./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor11588210 <...> Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. execve("./syz-executor11588210", ["./syz-executor11588210"], 0x7fffc7bfdfa0 /* 10 vars */) = 0 brk(NULL) = 0x55555721f000 brk(0x55555721fd00) = 0x55555721fd00 arch_prctl(ARCH_SET_FS, 0x55555721f380) = 0 set_tid_address(0x55555721f650) = 5028 set_robust_list(0x55555721f660, 24) = 0 rseq(0x55555721fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor11588210", 4096) = 26 getrandom("\xd5\x06\xec\xa5\xa7\xc0\xa7\x70", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555721fd00 brk(0x555557240d00) = 0x555557240d00 brk(0x555557241000) = 0x555557241000 mprotect(0x7f5b5f56f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5b570ba000 [ 57.672668][ T5028] syz-executor115[5028]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f5b570ba000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 57.831297][ T5028] loop0: detected capacity change from 0 to 32768 [ 57.843363][ T5028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor115 (5028) [ 57.861981][ T5028] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 [ 57.871105][ T5028] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 57.882047][ T5028] BTRFS info (device loop0): doing ref verification [ 57.888715][ T5028] BTRFS info (device loop0): using free space tree [ 57.910318][ T5028] BTRFS info (device loop0): enabling ssd optimizations [ 57.917371][ T5028] BTRFS info (device loop0): auto enabling async discard [ 57.959753][ T5028] BTRFS info (device loop0): balance: start -f -susage=6,vrange=0..9223372036854775809 [ 57.974447][ T5028] ------------[ cut here ]------------ [ 57.980101][ T5028] BTRFS: Transaction aborted (error -28) [ 57.986500][ T5028] WARNING: CPU: 0 PID: 5028 at fs/btrfs/block-group.c:2686 btrfs_create_pending_block_groups+0x10b7/0x1220 [ 57.998306][ T5028] Modules linked in: [ 58.002235][ T5028] CPU: 0 PID: 5028 Comm: syz-executor115 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0 [ 58.012431][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 58.022688][ T5028] RIP: 0010:btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.030127][ T5028] Code: 2d b7 b1 8c ba 85 0a 00 00 44 89 f9 e8 52 2c 15 07 e9 85 f4 ff ff e8 38 53 d8 fd 48 c7 c7 c0 07 4d 8b 44 89 fe e8 a9 75 9e fd <0f> 0b e9 aa fe ff ff e8 1d 53 d8 fd 48 c7 c7 c0 07 4d 8b 48 8b 1c [ 58.049980][ T5028] RSP: 0000:ffffc900038cf6e0 EFLAGS: 00010246 [ 58.056144][ T5028] RAX: 27d563d631214000 RBX: ffff888025078001 RCX: ffff888020e85940 [ 58.064194][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 58.072280][ T5028] RBP: ffffc900038cf978 R08: ffffffff81544192 R09: 1ffff92000719e30 [ 58.080344][ T5028] R10: dffffc0000000000 R11: fffff52000719e31 R12: 0000000000000000 [ 58.088414][ T5028] R13: 1ffff110050bd414 R14: dffffc0000000000 R15: 00000000ffffffe4 [ 58.096444][ T5028] FS: 000055555721f380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.105475][ T5028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.112094][ T5028] CR2: 0000557843906000 CR3: 0000000072e09000 CR4: 00000000003506f0 [ 58.120157][ T5028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.128707][ T5028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.136735][ T5028] Call Trace: [ 58.140045][ T5028] [ 58.142967][ T5028] ? __warn+0x162/0x4a0 [ 58.147189][ T5028] ? btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.153883][ T5028] ? report_bug+0x2b3/0x500 [ 58.158421][ T5028] ? btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.165207][ T5028] ? handle_bug+0x3d/0x70 [ 58.169552][ T5028] ? exc_invalid_op+0x1a/0x50 [ 58.174260][ T5028] ? asm_exc_invalid_op+0x1a/0x20 [ 58.179318][ T5028] ? __warn_printk+0x292/0x360 [ 58.184075][ T5028] ? btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.190815][ T5028] ? btrfs_inc_block_group_ro+0x5a4/0x610 [ 58.196601][ T5028] ? fill_dummy_bgs+0x2a0/0x2a0 [ 58.201469][ T5028] ? btrfs_block_rsv_add+0xb1/0xc0 [ 58.206641][ T5028] ? __lock_acquire+0x7f70/0x7f70 [ 58.211684][ T5028] ? do_raw_spin_lock+0x14d/0x3a0 [ 58.216771][ T5028] ? __mutex_unlock_slowpath+0x21c/0x750 [ 58.222422][ T5028] ? mutex_unlock+0x10/0x10 [ 58.226971][ T5028] ? btrfs_trans_release_metadata+0x153/0x1c0 [ 58.233051][ T5028] __btrfs_end_transaction+0x150/0x630 [ 58.238583][ T5028] btrfs_inc_block_group_ro+0x5ac/0x610 [ 58.244270][ T5028] btrfs_relocate_block_group+0x43b/0xd70 [ 58.249992][ T5028] btrfs_relocate_chunk+0x12c/0x3b0 [ 58.255243][ T5028] __btrfs_balance+0x1b06/0x2690 [ 58.260211][ T5028] ? describe_balance_start_or_resume+0x490/0x490 [ 58.266663][ T5028] ? __wait_for_common+0x640/0x6d0 [ 58.271791][ T5028] ? do_raw_spin_unlock+0x13b/0x8b0 [ 58.277049][ T5028] ? validate_convert_profile+0x7d/0x2c0 [ 58.282697][ T5028] btrfs_balance+0xbd8/0x10d0 [ 58.287443][ T5028] btrfs_ioctl_balance+0x496/0x7c0 [ 58.292744][ T5028] ? btrfs_ioctl+0xb8b/0xd40 [ 58.297388][ T5028] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 58.303815][ T5028] __se_sys_ioctl+0xf8/0x170 [ 58.308446][ T5028] do_syscall_64+0x41/0xc0 [ 58.312875][ T5028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.318822][ T5028] RIP: 0033:0x7f5b5f4f7939 [ 58.323247][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.342923][ T5028] RSP: 002b:00007ffedb984e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.351489][ T5028] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f5b5f4f7939 [ 58.359505][ T5028] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004 [ 58.367506][ T5028] RBP: 00007f5b5f56f610 R08: 0000000000000000 R09: 00007ffedb984ff8 [ 58.375519][ T5028] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001 [ 58.383570][ T5028] R13: 00007ffedb984fe8 R14: 0000000000000001 R15: 0000000000000001 [ 58.391588][ T5028] [ 58.394676][ T5028] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.401943][ T5028] CPU: 0 PID: 5028 Comm: syz-executor115 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0 [ 58.412010][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 58.422051][ T5028] Call Trace: [ 58.425320][ T5028] [ 58.428244][ T5028] dump_stack_lvl+0x1e7/0x2d0 [ 58.432911][ T5028] ? nf_tcp_handle_invalid+0x650/0x650 [ 58.438355][ T5028] ? panic+0x770/0x770 [ 58.442409][ T5028] ? vscnprintf+0x5d/0x80 [ 58.446726][ T5028] panic+0x30f/0x770 [ 58.450604][ T5028] ? __warn+0x171/0x4a0 [ 58.454747][ T5028] ? __memcpy_flushcache+0x2b0/0x2b0 [ 58.460036][ T5028] __warn+0x314/0x4a0 [ 58.464010][ T5028] ? btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.470685][ T5028] report_bug+0x2b3/0x500 [ 58.475014][ T5028] ? btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.481688][ T5028] handle_bug+0x3d/0x70 [ 58.485840][ T5028] exc_invalid_op+0x1a/0x50 [ 58.490335][ T5028] asm_exc_invalid_op+0x1a/0x20 [ 58.495179][ T5028] RIP: 0010:btrfs_create_pending_block_groups+0x10b7/0x1220 [ 58.502462][ T5028] Code: 2d b7 b1 8c ba 85 0a 00 00 44 89 f9 e8 52 2c 15 07 e9 85 f4 ff ff e8 38 53 d8 fd 48 c7 c7 c0 07 4d 8b 44 89 fe e8 a9 75 9e fd <0f> 0b e9 aa fe ff ff e8 1d 53 d8 fd 48 c7 c7 c0 07 4d 8b 48 8b 1c [ 58.522142][ T5028] RSP: 0000:ffffc900038cf6e0 EFLAGS: 00010246 [ 58.528210][ T5028] RAX: 27d563d631214000 RBX: ffff888025078001 RCX: ffff888020e85940 [ 58.536171][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 58.544143][ T5028] RBP: ffffc900038cf978 R08: ffffffff81544192 R09: 1ffff92000719e30 [ 58.552106][ T5028] R10: dffffc0000000000 R11: fffff52000719e31 R12: 0000000000000000 [ 58.560186][ T5028] R13: 1ffff110050bd414 R14: dffffc0000000000 R15: 00000000ffffffe4 [ 58.568156][ T5028] ? __warn_printk+0x292/0x360 [ 58.572935][ T5028] ? btrfs_inc_block_group_ro+0x5a4/0x610 [ 58.578656][ T5028] ? fill_dummy_bgs+0x2a0/0x2a0 [ 58.583507][ T5028] ? btrfs_block_rsv_add+0xb1/0xc0 [ 58.588616][ T5028] ? __lock_acquire+0x7f70/0x7f70 [ 58.593629][ T5028] ? do_raw_spin_lock+0x14d/0x3a0 [ 58.598649][ T5028] ? __mutex_unlock_slowpath+0x21c/0x750 [ 58.604285][ T5028] ? mutex_unlock+0x10/0x10 [ 58.608781][ T5028] ? btrfs_trans_release_metadata+0x153/0x1c0 [ 58.614930][ T5028] __btrfs_end_transaction+0x150/0x630 [ 58.620384][ T5028] btrfs_inc_block_group_ro+0x5ac/0x610 [ 58.625929][ T5028] btrfs_relocate_block_group+0x43b/0xd70 [ 58.631653][ T5028] btrfs_relocate_chunk+0x12c/0x3b0 [ 58.636844][ T5028] __btrfs_balance+0x1b06/0x2690 [ 58.641805][ T5028] ? describe_balance_start_or_resume+0x490/0x490 [ 58.648214][ T5028] ? __wait_for_common+0x640/0x6d0 [ 58.653324][ T5028] ? do_raw_spin_unlock+0x13b/0x8b0 [ 58.658515][ T5028] ? validate_convert_profile+0x7d/0x2c0 [ 58.664150][ T5028] btrfs_balance+0xbd8/0x10d0 [ 58.668830][ T5028] btrfs_ioctl_balance+0x496/0x7c0 [ 58.673938][ T5028] ? btrfs_ioctl+0xb8b/0xd40 [ 58.678521][ T5028] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 58.684934][ T5028] __se_sys_ioctl+0xf8/0x170 [ 58.689520][ T5028] do_syscall_64+0x41/0xc0 [ 58.693936][ T5028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.699824][ T5028] RIP: 0033:0x7f5b5f4f7939 [ 58.704231][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.723830][ T5028] RSP: 002b:00007ffedb984e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.732236][ T5028] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f5b5f4f7939 [ 58.740197][ T5028] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004 [ 58.748181][ T5028] RBP: 00007f5b5f56f610 R08: 0000000000000000 R09: 00007ffedb984ff8 [ 58.756184][ T5028] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001 [ 58.764156][ T5028] R13: 00007ffedb984fe8 R14: 0000000000000001 R15: 0000000000000001 [ 58.772224][ T5028] [ 58.775423][ T5028] Kernel Offset: disabled [ 58.779814][ T5028] Rebooting in 86400 seconds..