[ 459.564484][T12657] btrfs_commit_transaction+0x674/0x3950 [ 459.564498][T12657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.564511][T12657] ? btrfs_commit_transaction+0x161/0x3950 [ 459.564541][T12657] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 459.564559][T12657] ? do_raw_spin_unlock+0x4d/0x240 [ 459.564572][T12657] ? join_transaction+0x41b/0xd70 [ 459.564590][T12657] ? btrfs_record_root_in_trans+0x124/0x180 [ 459.564606][T12657] ? start_transaction+0x439/0x1620 [ 459.564634][T12657] try_flush_qgroup+0x1dd/0x380 [ 459.564650][T12657] ? kfree+0x18e/0x440 [ 459.564663][T12657] ? __pfx_try_flush_qgroup+0x10/0x10 [ 459.564678][T12657] ? qgroup_reserve_data+0x6cc/0x8d0 [ 459.564703][T12657] btrfs_qgroup_reserve_data+0x69/0xb0 [ 459.564721][T12657] btrfs_check_data_free_space+0x2ce/0x450 [ 459.564737][T12657] btrfs_buffered_write+0x46c/0x16c0 [ 459.564775][T12657] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 459.564791][T12657] ? aa_file_perm+0x44d/0x1550 [ 459.564816][T12657] btrfs_do_write_iter+0x238/0x710 [ 459.564837][T12657] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 459.564861][T12657] do_iter_readv_writev+0x619/0x8b0 [ 459.564878][T12657] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 459.564891][T12657] ? rcu_read_lock_any_held+0xb3/0x120 [ 459.564917][T12657] vfs_writev+0x31a/0x960 [ 459.564935][T12657] ? __lock_acquire+0xab9/0xd20 [ 459.564953][T12657] ? __pfx_vfs_writev+0x10/0x10 [ 459.564978][T12657] ? __fget_files+0x2a/0x420 [ 459.565006][T12657] ? __fget_files+0x3a0/0x420 [ 459.565020][T12657] ? __fget_files+0x2a/0x420 [ 459.565042][T12657] __se_sys_pwritev2+0x179/0x290 [ 459.565058][T12657] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 459.565071][T12657] ? rcu_is_watching+0x15/0xb0 [ 459.565086][T12657] ? do_syscall_64+0xbe/0x3b0 [ 459.565101][T12657] ? __x64_sys_pwritev2+0x20/0xc0 [ 459.565118][T12657] do_syscall_64+0xfa/0x3b0 [ 459.565132][T12657] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.565147][T12657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.565158][T12657] ? clear_bhb_loop+0x60/0xb0 [ 459.565168][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.565176][T12657] RIP: 0033:0x7f62ccd7e719 [ 459.565184][T12657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.565191][T12657] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 459.565204][T12657] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 459.565212][T12657] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 459.565219][T12657] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 459.565226][T12657] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 459.565233][T12657] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 459.565252][T12657] [ 459.565262][T12657] BTRFS error (device loop0): failed to run delayed ref for logical 5353472 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 459.565298][T12657] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 459.565311][T12657] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 459.565324][T12657] BTRFS info (device loop0 state EA): forced readonly [ 459.580631][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 459.600660][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.606070][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 459.606088][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 460.221007][T12675] loop0: detected capacity change from 0 to 32768 [ 460.226185][T12675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.391 (12675) [ 460.234442][T12675] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 460.234503][T12675] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 460.291384][T12675] BTRFS info (device loop0): enabling ssd optimizations [ 460.291407][T12675] BTRFS info (device loop0): enabling free space tree [ 460.379092][T12675] FAULT_INJECTION: forcing a failure. [ 460.379092][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 460.379119][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 460.379133][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.379141][T12675] Call Trace: [ 460.379147][T12675] [ 460.379152][T12675] dump_stack_lvl+0x189/0x250 [ 460.379172][T12675] ? __pfx____ratelimit+0x10/0x10 [ 460.379190][T12675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.379206][T12675] ? __pfx__printk+0x10/0x10 [ 460.379233][T12675] ? __pfx___might_resched+0x10/0x10 [ 460.379245][T12675] ? fs_reclaim_acquire+0x7d/0x100 [ 460.379267][T12675] should_fail_ex+0x414/0x560 [ 460.379286][T12675] should_failslab+0xa8/0x100 [ 460.379304][T12675] kmem_cache_alloc_noprof+0x73/0x3c0 [ 460.379319][T12675] ? alloc_extent_state+0x22/0x2f0 [ 460.379339][T12675] alloc_extent_state+0x22/0x2f0 [ 460.379359][T12675] set_extent_bit+0x270/0x21a0 [ 460.379395][T12675] ? __pfx_set_extent_bit+0x10/0x10 [ 460.379420][T12675] btrfs_set_extent_bit+0x38/0x50 [ 460.379441][T12675] btrfs_alloc_tree_block+0x965/0x1290 [ 460.379469][T12675] ? __bpf_address_lookup+0x370/0x3f0 [ 460.379487][T12675] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 460.379500][T12675] ? kernel_text_address+0xa5/0xe0 [ 460.379519][T12675] ? __kernel_text_address+0xd/0x40 [ 460.379533][T12675] ? unwind_get_return_address+0x4d/0x90 [ 460.379547][T12675] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.379586][T12675] ? read_extent_buffer+0x120/0x5e0 [ 460.379605][T12675] btrfs_force_cow_block+0x578/0x2460 [ 460.379623][T12675] ? __lock_acquire+0xab9/0xd20 [ 460.379649][T12675] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 460.379677][T12675] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 460.379696][T12675] ? down_write_nested+0x169/0x200 [ 460.379711][T12675] ? __pfx_down_write_nested+0x10/0x10 [ 460.379730][T12675] btrfs_cow_block+0x40a/0x9a0 [ 460.379756][T12675] btrfs_search_slot+0xd11/0x2b90 [ 460.379794][T12675] ? __pfx_btrfs_search_slot+0x10/0x10 [ 460.379813][T12675] ? kasan_save_track+0x4f/0x80 [ 460.379852][T12675] ? __kasan_slab_alloc+0x6c/0x80 [ 460.379865][T12675] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 460.379878][T12675] ? __btrfs_free_extent+0x2f9/0x4250 [ 460.379890][T12675] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 460.379911][T12675] lookup_inline_extent_backref+0x321/0x17b0 [ 460.379924][T12675] ? do_iter_readv_writev+0x619/0x8b0 [ 460.379938][T12675] ? vfs_writev+0x31a/0x960 [ 460.379953][T12675] ? __se_sys_pwritev2+0x179/0x290 [ 460.379967][T12675] ? do_syscall_64+0xfa/0x3b0 [ 460.380004][T12675] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 460.380034][T12675] ? rcu_is_watching+0x15/0xb0 [ 460.380048][T12675] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 460.380061][T12675] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 460.380078][T12675] __btrfs_free_extent+0x428/0x4250 [ 460.380111][T12675] ? __pfx___btrfs_free_extent+0x10/0x10 [ 460.380142][T12675] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 460.380170][T12675] ? __lock_acquire+0xab9/0xd20 [ 460.380218][T12675] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 460.380240][T12675] ? kernel_text_address+0xa5/0xe0 [ 460.380258][T12675] ? __kernel_text_address+0xd/0x40 [ 460.380273][T12675] ? unwind_get_return_address+0x4d/0x90 [ 460.380287][T12675] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.380302][T12675] ? arch_stack_walk+0xfc/0x150 [ 460.380328][T12675] ? __lock_acquire+0xab9/0xd20 [ 460.380356][T12675] ? btrfs_commit_transaction+0x161/0x3950 [ 460.380380][T12675] btrfs_run_delayed_refs+0xe6/0x3b0 [ 460.380402][T12675] btrfs_commit_transaction+0x269/0x3950 [ 460.380418][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.380433][T12675] ? btrfs_commit_transaction+0x161/0x3950 [ 460.380469][T12675] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 460.380491][T12675] ? do_raw_spin_unlock+0x4d/0x240 [ 460.380506][T12675] ? join_transaction+0x41b/0xd70 [ 460.380530][T12675] ? btrfs_record_root_in_trans+0x124/0x180 [ 460.380549][T12675] ? start_transaction+0x439/0x1620 [ 460.380581][T12675] try_flush_qgroup+0x1dd/0x380 [ 460.380598][T12675] ? kfree+0x18e/0x440 [ 460.380613][T12675] ? __pfx_try_flush_qgroup+0x10/0x10 [ 460.380630][T12675] ? qgroup_reserve_data+0x6cc/0x8d0 [ 460.380659][T12675] btrfs_qgroup_reserve_data+0x69/0xb0 [ 460.380680][T12675] btrfs_check_data_free_space+0x2ce/0x450 [ 460.380700][T12675] btrfs_buffered_write+0x46c/0x16c0 [ 460.380744][T12675] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 460.380763][T12675] ? aa_file_perm+0x44d/0x1550 [ 460.380791][T12675] btrfs_do_write_iter+0x238/0x710 [ 460.380817][T12675] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 460.380845][T12675] do_iter_readv_writev+0x619/0x8b0 [ 460.380866][T12675] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 460.380880][T12675] ? rcu_read_lock_any_held+0xb3/0x120 [ 460.380909][T12675] vfs_writev+0x31a/0x960 [ 460.380931][T12675] ? __lock_acquire+0xab9/0xd20 [ 460.380950][T12675] ? __pfx_vfs_writev+0x10/0x10 [ 460.380980][T12675] ? __fget_files+0x2a/0x420 [ 460.381000][T12675] ? __fget_files+0x3a0/0x420 [ 460.381016][T12675] ? __fget_files+0x2a/0x420 [ 460.381039][T12675] __se_sys_pwritev2+0x179/0x290 [ 460.381059][T12675] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 460.381073][T12675] ? rcu_is_watching+0x15/0xb0 [ 460.381091][T12675] ? do_syscall_64+0xbe/0x3b0 [ 460.381107][T12675] ? __x64_sys_pwritev2+0x20/0xc0 [ 460.381125][T12675] do_syscall_64+0xfa/0x3b0 [ 460.381141][T12675] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.381158][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.381171][T12675] ? clear_bhb_loop+0x60/0xb0 [ 460.381187][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.381199][T12675] RIP: 0033:0x7f62ccd7e719 [ 460.381218][T12675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.381230][T12675] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 460.381246][T12675] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 460.381255][T12675] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 460.381263][T12675] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 460.381271][T12675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 460.381278][T12675] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 460.381301][T12675] [ 460.407538][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 460.464129][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.048791][T12693] loop0: detected capacity change from 0 to 32768 [ 461.072590][T12693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.392 (12693) [ 461.087730][T12693] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.087790][T12693] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 461.153621][T12693] BTRFS info (device loop0): enabling ssd optimizations [ 461.153643][T12693] BTRFS info (device loop0): enabling free space tree [ 461.197597][T12693] FAULT_INJECTION: forcing a failure. [ 461.197597][T12693] name failslab, interval 1, probability 0, space 0, times 0 [ 461.197623][T12693] CPU: 0 UID: 0 PID: 12693 Comm: syz.0.392 Not tainted syzkaller #0 PREEMPT(full) [ 461.197637][T12693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.197644][T12693] Call Trace: [ 461.197649][T12693] [ 461.197655][T12693] dump_stack_lvl+0x189/0x250 [ 461.197675][T12693] ? __pfx____ratelimit+0x10/0x10 [ 461.197693][T12693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.197706][T12693] ? __pfx__printk+0x10/0x10 [ 461.197723][T12693] ? __pfx___might_resched+0x10/0x10 [ 461.197735][T12693] ? fs_reclaim_acquire+0x7d/0x100 [ 461.197754][T12693] should_fail_ex+0x414/0x560 [ 461.197773][T12693] should_failslab+0xa8/0x100 [ 461.197790][T12693] kmem_cache_alloc_noprof+0x73/0x3c0 [ 461.197800][T12693] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 461.197812][T12693] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 461.197826][T12693] __btrfs_free_extent+0x167b/0x4250 [ 461.197850][T12693] ? __pfx___btrfs_free_extent+0x10/0x10 [ 461.197876][T12693] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 461.197902][T12693] ? __lock_acquire+0xab9/0xd20 [ 461.197945][T12693] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 461.197965][T12693] ? kernel_text_address+0xa5/0xe0 [ 461.197982][T12693] ? __kernel_text_address+0xd/0x40 [ 461.197997][T12693] ? unwind_get_return_address+0x4d/0x90 [ 461.198010][T12693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.198024][T12693] ? arch_stack_walk+0xfc/0x150 [ 461.198044][T12693] ? __lock_acquire+0xab9/0xd20 [ 461.198067][T12693] ? btrfs_commit_transaction+0x161/0x3950 [ 461.198087][T12693] btrfs_run_delayed_refs+0xe6/0x3b0 [ 461.198106][T12693] btrfs_commit_transaction+0x269/0x3950 [ 461.198120][T12693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.198134][T12693] ? btrfs_commit_transaction+0x161/0x3950 [ 461.198163][T12693] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 461.198181][T12693] ? do_raw_spin_unlock+0x4d/0x240 [ 461.198194][T12693] ? join_transaction+0x41b/0xd70 [ 461.198220][T12693] ? btrfs_record_root_in_trans+0x124/0x180 [ 461.198236][T12693] ? start_transaction+0x439/0x1620 [ 461.198264][T12693] try_flush_qgroup+0x1dd/0x380 [ 461.198280][T12693] ? kfree+0x18e/0x440 [ 461.198293][T12693] ? __pfx_try_flush_qgroup+0x10/0x10 [ 461.198310][T12693] ? qgroup_reserve_data+0x6cc/0x8d0 [ 461.198334][T12693] btrfs_qgroup_reserve_data+0x69/0xb0 [ 461.198352][T12693] btrfs_check_data_free_space+0x2ce/0x450 [ 461.198368][T12693] btrfs_buffered_write+0x46c/0x16c0 [ 461.198408][T12693] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 461.198425][T12693] ? aa_file_perm+0x44d/0x1550 [ 461.198448][T12693] btrfs_do_write_iter+0x238/0x710 [ 461.198471][T12693] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 461.198496][T12693] do_iter_readv_writev+0x619/0x8b0 [ 461.198514][T12693] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 461.198526][T12693] ? rcu_read_lock_any_held+0xb3/0x120 [ 461.198550][T12693] vfs_writev+0x31a/0x960 [ 461.198570][T12693] ? __lock_acquire+0xab9/0xd20 [ 461.198587][T12693] ? __pfx_vfs_writev+0x10/0x10 [ 461.198615][T12693] ? __fget_files+0x2a/0x420 [ 461.198633][T12693] ? __fget_files+0x3a0/0x420 [ 461.198647][T12693] ? __fget_files+0x2a/0x420 [ 461.198668][T12693] __se_sys_pwritev2+0x179/0x290 [ 461.198685][T12693] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 461.198698][T12693] ? rcu_is_watching+0x15/0xb0 [ 461.198714][T12693] ? do_syscall_64+0xbe/0x3b0 [ 461.198730][T12693] ? __x64_sys_pwritev2+0x20/0xc0 [ 461.198745][T12693] do_syscall_64+0xfa/0x3b0 [ 461.198761][T12693] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.198776][T12693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.198788][T12693] ? clear_bhb_loop+0x60/0xb0 [ 461.198802][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.198813][T12693] RIP: 0033:0x7f62ccd7e719 [ 461.198824][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.198835][T12693] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 461.198848][T12693] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 461.198857][T12693] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 461.198864][T12693] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 461.198872][T12693] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 461.198880][T12693] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 461.198899][T12693] [ 461.198908][T12693] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 461.198924][T12693] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 461.198938][T12693] BTRFS info (device loop0 state EA): forced readonly [ 461.198949][T12693] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 461.198976][T12693] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 461.199011][T12693] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 461.206811][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 461.231039][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.233006][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 461.233030][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 461.821073][T12711] loop0: detected capacity change from 0 to 32768 [ 461.832360][T12711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.393 (12711) [ 461.838883][T12711] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.838939][T12711] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 461.883712][T12711] BTRFS info (device loop0): enabling ssd optimizations [ 461.883734][T12711] BTRFS info (device loop0): enabling free space tree [ 461.935190][T12711] FAULT_INJECTION: forcing a failure. [ 461.935190][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 461.935211][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.0.393 Not tainted syzkaller #0 PREEMPT(full) [ 461.935223][T12711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.935230][T12711] Call Trace: [ 461.935236][T12711] [ 461.935242][T12711] dump_stack_lvl+0x189/0x250 [ 461.935259][T12711] ? __pfx____ratelimit+0x10/0x10 [ 461.935276][T12711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.935290][T12711] ? __pfx__printk+0x10/0x10 [ 461.935310][T12711] ? __pfx___might_resched+0x10/0x10 [ 461.935324][T12711] should_fail_ex+0x414/0x560 [ 461.935340][T12711] should_failslab+0xa8/0x100 [ 461.935355][T12711] kmem_cache_alloc_noprof+0x73/0x3c0 [ 461.935369][T12711] ? __btrfs_run_delayed_items+0x94/0x540 [ 461.935386][T12711] __btrfs_run_delayed_items+0x94/0x540 [ 461.935402][T12711] ? schedule+0x16f/0x360 [ 461.935417][T12711] btrfs_commit_transaction+0xa30/0x3950 [ 461.935427][T12711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.935436][T12711] ? btrfs_commit_transaction+0x161/0x3950 [ 461.935454][T12711] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 461.935466][T12711] ? do_raw_spin_unlock+0x4d/0x240 [ 461.935475][T12711] ? join_transaction+0x41b/0xd70 [ 461.935491][T12711] ? __pfx_autoremove_wake_function+0x10/0x10 [ 461.935507][T12711] ? start_transaction+0x439/0x1620 [ 461.935536][T12711] try_flush_qgroup+0x1dd/0x380 [ 461.935552][T12711] ? kfree+0x18e/0x440 [ 461.935565][T12711] ? __pfx_try_flush_qgroup+0x10/0x10 [ 461.935580][T12711] ? qgroup_reserve_data+0x6cc/0x8d0 [ 461.935602][T12711] btrfs_qgroup_reserve_data+0x69/0xb0 [ 461.935620][T12711] btrfs_check_data_free_space+0x2ce/0x450 [ 461.935637][T12711] btrfs_buffered_write+0x46c/0x16c0 [ 461.935674][T12711] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 461.935685][T12711] ? aa_file_perm+0x44d/0x1550 [ 461.935700][T12711] btrfs_do_write_iter+0x238/0x710 [ 461.935715][T12711] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 461.935729][T12711] do_iter_readv_writev+0x619/0x8b0 [ 461.935742][T12711] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 461.935750][T12711] ? rcu_read_lock_any_held+0xb3/0x120 [ 461.935766][T12711] vfs_writev+0x31a/0x960 [ 461.935777][T12711] ? __lock_acquire+0xab9/0xd20 [ 461.935789][T12711] ? __pfx_vfs_writev+0x10/0x10 [ 461.935805][T12711] ? __fget_files+0x2a/0x420 [ 461.935858][T12711] ? __fget_files+0x3a0/0x420 [ 461.935871][T12711] ? __fget_files+0x2a/0x420 [ 461.935891][T12711] __se_sys_pwritev2+0x179/0x290 [ 461.935908][T12711] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 461.935921][T12711] ? rcu_is_watching+0x15/0xb0 [ 461.935936][T12711] ? do_syscall_64+0xbe/0x3b0 [ 461.935950][T12711] ? __x64_sys_pwritev2+0x20/0xc0 [ 461.935965][T12711] do_syscall_64+0xfa/0x3b0 [ 461.935980][T12711] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.935999][T12711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.936007][T12711] ? clear_bhb_loop+0x60/0xb0 [ 461.936016][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.936023][T12711] RIP: 0033:0x7f62ccd7e719 [ 461.936034][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.936043][T12711] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 461.936056][T12711] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 461.936064][T12711] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 461.936072][T12711] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 461.936079][T12711] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 461.936086][T12711] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 461.936103][T12711] [ 461.936109][T12711] BTRFS warning (device loop0): Skipping commit of aborted transaction. [ 461.936119][T12711] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 461.936128][T12711] BTRFS: error (device loop0 state A) in cleanup_transaction:2023: errno=-12 Out of memory [ 461.936137][T12711] BTRFS info (device loop0 state EA): forced readonly [ 461.937310][ T1041] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 461.951541][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.971439][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 461.971464][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 462.564481][T12729] loop0: detected capacity change from 0 to 32768 [ 462.572551][T12729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.394 (12729) [ 462.580698][T12729] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.580756][T12729] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 462.621676][T12729] BTRFS info (device loop0): enabling ssd optimizations [ 462.621699][T12729] BTRFS info (device loop0): enabling free space tree [ 462.673767][T12729] FAULT_INJECTION: forcing a failure. [ 462.673767][T12729] name failslab, interval 1, probability 0, space 0, times 0 [ 462.673787][T12729] CPU: 0 UID: 0 PID: 12729 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 462.673797][T12729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.673805][T12729] Call Trace: [ 462.673810][T12729] [ 462.673815][T12729] dump_stack_lvl+0x189/0x250 [ 462.673835][T12729] ? __pfx____ratelimit+0x10/0x10 [ 462.673852][T12729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.673867][T12729] ? __pfx__printk+0x10/0x10 [ 462.673885][T12729] ? __pfx___might_resched+0x10/0x10 [ 462.673896][T12729] ? fs_reclaim_acquire+0x7d/0x100 [ 462.673916][T12729] should_fail_ex+0x414/0x560 [ 462.673933][T12729] should_failslab+0xa8/0x100 [ 462.673949][T12729] kmem_cache_alloc_noprof+0x73/0x3c0 [ 462.673962][T12729] ? alloc_extent_state+0x22/0x2f0 [ 462.673981][T12729] alloc_extent_state+0x22/0x2f0 [ 462.674005][T12729] set_extent_bit+0x270/0x21a0 [ 462.674038][T12729] ? __pfx_set_extent_bit+0x10/0x10 [ 462.674062][T12729] btrfs_set_extent_bit+0x38/0x50 [ 462.674081][T12729] btrfs_alloc_tree_block+0x965/0x1290 [ 462.674105][T12729] ? __bpf_address_lookup+0x370/0x3f0 [ 462.674123][T12729] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 462.674135][T12729] ? kernel_text_address+0xa5/0xe0 [ 462.674152][T12729] ? __kernel_text_address+0xd/0x40 [ 462.674165][T12729] ? unwind_get_return_address+0x4d/0x90 [ 462.674174][T12729] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.674185][T12729] ? read_extent_buffer+0x120/0x5e0 [ 462.674198][T12729] btrfs_force_cow_block+0x578/0x2460 [ 462.674214][T12729] ? __lock_acquire+0xab9/0xd20 [ 462.674235][T12729] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 462.674262][T12729] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 462.674277][T12729] ? down_write_nested+0x169/0x200 [ 462.674291][T12729] ? __pfx_down_write_nested+0x10/0x10 [ 462.674308][T12729] btrfs_cow_block+0x40a/0x9a0 [ 462.674329][T12729] btrfs_search_slot+0xd11/0x2b90 [ 462.674364][T12729] ? __pfx_btrfs_search_slot+0x10/0x10 [ 462.674381][T12729] ? kasan_save_track+0x4f/0x80 [ 462.674393][T12729] ? __kasan_slab_alloc+0x6c/0x80 [ 462.674402][T12729] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 462.674409][T12729] ? __btrfs_free_extent+0x2f9/0x4250 [ 462.674416][T12729] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 462.674428][T12729] lookup_inline_extent_backref+0x321/0x17b0 [ 462.674435][T12729] ? do_iter_readv_writev+0x619/0x8b0 [ 462.674444][T12729] ? vfs_writev+0x31a/0x960 [ 462.674453][T12729] ? __se_sys_pwritev2+0x179/0x290 [ 462.674461][T12729] ? do_syscall_64+0xfa/0x3b0 [ 462.674490][T12729] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 462.674516][T12729] ? rcu_is_watching+0x15/0xb0 [ 462.674528][T12729] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 462.674538][T12729] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 462.674554][T12729] __btrfs_free_extent+0x428/0x4250 [ 462.674582][T12729] ? __pfx___btrfs_free_extent+0x10/0x10 [ 462.674609][T12729] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 462.674634][T12729] ? __lock_acquire+0xab9/0xd20 [ 462.674671][T12729] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 462.674691][T12729] ? kernel_text_address+0xa5/0xe0 [ 462.674706][T12729] ? __kernel_text_address+0xd/0x40 [ 462.674721][T12729] ? unwind_get_return_address+0x4d/0x90 [ 462.674733][T12729] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.674746][T12729] ? arch_stack_walk+0xfc/0x150 [ 462.674767][T12729] ? __lock_acquire+0xab9/0xd20 [ 462.674792][T12729] ? btrfs_commit_transaction+0x161/0x3950 [ 462.674814][T12729] btrfs_run_delayed_refs+0xe6/0x3b0 [ 462.674833][T12729] btrfs_commit_transaction+0x269/0x3950 [ 462.674846][T12729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.674860][T12729] ? btrfs_commit_transaction+0x161/0x3950 [ 462.674889][T12729] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 462.674909][T12729] ? do_raw_spin_unlock+0x4d/0x240 [ 462.674922][T12729] ? join_transaction+0x41b/0xd70 [ 462.674941][T12729] ? btrfs_record_root_in_trans+0x124/0x180 [ 462.674958][T12729] ? start_transaction+0x439/0x1620 [ 462.674986][T12729] try_flush_qgroup+0x1dd/0x380 [ 462.675007][T12729] ? kfree+0x18e/0x440 [ 462.675020][T12729] ? __pfx_try_flush_qgroup+0x10/0x10 [ 462.675035][T12729] ? qgroup_reserve_data+0x6cc/0x8d0 [ 462.675062][T12729] btrfs_qgroup_reserve_data+0x69/0xb0 [ 462.675080][T12729] btrfs_check_data_free_space+0x2ce/0x450 [ 462.675096][T12729] btrfs_buffered_write+0x46c/0x16c0 [ 462.675135][T12729] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 462.675153][T12729] ? aa_file_perm+0x44d/0x1550 [ 462.675177][T12729] btrfs_do_write_iter+0x238/0x710 [ 462.675202][T12729] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 462.675226][T12729] do_iter_readv_writev+0x619/0x8b0 [ 462.675245][T12729] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 462.675258][T12729] ? rcu_read_lock_any_held+0xb3/0x120 [ 462.675285][T12729] vfs_writev+0x31a/0x960 [ 462.675303][T12729] ? __lock_acquire+0xab9/0xd20 [ 462.675322][T12729] ? __pfx_vfs_writev+0x10/0x10 [ 462.675349][T12729] ? __fget_files+0x2a/0x420 [ 462.675366][T12729] ? __fget_files+0x3a0/0x420 [ 462.675379][T12729] ? __fget_files+0x2a/0x420 [ 462.675400][T12729] __se_sys_pwritev2+0x179/0x290 [ 462.675417][T12729] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 462.675429][T12729] ? rcu_is_watching+0x15/0xb0 [ 462.675445][T12729] ? do_syscall_64+0xbe/0x3b0 [ 462.675460][T12729] ? __x64_sys_pwritev2+0x20/0xc0 [ 462.675476][T12729] do_syscall_64+0xfa/0x3b0 [ 462.675491][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.675506][T12729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.675516][T12729] ? clear_bhb_loop+0x60/0xb0 [ 462.675529][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.675536][T12729] RIP: 0033:0x7f62ccd7e719 [ 462.675545][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.675552][T12729] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 462.675560][T12729] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 462.675566][T12729] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 462.675571][T12729] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 462.675575][T12729] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 462.675580][T12729] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 462.675593][T12729] [ 462.698587][ T1038] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 462.742025][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.318958][T12747] loop0: detected capacity change from 0 to 32768 [ 463.332497][T12747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.395 (12747) [ 463.335331][T12747] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.335385][T12747] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 463.441223][T12747] BTRFS info (device loop0): enabling ssd optimizations [ 463.441249][T12747] BTRFS info (device loop0): enabling free space tree [ 463.512153][T12747] FAULT_INJECTION: forcing a failure. [ 463.512153][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 463.512178][T12747] CPU: 0 UID: 0 PID: 12747 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT(full) [ 463.512192][T12747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.512199][T12747] Call Trace: [ 463.512206][T12747] [ 463.512212][T12747] dump_stack_lvl+0x189/0x250 [ 463.512231][T12747] ? __pfx____ratelimit+0x10/0x10 [ 463.512250][T12747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.512263][T12747] ? __pfx__printk+0x10/0x10 [ 463.512282][T12747] ? __pfx___might_resched+0x10/0x10 [ 463.512294][T12747] ? fs_reclaim_acquire+0x7d/0x100 [ 463.512331][T12747] should_fail_ex+0x414/0x560 [ 463.512350][T12747] should_failslab+0xa8/0x100 [ 463.512368][T12747] kmem_cache_alloc_noprof+0x73/0x3c0 [ 463.512380][T12747] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 463.512400][T12747] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 463.512419][T12747] __btrfs_free_extent+0x167b/0x4250 [ 463.512447][T12747] ? __pfx___btrfs_free_extent+0x10/0x10 [ 463.512475][T12747] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 463.512501][T12747] ? __lock_acquire+0xab9/0xd20 [ 463.512539][T12747] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 463.512561][T12747] ? kernel_text_address+0xa5/0xe0 [ 463.512578][T12747] ? __kernel_text_address+0xd/0x40 [ 463.512592][T12747] ? unwind_get_return_address+0x4d/0x90 [ 463.512607][T12747] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 463.512620][T12747] ? arch_stack_walk+0xfc/0x150 [ 463.512644][T12747] ? __lock_acquire+0xab9/0xd20 [ 463.512669][T12747] ? btrfs_commit_transaction+0x161/0x3950 [ 463.512690][T12747] btrfs_run_delayed_refs+0xe6/0x3b0 [ 463.512711][T12747] btrfs_commit_transaction+0x269/0x3950 [ 