./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2053127810
<...>
DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4
forked to background, child pid 5490
[ 54.260151][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0
[ 54.293262][ T5491] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts.
execve("./syz-executor2053127810", ["./syz-executor2053127810"], 0x7ffc8dac8c50 /* 10 vars */) = 0
brk(NULL) = 0x55556d48a000
brk(0x55556d48ad00) = 0x55556d48ad00
arch_prctl(ARCH_SET_FS, 0x55556d48a380) = 0
set_tid_address(0x55556d48a650) = 5825
set_robust_list(0x55556d48a660, 24) = 0
rseq(0x55556d48aca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2053127810", 4096) = 28
getrandom("\xec\x93\x0f\x22\xd3\x1a\x0b\x32", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556d48ad00
brk(0x55556d4abd00) = 0x55556d4abd00
brk(0x55556d4ac000) = 0x55556d4ac000
mprotect(0x7fc2e029c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5826 attached
, child_tidptr=0x55556d48a650) = 5826
[pid 5826] set_robust_list(0x55556d48a660, 24) = 0
[pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5826] setpgid(0, 0) = 0
[pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5826] write(3, "1000", 4) = 4
[pid 5826] close(3) = 0
[pid 5826] write(1, "executing program\n", 18executing program
) = 18
[pid 5826] memfd_create("syzkaller", 0) = 3
[pid 5826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d7c00000
[pid 5826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5826] munmap(0x7fc2d7c00000, 138412032) = 0
[pid 5826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5826] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5826] close(3) = 0
[pid 5826] close(4) = 0
[pid 5826] mkdir("./file0", 0777) = 0
syzkaller login: [ 82.907224][ T5826] loop0: detected capacity change from 0 to 32768
[ 82.947256][ T5826] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor205 (5826)
[ 82.980041][ T5826] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 82.992301][ T5826] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 83.001895][ T5826] BTRFS info (device loop0): disk space caching is enabled
[ 83.010169][ T5826] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 83.109237][ T5826] BTRFS info (device loop0): rebuilding free space tree
[ 83.137134][ T5826] BTRFS info (device loop0): disabling free space tree
[ 83.145938][ T5826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[pid 5826] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_NOATIME|MS_REC|MS_RELATIME|MS_STRICTATIME, "compress-force,clear_cache,nodatasum,nossd,degraded,space_cache=v1,") = 0
[pid 5826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5826] ioctl(4, LOOP_CLR_FD) = 0
[pid 5826] close(4) = 0
[ 83.155869][ T5826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 83.231914][ T5826] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..7,limit=10376293541461622786,limit=2..2415919104
[ 83.249787][ T5826] ------------[ cut here ]------------
[ 83.255580][ T5826] BTRFS: Transaction aborted (error -28)
[ 83.262059][ T5826] WARNING: CPU: 1 PID: 5826 at fs/btrfs/block-group.c:2752 btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.274107][ T5826] Modules linked in:
[ 83.278116][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor205 Not tainted 6.13.0-syzkaller #0
[ 83.287329][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 83.298247][ T5826] RIP: 0010:btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.305777][ T5826] Code: c0 fd 4c 89 f7 be 03 00 00 00 e8 32 de db 00 e9 86 f9 ff ff e8 58 f2 c0 fd 90 48 c7 c7 40 b6 4d 8c 44 89 f6 e8 e8 a0 81 fd 90 <0f> 0b 90 90 e9 7b fe ff ff e8 39 f2 c0 fd 90 48 c7 c7 40 b6 4d 8c
