./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1155378115 <...> DUID 00:04:7c:8f:25:e4:1e:61:d4:15:b8:1c:50:2a:7f:f5:0b:01 forked to background, child pid 3209 [ 28.404502][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.418490][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. execve("./syz-executor1155378115", ["./syz-executor1155378115"], 0x7ffd1f7e0790 /* 10 vars */) = 0 brk(NULL) = 0x5555561fd000 brk(0x5555561fdc40) = 0x5555561fdc40 arch_prctl(ARCH_SET_FS, 0x5555561fd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1155378115", 4096) = 28 brk(0x55555621ec40) = 0x55555621ec40 brk(0x55555621f000) = 0x55555621f000 mprotect(0x7f13db0ec000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13d2c00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f13d2c00000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 53.808502][ T3631] loop0: detected capacity change from 0 to 32768 [ 53.819707][ T3631] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop0 scanned by syz-executor115 (3631) [ 53.841152][ T3631] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 53.850540][ T3631] BTRFS info (device loop0): using free space tree mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file2", O_RDONLY) = 4 [ 53.870339][ T3631] BTRFS info (device loop0): enabling ssd optimizations [ 53.919555][ T3631] BTRFS info (device loop0): balance: start -d -m [ 53.928337][ T3631] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 53.942895][ T9] ------------[ cut here ]------------ [ 53.950207][ T9] WARNING: CPU: 0 PID: 9 at fs/btrfs/block-group.c:3535 do_chunk_alloc+0x653/0x6c0 [ 53.959694][ T9] Modules linked in: [ 53.963614][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.0-rc7-syzkaller-00101-g01f856ae6d0c #0 [ 53.974000][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.984595][ T9] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 53.992769][ T9] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 53.998265][ T9] Code: 3b 8b 44 89 fe 31 c0 e8 cb 98 a4 fd 0f 0b b3 01 e9 fd fe ff ff e8 fd f9 dc fd 48 c7 c7 60 99 3b 8b 89 de 31 c0 e8 ad 98 a4 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 de f9 dc fd 48 c7 c7 60 99 3b 8b [ 54.018286][ T9] RSP: 0018:ffffc900000e7870 EFLAGS: 00010246 [ 54.024685][ T9] RAX: e5a6b944e6120900 RBX: ffffffffffffffe4 RCX: ffff88813fec0000 [ 54.032992][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 54.041255][ T9] RBP: ffff8880275cc001 R08: ffffffff816e560d R09: ffffed1017324f1c [ 54.049792][ T9] R10: ffffed1017324f1c R11: 1ffff11017324f1b R12: ffff8880718c5540 [ 54.057761][ T9] R13: ffff88801c9e6000 R14: 1ffff1100e318ab2 R15: 00000000ffffffe4 [ 54.065934][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 54.074976][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.081987][ T9] CR2: 00007fa5dadf6620 CR3: 000000001da5a000 CR4: 00000000003506f0 [ 54.090159][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.098135][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.106213][ T9] Call Trace: [ 54.109559][ T9] [ 54.112496][ T9] btrfs_chunk_alloc+0x6a4/0x900 [ 54.117438][ T9] flush_space+0x9d8/0xbc0 [ 54.121935][ T9] ? trace_lock_release+0x95/0x220 [ 54.127062][ T9] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 54.133691][ T9] ? trace_update_bytes_may_use+0x310/0x310 [ 