463.512724][T12747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.512739][T12747] ? btrfs_commit_transaction+0x161/0x3950 [ 463.512771][T12747] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 463.512791][T12747] ? do_raw_spin_unlock+0x4d/0x240 [ 463.512805][T12747] ? join_transaction+0x41b/0xd70 [ 463.512825][T12747] ? btrfs_record_root_in_trans+0x124/0x180 [ 463.512843][T12747] ? start_transaction+0x439/0x1620 [ 463.512872][T12747] try_flush_qgroup+0x1dd/0x380 [ 463.512888][T12747] ? kfree+0x18e/0x440 [ 463.512902][T12747] ? __pfx_try_flush_qgroup+0x10/0x10 [ 463.512919][T12747] ? qgroup_reserve_data+0x6cc/0x8d0 [ 463.512945][T12747] btrfs_qgroup_reserve_data+0x69/0xb0 [ 463.512969][T12747] btrfs_check_data_free_space+0x2ce/0x450 [ 463.512986][T12747] btrfs_buffered_write+0x46c/0x16c0 [ 463.513023][T12747] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 463.513043][T12747] ? aa_file_perm+0x44d/0x1550 [ 463.513066][T12747] btrfs_do_write_iter+0x238/0x710 [ 463.513091][T12747] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 463.513116][T12747] do_iter_readv_writev+0x619/0x8b0 [ 463.513135][T12747] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 463.513149][T12747] ? rcu_read_lock_any_held+0xb3/0x120 [ 463.513175][T12747] vfs_writev+0x31a/0x960 [ 463.513194][T12747] ? __lock_acquire+0xab9/0xd20 [ 463.513213][T12747] ? __pfx_vfs_writev+0x10/0x10 [ 463.513239][T12747] ? __fget_files+0x2a/0x420 [ 463.513259][T12747] ? __fget_files+0x3a0/0x420 [ 463.513273][T12747] ? __fget_files+0x2a/0x420 [ 463.513296][T12747] __se_sys_pwritev2+0x179/0x290 [ 463.513313][T12747] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 463.513327][T12747] ? rcu_is_watching+0x15/0xb0 [ 463.513342][T12747] ? do_syscall_64+0xbe/0x3b0 [ 463.513359][T12747] ? __x64_sys_pwritev2+0x20/0xc0 [ 463.513375][T12747] do_syscall_64+0xfa/0x3b0 [ 463.513392][T12747] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.513406][T12747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.513419][T12747] ? clear_bhb_loop+0x60/0xb0 [ 463.513434][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.513444][T12747] RIP: 0033:0x7f62ccd7e719 [ 463.513457][T12747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.513467][T12747] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 463.513482][T12747] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 463.513490][T12747] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 463.513497][T12747] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 463.513504][T12747] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 463.513512][T12747] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 463.513532][T12747] [ 463.514852][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 463.514932][T12747] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 463.514948][T12747] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 463.514971][T12747] BTRFS info (device loop0 state EA): forced readonly [ 463.514983][T12747] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 463.515011][T12747] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 463.515047][T12747] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 463.549340][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.550476][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 463.550495][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 464.141060][T12765] loop0: detected capacity change from 0 to 32768 [ 464.159727][T12765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.396 (12765) [ 464.175438][T12765] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.175496][T12765] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 464.216991][T12765] BTRFS info (device loop0): enabling ssd optimizations [ 464.217015][T12765] BTRFS info (device loop0): enabling free space tree [ 464.286058][T12765] FAULT_INJECTION: forcing a failure. [ 464.286058][T12765] name failslab, interval 1, probability 0, space 0, times 0 [ 464.286085][T12765] CPU: 0 UID: 0 PID: 12765 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT(full) [ 464.286098][T12765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.286106][T12765] Call Trace: [ 464.286112][T12765] [ 464.286117][T12765] dump_stack_lvl+0x189/0x250 [ 464.286151][T12765] ? __pfx____ratelimit+0x10/0x10 [ 464.286175][T12765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.286190][T12765] ? __pfx__printk+0x10/0x10 [ 464.286208][T12765] ? __pfx___might_resched+0x10/0x10 [ 464.286226][T12765] ? fs_reclaim_acquire+0x7d/0x100 [ 464.286244][T12765] should_fail_ex+0x414/0x560 [ 464.286263][T12765] should_failslab+0xa8/0x100 [ 464.286279][T12765] kmem_cache_alloc_noprof+0x73/0x3c0 [ 464.286292][T12765] ? alloc_extent_state+0x22/0x2f0 [ 464.286313][T12765] alloc_extent_state+0x22/0x2f0 [ 464.286330][T12765] set_extent_bit+0x270/0x21a0 [ 464.286365][T12765] ? __pfx_set_extent_bit+0x10/0x10 [ 464.286389][T12765] btrfs_set_extent_bit+0x38/0x50 [ 464.286407][T12765] btrfs_alloc_tree_block+0x965/0x1290 [ 464.286432][T12765] ? __bpf_address_lookup+0x370/0x3f0 [ 464.286450][T12765] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 464.286462][T12765] ? kernel_text_address+0xa5/0xe0 [ 464.286486][T12765] ? __kernel_text_address+0xd/0x40 [ 464.286500][T12765] ? unwind_get_return_address+0x4d/0x90 [ 464.286513][T12765] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.286532][T12765] ? read_extent_buffer+0x120/0x5e0 [ 464.286547][T12765] btrfs_force_cow_block+0x578/0x2460 [ 464.286563][T12765] ? __lock_acquire+0xab9/0xd20 [ 464.286587][T12765] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 464.286613][T12765] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 464.286629][T12765] ? down_write_nested+0x169/0x200 [ 464.286643][T12765] ? __pfx_down_write_nested+0x10/0x10 [ 464.286659][T12765] btrfs_cow_block+0x40a/0x9a0 [ 464.286683][T12765] btrfs_search_slot+0xd11/0x2b90 [ 464.286715][T12765] ? __pfx_btrfs_search_slot+0x10/0x10 [ 464.286732][T12765] ? kasan_save_track+0x4f/0x80 [ 464.286745][T12765] ? __kasan_slab_alloc+0x6c/0x80 [ 464.286757][T12765] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 464.286768][T12765] ? __btrfs_free_extent+0x2f9/0x4250 [ 464.286778][T12765] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 464.286797][T12765] lookup_inline_extent_backref+0x321/0x17b0 [ 464.286809][T12765] ? do_iter_readv_writev+0x619/0x8b0 [ 464.286822][T12765] ? vfs_writev+0x31a/0x960 [ 464.286836][T12765] ? __se_sys_pwritev2+0x179/0x290 [ 464.286849][T12765] ? do_syscall_64+0xfa/0x3b0 [ 464.286883][T12765] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 464.286910][T12765] ? rcu_is_watching+0x15/0xb0 [ 464.286922][T12765] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 464.286929][T12765] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 464.286939][T12765] __btrfs_free_extent+0x428/0x4250 [ 464.286962][T12765] ? __pfx___btrfs_free_extent+0x10/0x10 [ 464.286979][T12765] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 464.286998][T12765] ? __lock_acquire+0xab9/0xd20 [ 464.287037][T12765] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 464.287057][T12765] ? kernel_text_address+0xa5/0xe0 [ 464.287073][T12765] ? __kernel_text_address+0xd/0x40 [ 464.287087][T12765] ? unwind_get_return_address+0x4d/0x90 [ 464.287099][T12765] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.287112][T12765] ? arch_stack_walk+0xfc/0x150 [ 464.287133][T12765] ? __lock_acquire+0xab9/0xd20 [ 464.287157][T12765] ? btrfs_commit_transaction+0x161/0x3950 [ 464.287178][T12765] btrfs_run_delayed_refs+0xe6/0x3b0 [ 464.287198][T12765] btrfs_commit_transaction+0x269/0x3950 [ 464.287211][T12765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.287229][T12765] ? btrfs_commit_transaction+0x161/0x3950 [ 464.287263][T12765] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 464.287282][T12765] ? do_raw_spin_unlock+0x4d/0x240 [ 464.287292][T12765] ? join_transaction+0x41b/0xd70 [ 464.287304][T12765] ? btrfs_record_root_in_trans+0x124/0x180 [ 464.287315][T12765] ? start_transaction+0x439/0x1620 [ 464.287333][T12765] try_flush_qgroup+0x1dd/0x380 [ 464.287343][T12765] ? kfree+0x18e/0x440 [ 464.287352][T12765] ? __pfx_try_flush_qgroup+0x10/0x10 [ 464.287367][T12765] ? qgroup_reserve_data+0x6cc/0x8d0 [ 464.287391][T12765] btrfs_qgroup_reserve_data+0x69/0xb0 [ 464.287410][T12765] btrfs_check_data_free_space+0x2ce/0x450 [ 464.287428][T12765] btrfs_buffered_write+0x46c/0x16c0 [ 464.287464][T12765] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 464.287482][T12765] ? aa_file_perm+0x44d/0x1550 [ 464.287507][T12765] btrfs_do_write_iter+0x238/0x710 [ 464.287530][T12765] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 464.287545][T12765] do_iter_readv_writev+0x619/0x8b0 [ 464.287560][T12765] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 464.287572][T12765] ? rcu_read_lock_any_held+0xb3/0x120 [ 464.287597][T12765] vfs_writev+0x31a/0x960 [ 464.287617][T12765] ? __lock_acquire+0xab9/0xd20 [ 464.287635][T12765] ? __pfx_vfs_writev+0x10/0x10 [ 464.287656][T12765] ? __fget_files+0x2a/0x420 [ 464.287668][T12765] ? __fget_files+0x3a0/0x420 [ 464.287679][T12765] ? __fget_files+0x2a/0x420 [ 464.287699][T12765] __se_sys_pwritev2+0x179/0x290 [ 464.287716][T12765] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 464.287728][T12765] ? rcu_is_watching+0x15/0xb0 [ 464.287743][T12765] ? do_syscall_64+0xbe/0x3b0 [ 464.287757][T12765] ? __x64_sys_pwritev2+0x20/0xc0 [ 464.287772][T12765] do_syscall_64+0xfa/0x3b0 [ 464.287818][T12765] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.287836][T12765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.287847][T12765] ? clear_bhb_loop+0x60/0xb0 [ 464.287862][T12765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.287870][T12765] RIP: 0033:0x7f62ccd7e719 [ 464.287879][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.287890][T12765] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 464.287904][T12765] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 464.287912][T12765] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 464.287919][T12765] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 464.287926][T12765] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 464.287933][T12765] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 464.287955][T12765] [ 464.326438][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 464.376226][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.955088][T12783] loop0: detected capacity change from 0 to 32768 [ 464.964547][T12783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.397 (12783) [ 464.971342][T12783] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.971396][T12783] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 465.025541][T12783] BTRFS info (device loop0): enabling ssd optimizations [ 465.025561][T12783] BTRFS info (device loop0): enabling free space tree [ 465.076696][T12783] FAULT_INJECTION: forcing a failure. [ 465.076696][T12783] name failslab, interval 1, probability 0, space 0, times 0 [ 465.076721][T12783] CPU: 0 UID: 0 PID: 12783 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(full) [ 465.076734][T12783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.076741][T12783] Call Trace: [ 465.076747][T12783] [ 465.076753][T12783] dump_stack_lvl+0x189/0x250 [ 465.076773][T12783] ? __pfx____ratelimit+0x10/0x10 [ 465.076790][T12783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.076805][T12783] ? __pfx__printk+0x10/0x10 [ 465.076824][T12783] ? __pfx___might_resched+0x10/0x10 [ 465.076836][T12783] ? fs_reclaim_acquire+0x7d/0x100 [ 465.076856][T12783] should_fail_ex+0x414/0x560 [ 465.076875][T12783] should_failslab+0xa8/0x100 [ 465.076892][T12783] kmem_cache_alloc_noprof+0x73/0x3c0 [ 465.076906][T12783] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 465.076925][T12783] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 465.076956][T12783] __btrfs_free_extent+0x167b/0x4250 [ 465.076992][T12783] ? __pfx___btrfs_free_extent+0x10/0x10 [ 465.077020][T12783] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 465.077045][T12783] ? __lock_acquire+0xab9/0xd20 [ 465.077078][T12783] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 465.077096][T12783] ? kernel_text_address+0xa5/0xe0 [ 465.077114][T12783] ? __kernel_text_address+0xd/0x40 [ 465.077128][T12783] ? unwind_get_return_address+0x4d/0x90 [ 465.077140][T12783] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.077155][T12783] ? arch_stack_walk+0xfc/0x150 [ 465.077176][T12783] ? __lock_acquire+0xab9/0xd20 [ 465.077199][T12783] ? btrfs_commit_transaction+0x161/0x3950 [ 465.077220][T12783] btrfs_run_delayed_refs+0xe6/0x3b0 [ 465.077240][T12783] btrfs_commit_transaction+0x269/0x3950 [ 465.077253][T12783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.077266][T12783] ? btrfs_commit_transaction+0x161/0x3950 [ 465.077297][T12783] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 465.077316][T12783] ? do_raw_spin_unlock+0x4d/0x240 [ 465.077329][T12783] ? join_transaction+0x41b/0xd70 [ 465.077350][T12783] ? btrfs_record_root_in_trans+0x124/0x180 [ 465.077366][T12783] ? start_transaction+0x439/0x1620 [ 465.077394][T12783] try_flush_qgroup+0x1dd/0x380 [ 465.077409][T12783] ? kfree+0x18e/0x440 [ 465.077422][T12783] ? __pfx_try_flush_qgroup+0x10/0x10 [ 465.077438][T12783] ? qgroup_reserve_data+0x6cc/0x8d0 [ 465.077464][T12783] btrfs_qgroup_reserve_data+0x69/0xb0 [ 465.077481][T12783] btrfs_check_data_free_space+0x2ce/0x450 [ 465.077499][T12783] btrfs_buffered_write+0x46c/0x16c0 [ 465.077537][T12783] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 465.077554][T12783] ? aa_file_perm+0x44d/0x1550 [ 465.077580][T12783] btrfs_do_write_iter+0x238/0x710 [ 465.077602][T12783] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 465.077626][T12783] do_iter_readv_writev+0x619/0x8b0 [ 465.077645][T12783] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 465.077658][T12783] ? rcu_read_lock_any_held+0xb3/0x120 [ 465.077683][T12783] vfs_writev+0x31a/0x960 [ 465.077702][T12783] ? __lock_acquire+0xab9/0xd20 [ 465.077720][T12783] ? __pfx_vfs_writev+0x10/0x10 [ 465.077746][T12783] ? __fget_files+0x2a/0x420 [ 465.077764][T12783] ? __fget_files+0x3a0/0x420 [ 465.077778][T12783] ? __fget_files+0x2a/0x420 [ 465.077798][T12783] __se_sys_pwritev2+0x179/0x290 [ 465.077815][T12783] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 465.077827][T12783] ? rcu_is_watching+0x15/0xb0 [ 465.077843][T12783] ? do_syscall_64+0xbe/0x3b0 [ 465.077859][T12783] ? __x64_sys_pwritev2+0x20/0xc0 [ 465.077875][T12783] do_syscall_64+0xfa/0x3b0 [ 465.077890][T12783] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.077905][T12783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.077916][T12783] ? clear_bhb_loop+0x60/0xb0 [ 465.077938][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.077949][T12783] RIP: 0033:0x7f62ccd7e719 [ 465.077960][T12783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.077970][T12783] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 465.077984][T12783] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 465.077993][T12783] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 465.078001][T12783] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 465.078008][T12783] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 465.078014][T12783] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 465.078033][T12783] [ 465.078042][T12783] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 465.078059][T12783] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 465.078073][T12783] BTRFS info (device loop0 state EA): forced readonly [ 465.078084][T12783] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 465.078112][T12783] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 465.078143][T12783] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 465.084240][ T1052] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 465.086405][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 465.112029][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 465.115340][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 465.115362][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 465.705594][T12801] loop0: detected capacity change from 0 to 32768 [ 465.718945][T12801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.398 (12801) [ 465.730750][T12801] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 465.730802][T12801] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 465.792978][T12801] BTRFS info (device loop0): enabling ssd optimizations [ 465.793000][T12801] BTRFS info (device loop0): enabling free space tree [ 465.843257][T12801] FAULT_INJECTION: forcing a failure. [ 465.843257][T12801] name failslab, interval 1, probability 0, space 0, times 0 [ 465.843286][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT(full) [ 465.843299][T12801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.843308][T12801] Call Trace: [ 465.843313][T12801] [ 465.843319][T12801] dump_stack_lvl+0x189/0x250 [ 465.843339][T12801] ? __pfx____ratelimit+0x10/0x10 [ 465.843358][T12801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.843372][T12801] ? __pfx__printk+0x10/0x10 [ 465.843393][T12801] ? __pfx___might_resched+0x10/0x10 [ 465.843406][T12801] ? fs_reclaim_acquire+0x7d/0x100 [ 465.843427][T12801] should_fail_ex+0x414/0x560 [ 465.843447][T12801] should_failslab+0xa8/0x100 [ 465.843463][T12801] kmem_cache_alloc_noprof+0x73/0x3c0 [ 465.843477][T12801] ? __btrfs_run_delayed_refs+0x1350/0x4130 [ 465.843499][T12801] __btrfs_run_delayed_refs+0x1350/0x4130 [ 465.843534][T12801] ? __lock_acquire+0xab9/0xd20 [ 465.843562][T12801] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 465.843582][T12801] ? rcu_is_watching+0x15/0xb0 [ 465.843596][T12801] ? trace_contention_end+0x39/0x120 [ 465.843615][T12801] ? btrfs_start_dirty_block_groups+0xd33/0x10a0 [ 465.843643][T12801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.843664][T12801] ? btrfs_block_rsv_release+0x529/0x5e0 [ 465.843684][T12801] btrfs_run_delayed_refs+0xe6/0x3b0 [ 465.843705][T12801] btrfs_start_dirty_block_groups+0xd3d/0x10a0 [ 465.843737][T12801] ? __pfx_btrfs_start_dirty_block_groups+0x10/0x10 [ 465.843754][T12801] ? __kasan_slab_alloc+0x6c/0x80 [ 465.843768][T12801] ? btrfs_trans_release_metadata+0x22d/0x330 [ 465.843828][T12801] btrfs_commit_transaction+0x674/0x3950 [ 465.843840][T12801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.843852][T12801] ? btrfs_commit_transaction+0x161/0x3950 [ 465.843879][T12801] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 465.843895][T12801] ? do_raw_spin_unlock+0x4d/0x240 [ 465.843907][T12801] ? join_transaction+0x41b/0xd70 [ 465.843924][T12801] ? btrfs_record_root_in_trans+0x124/0x180 [ 465.843938][T12801] ? start_transaction+0x439/0x1620 [ 465.843969][T12801] try_flush_qgroup+0x1dd/0x380 [ 465.843983][T12801] ? kfree+0x18e/0x440 [ 465.843994][T12801] ? __pfx_try_flush_qgroup+0x10/0x10 [ 465.844008][T12801] ? qgroup_reserve_data+0x6cc/0x8d0 [ 465.844030][T12801] btrfs_qgroup_reserve_data+0x69/0xb0 [ 465.844046][T12801] btrfs_check_data_free_space+0x2ce/0x450 [ 465.844061][T12801] btrfs_buffered_write+0x46c/0x16c0 [ 465.844094][T12801] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 465.844109][T12801] ? aa_file_perm+0x44d/0x1550 [ 465.844131][T12801] btrfs_do_write_iter+0x238/0x710 [ 465.844152][T12801] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 465.844173][T12801] do_iter_readv_writev+0x619/0x8b0 [ 465.844190][T12801] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 465.844200][T12801] ? rcu_read_lock_any_held+0xb3/0x120 [ 465.844222][T12801] vfs_writev+0x31a/0x960 [ 465.844240][T12801] ? __lock_acquire+0xab9/0xd20 [ 465.844255][T12801] ? __pfx_vfs_writev+0x10/0x10 [ 465.844279][T12801] ? __fget_files+0x2a/0x420 [ 465.844299][T12801] ? __fget_files+0x3a0/0x420 [ 465.844311][T12801] ? __fget_files+0x2a/0x420 [ 465.844330][T12801] __se_sys_pwritev2+0x179/0x290 [ 465.844345][T12801] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 465.844360][T12801] ? rcu_is_watching+0x15/0xb0 [ 465.844374][T12801] ? do_syscall_64+0xbe/0x3b0 [ 465.844389][T12801] ? __x64_sys_pwritev2+0x20/0xc0 [ 465.844403][T12801] do_syscall_64+0xfa/0x3b0 [ 465.844417][T12801] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.844430][T12801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.844440][T12801] ? clear_bhb_loop+0x60/0xb0 [ 465.844453][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.844463][T12801] RIP: 0033:0x7f62ccd7e719 [ 465.844473][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.844483][T12801] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 465.844496][T12801] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 465.844503][T12801] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 465.844510][T12801] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 465.844516][T12801] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 465.844522][T12801] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 465.844540][T12801] [ 465.844569][T12801] BTRFS error (device loop0): failed to run delayed ref for logical 5365760 num_bytes 4096 type 176 action 1 ref_mod 1: -12 [ 465.844602][T12801] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 465.844614][T12801] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 465.844626][T12801] BTRFS info (device loop0 state EA): forced readonly [ 465.881605][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 465.890143][ T1041] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 465.910093][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 465.910122][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 466.489411][T12819] loop0: detected capacity change from 0 to 32768 [ 466.510104][T12819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.399 (12819) [ 466.528509][T12819] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 466.528567][T12819] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 466.621792][T12819] BTRFS info (device loop0): enabling ssd optimizations [ 466.621813][T12819] BTRFS info (device loop0): enabling free space tree [ 466.672381][T12819] FAULT_INJECTION: forcing a failure. [ 466.672381][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 466.672408][T12819] CPU: 0 UID: 0 PID: 12819 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) [ 466.672422][T12819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.672429][T12819] Call Trace: [ 466.672435][T12819] [ 466.672441][T12819] dump_stack_lvl+0x189/0x250 [ 466.672461][T12819] ? __pfx____ratelimit+0x10/0x10 [ 466.672481][T12819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.672495][T12819] ? __pfx__printk+0x10/0x10 [ 466.672515][T12819] ? __pfx___might_resched+0x10/0x10 [ 466.672528][T12819] ? fs_reclaim_acquire+0x7d/0x100 [ 466.672549][T12819] should_fail_ex+0x414/0x560 [ 466.672568][T12819] should_failslab+0xa8/0x100 [ 466.672585][T12819] kmem_cache_alloc_noprof+0x73/0x3c0 [ 466.672598][T12819] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 466.672617][T12819] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 466.672637][T12819] __btrfs_free_extent+0x167b/0x4250 [ 466.672667][T12819] ? __pfx___btrfs_free_extent+0x10/0x10 [ 466.672696][T12819] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 466.672722][T12819] ? __lock_acquire+0xab9/0xd20 [ 466.672762][T12819] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 466.672783][T12819] ? kernel_text_address+0xa5/0xe0 [ 466.672801][T12819] ? __kernel_text_address+0xd/0x40 [ 466.672816][T12819] ? unwind_get_return_address+0x4d/0x90 [ 466.672830][T12819] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.672845][T12819] ? arch_stack_walk+0xfc/0x150 [ 466.672869][T12819] ? __lock_acquire+0xab9/0xd20 [ 466.672894][T12819] ? btrfs_commit_transaction+0x161/0x3950 [ 466.672916][T12819] btrfs_run_delayed_refs+0xe6/0x3b0 [ 466.672938][T12819] btrfs_commit_transaction+0x269/0x3950 [ 466.672952][T12819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.672968][T12819] ? btrfs_commit_transaction+0x161/0x3950 [ 466.673001][T12819] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 466.673022][T12819] ? do_raw_spin_unlock+0x4d/0x240 [ 466.673036][T12819] ? join_transaction+0x41b/0xd70 [ 466.673058][T12819] ? btrfs_record_root_in_trans+0x124/0x180 [ 466.673076][T12819] ? start_transaction+0x439/0x1620 [ 466.673107][T12819] try_flush_qgroup+0x1dd/0x380 [ 466.673123][T12819] ? kfree+0x18e/0x440 [ 466.673137][T12819] ? __pfx_try_flush_qgroup+0x10/0x10 [ 466.673155][T12819] ? qgroup_reserve_data+0x6cc/0x8d0 [ 466.673182][T12819] btrfs_qgroup_reserve_data+0x69/0xb0 [ 466.673201][T12819] btrfs_check_data_free_space+0x2ce/0x450 [ 466.673219][T12819] btrfs_buffered_write+0x46c/0x16c0 [ 466.673269][T12819] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 466.673288][T12819] ? aa_file_perm+0x44d/0x1550 [ 466.673313][T12819] btrfs_do_write_iter+0x238/0x710 [ 466.673338][T12819] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 466.673364][T12819] do_iter_readv_writev+0x619/0x8b0 [ 466.673385][T12819] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 466.673398][T12819] ? rcu_read_lock_any_held+0xb3/0x120 [ 466.673426][T12819] vfs_writev+0x31a/0x960 [ 466.673446][T12819] ? __lock_acquire+0xab9/0xd20 [ 466.673465][T12819] ? __pfx_vfs_writev+0x10/0x10 [ 466.673494][T12819] ? __fget_files+0x2a/0x420 [ 466.673513][T12819] ? __fget_files+0x3a0/0x420 [ 466.673528][T12819] ? __fget_files+0x2a/0x420 [ 466.673551][T12819] __se_sys_pwritev2+0x179/0x290 [ 466.673569][T12819] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 466.673582][T12819] ? rcu_is_watching+0x15/0xb0 [ 466.673599][T12819] ? do_syscall_64+0xbe/0x3b0 [ 466.673616][T12819] ? __x64_sys_pwritev2+0x20/0xc0 [ 466.673633][T12819] do_syscall_64+0xfa/0x3b0 [ 466.673649][T12819] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.673665][T12819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.673677][T12819] ? clear_bhb_loop+0x60/0xb0 [ 466.673692][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.673704][T12819] RIP: 0033:0x7f62ccd7e719 [ 466.673715][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.673726][T12819] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 466.673741][T12819] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 466.673749][T12819] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 466.673758][T12819] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 466.673765][T12819] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 466.673773][T12819] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 466.673794][T12819] [ 466.673803][T12819] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 466.673818][T12819] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 466.673833][T12819] BTRFS info (device loop0 state EA): forced readonly [ 466.673844][T12819] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 466.673871][T12819] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 466.673905][T12819] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 466.676062][ T1038] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 466.677774][ T1038] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 466.705739][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 466.706591][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 466.706611][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 467.317233][T12837] loop0: detected capacity change from 0 to 32768 [ 467.333902][T12837] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.400 (12837) [ 467.345750][T12837] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 467.345806][T12837] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 467.421542][T12837] BTRFS info (device loop0): enabling ssd optimizations [ 467.421562][T12837] BTRFS info (device loop0): enabling free space tree [ 467.469505][ T31] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 467.471563][T12837] FAULT_INJECTION: forcing a failure. [ 467.471563][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 467.471586][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT(full) [ 467.471600][T12837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.471607][T12837] Call Trace: [ 467.471612][T12837] [ 467.471617][T12837] dump_stack_lvl+0x189/0x250 [ 467.471635][T12837] ? __pfx____ratelimit+0x10/0x10 [ 467.471653][T12837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.471666][T12837] ? __pfx__printk+0x10/0x10 [ 467.471684][T12837] ? __pfx___might_resched+0x10/0x10 [ 467.471696][T12837] ? fs_reclaim_acquire+0x7d/0x100 [ 467.471716][T12837] should_fail_ex+0x414/0x560 [ 467.471735][T12837] should_failslab+0xa8/0x100 [ 467.471749][T12837] kmem_cache_alloc_noprof+0x73/0x3c0 [ 467.471758][T12837] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 467.471807][T12837] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 467.471826][T12837] __btrfs_free_extent+0x167b/0x4250 [ 467.471856][T12837] ? __pfx___btrfs_free_extent+0x10/0x10 [ 467.471881][T12837] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 467.471905][T12837] ? __lock_acquire+0xab9/0xd20 [ 467.471950][T12837] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 467.471971][T12837] ? kernel_text_address+0xa5/0xe0 [ 467.471988][T12837] ? __kernel_text_address+0xd/0x40 [ 467.472003][T12837] ? unwind_get_return_address+0x4d/0x90 [ 467.472017][T12837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.472032][T12837] ? arch_stack_walk+0xfc/0x150 [ 467.472054][T12837] ? __lock_acquire+0xab9/0xd20 [ 467.472078][T12837] ? btrfs_commit_transaction+0x161/0x3950 [ 467.472098][T12837] btrfs_run_delayed_refs+0xe6/0x3b0 [ 467.472119][T12837] btrfs_commit_transaction+0x269/0x3950 [ 467.472133][T12837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.472147][T12837] ? btrfs_commit_transaction+0x161/0x3950 [ 467.472175][T12837] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 467.472194][T12837] ? do_raw_spin_unlock+0x4d/0x240 [ 467.472207][T12837] ? join_transaction+0x41b/0xd70 [ 467.472228][T12837] ? btrfs_record_root_in_trans+0x124/0x180 [ 467.472244][T12837] ? start_transaction+0x439/0x1620 [ 467.472273][T12837] try_flush_qgroup+0x1dd/0x380 [ 467.472288][T12837] ? kfree+0x18e/0x440 [ 467.472302][T12837] ? __pfx_try_flush_qgroup+0x10/0x10 [ 467.472318][T12837] ? qgroup_reserve_data+0x6cc/0x8d0 [ 467.472344][T12837] btrfs_qgroup_reserve_data+0x69/0xb0 [ 467.472362][T12837] btrfs_check_data_free_space+0x2ce/0x450 [ 467.472379][T12837] btrfs_buffered_write+0x46c/0x16c0 [ 467.472418][T12837] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 467.472434][T12837] ? aa_file_perm+0x44d/0x1550 [ 467.472460][T12837] btrfs_do_write_iter+0x238/0x710 [ 467.472483][T12837] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 467.472507][T12837] do_iter_readv_writev+0x619/0x8b0 [ 467.472528][T12837] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 467.472541][T12837] ? rcu_read_lock_any_held+0xb3/0x120 [ 467.472567][T12837] vfs_writev+0x31a/0x960 [ 467.472586][T12837] ? __lock_acquire+0xab9/0xd20 [ 467.472603][T12837] ? __pfx_vfs_writev+0x10/0x10 [ 467.472631][T12837] ? __fget_files+0x2a/0x420 [ 467.472650][T12837] ? __fget_files+0x3a0/0x420 [ 467.472664][T12837] ? __fget_files+0x2a/0x420 [ 467.472685][T12837] __se_sys_pwritev2+0x179/0x290 [ 467.472701][T12837] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 467.472715][T12837] ? rcu_is_watching+0x15/0xb0 [ 467.472732][T12837] ? do_syscall_64+0xbe/0x3b0 [ 467.472749][T12837] ? __x64_sys_pwritev2+0x20/0xc0 [ 467.472766][T12837] do_syscall_64+0xfa/0x3b0 [ 467.472782][T12837] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.472798][T12837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.472809][T12837] ? clear_bhb_loop+0x60/0xb0 [ 467.472824][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.472836][T12837] RIP: 0033:0x7f62ccd7e719 [ 467.472848][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.472859][T12837] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 467.472872][T12837] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 467.472880][T12837] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 467.472887][T12837] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 467.472894][T12837] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 467.472901][T12837] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 467.472929][T12837] [ 467.472939][T12837] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 467.472955][T12837] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 467.472970][T12837] BTRFS info (device loop0 state EA): forced readonly [ 467.472981][T12837] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 467.473009][T12837] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 467.473042][T12837] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 467.503599][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 467.507508][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 467.507532][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 468.077303][T12855] loop0: detected capacity change from 0 to 32768 [ 468.085098][T12855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.401 (12855) [ 468.095743][T12855] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.095823][T12855] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 468.145005][T12855] BTRFS info (device loop0): enabling ssd optimizations [ 468.145028][T12855] BTRFS info (device loop0): enabling free space tree [ 468.202863][T12855] FAULT_INJECTION: forcing a failure. [ 468.202863][T12855] name failslab, interval 1, probability 0, space 0, times 0 [ 468.202893][T12855] CPU: 0 UID: 0 PID: 12855 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT(full) [ 468.202908][T12855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.202917][T12855] Call Trace: [ 468.202923][T12855] [ 468.202929][T12855] dump_stack_lvl+0x189/0x250 [ 468.203025][T12855] ? __pfx____ratelimit+0x10/0x10 [ 468.203073][T12855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.203088][T12855] ? __pfx__printk+0x10/0x10 [ 468.203110][T12855] ? __pfx___might_resched+0x10/0x10 [ 468.203158][T12855] should_fail_ex+0x414/0x560 [ 468.203178][T12855] should_failslab+0xa8/0x100 [ 468.203197][T12855] kmem_cache_alloc_noprof+0x73/0x3c0 [ 468.203211][T12855] ? __btrfs_run_delayed_items+0x94/0x540 [ 468.203230][T12855] __btrfs_run_delayed_items+0x94/0x540 [ 468.203247][T12855] ? schedule+0x16f/0x360 [ 468.203266][T12855] btrfs_commit_transaction+0xa30/0x3950 [ 468.203282][T12855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.203297][T12855] ? btrfs_commit_transaction+0x161/0x3950 [ 468.203329][T12855] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 468.203351][T12855] ? do_raw_spin_unlock+0x4d/0x240 [ 468.203366][T12855] ? join_transaction+0x41b/0xd70 [ 468.203388][T12855] ? __pfx_autoremove_wake_function+0x10/0x10 [ 468.203406][T12855] ? start_transaction+0x439/0x1620 [ 468.203437][T12855] try_flush_qgroup+0x1dd/0x380 [ 468.203454][T12855] ? kfree+0x18e/0x440 [ 468.203469][T12855] ? __pfx_try_flush_qgroup+0x10/0x10 [ 468.203486][T12855] ? qgroup_reserve_data+0x6cc/0x8d0 [ 468.203513][T12855] btrfs_qgroup_reserve_data+0x69/0xb0 [ 468.203533][T12855] btrfs_check_data_free_space+0x2ce/0x450 [ 468.203551][T12855] btrfs_buffered_write+0x46c/0x16c0 [ 468.203590][T12855] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 468.203609][T12855] ? aa_file_perm+0x44d/0x1550 [ 468.203635][T12855] btrfs_do_write_iter+0x238/0x710 [ 468.203660][T12855] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 468.203686][T12855] do_iter_readv_writev+0x619/0x8b0 [ 468.203707][T12855] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 468.203721][T12855] ? rcu_read_lock_any_held+0xb3/0x120 [ 468.203748][T12855] vfs_writev+0x31a/0x960 [ 468.203792][T12855] ? __lock_acquire+0xab9/0xd20 [ 468.203812][T12855] ? __pfx_vfs_writev+0x10/0x10 [ 468.203840][T12855] ? __fget_files+0x2a/0x420 [ 468.203861][T12855] ? __fget_files+0x3a0/0x420 [ 468.203876][T12855] ? __fget_files+0x2a/0x420 [ 468.203900][T12855] __se_sys_pwritev2+0x179/0x290 [ 468.203918][T12855] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 468.203931][T12855] ? rcu_is_watching+0x15/0xb0 [ 468.203957][T12855] ? do_syscall_64+0xbe/0x3b0 [ 468.203975][T12855] ? __x64_sys_pwritev2+0x20/0xc0 [ 468.203992][T12855] do_syscall_64+0xfa/0x3b0 [ 468.204008][T12855] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.204025][T12855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.204038][T12855] ? clear_bhb_loop+0x60/0xb0 [ 468.204053][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.204065][T12855] RIP: 0033:0x7f62ccd7e719 [ 468.204077][T12855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.204089][T12855] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 468.204104][T12855] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 468.204114][T12855] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 468.204121][T12855] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 468.204129][T12855] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 468.204136][T12855] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 468.204158][T12855] [ 468.204168][T12855] BTRFS warning (device loop0): Skipping commit of aborted transaction. [ 468.204182][T12855] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 468.204196][T12855] BTRFS: error (device loop0 state A) in cleanup_transaction:2023: errno=-12 Out of memory [ 468.204210][T12855] BTRFS info (device loop0 state EA): forced readonly [ 468.206138][ T1041] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 468.247137][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.251676][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 468.251701][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 468.842614][T12873] loop0: detected capacity change from 0 to 32768 [ 468.868798][T12873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.402 (12873) [ 468.886188][T12873] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.886244][T12873] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 468.946461][T12873] BTRFS info (device loop0): enabling ssd optimizations [ 468.946480][T12873] BTRFS info (device loop0): enabling free space tree [ 469.006256][T12873] FAULT_INJECTION: forcing a failure. [ 469.006256][T12873] name failslab, interval 1, probability 0, space 0, times 0 [ 469.006281][T12873] CPU: 0 UID: 0 PID: 12873 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 469.006290][T12873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.006296][T12873] Call Trace: [ 469.006300][T12873] [ 469.006303][T12873] dump_stack_lvl+0x189/0x250 [ 469.006317][T12873] ? __pfx____ratelimit+0x10/0x10 [ 469.006332][T12873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.006346][T12873] ? __pfx__printk+0x10/0x10 [ 469.006364][T12873] ? __pfx___might_resched+0x10/0x10 [ 469.006376][T12873] ? fs_reclaim_acquire+0x7d/0x100 [ 469.006400][T12873] should_fail_ex+0x414/0x560 [ 469.006416][T12873] should_failslab+0xa8/0x100 [ 469.006426][T12873] kmem_cache_alloc_noprof+0x73/0x3c0 [ 469.006435][T12873] ? alloc_extent_state+0x22/0x2f0 [ 469.006448][T12873] alloc_extent_state+0x22/0x2f0 [ 469.006459][T12873] set_extent_bit+0x270/0x21a0 [ 469.006479][T12873] ? __pfx_set_extent_bit+0x10/0x10 [ 469.006496][T12873] btrfs_set_extent_bit+0x38/0x50 [ 469.006514][T12873] btrfs_alloc_tree_block+0x965/0x1290 [ 469.006540][T12873] ? __bpf_address_lookup+0x370/0x3f0 [ 469.006557][T12873] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 469.006569][T12873] ? kernel_text_address+0xa5/0xe0 [ 469.006583][T12873] ? __kernel_text_address+0xd/0x40 [ 469.006593][T12873] ? unwind_get_return_address+0x4d/0x90 [ 469.006605][T12873] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.006623][T12873] ? read_extent_buffer+0x120/0x5e0 [ 469.006638][T12873] btrfs_force_cow_block+0x578/0x2460 [ 469.006654][T12873] ? __lock_acquire+0xab9/0xd20 [ 469.006677][T12873] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 469.006695][T12873] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 469.006705][T12873] ? down_write_nested+0x169/0x200 [ 469.006714][T12873] ? __pfx_down_write_nested+0x10/0x10 [ 469.006731][T12873] btrfs_cow_block+0x40a/0x9a0 [ 469.006754][T12873] btrfs_search_slot+0xd11/0x2b90 [ 469.006788][T12873] ? __pfx_btrfs_search_slot+0x10/0x10 [ 469.006803][T12873] ? kasan_save_track+0x4f/0x80 [ 469.006810][T12873] ? __kasan_slab_alloc+0x6c/0x80 [ 469.006817][T12873] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 469.006824][T12873] ? __btrfs_free_extent+0x2f9/0x4250 [ 469.006831][T12873] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 469.006843][T12873] lookup_inline_extent_backref+0x321/0x17b0 [ 469.006850][T12873] ? do_iter_readv_writev+0x619/0x8b0 [ 469.006859][T12873] ? vfs_writev+0x31a/0x960 [ 469.006867][T12873] ? __se_sys_pwritev2+0x179/0x290 [ 469.006875][T12873] ? do_syscall_64+0xfa/0x3b0 [ 469.006912][T12873] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 469.006939][T12873] ? rcu_is_watching+0x15/0xb0 [ 469.006950][T12873] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 469.006962][T12873] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 469.006977][T12873] __btrfs_free_extent+0x428/0x4250 [ 469.007006][T12873] ? __pfx___btrfs_free_extent+0x10/0x10 [ 469.007034][T12873] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 469.007059][T12873] ? __lock_acquire+0xab9/0xd20 [ 469.007091][T12873] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 469.007104][T12873] ? kernel_text_address+0xa5/0xe0 [ 469.007114][T12873] ? __kernel_text_address+0xd/0x40 [ 469.007123][T12873] ? unwind_get_return_address+0x4d/0x90 [ 469.007131][T12873] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.007139][T12873] ? arch_stack_walk+0xfc/0x150 [ 469.007155][T12873] ? __lock_acquire+0xab9/0xd20 [ 469.007170][T12873] ? btrfs_commit_transaction+0x161/0x3950 [ 469.007183][T12873] btrfs_run_delayed_refs+0xe6/0x3b0 [ 469.007196][T12873] btrfs_commit_transaction+0x269/0x3950 [ 469.007204][T12873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.007213][T12873] ? btrfs_commit_transaction+0x161/0x3950 [ 469.007232][T12873] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 469.007244][T12873] ? do_raw_spin_unlock+0x4d/0x240 [ 469.007253][T12873] ? join_transaction+0x41b/0xd70 [ 469.007265][T12873] ? btrfs_record_root_in_trans+0x124/0x180 [ 469.007277][T12873] ? start_transaction+0x439/0x1620 [ 469.007294][T12873] try_flush_qgroup+0x1dd/0x380 [ 469.007304][T12873] ? kfree+0x18e/0x440 [ 469.007312][T12873] ? __pfx_try_flush_qgroup+0x10/0x10 [ 469.007322][T12873] ? qgroup_reserve_data+0x6cc/0x8d0 [ 469.007339][T12873] btrfs_qgroup_reserve_data+0x69/0xb0 [ 469.007356][T12873] btrfs_check_data_free_space+0x2ce/0x450 [ 469.007372][T12873] btrfs_buffered_write+0x46c/0x16c0 [ 469.007398][T12873] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 469.007409][T12873] ? aa_file_perm+0x44d/0x1550 [ 469.007425][T12873] btrfs_do_write_iter+0x238/0x710 [ 469.007443][T12873] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 469.007466][T12873] do_iter_readv_writev+0x619/0x8b0 [ 469.007484][T12873] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 469.007492][T12873] ? rcu_read_lock_any_held+0xb3/0x120 [ 469.007508][T12873] vfs_writev+0x31a/0x960 [ 469.007520][T12873] ? __lock_acquire+0xab9/0xd20 [ 469.007531][T12873] ? __pfx_vfs_writev+0x10/0x10 [ 469.007548][T12873] ? __fget_files+0x2a/0x420 [ 469.007560][T12873] ? __fget_files+0x3a0/0x420 [ 469.007568][T12873] ? __fget_files+0x2a/0x420 [ 469.007582][T12873] __se_sys_pwritev2+0x179/0x290 [ 469.007592][T12873] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 469.007600][T12873] ? rcu_is_watching+0x15/0xb0 [ 469.007610][T12873] ? do_syscall_64+0xbe/0x3b0 [ 469.007620][T12873] ? __x64_sys_pwritev2+0x20/0xc0 [ 469.007630][T12873] do_syscall_64+0xfa/0x3b0 [ 469.007639][T12873] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.007649][T12873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.007656][T12873] ? clear_bhb_loop+0x60/0xb0 [ 469.007666][T12873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.007673][T12873] RIP: 0033:0x7f62ccd7e719 [ 469.007681][T12873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.007688][T12873] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 469.007698][T12873] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 469.007704][T12873] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 469.007709][T12873] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 469.007713][T12873] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 469.007718][T12873] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 469.007730][T12873] [ 469.031715][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 469.066276][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 469.647232][T12891] loop0: detected capacity change from 0 to 32768 [ 469.663587][T12891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.403 (12891) [ 469.682515][T12891] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 469.682576][T12891] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 469.735610][T12891] BTRFS info (device loop0): enabling ssd optimizations [ 469.735633][T12891] BTRFS info (device loop0): enabling free space tree [ 469.814194][T12891] FAULT_INJECTION: forcing a failure. [ 469.814194][T12891] name failslab, interval 1, probability 0, space 0, times 0 [ 469.814222][T12891] CPU: 0 UID: 0 PID: 12891 Comm: syz.0.403 Not tainted syzkaller #0 PREEMPT(full) [ 469.814234][T12891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.814242][T12891] Call Trace: [ 469.814247][T12891] [ 469.814254][T12891] dump_stack_lvl+0x189/0x250 [ 469.814271][T12891] ? __pfx____ratelimit+0x10/0x10 [ 469.814287][T12891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.814301][T12891] ? __pfx__printk+0x10/0x10 [ 469.814319][T12891] ? __pfx___might_resched+0x10/0x10 [ 469.814330][T12891] ? fs_reclaim_acquire+0x7d/0x100 [ 469.814350][T12891] should_fail_ex+0x414/0x560 [ 469.814367][T12891] should_failslab+0xa8/0x100 [ 469.814384][T12891] kmem_cache_alloc_noprof+0x73/0x3c0 [ 469.814396][T12891] ? alloc_extent_state+0x22/0x2f0 [ 469.814416][T12891] alloc_extent_state+0x22/0x2f0 [ 469.814433][T12891] set_extent_bit+0x270/0x21a0 [ 469.814463][T12891] ? __pfx_set_extent_bit+0x10/0x10 [ 469.814487][T12891] btrfs_set_extent_bit+0x38/0x50 [ 469.814506][T12891] btrfs_alloc_tree_block+0x965/0x1290 [ 469.814529][T12891] ? __bpf_address_lookup+0x370/0x3f0 [ 469.814546][T12891] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 469.814557][T12891] ? kernel_text_address+0xa5/0xe0 [ 469.814574][T12891] ? __kernel_text_address+0xd/0x40 [ 469.814589][T12891] ? unwind_get_return_address+0x4d/0x90 [ 469.814601][T12891] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.814619][T12891] ? read_extent_buffer+0x120/0x5e0 [ 469.814628][T12891] btrfs_force_cow_block+0x578/0x2460 [ 469.814638][T12891] ? __lock_acquire+0xab9/0xd20 [ 469.814653][T12891] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 469.814674][T12891] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 469.814689][T12891] ? down_write_nested+0x169/0x200 [ 469.814702][T12891] ? __pfx_down_write_nested+0x10/0x10 [ 469.814718][T12891] btrfs_cow_block+0x40a/0x9a0 [ 469.814741][T12891] btrfs_search_slot+0xd11/0x2b90 [ 469.814776][T12891] ? __pfx_btrfs_search_slot+0x10/0x10 [ 469.814793][T12891] ? kasan_save_track+0x4f/0x80 [ 469.814806][T12891] ? __kasan_slab_alloc+0x6c/0x80 [ 469.814817][T12891] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 469.814829][T12891] ? __btrfs_free_extent+0x2f9/0x4250 [ 469.814839][T12891] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 469.814857][T12891] lookup_inline_extent_backref+0x321/0x17b0 [ 469.814869][T12891] ? do_iter_readv_writev+0x619/0x8b0 [ 469.814881][T12891] ? vfs_writev+0x31a/0x960 [ 469.814894][T12891] ? __se_sys_pwritev2+0x179/0x290 [ 469.814913][T12891] ? do_syscall_64+0xfa/0x3b0 [ 469.814949][T12891] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 469.814976][T12891] ? rcu_is_watching+0x15/0xb0 [ 469.814989][T12891] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 469.815000][T12891] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 469.815015][T12891] __btrfs_free_extent+0x428/0x4250 [ 469.815045][T12891] ? __pfx___btrfs_free_extent+0x10/0x10 [ 469.815072][T12891] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 469.815096][T12891] ? __lock_acquire+0xab9/0xd20 [ 469.815133][T12891] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 469.815152][T12891] ? kernel_text_address+0xa5/0xe0 [ 469.815168][T12891] ? __kernel_text_address+0xd/0x40 [ 469.815182][T12891] ? unwind_get_return_address+0x4d/0x90 [ 469.815195][T12891] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.815208][T12891] ? arch_stack_walk+0xfc/0x150 [ 469.815229][T12891] ? __lock_acquire+0xab9/0xd20 [ 469.815254][T12891] ? btrfs_commit_transaction+0x161/0x3950 [ 469.815275][T12891] btrfs_run_delayed_refs+0xe6/0x3b0 [ 469.815294][T12891] btrfs_commit_transaction+0x269/0x3950 [ 469.815307][T12891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.815321][T12891] ? btrfs_commit_transaction+0x161/0x3950 [ 469.815354][T12891] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 469.815372][T12891] ? do_raw_spin_unlock+0x4d/0x240 [ 469.815385][T12891] ? join_transaction+0x41b/0xd70 [ 469.815404][T12891] ? btrfs_record_root_in_trans+0x124/0x180 [ 469.815421][T12891] ? start_transaction+0x439/0x1620 [ 469.815450][T12891] try_flush_qgroup+0x1dd/0x380 [ 469.815465][T12891] ? kfree+0x18e/0x440 [ 469.815477][T12891] ? __pfx_try_flush_qgroup+0x10/0x10 [ 469.815493][T12891] ? qgroup_reserve_data+0x6cc/0x8d0 [ 469.815518][T12891] btrfs_qgroup_reserve_data+0x69/0xb0 [ 469.815536][T12891] btrfs_check_data_free_space+0x2ce/0x450 [ 469.815553][T12891] btrfs_buffered_write+0x46c/0x16c0 [ 469.815594][T12891] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 469.815611][T12891] ? aa_file_perm+0x44d/0x1550 [ 469.815637][T12891] btrfs_do_write_iter+0x238/0x710 [ 469.815660][T12891] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 469.815684][T12891] do_iter_readv_writev+0x619/0x8b0 [ 469.815702][T12891] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 469.815714][T12891] ? rcu_read_lock_any_held+0xb3/0x120 [ 469.815739][T12891] vfs_writev+0x31a/0x960 [ 469.815795][T12891] ? __lock_acquire+0xab9/0xd20 [ 469.815814][T12891] ? __pfx_vfs_writev+0x10/0x10 [ 469.815841][T12891] ? __fget_files+0x2a/0x420 [ 469.815861][T12891] ? __fget_files+0x3a0/0x420 [ 469.815874][T12891] ? __fget_files+0x2a/0x420 [ 469.815894][T12891] __se_sys_pwritev2+0x179/0x290 [ 469.815918][T12891] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 469.815931][T12891] ? rcu_is_watching+0x15/0xb0 [ 469.815946][T12891] ? do_syscall_64+0xbe/0x3b0 [ 469.815961][T12891] ? __x64_sys_pwritev2+0x20/0xc0 [ 469.815978][T12891] do_syscall_64+0xfa/0x3b0 [ 469.815993][T12891] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.816007][T12891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.816018][T12891] ? clear_bhb_loop+0x60/0xb0 [ 469.816034][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.816045][T12891] RIP: 0033:0x7f62ccd7e719 [ 469.816056][T12891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.816066][T12891] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 469.816079][T12891] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 469.816087][T12891] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 469.816094][T12891] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 469.816102][T12891] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 469.816109][T12891] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 469.816128][T12891] [ 469.824865][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 469.872923][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.443280][T12909] loop0: detected capacity change from 0 to 32768 [ 470.455034][T12909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.404 (12909) [ 470.460004][T12909] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.460072][T12909] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 470.511383][T12909] BTRFS info (device loop0): enabling ssd optimizations [ 470.511410][T12909] BTRFS info (device loop0): enabling free space tree [ 470.580336][T12909] FAULT_INJECTION: forcing a failure. [ 470.580336][T12909] name failslab, interval 1, probability 0, space 0, times 0 [ 470.580364][T12909] CPU: 0 UID: 0 PID: 12909 Comm: syz.0.404 Not tainted syzkaller #0 PREEMPT(full) [ 470.580379][T12909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.580387][T12909] Call Trace: [ 470.580393][T12909] [ 470.580399][T12909] dump_stack_lvl+0x189/0x250 [ 470.580421][T12909] ? __pfx____ratelimit+0x10/0x10 [ 470.580439][T12909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.580454][T12909] ? __pfx__printk+0x10/0x10 [ 470.580475][T12909] ? __pfx___might_resched+0x10/0x10 [ 470.580488][T12909] ? fs_reclaim_acquire+0x7d/0x100 [ 470.580508][T12909] should_fail_ex+0x414/0x560 [ 470.580528][T12909] should_failslab+0xa8/0x100 [ 470.580546][T12909] kmem_cache_alloc_noprof+0x73/0x3c0 [ 470.580560][T12909] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 470.580581][T12909] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 470.580602][T12909] __btrfs_free_extent+0x167b/0x4250 [ 470.580632][T12909] ? __pfx___btrfs_free_extent+0x10/0x10 [ 470.580660][T12909] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 470.580688][T12909] ? __lock_acquire+0xab9/0xd20 [ 470.580728][T12909] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 470.580749][T12909] ? kernel_text_address+0xa5/0xe0 [ 470.580768][T12909] ? __kernel_text_address+0xd/0x40 [ 470.580783][T12909] ? unwind_get_return_address+0x4d/0x90 [ 470.580797][T12909] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.580812][T12909] ? arch_stack_walk+0xfc/0x150 [ 470.580836][T12909] ? __lock_acquire+0xab9/0xd20 [ 470.580862][T12909] ? btrfs_commit_transaction+0x161/0x3950 [ 470.580886][T12909] btrfs_run_delayed_refs+0xe6/0x3b0 [ 470.580908][T12909] btrfs_commit_transaction+0x269/0x3950 [ 470.580923][T12909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.580947][T12909] ? btrfs_commit_transaction+0x161/0x3950 [ 470.580979][T12909] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 470.581000][T12909] ? do_raw_spin_unlock+0x4d/0x240 [ 470.581015][T12909] ? join_transaction+0x41b/0xd70 [ 470.581037][T12909] ? btrfs_record_root_in_trans+0x124/0x180 [ 470.581055][T12909] ? start_transaction+0x439/0x1620 [ 470.581086][T12909] try_flush_qgroup+0x1dd/0x380 [ 470.581104][T12909] ? kfree+0x18e/0x440 [ 470.581118][T12909] ? __pfx_try_flush_qgroup+0x10/0x10 [ 470.581135][T12909] ? qgroup_reserve_data+0x6cc/0x8d0 [ 470.581168][T12909] btrfs_qgroup_reserve_data+0x69/0xb0 [ 470.581188][T12909] btrfs_check_data_free_space+0x2ce/0x450 [ 470.581206][T12909] btrfs_buffered_write+0x46c/0x16c0 [ 470.581251][T12909] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 470.581270][T12909] ? aa_file_perm+0x44d/0x1550 [ 470.581295][T12909] btrfs_do_write_iter+0x238/0x710 [ 470.581318][T12909] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 470.581342][T12909] do_iter_readv_writev+0x619/0x8b0 [ 470.581364][T12909] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 470.581378][T12909] ? rcu_read_lock_any_held+0xb3/0x120 [ 470.581405][T12909] vfs_writev+0x31a/0x960 [ 470.581426][T12909] ? __lock_acquire+0xab9/0xd20 [ 470.581445][T12909] ? __pfx_vfs_writev+0x10/0x10 [ 470.581474][T12909] ? __fget_files+0x2a/0x420 [ 470.581494][T12909] ? __fget_files+0x3a0/0x420 [ 470.581509][T12909] ? __fget_files+0x2a/0x420 [ 470.581532][T12909] __se_sys_pwritev2+0x179/0x290 [ 470.581551][T12909] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 470.581565][T12909] ? rcu_is_watching+0x15/0xb0 [ 470.581582][T12909] ? do_syscall_64+0xbe/0x3b0 [ 470.581598][T12909] ? __x64_sys_pwritev2+0x20/0xc0 [ 470.581615][T12909] do_syscall_64+0xfa/0x3b0 [ 470.581631][T12909] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.581648][T12909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.581660][T12909] ? clear_bhb_loop+0x60/0xb0 [ 470.581684][T12909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.581696][T12909] RIP: 0033:0x7f62ccd7e719 [ 470.581710][T12909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.581721][T12909] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 470.581736][T12909] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 470.581745][T12909] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 470.581753][T12909] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 470.581761][T12909] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 470.581770][T12909] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 470.581791][T12909] [ 470.581800][T12909] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 470.581817][T12909] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 470.581834][T12909] BTRFS info (device loop0 state EA): forced readonly [ 470.581845][T12909] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 470.581875][T12909] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 470.581911][T12909] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 470.584095][ T1052] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 470.584815][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 470.607582][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.630449][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 470.630475][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 471.327898][T12927] loop0: detected capacity change from 0 to 32768 [ 471.341494][T12927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.405 (12927) [ 471.345670][T12927] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 471.345727][T12927] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 471.393623][T12927] BTRFS info (device loop0): enabling ssd optimizations [ 471.393646][T12927] BTRFS info (device loop0): enabling free space tree [ 471.474523][T12927] FAULT_INJECTION: forcing a failure. [ 471.474523][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 471.474550][T12927] CPU: 0 UID: 0 PID: 12927 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(full) [ 471.474564][T12927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.474572][T12927] Call Trace: [ 471.474577][T12927] [ 471.474583][T12927] dump_stack_lvl+0x189/0x250 [ 471.474616][T12927] ? __pfx____ratelimit+0x10/0x10 [ 471.474633][T12927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.474642][T12927] ? __pfx__printk+0x10/0x10 [ 471.474654][T12927] ? __pfx___might_resched+0x10/0x10 [ 471.474671][T12927] ? fs_reclaim_acquire+0x7d/0x100 [ 471.474691][T12927] should_fail_ex+0x414/0x560 [ 471.474709][T12927] should_failslab+0xa8/0x100 [ 471.474726][T12927] kmem_cache_alloc_noprof+0x73/0x3c0 [ 471.474740][T12927] ? alloc_extent_state+0x22/0x2f0 [ 471.474757][T12927] alloc_extent_state+0x22/0x2f0 [ 471.474768][T12927] set_extent_bit+0x270/0x21a0 [ 471.474788][T12927] ? __pfx_set_extent_bit+0x10/0x10 [ 471.474804][T12927] btrfs_set_extent_bit+0x38/0x50 [ 471.474820][T12927] btrfs_alloc_tree_block+0x965/0x1290 [ 471.474844][T12927] ? __bpf_address_lookup+0x370/0x3f0 [ 471.474860][T12927] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 471.474871][T12927] ? kernel_text_address+0xa5/0xe0 [ 471.474886][T12927] ? __kernel_text_address+0xd/0x40 [ 471.474899][T12927] ? unwind_get_return_address+0x4d/0x90 [ 471.474912][T12927] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.474937][T12927] ? read_extent_buffer+0x120/0x5e0 [ 471.474951][T12927] btrfs_force_cow_block+0x578/0x2460 [ 471.474967][T12927] ? __lock_acquire+0xab9/0xd20 [ 471.474990][T12927] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 471.475016][T12927] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 471.475033][T12927] ? down_write_nested+0x169/0x200 [ 471.475046][T12927] ? __pfx_down_write_nested+0x10/0x10 [ 471.475062][T12927] btrfs_cow_block+0x40a/0x9a0 [ 471.475084][T12927] btrfs_search_slot+0xd11/0x2b90 [ 471.475119][T12927] ? __pfx_btrfs_search_slot+0x10/0x10 [ 471.475137][T12927] ? kasan_save_track+0x4f/0x80 [ 471.475148][T12927] ? __kasan_slab_alloc+0x6c/0x80 [ 471.475159][T12927] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 471.475170][T12927] ? __btrfs_free_extent+0x2f9/0x4250 [ 471.475180][T12927] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 471.475199][T12927] lookup_inline_extent_backref+0x321/0x17b0 [ 471.475211][T12927] ? do_iter_readv_writev+0x619/0x8b0 [ 471.475225][T12927] ? vfs_writev+0x31a/0x960 [ 471.475238][T12927] ? __se_sys_pwritev2+0x179/0x290 [ 471.475247][T12927] ? do_syscall_64+0xfa/0x3b0 [ 471.475272][T12927] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 471.475296][T12927] ? rcu_is_watching+0x15/0xb0 [ 471.475307][T12927] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 471.475317][T12927] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 471.475330][T12927] __btrfs_free_extent+0x428/0x4250 [ 471.475356][T12927] ? __pfx___btrfs_free_extent+0x10/0x10 [ 471.475382][T12927] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 471.475407][T12927] ? __lock_acquire+0xab9/0xd20 [ 471.475442][T12927] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 471.475461][T12927] ? kernel_text_address+0xa5/0xe0 [ 471.475477][T12927] ? __kernel_text_address+0xd/0x40 [ 471.475491][T12927] ? unwind_get_return_address+0x4d/0x90 [ 471.475503][T12927] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.475516][T12927] ? arch_stack_walk+0xfc/0x150 [ 471.475539][T12927] ? __lock_acquire+0xab9/0xd20 [ 471.475563][T12927] ? btrfs_commit_transaction+0x161/0x3950 [ 471.475585][T12927] btrfs_run_delayed_refs+0xe6/0x3b0 [ 471.475604][T12927] btrfs_commit_transaction+0x269/0x3950 [ 471.475618][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.475631][T12927] ? btrfs_commit_transaction+0x161/0x3950 [ 471.475662][T12927] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 471.475682][T12927] ? do_raw_spin_unlock+0x4d/0x240 [ 471.475696][T12927] ? join_transaction+0x41b/0xd70 [ 471.475716][T12927] ? btrfs_record_root_in_trans+0x124/0x180 [ 471.475760][T12927] ? start_transaction+0x439/0x1620 [ 471.475792][T12927] try_flush_qgroup+0x1dd/0x380 [ 471.475807][T12927] ? kfree+0x18e/0x440 [ 471.475821][T12927] ? __pfx_try_flush_qgroup+0x10/0x10 [ 471.475837][T12927] ? qgroup_reserve_data+0x6cc/0x8d0 [ 471.475861][T12927] btrfs_qgroup_reserve_data+0x69/0xb0 [ 471.475880][T12927] btrfs_check_data_free_space+0x2ce/0x450 [ 471.475897][T12927] btrfs_buffered_write+0x46c/0x16c0 [ 471.475941][T12927] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 471.475958][T12927] ? aa_file_perm+0x44d/0x1550 [ 471.475981][T12927] btrfs_do_write_iter+0x238/0x710 [ 471.476005][T12927] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 471.476030][T12927] do_iter_readv_writev+0x619/0x8b0 [ 471.476049][T12927] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 471.476061][T12927] ? rcu_read_lock_any_held+0xb3/0x120 [ 471.476088][T12927] vfs_writev+0x31a/0x960 [ 471.476107][T12927] ? __lock_acquire+0xab9/0xd20 [ 471.476120][T12927] ? __pfx_vfs_writev+0x10/0x10 [ 471.476143][T12927] ? __fget_files+0x2a/0x420 [ 471.476161][T12927] ? __fget_files+0x3a0/0x420 [ 471.476175][T12927] ? __fget_files+0x2a/0x420 [ 471.476195][T12927] __se_sys_pwritev2+0x179/0x290 [ 471.476211][T12927] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 471.476224][T12927] ? rcu_is_watching+0x15/0xb0 [ 471.476241][T12927] ? do_syscall_64+0xbe/0x3b0 [ 471.476255][T12927] ? __x64_sys_pwritev2+0x20/0xc0 [ 471.476272][T12927] do_syscall_64+0xfa/0x3b0 [ 471.476287][T12927] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.476301][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.476312][T12927] ? clear_bhb_loop+0x60/0xb0 [ 471.476327][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.476345][T12927] RIP: 0033:0x7f62ccd7e719 [ 471.476358][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.476368][T12927] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 471.476381][T12927] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 471.476390][T12927] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 471.476402][T12927] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 471.476410][T12927] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 471.476417][T12927] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 471.476438][T12927] [ 471.503176][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 471.537516][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.130497][T12945] loop0: detected capacity change from 0 to 32768 [ 472.140878][T12945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.406 (12945) [ 472.145128][T12945] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.145186][T12945] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 472.202001][T12945] BTRFS info (device loop0): enabling ssd optimizations [ 472.202026][T12945] BTRFS info (device loop0): enabling free space tree [ 472.263511][T12945] FAULT_INJECTION: forcing a failure. [ 472.263511][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 472.263537][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT(full) [ 472.263551][T12945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.263559][T12945] Call Trace: [ 472.263564][T12945] [ 472.263569][T12945] dump_stack_lvl+0x189/0x250 [ 472.263588][T12945] ? __pfx____ratelimit+0x10/0x10 [ 472.263605][T12945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.263619][T12945] ? __pfx__printk+0x10/0x10 [ 472.263637][T12945] ? __pfx___might_resched+0x10/0x10 [ 472.263648][T12945] ? fs_reclaim_acquire+0x7d/0x100 [ 472.263669][T12945] should_fail_ex+0x414/0x560 [ 472.263687][T12945] should_failslab+0xa8/0x100 [ 472.263705][T12945] kmem_cache_alloc_noprof+0x73/0x3c0 [ 472.263753][T12945] ? alloc_extent_state+0x22/0x2f0 [ 472.263777][T12945] alloc_extent_state+0x22/0x2f0 [ 472.263795][T12945] set_extent_bit+0x270/0x21a0 [ 472.263828][T12945] ? __pfx_set_extent_bit+0x10/0x10 [ 472.263850][T12945] btrfs_set_extent_bit+0x38/0x50 [ 472.263877][T12945] btrfs_alloc_tree_block+0x965/0x1290 [ 472.263901][T12945] ? __bpf_address_lookup+0x370/0x3f0 [ 472.263917][T12945] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 472.263930][T12945] ? kernel_text_address+0xa5/0xe0 [ 472.263946][T12945] ? __kernel_text_address+0xd/0x40 [ 472.263960][T12945] ? unwind_get_return_address+0x4d/0x90 [ 472.263972][T12945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.263990][T12945] ? read_extent_buffer+0x120/0x5e0 [ 472.264005][T12945] btrfs_force_cow_block+0x578/0x2460 [ 472.264021][T12945] ? __lock_acquire+0xab9/0xd20 [ 472.264044][T12945] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 472.264070][T12945] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 472.264086][T12945] ? down_write_nested+0x169/0x200 [ 472.264101][T12945] ? __pfx_down_write_nested+0x10/0x10 [ 472.264117][T12945] btrfs_cow_block+0x40a/0x9a0 [ 472.264139][T12945] btrfs_search_slot+0xd11/0x2b90 [ 472.264183][T12945] ? __pfx_btrfs_search_slot+0x10/0x10 [ 472.264198][T12945] ? kasan_save_track+0x4f/0x80 [ 472.264211][T12945] ? __kasan_slab_alloc+0x6c/0x80 [ 472.264223][T12945] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 472.264235][T12945] ? __btrfs_free_extent+0x2f9/0x4250 [ 472.264245][T12945] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 472.264263][T12945] lookup_inline_extent_backref+0x321/0x17b0 [ 472.264275][T12945] ? do_iter_readv_writev+0x619/0x8b0 [ 472.264288][T12945] ? vfs_writev+0x31a/0x960 [ 472.264301][T12945] ? __se_sys_pwritev2+0x179/0x290 [ 472.264314][T12945] ? do_syscall_64+0xfa/0x3b0 [ 472.264347][T12945] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 472.264374][T12945] ? rcu_is_watching+0x15/0xb0 [ 472.264386][T12945] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 472.264397][T12945] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 472.264411][T12945] __btrfs_free_extent+0x428/0x4250 [ 472.264440][T12945] ? __pfx___btrfs_free_extent+0x10/0x10 [ 472.264468][T12945] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 472.264491][T12945] ? __lock_acquire+0xab9/0xd20 [ 472.264529][T12945] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 472.264548][T12945] ? kernel_text_address+0xa5/0xe0 [ 472.264565][T12945] ? __kernel_text_address+0xd/0x40 [ 472.264579][T12945] ? unwind_get_return_address+0x4d/0x90 [ 472.264591][T12945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.264605][T12945] ? arch_stack_walk+0xfc/0x150 [ 472.264628][T12945] ? __lock_acquire+0xab9/0xd20 [ 472.264652][T12945] ? btrfs_commit_transaction+0x161/0x3950 [ 472.264674][T12945] btrfs_run_delayed_refs+0xe6/0x3b0 [ 472.264694][T12945] btrfs_commit_transaction+0x269/0x3950 [ 472.264708][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.264722][T12945] ? btrfs_commit_transaction+0x161/0x3950 [ 472.264755][T12945] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 472.264773][T12945] ? do_raw_spin_unlock+0x4d/0x240 [ 472.264786][T12945] ? join_transaction+0x41b/0xd70 [ 472.264805][T12945] ? btrfs_record_root_in_trans+0x124/0x180 [ 472.264822][T12945] ? start_transaction+0x439/0x1620 [ 472.264852][T12945] try_flush_qgroup+0x1dd/0x380 [ 472.264875][T12945] ? kfree+0x18e/0x440 [ 472.264888][T12945] ? __pfx_try_flush_qgroup+0x10/0x10 [ 472.264904][T12945] ? qgroup_reserve_data+0x6cc/0x8d0 [ 472.264932][T12945] btrfs_qgroup_reserve_data+0x69/0xb0 [ 472.264951][T12945] btrfs_check_data_free_space+0x2ce/0x450 [ 472.264968][T12945] btrfs_buffered_write+0x46c/0x16c0 [ 472.265005][T12945] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 472.265022][T12945] ? aa_file_perm+0x44d/0x1550 [ 472.265045][T12945] btrfs_do_write_iter+0x238/0x710 [ 472.265069][T12945] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 472.265092][T12945] do_iter_readv_writev+0x619/0x8b0 [ 472.265111][T12945] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 472.265123][T12945] ? rcu_read_lock_any_held+0xb3/0x120 [ 472.265148][T12945] vfs_writev+0x31a/0x960 [ 472.265168][T12945] ? __lock_acquire+0xab9/0xd20 [ 472.265187][T12945] ? __pfx_vfs_writev+0x10/0x10 [ 472.265212][T12945] ? __fget_files+0x2a/0x420 [ 472.265231][T12945] ? __fget_files+0x3a0/0x420 [ 472.265244][T12945] ? __fget_files+0x2a/0x420 [ 472.265267][T12945] __se_sys_pwritev2+0x179/0x290 [ 472.265283][T12945] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 472.265295][T12945] ? rcu_is_watching+0x15/0xb0 [ 472.265312][T12945] ? do_syscall_64+0xbe/0x3b0 [ 472.265327][T12945] ? __x64_sys_pwritev2+0x20/0xc0 [ 472.265344][T12945] do_syscall_64+0xfa/0x3b0 [ 472.265358][T12945] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.265370][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.265378][T12945] ? clear_bhb_loop+0x60/0xb0 [ 472.265387][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.265394][T12945] RIP: 0033:0x7f62ccd7e719 [ 472.265403][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.265410][T12945] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 472.265419][T12945] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 472.265425][T12945] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 472.265430][T12945] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 472.265434][T12945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 472.265439][T12945] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 472.265457][T12945] [ 472.277932][ T1038] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 472.343845][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.941337][T12963] loop0: detected capacity change from 0 to 32768 [ 472.949065][T12963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.407 (12963) [ 472.971227][T12963] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.971329][T12963] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 473.003792][T12963] BTRFS info (device loop0): enabling ssd optimizations [ 473.003814][T12963] BTRFS info (device loop0): enabling free space tree [ 473.061121][T12963] FAULT_INJECTION: forcing a failure. [ 473.061121][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 473.061148][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.0.407 Not tainted syzkaller #0 PREEMPT(full) [ 473.061168][T12963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 473.061177][T12963] Call Trace: [ 473.061182][T12963] [ 473.061188][T12963] dump_stack_lvl+0x189/0x250 [ 473.061207][T12963] ? __pfx____ratelimit+0x10/0x10 [ 473.061224][T12963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.061239][T12963] ? __pfx__printk+0x10/0x10 [ 473.061258][T12963] ? __pfx___might_resched+0x10/0x10 [ 473.061272][T12963] ? fs_reclaim_acquire+0x7d/0x100 [ 473.061291][T12963] should_fail_ex+0x414/0x560 [ 473.061312][T12963] should_failslab+0xa8/0x100 [ 473.061330][T12963] kmem_cache_alloc_noprof+0x73/0x3c0 [ 473.061344][T12963] ? alloc_extent_state+0x22/0x2f0 [ 473.061364][T12963] alloc_extent_state+0x22/0x2f0 [ 473.061382][T12963] set_extent_bit+0x270/0x21a0 [ 473.061415][T12963] ? __pfx_set_extent_bit+0x10/0x10 [ 473.061441][T12963] btrfs_set_extent_bit+0x38/0x50 [ 473.061461][T12963] btrfs_alloc_tree_block+0x965/0x1290 [ 473.061486][T12963] ? __bpf_address_lookup+0x370/0x3f0 [ 473.061506][T12963] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 473.061517][T12963] ? kernel_text_address+0xa5/0xe0 [ 473.061536][T12963] ? __kernel_text_address+0xd/0x40 [ 473.061551][T12963] ? unwind_get_return_address+0x4d/0x90 [ 473.061564][T12963] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.061582][T12963] ? read_extent_buffer+0x120/0x5e0 [ 473.061598][T12963] btrfs_force_cow_block+0x578/0x2460 [ 473.061613][T12963] ? __lock_acquire+0xab9/0xd20 [ 473.061637][T12963] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 473.061663][T12963] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 473.061679][T12963] ? down_write_nested+0x169/0x200 [ 473.061695][T12963] ? __pfx_down_write_nested+0x10/0x10 [ 473.061711][T12963] btrfs_cow_block+0x40a/0x9a0 [ 473.061735][T12963] btrfs_search_slot+0xd11/0x2b90 [ 473.061769][T12963] ? __pfx_btrfs_search_slot+0x10/0x10 [ 473.061789][T12963] ? kasan_save_track+0x4f/0x80 [ 473.061800][T12963] ? __kasan_slab_alloc+0x6c/0x80 [ 473.061813][T12963] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 473.061824][T12963] ? __btrfs_free_extent+0x2f9/0x4250 [ 473.061834][T12963] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 473.061854][T12963] lookup_inline_extent_backref+0x321/0x17b0 [ 473.061866][T12963] ? do_iter_readv_writev+0x619/0x8b0 [ 473.061881][T12963] ? vfs_writev+0x31a/0x960 [ 473.061894][T12963] ? __se_sys_pwritev2+0x179/0x290 [ 473.061907][T12963] ? do_syscall_64+0xfa/0x3b0 [ 473.061942][T12963] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 473.061967][T12963] ? rcu_is_watching+0x15/0xb0 [ 473.061981][T12963] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 473.061993][T12963] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 473.062007][T12963] __btrfs_free_extent+0x428/0x4250 [ 473.062037][T12963] ? __pfx___btrfs_free_extent+0x10/0x10 [ 473.062067][T12963] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 473.062093][T12963] ? __lock_acquire+0xab9/0xd20 [ 473.062130][T12963] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 473.062157][T12963] ? kernel_text_address+0xa5/0xe0 [ 473.062173][T12963] ? __kernel_text_address+0xd/0x40 [ 473.062189][T12963] ? unwind_get_return_address+0x4d/0x90 [ 473.062201][T12963] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.062216][T12963] ? arch_stack_walk+0xfc/0x150 [ 473.062238][T12963] ? __lock_acquire+0xab9/0xd20 [ 473.062264][T12963] ? btrfs_commit_transaction+0x161/0x3950 [ 473.062285][T12963] btrfs_run_delayed_refs+0xe6/0x3b0 [ 473.062305][T12963] btrfs_commit_transaction+0x269/0x3950 [ 473.062321][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.062334][T12963] ? btrfs_commit_transaction+0x161/0x3950 [ 473.062367][T12963] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 473.062390][T12963] ? do_raw_spin_unlock+0x4d/0x240 [ 473.062404][T12963] ? join_transaction+0x41b/0xd70 [ 473.062424][T12963] ? btrfs_record_root_in_trans+0x124/0x180 [ 473.062442][T12963] ? start_transaction+0x439/0x1620 [ 473.062472][T12963] try_flush_qgroup+0x1dd/0x380 [ 473.062489][T12963] ? kfree+0x18e/0x440 [ 473.062502][T12963] ? __pfx_try_flush_qgroup+0x10/0x10 [ 473.062520][T12963] ? qgroup_reserve_data+0x6cc/0x8d0 [ 473.062547][T12963] btrfs_qgroup_reserve_data+0x69/0xb0 [ 473.062565][T12963] btrfs_check_data_free_space+0x2ce/0x450 [ 473.062584][T12963] btrfs_buffered_write+0x46c/0x16c0 [ 473.062622][T12963] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 473.062642][T12963] ? aa_file_perm+0x44d/0x1550 [ 473.062666][T12963] btrfs_do_write_iter+0x238/0x710 [ 473.062691][T12963] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 473.062717][T12963] do_iter_readv_writev+0x619/0x8b0 [ 473.062737][T12963] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 473.062750][T12963] ? rcu_read_lock_any_held+0xb3/0x120 [ 473.062776][T12963] vfs_writev+0x31a/0x960 [ 473.062797][T12963] ? __lock_acquire+0xab9/0xd20 [ 473.062816][T12963] ? __pfx_vfs_writev+0x10/0x10 [ 473.062843][T12963] ? __fget_files+0x2a/0x420 [ 473.062863][T12963] ? __fget_files+0x3a0/0x420 [ 473.062876][T12963] ? __fget_files+0x2a/0x420 [ 473.062895][T12963] __se_sys_pwritev2+0x179/0x290 [ 473.062914][T12963] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 473.062926][T12963] ? rcu_is_watching+0x15/0xb0 [ 473.062941][T12963] ? do_syscall_64+0xbe/0x3b0 [ 473.062955][T12963] ? __x64_sys_pwritev2+0x20/0xc0 [ 473.062972][T12963] do_syscall_64+0xfa/0x3b0 [ 473.062987][T12963] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.063003][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.063014][T12963] ? clear_bhb_loop+0x60/0xb0 [ 473.063030][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.063042][T12963] RIP: 0033:0x7f62ccd7e719 [ 473.063054][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.063063][T12963] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 473.063076][T12963] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 473.063084][T12963] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 473.063091][T12963] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 473.063098][T12963] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 473.063105][T12963] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 473.063144][T12963] [ 473.073975][ T1038] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 473.124012][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.709979][T12981] loop0: detected capacity change from 0 to 32768 [ 473.717068][T12981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.408 (12981) [ 473.723852][T12981] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.723915][T12981] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 473.792468][T12981] BTRFS info (device loop0): enabling ssd optimizations [ 473.792489][T12981] BTRFS info (device loop0): enabling free space tree [ 473.840494][T12981] FAULT_INJECTION: forcing a failure. [ 473.840494][T12981] name failslab, interval 1, probability 0, space 0, times 0 [ 473.840520][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.0.408 Not tainted syzkaller #0 PREEMPT(full) [ 473.840534][T12981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 473.840542][T12981] Call Trace: [ 473.840547][T12981] [ 473.840553][T12981] dump_stack_lvl+0x189/0x250 [ 473.840572][T12981] ? __pfx____ratelimit+0x10/0x10 [ 473.840589][T12981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.840603][T12981] ? __pfx__printk+0x10/0x10 [ 473.840621][T12981] ? __pfx___might_resched+0x10/0x10 [ 473.840632][T12981] ? fs_reclaim_acquire+0x7d/0x100 [ 473.840652][T12981] should_fail_ex+0x414/0x560 [ 473.840671][T12981] should_failslab+0xa8/0x100 [ 473.840689][T12981] kmem_cache_alloc_noprof+0x73/0x3c0 [ 473.840701][T12981] ? alloc_extent_state+0x22/0x2f0 [ 473.840721][T12981] alloc_extent_state+0x22/0x2f0 [ 473.840739][T12981] set_extent_bit+0x270/0x21a0 [ 473.840772][T12981] ? __pfx_set_extent_bit+0x10/0x10 [ 473.840791][T12981] btrfs_set_extent_bit+0x38/0x50 [ 473.840811][T12981] btrfs_alloc_tree_block+0x965/0x1290 [ 473.840837][T12981] ? __bpf_address_lookup+0x370/0x3f0 [ 473.840854][T12981] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 473.840867][T12981] ? kernel_text_address+0xa5/0xe0 [ 473.840890][T12981] ? __kernel_text_address+0xd/0x40 [ 473.840904][T12981] ? unwind_get_return_address+0x4d/0x90 [ 473.840917][T12981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.840935][T12981] ? read_extent_buffer+0x120/0x5e0 [ 473.840950][T12981] btrfs_force_cow_block+0x578/0x2460 [ 473.840966][T12981] ? __lock_acquire+0xab9/0xd20 [ 473.840989][T12981] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 473.841015][T12981] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 473.841026][T12981] ? down_write_nested+0x169/0x200 [ 473.841039][T12981] ? __pfx_down_write_nested+0x10/0x10 [ 473.841057][T12981] btrfs_cow_block+0x40a/0x9a0 [ 473.841080][T12981] btrfs_search_slot+0xd11/0x2b90 [ 473.841113][T12981] ? __pfx_btrfs_search_slot+0x10/0x10 [ 473.841127][T12981] ? kasan_save_track+0x4f/0x80 [ 473.841138][T12981] ? __kasan_slab_alloc+0x6c/0x80 [ 473.841150][T12981] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 473.841161][T12981] ? __btrfs_free_extent+0x2f9/0x4250 [ 473.841172][T12981] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 473.841191][T12981] lookup_inline_extent_backref+0x321/0x17b0 [ 473.841202][T12981] ? do_iter_readv_writev+0x619/0x8b0 [ 473.841214][T12981] ? vfs_writev+0x31a/0x960 [ 473.841229][T12981] ? __se_sys_pwritev2+0x179/0x290 [ 473.841240][T12981] ? do_syscall_64+0xfa/0x3b0 [ 473.841277][T12981] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 473.841305][T12981] ? rcu_is_watching+0x15/0xb0 [ 473.841319][T12981] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 473.841330][T12981] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 473.841345][T12981] __btrfs_free_extent+0x428/0x4250 [ 473.841374][T12981] ? __pfx___btrfs_free_extent+0x10/0x10 [ 473.841401][T12981] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 473.841425][T12981] ? __lock_acquire+0xab9/0xd20 [ 473.841463][T12981] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 473.841482][T12981] ? kernel_text_address+0xa5/0xe0 [ 473.841499][T12981] ? __kernel_text_address+0xd/0x40 [ 473.841514][T12981] ? unwind_get_return_address+0x4d/0x90 [ 473.841527][T12981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.841541][T12981] ? arch_stack_walk+0xfc/0x150 [ 473.841562][T12981] ? __lock_acquire+0xab9/0xd20 [ 473.841586][T12981] ? btrfs_commit_transaction+0x161/0x3950 [ 473.841607][T12981] btrfs_run_delayed_refs+0xe6/0x3b0 [ 473.841627][T12981] btrfs_commit_transaction+0x269/0x3950 [ 473.841641][T12981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.841655][T12981] ? btrfs_commit_transaction+0x161/0x3950 [ 473.841687][T12981] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 473.841707][T12981] ? do_raw_spin_unlock+0x4d/0x240 [ 473.841720][T12981] ? join_transaction+0x41b/0xd70 [ 473.841741][T12981] ? btrfs_record_root_in_trans+0x124/0x180 [ 473.841757][T12981] ? start_transaction+0x439/0x1620 [ 473.841786][T12981] try_flush_qgroup+0x1dd/0x380 [ 473.841801][T12981] ? kfree+0x18e/0x440 [ 473.841813][T12981] ? __pfx_try_flush_qgroup+0x10/0x10 [ 473.841830][T12981] ? qgroup_reserve_data+0x6cc/0x8d0 [ 473.841854][T12981] btrfs_qgroup_reserve_data+0x69/0xb0 [ 473.841873][T12981] btrfs_check_data_free_space+0x2ce/0x450 [ 473.841899][T12981] btrfs_buffered_write+0x46c/0x16c0 [ 473.841938][T12981] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 473.841956][T12981] ? aa_file_perm+0x44d/0x1550 [ 473.841980][T12981] btrfs_do_write_iter+0x238/0x710 [ 473.841996][T12981] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 473.842019][T12981] do_iter_readv_writev+0x619/0x8b0 [ 473.842040][T12981] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 473.842052][T12981] ? rcu_read_lock_any_held+0xb3/0x120 [ 473.842077][T12981] vfs_writev+0x31a/0x960 [ 473.842098][T12981] ? __lock_acquire+0xab9/0xd20 [ 473.842117][T12981] ? __pfx_vfs_writev+0x10/0x10 [ 473.842143][T12981] ? __fget_files+0x2a/0x420 [ 473.842161][T12981] ? __fget_files+0x3a0/0x420 [ 473.842175][T12981] ? __fget_files+0x2a/0x420 [ 473.842196][T12981] __se_sys_pwritev2+0x179/0x290 [ 473.842213][T12981] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 473.842226][T12981] ? rcu_is_watching+0x15/0xb0 [ 473.842242][T12981] ? do_syscall_64+0xbe/0x3b0 [ 473.842257][T12981] ? __x64_sys_pwritev2+0x20/0xc0 [ 473.842273][T12981] do_syscall_64+0xfa/0x3b0 [ 473.842288][T12981] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.842303][T12981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.842315][T12981] ? clear_bhb_loop+0x60/0xb0 [ 473.842330][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.842340][T12981] RIP: 0033:0x7f62ccd7e719 [ 473.842352][T12981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.842362][T12981] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 473.842375][T12981] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 473.842384][T12981] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 473.842391][T12981] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 473.842398][T12981] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 473.842404][T12981] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 473.842424][T12981] [ 473.874436][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 473.912388][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.469252][T12999] loop0: detected capacity change from 0 to 32768 [ 474.483259][T12999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.409 (12999) [ 474.489304][T12999] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.489351][T12999] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 474.551839][T12999] BTRFS info (device loop0): enabling ssd optimizations [ 474.551861][T12999] BTRFS info (device loop0): enabling free space tree [ 474.615235][T12999] FAULT_INJECTION: forcing a failure. [ 474.615235][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 474.615262][T12999] CPU: 0 UID: 0 PID: 12999 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(full) [ 474.615276][T12999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 474.615283][T12999] Call Trace: [ 474.615289][T12999] [ 474.615295][T12999] dump_stack_lvl+0x189/0x250 [ 474.615328][T12999] ? __pfx____ratelimit+0x10/0x10 [ 474.615349][T12999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.615363][T12999] ? __pfx__printk+0x10/0x10 [ 474.615381][T12999] ? __pfx___might_resched+0x10/0x10 [ 474.615398][T12999] ? fs_reclaim_acquire+0x7d/0x100 [ 474.615417][T12999] should_fail_ex+0x414/0x560 [ 474.615436][T12999] should_failslab+0xa8/0x100 [ 474.615451][T12999] kmem_cache_alloc_noprof+0x73/0x3c0 [ 474.615464][T12999] ? alloc_extent_state+0x22/0x2f0 [ 474.615483][T12999] alloc_extent_state+0x22/0x2f0 [ 474.615500][T12999] set_extent_bit+0x270/0x21a0 [ 474.615532][T12999] ? __pfx_set_extent_bit+0x10/0x10 [ 474.615556][T12999] btrfs_set_extent_bit+0x38/0x50 [ 474.615575][T12999] btrfs_alloc_tree_block+0x965/0x1290 [ 474.615600][T12999] ? __bpf_address_lookup+0x370/0x3f0 [ 474.615617][T12999] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 474.615630][T12999] ? kernel_text_address+0xa5/0xe0 [ 474.615647][T12999] ? __kernel_text_address+0xd/0x40 [ 474.615661][T12999] ? unwind_get_return_address+0x4d/0x90 [ 474.615674][T12999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.615693][T12999] ? read_extent_buffer+0x120/0x5e0 [ 474.615740][T12999] btrfs_force_cow_block+0x578/0x2460 [ 474.615757][T12999] ? __lock_acquire+0xab9/0xd20 [ 474.615779][T12999] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 474.615804][T12999] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 474.615821][T12999] ? down_write_nested+0x169/0x200 [ 474.615833][T12999] ? __pfx_down_write_nested+0x10/0x10 [ 474.615856][T12999] btrfs_cow_block+0x40a/0x9a0 [ 474.615880][T12999] btrfs_search_slot+0xd11/0x2b90 [ 474.615913][T12999] ? __pfx_btrfs_search_slot+0x10/0x10 [ 474.615930][T12999] ? kasan_save_track+0x4f/0x80 [ 474.615942][T12999] ? __kasan_slab_alloc+0x6c/0x80 [ 474.615953][T12999] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 474.615965][T12999] ? __btrfs_free_extent+0x2f9/0x4250 [ 474.615976][T12999] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 474.615995][T12999] lookup_inline_extent_backref+0x321/0x17b0 [ 474.616007][T12999] ? do_iter_readv_writev+0x619/0x8b0 [ 474.616019][T12999] ? vfs_writev+0x31a/0x960 [ 474.616032][T12999] ? __se_sys_pwritev2+0x179/0x290 [ 474.616043][T12999] ? do_syscall_64+0xfa/0x3b0 [ 474.616077][T12999] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 474.616105][T12999] ? rcu_is_watching+0x15/0xb0 [ 474.616117][T12999] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 474.616128][T12999] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 474.616143][T12999] __btrfs_free_extent+0x428/0x4250 [ 474.616172][T12999] ? __pfx___btrfs_free_extent+0x10/0x10 [ 474.616201][T12999] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 474.616224][T12999] ? __lock_acquire+0xab9/0xd20 [ 474.616262][T12999] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 474.616282][T12999] ? kernel_text_address+0xa5/0xe0 [ 474.616297][T12999] ? __kernel_text_address+0xd/0x40 [ 474.616311][T12999] ? unwind_get_return_address+0x4d/0x90 [ 474.616323][T12999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.616336][T12999] ? arch_stack_walk+0xfc/0x150 [ 474.616358][T12999] ? __lock_acquire+0xab9/0xd20 [ 474.616382][T12999] ? btrfs_commit_transaction+0x161/0x3950 [ 474.616403][T12999] btrfs_run_delayed_refs+0xe6/0x3b0 [ 474.616423][T12999] btrfs_commit_transaction+0x269/0x3950 [ 474.616437][T12999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.616447][T12999] ? btrfs_commit_transaction+0x161/0x3950 [ 474.616473][T12999] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 474.616493][T12999] ? do_raw_spin_unlock+0x4d/0x240 [ 