[ 83.326500][ T5826] RSP: 0018:ffffc900037e76a0 EFLAGS: 00010246
[ 83.332887][ T5826] RAX: bd369977451aa800 RBX: ffff88807f2b8001 RCX: ffff88807f4c5a00
[ 83.341020][ T5826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 83.349407][ T5826] RBP: ffffc900037e7960 R08: ffffffff816018a2 R09: 1ffff920006fce70
[ 83.357630][ T5826] R10: dffffc0000000000 R11: fffff520006fce71 R12: 0000000000000000
[ 83.366100][ T5826] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888027c101c0
[ 83.374226][ T5826] FS: 000055556d48a380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 83.383502][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 83.390324][ T5826] CR2: 00005628decc7198 CR3: 000000007f030000 CR4: 00000000003526f0
[ 83.398529][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 83.408497][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 83.417017][ T5826] Call Trace:
[ 83.420517][ T5826]
[ 83.423866][ T5826] ? __warn+0x165/0x4d0
[ 83.428274][ T5826] ? btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.435288][ T5826] ? report_bug+0x2b3/0x500
[ 83.439956][ T5826] ? btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.447230][ T5826] ? handle_bug+0x60/0x90
[ 83.451673][ T5826] ? exc_invalid_op+0x1a/0x50
[ 83.456421][ T5826] ? asm_exc_invalid_op+0x1a/0x20
[ 83.461672][ T5826] ? __warn_printk+0x292/0x360
[ 83.466579][ T5826] ? btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.473716][ T5826] ? btrfs_inc_block_group_ro+0x640/0x700
[ 83.479930][ T5826] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10
[ 83.487088][ T5826] ? btrfs_block_rsv_add+0xd0/0xf0
[ 83.492418][ T5826] ? __pfx_lock_release+0x10/0x10
[ 83.497486][ T5826] ? do_raw_spin_lock+0x14f/0x370
[ 83.502652][ T5826] ? __mutex_unlock_slowpath+0x21e/0x790
[ 83.508553][ T5826] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 83.514812][ T5826] ? btrfs_trans_release_metadata+0x233/0x330
[ 83.521185][ T5826] __btrfs_end_transaction+0x150/0x630
[ 83.526716][ T5826] btrfs_inc_block_group_ro+0x648/0x700
[ 83.532810][ T5826] btrfs_relocate_block_group+0x440/0xd90
[ 83.538607][ T5826] btrfs_relocate_chunk+0x12c/0x3b0
[ 83.544054][ T5826] __btrfs_balance+0x1b0f/0x26b0
[ 83.549079][ T5826] ? describe_balance_start_or_resume+0x44c/0x490
[ 83.555626][ T5826] ? __pfx___btrfs_balance+0x10/0x10
[ 83.561065][ T5826] ? mutex_unlock+0x10/0x10
[ 83.565664][ T5826] btrfs_balance+0xbdc/0x10c0
[ 83.570510][ T5826] btrfs_ioctl_balance+0x493/0x7c0
[ 83.575759][ T5826] ? __pfx_btrfs_ioctl+0x10/0x10
[ 83.580871][ T5826] __se_sys_ioctl+0xf5/0x170
[ 83.585673][ T5826] do_syscall_64+0xf3/0x230
[ 83.590332][ T5826] ? clear_bhb_loop+0x35/0x90
[ 83.595118][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.601231][ T5826] RIP: 0033:0x7fc2e0223da9
[ 83.605904][ T5826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 83.627281][ T5826] RSP: 002b:00007ffd820d3b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 83.636191][ T5826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2e0223da9
[ 83.644677][ T5826] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003
[ 83.652743][ T5826] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055556d48b4c0
[ 83.661030][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 83.669158][ T5826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 83.677532][ T5826]
[ 83.680638][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 83.688230][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor205 Not tainted 6.13.0-syzkaller #0
[ 83.697707][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 83.708168][ T5826] Call Trace:
[ 83.711556][ T5826]
