./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor521384777 <...> DUID 00:04:f8:32:f0:25:6b:f7:7b:d6:d2:5e:34:7f:1d:07:e3:4e forked to background, child pid 3212 [ 30.401752][ T3213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.413611][ T3213] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.53' (ECDSA) to the list of known hosts. execve("./syz-executor521384777", ["./syz-executor521384777"], 0x7ffd4607cdb0 /* 10 vars */) = 0 brk(NULL) = 0x555556486000 brk(0x555556486c40) = 0x555556486c40 arch_prctl(ARCH_SET_FS, 0x555556486300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor521384777", 4096) = 27 brk(0x5555564a7c40) = 0x5555564a7c40 brk(0x5555564a8000) = 0x5555564a8000 mprotect(0x7ff27eb6e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 16777312) = 0 mmap(NULL, 16777312, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7ff27daaf000 munmap(0x7ff27daaf000, 16777312) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 64.678078][ T3634] loop0: detected capacity change from 0 to 32768 [ 64.689308][ T3634] BTRFS: device fsid b193dc14-2683-4cd3-8a84-b5f6b1606026 devid 1 transid 8 /dev/loop0 scanned by syz-executor521 (3634) [ 64.710690][ T3634] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 64.719522][ T3634] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", MS_NOATIME|0x200, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 open("./file0", O_RDONLY) = 3 [ 64.739267][ T3634] BTRFS info (device loop0): enabling ssd optimizations [ 64.776623][ T3634] BTRFS info (device loop0): balance: start -d -m [ 64.784531][ T3634] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 64.797807][ T102] ------------[ cut here ]------------ [ 64.803579][ T102] WARNING: CPU: 0 PID: 102 at fs/btrfs/block-group.c:3535 do_chunk_alloc+0x653/0x6c0 [ 64.813633][ T102] Modules linked in: [ 64.817979][ T102] CPU: 1 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.0-rc6-syzkaller #0 [ 64.826655][ T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 64.837040][ T102] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 64.844634][ T102] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 64.850580][ T102] Code: 3d 8b 44 89 fe 31 c0 e8 cb a1 a0 fd 0f 0b b3 01 e9 fd fe ff ff e8 bd 03 d9 fd 48 c7 c7 a0 a9 3d 8b 89 de 31 c0 e8 ad a1 a0 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 9e 03 d9 fd 48 c7 c7 a0 a9 3d 8b [ 64.870587][ T102] RSP: 0018:ffffc900015c7870 EFLAGS: 00010246 [ 64.877018][ T102] RAX: 3ba9b5084e06eb00 RBX: ffffffffffffffe4 RCX: ffff88801981ba80 [ 64.885023][ T102] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 64.893455][ T102] RBP: ffff88801e4dc001 R08: ffffffff816e568d R09: ffffed1017304f1b [ 64.901852][ T102] R10: ffffed1017304f1b R11: 1ffff11017304f1a R12: ffff8880733f02a0 [ 64.910186][ T102] R13: ffff888147573000 R14: 1ffff1100e67e05e R15: 00000000ffffffe4 [ 64.918503][ T102] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 64.927754][ T102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.934376][ T102] CR2: 0000556f9b0c86a8 CR3: 0000000028162000 CR4: 00000000003506e0 [ 64.942835][ T102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.951176][ T102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.959386][ T102] Call Trace: [ 64.962664][ T102] [ 64.965588][ T102] btrfs_chunk_alloc+0x6a4/0x900 [ 64.970668][ T102] flush_space+0x9d8/0xbc0 [ 64.975112][ T102] ? trace_lock_release+0x95/0x220 [ 64.980560][ T102] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 64.987417][ T102] ? trace_update_bytes_may_use+0x310/0x310 [ 64.993318][ T102] ? do_raw_spin_unlock+0x134/0x8a0 [ 64.998650][ T102] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 65.005110][ T102] process_one_work+0x877/0xdb0 [ 65.010083][ T102] ? worker_detach_from_pool+0x260/0x260 [ 65.015736][ T102] ? _raw_spin_lock_irq+0xba/0xf0 [ 65.020870][ T102] ? _raw_spin_lock_irqsave+0x100/0x100 [ 65.026520][ T102] worker_thread+0xb14/0x1330 [ 65.031258][ T102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 65.037250][ T102] kthread+0x266/0x300 [ 65.041340][ T102] ? rcu_lock_release+0x20/0x20 [ 65.046257][ T102] ? kthread_blkcg+0xd0/0xd0 [ 65.050862][ T102] ret_from_fork+0x1f/0x30 [ 65.055283][ T102] [ 65.058368][ T102] Kernel panic - not syncing: panic_on_warn set ... [ 65.064961][ T102] CPU: 0 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.0-rc6-syzkaller #0 [ 65.073272][ T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.083317][ T102] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 65.090855][ T102] Call Trace: [ 65.094119][ T102] [ 65.097037][ T102] dump_stack_lvl+0x1b1/0x28e [ 65.101709][ T102] ? nf_tcp_handle_invalid+0x62e/0x62e [ 65.107157][ T102] ? panic+0x710/0x710 [ 65.111222][ T102] ? vscnprintf+0x59/0x80 [ 65.115540][ T102] ? do_chunk_alloc+0x590/0x6c0 [ 65.120374][ T102] panic+0x2d6/0x710 [ 65.124263][ T102] ? __warn+0x131/0x220 [ 65.128410][ T102] ? memcpy_page_flushcache+0xfc/0xfc [ 65.133776][ T102] ? ret_from_fork+0x1f/0x30 [ 65.138358][ T102] ? do_chunk_alloc+0x653/0x6c0 [ 65.143194][ T102] __warn+0x1fa/0x220 [ 65.147169][ T102] ? do_chunk_alloc+0x653/0x6c0 [ 65.152019][ T102] report_bug+0x1b3/0x2d0 [ 65.156355][ T102] handle_bug+0x3d/0x70 [ 65.160516][ T102] exc_invalid_op+0x16/0x40 [ 65.165016][ T102] asm_exc_invalid_op+0x16/0x20 [ 65.169872][ T102] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 65.175326][ T102] Code: 3d 8b 44 89 fe 31 c0 e8 cb a1 a0 fd 0f 0b b3 01 e9 fd fe ff ff e8 bd 03 d9 fd 48 c7 c7 a0 a9 3d 8b 89 de 31 c0 e8 ad a1 a0 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 9e 03 d9 fd 48 c7 c7 a0 a9 3d 8b [ 65.194927][ T102] RSP: 0018:ffffc900015c7870 EFLAGS: 00010246 [ 65.200993][ T102] RAX: 3ba9b5084e06eb00 RBX: ffffffffffffffe4 RCX: ffff88801981ba80 [ 65.208965][ T102] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 65.216934][ T102] RBP: ffff88801e4dc001 R08: ffffffff816e568d R09: ffffed1017304f1b [ 65.224904][ T102] R10: ffffed1017304f1b R11: 1ffff11017304f1a R12: ffff8880733f02a0 [ 65.232872][ T102] R13: ffff888147573000 R14: 1ffff1100e67e05e R15: 00000000ffffffe4 [ 65.240855][ T102] ? __wake_up_klogd+0xcd/0x100 [ 65.245722][ T102] btrfs_chunk_alloc+0x6a4/0x900 [ 65.250677][ T102] flush_space+0x9d8/0xbc0 [ 65.255119][ T102] ? trace_lock_release+0x95/0x220 [ 65.260237][ T102] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 65.266827][ T102] ? trace_update_bytes_may_use+0x310/0x310 [ 65.272728][ T102] ? do_raw_spin_unlock+0x134/0x8a0 [ 65.277933][ T102] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 65.284410][ T102] process_one_work+0x877/0xdb0 [ 65.289294][ T102] ? worker_detach_from_pool+0x260/0x260 [ 65.294946][ T102] ? _raw_spin_lock_irq+0xba/0xf0 [ 65.299979][ T102] ? _raw_spin_lock_irqsave+0x100/0x100 [ 65.305533][ T102] worker_thread+0xb14/0x1330 [ 65.310224][ T102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 65.316128][ T102] kthread+0x266/0x300 [ 65.320194][ T102] ? rcu_lock_release+0x20/0x20 [ 65.325043][ T102] ? kthread_blkcg+0xd0/0xd0 [ 65.329637][ T102] ret_from_fork+0x1f/0x30 [ 65.334079][ T102] [ 65.337250][ T102] Kernel Offset: disabled [ 65.341650][ T102] Rebooting in 86400 seconds..