./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor832558480 <...> Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. execve("./syz-executor832558480", ["./syz-executor832558480"], 0x7ffcf63b2b90 /* 10 vars */) = 0 brk(NULL) = 0x555556d91000 brk(0x555556d91c40) = 0x555556d91c40 arch_prctl(ARCH_SET_FS, 0x555556d91300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor832558480", 4096) = 27 brk(0x555556db2c40) = 0x555556db2c40 brk(0x555556db3000) = 0x555556db3000 mprotect(0x7f358cc01000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3584743000 [ 55.989433][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor832' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f3584743000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 [ 56.122197][ T4991] loop0: detected capacity change from 0 to 32768 [ 56.134928][ T4991] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor832 (4991) [ 56.154173][ T4991] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 56.163074][ T4991] BTRFS info (device loop0): doing ref verification mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 [ 56.169755][ T4991] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 56.181029][ T4991] BTRFS info (device loop0): force zlib compression, level 3 [ 56.188767][ T4991] BTRFS info (device loop0): allowing degraded mounts [ 56.195808][ T4991] BTRFS info (device loop0): using free space tree [ 56.215355][ T4991] BTRFS info (device loop0): auto enabling async discard [ 56.255745][ T4991] BTRFS info (device loop0): balance: start -susage=7,stripes=0..23665 [ 56.268236][ T4991] ------------[ cut here ]------------ [ 56.273997][ T4991] BTRFS: Transaction aborted (error -28) [ 56.292586][ T4991] WARNING: CPU: 0 PID: 4991 at fs/btrfs/block-group.c:2610 btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.304413][ T4991] Modules linked in: [ 56.308344][ T4991] CPU: 0 PID: 4991 Comm: syz-executor832 Not tainted 6.4.0-rc5-syzkaller-00313-g4c605260bc60 #0 [ 56.318989][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 56.329263][ T4991] RIP: 0010:btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.336706][ T4991] Code: c0 0f 2c 8b ba 39 0a 00 00 44 89 f9 e8 64 a7 01 07 e9 26 f5 ff ff e8 aa 4d df fd 48 c7 c7 40 0f 2c 8b 44 89 fe e8 ab cc a6 fd <0f> 0b e9 d5 fe ff ff e8 8f 4d df fd 48 c7 c7 40 0f 2c 8b 44 89 e6 [ 56.356404][ T4991] RSP: 0018:ffffc9000375f6e0 EFLAGS: 00010246 [ 56.362674][ T4991] RAX: 540ad69eb7a1a900 RBX: ffff88807effc001 RCX: ffff888013f81dc0 [ 56.370681][ T4991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 56.378885][ T4991] RBP: ffffc9000375f978 R08: ffffffff81530142 R09: fffff520006ebe55 [ 56.386954][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 56.395036][ T4991] R13: ffff88807d6fa1c0 R14: dffffc0000000000 R15: 00000000ffffffe4 [ 56.403085][ T4991] FS: 0000555556d91300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.412181][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.418869][ T4991] CR2: 00007ffcf63b0c30 CR3: 000000002ca2b000 CR4: 00000000003506f0 [ 56.427020][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.435113][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.443155][ T4991] Call Trace: [ 