474.616506][T12999] ? join_transaction+0x41b/0xd70 [ 474.616527][T12999] ? btrfs_record_root_in_trans+0x124/0x180 [ 474.616543][T12999] ? start_transaction+0x439/0x1620 [ 474.616574][T12999] try_flush_qgroup+0x1dd/0x380 [ 474.616588][T12999] ? kfree+0x18e/0x440 [ 474.616601][T12999] ? __pfx_try_flush_qgroup+0x10/0x10 [ 474.616617][T12999] ? qgroup_reserve_data+0x6cc/0x8d0 [ 474.616644][T12999] btrfs_qgroup_reserve_data+0x69/0xb0 [ 474.616662][T12999] btrfs_check_data_free_space+0x2ce/0x450 [ 474.616681][T12999] btrfs_buffered_write+0x46c/0x16c0 [ 474.616718][T12999] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 474.616734][T12999] ? aa_file_perm+0x44d/0x1550 [ 474.616758][T12999] btrfs_do_write_iter+0x238/0x710 [ 474.616782][T12999] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 474.616807][T12999] do_iter_readv_writev+0x619/0x8b0 [ 474.616827][T12999] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 474.616840][T12999] ? rcu_read_lock_any_held+0xb3/0x120 [ 474.616874][T12999] vfs_writev+0x31a/0x960 [ 474.616892][T12999] ? __lock_acquire+0xab9/0xd20 [ 474.616910][T12999] ? __pfx_vfs_writev+0x10/0x10 [ 474.616937][T12999] ? __fget_files+0x2a/0x420 [ 474.616955][T12999] ? __fget_files+0x3a0/0x420 [ 474.616969][T12999] ? __fget_files+0x2a/0x420 [ 474.616991][T12999] __se_sys_pwritev2+0x179/0x290 [ 474.617008][T12999] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 474.617020][T12999] ? rcu_is_watching+0x15/0xb0 [ 474.617037][T12999] ? do_syscall_64+0xbe/0x3b0 [ 474.617052][T12999] ? __x64_sys_pwritev2+0x20/0xc0 [ 474.617068][T12999] do_syscall_64+0xfa/0x3b0 [ 474.617083][T12999] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.617098][T12999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.617110][T12999] ? clear_bhb_loop+0x60/0xb0 [ 474.617124][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.617134][T12999] RIP: 0033:0x7f62ccd7e719 [ 474.617145][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.617155][T12999] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 474.617168][T12999] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 474.617177][T12999] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 474.617184][T12999] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 474.617191][T12999] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 474.617198][T12999] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 474.617217][T12999] [ 474.650904][ T1038] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 474.681943][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.249536][T13017] loop0: detected capacity change from 0 to 32768 [ 475.274418][T13017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.410 (13017) [ 475.277343][T13017] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.277395][T13017] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 475.341891][T13017] BTRFS info (device loop0): enabling ssd optimizations [ 475.341913][T13017] BTRFS info (device loop0): enabling free space tree [ 475.391555][T13017] FAULT_INJECTION: forcing a failure. [ 475.391555][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 475.391581][T13017] CPU: 0 UID: 0 PID: 13017 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(full) [ 475.391594][T13017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 475.391601][T13017] Call Trace: [ 475.391606][T13017] [ 475.391612][T13017] dump_stack_lvl+0x189/0x250 [ 475.391630][T13017] ? __pfx____ratelimit+0x10/0x10 [ 475.391647][T13017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.391661][T13017] ? __pfx__printk+0x10/0x10 [ 475.391677][T13017] ? __pfx___might_resched+0x10/0x10 [ 475.391690][T13017] ? fs_reclaim_acquire+0x7d/0x100 [ 475.391740][T13017] should_fail_ex+0x414/0x560 [ 475.391764][T13017] should_failslab+0xa8/0x100 [ 475.391780][T13017] kmem_cache_alloc_noprof+0x73/0x3c0 [ 475.391791][T13017] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 475.391802][T13017] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 475.391814][T13017] __btrfs_free_extent+0x167b/0x4250 [ 475.391830][T13017] ? __pfx___btrfs_free_extent+0x10/0x10 [ 475.391846][T13017] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 475.391867][T13017] ? __lock_acquire+0xab9/0xd20 [ 475.391895][T13017] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 475.391914][T13017] ? kernel_text_address+0xa5/0xe0 [ 475.391930][T13017] ? __kernel_text_address+0xd/0x40 [ 475.391944][T13017] ? unwind_get_return_address+0x4d/0x90 [ 475.391956][T13017] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 475.391970][T13017] ? arch_stack_walk+0xfc/0x150 [ 475.391992][T13017] ? __lock_acquire+0xab9/0xd20 [ 475.392014][T13017] ? btrfs_commit_transaction+0x161/0x3950 [ 475.392035][T13017] btrfs_run_delayed_refs+0xe6/0x3b0 [ 475.392054][T13017] btrfs_commit_transaction+0x269/0x3950 [ 475.392067][T13017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.392081][T13017] ? btrfs_commit_transaction+0x161/0x3950 [ 475.392110][T13017] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 475.392129][T13017] ? do_raw_spin_unlock+0x4d/0x240 [ 475.392143][T13017] ? join_transaction+0x41b/0xd70 [ 475.392163][T13017] ? btrfs_record_root_in_trans+0x124/0x180 [ 475.392179][T13017] ? start_transaction+0x439/0x1620 [ 475.392197][T13017] try_flush_qgroup+0x1dd/0x380 [ 475.392212][T13017] ? kfree+0x18e/0x440 [ 475.392224][T13017] ? __pfx_try_flush_qgroup+0x10/0x10 [ 475.392240][T13017] ? qgroup_reserve_data+0x6cc/0x8d0 [ 475.392266][T13017] btrfs_qgroup_reserve_data+0x69/0xb0 [ 475.392283][T13017] btrfs_check_data_free_space+0x2ce/0x450 [ 475.392301][T13017] btrfs_buffered_write+0x46c/0x16c0 [ 475.392339][T13017] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 475.392356][T13017] ? aa_file_perm+0x44d/0x1550 [ 475.392380][T13017] btrfs_do_write_iter+0x238/0x710 [ 475.392403][T13017] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 475.392425][T13017] do_iter_readv_writev+0x619/0x8b0 [ 475.392445][T13017] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 475.392457][T13017] ? rcu_read_lock_any_held+0xb3/0x120 [ 475.392482][T13017] vfs_writev+0x31a/0x960 [ 475.392501][T13017] ? __lock_acquire+0xab9/0xd20 [ 475.392520][T13017] ? __pfx_vfs_writev+0x10/0x10 [ 475.392549][T13017] ? __fget_files+0x2a/0x420 [ 475.392567][T13017] ? __fget_files+0x3a0/0x420 [ 475.392582][T13017] ? __fget_files+0x2a/0x420 [ 475.392602][T13017] __se_sys_pwritev2+0x179/0x290 [ 475.392617][T13017] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 475.392631][T13017] ? rcu_is_watching+0x15/0xb0 [ 475.392647][T13017] ? do_syscall_64+0xbe/0x3b0 [ 475.392664][T13017] ? __x64_sys_pwritev2+0x20/0xc0 [ 475.392681][T13017] do_syscall_64+0xfa/0x3b0 [ 475.392696][T13017] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.392711][T13017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.392722][T13017] ? clear_bhb_loop+0x60/0xb0 [ 475.392736][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.392748][T13017] RIP: 0033:0x7f62ccd7e719 [ 475.392760][T13017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.392770][T13017] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 475.392783][T13017] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 475.392791][T13017] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 475.392798][T13017] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 475.392805][T13017] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 475.392811][T13017] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 475.392829][T13017] [ 475.392839][T13017] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 475.392862][T13017] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 475.392876][T13017] BTRFS info (device loop0 state EA): forced readonly [ 475.392887][T13017] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 475.392915][T13017] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 475.392948][T13017] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 475.410885][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 475.434713][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.435552][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 475.435572][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 476.079478][T13035] loop0: detected capacity change from 0 to 32768 [ 476.101954][T13035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.411 (13035) [ 476.106073][T13035] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.106124][T13035] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 476.148185][T13035] BTRFS info (device loop0): enabling ssd optimizations [ 476.148208][T13035] BTRFS info (device loop0): enabling free space tree [ 476.224074][T13035] FAULT_INJECTION: forcing a failure. [ 476.224074][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 476.224101][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 476.224115][T13035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 476.224122][T13035] Call Trace: [ 476.224127][T13035] [ 476.224132][T13035] dump_stack_lvl+0x189/0x250 [ 476.224146][T13035] ? __pfx____ratelimit+0x10/0x10 [ 476.224164][T13035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.224174][T13035] ? __pfx__printk+0x10/0x10 [ 476.224186][T13035] ? __pfx___might_resched+0x10/0x10 [ 476.224193][T13035] ? fs_reclaim_acquire+0x7d/0x100 [ 476.224207][T13035] should_fail_ex+0x414/0x560 [ 476.224220][T13035] should_failslab+0xa8/0x100 [ 476.224230][T13035] kmem_cache_alloc_noprof+0x73/0x3c0 [ 476.224239][T13035] ? alloc_extent_state+0x22/0x2f0 [ 476.224252][T13035] alloc_extent_state+0x22/0x2f0 [ 476.224263][T13035] set_extent_bit+0x270/0x21a0 [ 476.224283][T13035] ? __pfx_set_extent_bit+0x10/0x10 [ 476.224298][T13035] btrfs_set_extent_bit+0x38/0x50 [ 476.224311][T13035] btrfs_alloc_tree_block+0x965/0x1290 [ 476.224326][T13035] ? __bpf_address_lookup+0x370/0x3f0 [ 476.224338][T13035] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 476.224346][T13035] ? kernel_text_address+0xa5/0xe0 [ 476.224358][T13035] ? __kernel_text_address+0xd/0x40 [ 476.224372][T13035] ? unwind_get_return_address+0x4d/0x90 [ 476.224385][T13035] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.224402][T13035] ? read_extent_buffer+0x120/0x5e0 [ 476.224416][T13035] btrfs_force_cow_block+0x578/0x2460 [ 476.224432][T13035] ? __lock_acquire+0xab9/0xd20 [ 476.224455][T13035] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 476.224482][T13035] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 476.224498][T13035] ? down_write_nested+0x169/0x200 [ 476.224511][T13035] ? __pfx_down_write_nested+0x10/0x10 [ 476.224528][T13035] btrfs_cow_block+0x40a/0x9a0 [ 476.224551][T13035] btrfs_search_slot+0xd11/0x2b90 [ 476.224563][T13035] ? nl80211_set_wiphy+0x1f80/0x2f60 [ 476.224648][T13035] ? __pfx_btrfs_search_slot+0x10/0x10 [ 476.224664][T13035] ? kasan_save_track+0x4f/0x80 [ 476.224676][T13035] ? __kasan_slab_alloc+0x6c/0x80 [ 476.224688][T13035] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 476.224699][T13035] ? __btrfs_free_extent+0x2f9/0x4250 [ 476.224710][T13035] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 476.224723][T13035] lookup_inline_extent_backref+0x321/0x17b0 [ 476.224731][T13035] ? do_iter_readv_writev+0x619/0x8b0 [ 476.224739][T13035] ? vfs_writev+0x31a/0x960 [ 476.224748][T13035] ? __se_sys_pwritev2+0x179/0x290 [ 476.224756][T13035] ? do_syscall_64+0xfa/0x3b0 [ 476.224777][T13035] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 476.224793][T13035] ? rcu_is_watching+0x15/0xb0 [ 476.224802][T13035] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 476.224809][T13035] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 476.224818][T13035] __btrfs_free_extent+0x428/0x4250 [ 476.224836][T13035] ? __pfx___btrfs_free_extent+0x10/0x10 [ 476.224853][T13035] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 476.224874][T13035] ? __lock_acquire+0xab9/0xd20 [ 476.224911][T13035] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 476.224934][T13035] ? kernel_text_address+0xa5/0xe0 [ 476.224949][T13035] ? __kernel_text_address+0xd/0x40 [ 476.224962][T13035] ? unwind_get_return_address+0x4d/0x90 [ 476.224975][T13035] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.224989][T13035] ? arch_stack_walk+0xfc/0x150 [ 476.225009][T13035] ? __lock_acquire+0xab9/0xd20 [ 476.225035][T13035] ? btrfs_commit_transaction+0x161/0x3950 [ 476.225056][T13035] btrfs_run_delayed_refs+0xe6/0x3b0 [ 476.225075][T13035] btrfs_commit_transaction+0x269/0x3950 [ 476.225088][T13035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.225102][T13035] ? btrfs_commit_transaction+0x161/0x3950 [ 476.225134][T13035] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 476.225153][T13035] ? do_raw_spin_unlock+0x4d/0x240 [ 476.225172][T13035] ? join_transaction+0x41b/0xd70 [ 476.225193][T13035] ? btrfs_record_root_in_trans+0x124/0x180 [ 476.225211][T13035] ? start_transaction+0x439/0x1620 [ 476.225238][T13035] try_flush_qgroup+0x1dd/0x380 [ 476.225254][T13035] ? kfree+0x18e/0x440 [ 476.225268][T13035] ? __pfx_try_flush_qgroup+0x10/0x10 [ 476.225284][T13035] ? qgroup_reserve_data+0x6cc/0x8d0 [ 476.225307][T13035] btrfs_qgroup_reserve_data+0x69/0xb0 [ 476.225319][T13035] btrfs_check_data_free_space+0x2ce/0x450 [ 476.225331][T13035] btrfs_buffered_write+0x46c/0x16c0 [ 476.225355][T13035] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 476.225366][T13035] ? aa_file_perm+0x44d/0x1550 [ 476.225381][T13035] btrfs_do_write_iter+0x238/0x710 [ 476.225396][T13035] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 476.225417][T13035] do_iter_readv_writev+0x619/0x8b0 [ 476.225437][T13035] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 476.225448][T13035] ? rcu_read_lock_any_held+0xb3/0x120 [ 476.225472][T13035] vfs_writev+0x31a/0x960 [ 476.225491][T13035] ? __lock_acquire+0xab9/0xd20 [ 476.225508][T13035] ? __pfx_vfs_writev+0x10/0x10 [ 476.225533][T13035] ? __fget_files+0x2a/0x420 [ 476.225548][T13035] ? __fget_files+0x3a0/0x420 [ 476.225560][T13035] ? __fget_files+0x2a/0x420 [ 476.225578][T13035] __se_sys_pwritev2+0x179/0x290 [ 476.225592][T13035] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 476.225602][T13035] ? rcu_is_watching+0x15/0xb0 [ 476.225616][T13035] ? do_syscall_64+0xbe/0x3b0 [ 476.225631][T13035] ? __x64_sys_pwritev2+0x20/0xc0 [ 476.225648][T13035] do_syscall_64+0xfa/0x3b0 [ 476.225663][T13035] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.225678][T13035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.225688][T13035] ? clear_bhb_loop+0x60/0xb0 [ 476.225704][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.225715][T13035] RIP: 0033:0x7f62ccd7e719 [ 476.225727][T13035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.225736][T13035] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 476.225749][T13035] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 476.225758][T13035] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 476.225765][T13035] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 476.225772][T13035] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 476.225779][T13035] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 476.225800][T13035] [ 476.229231][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 476.267264][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.887873][T13053] loop0: detected capacity change from 0 to 32768 [ 476.902380][T13053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.412 (13053) [ 476.913710][T13053] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.913771][T13053] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 476.955477][T13053] BTRFS info (device loop0): enabling ssd optimizations [ 476.955501][T13053] BTRFS info (device loop0): enabling free space tree [ 477.022400][T13053] FAULT_INJECTION: forcing a failure. [ 477.022400][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 477.022428][T13053] CPU: 0 UID: 0 PID: 13053 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 477.022441][T13053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 477.022449][T13053] Call Trace: [ 477.022454][T13053] [ 477.022460][T13053] dump_stack_lvl+0x189/0x250 [ 477.022476][T13053] ? __pfx____ratelimit+0x10/0x10 [ 477.022488][T13053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.022501][T13053] ? __pfx__printk+0x10/0x10 [ 477.022518][T13053] ? __pfx___might_resched+0x10/0x10 [ 477.022531][T13053] ? fs_reclaim_acquire+0x7d/0x100 [ 477.022550][T13053] should_fail_ex+0x414/0x560 [ 477.022568][T13053] should_failslab+0xa8/0x100 [ 477.022584][T13053] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.022595][T13053] ? alloc_extent_state+0x22/0x2f0 [ 477.022617][T13053] alloc_extent_state+0x22/0x2f0 [ 477.022634][T13053] set_extent_bit+0x270/0x21a0 [ 477.022667][T13053] ? __pfx_set_extent_bit+0x10/0x10 [ 477.022690][T13053] btrfs_set_extent_bit+0x38/0x50 [ 477.022709][T13053] btrfs_alloc_tree_block+0x965/0x1290 [ 477.022733][T13053] ? __bpf_address_lookup+0x370/0x3f0 [ 477.022751][T13053] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 477.022762][T13053] ? kernel_text_address+0xa5/0xe0 [ 477.022778][T13053] ? __kernel_text_address+0xd/0x40 [ 477.022792][T13053] ? unwind_get_return_address+0x4d/0x90 [ 477.022805][T13053] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.022823][T13053] ? read_extent_buffer+0x120/0x5e0 [ 477.022838][T13053] btrfs_force_cow_block+0x578/0x2460 [ 477.022854][T13053] ? __lock_acquire+0xab9/0xd20 [ 477.022876][T13053] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 477.022902][T13053] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 477.022917][T13053] ? down_write_nested+0x169/0x200 [ 477.022931][T13053] ? __pfx_down_write_nested+0x10/0x10 [ 477.022948][T13053] btrfs_cow_block+0x40a/0x9a0 [ 477.022971][T13053] btrfs_search_slot+0xd11/0x2b90 [ 477.023004][T13053] ? __pfx_btrfs_search_slot+0x10/0x10 [ 477.023021][T13053] ? kasan_save_track+0x4f/0x80 [ 477.023033][T13053] ? __kasan_slab_alloc+0x6c/0x80 [ 477.023045][T13053] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 477.023056][T13053] ? __btrfs_free_extent+0x2f9/0x4250 [ 477.023066][T13053] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 477.023094][T13053] lookup_inline_extent_backref+0x321/0x17b0 [ 477.023106][T13053] ? do_iter_readv_writev+0x619/0x8b0 [ 477.023119][T13053] ? vfs_writev+0x31a/0x960 [ 477.023133][T13053] ? __se_sys_pwritev2+0x179/0x290 [ 477.023145][T13053] ? do_syscall_64+0xfa/0x3b0 [ 477.023178][T13053] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 477.023203][T13053] ? rcu_is_watching+0x15/0xb0 [ 477.023216][T13053] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 477.023227][T13053] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 477.023243][T13053] __btrfs_free_extent+0x428/0x4250 [ 477.023272][T13053] ? __pfx___btrfs_free_extent+0x10/0x10 [ 477.023300][T13053] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 477.023323][T13053] ? __lock_acquire+0xab9/0xd20 [ 477.023362][T13053] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 477.023381][T13053] ? kernel_text_address+0xa5/0xe0 [ 477.023396][T13053] ? __kernel_text_address+0xd/0x40 [ 477.023411][T13053] ? unwind_get_return_address+0x4d/0x90 [ 477.023424][T13053] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.023438][T13053] ? arch_stack_walk+0xfc/0x150 [ 477.023461][T13053] ? __lock_acquire+0xab9/0xd20 [ 477.023485][T13053] ? btrfs_commit_transaction+0x161/0x3950 [ 477.023506][T13053] btrfs_run_delayed_refs+0xe6/0x3b0 [ 477.023527][T13053] btrfs_commit_transaction+0x269/0x3950 [ 477.023540][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.023556][T13053] ? btrfs_commit_transaction+0x161/0x3950 [ 477.023588][T13053] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 477.023608][T13053] ? do_raw_spin_unlock+0x4d/0x240 [ 477.023622][T13053] ? join_transaction+0x41b/0xd70 [ 477.023640][T13053] ? btrfs_record_root_in_trans+0x124/0x180 [ 477.023658][T13053] ? start_transaction+0x439/0x1620 [ 477.023715][T13053] try_flush_qgroup+0x1dd/0x380 [ 477.023733][T13053] ? kfree+0x18e/0x440 [ 477.023746][T13053] ? __pfx_try_flush_qgroup+0x10/0x10 [ 477.023761][T13053] ? qgroup_reserve_data+0x6cc/0x8d0 [ 477.023787][T13053] btrfs_qgroup_reserve_data+0x69/0xb0 [ 477.023805][T13053] btrfs_check_data_free_space+0x2ce/0x450 [ 477.023824][T13053] btrfs_buffered_write+0x46c/0x16c0 [ 477.023864][T13053] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 477.023882][T13053] ? aa_file_perm+0x44d/0x1550 [ 477.023906][T13053] btrfs_do_write_iter+0x238/0x710 [ 477.023929][T13053] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 477.023955][T13053] do_iter_readv_writev+0x619/0x8b0 [ 477.023973][T13053] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 477.023985][T13053] ? rcu_read_lock_any_held+0xb3/0x120 [ 477.024012][T13053] vfs_writev+0x31a/0x960 [ 477.024032][T13053] ? __lock_acquire+0xab9/0xd20 [ 477.024050][T13053] ? __pfx_vfs_writev+0x10/0x10 [ 477.024067][T13053] ? __fget_files+0x2a/0x420 [ 477.024084][T13053] ? __fget_files+0x3a0/0x420 [ 477.024093][T13053] ? __fget_files+0x2a/0x420 [ 477.024106][T13053] __se_sys_pwritev2+0x179/0x290 [ 477.024117][T13053] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 477.024129][T13053] ? rcu_is_watching+0x15/0xb0 [ 477.024144][T13053] ? do_syscall_64+0xbe/0x3b0 [ 477.024160][T13053] ? __x64_sys_pwritev2+0x20/0xc0 [ 477.024175][T13053] do_syscall_64+0xfa/0x3b0 [ 477.024190][T13053] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.024205][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.024217][T13053] ? clear_bhb_loop+0x60/0xb0 [ 477.024232][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.024242][T13053] RIP: 0033:0x7f62ccd7e719 [ 477.024253][T13053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.024263][T13053] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 477.024277][T13053] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 477.024285][T13053] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 477.024292][T13053] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 477.024300][T13053] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 477.024306][T13053] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 477.024325][T13053] [ 477.052789][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 477.084969][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.693653][T13071] loop0: detected capacity change from 0 to 32768 [ 477.699813][T13071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.413 (13071) [ 477.710645][T13071] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.710776][T13071] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 477.760713][T13071] BTRFS info (device loop0): enabling ssd optimizations [ 477.760736][T13071] BTRFS info (device loop0): enabling free space tree [ 477.826274][T13071] FAULT_INJECTION: forcing a failure. [ 477.826274][T13071] name failslab, interval 1, probability 0, space 0, times 0 [ 477.826300][T13071] CPU: 0 UID: 0 PID: 13071 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(full) [ 477.826314][T13071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 477.826322][T13071] Call Trace: [ 477.826327][T13071] [ 477.826333][T13071] dump_stack_lvl+0x189/0x250 [ 477.826370][T13071] ? __pfx____ratelimit+0x10/0x10 [ 477.826393][T13071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.826408][T13071] ? __pfx__printk+0x10/0x10 [ 477.826426][T13071] ? __pfx___might_resched+0x10/0x10 [ 477.826445][T13071] ? fs_reclaim_acquire+0x7d/0x100 [ 477.826465][T13071] should_fail_ex+0x414/0x560 [ 477.826485][T13071] should_failslab+0xa8/0x100 [ 477.826503][T13071] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.826517][T13071] ? alloc_extent_state+0x22/0x2f0 [ 477.826538][T13071] alloc_extent_state+0x22/0x2f0 [ 477.826557][T13071] set_extent_bit+0x270/0x21a0 [ 477.826592][T13071] ? __pfx_set_extent_bit+0x10/0x10 [ 477.826617][T13071] btrfs_set_extent_bit+0x38/0x50 [ 477.826636][T13071] btrfs_alloc_tree_block+0x965/0x1290 [ 477.826663][T13071] ? __bpf_address_lookup+0x370/0x3f0 [ 477.826681][T13071] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 477.826693][T13071] ? kernel_text_address+0xa5/0xe0 [ 477.826711][T13071] ? __kernel_text_address+0xd/0x40 [ 477.826726][T13071] ? unwind_get_return_address+0x4d/0x90 [ 477.826739][T13071] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.826758][T13071] ? read_extent_buffer+0x120/0x5e0 [ 477.826773][T13071] btrfs_force_cow_block+0x578/0x2460 [ 477.826789][T13071] ? __lock_acquire+0xab9/0xd20 [ 477.826812][T13071] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 477.826838][T13071] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 477.826856][T13071] ? down_write_nested+0x169/0x200 [ 477.826870][T13071] ? __pfx_down_write_nested+0x10/0x10 [ 477.826887][T13071] btrfs_cow_block+0x40a/0x9a0 [ 477.826912][T13071] btrfs_search_slot+0xd11/0x2b90 [ 477.826945][T13071] ? __pfx_btrfs_search_slot+0x10/0x10 [ 477.826963][T13071] ? kasan_save_track+0x4f/0x80 [ 477.826976][T13071] ? __kasan_slab_alloc+0x6c/0x80 [ 477.826988][T13071] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 477.827001][T13071] ? __btrfs_free_extent+0x2f9/0x4250 [ 477.827012][T13071] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 477.827032][T13071] lookup_inline_extent_backref+0x321/0x17b0 [ 477.827045][T13071] ? do_iter_readv_writev+0x619/0x8b0 [ 477.827060][T13071] ? vfs_writev+0x31a/0x960 [ 477.827075][T13071] ? __se_sys_pwritev2+0x179/0x290 [ 477.827088][T13071] ? do_syscall_64+0xfa/0x3b0 [ 477.827123][T13071] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 477.827150][T13071] ? rcu_is_watching+0x15/0xb0 [ 477.827163][T13071] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 477.827180][T13071] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 477.827195][T13071] __btrfs_free_extent+0x428/0x4250 [ 477.827225][T13071] ? __pfx___btrfs_free_extent+0x10/0x10 [ 477.827252][T13071] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 477.827277][T13071] ? __lock_acquire+0xab9/0xd20 [ 477.827315][T13071] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 477.827335][T13071] ? kernel_text_address+0xa5/0xe0 [ 477.827353][T13071] ? __kernel_text_address+0xd/0x40 [ 477.827368][T13071] ? unwind_get_return_address+0x4d/0x90 [ 477.827383][T13071] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.827398][T13071] ? arch_stack_walk+0xfc/0x150 [ 477.827420][T13071] ? __lock_acquire+0xab9/0xd20 [ 477.827444][T13071] ? btrfs_commit_transaction+0x161/0x3950 [ 477.827467][T13071] btrfs_run_delayed_refs+0xe6/0x3b0 [ 477.827487][T13071] btrfs_commit_transaction+0x269/0x3950 [ 477.827501][T13071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.827516][T13071] ? btrfs_commit_transaction+0x161/0x3950 [ 477.827547][T13071] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 477.827566][T13071] ? do_raw_spin_unlock+0x4d/0x240 [ 477.827582][T13071] ? join_transaction+0x41b/0xd70 [ 477.827602][T13071] ? btrfs_record_root_in_trans+0x124/0x180 [ 477.827620][T13071] ? start_transaction+0x439/0x1620 [ 477.827649][T13071] try_flush_qgroup+0x1dd/0x380 [ 477.827665][T13071] ? kfree+0x18e/0x440 [ 477.827712][T13071] ? __pfx_try_flush_qgroup+0x10/0x10 [ 477.827730][T13071] ? qgroup_reserve_data+0x6cc/0x8d0 [ 477.827757][T13071] btrfs_qgroup_reserve_data+0x69/0xb0 [ 477.827775][T13071] btrfs_check_data_free_space+0x2ce/0x450 [ 477.827794][T13071] btrfs_buffered_write+0x46c/0x16c0 [ 477.827832][T13071] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 477.827850][T13071] ? aa_file_perm+0x44d/0x1550 [ 477.827877][T13071] btrfs_do_write_iter+0x238/0x710 [ 477.827900][T13071] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 477.827924][T13071] do_iter_readv_writev+0x619/0x8b0 [ 477.827945][T13071] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 477.827958][T13071] ? rcu_read_lock_any_held+0xb3/0x120 [ 477.827984][T13071] vfs_writev+0x31a/0x960 [ 477.828004][T13071] ? __lock_acquire+0xab9/0xd20 [ 477.828023][T13071] ? __pfx_vfs_writev+0x10/0x10 [ 477.828051][T13071] ? __fget_files+0x2a/0x420 [ 477.828068][T13071] ? __fget_files+0x3a0/0x420 [ 477.828081][T13071] ? __fget_files+0x2a/0x420 [ 477.828103][T13071] __se_sys_pwritev2+0x179/0x290 [ 477.828120][T13071] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 477.828133][T13071] ? rcu_is_watching+0x15/0xb0 [ 477.828149][T13071] ? do_syscall_64+0xbe/0x3b0 [ 477.828165][T13071] ? __x64_sys_pwritev2+0x20/0xc0 [ 477.828187][T13071] do_syscall_64+0xfa/0x3b0 [ 477.828202][T13071] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.828222][T13071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.828238][T13071] ? clear_bhb_loop+0x60/0xb0 [ 477.828253][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.828263][T13071] RIP: 0033:0x7f62ccd7e719 [ 477.828276][T13071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.828286][T13071] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 477.828300][T13071] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 477.828308][T13071] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 477.828315][T13071] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 477.828322][T13071] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 477.828329][T13071] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 477.828347][T13071] [ 477.841232][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 477.891353][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.523856][T13089] loop0: detected capacity change from 0 to 32768 [ 478.528580][T13089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.414 (13089) [ 478.534766][T13089] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.534822][T13089] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 478.570654][T13089] BTRFS info (device loop0): enabling ssd optimizations [ 478.570670][T13089] BTRFS info (device loop0): enabling free space tree [ 478.621320][T13089] FAULT_INJECTION: forcing a failure. [ 478.621320][T13089] name failslab, interval 1, probability 0, space 0, times 0 [ 478.621346][T13089] CPU: 0 UID: 0 PID: 13089 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 