loop0: detected capacity change from 0 to 32768 BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5307) BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d BTRFS info (device loop0): using sha256 checksum algorithm BTRFS info (device loop0): rebuilding free space tree BTRFS info (device loop0): turning on flush-on-commit BTRFS info (device loop0): turning on sync discard BTRFS info (device loop0): enabling free space tree BTRFS info (device loop0): force clearing of disk cache netlink: 128124 bytes leftover after parsing attributes in process `syz.0.0'. BTRFS info (device loop0): balance: start -d -m BTRFS info (device loop0): relocating block group 6881280 flags data|metadata BTRFS info (device loop0): relocating block group 5242880 flags data|metadata syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=18928, nr_sectors = 8 limit=18070 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 1, flush 0, corrupt 0, gen 0 syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=18936, nr_sectors = 8 limit=18070 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 1, flush 0, corrupt 0, gen 0 syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=18944, nr_sectors = 8 limit=18070 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 1, flush 0, corrupt 0, gen 0 syz.0.0: attempt to access beyond end of device loop0: rw=6145, sector=18952, nr_sectors = 8 limit=18070 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 8, rd 1, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): error while writing out transaction: -5 BTRFS warning (device loop0): Skipping commit of aborted transaction. BTRFS error (device loop0 state A): Transaction 15 aborted (error -5) BTRFS: error (device loop0 state A) in cleanup_transaction:2068: errno=-5 IO failure BTRFS info (device loop0 state EA): forced readonly ------------[ cut here ]------------ inode->block_rsv.reserved WARNING: fs/btrfs/inode.c:8123 at btrfs_destroy_inode+0x7ca/0x910 fs/btrfs/inode.c:8123, CPU#0: syz.0.0/5307 Modules linked in: CPU: 0 UID: 0 PID: 5307 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:btrfs_destroy_inode+0x7ca/0x910 fs/btrfs/inode.c:8123 Code: 41 5f 5d e9 38 48 fb ff e8 e3 77 b3 fd 90 0f 0b 90 e9 c3 f8 ff ff e8 d5 77 b3 fd 90 0f 0b 90 e9 ed f8 ff ff e8 c7 77 b3 fd 90 <0f> 0b 90 e9 22 f9 ff ff e8 b9 77 b3 fd 90 0f 0b 90 e9 46 f9 ff ff RSP: 0018:ffffc9000f42f8c0 EFLAGS: 00010283 RAX: ffffffff841399e9 RBX: 0000000000018000 RCX: 0000000000100000 RDX: ffffc9000eb52000 RSI: 00000000000a7b06 RDI: 00000000000a7b07 RBP: ffff888043f7ba30 R08: ffff888012a8279f R09: 1ffff110025504f3 R10: dffffc0000000000 R11: ffffffff84139220 R12: ffff888043f7bc98 R13: 1ffff92001e85f30 R14: ffff888043f7bdc0 R15: dffffc0000000000 FS: 00007fadd06f26c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559e0364a9a0 CR3: 0000000042c73000 CR4: 0000000000352ef0 Call Trace: destroy_inode fs/inode.c:387 [inline] evict+0x8fe/0xb50 fs/inode.c:849 btrfs_relocate_block_group+0x7b7/0xaf0 fs/btrfs/relocation.c:5527 btrfs_relocate_chunk+0x114/0x810 fs/btrfs/volumes.c:3647 __btrfs_balance+0x1b5f/0x29d0 fs/btrfs/volumes.c:4586 btrfs_balance+0xaa6/0x1180 fs/btrfs/volumes.c:4973 btrfs_ioctl_balance+0x3da/0x640 fs/btrfs/ioctl.c:3481 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fadcf79e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fadd06f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fadcfa25fa0 RCX: 00007fadcf79e0d9 RDX: 0000200000000180 RSI: 00000000c4009420 RDI: 0000000000000006 RBP: 00007fadcf835024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fadcfa26038 R14: 00007fadcfa25fa0 R15: 00007ffd2fc81a98