./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor11588210
<...>
Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts.
execve("./syz-executor11588210", ["./syz-executor11588210"], 0x7fffc7bfdfa0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555721f000
brk(0x55555721fd00)                     = 0x55555721fd00
arch_prctl(ARCH_SET_FS, 0x55555721f380) = 0
set_tid_address(0x55555721f650)         = 5028
set_robust_list(0x55555721f660, 24)     = 0
rseq(0x55555721fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor11588210", 4096) = 26
getrandom("\xd5\x06\xec\xa5\xa7\xc0\xa7\x70", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555721fd00
brk(0x555557240d00)                     = 0x555557240d00
brk(0x555557241000)                     = 0x555557241000
mprotect(0x7f5b5f56f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5b570ba000
[   57.672668][ T5028] syz-executor115[5028]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f5b570ba000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
mkdir("./file0", 0777)                  = 0
[   57.831297][ T5028] loop0: detected capacity change from 0 to 32768
[   57.843363][ T5028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor115 (5028)
[   57.861981][ T5028] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0")                        = 0
ioctl(4, LOOP_CLR_FD)                   = 0
close(4)                                = 0
open("./file0", O_RDONLY)               = 4
[   57.871105][ T5028] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[   57.882047][ T5028] BTRFS info (device loop0): doing ref verification
[   57.888715][ T5028] BTRFS info (device loop0): using free space tree
[   57.910318][ T5028] BTRFS info (device loop0): enabling ssd optimizations
[   57.917371][ T5028] BTRFS info (device loop0): auto enabling async discard
[   57.959753][ T5028] BTRFS info (device loop0): balance: start -f -susage=6,vrange=0..9223372036854775809
[   57.974447][ T5028] ------------[ cut here ]------------
[   57.980101][ T5028] BTRFS: Transaction aborted (error -28)
[   57.986500][ T5028] WARNING: CPU: 0 PID: 5028 at fs/btrfs/block-group.c:2686 btrfs_create_pending_block_groups+0x10b7/0x1220
[   57.998306][ T5028] Modules linked in:
[   58.002235][ T5028] CPU: 0 PID: 5028 Comm: syz-executor115 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0
[   58.012431][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[   58.022688][ T5028] RIP: 0010:btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.030127][ T5028] Code: 2d b7 b1 8c ba 85 0a 00 00 44 89 f9 e8 52 2c 15 07 e9 85 f4 ff ff e8 38 53 d8 fd 48 c7 c7 c0 07 4d 8b 44 89 fe e8 a9 75 9e fd <0f> 0b e9 aa fe ff ff e8 1d 53 d8 fd 48 c7 c7 c0 07 4d 8b 48 8b 1c
[   58.049980][ T5028] RSP: 0000:ffffc900038cf6e0 EFLAGS: 00010246
[   58.056144][ T5028] RAX: 27d563d631214000 RBX: ffff888025078001 RCX: ffff888020e85940
[   58.064194][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   58.072280][ T5028] RBP: ffffc900038cf978 R08: ffffffff81544192 R09: 1ffff92000719e30
[   58.080344][ T5028] R10: dffffc0000000000 R11: fffff52000719e31 R12: 0000000000000000
[   58.088414][ T5028] R13: 1ffff110050bd414 R14: dffffc0000000000 R15: 00000000ffffffe4
[   58.096444][ T5028] FS:  000055555721f380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   58.105475][ T5028] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.112094][ T5028] CR2: 0000557843906000 CR3: 0000000072e09000 CR4: 00000000003506f0