478.621359][T13089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.621367][T13089] Call Trace: [ 478.621372][T13089] [ 478.621378][T13089] dump_stack_lvl+0x189/0x250 [ 478.621396][T13089] ? __pfx____ratelimit+0x10/0x10 [ 478.621415][T13089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.621428][T13089] ? __pfx__printk+0x10/0x10 [ 478.621447][T13089] ? __pfx___might_resched+0x10/0x10 [ 478.621458][T13089] ? fs_reclaim_acquire+0x7d/0x100 [ 478.621478][T13089] should_fail_ex+0x414/0x560 [ 478.621496][T13089] should_failslab+0xa8/0x100 [ 478.621512][T13089] kmem_cache_alloc_noprof+0x73/0x3c0 [ 478.621525][T13089] ? alloc_reserved_file_extent+0x17d/0x610 [ 478.621542][T13089] alloc_reserved_file_extent+0x17d/0x610 [ 478.621557][T13089] ? __lock_acquire+0xab9/0xd20 [ 478.621578][T13089] ? __pfx_alloc_reserved_file_extent+0x10/0x10 [ 478.621601][T13089] __btrfs_run_delayed_refs+0x10c2/0x4130 [ 478.621619][T13089] ? arch_stack_walk+0xfc/0x150 [ 478.621649][T13089] ? __lock_acquire+0xab9/0xd20 [ 478.621675][T13089] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 478.621695][T13089] ? rcu_is_watching+0x15/0xb0 [ 478.621708][T13089] ? trace_contention_end+0x39/0x120 [ 478.621728][T13089] ? btrfs_start_dirty_block_groups+0xd33/0x10a0 [ 478.621747][T13089] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 478.621768][T13089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 478.621788][T13089] ? btrfs_block_rsv_release+0x529/0x5e0 [ 478.621806][T13089] btrfs_run_delayed_refs+0xe6/0x3b0 [ 478.621827][T13089] btrfs_start_dirty_block_groups+0xd3d/0x10a0 [ 478.621864][T13089] ? __pfx_btrfs_start_dirty_block_groups+0x10/0x10 [ 478.621881][T13089] ? __kasan_slab_alloc+0x6c/0x80 [ 478.621894][T13089] ? btrfs_trans_release_metadata+0x22d/0x330 [ 478.621914][T13089] btrfs_commit_transaction+0x674/0x3950 [ 478.621928][T13089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.621943][T13089] ? btrfs_commit_transaction+0x161/0x3950 [ 478.621974][T13089] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 478.621993][T13089] ? do_raw_spin_unlock+0x4d/0x240 [ 478.622008][T13089] ? join_transaction+0x41b/0xd70 [ 478.622028][T13089] ? btrfs_record_root_in_trans+0x124/0x180 [ 478.622046][T13089] ? start_transaction+0x439/0x1620 [ 478.622073][T13089] try_flush_qgroup+0x1dd/0x380 [ 478.622089][T13089] ? kfree+0x18e/0x440 [ 478.622101][T13089] ? __pfx_try_flush_qgroup+0x10/0x10 [ 478.622117][T13089] ? qgroup_reserve_data+0x6cc/0x8d0 [ 478.622142][T13089] btrfs_qgroup_reserve_data+0x69/0xb0 [ 478.622161][T13089] btrfs_check_data_free_space+0x2ce/0x450 [ 478.622179][T13089] btrfs_buffered_write+0x46c/0x16c0 [ 478.622218][T13089] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 478.622235][T13089] ? aa_file_perm+0x44d/0x1550 [ 478.622261][T13089] btrfs_do_write_iter+0x238/0x710 [ 478.622284][T13089] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 478.622308][T13089] do_iter_readv_writev+0x619/0x8b0 [ 478.622327][T13089] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 478.622339][T13089] ? rcu_read_lock_any_held+0xb3/0x120 [ 478.622365][T13089] vfs_writev+0x31a/0x960 [ 478.622382][T13089] ? __lock_acquire+0xab9/0xd20 [ 478.622402][T13089] ? __pfx_vfs_writev+0x10/0x10 [ 478.622428][T13089] ? __fget_files+0x2a/0x420 [ 478.622447][T13089] ? __fget_files+0x3a0/0x420 [ 478.622460][T13089] ? __fget_files+0x2a/0x420 [ 478.622482][T13089] __se_sys_pwritev2+0x179/0x290 [ 478.622499][T13089] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 478.622512][T13089] ? rcu_is_watching+0x15/0xb0 [ 478.622528][T13089] ? do_syscall_64+0xbe/0x3b0 [ 478.622544][T13089] ? __x64_sys_pwritev2+0x20/0xc0 [ 478.622560][T13089] do_syscall_64+0xfa/0x3b0 [ 478.622574][T13089] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.622590][T13089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.622601][T13089] ? clear_bhb_loop+0x60/0xb0 [ 478.622615][T13089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.622626][T13089] RIP: 0033:0x7f62ccd7e719 [ 478.622638][T13089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.622649][T13089] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 478.622662][T13089] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 478.622671][T13089] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 478.622678][T13089] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 478.622685][T13089] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 478.622692][T13089] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 478.622709][T13089] [ 478.622740][T13089] BTRFS error (device loop0): failed to run delayed ref for logical 5382144 num_bytes 1052672 type 178 action 1 ref_mod 1: -12 [ 478.622775][T13089] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 478.622789][T13089] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 478.622802][T13089] BTRFS info (device loop0 state EA): forced readonly [ 478.641632][ T1041] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 478.662607][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.663219][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 478.663233][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 479.242719][T13107] loop0: detected capacity change from 0 to 32768 [ 479.250406][T13107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.415 (13107) [ 479.259287][T13107] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 479.259346][T13107] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 479.315207][T13107] BTRFS info (device loop0): enabling ssd optimizations [ 479.315230][T13107] BTRFS info (device loop0): enabling free space tree [ 479.390486][T13107] FAULT_INJECTION: forcing a failure. [ 479.390486][T13107] name failslab, interval 1, probability 0, space 0, times 0 [ 479.390514][T13107] CPU: 0 UID: 0 PID: 13107 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(full) [ 479.390528][T13107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 479.390536][T13107] Call Trace: [ 479.390542][T13107] [ 479.390548][T13107] dump_stack_lvl+0x189/0x250 [ 479.390568][T13107] ? __pfx____ratelimit+0x10/0x10 [ 479.390587][T13107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.390601][T13107] ? __pfx__printk+0x10/0x10 [ 479.390619][T13107] ? __pfx___might_resched+0x10/0x10 [ 479.390632][T13107] ? fs_reclaim_acquire+0x7d/0x100 [ 479.390653][T13107] should_fail_ex+0x414/0x560 [ 479.390673][T13107] should_failslab+0xa8/0x100 [ 479.390691][T13107] kmem_cache_alloc_noprof+0x73/0x3c0 [ 479.390705][T13107] ? alloc_extent_state+0x22/0x2f0 [ 479.390727][T13107] alloc_extent_state+0x22/0x2f0 [ 479.390746][T13107] set_extent_bit+0x270/0x21a0 [ 479.390782][T13107] ? __pfx_set_extent_bit+0x10/0x10 [ 479.390816][T13107] btrfs_set_extent_bit+0x38/0x50 [ 479.390837][T13107] btrfs_alloc_tree_block+0x965/0x1290 [ 479.390866][T13107] ? __bpf_address_lookup+0x370/0x3f0 [ 479.390885][T13107] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 479.390899][T13107] ? kernel_text_address+0xa5/0xe0 [ 479.390918][T13107] ? __kernel_text_address+0xd/0x40 [ 479.390933][T13107] ? unwind_get_return_address+0x4d/0x90 [ 479.390948][T13107] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 479.390968][T13107] ? read_extent_buffer+0x120/0x5e0 [ 479.390983][T13107] btrfs_force_cow_block+0x578/0x2460 [ 479.391001][T13107] ? __lock_acquire+0xab9/0xd20 [ 479.391026][T13107] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 479.391054][T13107] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 479.391072][T13107] ? down_write_nested+0x169/0x200 [ 479.391087][T13107] ? __pfx_down_write_nested+0x10/0x10 [ 479.391106][T13107] btrfs_cow_block+0x40a/0x9a0 [ 479.391131][T13107] btrfs_search_slot+0xd11/0x2b90 [ 479.391169][T13107] ? __pfx_btrfs_search_slot+0x10/0x10 [ 479.391188][T13107] ? kasan_save_track+0x4f/0x80 [ 479.391200][T13107] ? __kasan_slab_alloc+0x6c/0x80 [ 479.391213][T13107] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 479.391225][T13107] ? __btrfs_free_extent+0x2f9/0x4250 [ 479.391237][T13107] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 479.391257][T13107] lookup_inline_extent_backref+0x321/0x17b0 [ 479.391270][T13107] ? do_iter_readv_writev+0x619/0x8b0 [ 479.391285][T13107] ? vfs_writev+0x31a/0x960 [ 479.391299][T13107] ? __se_sys_pwritev2+0x179/0x290 [ 479.391312][T13107] ? do_syscall_64+0xfa/0x3b0 [ 479.391348][T13107] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 479.391377][T13107] ? rcu_is_watching+0x15/0xb0 [ 479.391391][T13107] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 479.391403][T13107] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 479.391419][T13107] __btrfs_free_extent+0x428/0x4250 [ 479.391452][T13107] ? __pfx___btrfs_free_extent+0x10/0x10 [ 479.391482][T13107] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 479.391509][T13107] ? __lock_acquire+0xab9/0xd20 [ 479.391550][T13107] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 479.391571][T13107] ? kernel_text_address+0xa5/0xe0 [ 479.391589][T13107] ? __kernel_text_address+0xd/0x40 [ 479.391605][T13107] ? unwind_get_return_address+0x4d/0x90 [ 479.391618][T13107] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 479.391632][T13107] ? arch_stack_walk+0xfc/0x150 [ 479.391683][T13107] ? __lock_acquire+0xab9/0xd20 [ 479.391712][T13107] ? btrfs_commit_transaction+0x161/0x3950 [ 479.391734][T13107] btrfs_run_delayed_refs+0xe6/0x3b0 [ 479.391757][T13107] btrfs_commit_transaction+0x269/0x3950 [ 479.391771][T13107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.391787][T13107] ? btrfs_commit_transaction+0x161/0x3950 [ 479.391831][T13107] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 479.391852][T13107] ? do_raw_spin_unlock+0x4d/0x240 [ 479.391866][T13107] ? join_transaction+0x41b/0xd70 [ 479.391888][T13107] ? btrfs_record_root_in_trans+0x124/0x180 [ 479.391907][T13107] ? start_transaction+0x439/0x1620 [ 479.391939][T13107] try_flush_qgroup+0x1dd/0x380 [ 479.391956][T13107] ? kfree+0x18e/0x440 [ 479.391970][T13107] ? __pfx_try_flush_qgroup+0x10/0x10 [ 479.391987][T13107] ? qgroup_reserve_data+0x6cc/0x8d0 [ 479.392016][T13107] btrfs_qgroup_reserve_data+0x69/0xb0 [ 479.392036][T13107] btrfs_check_data_free_space+0x2ce/0x450 [ 479.392055][T13107] btrfs_buffered_write+0x46c/0x16c0 [ 479.392097][T13107] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 479.392116][T13107] ? aa_file_perm+0x44d/0x1550 [ 479.392144][T13107] btrfs_do_write_iter+0x238/0x710 [ 479.392170][T13107] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 479.392195][T13107] do_iter_readv_writev+0x619/0x8b0 [ 479.392216][T13107] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 479.392229][T13107] ? rcu_read_lock_any_held+0xb3/0x120 [ 479.392254][T13107] vfs_writev+0x31a/0x960 [ 479.392275][T13107] ? __lock_acquire+0xab9/0xd20 [ 479.392292][T13107] ? __pfx_vfs_writev+0x10/0x10 [ 479.392319][T13107] ? __fget_files+0x2a/0x420 [ 479.392340][T13107] ? __fget_files+0x3a0/0x420 [ 479.392355][T13107] ? __fget_files+0x2a/0x420 [ 479.392379][T13107] __se_sys_pwritev2+0x179/0x290 [ 479.392397][T13107] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 479.392412][T13107] ? rcu_is_watching+0x15/0xb0 [ 479.392429][T13107] ? do_syscall_64+0xbe/0x3b0 [ 479.392445][T13107] ? __x64_sys_pwritev2+0x20/0xc0 [ 479.392463][T13107] do_syscall_64+0xfa/0x3b0 [ 479.392480][T13107] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.392497][T13107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.392509][T13107] ? clear_bhb_loop+0x60/0xb0 [ 479.392525][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.392537][T13107] RIP: 0033:0x7f62ccd7e719 [ 479.392550][T13107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.392561][T13107] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 479.392576][T13107] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 479.392585][T13107] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 479.392592][T13107] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 479.392600][T13107] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 479.392607][T13107] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 479.392630][T13107] [ 479.397882][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 479.441473][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.014914][T13125] loop0: detected capacity change from 0 to 32768 [ 480.027113][T13125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.416 (13125) [ 480.033549][T13125] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.033609][T13125] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 480.078534][T13125] BTRFS info (device loop0): enabling ssd optimizations [ 480.078556][T13125] BTRFS info (device loop0): enabling free space tree [ 480.123575][T13125] FAULT_INJECTION: forcing a failure. [ 480.123575][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 480.123602][T13125] CPU: 0 UID: 0 PID: 13125 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(full) [ 480.123615][T13125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.123622][T13125] Call Trace: [ 480.123628][T13125] [ 480.123634][T13125] dump_stack_lvl+0x189/0x250 [ 480.123682][T13125] ? __pfx____ratelimit+0x10/0x10 [ 480.123702][T13125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.123716][T13125] ? __pfx__printk+0x10/0x10 [ 480.123737][T13125] ? __pfx___might_resched+0x10/0x10 [ 480.123748][T13125] ? fs_reclaim_acquire+0x7d/0x100 [ 480.123766][T13125] should_fail_ex+0x414/0x560 [ 480.123785][T13125] should_failslab+0xa8/0x100 [ 480.123802][T13125] kmem_cache_alloc_noprof+0x73/0x3c0 [ 480.123822][T13125] ? __btrfs_free_extent+0x2f9/0x4250 [ 480.123838][T13125] __btrfs_free_extent+0x2f9/0x4250 [ 480.123865][T13125] ? __pfx___btrfs_free_extent+0x10/0x10 [ 480.123876][T13125] ? do_raw_read_unlock+0x3d/0x80 [ 480.123903][T13125] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 480.123939][T13125] ? __lock_acquire+0xab9/0xd20 [ 480.123967][T13125] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 480.123987][T13125] ? rcu_is_watching+0x15/0xb0 [ 480.124000][T13125] ? trace_contention_end+0x39/0x120 [ 480.124015][T13125] ? btrfs_start_dirty_block_groups+0xd33/0x10a0 [ 480.124028][T13125] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 480.124042][T13125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 480.124055][T13125] ? btrfs_block_rsv_release+0x529/0x5e0 [ 480.124069][T13125] btrfs_run_delayed_refs+0xe6/0x3b0 [ 480.124082][T13125] btrfs_start_dirty_block_groups+0xd3d/0x10a0 [ 480.124102][T13125] ? __pfx_btrfs_start_dirty_block_groups+0x10/0x10 [ 480.124112][T13125] ? __kasan_slab_alloc+0x6c/0x80 [ 480.124121][T13125] ? btrfs_trans_release_metadata+0x22d/0x330 [ 480.124133][T13125] btrfs_commit_transaction+0x674/0x3950 [ 480.124142][T13125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.124151][T13125] ? btrfs_commit_transaction+0x161/0x3950 [ 480.124175][T13125] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 480.124193][T13125] ? do_raw_spin_unlock+0x4d/0x240 [ 480.124204][T13125] ? join_transaction+0x41b/0xd70 [ 480.124223][T13125] ? btrfs_record_root_in_trans+0x124/0x180 [ 480.124239][T13125] ? start_transaction+0x439/0x1620 [ 480.124266][T13125] try_flush_qgroup+0x1dd/0x380 [ 480.124280][T13125] ? kfree+0x18e/0x440 [ 480.124293][T13125] ? __pfx_try_flush_qgroup+0x10/0x10 [ 480.124303][T13125] ? qgroup_reserve_data+0x6cc/0x8d0 [ 480.124326][T13125] btrfs_qgroup_reserve_data+0x69/0xb0 [ 480.124343][T13125] btrfs_check_data_free_space+0x2ce/0x450 [ 480.124360][T13125] btrfs_buffered_write+0x46c/0x16c0 [ 480.124388][T13125] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 480.124399][T13125] ? aa_file_perm+0x44d/0x1550 [ 480.124414][T13125] btrfs_do_write_iter+0x238/0x710 [ 480.124429][T13125] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 480.124444][T13125] do_iter_readv_writev+0x619/0x8b0 [ 480.124458][T13125] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 480.124466][T13125] ? rcu_read_lock_any_held+0xb3/0x120 [ 480.124481][T13125] vfs_writev+0x31a/0x960 [ 480.124494][T13125] ? __lock_acquire+0xab9/0xd20 [ 480.124505][T13125] ? __pfx_vfs_writev+0x10/0x10 [ 480.124525][T13125] ? __fget_files+0x2a/0x420 [ 480.124552][T13125] ? __fget_files+0x3a0/0x420 [ 480.124566][T13125] ? __fget_files+0x2a/0x420 [ 480.124588][T13125] __se_sys_pwritev2+0x179/0x290 [ 480.124603][T13125] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 480.124615][T13125] ? rcu_is_watching+0x15/0xb0 [ 480.124629][T13125] ? do_syscall_64+0xbe/0x3b0 [ 480.124645][T13125] ? __x64_sys_pwritev2+0x20/0xc0 [ 480.124661][T13125] do_syscall_64+0xfa/0x3b0 [ 480.124675][T13125] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.124687][T13125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.124695][T13125] ? clear_bhb_loop+0x60/0xb0 [ 480.124707][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.124717][T13125] RIP: 0033:0x7f62ccd7e719 [ 480.124728][T13125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.124738][T13125] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 480.124750][T13125] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 480.124757][T13125] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 480.124764][T13125] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 480.124770][T13125] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 480.124776][T13125] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 480.124794][T13125] [ 480.124802][T13125] BTRFS error (device loop0): failed to run delayed ref for logical 5357568 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 480.124843][T13125] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 480.124857][T13125] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 480.124871][T13125] BTRFS info (device loop0 state EA): forced readonly [ 480.125069][ T1052] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 480.126260][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 480.141444][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.150428][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 480.150455][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 480.804575][T13143] loop0: detected capacity change from 0 to 32768 [ 480.814658][T13143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.417 (13143) [ 480.824575][T13143] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.824630][T13143] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 480.868636][T13143] BTRFS info (device loop0): enabling ssd optimizations [ 480.868680][T13143] BTRFS info (device loop0): enabling free space tree [ 480.926970][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 480.928295][T13143] FAULT_INJECTION: forcing a failure. [ 480.928295][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 480.928318][T13143] CPU: 0 UID: 0 PID: 13143 Comm: syz.0.417 Not tainted syzkaller #0 PREEMPT(full) [ 480.928332][T13143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.928340][T13143] Call Trace: [ 480.928346][T13143] [ 480.928352][T13143] dump_stack_lvl+0x189/0x250 [ 480.928371][T13143] ? __pfx____ratelimit+0x10/0x10 [ 480.928390][T13143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.928405][T13143] ? __pfx__printk+0x10/0x10 [ 480.928425][T13143] ? __pfx___might_resched+0x10/0x10 [ 480.928438][T13143] ? fs_reclaim_acquire+0x7d/0x100 [ 480.928459][T13143] should_fail_ex+0x414/0x560 [ 480.928479][T13143] should_failslab+0xa8/0x100 [ 480.928497][T13143] kmem_cache_alloc_noprof+0x73/0x3c0 [ 480.928510][T13143] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 480.928530][T13143] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 480.928551][T13143] __btrfs_free_extent+0x167b/0x4250 [ 480.928580][T13143] ? __pfx___btrfs_free_extent+0x10/0x10 [ 480.928609][T13143] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 480.928637][T13143] ? __lock_acquire+0xab9/0xd20 [ 480.928698][T13143] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 480.928719][T13143] ? kernel_text_address+0xa5/0xe0 [ 480.928737][T13143] ? __kernel_text_address+0xd/0x40 [ 480.928753][T13143] ? unwind_get_return_address+0x4d/0x90 [ 480.928767][T13143] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.928783][T13143] ? arch_stack_walk+0xfc/0x150 [ 480.928807][T13143] ? __lock_acquire+0xab9/0xd20 [ 480.928838][T13143] ? btrfs_commit_transaction+0x161/0x3950 [ 480.928861][T13143] btrfs_run_delayed_refs+0xe6/0x3b0 [ 480.928883][T13143] btrfs_commit_transaction+0x269/0x3950 [ 480.928897][T13143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.928913][T13143] ? btrfs_commit_transaction+0x161/0x3950 [ 480.928947][T13143] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 480.928969][T13143] ? do_raw_spin_unlock+0x4d/0x240 [ 480.928983][T13143] ? join_transaction+0x41b/0xd70 [ 480.929005][T13143] ? btrfs_record_root_in_trans+0x124/0x180 [ 480.929023][T13143] ? start_transaction+0x439/0x1620 [ 480.929055][T13143] try_flush_qgroup+0x1dd/0x380 [ 480.929072][T13143] ? kfree+0x18e/0x440 [ 480.929086][T13143] ? __pfx_try_flush_qgroup+0x10/0x10 [ 480.929103][T13143] ? qgroup_reserve_data+0x6cc/0x8d0 [ 480.929130][T13143] btrfs_qgroup_reserve_data+0x69/0xb0 [ 480.929150][T13143] btrfs_check_data_free_space+0x2ce/0x450 [ 480.929170][T13143] btrfs_buffered_write+0x46c/0x16c0 [ 480.929213][T13143] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 480.929232][T13143] ? aa_file_perm+0x44d/0x1550 [ 480.929259][T13143] btrfs_do_write_iter+0x238/0x710 [ 480.929285][T13143] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 480.929321][T13143] do_iter_readv_writev+0x619/0x8b0 [ 480.929342][T13143] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 480.929356][T13143] ? rcu_read_lock_any_held+0xb3/0x120 [ 480.929384][T13143] vfs_writev+0x31a/0x960 [ 480.929405][T13143] ? __lock_acquire+0xab9/0xd20 [ 480.929424][T13143] ? __pfx_vfs_writev+0x10/0x10 [ 480.929453][T13143] ? __fget_files+0x2a/0x420 [ 480.929473][T13143] ? __fget_files+0x3a0/0x420 [ 480.929488][T13143] ? __fget_files+0x2a/0x420 [ 480.929512][T13143] __se_sys_pwritev2+0x179/0x290 [ 480.929530][T13143] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 480.929544][T13143] ? rcu_is_watching+0x15/0xb0 [ 480.929561][T13143] ? do_syscall_64+0xbe/0x3b0 [ 480.929599][T13143] ? __x64_sys_pwritev2+0x20/0xc0 [ 480.929617][T13143] do_syscall_64+0xfa/0x3b0 [ 480.929633][T13143] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.929651][T13143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.929663][T13143] ? clear_bhb_loop+0x60/0xb0 [ 480.929679][T13143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.929691][T13143] RIP: 0033:0x7f62ccd7e719 [ 480.929704][T13143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.929716][T13143] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 480.929730][T13143] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 480.929740][T13143] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 480.929748][T13143] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 480.929756][T13143] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 480.929764][T13143] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 480.929787][T13143] [ 480.936261][T13143] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 480.936284][T13143] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 480.936299][T13143] BTRFS info (device loop0 state EA): forced readonly [ 480.936312][T13143] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 480.936343][T13143] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 480.936378][T13143] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 480.962379][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.973057][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 480.973082][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 481.577510][T13161] loop0: detected capacity change from 0 to 32768 [ 481.592071][T13161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.418 (13161) [ 481.598619][T13161] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 481.598672][T13161] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 481.662552][T13161] BTRFS info (device loop0): enabling ssd optimizations [ 481.662575][T13161] BTRFS info (device loop0): enabling free space tree [ 481.723570][T13161] FAULT_INJECTION: forcing a failure. [ 481.723570][T13161] name failslab, interval 1, probability 0, space 0, times 0 [ 481.723596][T13161] CPU: 0 UID: 0 PID: 13161 Comm: syz.0.418 Not tainted syzkaller #0 PREEMPT(full) [ 481.723609][T13161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 481.723614][T13161] Call Trace: [ 481.723618][T13161] [ 481.723622][T13161] dump_stack_lvl+0x189/0x250 [ 481.723664][T13161] ? __pfx____ratelimit+0x10/0x10 [ 481.723685][T13161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.723698][T13161] ? __pfx__printk+0x10/0x10 [ 481.723715][T13161] ? __pfx___might_resched+0x10/0x10 [ 481.723727][T13161] ? fs_reclaim_acquire+0x7d/0x100 [ 481.723747][T13161] should_fail_ex+0x414/0x560 [ 481.723764][T13161] should_failslab+0xa8/0x100 [ 481.723781][T13161] kmem_cache_alloc_noprof+0x73/0x3c0 [ 481.723794][T13161] ? alloc_extent_state+0x22/0x2f0 [ 481.723819][T13161] alloc_extent_state+0x22/0x2f0 [ 481.723836][T13161] set_extent_bit+0x270/0x21a0 [ 481.723869][T13161] ? __pfx_set_extent_bit+0x10/0x10 [ 481.723893][T13161] btrfs_set_extent_bit+0x38/0x50 [ 481.723912][T13161] btrfs_alloc_tree_block+0x965/0x1290 [ 481.723937][T13161] ? __bpf_address_lookup+0x370/0x3f0 [ 481.723955][T13161] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 481.723968][T13161] ? kernel_text_address+0xa5/0xe0 [ 481.723984][T13161] ? __kernel_text_address+0xd/0x40 [ 481.724003][T13161] ? unwind_get_return_address+0x4d/0x90 [ 481.724016][T13161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.724034][T13161] ? read_extent_buffer+0x120/0x5e0 [ 481.724048][T13161] btrfs_force_cow_block+0x578/0x2460 [ 481.724068][T13161] ? __lock_acquire+0xab9/0xd20 [ 481.724090][T13161] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 481.724114][T13161] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 481.724130][T13161] ? down_write_nested+0x169/0x200 [ 481.724143][T13161] ? __pfx_down_write_nested+0x10/0x10 [ 481.724160][T13161] btrfs_cow_block+0x40a/0x9a0 [ 481.724183][T13161] btrfs_search_slot+0xd11/0x2b90 [ 481.724216][T13161] ? __pfx_btrfs_search_slot+0x10/0x10 [ 481.724232][T13161] ? kasan_save_track+0x4f/0x80 [ 481.724244][T13161] ? __kasan_slab_alloc+0x6c/0x80 [ 481.724256][T13161] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 481.724267][T13161] ? __btrfs_free_extent+0x2f9/0x4250 [ 481.724276][T13161] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 481.724294][T13161] lookup_inline_extent_backref+0x321/0x17b0 [ 481.724306][T13161] ? do_iter_readv_writev+0x619/0x8b0 [ 481.724321][T13161] ? vfs_writev+0x31a/0x960 [ 481.724334][T13161] ? __se_sys_pwritev2+0x179/0x290 [ 481.724347][T13161] ? do_syscall_64+0xfa/0x3b0 [ 481.724380][T13161] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 481.724407][T13161] ? rcu_is_watching+0x15/0xb0 [ 481.724419][T13161] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 481.724430][T13161] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 481.724444][T13161] __btrfs_free_extent+0x428/0x4250 [ 481.724475][T13161] ? __pfx___btrfs_free_extent+0x10/0x10 [ 481.724501][T13161] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 481.724525][T13161] ? __lock_acquire+0xab9/0xd20 [ 481.724564][T13161] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 481.724583][T13161] ? kernel_text_address+0xa5/0xe0 [ 481.724598][T13161] ? __kernel_text_address+0xd/0x40 [ 481.724613][T13161] ? unwind_get_return_address+0x4d/0x90 [ 481.724626][T13161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.724639][T13161] ? arch_stack_walk+0xfc/0x150 [ 481.724660][T13161] ? __lock_acquire+0xab9/0xd20 [ 481.724675][T13161] ? btrfs_commit_transaction+0x161/0x3950 [ 481.724692][T13161] btrfs_run_delayed_refs+0xe6/0x3b0 [ 481.724711][T13161] btrfs_commit_transaction+0x269/0x3950 [ 481.724725][T13161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.724739][T13161] ? btrfs_commit_transaction+0x161/0x3950 [ 481.724772][T13161] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 481.724784][T13161] ? do_raw_spin_unlock+0x4d/0x240 [ 481.724793][T13161] ? join_transaction+0x41b/0xd70 [ 481.724817][T13161] ? btrfs_record_root_in_trans+0x124/0x180 [ 481.724833][T13161] ? start_transaction+0x439/0x1620 [ 481.724861][T13161] try_flush_qgroup+0x1dd/0x380 [ 481.724877][T13161] ? kfree+0x18e/0x440 [ 481.724890][T13161] ? __pfx_try_flush_qgroup+0x10/0x10 [ 481.724905][T13161] ? qgroup_reserve_data+0x6cc/0x8d0 [ 481.724931][T13161] btrfs_qgroup_reserve_data+0x69/0xb0 [ 481.724950][T13161] btrfs_check_data_free_space+0x2ce/0x450 [ 481.724967][T13161] btrfs_buffered_write+0x46c/0x16c0 [ 481.724992][T13161] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 481.725003][T13161] ? aa_file_perm+0x44d/0x1550 [ 481.725019][T13161] btrfs_do_write_iter+0x238/0x710 [ 481.725034][T13161] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 481.725053][T13161] do_iter_readv_writev+0x619/0x8b0 [ 481.725070][T13161] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 481.725082][T13161] ? rcu_read_lock_any_held+0xb3/0x120 [ 481.725108][T13161] vfs_writev+0x31a/0x960 [ 481.725128][T13161] ? __lock_acquire+0xab9/0xd20 [ 481.725144][T13161] ? __pfx_vfs_writev+0x10/0x10 [ 481.725169][T13161] ? __fget_files+0x2a/0x420 [ 481.725188][T13161] ? __fget_files+0x3a0/0x420 [ 481.725201][T13161] ? __fget_files+0x2a/0x420 [ 481.725223][T13161] __se_sys_pwritev2+0x179/0x290 [ 481.725238][T13161] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 481.725247][T13161] ? rcu_is_watching+0x15/0xb0 [ 481.725256][T13161] ? do_syscall_64+0xbe/0x3b0 [ 481.725270][T13161] ? __x64_sys_pwritev2+0x20/0xc0 [ 481.725285][T13161] do_syscall_64+0xfa/0x3b0 [ 481.725300][T13161] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.725315][T13161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.725327][T13161] ? clear_bhb_loop+0x60/0xb0 [ 481.725340][T13161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.725352][T13161] RIP: 0033:0x7f62ccd7e719 [ 