./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3761221271
<...>
Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts.
execve("./syz-executor3761221271", ["./syz-executor3761221271"], 0x7ffcbc2ec9a0 /* 10 vars */) = 0
brk(NULL) = 0x555555779000
brk(0x555555779c40) = 0x555555779c40
arch_prctl(ARCH_SET_FS, 0x555555779300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3761221271", 4096) = 28
brk(0x55555579ac40) = 0x55555579ac40
brk(0x55555579b000) = 0x55555579b000
mprotect(0x7f4095053000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f408cb95000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f408cb95000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 50.222690][ T3627] loop0: detected capacity change from 0 to 32768
[ 50.236093][ T3627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor376 (3627)
[ 50.253680][ T3627] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 50.262659][ T3627] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
creat("./bus", 000) = 4
open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 010) = 5
openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
ioctl(6, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0
[ 50.283681][ T3627] BTRFS info (device loop0): enabling ssd optimizations
[ 50.311828][ T27] audit: type=1800 audit(1670735831.612:2): pid=3627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor376" name="bus" dev="loop0" ino=263 res=0 errno=0
fallocate(4, 0, 0, 2622468) = 0
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7
write(7, "4", 1) = 1
[ 50.342175][ T41] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 50.358836][ T3627] FAULT_INJECTION: forcing a failure.
[ 50.358836][ T3627] name failslab, interval 1, probability 0, space 0, times 1
[ 50.371833][ T3627] CPU: 1 PID: 3627 Comm: syz-executor376 Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
[ 50.382273][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 50.392352][ T3627] Call Trace:
[ 50.395643][ T3627]
[ 50.398589][ T3627] dump_stack_lvl+0xd1/0x138
[ 50.403207][ T3627] should_fail_ex.cold+0x5/0xa
[ 50.407984][ T3627] should_failslab+0x9/0x20
[ 50.412502][ T3627] __kmem_cache_alloc_node+0x66/0x3e0
[ 50.417894][ T3627] ? ulist_add_merge.part.0+0x86/0x490
[ 50.423371][ T3627] kmalloc_trace+0x26/0x60
[ 50.427818][ T3627] ulist_add_merge.part.0+0x86/0x490
[ 50.433129][ T3627] ulist_add+0x106/0x160
[ 50.437563][ T3627] set_state_bits.isra.0+0x11f/0x1c0
[ 50.443006][ T3627] __set_extent_bit+0xd09/0x1430
[ 50.447980][ T3627] set_record_extent_bits+0x5e/0x70
[ 50.453203][ T3627] qgroup_reserve_data+0x239/0xbc0
[ 50.458345][ T3627] btrfs_qgroup_reserve_data+0x2f/0xd0
[ 50.463830][ T3627] btrfs_check_data_free_space+0x111/0x280
[ 50.469661][ T3627] btrfs_buffered_write+0x4f1/0x1330
[ 50.475003][ T3627] ? kcov_close+0x20/0x20
[ 50.479535][ T3627] ? btrfs_check_nocow_lock+0x370/0x370
[ 50.485091][ T3627] ? __up_read+0x192/0x720
[ 50.489526][ T3627] ? up_write+0x520/0x520
[ 50.493886][ T3627] btrfs_do_write_iter+0xece/0x1450
[ 50.499105][ T3627] ? btrfs_fdatawrite_range+0x110/0x110
[ 50.504755][ T3627] vfs_write+0x9ed/0xdd0
[ 50.509018][ T3627] ? kernel_write+0x630/0x630
[ 50.513824][ T3627] ? find_held_lock+0x2d/0x110
[ 50.518616][ T3627] ? lock_downgrade+0x6e0/0x6e0
[ 50.523493][ T3627] ? __fget_light+0x20a/0x270
[ 50.528187][ T3627] ksys_write+0x12b/0x250
[ 50.532554][ T3627] ? __ia32_sys_read+0xb0/0xb0
[ 50.537337][ T3627] ? lockdep_hardirqs_on+0x7d/0x100
[ 50.542541][ T3627] ? _raw_spin_unlock_irq+0x2e/0x50
[ 50.547747][ T3627] ? ptrace_notify+0xfe/0x140
[ 50.552447][ T3627] do_syscall_64+0x39/0xb0
[ 50.556880][ T3627] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.562816][ T3627] RIP: 0033:0x7f4094fe1cf9
[ 50.567266][ T3627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.586895][ T3627] RSP: 002b:00007ffe8b0af638 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 50.595408][ T3627] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4094fe1cf9
[ 50.603386][ T3627] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 50.611367][ T3627] RBP: 00007ffe8b0af640 R08: 0000000000000001 R09: 00007f4094fa0034
[ 50.619342][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 50.627312][ T3627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.635307][ T3627]
[ 50.638886][ T3627] ------------[ cut here ]------------
[ 50.644373][ T3627] kernel BUG at fs/btrfs/extent-io-tree.c:381!