[   58.120157][ T5028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   58.128707][ T5028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.136735][ T5028] Call Trace:
[   58.140045][ T5028]  
[   58.142967][ T5028]  ? __warn+0x162/0x4a0
[   58.147189][ T5028]  ? btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.153883][ T5028]  ? report_bug+0x2b3/0x500
[   58.158421][ T5028]  ? btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.165207][ T5028]  ? handle_bug+0x3d/0x70
[   58.169552][ T5028]  ? exc_invalid_op+0x1a/0x50
[   58.174260][ T5028]  ? asm_exc_invalid_op+0x1a/0x20
[   58.179318][ T5028]  ? __warn_printk+0x292/0x360
[   58.184075][ T5028]  ? btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.190815][ T5028]  ? btrfs_inc_block_group_ro+0x5a4/0x610
[   58.196601][ T5028]  ? fill_dummy_bgs+0x2a0/0x2a0
[   58.201469][ T5028]  ? btrfs_block_rsv_add+0xb1/0xc0
[   58.206641][ T5028]  ? __lock_acquire+0x7f70/0x7f70
[   58.211684][ T5028]  ? do_raw_spin_lock+0x14d/0x3a0
[   58.216771][ T5028]  ? __mutex_unlock_slowpath+0x21c/0x750
[   58.222422][ T5028]  ? mutex_unlock+0x10/0x10
[   58.226971][ T5028]  ? btrfs_trans_release_metadata+0x153/0x1c0
[   58.233051][ T5028]  __btrfs_end_transaction+0x150/0x630
[   58.238583][ T5028]  btrfs_inc_block_group_ro+0x5ac/0x610
[   58.244270][ T5028]  btrfs_relocate_block_group+0x43b/0xd70
[   58.249992][ T5028]  btrfs_relocate_chunk+0x12c/0x3b0
[   58.255243][ T5028]  __btrfs_balance+0x1b06/0x2690
[   58.260211][ T5028]  ? describe_balance_start_or_resume+0x490/0x490
[   58.266663][ T5028]  ? __wait_for_common+0x640/0x6d0
[   58.271791][ T5028]  ? do_raw_spin_unlock+0x13b/0x8b0
[   58.277049][ T5028]  ? validate_convert_profile+0x7d/0x2c0
[   58.282697][ T5028]  btrfs_balance+0xbd8/0x10d0
[   58.287443][ T5028]  btrfs_ioctl_balance+0x496/0x7c0
[   58.292744][ T5028]  ? btrfs_ioctl+0xb8b/0xd40
[   58.297388][ T5028]  ? btrfs_ioctl_get_supported_features+0x50/0x50
[   58.303815][ T5028]  __se_sys_ioctl+0xf8/0x170
[   58.308446][ T5028]  do_syscall_64+0x41/0xc0
[   58.312875][ T5028]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   58.318822][ T5028] RIP: 0033:0x7f5b5f4f7939
[   58.323247][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   58.342923][ T5028] RSP: 002b:00007ffedb984e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   58.351489][ T5028] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f5b5f4f7939
[   58.359505][ T5028] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004
[   58.367506][ T5028] RBP: 00007f5b5f56f610 R08: 0000000000000000 R09: 00007ffedb984ff8
[   58.375519][ T5028] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001
[   58.383570][ T5028] R13: 00007ffedb984fe8 R14: 0000000000000001 R15: 0000000000000001
[   58.391588][ T5028]  
[   58.394676][ T5028] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   58.401943][ T5028] CPU: 0 PID: 5028 Comm: syz-executor115 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0
[   58.412010][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[   58.422051][ T5028] Call Trace:
[   58.425320][ T5028]  
[   58.428244][ T5028]  dump_stack_lvl+0x1e7/0x2d0
[   58.432911][ T5028]  ? nf_tcp_handle_invalid+0x650/0x650
[   58.438355][ T5028]  ? panic+0x770/0x770
[   58.442409][ T5028]  ? vscnprintf+0x5d/0x80
[   58.446726][ T5028]  panic+0x30f/0x770
[   58.450604][ T5028]  ? __warn+0x171/0x4a0