481.725364][T13161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.725375][T13161] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 481.725388][T13161] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 481.725396][T13161] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 481.725404][T13161] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 481.725411][T13161] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 481.725418][T13161] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 481.725437][T13161] [ 481.758230][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 481.791743][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.419305][T13179] loop0: detected capacity change from 0 to 32768 [ 482.437373][T13179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.419 (13179) [ 482.446013][T13179] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.446068][T13179] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 482.502442][T13179] BTRFS info (device loop0): enabling ssd optimizations [ 482.502457][T13179] BTRFS info (device loop0): enabling free space tree [ 482.559170][T13179] FAULT_INJECTION: forcing a failure. [ 482.559170][T13179] name failslab, interval 1, probability 0, space 0, times 0 [ 482.559199][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 482.559213][T13179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.559221][T13179] Call Trace: [ 482.559227][T13179] [ 482.559232][T13179] dump_stack_lvl+0x189/0x250 [ 482.559253][T13179] ? __pfx____ratelimit+0x10/0x10 [ 482.559271][T13179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.559285][T13179] ? __pfx__printk+0x10/0x10 [ 482.559305][T13179] ? __pfx___might_resched+0x10/0x10 [ 482.559317][T13179] ? fs_reclaim_acquire+0x7d/0x100 [ 482.559338][T13179] should_fail_ex+0x414/0x560 [ 482.559358][T13179] should_failslab+0xa8/0x100 [ 482.559376][T13179] kmem_cache_alloc_noprof+0x73/0x3c0 [ 482.559390][T13179] ? alloc_extent_state+0x22/0x2f0 [ 482.559412][T13179] alloc_extent_state+0x22/0x2f0 [ 482.559431][T13179] set_extent_bit+0x270/0x21a0 [ 482.559464][T13179] ? __pfx_set_extent_bit+0x10/0x10 [ 482.559489][T13179] btrfs_set_extent_bit+0x38/0x50 [ 482.559508][T13179] btrfs_alloc_tree_block+0x965/0x1290 [ 482.559535][T13179] ? __bpf_address_lookup+0x370/0x3f0 [ 482.559553][T13179] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 482.559566][T13179] ? kernel_text_address+0xa5/0xe0 [ 482.559619][T13179] ? __kernel_text_address+0xd/0x40 [ 482.559663][T13179] ? unwind_get_return_address+0x4d/0x90 [ 482.559679][T13179] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.559699][T13179] ? read_extent_buffer+0x120/0x5e0 [ 482.559712][T13179] btrfs_force_cow_block+0x578/0x2460 [ 482.559729][T13179] ? __lock_acquire+0xab9/0xd20 [ 482.559752][T13179] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 482.559778][T13179] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 482.559795][T13179] ? down_write_nested+0x169/0x200 [ 482.559810][T13179] ? __pfx_down_write_nested+0x10/0x10 [ 482.559838][T13179] btrfs_cow_block+0x40a/0x9a0 [ 482.559862][T13179] btrfs_search_slot+0xd11/0x2b90 [ 482.559896][T13179] ? __pfx_btrfs_search_slot+0x10/0x10 [ 482.559913][T13179] ? kasan_save_track+0x4f/0x80 [ 482.559927][T13179] ? __kasan_slab_alloc+0x6c/0x80 [ 482.559939][T13179] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 482.559952][T13179] ? __btrfs_free_extent+0x2f9/0x4250 [ 482.559964][T13179] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 482.559985][T13179] lookup_inline_extent_backref+0x321/0x17b0 [ 482.559998][T13179] ? do_iter_readv_writev+0x619/0x8b0 [ 482.560012][T13179] ? vfs_writev+0x31a/0x960 [ 482.560026][T13179] ? __se_sys_pwritev2+0x179/0x290 [ 482.560040][T13179] ? do_syscall_64+0xfa/0x3b0 [ 482.560082][T13179] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 482.560110][T13179] ? rcu_is_watching+0x15/0xb0 [ 482.560124][T13179] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 482.560136][T13179] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 482.560152][T13179] __btrfs_free_extent+0x428/0x4250 [ 482.560182][T13179] ? __pfx___btrfs_free_extent+0x10/0x10 [ 482.560209][T13179] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 482.560235][T13179] ? __lock_acquire+0xab9/0xd20 [ 482.560274][T13179] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 482.560295][T13179] ? kernel_text_address+0xa5/0xe0 [ 482.560314][T13179] ? __kernel_text_address+0xd/0x40 [ 482.560330][T13179] ? unwind_get_return_address+0x4d/0x90 [ 482.560343][T13179] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.560358][T13179] ? arch_stack_walk+0xfc/0x150 [ 482.560381][T13179] ? __lock_acquire+0xab9/0xd20 [ 482.560406][T13179] ? btrfs_commit_transaction+0x161/0x3950 [ 482.560428][T13179] btrfs_run_delayed_refs+0xe6/0x3b0 [ 482.560450][T13179] btrfs_commit_transaction+0x269/0x3950 [ 482.560464][T13179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.560479][T13179] ? btrfs_commit_transaction+0x161/0x3950 [ 482.560510][T13179] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 482.560530][T13179] ? do_raw_spin_unlock+0x4d/0x240 [ 482.560544][T13179] ? join_transaction+0x41b/0xd70 [ 482.560564][T13179] ? btrfs_record_root_in_trans+0x124/0x180 [ 482.560582][T13179] ? start_transaction+0x439/0x1620 [ 482.560611][T13179] try_flush_qgroup+0x1dd/0x380 [ 482.560627][T13179] ? kfree+0x18e/0x440 [ 482.560641][T13179] ? __pfx_try_flush_qgroup+0x10/0x10 [ 482.560659][T13179] ? qgroup_reserve_data+0x6cc/0x8d0 [ 482.560686][T13179] btrfs_qgroup_reserve_data+0x69/0xb0 [ 482.560706][T13179] btrfs_check_data_free_space+0x2ce/0x450 [ 482.560724][T13179] btrfs_buffered_write+0x46c/0x16c0 [ 482.560763][T13179] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 482.560782][T13179] ? aa_file_perm+0x44d/0x1550 [ 482.560809][T13179] btrfs_do_write_iter+0x238/0x710 [ 482.560848][T13179] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 482.560875][T13179] do_iter_readv_writev+0x619/0x8b0 [ 482.560896][T13179] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 482.560909][T13179] ? rcu_read_lock_any_held+0xb3/0x120 [ 482.560933][T13179] vfs_writev+0x31a/0x960 [ 482.560953][T13179] ? __lock_acquire+0xab9/0xd20 [ 482.560970][T13179] ? __pfx_vfs_writev+0x10/0x10 [ 482.560997][T13179] ? __fget_files+0x2a/0x420 [ 482.561017][T13179] ? __fget_files+0x3a0/0x420 [ 482.561032][T13179] ? __fget_files+0x2a/0x420 [ 482.561053][T13179] __se_sys_pwritev2+0x179/0x290 [ 482.561071][T13179] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 482.561084][T13179] ? rcu_is_watching+0x15/0xb0 [ 482.561100][T13179] ? do_syscall_64+0xbe/0x3b0 [ 482.561117][T13179] ? __x64_sys_pwritev2+0x20/0xc0 [ 482.561135][T13179] do_syscall_64+0xfa/0x3b0 [ 482.561151][T13179] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.561168][T13179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.561180][T13179] ? clear_bhb_loop+0x60/0xb0 [ 482.561195][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.561207][T13179] RIP: 0033:0x7f62ccd7e719 [ 482.561221][T13179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.561231][T13179] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 482.561244][T13179] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 482.561252][T13179] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 482.561259][T13179] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 482.561266][T13179] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 482.561272][T13179] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 482.561292][T13179] [ 482.603141][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 482.645196][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.225723][T13197] loop0: detected capacity change from 0 to 32768 [ 483.237320][T13197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.420 (13197) [ 483.249195][T13197] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.249255][T13197] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 483.318346][T13197] BTRFS info (device loop0): enabling ssd optimizations [ 483.318370][T13197] BTRFS info (device loop0): enabling free space tree [ 483.386192][T13197] FAULT_INJECTION: forcing a failure. [ 483.386192][T13197] name failslab, interval 1, probability 0, space 0, times 0 [ 483.386219][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.0.420 Not tainted syzkaller #0 PREEMPT(full) [ 483.386234][T13197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.386242][T13197] Call Trace: [ 483.386249][T13197] [ 483.386255][T13197] dump_stack_lvl+0x189/0x250 [ 483.386275][T13197] ? __pfx____ratelimit+0x10/0x10 [ 483.386294][T13197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.386309][T13197] ? __pfx__printk+0x10/0x10 [ 483.386329][T13197] ? __pfx___might_resched+0x10/0x10 [ 483.386341][T13197] ? fs_reclaim_acquire+0x7d/0x100 [ 483.386363][T13197] should_fail_ex+0x414/0x560 [ 483.386384][T13197] should_failslab+0xa8/0x100 [ 483.386402][T13197] kmem_cache_alloc_noprof+0x73/0x3c0 [ 483.386415][T13197] ? alloc_extent_state+0x22/0x2f0 [ 483.386437][T13197] alloc_extent_state+0x22/0x2f0 [ 483.386457][T13197] set_extent_bit+0x270/0x21a0 [ 483.386491][T13197] ? __pfx_set_extent_bit+0x10/0x10 [ 483.386513][T13197] btrfs_set_extent_bit+0x38/0x50 [ 483.386530][T13197] btrfs_alloc_tree_block+0x965/0x1290 [ 483.386554][T13197] ? __bpf_address_lookup+0x370/0x3f0 [ 483.386570][T13197] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 483.386581][T13197] ? kernel_text_address+0xa5/0xe0 [ 483.386596][T13197] ? __kernel_text_address+0xd/0x40 [ 483.386610][T13197] ? unwind_get_return_address+0x4d/0x90 [ 483.386623][T13197] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.386640][T13197] ? read_extent_buffer+0x120/0x5e0 [ 483.386652][T13197] btrfs_force_cow_block+0x578/0x2460 [ 483.386667][T13197] ? __lock_acquire+0xab9/0xd20 [ 483.386689][T13197] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 483.386714][T13197] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 483.386731][T13197] ? down_write_nested+0x169/0x200 [ 483.386744][T13197] ? __pfx_down_write_nested+0x10/0x10 [ 483.386758][T13197] btrfs_cow_block+0x40a/0x9a0 [ 483.386785][T13197] btrfs_search_slot+0xd11/0x2b90 [ 483.386799][T13197] ? perf_trace_ocfs2_setattr+0x60/0x570 [ 483.386831][T13197] ? __pfx_btrfs_search_slot+0x10/0x10 [ 483.386850][T13197] ? kasan_save_track+0x4f/0x80 [ 483.386864][T13197] ? __kasan_slab_alloc+0x6c/0x80 [ 483.386878][T13197] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 483.386891][T13197] ? __btrfs_free_extent+0x2f9/0x4250 [ 483.386902][T13197] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 483.386922][T13197] lookup_inline_extent_backref+0x321/0x17b0 [ 483.386934][T13197] ? do_iter_readv_writev+0x619/0x8b0 [ 483.386948][T13197] ? vfs_writev+0x31a/0x960 [ 483.386962][T13197] ? __se_sys_pwritev2+0x179/0x290 [ 483.386974][T13197] ? do_syscall_64+0xfa/0x3b0 [ 483.387011][T13197] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 483.387045][T13197] ? rcu_is_watching+0x15/0xb0 [ 483.387059][T13197] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 483.387070][T13197] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 483.387085][T13197] __btrfs_free_extent+0x428/0x4250 [ 483.387117][T13197] ? __pfx___btrfs_free_extent+0x10/0x10 [ 483.387147][T13197] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 483.387175][T13197] ? __lock_acquire+0xab9/0xd20 [ 483.387216][T13197] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 483.387238][T13197] ? kernel_text_address+0xa5/0xe0 [ 483.387255][T13197] ? __kernel_text_address+0xd/0x40 [ 483.387271][T13197] ? unwind_get_return_address+0x4d/0x90 [ 483.387284][T13197] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.387299][T13197] ? arch_stack_walk+0xfc/0x150 [ 483.387322][T13197] ? __lock_acquire+0xab9/0xd20 [ 483.387349][T13197] ? btrfs_commit_transaction+0x161/0x3950 [ 483.387372][T13197] btrfs_run_delayed_refs+0xe6/0x3b0 [ 483.387394][T13197] btrfs_commit_transaction+0x269/0x3950 [ 483.387409][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.387424][T13197] ? btrfs_commit_transaction+0x161/0x3950 [ 483.387459][T13197] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 483.387481][T13197] ? do_raw_spin_unlock+0x4d/0x240 [ 483.387495][T13197] ? join_transaction+0x41b/0xd70 [ 483.387518][T13197] ? btrfs_record_root_in_trans+0x124/0x180 [ 483.387537][T13197] ? start_transaction+0x439/0x1620 [ 483.387569][T13197] try_flush_qgroup+0x1dd/0x380 [ 483.387586][T13197] ? kfree+0x18e/0x440 [ 483.387601][T13197] ? __pfx_try_flush_qgroup+0x10/0x10 [ 483.387618][T13197] ? qgroup_reserve_data+0x6cc/0x8d0 [ 483.387678][T13197] btrfs_qgroup_reserve_data+0x69/0xb0 [ 483.387698][T13197] btrfs_check_data_free_space+0x2ce/0x450 [ 483.387719][T13197] btrfs_buffered_write+0x46c/0x16c0 [ 483.387761][T13197] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 483.387780][T13197] ? aa_file_perm+0x44d/0x1550 [ 483.387807][T13197] btrfs_do_write_iter+0x238/0x710 [ 483.387832][T13197] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 483.387859][T13197] do_iter_readv_writev+0x619/0x8b0 [ 483.387880][T13197] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 483.387894][T13197] ? rcu_read_lock_any_held+0xb3/0x120 [ 483.387923][T13197] vfs_writev+0x31a/0x960 [ 483.387944][T13197] ? __lock_acquire+0xab9/0xd20 [ 483.387963][T13197] ? __pfx_vfs_writev+0x10/0x10 [ 483.387993][T13197] ? __fget_files+0x2a/0x420 [ 483.388013][T13197] ? __fget_files+0x3a0/0x420 [ 483.388034][T13197] ? __fget_files+0x2a/0x420 [ 483.388058][T13197] __se_sys_pwritev2+0x179/0x290 [ 483.388077][T13197] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 483.388091][T13197] ? rcu_is_watching+0x15/0xb0 [ 483.388108][T13197] ? do_syscall_64+0xbe/0x3b0 [ 483.388124][T13197] ? __x64_sys_pwritev2+0x20/0xc0 [ 483.388142][T13197] do_syscall_64+0xfa/0x3b0 [ 483.388158][T13197] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.388174][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.388186][T13197] ? clear_bhb_loop+0x60/0xb0 [ 483.388201][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.388212][T13197] RIP: 0033:0x7f62ccd7e719 [ 483.388223][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.388232][T13197] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 483.388243][T13197] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 483.388252][T13197] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 483.388260][T13197] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 483.388269][T13197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 483.388276][T13197] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 483.388299][T13197] [ 483.407374][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 483.466224][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.076826][T13215] loop0: detected capacity change from 0 to 32768 [ 484.086819][T13215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.421 (13215) [ 484.100733][T13215] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.100791][T13215] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 484.142655][T13215] BTRFS info (device loop0): enabling ssd optimizations [ 484.142679][T13215] BTRFS info (device loop0): enabling free space tree [ 484.214919][T13215] FAULT_INJECTION: forcing a failure. [ 484.214919][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 484.214945][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(full) [ 484.214958][T13215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.214966][T13215] Call Trace: [ 484.214971][T13215] [ 484.214976][T13215] dump_stack_lvl+0x189/0x250 [ 484.214997][T13215] ? __pfx____ratelimit+0x10/0x10 [ 484.215013][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.215027][T13215] ? __pfx__printk+0x10/0x10 [ 484.215044][T13215] ? __pfx___might_resched+0x10/0x10 [ 484.215055][T13215] ? fs_reclaim_acquire+0x7d/0x100 [ 484.215075][T13215] should_fail_ex+0x414/0x560 [ 484.215092][T13215] should_failslab+0xa8/0x100 [ 484.215109][T13215] kmem_cache_alloc_noprof+0x73/0x3c0 [ 484.215123][T13215] ? alloc_extent_state+0x22/0x2f0 [ 484.215143][T13215] alloc_extent_state+0x22/0x2f0 [ 484.215160][T13215] set_extent_bit+0x270/0x21a0 [ 484.215193][T13215] ? __pfx_set_extent_bit+0x10/0x10 [ 484.215216][T13215] btrfs_set_extent_bit+0x38/0x50 [ 484.215234][T13215] btrfs_alloc_tree_block+0x965/0x1290 [ 484.215259][T13215] ? __bpf_address_lookup+0x370/0x3f0 [ 484.215278][T13215] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 484.215290][T13215] ? kernel_text_address+0xa5/0xe0 [ 484.215305][T13215] ? __kernel_text_address+0xd/0x40 [ 484.215320][T13215] ? unwind_get_return_address+0x4d/0x90 [ 484.215332][T13215] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.215348][T13215] ? read_extent_buffer+0x120/0x5e0 [ 484.215362][T13215] btrfs_force_cow_block+0x578/0x2460 [ 484.215378][T13215] ? __lock_acquire+0xab9/0xd20 [ 484.215401][T13215] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 484.215427][T13215] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 484.215444][T13215] ? down_write_nested+0x169/0x200 [ 484.215459][T13215] ? __pfx_down_write_nested+0x10/0x10 [ 484.215476][T13215] btrfs_cow_block+0x40a/0x9a0 [ 484.215500][T13215] btrfs_search_slot+0xd11/0x2b90 [ 484.215533][T13215] ? __pfx_btrfs_search_slot+0x10/0x10 [ 484.215548][T13215] ? kasan_save_track+0x4f/0x80 [ 484.215559][T13215] ? __kasan_slab_alloc+0x6c/0x80 [ 484.215570][T13215] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 484.215581][T13215] ? __btrfs_free_extent+0x2f9/0x4250 [ 484.215592][T13215] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 484.215610][T13215] lookup_inline_extent_backref+0x321/0x17b0 [ 484.215652][T13215] ? do_iter_readv_writev+0x619/0x8b0 [ 484.215665][T13215] ? vfs_writev+0x31a/0x960 [ 484.215678][T13215] ? __se_sys_pwritev2+0x179/0x290 [ 484.215690][T13215] ? do_syscall_64+0xfa/0x3b0 [ 484.215725][T13215] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 484.215751][T13215] ? rcu_is_watching+0x15/0xb0 [ 484.215763][T13215] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 484.215773][T13215] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 484.215788][T13215] __btrfs_free_extent+0x428/0x4250 [ 484.215815][T13215] ? __pfx___btrfs_free_extent+0x10/0x10 [ 484.215847][T13215] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 484.215873][T13215] ? __lock_acquire+0xab9/0xd20 [ 484.215912][T13215] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 484.215932][T13215] ? kernel_text_address+0xa5/0xe0 [ 484.215949][T13215] ? __kernel_text_address+0xd/0x40 [ 484.215962][T13215] ? unwind_get_return_address+0x4d/0x90 [ 484.215974][T13215] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.215987][T13215] ? arch_stack_walk+0xfc/0x150 [ 484.216010][T13215] ? __lock_acquire+0xab9/0xd20 [ 484.216035][T13215] ? btrfs_commit_transaction+0x161/0x3950 [ 484.216056][T13215] btrfs_run_delayed_refs+0xe6/0x3b0 [ 484.216075][T13215] btrfs_commit_transaction+0x269/0x3950 [ 484.216089][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.216104][T13215] ? btrfs_commit_transaction+0x161/0x3950 [ 484.216134][T13215] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 484.216147][T13215] ? do_raw_spin_unlock+0x4d/0x240 [ 484.216155][T13215] ? join_transaction+0x41b/0xd70 [ 484.216174][T13215] ? btrfs_record_root_in_trans+0x124/0x180 [ 484.216191][T13215] ? start_transaction+0x439/0x1620 [ 484.216221][T13215] try_flush_qgroup+0x1dd/0x380 [ 484.216237][T13215] ? kfree+0x18e/0x440 [ 484.216249][T13215] ? __pfx_try_flush_qgroup+0x10/0x10 [ 484.216265][T13215] ? qgroup_reserve_data+0x6cc/0x8d0 [ 484.216291][T13215] btrfs_qgroup_reserve_data+0x69/0xb0 [ 484.216310][T13215] btrfs_check_data_free_space+0x2ce/0x450 [ 484.216323][T13215] btrfs_buffered_write+0x46c/0x16c0 [ 484.216360][T13215] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 484.216377][T13215] ? aa_file_perm+0x44d/0x1550 [ 484.216403][T13215] btrfs_do_write_iter+0x238/0x710 [ 484.216426][T13215] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 484.216451][T13215] do_iter_readv_writev+0x619/0x8b0 [ 484.216469][T13215] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 484.216482][T13215] ? rcu_read_lock_any_held+0xb3/0x120 [ 484.216507][T13215] vfs_writev+0x31a/0x960 [ 484.216526][T13215] ? __lock_acquire+0xab9/0xd20 [ 484.216544][T13215] ? __pfx_vfs_writev+0x10/0x10 [ 484.216570][T13215] ? __fget_files+0x2a/0x420 [ 484.216589][T13215] ? __fget_files+0x3a0/0x420 [ 484.216603][T13215] ? __fget_files+0x2a/0x420 [ 484.216624][T13215] __se_sys_pwritev2+0x179/0x290 [ 484.216642][T13215] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 484.216655][T13215] ? rcu_is_watching+0x15/0xb0 [ 484.216671][T13215] ? do_syscall_64+0xbe/0x3b0 [ 484.216686][T13215] ? __x64_sys_pwritev2+0x20/0xc0 [ 484.216703][T13215] do_syscall_64+0xfa/0x3b0 [ 484.216718][T13215] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.216733][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.216745][T13215] ? clear_bhb_loop+0x60/0xb0 [ 484.216760][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.216772][T13215] RIP: 0033:0x7f62ccd7e719 [ 484.216783][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.216793][T13215] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 484.216808][T13215] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 484.216816][T13215] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 484.216824][T13215] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 484.216838][T13215] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 484.216845][T13215] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 484.216865][T13215] [ 484.226975][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 484.272099][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.876242][T13233] loop0: detected capacity change from 0 to 32768 [ 484.890312][T13233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.422 (13233) [ 484.900806][T13233] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.900869][T13233] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 484.943365][T13233] BTRFS info (device loop0): enabling ssd optimizations [ 484.943388][T13233] BTRFS info (device loop0): enabling free space tree [ 485.001375][T13233] FAULT_INJECTION: forcing a failure. [ 485.001375][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 485.001403][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.0.422 Not tainted syzkaller #0 PREEMPT(full) [ 485.001417][T13233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.001425][T13233] Call Trace: [ 485.001430][T13233] [ 485.001435][T13233] dump_stack_lvl+0x189/0x250 [ 485.001455][T13233] ? __pfx____ratelimit+0x10/0x10 [ 485.001473][T13233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.001486][T13233] ? __pfx__printk+0x10/0x10 [ 485.001505][T13233] ? __pfx___might_resched+0x10/0x10 [ 485.001516][T13233] ? fs_reclaim_acquire+0x7d/0x100 [ 485.001537][T13233] should_fail_ex+0x414/0x560 [ 485.001556][T13233] should_failslab+0xa8/0x100 [ 485.001572][T13233] kmem_cache_alloc_noprof+0x73/0x3c0 [ 485.001584][T13233] ? __btrfs_free_extent+0x2f9/0x4250 [ 485.001601][T13233] __btrfs_free_extent+0x2f9/0x4250 [ 485.001629][T13233] ? __pfx___btrfs_free_extent+0x10/0x10 [ 485.001641][T13233] ? do_raw_read_unlock+0x3d/0x80 [ 485.001670][T13233] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 485.001705][T13233] ? __lock_acquire+0xab9/0xd20 [ 485.001731][T13233] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 485.001751][T13233] ? rcu_is_watching+0x15/0xb0 [ 485.001763][T13233] ? trace_contention_end+0x39/0x120 [ 485.001783][T13233] ? btrfs_start_dirty_block_groups+0xd33/0x10a0 [ 485.001805][T13233] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 485.001826][T13233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.001845][T13233] ? btrfs_block_rsv_release+0x529/0x5e0 [ 485.001867][T13233] btrfs_run_delayed_refs+0xe6/0x3b0 [ 485.001889][T13233] btrfs_start_dirty_block_groups+0xd3d/0x10a0 [ 485.001918][T13233] ? __pfx_btrfs_start_dirty_block_groups+0x10/0x10 [ 485.001933][T13233] ? __kasan_slab_alloc+0x6c/0x80 [ 485.001945][T13233] ? btrfs_trans_release_metadata+0x22d/0x330 [ 485.001963][T13233] btrfs_commit_transaction+0x674/0x3950 [ 485.001975][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.001989][T13233] ? btrfs_commit_transaction+0x161/0x3950 [ 485.002018][T13233] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 485.002036][T13233] ? do_raw_spin_unlock+0x4d/0x240 [ 485.002047][T13233] ? join_transaction+0x41b/0xd70 [ 485.002074][T13233] ? btrfs_record_root_in_trans+0x124/0x180 [ 485.002090][T13233] ? start_transaction+0x439/0x1620 [ 485.002118][T13233] try_flush_qgroup+0x1dd/0x380 [ 485.002132][T13233] ? kfree+0x18e/0x440 [ 485.002144][T13233] ? __pfx_try_flush_qgroup+0x10/0x10 [ 485.002159][T13233] ? qgroup_reserve_data+0x6cc/0x8d0 [ 485.002183][T13233] btrfs_qgroup_reserve_data+0x69/0xb0 [ 485.002200][T13233] btrfs_check_data_free_space+0x2ce/0x450 [ 485.002216][T13233] btrfs_buffered_write+0x46c/0x16c0 [ 485.002253][T13233] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 485.002271][T13233] ? aa_file_perm+0x44d/0x1550 [ 485.002298][T13233] btrfs_do_write_iter+0x238/0x710 [ 485.002323][T13233] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 485.002350][T13233] do_iter_readv_writev+0x619/0x8b0 [ 485.002373][T13233] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 485.002387][T13233] ? rcu_read_lock_any_held+0xb3/0x120 [ 485.002416][T13233] vfs_writev+0x31a/0x960 [ 485.002437][T13233] ? __lock_acquire+0xab9/0xd20 [ 485.002457][T13233] ? __pfx_vfs_writev+0x10/0x10 [ 485.002485][T13233] ? __fget_files+0x2a/0x420 [ 485.002505][T13233] ? __fget_files+0x3a0/0x420 [ 485.002519][T13233] ? __fget_files+0x2a/0x420 [ 485.002542][T13233] __se_sys_pwritev2+0x179/0x290 [ 485.002561][T13233] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 485.002575][T13233] ? rcu_is_watching+0x15/0xb0 [ 485.002592][T13233] ? do_syscall_64+0xbe/0x3b0 [ 485.002609][T13233] ? __x64_sys_pwritev2+0x20/0xc0 [ 485.002626][T13233] do_syscall_64+0xfa/0x3b0 [ 485.002642][T13233] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.002659][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.002671][T13233] ? clear_bhb_loop+0x60/0xb0 [ 485.002687][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.002699][T13233] RIP: 0033:0x7f62ccd7e719 [ 485.002711][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.002722][T13233] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 485.002737][T13233] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 485.002746][T13233] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 485.002754][T13233] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 485.002762][T13233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 485.002769][T13233] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 485.002792][T13233] [ 485.002802][T13233] BTRFS error (device loop0): failed to run delayed ref for logical 5353472 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 485.002842][T13233] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 485.002858][T13233] BTRFS: error (device loop0 state A) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 485.002873][T13233] BTRFS info (device loop0 state EA): forced readonly [ 485.005986][ T1041] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 485.007605][ T1041] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 485.018774][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 485.021087][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 485.021111][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 485.696997][T13251] loop0: detected capacity change from 0 to 32768 [ 485.705181][T13251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.423 (13251) [ 485.715394][T13251] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 485.715449][T13251] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 485.771560][T13251] BTRFS info (device loop0): enabling ssd optimizations [ 485.771582][T13251] BTRFS info (device loop0): enabling free space tree [ 485.841708][T13251] FAULT_INJECTION: forcing a failure. [ 485.841708][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 485.841736][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.0.423 Not tainted syzkaller #0 PREEMPT(full) [ 485.841750][T13251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.841758][T13251] Call Trace: [ 485.841764][T13251] [ 485.841770][T13251] dump_stack_lvl+0x189/0x250 [ 485.841790][T13251] ? __pfx____ratelimit+0x10/0x10 [ 485.841808][T13251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.841824][T13251] ? __pfx__printk+0x10/0x10 [ 485.841844][T13251] ? __pfx___might_resched+0x10/0x10 [ 485.841857][T13251] ? fs_reclaim_acquire+0x7d/0x100 [ 485.841878][T13251] should_fail_ex+0x414/0x560 [ 485.841898][T13251] should_failslab+0xa8/0x100 [ 485.841916][T13251] kmem_cache_alloc_noprof+0x73/0x3c0 [ 485.841931][T13251] ? alloc_extent_state+0x22/0x2f0 [ 485.841953][T13251] alloc_extent_state+0x22/0x2f0 [ 485.841971][T13251] set_extent_bit+0x270/0x21a0 [ 485.842009][T13251] ? __pfx_set_extent_bit+0x10/0x10 [ 485.842034][T13251] btrfs_set_extent_bit+0x38/0x50 [ 485.842053][T13251] btrfs_alloc_tree_block+0x965/0x1290 [ 485.842080][T13251] ? __bpf_address_lookup+0x370/0x3f0 [ 485.842101][T13251] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 485.842114][T13251] ? kernel_text_address+0xa5/0xe0 [ 485.842133][T13251] ? __kernel_text_address+0xd/0x40 [ 485.842148][T13251] ? unwind_get_return_address+0x4d/0x90 [ 485.842162][T13251] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 485.842182][T13251] ? read_extent_buffer+0x120/0x5e0 [ 485.842199][T13251] btrfs_force_cow_block+0x578/0x2460 [ 485.842216][T13251] ? __lock_acquire+0xab9/0xd20 [ 485.842242][T13251] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 485.842271][T13251] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 485.842291][T13251] ? down_write_nested+0x169/0x200 [ 485.842305][T13251] ? __pfx_down_write_nested+0x10/0x10 [ 485.842322][T13251] btrfs_cow_block+0x40a/0x9a0 [ 