[ 50.650632][ T3627] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 50.656716][ T3627] CPU: 1 PID: 3627 Comm: syz-executor376 Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
[ 50.667143][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 50.677314][ T3627] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0
[ 50.683440][ T3627] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 0e cd fb fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f5 cc fb fd <0f> 0b 4c 89 ef e8 fb a6 48 fe e9 e6 fe ff ff 4c 89 ef e8 ee a6 48
[ 50.703172][ T3627] RSP: 0018:ffffc90003baf860 EFLAGS: 00010293
[ 50.709227][ T3627] RAX: 0000000000000000 RBX: ffff8880790a2840 RCX: 0000000000000000
[ 50.717182][ T3627] RDX: ffff888022638000 RSI: ffffffff8384510b RDI: 0000000000000005
[ 50.725142][ T3627] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[ 50.733098][ T3627] R10: 00000000fffffff4 R11: 0000000000000000 R12: 0000000000001000
[ 50.741062][ T3627] R13: ffff8880790a28bc R14: 0000000000000fff R15: 0000000000000000
[ 50.749022][ T3627] FS: 0000555555779300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.757954][ T3627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.764548][ T3627] CR2: 00007fff787f16e8 CR3: 0000000072e1e000 CR4: 0000000000350ee0
[ 50.772519][ T3627] Call Trace:
[ 50.775803][ T3627]
[ 50.778734][ T3627] __set_extent_bit+0xd09/0x1430
[ 50.783685][ T3627] set_record_extent_bits+0x5e/0x70
[ 50.788890][ T3627] qgroup_reserve_data+0x239/0xbc0
[ 50.794015][ T3627] btrfs_qgroup_reserve_data+0x2f/0xd0
[ 50.799489][ T3627] btrfs_check_data_free_space+0x111/0x280
[ 50.805315][ T3627] btrfs_buffered_write+0x4f1/0x1330
[ 50.810611][ T3627] ? kcov_close+0x20/0x20
[ 50.814958][ T3627] ? btrfs_check_nocow_lock+0x370/0x370
[ 50.820512][ T3627] ? __up_read+0x192/0x720
[ 50.824941][ T3627] ? up_write+0x520/0x520
[ 50.829281][ T3627] btrfs_do_write_iter+0xece/0x1450
[ 50.834486][ T3627] ? btrfs_fdatawrite_range+0x110/0x110
[ 50.840035][ T3627] vfs_write+0x9ed/0xdd0
[ 50.844281][ T3627] ? kernel_write+0x630/0x630
[ 50.848961][ T3627] ? find_held_lock+0x2d/0x110
[ 50.853742][ T3627] ? lock_downgrade+0x6e0/0x6e0
[ 50.858778][ T3627] ? __fget_light+0x20a/0x270
[ 50.863465][ T3627] ksys_write+0x12b/0x250
[ 50.867803][ T3627] ? __ia32_sys_read+0xb0/0xb0
[ 50.872583][ T3627] ? lockdep_hardirqs_on+0x7d/0x100
[ 50.877786][ T3627] ? _raw_spin_unlock_irq+0x2e/0x50
[ 50.882993][ T3627] ? ptrace_notify+0xfe/0x140
[ 50.887860][ T3627] do_syscall_64+0x39/0xb0
[ 50.892283][ T3627] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.898182][ T3627] RIP: 0033:0x7f4094fe1cf9
[ 50.902591][ T3627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.922208][ T3627] RSP: 002b:00007ffe8b0af638 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 50.930622][ T3627] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4094fe1cf9
[ 50.938595][ T3627] RDX: 0000000000000049 RSI: 0000000020000180 RDI: 0000000000000005
[ 50.946565][ T3627] RBP: 00007ffe8b0af640 R08: 0000000000000001 R09: 00007f4094fa0034
[ 50.954539][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 50.962508][ T3627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.970486][ T3627]
[ 50.973495][ T3627] Modules linked in:
[ 50.977488][ T3627] ---[ end trace 0000000000000000 ]---
[ 50.983006][ T3627] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0
[ 50.989147][ T3627] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 0e cd fb fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f5 cc fb fd <0f> 0b 4c 89 ef e8 fb a6 48 fe e9 e6 fe ff ff 4c 89 ef e8 ee a6 48
[ 51.008809][ T3627] RSP: 0018:ffffc90003baf860 EFLAGS: 00010293
[ 51.014867][ T3627] RAX: 0000000000000000 RBX: ffff8880790a2840 RCX: 0000000000000000
[ 51.022893][ T3627] RDX: ffff888022638000 RSI: ffffffff8384510b RDI: 0000000000000005
[ 51.030919][ T3627] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[ 51.038924][ T3627] R10: 00000000fffffff4 R11: 0000000000000000 R12: 0000000000001000
[ 51.046915][ T3627] R13: ffff8880790a28bc R14: 0000000000000fff R15: 0000000000000000
[ 51.054941][ T3627] FS: 0000555555779300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 51.063934][ T3627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.070567][ T3627] CR2: 00007fff787f16e8 CR3: 0000000072e1e000 CR4: 0000000000350ee0
[ 51.078595][ T3627] Kernel panic - not syncing: Fatal exception
[ 51.085390][ T3627] Kernel Offset: disabled
[ 51.089724][ T3627] Rebooting in 86400 seconds..