[   58.454747][ T5028]  ? __memcpy_flushcache+0x2b0/0x2b0
[   58.460036][ T5028]  __warn+0x314/0x4a0
[   58.464010][ T5028]  ? btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.470685][ T5028]  report_bug+0x2b3/0x500
[   58.475014][ T5028]  ? btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.481688][ T5028]  handle_bug+0x3d/0x70
[   58.485840][ T5028]  exc_invalid_op+0x1a/0x50
[   58.490335][ T5028]  asm_exc_invalid_op+0x1a/0x20
[   58.495179][ T5028] RIP: 0010:btrfs_create_pending_block_groups+0x10b7/0x1220
[   58.502462][ T5028] Code: 2d b7 b1 8c ba 85 0a 00 00 44 89 f9 e8 52 2c 15 07 e9 85 f4 ff ff e8 38 53 d8 fd 48 c7 c7 c0 07 4d 8b 44 89 fe e8 a9 75 9e fd <0f> 0b e9 aa fe ff ff e8 1d 53 d8 fd 48 c7 c7 c0 07 4d 8b 48 8b 1c
[   58.522142][ T5028] RSP: 0000:ffffc900038cf6e0 EFLAGS: 00010246
[   58.528210][ T5028] RAX: 27d563d631214000 RBX: ffff888025078001 RCX: ffff888020e85940
[   58.536171][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   58.544143][ T5028] RBP: ffffc900038cf978 R08: ffffffff81544192 R09: 1ffff92000719e30
[   58.552106][ T5028] R10: dffffc0000000000 R11: fffff52000719e31 R12: 0000000000000000
[   58.560186][ T5028] R13: 1ffff110050bd414 R14: dffffc0000000000 R15: 00000000ffffffe4
[   58.568156][ T5028]  ? __warn_printk+0x292/0x360
[   58.572935][ T5028]  ? btrfs_inc_block_group_ro+0x5a4/0x610
[   58.578656][ T5028]  ? fill_dummy_bgs+0x2a0/0x2a0
[   58.583507][ T5028]  ? btrfs_block_rsv_add+0xb1/0xc0
[   58.588616][ T5028]  ? __lock_acquire+0x7f70/0x7f70
[   58.593629][ T5028]  ? do_raw_spin_lock+0x14d/0x3a0
[   58.598649][ T5028]  ? __mutex_unlock_slowpath+0x21c/0x750
[   58.604285][ T5028]  ? mutex_unlock+0x10/0x10
[   58.608781][ T5028]  ? btrfs_trans_release_metadata+0x153/0x1c0
[   58.614930][ T5028]  __btrfs_end_transaction+0x150/0x630
[   58.620384][ T5028]  btrfs_inc_block_group_ro+0x5ac/0x610
[   58.625929][ T5028]  btrfs_relocate_block_group+0x43b/0xd70
[   58.631653][ T5028]  btrfs_relocate_chunk+0x12c/0x3b0
[   58.636844][ T5028]  __btrfs_balance+0x1b06/0x2690
[   58.641805][ T5028]  ? describe_balance_start_or_resume+0x490/0x490
[   58.648214][ T5028]  ? __wait_for_common+0x640/0x6d0
[   58.653324][ T5028]  ? do_raw_spin_unlock+0x13b/0x8b0
[   58.658515][ T5028]  ? validate_convert_profile+0x7d/0x2c0
[   58.664150][ T5028]  btrfs_balance+0xbd8/0x10d0
[   58.668830][ T5028]  btrfs_ioctl_balance+0x496/0x7c0
[   58.673938][ T5028]  ? btrfs_ioctl+0xb8b/0xd40
[   58.678521][ T5028]  ? btrfs_ioctl_get_supported_features+0x50/0x50
[   58.684934][ T5028]  __se_sys_ioctl+0xf8/0x170
[   58.689520][ T5028]  do_syscall_64+0x41/0xc0
[   58.693936][ T5028]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   58.699824][ T5028] RIP: 0033:0x7f5b5f4f7939
[   58.704231][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   58.723830][ T5028] RSP: 002b:00007ffedb984e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   58.732236][ T5028] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f5b5f4f7939
[   58.740197][ T5028] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004
[   58.748181][ T5028] RBP: 00007f5b5f56f610 R08: 0000000000000000 R09: 00007ffedb984ff8
[   58.756184][ T5028] R10: 00000000000050e7 R11: 0000000000000246 R12: 0000000000000001
[   58.764156][ T5028] R13: 00007ffedb984fe8 R14: 0000000000000001 R15: 0000000000000001
[   58.772224][ T5028]  
[   58.775423][ T5028] Kernel Offset: disabled
[   58.779814][ T5028] Rebooting in 86400 seconds..