./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor955892148 <...> Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. execve("./syz-executor955892148", ["./syz-executor955892148"], 0x7ffcf1c90a10 /* 10 vars */) = 0 brk(NULL) = 0x55555634b000 brk(0x55555634bd00) = 0x55555634bd00 arch_prctl(ARCH_SET_FS, 0x55555634b380) = 0 set_tid_address(0x55555634b650) = 5040 set_robust_list(0x55555634b660, 24) = 0 rseq(0x55555634bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor955892148", 4096) = 27 getrandom("\xb2\xe8\x41\xac\xe7\x47\xaf\xbd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555634bd00 brk(0x55555636cd00) = 0x55555636cd00 brk(0x55555636d000) = 0x55555636d000 mprotect(0x7f25128ed000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f250a438000 [ 73.537076][ T5040] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5040 'syz-executor955' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f250a438000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 73.686881][ T5040] loop0: detected capacity change from 0 to 32768 [ 73.697149][ T5040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor955 (5040) [ 73.712905][ T5040] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 73.722033][ T5040] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./file0", O_RDONLY) = 4 [ 73.732868][ T5040] BTRFS info (device loop0): doing ref verification [ 73.739583][ T5040] BTRFS info (device loop0): using free space tree [ 73.758989][ T5040] BTRFS info (device loop0): enabling ssd optimizations [ 73.765948][ T5040] BTRFS info (device loop0): auto enabling async discard [ 73.788481][ T5040] BTRFS info (device loop0): balance: start -f -susage=6,vrange=0..9223372036854775809 [ 73.800589][ T5040] ------------[ cut here ]------------ [ 73.806068][ T5040] BTRFS: Transaction aborted (error -28) [ 73.816680][ T5040] WARNING: CPU: 0 PID: 5040 at fs/btrfs/block-group.c:2686 btrfs_create_pending_block_groups+0xec7/0x11c0 [ 73.828074][ T5040] Modules linked in: [ 73.831994][ T5040] CPU: 0 PID: 5040 Comm: syz-executor955 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 73.842540][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 73.852665][ T5040] RIP: 0010:btrfs_create_pending_block_groups+0xec7/0x11c0 [ 73.859996][ T5040] Code: fd 44 89 f6 48 c7 c7 80 ab b8 8a e8 13 74 b6 fd 0f 0b e9 88 fe ff ff e8 67 3c f0 fd 89 de 48 c7 c7 80 ab b8 8a e8 f9 73 b6 fd <0f> 0b e9 3d fe ff ff e8 4d 79 45 fe e9 61 f8 ff ff e8 43 79 45 fe [ 73.879778][ T5040] RSP: 0018:ffffc90003c8f6c0 EFLAGS: 00010286 [ 73.885899][ T5040] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 73.894846][ T5040] RDX: ffff888027280000 RSI: ffffffff814e00c6 RDI: 0000000000000001 [ 73.902933][ T5040] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 73.911004][ T5040] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88814aaf09c0 [ 73.919076][ T5040] R13: ffff88814aaf0800 R14: ffff88814aaf0850 R15: dffffc0000000000 [ 73.927143][ T5040] FS: 000055555634b380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 73.936148][ T5040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.942763][ T5040] CR2: 00007ffcf1c8eff8 CR3: 000000007296f000 CR4: 00000000003506f0 [ 73.950832][ T5040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.959184][ T5040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.967422][ T5040] Call Trace: [ 73.970720][ T5040] [ 73.973674][ T5040] ? show_regs+0x8f/0xa0 [ 73.978061][ T5040] ? __warn+0xe6/0x380 [ 