./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2076322833 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 4644 [ 31.112534][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.122942][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.50' (ECDSA) to the list of known hosts. execve("./syz-executor2076322833", ["./syz-executor2076322833"], 0x7ffd886ec9f0 /* 10 vars */) = 0 brk(NULL) = 0x555556947000 brk(0x555556947c40) = 0x555556947c40 arch_prctl(ARCH_SET_FS, 0x555556947300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2076322833", 4096) = 28 brk(0x555556968c40) = 0x555556968c40 brk(0x555556969000) = 0x555556969000 mprotect(0x7f4b84787000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4b7c2c9000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f4b7c2c9000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 syzkaller login: [ 50.708340][ T5065] loop0: detected capacity change from 0 to 32768 [ 50.719709][ T5065] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor207 (5065) [ 50.739448][ T5065] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 50.748275][ T5065] BTRFS info (device loop0): doing ref verification mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 [ 50.754887][ T5065] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 50.765922][ T5065] BTRFS info (device loop0): force zlib compression, level 3 [ 50.773418][ T5065] BTRFS info (device loop0): allowing degraded mounts [ 50.780280][ T5065] BTRFS info (device loop0): using free space tree [ 50.798987][ T5065] BTRFS info (device loop0): auto enabling async discard [ 50.841718][ T5065] BTRFS info (device loop0): balance: start -susage=7,stripes=0..23665 [ 50.852952][ T5065] ------------[ cut here ]------------ [ 50.858946][ T5065] BTRFS: Transaction aborted (error -28) [ 50.864860][ T5065] WARNING: CPU: 0 PID: 5065 at fs/btrfs/block-group.c:2481 btrfs_create_pending_block_groups+0x115b/0x12e0 [ 50.876715][ T5065] Modules linked in: [ 50.880648][ T5065] CPU: 0 PID: 5065 Comm: syz-executor207 Not tainted 6.1.0-syzkaller-13822-g6feb57c2fd7c #0 [ 50.891138][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 50.901706][ T5065] RIP: 0010:btrfs_create_pending_block_groups+0x115b/0x12e0 [ 50.909520][ T5065] Code: 09 00 00 44 89 f1 e8 b4 82 fd 06 4c 8b 74 24 30 e9 59 f4 ff ff e8 45 69 da fd 48 c7 c7 c0 f4 3b 8b 89 de 31 c0 e8 75 59 a1 fd <0f> 0b e9 25 fe ff ff e8 29 69 da fd 48 c7 c7 c0 f4 3b 8b 44 89 fe [ 50.929650][ T5065] RSP: 0018:ffffc90003bdf6c0 EFLAGS: 00010246 [ 50.935765][ T5065] RAX: ef6a712a0c881500 RBX: 00000000ffffffe4 RCX: ffff8880296457c0 [ 50.944112][ T5065] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 50.952564][ T5065] RBP: ffffc90003bdf970 R08: ffffffff816f2c9d R09: ffffed1017304f5b [ 50.960861][ T5065] R10: ffffed1017304f5b R11: 1ffff11017304f5a R12: ffff88802085d058 [ 50.969165][ T5065] R13: ffff888072d660f8 R14: ffff8880219b4001 R15: dffffc0000000000 [ 50.977336][ T5065] FS: 0000555556947300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 50.986261][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.992966][ T5065] CR2: 00007ffd886eafe8 CR3: 000000007aed6000 CR4: 00000000003506f0 [ 51.001508][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.009584][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.017687][ T5065] Call Trace: [ 51.020962][ T5065] [ 51.023903][ T5065] ? fill_dummy_bgs+0x2a0/0x2a0 [ 51.028856][ T5065] ? btrfs_block_rsv_add+0xad/0xc0 [ 51.033999][ T5065] ? do_raw_spin_lock+0x147/0x3a0 [ 51.039103][ T5065] ? mutex_unlock+0x10/0x10 [ 51.043616][ T5065] ? btrfs_trans_release_metadata+0x158/0x1c0 [ 51.049754][ T5065] __btrfs_end_transaction+0x146/0x610 [ 51.055231][ T5065] btrfs_inc_block_group_ro+0x540/0x5b0 [ 51.060822][ T5065] btrfs_relocate_block_group+0x420/0xd90 [ 51.066631][ T5065] btrfs_relocate_chunk+0x125/0x350 [ 51.071820][ T5065] __btrfs_balance+0x1d5f/0x2930 [ 51.076848][ T5065] ? describe_balance_start_or_resume+0x490/0x490 [ 51.083269][ T5065] ? do_wait_for_common+0x4c0/0x560 [ 51.088539][ T5065] btrfs_balance+0xc00/0x1150 [ 51.093236][ T5065] btrfs_ioctl_balance+0x478/0x740 [ 51.098395][ T5065] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 51.104813][ T5065] __se_sys_ioctl+0xfb/0x170 [ 51.109457][ T5065] do_syscall_64+0x3d/0xb0 [ 51.113884][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.119810][ T5065] RIP: 0033:0x7f4b84715ba9 [ 51.124229][ T5065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.143893][ T5065] RSP: 002b:00007ffda89b2dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.152452][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b84715ba9 [ 51.160833][ T5065] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 51.168935][ T5065] RBP: 00007f4b846d5440 R08: 0000000000000000 R09: 0000000000000000 [ 51.177030][ T5065] R10: 00000000000050e9 R11: 0000000000000246 R12: 00007f4b846d54d0 [ 51.184994][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.193083][ T5065] [ 51.196108][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.203368][ T5065] CPU: 1 PID: 5065 Comm: syz-executor207 Not tainted 6.1.0-syzkaller-13822-g6feb57c2fd7c #0 [ 51.213412][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.223454][ T5065] Call Trace: [ 51.226724][ T5065] [ 51.229642][ T5065] dump_stack_lvl+0x1b1/0x290 [ 51.234315][ T5065] ? nf_tcp_handle_invalid+0x630/0x630 [ 51.239765][ T5065] ? panic+0x710/0x710 [ 51.243823][ T5065] ? vscnprintf+0x59/0x80 [ 51.248136][ T5065] ? btrfs_create_pending_block_groups+0x10a0/0x12e0 [ 51.254802][ T5065] panic+0x2d6/0x710 [ 51.258688][ T5065] ? __warn+0x16d/0x2d0 [ 51.262831][ T5065] ? memcpy_page_flushcache+0x100/0x100 [ 51.268379][ T5065] ? btrfs_create_pending_block_groups+0x115b/0x12e0 [ 51.275058][ T5065] __warn+0x284/0x2d0 [ 51.279038][ T5065] ? btrfs_create_pending_block_groups+0x115b/0x12e0 [ 51.285715][ T5065] report_bug+0x1b3/0x2d0 [ 51.290053][ T5065] handle_bug+0x3d/0x70 [ 51.294205][ T5065] exc_invalid_op+0x16/0x40 [ 51.298707][ T5065] asm_exc_invalid_op+0x16/0x20 [ 51.303555][ T5065] RIP: 0010:btrfs_create_pending_block_groups+0x115b/0x12e0 [ 51.310836][ T5065] Code: 09 00 00 44 89 f1 e8 b4 82 fd 06 4c 8b 74 24 30 e9 59 f4 ff ff e8 45 69 da fd 48 c7 c7 c0 f4 3b 8b 89 de 31 c0 e8 75 59 a1 fd <0f> 0b e9 25 fe ff ff e8 29 69 da fd 48 c7 c7 c0 f4 3b 8b 44 89 fe [ 51.330435][ T5065] RSP: 0018:ffffc90003bdf6c0 EFLAGS: 00010246 [ 51.336499][ T5065] RAX: ef6a712a0c881500 RBX: 00000000ffffffe4 RCX: ffff8880296457c0 [ 51.344466][ T5065] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 51.352432][ T5065] RBP: ffffc90003bdf970 R08: ffffffff816f2c9d R09: ffffed1017304f5b [ 51.360396][ T5065] R10: ffffed1017304f5b R11: 1ffff11017304f5a R12: ffff88802085d058 [ 51.368361][ T5065] R13: ffff888072d660f8 R14: ffff8880219b4001 R15: dffffc0000000000 [ 51.376335][ T5065] ? __wake_up_klogd+0xcd/0x100 [ 51.381227][ T5065] ? fill_dummy_bgs+0x2a0/0x2a0 [ 51.386086][ T5065] ? btrfs_block_rsv_add+0xad/0xc0 [ 51.391194][ T5065] ? do_raw_spin_lock+0x147/0x3a0 [ 51.396230][ T5065] ? mutex_unlock+0x10/0x10 [ 51.400734][ T5065] ? btrfs_trans_release_metadata+0x158/0x1c0 [ 51.406804][ T5065] __btrfs_end_transaction+0x146/0x610 [ 51.412266][ T5065] btrfs_inc_block_group_ro+0x540/0x5b0 [ 51.417820][ T5065] btrfs_relocate_block_group+0x420/0xd90 [ 51.423556][ T5065] btrfs_relocate_chunk+0x125/0x350 [ 51.428751][ T5065] __btrfs_balance+0x1d5f/0x2930 [ 51.433732][ T5065] ? describe_balance_start_or_resume+0x490/0x490 [ 51.440140][ T5065] ? do_wait_for_common+0x4c0/0x560 [ 51.445353][ T5065] btrfs_balance+0xc00/0x1150 [ 51.450045][ T5065] btrfs_ioctl_balance+0x478/0x740 [ 51.455170][ T5065] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 51.461579][ T5065] __se_sys_ioctl+0xfb/0x170 [ 51.466169][ T5065] do_syscall_64+0x3d/0xb0 [ 51.470590][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.476559][ T5065] RIP: 0033:0x7f4b84715ba9 [ 51.480972][ T5065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.500572][ T5065] RSP: 002b:00007ffda89b2dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.508982][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b84715ba9 [ 51.516946][ T5065] RDX: 0000000020002280 RSI: 00000000c4009420 RDI: 0000000000000004 [ 51.524911][ T5065] RBP: 00007f4b846d5440 R08: 0000000000000000 R09: 0000000000000000 [ 51.532879][ T5065] R10: 00000000000050e9 R11: 0000000000000246 R12: 00007f4b846d54d0 [ 51.540842][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.548822][ T5065] [ 51.551991][ T5065] Kernel Offset: disabled [ 51.556377][ T5065] Rebooting in 86400 seconds..