./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2167256457 <...> Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. execve("./syz-executor2167256457", ["./syz-executor2167256457"], 0x7fff40837270 /* 10 vars */) = 0 brk(NULL) = 0x5555604ac000 brk(0x5555604acd00) = 0x5555604acd00 arch_prctl(ARCH_SET_FS, 0x5555604ac380) = 0 set_tid_address(0x5555604ac650) = 5825 set_robust_list(0x5555604ac660, 24) = 0 rseq(0x5555604acca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2167256457", 4096) = 28 getrandom("\xda\xd8\xa7\xc0\xad\x49\xb9\xac", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555604acd00 brk(0x5555604cdd00) = 0x5555604cdd00 brk(0x5555604ce000) = 0x5555604ce000 mprotect(0x7fb8adcec000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 executing program write(1, "executing program\n", 18) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8a5800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fb8a5800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 78.077051][ T5825] loop0: detected capacity change from 0 to 32768 [ 78.115233][ T5825] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor216 (5825) [ 78.138670][ T5825] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 78.149945][ T5825] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 78.159709][ T5825] BTRFS info (device loop0): disk space caching is enabled [ 78.168143][ T5825] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 78.275593][ T5825] BTRFS info (device loop0): rebuilding free space tree [ 78.302823][ T5825] BTRFS info (device loop0): disabling free space tree [ 78.310773][ T5825] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_NOATIME|MS_REC|MS_RELATIME|MS_STRICTATIME, "compress-force,clear_cache,nodatasum,nossd,degraded,space_cache=v1,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 78.320996][ T5825] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.386759][ T5825] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..7,limit=10376293541461622786,limit=2..2415919104 [ 78.404477][ T5825] ------------[ cut here ]------------ [ 78.410284][ T5825] BTRFS: Transaction aborted (error -28) [ 78.417653][ T5825] WARNING: CPU: 0 PID: 5825 at fs/btrfs/block-group.c:2752 btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.429408][ T5825] Modules linked in: [ 78.433384][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz-executor216 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 78.444819][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.455017][ T5825] RIP: 0010:btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.462441][ T5825] Code: c0 fd 4c 89 f7 be 03 00 00 00 e8 c2 db db 00 e9 86 f9 ff ff e8 68 e2 c0 fd 90 48 c7 c7 a0 92 4d 8c 44 89 f6 e8 d8 85 81 fd 90 <0f> 0b 90 90 e9 7b fe ff ff e8 49 e2 c0 fd 90 48 c7 c7 a0 92 4d 8c [ 78.482184][ T5825] RSP: 0018:ffffc90003c9f6a0 EFLAGS: 00010246 [ 78.488362][ T5825] RAX: 3dfba581e2f70b00 RBX: ffff88807db08001 RCX: ffff88802f969e00 [ 78.496464][ T5825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 78.504487][ T5825] RBP: ffffc90003c9f960 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 78.512673][ T5825] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 78.520771][ T5825] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff8880279499c0 [ 78.528894][ T5825] FS: 00005555604ac380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 78.537943][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.544725][ T5825] CR2: 0000000020001000 CR3: 000000007f0c2000 CR4: 00000000003526f0 [ 78.552847][ T5825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.560948][ T5825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.569083][ T5825] Call Trace: [ 78.572407][ T5825] [ 78.575389][ T5825] ? __warn+0x165/0x4d0 [ 78.579663][ T5825] ? btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.586456][ T5825] ? report_bug+0x2b3/0x500 [ 78.591012][ T5825] ? btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.597831][ T5825] ? handle_bug+0x60/0x90 [ 78.602193][ T5825] ? exc_invalid_op+0x1a/0x50 [ 78.606951][ T5825] ? asm_exc_invalid_op+0x1a/0x20 [ 78.612047][ T5825] ? __warn_printk+0x292/0x360 [ 78.616905][ T5825] ? btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.623639][ T5825] ? btrfs_inc_block_group_ro+0x640/0x700 [ 78.629551][ T5825] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 78.636503][ T5825] ? btrfs_block_rsv_add+0xd0/0xf0 [ 78.641666][ T5825] ? __pfx_lock_release+0x10/0x10 [ 78.646793][ T5825] ? do_raw_spin_lock+0x14f/0x370 [ 78.651883][ T5825] ? __mutex_unlock_slowpath+0x21e/0x790 [ 78.657634][ T5825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.663700][ T5825] ? btrfs_trans_release_metadata+0x233/0x330 [ 78.669951][ T5825] __btrfs_end_transaction+0x150/0x630 [ 78.675492][ T5825] btrfs_inc_block_group_ro+0x648/0x700 [ 78.681150][ T5825] btrfs_relocate_block_group+0x440/0xd90 [ 78.686999][ T5825] btrfs_relocate_chunk+0x12c/0x3b0 [ 78.692232][ T5825] __btrfs_balance+0x1b0f/0x26b0 [ 78.697288][ T5825] ? describe_balance_start_or_resume+0x44c/0x490 [ 78.703779][ T5825] ? __pfx___btrfs_balance+0x10/0x10 [ 78.709162][ T5825] ? __wait_for_common+0x630/0x6e0 [ 78.714339][ T5825] btrfs_balance+0xbdc/0x10c0 [ 78.719136][ T5825] btrfs_ioctl_balance+0x493/0x7c0 [ 78.724294][ T5825] ? __pfx_btrfs_ioctl+0x10/0x10 [ 78.729302][ T5825] __se_sys_ioctl+0xf5/0x170 [ 78.733955][ T5825] do_syscall_64+0xf3/0x230 [ 78.738570][ T5825] ? clear_bhb_loop+0x35/0x90 [ 78.743301][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.749302][ T5825] RIP: 0033:0x7fb8adc749c9 [ 78.753876][ T5825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.773677][ T5825] RSP: 002b:00007fff85794c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.782270][ T5825] RAX: ffffffffffffffda RBX: 00007fff85794e38 RCX: 00007fb8adc749c9 [ 78.790420][ T5825] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 78.798467][ T5825] RBP: 00007fb8adcec610 R08: 00000000000051a5 R09: 00007fff85794e38 [ 78.806584][ T5825] R10: 00007fff85794b20 R11: 0000000000000246 R12: 0000000000000001 [ 78.814611][ T5825] R13: 00007fff85794e28 R14: 0000000000000001 R15: 0000000000000001 [ 78.822704][ T5825] [ 78.825772][ T5825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.833074][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz-executor216 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 78.844196][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.854348][ T5825] Call Trace: [ 78.857688][ T5825] [ 78.860661][ T5825] dump_stack_lvl+0x241/0x360 [ 78.865354][ T5825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.870563][ T5825] ? __pfx__printk+0x10/0x10 [ 78.875161][ T5825] ? _printk+0xd5/0x120 [ 78.879329][ T5825] ? __init_begin+0x41000/0x41000 [ 78.884360][ T5825] ? vscnprintf+0x5d/0x90 [ 78.888704][ T5825] panic+0x349/0x880 [ 78.892614][ T5825] ? __warn+0x174/0x4d0 [ 78.896779][ T5825] ? __pfx_panic+0x10/0x10 [ 78.901217][ T5825] __warn+0x344/0x4d0 [ 78.905205][ T5825] ? btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.911894][ T5825] report_bug+0x2b3/0x500 [ 78.916245][ T5825] ? btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.922958][ T5825] handle_bug+0x60/0x90 [ 78.927131][ T5825] exc_invalid_op+0x1a/0x50 [ 78.931644][ T5825] asm_exc_invalid_op+0x1a/0x20 [ 78.936518][ T5825] RIP: 0010:btrfs_create_pending_block_groups+0x14f9/0x1710 [ 78.943822][ T5825] Code: c0 fd 4c 89 f7 be 03 00 00 00 e8 c2 db db 00 e9 86 f9 ff ff e8 68 e2 c0 fd 90 48 c7 c7 a0 92 4d 8c 44 89 f6 e8 d8 85 81 fd 90 <0f> 0b 90 90 e9 7b fe ff ff e8 49 e2 c0 fd 90 48 c7 c7 a0 92 4d 8c [ 78.963443][ T5825] RSP: 0018:ffffc90003c9f6a0 EFLAGS: 00010246 [ 78.969538][ T5825] RAX: 3dfba581e2f70b00 RBX: ffff88807db08001 RCX: ffff88802f969e00 [ 78.977520][ T5825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 78.985502][ T5825] RBP: ffffc90003c9f960 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 78.993486][ T5825] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 79.001472][ T5825] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff8880279499c0 [ 79.009465][ T5825] ? __warn_printk+0x292/0x360 [ 79.014346][ T5825] ? btrfs_inc_block_group_ro+0x640/0x700 [ 79.020133][ T5825] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 79.027039][ T5825] ? btrfs_block_rsv_add+0xd0/0xf0 [ 79.032182][ T5825] ? __pfx_lock_release+0x10/0x10 [ 79.037245][ T5825] ? do_raw_spin_lock+0x14f/0x370 [ 79.042315][ T5825] ? __mutex_unlock_slowpath+0x21e/0x790 [ 79.048011][ T5825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.054094][ T5825] ? btrfs_trans_release_metadata+0x233/0x330 [ 79.060229][ T5825] __btrfs_end_transaction+0x150/0x630 [ 79.065736][ T5825] btrfs_inc_block_group_ro+0x648/0x700 [ 79.071336][ T5825] btrfs_relocate_block_group+0x440/0xd90 [ 79.077140][ T5825] btrfs_relocate_chunk+0x12c/0x3b0 [ 79.082398][ T5825] __btrfs_balance+0x1b0f/0x26b0 [ 79.087417][ T5825] ? describe_balance_start_or_resume+0x44c/0x490 [ 79.093912][ T5825] ? __pfx___btrfs_balance+0x10/0x10 [ 79.099312][ T5825] ? __wait_for_common+0x630/0x6e0 [ 79.104491][ T5825] btrfs_balance+0xbdc/0x10c0 [ 79.109219][ T5825] btrfs_ioctl_balance+0x493/0x7c0 [ 79.114369][ T5825] ? __pfx_btrfs_ioctl+0x10/0x10 [ 79.119356][ T5825] __se_sys_ioctl+0xf5/0x170 [ 79.123990][ T5825] do_syscall_64+0xf3/0x230 [ 79.128532][ T5825] ? clear_bhb_loop+0x35/0x90 [ 79.133250][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.139186][ T5825] RIP: 0033:0x7fb8adc749c9 [ 79.143714][ T5825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.163445][ T5825] RSP: 002b:00007fff85794c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.171940][ T5825] RAX: ffffffffffffffda RBX: 00007fff85794e38 RCX: 00007fb8adc749c9 [ 79.179963][ T5825] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 79.187974][ T5825] RBP: 00007fb8adcec610 R08: 00000000000051a5 R09: 00007fff85794e38 [ 79.195978][ T5825] R10: 00007fff85794b20 R11: 0000000000000246 R12: 0000000000000001 [ 79.203977][ T5825] R13: 00007fff85794e28 R14: 0000000000000001 R15: 0000000000000001 [ 79.211984][ T5825] [ 79.215312][ T5825] Kernel Offset: disabled [ 79.219699][ T5825] Rebooting in 86400 seconds..