73.982164][ T5040] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 73.988861][ T5040] ? report_bug+0x3bc/0x580 [ 73.993494][ T5040] ? handle_bug+0x3c/0x70 [ 73.998274][ T5040] ? exc_invalid_op+0x17/0x40 [ 74.003072][ T5040] ? asm_exc_invalid_op+0x1a/0x20 [ 74.008221][ T5040] ? __warn_printk+0x1a6/0x350 [ 74.013024][ T5040] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 74.019748][ T5040] ? lock_release+0x4bf/0x680 [ 74.024482][ T5040] ? btrfs_inc_block_group_ro+0x447/0x610 [ 74.030291][ T5040] ? rcu_is_watching+0x12/0xb0 [ 74.035175][ T5040] ? btrfs_read_block_groups+0x1a70/0x1a70 [ 74.041205][ T5040] ? __mutex_unlock_slowpath+0x100/0x640 [ 74.046944][ T5040] ? spin_bug+0x1d0/0x1d0 [ 74.051327][ T5040] ? do_raw_spin_unlock+0x173/0x230 [ 74.056624][ T5040] ? btrfs_trans_release_metadata+0x172/0x230 [ 74.062710][ T5040] __btrfs_end_transaction+0xf1/0x930 [ 74.068218][ T5040] btrfs_inc_block_group_ro+0x44f/0x610 [ 74.073801][ T5040] btrfs_relocate_block_group+0x216/0xd90 [ 74.079582][ T5040] ? _raw_read_unlock+0x28/0x40 [ 74.084553][ T5040] ? block_group_cache_tree_search+0x25e/0x2f0 [ 74.090749][ T5040] btrfs_relocate_chunk+0x143/0x440 [ 74.095975][ T5040] btrfs_balance+0x20fc/0x3ef0 [ 74.100812][ T5040] ? btrfs_relocate_chunk+0x440/0x440 [ 74.106232][ T5040] btrfs_ioctl+0x1362/0x5cf0 [ 74.110825][ T5040] ? tomoyo_path_number_perm+0x190/0x590 [ 74.116510][ T5040] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 74.122884][ T5040] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 74.129365][ T5040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.135333][ T5040] ? do_vfs_ioctl+0x379/0x1920 [ 74.140155][ T5040] ? vfs_fileattr_set+0xbf0/0xbf0 [ 74.145215][ T5040] ? rcu_is_watching+0x12/0xb0 [ 74.150047][ T5040] ? lock_release+0x4bf/0x680 [ 74.155364][ T5040] ? handle_mm_fault+0x4f1/0xa00 [ 74.160393][ T5040] ? bpf_lsm_file_ioctl+0x9/0x10 [ 74.165442][ T5040] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 74.171913][ T5040] __x64_sys_ioctl+0x18f/0x210 [ 74.176739][ T5040] do_syscall_64+0x38/0xb0 [ 74.181156][ T5040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.187081][ T5040] RIP: 0033:0x7f2512875939 [ 74.191505][ T5040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.211301][ T5040] RSP: 002b:00007ffebb03d798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.221461][ T5040] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f2512875939 [ 74.229553][ T5040] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004 [ 74.237664][ T5040] RBP: 00007f25128ed610 R08: 0000000000000000 R09: 00007ffebb03d968 [ 74.245900][ T5040] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001 [ 74.254161][ T5040] R13: 00007ffebb03d958 R14: 0000000000000001 R15: 0000000000000001 [ 74.262493][ T5040] [ 74.265597][ T5040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.274099][ T5040] CPU: 0 PID: 5040 Comm: syz-executor955 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 74.284503][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 74.295157][ T5040] Call Trace: [ 74.298530][ T5040] [ 74.301547][ T5040] dump_stack_lvl+0xd9/0x1b0 [ 74.306619][ T5040] panic+0x6a6/0x750 [ 74.310655][ T5040] ? panic_smp_self_stop+0xa0/0xa0 [ 74.315797][ T5040] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 74.322486][ T5040] check_panic_on_warn+0xab/0xb0 [ 74.327462][ T5040] __warn+0xf2/0x380 [ 74.331371][ T5040] ? btrfs_create_pending_block_groups+0xec7/0x11c0 [ 74.338332][ T5040] report_bug+0x3bc/0x580 [ 74.342711][ T5040] handle_bug+0x3c/0x70 [ 74.347134][ T5040] exc_invalid_op+0x17/0x40 [ 74.352180][ T5040] asm_exc_invalid_op+0x1a/0x20 [ 74.357410][ T5040] RIP: 0010:btrfs_create_pending_block_groups+0xec7/0x11c0 [ 74.364982][ T5040] Code: fd 44 89 f6 48 c7 c7 80 ab b8 8a e8 13 74 b6 fd 0f 0b e9 88 fe ff ff e8 67 3c f0 fd 89 de 48 c7 c7 80 ab b8 8a e8 f9 73 b6 fd <0f> 0b e9 3d fe ff ff e8 4d 79 45 fe e9 61 f8 ff ff e8 43 79 45 fe [ 74.384964][ T5040] RSP: 0018:ffffc90003c8f6c0 EFLAGS: 00010286 [ 74.391325][ T5040] RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: 0000000000000000 [ 74.399495][ T5040] RDX: ffff888027280000 RSI: ffffffff814e00c6 RDI: 0000000000000001 [ 74.407579][ T5040] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 74.415845][ T5040] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88814aaf09c0 [ 74.424089][ T5040] R13: ffff88814aaf0800 R14: ffff88814aaf0850 R15: dffffc0000000000 [ 74.432338][ T5040] ? __warn_printk+0x1a6/0x350 [ 74.437310][ T5040] ? lock_release+0x4bf/0x680 [ 74.442011][ T5040] ? btrfs_inc_block_group_ro+0x447/0x610 [ 74.448450][ T5040] ? rcu_is_watching+0x12/0xb0 [ 74.453312][ T5040] ? btrfs_read_block_groups+0x1a70/0x1a70 [ 74.459260][ T5040] ? __mutex_unlock_slowpath+0x100/0x640 [ 74.466963][ T5040] ? spin_bug+0x1d0/0x1d0 [ 74.472668][ T5040] ? do_raw_spin_unlock+0x173/0x230 [ 74.478135][ T5040] ? btrfs_trans_release_metadata+0x172/0x230 [ 74.484408][ T5040] __btrfs_end_transaction+0xf1/0x930 [ 74.489896][ T5040] btrfs_inc_block_group_ro+0x44f/0x610 [ 74.496099][ T5040] btrfs_relocate_block_group+0x216/0xd90 [ 74.502006][ T5040] ? _raw_read_unlock+0x28/0x40 [ 74.507440][ T5040] ? block_group_cache_tree_search+0x25e/0x2f0 [ 74.513857][ T5040] btrfs_relocate_chunk+0x143/0x440 [ 74.519624][ T5040] btrfs_balance+0x20fc/0x3ef0 [ 74.524443][ T5040] ? btrfs_relocate_chunk+0x440/0x440 [ 74.529929][ T5040] btrfs_ioctl+0x1362/0x5cf0 [ 74.534730][ T5040] ? tomoyo_path_number_perm+0x190/0x590 [ 74.540420][ T5040] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 74.546445][ T5040] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 74.553539][ T5040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.559476][ T5040] ? do_vfs_ioctl+0x379/0x1920 [ 74.564267][ T5040] ? vfs_fileattr_set+0xbf0/0xbf0 [ 74.569538][ T5040] ? rcu_is_watching+0x12/0xb0 [ 74.574687][ T5040] ? lock_release+0x4bf/0x680 [ 74.579494][ T5040] ? handle_mm_fault+0x4f1/0xa00 [ 74.584491][ T5040] ? bpf_lsm_file_ioctl+0x9/0x10 [ 74.589480][ T5040] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 74.596798][ T5040] __x64_sys_ioctl+0x18f/0x210 [ 74.601680][ T5040] do_syscall_64+0x38/0xb0 [ 74.606217][ T5040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.612406][ T5040] RIP: 0033:0x7f2512875939 [ 74.617014][ T5040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.637601][ T5040] RSP: 002b:00007ffebb03d798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.646237][ T5040] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f2512875939 [ 74.654778][ T5040] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004 [ 74.662844][ T5040] RBP: 00007f25128ed610 R08: 0000000000000000 R09: 00007ffebb03d968 [ 74.670826][ T5040] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001 [ 74.678889][ T5040] R13: 00007ffebb03d958 R14: 0000000000000001 R15: 0000000000000001 [ 74.687067][ T5040] [ 74.690371][ T5040] Kernel Offset: disabled [ 74.694807][ T5040] Rebooting in 86400 seconds..