54.139618][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 54.144814][ T9] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 54.151307][ T9] process_one_work+0x877/0xdb0 [ 54.156179][ T9] ? worker_detach_from_pool+0x260/0x260 [ 54.161894][ T9] ? _raw_spin_lock_irq+0xba/0xf0 [ 54.169042][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 54.174586][ T9] worker_thread+0xb14/0x1330 [ 54.179330][ T9] kthread+0x266/0x300 [ 54.183405][ T9] ? rcu_lock_release+0x20/0x20 [ 54.188246][ T9] ? kthread_blkcg+0xd0/0xd0 [ 54.192872][ T9] ret_from_fork+0x1f/0x30 [ 54.197306][ T9] [ 54.200360][ T9] Kernel panic - not syncing: panic_on_warn set ... [ 54.206937][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.0-rc7-syzkaller-00101-g01f856ae6d0c #0 [ 54.216807][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.226853][ T9] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 54.234820][ T9] Call Trace: [ 54.238085][ T9] [ 54.241003][ T9] dump_stack_lvl+0x1b1/0x28e [ 54.245667][ T9] ? nf_tcp_handle_invalid+0x62e/0x62e [ 54.251109][ T9] ? panic+0x710/0x710 [ 54.255167][ T9] ? vscnprintf+0x59/0x80 [ 54.259501][ T9] ? do_chunk_alloc+0x650/0x6c0 [ 54.264354][ T9] panic+0x2d6/0x710 [ 54.268251][ T9] ? __warn+0x131/0x220 [ 54.272402][ T9] ? memcpy_page_flushcache+0xfc/0xfc [ 54.277777][ T9] ? ret_from_fork+0x1f/0x30 [ 54.282368][ T9] ? do_chunk_alloc+0x653/0x6c0 [ 54.287220][ T9] __warn+0x1fa/0x220 [ 54.291208][ T9] ? do_chunk_alloc+0x653/0x6c0 [ 54.296064][ T9] report_bug+0x1b3/0x2d0 [ 54.300395][ T9] handle_bug+0x3d/0x70 [ 54.304544][ T9] exc_invalid_op+0x16/0x40 [ 54.309041][ T9] asm_exc_invalid_op+0x16/0x20 [ 54.313886][ T9] RIP: 0010:do_chunk_alloc+0x653/0x6c0 [ 54.319344][ T9] Code: 3b 8b 44 89 fe 31 c0 e8 cb 98 a4 fd 0f 0b b3 01 e9 fd fe ff ff e8 fd f9 dc fd 48 c7 c7 60 99 3b 8b 89 de 31 c0 e8 ad 98 a4 fd <0f> 0b 40 b5 01 e9 fa fe ff ff e8 de f9 dc fd 48 c7 c7 60 99 3b 8b [ 54.338942][ T9] RSP: 0018:ffffc900000e7870 EFLAGS: 00010246 [ 54.345006][ T9] RAX: e5a6b944e6120900 RBX: ffffffffffffffe4 RCX: ffff88813fec0000 [ 54.352976][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 54.360942][ T9] RBP: ffff8880275cc001 R08: ffffffff816e560d R09: ffffed1017324f1c [ 54.368906][ T9] R10: ffffed1017324f1c R11: 1ffff11017324f1b R12: ffff8880718c5540 [ 54.376873][ T9] R13: ffff88801c9e6000 R14: 1ffff1100e318ab2 R15: 00000000ffffffe4 [ 54.384846][ T9] ? __wake_up_klogd+0xcd/0x100 [ 54.389707][ T9] btrfs_chunk_alloc+0x6a4/0x900 [ 54.394658][ T9] flush_space+0x9d8/0xbc0 [ 54.399070][ T9] ? trace_lock_release+0x95/0x220 [ 54.404187][ T9] ? btrfs_async_reclaim_metadata_space+0x8d3/0xa50 [ 54.410778][ T9] ? trace_update_bytes_may_use+0x310/0x310 [ 54.416674][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 54.421884][ T9] btrfs_async_reclaim_metadata_space+0x8e8/0xa50 [ 54.428327][ T9] process_one_work+0x877/0xdb0 [ 54.433194][ T9] ? worker_detach_from_pool+0x260/0x260 [ 54.438832][ T9] ? _raw_spin_lock_irq+0xba/0xf0 [ 54.443860][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 54.449415][ T9] worker_thread+0xb14/0x1330 [ 54.454117][ T9] kthread+0x266/0x300 [ 54.458275][ T9] ? rcu_lock_release+0x20/0x20 [ 54.463122][ T9] ? kthread_blkcg+0xd0/0xd0 [ 54.467708][ T9] ret_from_fork+0x1f/0x30 [ 54.472137][ T9] [ 54.475999][ T9] Kernel Offset: disabled [ 54.480395][ T9] Rebooting in 86400 seconds..