./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor898957722 <...> DUID 00:04:f8:b5:8a:47:ae:09:95:3a:43:2d:d7:42:86:31:94:89 forked to background, child pid 3213 [ 29.342643][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.359634][ T3214] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. execve("./syz-executor898957722", ["./syz-executor898957722"], 0x7ffd0966e9f0 /* 10 vars */) = 0 brk(NULL) = 0x55555673a000 brk(0x55555673ac40) = 0x55555673ac40 arch_prctl(ARCH_SET_FS, 0x55555673a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor898957722", 4096) = 27 brk(0x55555675bc40) = 0x55555675bc40 brk(0x55555675c000) = 0x55555675c000 mprotect(0x7faa185b5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 16777216) = 0 mmap(NULL, 16777216, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7faa174f7000 munmap(0x7faa174f7000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 52.136704][ T3642] loop0: detected capacity change from 0 to 32768 [ 52.147994][ T3642] BTRFS: device fsid b193dc14-2683-4cd3-8a84-b5f6b1606026 devid 1 transid 8 /dev/loop0 scanned by syz-executor898 (3642) [ 52.169170][ T3642] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 52.177954][ T3642] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 open("./file0", O_RDONLY) = 3 [ 52.196172][ T3642] BTRFS info (device loop0): enabling ssd optimizations [ 52.259502][ T3642] BTRFS info (device loop0): balance: start -d -m [ 52.267994][ T3642] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 52.282694][ T102] ------------[ cut here ]------------ [ 52.288956][ T102] WARNING: CPU: 1 PID: 102 at fs/btrfs/block-group.c:3535 do_chunk_alloc+0x653/0x6c0 [ 52.298583][ T102] Modules linked in: [ 52.302497][ T102] CPU: 1 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.0-rc6-syzkaller #0 [ 52.310908][ T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.321066][ T102] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 52.328701][ T102] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 52.334180][ T102] Code: 3d 8b 44 89 fe 31 c0 e8 cb a1 a0 fd 0f 0b b3 01 e9 fd fe ff ff e8 bd 03 d9 fd 48 c7 c7 a0 a9 3d 8b 89 de 31 c0 e8 ad a1 a0 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 9e 03 d9 fd 48 c7 c7 a0 a9 3d 8b [ 52.353903][ T102] RSP: 0018:ffffc900015e7870 EFLAGS: 00010246 [ 52.360066][ T102] RAX: f651373e45ebd500 RBX: ffffffffffffffe4 RCX: ffff888019b20000 [ 52.368137][ T102] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 52.376124][ T102] RBP: ffff888078404001 R08: ffffffff816e568d R09: ffffed1017324f1b [ 52.384146][ T102] R10: ffffed1017324f1b R11: 1ffff11017324f1a R12: ffff8880708d92a0 [ 52.392156][ T102] R13: ffff888018f88000 R14: 1ffff1100e11b25e R15: 00000000ffffffe4 [ 52.400386][ T102] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 52.409380][ T102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.415966][ T102] CR2: 00007fd404242251 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 52.423984][ T102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.431980][ T102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.439977][ T102] Call Trace: [ 52.443255][ T102] [ 52.446177][ T102] btrfs_chunk_alloc+0x6a4/0x900 [ 52.451392][ T102] flush_space+0x9d8/0xbc0 [ 52.455815][ T102] ? trace_lock_release+0x95/0x220 [ 52.461048][ T102] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 52.467694][ T102] ? trace_update_bytes_may_use+0x310/0x310 [ 52.473599][ T102] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.478841][ T102] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 52.485287][ T102] process_one_work+0x877/0xdb0 [ 52.490197][ T102] ? worker_detach_from_pool+0x260/0x260 [ 52.495840][ T102] ? _raw_spin_lock_irq+0xba/0xf0 [ 52.500895][ T102] ? _raw_spin_lock_irqsave+0x100/0x100 [ 52.506452][ T102] worker_thread+0xb14/0x1330 [ 52.511357][ T102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 52.517319][ T102] kthread+0x266/0x300 [ 52.521414][ T102] ? rcu_lock_release+0x20/0x20 [ 52.526267][ T102] ? kthread_blkcg+0xd0/0xd0 [ 52.530908][ T102] ret_from_fork+0x1f/0x30 [ 52.535343][ T102] [ 52.538392][ T102] Kernel panic - not syncing: panic_on_warn set ... [ 52.544969][ T102] CPU: 1 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.0-rc6-syzkaller #0 [ 52.553272][ T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.563307][ T102] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 52.570838][ T102] Call Trace: [ 52.574099][ T102] [ 52.577013][ T102] dump_stack_lvl+0x1b1/0x28e [ 52.581679][ T102] ? nf_tcp_handle_invalid+0x62e/0x62e [ 52.587120][ T102] ? panic+0x710/0x710 [ 52.591176][ T102] ? vscnprintf+0x59/0x80 [ 52.595492][ T102] ? do_chunk_alloc+0x590/0x6c0 [ 52.600328][ T102] panic+0x2d6/0x710 [ 52.604212][ T102] ? __warn+0x131/0x220 [ 52.608349][ T102] ? memcpy_page_flushcache+0xfc/0xfc [ 52.613713][ T102] ? ret_from_fork+0x1f/0x30 [ 52.618287][ T102] ? do_chunk_alloc+0x653/0x6c0 [ 52.623118][ T102] __warn+0x1fa/0x220 [ 52.627094][ T102] ? do_chunk_alloc+0x653/0x6c0 [ 52.631927][ T102] report_bug+0x1b3/0x2d0 [ 52.636241][ T102] handle_bug+0x3d/0x70 [ 52.640379][ T102] exc_invalid_op+0x16/0x40 [ 52.644862][ T102] asm_exc_invalid_op+0x16/0x20 [ 52.649701][ T102] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 52.655152][ T102] Code: 3d 8b 44 89 fe 31 c0 e8 cb a1 a0 fd 0f 0b b3 01 e9 fd fe ff ff e8 bd 03 d9 fd 48 c7 c7 a0 a9 3d 8b 89 de 31 c0 e8 ad a1 a0 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 9e 03 d9 fd 48 c7 c7 a0 a9 3d 8b [ 52.674749][ T102] RSP: 0018:ffffc900015e7870 EFLAGS: 00010246 [ 52.680807][ T102] RAX: f651373e45ebd500 RBX: ffffffffffffffe4 RCX: ffff888019b20000 [ 52.688772][ T102] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 52.696734][ T102] RBP: ffff888078404001 R08: ffffffff816e568d R09: ffffed1017324f1b [ 52.704698][ T102] R10: ffffed1017324f1b R11: 1ffff11017324f1a R12: ffff8880708d92a0 [ 52.712661][ T102] R13: ffff888018f88000 R14: 1ffff1100e11b25e R15: 00000000ffffffe4 [ 52.720640][ T102] ? __wake_up_klogd+0xcd/0x100 [ 52.725502][ T102] btrfs_chunk_alloc+0x6a4/0x900 [ 52.730451][ T102] flush_space+0x9d8/0xbc0 [ 52.734864][ T102] ? trace_lock_release+0x95/0x220 [ 52.739979][ T102] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 52.746564][ T102] ? trace_update_bytes_may_use+0x310/0x310 [ 52.752459][ T102] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.757673][ T102] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 52.764120][ T102] process_one_work+0x877/0xdb0 [ 52.768987][ T102] ? worker_detach_from_pool+0x260/0x260 [ 52.774620][ T102] ? _raw_spin_lock_irq+0xba/0xf0 [ 52.779646][ T102] ? _raw_spin_lock_irqsave+0x100/0x100 [ 52.785194][ T102] worker_thread+0xb14/0x1330 [ 52.789878][ T102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 52.795780][ T102] kthread+0x266/0x300 [ 52.799844][ T102] ? rcu_lock_release+0x20/0x20 [ 52.804689][ T102] ? kthread_blkcg+0xd0/0xd0 [ 52.809274][ T102] ret_from_fork+0x1f/0x30 [ 52.813704][ T102] [ 52.816917][ T102] Kernel Offset: disabled [ 52.821308][ T102] Rebooting in 86400 seconds..