][ T4992] ? spin_bug+0x1c0/0x1c0 [ 71.880360][ T4992] ? lock_sync+0x190/0x190 [ 71.884793][ T4992] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 71.890883][ T4992] vfs_fallocate+0x48b/0xe40 [ 71.895499][ T4992] __x64_sys_fallocate+0xd3/0x140 [ 71.901497][ T4992] do_syscall_64+0x39/0xb0 [ 71.905919][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.911827][ T4992] RIP: 0033:0x7f3b2cdc2399 [ 71.916253][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.936009][ T4992] RSP: 002b:00007ffc1540df58 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 71.944436][ T4992] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3b2cdc2399 [ 71.952503][ T4992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 71.960671][ T4992] RBP: 0000000000000006 R08: 0000000000000002 R09: 0000000000000000 [ 71.968910][ T4992] R10: 0000000000280404 R11: 0000000000000246 R12: 0000000000000004 [ 71.976882][ T4992] R13: 00007ffc1540df90 R14: 0000000000000003 R15: 00007ffc1540df8a [ 71.984862][ T4992] [ 71.987875][ T4992] Modules linked in: [ 71.992068][ T4992] ---[ end trace 0000000000000000 ]--- [ 71.997587][ T4992] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 72.003764][ T4992] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 ce 5b f8 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 b5 5b f8 fd <0f> 0b 4c 89 ef e8 3b 32 4a fe e9 e6 fe ff ff 4c 89 ef e8 2e 32 4a [ 72.023574][ T4992] RSP: 0018:ffffc900033efa88 EFLAGS: 00010293 [ 72.029664][ T4992] RAX: 0000000000000000 RBX: ffff888029a0c240 RCX: 0000000000000000 [ 72.037674][ T4992] RDX: ffff88807af561c0 RSI: ffffffff838b0f8b RDI: 0000000000000005 [ 72.045662][ T4992] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 72.053676][ T4992] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 72.061637][ T4992] R13: ffff888029a0c2bc R14: 0000000000280fff R15: 0000000000000000 [ 72.069643][ T4992] FS: 0000555556d4e300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 72.078806][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.085422][ T4992] CR2: 00007ffddc408468 CR3: 000000002d352000 CR4: 00000000003506f0 [ 72.093382][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.101383][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.109382][ T4992] Kernel panic - not syncing: Fatal exception [ 72.115610][ T4992] Kernel Offset: disabled [ 72.119931][ T4992] Rebooting in 86400 seconds..