56.446462][ T4991] [ 56.449411][ T4991] ? __warn+0x162/0x4a0 [ 56.453644][ T4991] ? btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.460364][ T4991] ? report_bug+0x2b3/0x500 [ 56.464989][ T4991] ? btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.471780][ T4991] ? handle_bug+0x3d/0x70 [ 56.476187][ T4991] ? exc_invalid_op+0x1a/0x50 [ 56.480972][ T4991] ? asm_exc_invalid_op+0x1a/0x20 [ 56.486073][ T4991] ? __warn_printk+0x292/0x360 [ 56.490891][ T4991] ? btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.497699][ T4991] ? __lock_acquire+0x1316/0x2070 [ 56.502800][ T4991] ? btrfs_inc_block_group_ro+0x5a4/0x610 [ 56.508517][ T4991] ? fill_dummy_bgs+0x2a0/0x2a0 [ 56.513505][ T4991] ? btrfs_block_rsv_add+0xb1/0xc0 [ 56.518640][ T4991] ? __lock_acquire+0x2070/0x2070 [ 56.523722][ T4991] ? do_raw_spin_lock+0x14d/0x3a0 [ 56.529036][ T4991] ? __mutex_unlock_slowpath+0x21c/0x750 [ 56.534900][ T4991] ? mutex_unlock+0x10/0x10 [ 56.539505][ T4991] ? btrfs_trans_release_metadata+0x153/0x1b0 [ 56.545806][ T4991] __btrfs_end_transaction+0x150/0x640 [ 56.551374][ T4991] btrfs_inc_block_group_ro+0x5ac/0x610 [ 56.557263][ T4991] btrfs_relocate_block_group+0x43b/0xd70 [ 56.563034][ T4991] btrfs_relocate_chunk+0x12c/0x3b0 [ 56.568408][ T4991] __btrfs_balance+0x1b06/0x2690 [ 56.573421][ T4991] ? describe_balance_start_or_resume+0x490/0x490 [ 56.580023][ T4991] ? do_wait_for_common+0x590/0x5f0 [ 56.585457][ T4991] ? do_raw_spin_unlock+0x13b/0x8b0 [ 56.590675][ T4991] ? validate_convert_profile+0x7d/0x2c0 [ 56.596373][ T4991] btrfs_balance+0xbdb/0x1120 [ 56.601076][ T4991] btrfs_ioctl_balance+0x493/0x7c0 [ 56.606421][ T4991] ? btrfs_ioctl+0xb88/0xd40 [ 56.611038][ T4991] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 56.617550][ T4991] __se_sys_ioctl+0xf1/0x160 [ 56.622204][ T4991] do_syscall_64+0x41/0xc0 [ 56.626650][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.632617][ T4991] RIP: 0033:0x7f358cb8fbc9 [ 56.637075][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.656742][ T4991] RSP: 002b:00007fff03c17138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.665233][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f358cb8fbc9 [ 56.673418][ T4991] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 56.682061][ T4991] RBP: 00007f358cb4f460 R08: 0000000000000000 R09: 0000000000000000 [ 56.690139][ T4991] R10: 00000000000050e9 R11: 0000000000000246 R12: 00007f358cb4f4f0 [ 56.698237][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.706454][ T4991] [ 56.709484][ T4991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.716765][ T4991] CPU: 0 PID: 4991 Comm: syz-executor832 Not tainted 6.4.0-rc5-syzkaller-00313-g4c605260bc60 #0 [ 56.727164][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 56.737302][ T4991] Call Trace: [ 56.740574][ T4991] [ 56.743493][ T4991] dump_stack_lvl+0x1e7/0x2d0 [ 56.748165][ T4991] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.753696][ T4991] ? panic+0x770/0x770 [ 56.757758][ T4991] ? vscnprintf+0x5d/0x80 [ 56.762090][ T4991] panic+0x30f/0x770 [ 56.765988][ T4991] ? __warn+0x171/0x4a0 [ 56.770143][ T4991] ? __memcpy_flushcache+0x2b0/0x2b0 [ 56.775439][ T4991] __warn+0x314/0x4a0 [ 56.779534][ T4991] ? btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.786234][ T4991] report_bug+0x2b3/0x500 [ 56.790578][ T4991] ? btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.797259][ T4991] handle_bug+0x3d/0x70 [ 56.801412][ T4991] exc_invalid_op+0x1a/0x50 [ 56.805916][ T4991] asm_exc_invalid_op+0x1a/0x20 [ 56.810768][ T4991] RIP: 0010:btrfs_create_pending_block_groups+0x1015/0x1260 [ 56.818055][ T4991] Code: c0 0f 2c 8b ba 39 0a 00 00 44 89 f9 e8 64 a7 01 07 e9 26 f5 ff ff e8 aa 4d df fd 48 c7 c7 40 0f 2c 8b 44 89 fe e8 ab cc a6 fd <0f> 0b e9 d5 fe ff ff e8 8f 4d df fd 48 c7 c7 40 0f 2c 8b 44 89 e6 [ 56.837660][ T4991] RSP: 0018:ffffc9000375f6e0 EFLAGS: 00010246 [ 56.843725][ T4991] RAX: 540ad69eb7a1a900 RBX: ffff88807effc001 RCX: ffff888013f81dc0 [ 56.851697][ T4991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 56.859753][ T4991] RBP: ffffc9000375f978 R08: ffffffff81530142 R09: fffff520006ebe55 [ 56.867896][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 56.875866][ T4991] R13: ffff88807d6fa1c0 R14: dffffc0000000000 R15: 00000000ffffffe4 [ 56.883855][ T4991] ? __warn_printk+0x292/0x360 [ 56.888745][ T4991] ? __lock_acquire+0x1316/0x2070 [ 56.893797][ T4991] ? btrfs_inc_block_group_ro+0x5a4/0x610 [ 56.899515][ T4991] ? fill_dummy_bgs+0x2a0/0x2a0 [ 56.904371][ T4991] ? btrfs_block_rsv_add+0xb1/0xc0 [ 56.909487][ T4991] ? __lock_acquire+0x2070/0x2070 [ 56.914950][ T4991] ? do_raw_spin_lock+0x14d/0x3a0 [ 56.919982][ T4991] ? __mutex_unlock_slowpath+0x21c/0x750 [ 56.925630][ T4991] ? mutex_unlock+0x10/0x10 [ 56.930143][ T4991] ? btrfs_trans_release_metadata+0x153/0x1b0 [ 56.937301][ T4991] __btrfs_end_transaction+0x150/0x640 [ 56.942801][ T4991] btrfs_inc_block_group_ro+0x5ac/0x610 [ 56.948387][ T4991] btrfs_relocate_block_group+0x43b/0xd70 [ 56.954215][ T4991] btrfs_relocate_chunk+0x12c/0x3b0 [ 56.959440][ T4991] __btrfs_balance+0x1b06/0x2690 [ 56.964436][ T4991] ? describe_balance_start_or_resume+0x490/0x490 [ 56.970967][ T4991] ? do_wait_for_common+0x590/0x5f0 [ 56.976238][ T4991] ? do_raw_spin_unlock+0x13b/0x8b0 [ 56.981713][ T4991] ? validate_convert_profile+0x7d/0x2c0 [ 56.987357][ T4991] btrfs_balance+0xbdb/0x1120 [ 56.992055][ T4991] btrfs_ioctl_balance+0x493/0x7c0 [ 56.997170][ T4991] ? btrfs_ioctl+0xb88/0xd40 [ 57.001761][ T4991] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 57.008217][ T4991] __se_sys_ioctl+0xf1/0x160 [ 57.012814][ T4991] do_syscall_64+0x41/0xc0 [ 57.017234][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.023126][ T4991] RIP: 0033:0x7f358cb8fbc9 [ 57.027538][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.047234][ T4991] RSP: 002b:00007fff03c17138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.055745][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f358cb8fbc9 [ 57.063715][ T4991] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 57.072640][ T4991] RBP: 00007f358cb4f460 R08: 0000000000000000 R09: 0000000000000000 [ 57.080615][ T4991] R10: 00000000000050e9 R11: 0000000000000246 R12: 00007f358cb4f4f0 [ 57.088757][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.096741][ T4991] [ 57.100035][ T4991] Kernel Offset: disabled [ 57.104445][ T4991] Rebooting in 86400 seconds..