485.842346][T13251] btrfs_search_slot+0xd11/0x2b90 [ 485.842381][T13251] ? __pfx_btrfs_search_slot+0x10/0x10 [ 485.842400][T13251] ? kasan_save_track+0x4f/0x80 [ 485.842413][T13251] ? __kasan_slab_alloc+0x6c/0x80 [ 485.842425][T13251] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 485.842437][T13251] ? __btrfs_free_extent+0x2f9/0x4250 [ 485.842448][T13251] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 485.842469][T13251] lookup_inline_extent_backref+0x321/0x17b0 [ 485.842482][T13251] ? do_iter_readv_writev+0x619/0x8b0 [ 485.842497][T13251] ? vfs_writev+0x31a/0x960 [ 485.842511][T13251] ? __se_sys_pwritev2+0x179/0x290 [ 485.842524][T13251] ? do_syscall_64+0xfa/0x3b0 [ 485.842561][T13251] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 485.842590][T13251] ? rcu_is_watching+0x15/0xb0 [ 485.842604][T13251] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 485.842615][T13251] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 485.842632][T13251] __btrfs_free_extent+0x428/0x4250 [ 485.842665][T13251] ? __pfx___btrfs_free_extent+0x10/0x10 [ 485.842695][T13251] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 485.842723][T13251] ? __lock_acquire+0xab9/0xd20 [ 485.842764][T13251] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 485.842786][T13251] ? kernel_text_address+0xa5/0xe0 [ 485.842804][T13251] ? __kernel_text_address+0xd/0x40 [ 485.842820][T13251] ? unwind_get_return_address+0x4d/0x90 [ 485.842834][T13251] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 485.842849][T13251] ? arch_stack_walk+0xfc/0x150 [ 485.842874][T13251] ? __lock_acquire+0xab9/0xd20 [ 485.842902][T13251] ? btrfs_commit_transaction+0x161/0x3950 [ 485.842925][T13251] btrfs_run_delayed_refs+0xe6/0x3b0 [ 485.842947][T13251] btrfs_commit_transaction+0x269/0x3950 [ 485.842963][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.842979][T13251] ? btrfs_commit_transaction+0x161/0x3950 [ 485.843021][T13251] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 485.843043][T13251] ? do_raw_spin_unlock+0x4d/0x240 [ 485.843058][T13251] ? join_transaction+0x41b/0xd70 [ 485.843081][T13251] ? btrfs_record_root_in_trans+0x124/0x180 [ 485.843100][T13251] ? start_transaction+0x439/0x1620 [ 485.843133][T13251] try_flush_qgroup+0x1dd/0x380 [ 485.843149][T13251] ? kfree+0x18e/0x440 [ 485.843163][T13251] ? __pfx_try_flush_qgroup+0x10/0x10 [ 485.843182][T13251] ? qgroup_reserve_data+0x6cc/0x8d0 [ 485.843211][T13251] btrfs_qgroup_reserve_data+0x69/0xb0 [ 485.843232][T13251] btrfs_check_data_free_space+0x2ce/0x450 [ 485.843251][T13251] btrfs_buffered_write+0x46c/0x16c0 [ 485.843293][T13251] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 485.843312][T13251] ? aa_file_perm+0x44d/0x1550 [ 485.843340][T13251] btrfs_do_write_iter+0x238/0x710 [ 485.843366][T13251] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 485.843393][T13251] do_iter_readv_writev+0x619/0x8b0 [ 485.843414][T13251] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 485.843427][T13251] ? rcu_read_lock_any_held+0xb3/0x120 [ 485.843455][T13251] vfs_writev+0x31a/0x960 [ 485.843476][T13251] ? __lock_acquire+0xab9/0xd20 [ 485.843495][T13251] ? __pfx_vfs_writev+0x10/0x10 [ 485.843526][T13251] ? __fget_files+0x2a/0x420 [ 485.843546][T13251] ? __fget_files+0x3a0/0x420 [ 485.843561][T13251] ? __fget_files+0x2a/0x420 [ 485.843582][T13251] __se_sys_pwritev2+0x179/0x290 [ 485.843599][T13251] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 485.843642][T13251] ? rcu_is_watching+0x15/0xb0 [ 485.843659][T13251] ? do_syscall_64+0xbe/0x3b0 [ 485.843675][T13251] ? __x64_sys_pwritev2+0x20/0xc0 [ 485.843693][T13251] do_syscall_64+0xfa/0x3b0 [ 485.843710][T13251] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.843727][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.843739][T13251] ? clear_bhb_loop+0x60/0xb0 [ 485.843754][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.843766][T13251] RIP: 0033:0x7f62ccd7e719 [ 485.843779][T13251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.843790][T13251] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 485.843805][T13251] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 485.843815][T13251] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 485.843823][T13251] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 485.843832][T13251] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 485.843840][T13251] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 485.843864][T13251] [ 485.858970][ T1041] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 485.897810][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.527733][T13269] loop0: detected capacity change from 0 to 32768 [ 486.536800][T13269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.424 (13269) [ 486.544302][T13269] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.544363][T13269] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 486.595652][T13269] BTRFS info (device loop0): enabling ssd optimizations [ 486.595676][T13269] BTRFS info (device loop0): enabling free space tree [ 486.707763][T13269] FAULT_INJECTION: forcing a failure. [ 486.707763][T13269] name failslab, interval 1, probability 0, space 0, times 0 [ 486.707789][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.0.424 Not tainted syzkaller #0 PREEMPT(full) [ 486.707802][T13269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.707810][T13269] Call Trace: [ 486.707815][T13269] [ 486.707820][T13269] dump_stack_lvl+0x189/0x250 [ 486.707840][T13269] ? __pfx____ratelimit+0x10/0x10 [ 486.707857][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.707870][T13269] ? __pfx__printk+0x10/0x10 [ 486.707888][T13269] ? __pfx___might_resched+0x10/0x10 [ 486.707901][T13269] ? fs_reclaim_acquire+0x7d/0x100 [ 486.707920][T13269] should_fail_ex+0x414/0x560 [ 486.707936][T13269] should_failslab+0xa8/0x100 [ 486.707947][T13269] kmem_cache_alloc_noprof+0x73/0x3c0 [ 486.707956][T13269] ? alloc_extent_state+0x22/0x2f0 [ 486.707974][T13269] alloc_extent_state+0x22/0x2f0 [ 486.707991][T13269] set_extent_bit+0x270/0x21a0 [ 486.708025][T13269] ? __pfx_set_extent_bit+0x10/0x10 [ 486.708055][T13269] btrfs_set_extent_bit+0x38/0x50 [ 486.708074][T13269] btrfs_alloc_tree_block+0x965/0x1290 [ 486.708097][T13269] ? __bpf_address_lookup+0x370/0x3f0 [ 486.708114][T13269] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 486.708125][T13269] ? kernel_text_address+0xa5/0xe0 [ 486.708141][T13269] ? __kernel_text_address+0xd/0x40 [ 486.708155][T13269] ? unwind_get_return_address+0x4d/0x90 [ 486.708168][T13269] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.708186][T13269] ? read_extent_buffer+0x120/0x5e0 [ 486.708199][T13269] btrfs_force_cow_block+0x578/0x2460 [ 486.708214][T13269] ? __lock_acquire+0xab9/0xd20 [ 486.708235][T13269] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 486.708262][T13269] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 486.708278][T13269] ? down_write_nested+0x169/0x200 [ 486.708292][T13269] ? __pfx_down_write_nested+0x10/0x10 [ 486.708305][T13269] btrfs_cow_block+0x40a/0x9a0 [ 486.708319][T13269] btrfs_search_slot+0xd11/0x2b90 [ 486.708340][T13269] ? __pfx_btrfs_search_slot+0x10/0x10 [ 486.708350][T13269] ? kasan_save_track+0x4f/0x80 [ 486.708361][T13269] ? __kasan_slab_alloc+0x6c/0x80 [ 486.708371][T13269] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 486.708382][T13269] ? __btrfs_free_extent+0x2f9/0x4250 [ 486.708392][T13269] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 486.708411][T13269] lookup_inline_extent_backref+0x321/0x17b0 [ 486.708422][T13269] ? do_iter_readv_writev+0x619/0x8b0 [ 486.708436][T13269] ? vfs_writev+0x31a/0x960 [ 486.708449][T13269] ? __se_sys_pwritev2+0x179/0x290 [ 486.708461][T13269] ? do_syscall_64+0xfa/0x3b0 [ 486.708493][T13269] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 486.708519][T13269] ? rcu_is_watching+0x15/0xb0 [ 486.708533][T13269] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 486.708544][T13269] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 486.708559][T13269] __btrfs_free_extent+0x428/0x4250 [ 486.708587][T13269] ? __pfx___btrfs_free_extent+0x10/0x10 [ 486.708629][T13269] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 486.708653][T13269] ? __lock_acquire+0xab9/0xd20 [ 486.708690][T13269] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 486.708731][T13269] ? kernel_text_address+0xa5/0xe0 [ 486.708748][T13269] ? __kernel_text_address+0xd/0x40 [ 486.708763][T13269] ? unwind_get_return_address+0x4d/0x90 [ 486.708775][T13269] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.708789][T13269] ? arch_stack_walk+0xfc/0x150 [ 486.708810][T13269] ? __lock_acquire+0xab9/0xd20 [ 486.708832][T13269] ? btrfs_commit_transaction+0x161/0x3950 [ 486.708854][T13269] btrfs_run_delayed_refs+0xe6/0x3b0 [ 486.708873][T13269] btrfs_commit_transaction+0x269/0x3950 [ 486.708887][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.708902][T13269] ? btrfs_commit_transaction+0x161/0x3950 [ 486.708933][T13269] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 486.708951][T13269] ? do_raw_spin_unlock+0x4d/0x240 [ 486.708964][T13269] ? join_transaction+0x41b/0xd70 [ 486.708982][T13269] ? btrfs_record_root_in_trans+0x124/0x180 [ 486.709000][T13269] ? start_transaction+0x439/0x1620 [ 486.709027][T13269] try_flush_qgroup+0x1dd/0x380 [ 486.709049][T13269] ? kfree+0x18e/0x440 [ 486.709063][T13269] ? __pfx_try_flush_qgroup+0x10/0x10 [ 486.709079][T13269] ? qgroup_reserve_data+0x6cc/0x8d0 [ 486.709102][T13269] btrfs_qgroup_reserve_data+0x69/0xb0 [ 486.709121][T13269] btrfs_check_data_free_space+0x2ce/0x450 [ 486.709137][T13269] btrfs_buffered_write+0x46c/0x16c0 [ 486.709176][T13269] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 486.709192][T13269] ? aa_file_perm+0x44d/0x1550 [ 486.709217][T13269] btrfs_do_write_iter+0x238/0x710 [ 486.709238][T13269] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 486.709263][T13269] do_iter_readv_writev+0x619/0x8b0 [ 486.709281][T13269] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 486.709293][T13269] ? rcu_read_lock_any_held+0xb3/0x120 [ 486.709317][T13269] vfs_writev+0x31a/0x960 [ 486.709337][T13269] ? __lock_acquire+0xab9/0xd20 [ 486.709353][T13269] ? __pfx_vfs_writev+0x10/0x10 [ 486.709379][T13269] ? __fget_files+0x2a/0x420 [ 486.709399][T13269] ? __fget_files+0x3a0/0x420 [ 486.709412][T13269] ? __fget_files+0x2a/0x420 [ 486.709434][T13269] __se_sys_pwritev2+0x179/0x290 [ 486.709450][T13269] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 486.709463][T13269] ? rcu_is_watching+0x15/0xb0 [ 486.709478][T13269] ? do_syscall_64+0xbe/0x3b0 [ 486.709493][T13269] ? __x64_sys_pwritev2+0x20/0xc0 [ 486.709508][T13269] do_syscall_64+0xfa/0x3b0 [ 486.709523][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.709537][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.709548][T13269] ? clear_bhb_loop+0x60/0xb0 [ 486.709564][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.709575][T13269] RIP: 0033:0x7f62ccd7e719 [ 486.709587][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.709597][T13269] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 486.709611][T13269] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 486.709619][T13269] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 486.709626][T13269] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 486.709634][T13269] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 486.709641][T13269] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 486.709660][T13269] [ 486.765068][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 486.843463][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.651301][T13287] loop0: detected capacity change from 0 to 32768 [ 487.693741][T13287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.425 (13287) [ 487.709309][T13287] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.709357][T13287] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 487.800858][T13287] BTRFS info (device loop0): enabling ssd optimizations [ 487.800880][T13287] BTRFS info (device loop0): enabling free space tree [ 487.913078][ T1052] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 487.913154][T13287] FAULT_INJECTION: forcing a failure. [ 487.913154][T13287] name failslab, interval 1, probability 0, space 0, times 0 [ 487.913175][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 487.913189][T13287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.913197][T13287] Call Trace: [ 487.913202][T13287] [ 487.913208][T13287] dump_stack_lvl+0x189/0x250 [ 487.913237][T13287] ? __pfx____ratelimit+0x10/0x10 [ 487.913254][T13287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.913267][T13287] ? __pfx__printk+0x10/0x10 [ 487.913283][T13287] ? __pfx___might_resched+0x10/0x10 [ 487.913301][T13287] ? fs_reclaim_acquire+0x7d/0x100 [ 487.913320][T13287] should_fail_ex+0x414/0x560 [ 487.913337][T13287] should_failslab+0xa8/0x100 [ 487.913352][T13287] kmem_cache_alloc_noprof+0x73/0x3c0 [ 487.913365][T13287] ? alloc_extent_state+0x22/0x2f0 [ 487.913384][T13287] alloc_extent_state+0x22/0x2f0 [ 487.913402][T13287] set_extent_bit+0x270/0x21a0 [ 487.913431][T13287] ? __pfx_set_extent_bit+0x10/0x10 [ 487.913449][T13287] ? __kasan_kmalloc+0x93/0xb0 [ 487.913465][T13287] btrfs_set_record_extent_bits+0x50/0x90 [ 487.913484][T13287] qgroup_reserve_data+0x29e/0x8d0 [ 487.913507][T13287] btrfs_check_data_free_space+0x2ce/0x450 [ 487.913524][T13287] btrfs_buffered_write+0x46c/0x16c0 [ 487.913558][T13287] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 487.913575][T13287] ? aa_file_perm+0x44d/0x1550 [ 487.913599][T13287] btrfs_do_write_iter+0x238/0x710 [ 487.913621][T13287] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 487.913645][T13287] do_iter_readv_writev+0x619/0x8b0 [ 487.913663][T13287] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 487.913677][T13287] ? rcu_read_lock_any_held+0xb3/0x120 [ 487.913701][T13287] vfs_writev+0x31a/0x960 [ 487.913720][T13287] ? __lock_acquire+0xab9/0xd20 [ 487.913738][T13287] ? __pfx_vfs_writev+0x10/0x10 [ 487.913763][T13287] ? __fget_files+0x2a/0x420 [ 487.913792][T13287] ? __fget_files+0x3a0/0x420 [ 487.913806][T13287] ? __fget_files+0x2a/0x420 [ 487.913827][T13287] __se_sys_pwritev2+0x179/0x290 [ 487.913844][T13287] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 487.913858][T13287] ? rcu_is_watching+0x15/0xb0 [ 487.913874][T13287] ? do_syscall_64+0xbe/0x3b0 [ 487.913890][T13287] ? __x64_sys_pwritev2+0x20/0xc0 [ 487.913905][T13287] do_syscall_64+0xfa/0x3b0 [ 487.913920][T13287] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.913935][T13287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.913946][T13287] ? clear_bhb_loop+0x60/0xb0 [ 487.913961][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.913972][T13287] RIP: 0033:0x7f62ccd7e719 [ 487.913984][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.913994][T13287] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 487.914008][T13287] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 487.914017][T13287] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 487.914024][T13287] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 487.914031][T13287] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 487.914038][T13287] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 487.914057][T13287] [ 487.984375][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.767359][T13309] loop0: detected capacity change from 0 to 32768 [ 488.773671][T13309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.426 (13309) [ 488.778723][T13309] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.778779][T13309] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 488.814216][T13309] BTRFS info (device loop0): enabling ssd optimizations [ 488.814238][T13309] BTRFS info (device loop0): enabling free space tree [ 488.861574][T13309] FAULT_INJECTION: forcing a failure. [ 488.861574][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 488.861600][T13309] CPU: 0 UID: 0 PID: 13309 Comm: syz.0.426 Not tainted syzkaller #0 PREEMPT(full) [ 488.861614][T13309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.861621][T13309] Call Trace: [ 488.861627][T13309] [ 488.861632][T13309] dump_stack_lvl+0x189/0x250 [ 488.861652][T13309] ? __pfx____ratelimit+0x10/0x10 [ 488.861668][T13309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.861683][T13309] ? __pfx__printk+0x10/0x10 [ 488.861700][T13309] ? __pfx___might_resched+0x10/0x10 [ 488.861712][T13309] ? fs_reclaim_acquire+0x7d/0x100 [ 488.861732][T13309] should_fail_ex+0x414/0x560 [ 488.861749][T13309] should_failslab+0xa8/0x100 [ 488.861765][T13309] kmem_cache_alloc_noprof+0x73/0x3c0 [ 488.861785][T13309] ? btrfs_add_to_free_space_tree+0xde/0x5b0 [ 488.861804][T13309] btrfs_add_to_free_space_tree+0xde/0x5b0 [ 488.861821][T13309] __btrfs_free_extent+0x167b/0x4250 [ 488.861837][T13309] ? __pfx___btrfs_free_extent+0x10/0x10 [ 488.861862][T13309] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 488.861887][T13309] ? __lock_acquire+0xab9/0xd20 [ 488.861923][T13309] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 488.861943][T13309] ? kernel_text_address+0xa5/0xe0 [ 488.861961][T13309] ? __kernel_text_address+0xd/0x40 [ 488.861975][T13309] ? unwind_get_return_address+0x4d/0x90 [ 488.861988][T13309] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 488.862001][T13309] ? arch_stack_walk+0xfc/0x150 [ 488.862023][T13309] ? __lock_acquire+0xab9/0xd20 [ 488.862046][T13309] ? btrfs_commit_transaction+0x161/0x3950 [ 488.862067][T13309] btrfs_run_delayed_refs+0xe6/0x3b0 [ 488.862086][T13309] btrfs_commit_transaction+0x269/0x3950 [ 488.862101][T13309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.862115][T13309] ? btrfs_commit_transaction+0x161/0x3950 [ 488.862145][T13309] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 488.862164][T13309] ? do_raw_spin_unlock+0x4d/0x240 [ 488.862177][T13309] ? join_transaction+0x41b/0xd70 [ 488.862197][T13309] ? btrfs_record_root_in_trans+0x124/0x180 [ 488.862208][T13309] ? start_transaction+0x439/0x1620 [ 488.862229][T13309] try_flush_qgroup+0x1dd/0x380 [ 488.862245][T13309] ? kfree+0x18e/0x440 [ 488.862259][T13309] ? __pfx_try_flush_qgroup+0x10/0x10 [ 488.862275][T13309] ? qgroup_reserve_data+0x6cc/0x8d0 [ 488.862299][T13309] btrfs_qgroup_reserve_data+0x69/0xb0 [ 488.862317][T13309] btrfs_check_data_free_space+0x2ce/0x450 [ 488.862333][T13309] btrfs_buffered_write+0x46c/0x16c0 [ 488.862372][T13309] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 488.862389][T13309] ? aa_file_perm+0x44d/0x1550 [ 488.862409][T13309] btrfs_do_write_iter+0x238/0x710 [ 488.862424][T13309] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 488.862443][T13309] do_iter_readv_writev+0x619/0x8b0 [ 488.862462][T13309] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 488.862475][T13309] ? rcu_read_lock_any_held+0xb3/0x120 [ 488.862500][T13309] vfs_writev+0x31a/0x960 [ 488.862517][T13309] ? __lock_acquire+0xab9/0xd20 [ 488.862532][T13309] ? __pfx_vfs_writev+0x10/0x10 [ 488.862558][T13309] ? __fget_files+0x2a/0x420 [ 488.862576][T13309] ? __fget_files+0x3a0/0x420 [ 488.862590][T13309] ? __fget_files+0x2a/0x420 [ 488.862611][T13309] __se_sys_pwritev2+0x179/0x290 [ 488.862623][T13309] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 488.862631][T13309] ? rcu_is_watching+0x15/0xb0 [ 488.862642][T13309] ? do_syscall_64+0xbe/0x3b0 [ 488.862652][T13309] ? __x64_sys_pwritev2+0x20/0xc0 [ 488.862662][T13309] do_syscall_64+0xfa/0x3b0 [ 488.862672][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.862681][T13309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.862689][T13309] ? clear_bhb_loop+0x60/0xb0 [ 488.862698][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.862705][T13309] RIP: 0033:0x7f62ccd7e719 [ 488.862713][T13309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.862720][T13309] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 488.862729][T13309] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 488.862734][T13309] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 488.862739][T13309] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 488.862743][T13309] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 488.862748][T13309] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 488.862767][T13309] [ 488.862776][T13309] BTRFS error (device loop0 state A): Transaction aborted (error -12) [ 488.862798][T13309] BTRFS: error (device loop0 state A) in btrfs_add_to_free_space_tree:1035: errno=-12 Out of memory [ 488.862813][T13309] BTRFS info (device loop0 state EA): forced readonly [ 488.862823][T13309] BTRFS: error (device loop0 state EA) in do_free_extent_accounting:3005: errno=-12 Out of memory [ 488.862850][T13309] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 488.862883][T13309] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2161: errno=-12 Out of memory [ 488.870224][ T1052] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 488.870954][ T1052] BTRFS error (device loop0 state EA): fail to start transaction for status update: -30 [ 488.885987][ T5800] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.900598][ T5800] BTRFS warning (device loop0 state EA): qgroup 0/5 has unreleased space, type 0 rsv 1052672 [ 488.900622][ T5800] BTRFS error (device loop0 state EA): qgroup reserved space leaked [ 489.694992][T13327] loop0: detected capacity change from 0 to 32768 [ 489.711352][T13327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.427 (13327) [ 489.730085][T13327] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 489.730141][T13327] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 489.793050][T13327] BTRFS info (device loop0): enabling ssd optimizations [ 489.793073][T13327] BTRFS info (device loop0): enabling free space tree [ 489.871965][T13327] FAULT_INJECTION: forcing a failure. [ 489.871965][T13327] name failslab, interval 1, probability 0, space 0, times 0 [ 489.871992][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(full) [ 489.872006][T13327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 489.872014][T13327] Call Trace: [ 489.872019][T13327] [ 489.872063][T13327] dump_stack_lvl+0x189/0x250 [ 489.872088][T13327] ? __pfx____ratelimit+0x10/0x10 [ 489.872105][T13327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.872118][T13327] ? __pfx__printk+0x10/0x10 [ 489.872136][T13327] ? __pfx___might_resched+0x10/0x10 [ 489.872148][T13327] ? fs_reclaim_acquire+0x7d/0x100 [ 489.872168][T13327] should_fail_ex+0x414/0x560 [ 489.872187][T13327] should_failslab+0xa8/0x100 [ 489.872204][T13327] kmem_cache_alloc_noprof+0x73/0x3c0 [ 489.872217][T13327] ? alloc_extent_state+0x22/0x2f0 [ 489.872236][T13327] alloc_extent_state+0x22/0x2f0 [ 489.872254][T13327] set_extent_bit+0x270/0x21a0 [ 489.872286][T13327] ? __pfx_set_extent_bit+0x10/0x10 [ 489.872309][T13327] btrfs_set_extent_bit+0x38/0x50 [ 489.872328][T13327] btrfs_alloc_tree_block+0x965/0x1290 [ 489.872355][T13327] ? __bpf_address_lookup+0x370/0x3f0 [ 489.872374][T13327] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 489.872386][T13327] ? kernel_text_address+0xa5/0xe0 [ 489.872403][T13327] ? __kernel_text_address+0xd/0x40 [ 489.872418][T13327] ? unwind_get_return_address+0x4d/0x90 [ 489.872431][T13327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.872449][T13327] ? read_extent_buffer+0x120/0x5e0 [ 489.872464][T13327] btrfs_force_cow_block+0x578/0x2460 [ 489.872479][T13327] ? __lock_acquire+0xab9/0xd20 [ 489.872502][T13327] ? btrfs_qgroup_trace_subtree_after_cow+0x40b/0x930 [ 489.872530][T13327] ? __pfx_btrfs_force_cow_block+0x10/0x10 [ 489.872546][T13327] ? down_write_nested+0x169/0x200 [ 489.872560][T13327] ? __pfx_down_write_nested+0x10/0x10 [ 489.872577][T13327] btrfs_cow_block+0x40a/0x9a0 [ 489.872600][T13327] btrfs_search_slot+0xd11/0x2b90 [ 489.872635][T13327] ? __pfx_btrfs_search_slot+0x10/0x10 [ 489.872651][T13327] ? kasan_save_track+0x4f/0x80 [ 489.872663][T13327] ? __kasan_slab_alloc+0x6c/0x80 [ 489.872674][T13327] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 489.872685][T13327] ? __btrfs_free_extent+0x2f9/0x4250 [ 489.872695][T13327] ? __btrfs_run_delayed_refs+0xe7f/0x4130 [ 489.872714][T13327] lookup_inline_extent_backref+0x321/0x17b0 [ 489.872726][T13327] ? do_iter_readv_writev+0x619/0x8b0 [ 489.872740][T13327] ? vfs_writev+0x31a/0x960 [ 489.872753][T13327] ? __se_sys_pwritev2+0x179/0x290 [ 489.872786][T13327] ? do_syscall_64+0xfa/0x3b0 [ 489.872819][T13327] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 489.872846][T13327] ? rcu_is_watching+0x15/0xb0 [ 489.872859][T13327] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 489.872870][T13327] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 489.872886][T13327] __btrfs_free_extent+0x428/0x4250 [ 489.872915][T13327] ? __pfx___btrfs_free_extent+0x10/0x10 [ 489.872944][T13327] __btrfs_run_delayed_refs+0xe7f/0x4130 [ 489.872970][T13327] ? __lock_acquire+0xab9/0xd20 [ 489.873007][T13327] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 489.873026][T13327] ? kernel_text_address+0xa5/0xe0 [ 489.873041][T13327] ? __kernel_text_address+0xd/0x40 [ 489.873056][T13327] ? unwind_get_return_address+0x4d/0x90 [ 489.873069][T13327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.873084][T13327] ? arch_stack_walk+0xfc/0x150 [ 489.873107][T13327] ? __lock_acquire+0xab9/0xd20 [ 489.873133][T13327] ? btrfs_commit_transaction+0x161/0x3950 [ 489.873155][T13327] btrfs_run_delayed_refs+0xe6/0x3b0 [ 489.873176][T13327] btrfs_commit_transaction+0x269/0x3950 [ 489.873191][T13327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.873206][T13327] ? btrfs_commit_transaction+0x161/0x3950 [ 489.873237][T13327] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 489.873258][T13327] ? do_raw_spin_unlock+0x4d/0x240 [ 489.873272][T13327] ? join_transaction+0x41b/0xd70 [ 489.873293][T13327] ? btrfs_record_root_in_trans+0x124/0x180 [ 489.873311][T13327] ? start_transaction+0x439/0x1620 [ 489.873342][T13327] try_flush_qgroup+0x1dd/0x380 [ 489.873359][T13327] ? kfree+0x18e/0x440 [ 489.873373][T13327] ? __pfx_try_flush_qgroup+0x10/0x10 [ 489.873389][T13327] ? qgroup_reserve_data+0x6cc/0x8d0 [ 489.873415][T13327] btrfs_qgroup_reserve_data+0x69/0xb0 [ 489.873434][T13327] btrfs_check_data_free_space+0x2ce/0x450 [ 489.873453][T13327] btrfs_buffered_write+0x46c/0x16c0 [ 489.873491][T13327] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 489.873509][T13327] ? aa_file_perm+0x44d/0x1550 [ 489.873535][T13327] btrfs_do_write_iter+0x238/0x710 [ 489.873559][T13327] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 489.873583][T13327] do_iter_readv_writev+0x619/0x8b0 [ 489.873602][T13327] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 489.873615][T13327] ? rcu_read_lock_any_held+0xb3/0x120 [ 489.873641][T13327] vfs_writev+0x31a/0x960 [ 489.873660][T13327] ? __lock_acquire+0xab9/0xd20 [ 489.873679][T13327] ? __pfx_vfs_writev+0x10/0x10 [ 489.873705][T13327] ? __fget_files+0x2a/0x420 [ 489.873723][T13327] ? __fget_files+0x3a0/0x420 [ 489.873737][T13327] ? __fget_files+0x2a/0x420 [ 489.873759][T13327] __se_sys_pwritev2+0x179/0x290 [ 489.873783][T13327] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 489.873796][T13327] ? rcu_is_watching+0x15/0xb0 [ 489.873810][T13327] ? do_syscall_64+0xbe/0x3b0 [ 489.873826][T13327] ? __x64_sys_pwritev2+0x20/0xc0 [ 489.873842][T13327] do_syscall_64+0xfa/0x3b0 [ 489.873890][T13327] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.873907][T13327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.873919][T13327] ? clear_bhb_loop+0x60/0xb0 [ 489.873935][T13327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.873946][T13327] RIP: 0033:0x7f62ccd7e719 [ 489.873959][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.873970][T13327] RSP: 002b:00007f62cdac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 489.873984][T13327] RAX: ffffffffffffffda RBX: 00007f62ccf35f80 RCX: 00007f62ccd7e719 [ 489.873992][T13327] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000005 [ 489.873999][T13327] RBP: 00007f62cdac6090 R08: 0000000000000009 R09: 0000000000000008 [ 489.874007][T13327] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 489.874014][T13327] R13: 0000000000000000 R14: 00007f62ccf35f80 R15: 00007ffffd002f38 [ 489.874034][T13327] [ 489.901869][ T31] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 489.960152][ T5800] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 490.933171][ T1052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.008560][ T1052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.072527][ T1052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.123408][ T1052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.310535][ T1052] bridge_slave_1: left allmulticast mode [ 491.310579][ T1052] bridge_slave_1: left promiscuous mode [ 491.310698][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.332275][ T1052] bridge_slave_0: left allmulticast mode [ 491.332294][ T1052] bridge_slave_0: left promiscuous mode [ 491.332432][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.250239][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.270894][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.272835][ T1052] bond0 (unregistering): Released all slaves [ 492.724712][ T1052] hsr_slave_0: left promiscuous mode [ 492.725152][ T1052] hsr_slave_1: left promiscuous mode [ 492.725546][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.725561][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.726120][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.726133][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.743603][ T1052] veth1_macvtap: left promiscuous mode [ 492.743674][ T1052] veth0_macvtap: left promiscuous mode [ 492.743804][ T1052] veth1_vlan: left promiscuous mode [ 492.743879][ T1052] veth0_vlan: left promiscuous mode [ 493.340846][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 493.373802][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 506.573450][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.576295][ T1315] ieee802154 phy1 wpan1: encryption failed: -22