[ 83.714603][ T5826] dump_stack_lvl+0x241/0x360
[ 83.719329][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10
[ 83.724566][ T5826] ? __pfx__printk+0x10/0x10
[ 83.729200][ T5826] ? _printk+0xd5/0x120
[ 83.733404][ T5826] ? __init_begin+0x41000/0x41000
[ 83.738553][ T5826] ? vscnprintf+0x5d/0x90
[ 83.742921][ T5826] panic+0x349/0x880
[ 83.746874][ T5826] ? __warn+0x174/0x4d0
[ 83.751138][ T5826] ? __pfx_panic+0x10/0x10
[ 83.755603][ T5826] __warn+0x344/0x4d0
[ 83.759629][ T5826] ? btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.766429][ T5826] report_bug+0x2b3/0x500
[ 83.770783][ T5826] ? btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.777526][ T5826] handle_bug+0x60/0x90
[ 83.781793][ T5826] exc_invalid_op+0x1a/0x50
[ 83.786321][ T5826] asm_exc_invalid_op+0x1a/0x20
[ 83.791200][ T5826] RIP: 0010:btrfs_create_pending_block_groups+0x14f9/0x1710
[ 83.798505][ T5826] Code: c0 fd 4c 89 f7 be 03 00 00 00 e8 32 de db 00 e9 86 f9 ff ff e8 58 f2 c0 fd 90 48 c7 c7 40 b6 4d 8c 44 89 f6 e8 e8 a0 81 fd 90 <0f> 0b 90 90 e9 7b fe ff ff e8 39 f2 c0 fd 90 48 c7 c7 40 b6 4d 8c
[ 83.818134][ T5826] RSP: 0018:ffffc900037e76a0 EFLAGS: 00010246
[ 83.824222][ T5826] RAX: bd369977451aa800 RBX: ffff88807f2b8001 RCX: ffff88807f4c5a00
[ 83.832211][ T5826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 83.840462][ T5826] RBP: ffffc900037e7960 R08: ffffffff816018a2 R09: 1ffff920006fce70
[ 83.848556][ T5826] R10: dffffc0000000000 R11: fffff520006fce71 R12: 0000000000000000
[ 83.856806][ T5826] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888027c101c0
[ 83.864898][ T5826] ? __warn_printk+0x292/0x360
[ 83.869718][ T5826] ? btrfs_inc_block_group_ro+0x640/0x700
[ 83.875571][ T5826] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10
[ 83.882891][ T5826] ? btrfs_block_rsv_add+0xd0/0xf0
[ 83.888063][ T5826] ? __pfx_lock_release+0x10/0x10
[ 83.893283][ T5826] ? do_raw_spin_lock+0x14f/0x370
[ 83.898546][ T5826] ? __mutex_unlock_slowpath+0x21e/0x790
[ 83.904210][ T5826] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 83.910307][ T5826] ? btrfs_trans_release_metadata+0x233/0x330
[ 83.916418][ T5826] __btrfs_end_transaction+0x150/0x630
[ 83.921999][ T5826] btrfs_inc_block_group_ro+0x648/0x700
[ 83.927571][ T5826] btrfs_relocate_block_group+0x440/0xd90
[ 83.933348][ T5826] btrfs_relocate_chunk+0x12c/0x3b0
[ 83.939111][ T5826] __btrfs_balance+0x1b0f/0x26b0
[ 83.944205][ T5826] ? describe_balance_start_or_resume+0x44c/0x490
[ 83.950746][ T5826] ? __pfx___btrfs_balance+0x10/0x10
[ 83.956142][ T5826] ? mutex_unlock+0x10/0x10
[ 83.960692][ T5826] btrfs_balance+0xbdc/0x10c0
[ 83.965418][ T5826] btrfs_ioctl_balance+0x493/0x7c0
[ 83.970560][ T5826] ? __pfx_btrfs_ioctl+0x10/0x10
[ 83.975607][ T5826] __se_sys_ioctl+0xf5/0x170
[ 83.980306][ T5826] do_syscall_64+0xf3/0x230
[ 83.984923][ T5826] ? clear_bhb_loop+0x35/0x90
[ 83.989711][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.995733][ T5826] RIP: 0033:0x7fc2e0223da9
[ 84.000850][ T5826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 84.020835][ T5826] RSP: 002b:00007ffd820d3b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 84.029505][ T5826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2e0223da9
[ 84.037755][ T5826] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003
[ 84.045946][ T5826] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055556d48b4c0
[ 84.053943][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.061980][ T5826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 84.070084][ T5826]
[ 84.073381][ T5826] Kernel Offset: disabled
[ 84.077808][ T5826] Rebooting in 86400 seconds..