program: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000001400), 0x1, 0x7aa, &(0x7f0000001440)="$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") syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f0000000100)={[{@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x7ffe}}, {@autodefrag}, {@nossd}, {@rescue={'rescue', 0x3d, 'all'}}, {@noflushoncommit}, {@nodiscard}, {@commit={'commit', 0x3d, 0xe}}, {@acl}, {@datacow}, {@ssd_spread}]}, 0x9, 0x55c8, &(0x7f00000004c0)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) [ 85.887137][ T5338] Bluetooth: hci0: command tx timeout [ 86.014479][ T5362] loop0: detected capacity change from 0 to 2048 [ 86.050587][ T5362] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.0: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 86.077905][ T5362] EXT4-fs (loop0): get root inode failed [ 86.080401][ T5362] EXT4-fs (loop0): mount failed [ 86.300943][ T5362] loop0: detected capacity change from 0 to 32768 [ 86.315099][ T5362] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5362) [ 86.350236][ T5362] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 86.364525][ T5362] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 86.374162][ T5362] BTRFS info (device loop0 state S): using free-space-tree [ 86.383399][ T5362] workqueue: max_active 32766 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 86.398810][ T5362] workqueue: max_active 32766 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 86.409966][ T5362] workqueue: max_active 32766 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 86.427217][ T5362] workqueue: max_active 32766 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 86.433988][ T5362] workqueue: max_active 32766 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 86.450452][ T5362] workqueue: max_active 32766 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 86.467370][ T5362] workqueue: max_active 32766 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 86.485678][ T1036] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xfcf03e3b0b760edc680c540494bbac365df44223a091eabbf5846f39f75fca31 level 0, ignored [ 86.508423][ T5362] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 86.512554][ T5362] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 86.527511][ T5362] BTRFS error (device loop0 state S): failed to load root extent [ 86.531665][ T43] BTRFS warning (device loop0 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x6366ce9980a5d3dfe31055f79b60abba986818526cfd9d2bb8e0867e837f0640 level 0, ignored [ 86.567727][ T5362] BTRFS info (device loop0 state CS): bdev /dev/loop0 errs: wr 0, rd 0, flush 1536, corrupt 0, gen 0 [ 86.574271][ T9] cfg80211: failed to load regulatory.db [ 86.588544][ T5362] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 86.593815][ T5362] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 86.597543][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 86.602621][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.607752][ T5362] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 86.610677][ T5362] Code: 24 e8 93 5a 00 fe c6 05 59 07 ce 0b 01 48 c7 c7 60 28 cd 8b be 4b 03 00 00 48 c7 c2 a0 28 cd 8b e8 34 25 de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 40 42 65 fe 4d 8b 2c 24 e8 f7 dd [ 86.619064][ T5362] RSP: 0018:ffffc9000d2d7800 EFLAGS: 00010287 [ 86.621693][ T5362] RAX: 0000000000000003 RBX: ffffffff83bf602e RCX: 0000000000100000 [ 86.625082][ T5362] RDX: ffffc9000dbf2000 RSI: 0000000000017587 RDI: 0000000000017588 [ 86.628638][ T5362] RBP: ffffc9000d2d78c0 R08: 0000000000000000 R09: ffffffff83bf602e [ 86.632450][ T5362] R10: dffffc0000000000 R11: ffffed100a3da00e R12: 0000000000000018 [ 86.636215][ T5362] R13: ffff888032eb2440 R14: dffffc0000000000 R15: 0000000000000001 [ 86.640258][ T5362] FS: 00007fa32dfed6c0(0000) GS:ffff88808d211000(0000) knlGS:0000000000000000 [ 86.644542][ T5362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.647544][ T5362] CR2: 0000557215158a00 CR3: 0000000042a98000 CR4: 0000000000352ef0 [ 86.650948][ T5362] Call Trace: [ 86.652434][ T5362] [ 86.653804][ T5362] ? _raw_read_unlock+0x28/0x50 [ 86.655914][ T5362] ? __pfx_btrfs_root_node+0x10/0x10 [ 86.658094][ T5362] ? __pfx_btrfs_extent_root+0x10/0x10 [ 86.660487][ T5362] ? rcu_is_watching+0x15/0xb0 [ 86.662590][ T5362] btrfs_read_lock_root_node+0x27/0xd0 [ 86.664763][ T5362] btrfs_build_ref_tree+0x113/0x1680 [ 86.666946][ T5362] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 86.669445][ T5362] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.671595][ T5362] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.674535][ T5362] ? __pfx_btrfs_read_qgroup_config+0x10/0x10 [ 86.677786][ T5362] ? do_raw_spin_unlock+0x4d/0x240 [ 86.680544][ T5362] ? __pfx_btrfs_build_ref_tree+0x10/0x10 [ 86.683393][ T5362] ? try_to_wake_up+0x7f5/0x12b0 [ 86.685626][ T5362] ? btrfs_check_active_zone_reservation+0x96/0x4b0 [ 86.688545][ T5362] open_ctree+0x2504/0x3a10 [ 86.690575][ T5362] ? bdi_register_va+0x58d/0x740 [ 86.692758][ T5362] ? open_ctree+0xa1a/0x3a10 [ 86.694841][ T5362] ? __pfx_open_ctree+0x10/0x10 [ 86.697139][ T5362] btrfs_get_tree+0xf55/0x1820 [ 86.699390][ T5362] vfs_get_tree+0x8f/0x2b0 [ 86.701355][ T5362] do_new_mount+0x2a2/0x9e0 [ 86.703454][ T5362] ? ns_capable+0x8a/0xf0 [ 86.705424][ T5362] ? __pfx_do_new_mount+0x10/0x10 [ 86.707733][ T5362] ? path_mount+0x61c/0xfe0 [ 86.709785][ T5362] ? user_path_at+0x44/0x60 [ 86.711950][ T5362] __se_sys_mount+0x317/0x410 [ 86.714195][ T5362] ? __pfx___se_sys_mount+0x10/0x10 [ 86.716509][ T5362] ? do_syscall_64+0xbe/0x3b0 [ 86.718723][ T5362] ? __x64_sys_mount+0x20/0xc0 [ 86.720965][ T5362] do_syscall_64+0xfa/0x3b0 [ 86.722915][ T5362] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.725053][ T5362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.727519][ T5362] ? clear_bhb_loop+0x60/0xb0 [ 86.729436][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.731890][ T5362] RIP: 0033:0x7fa32d19038a [ 86.733866][ T5362] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.741677][ T5362] RSP: 002b:00007fa32dfece68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.745274][ T5362] RAX: ffffffffffffffda RBX: 00007fa32dfecef0 RCX: 00007fa32d19038a [ 86.748671][ T5362] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fa32dfeceb0 [ 86.752177][ T5362] RBP: 0000200000000080 R08: 00007fa32dfecef0 R09: 000000000001c005 [ 86.755651][ T5362] R10: 000000000001c005 R11: 0000000000000246 R12: 0000200000000040 [ 86.759115][ T5362] R13: 00007fa32dfeceb0 R14: 00000000000055c8 R15: 0000200000000100 [ 86.762628][ T5362] [ 86.763952][ T5362] Modules linked in: [ 86.765912][ T5362] ---[ end trace 0000000000000000 ]--- [ 86.786171][ T5362] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 86.788902][ T5362] Code: 24 e8 93 5a 00 fe c6 05 59 07 ce 0b 01 48 c7 c7 60 28 cd 8b be 4b 03 00 00 48 c7 c2 a0 28 cd 8b e8 34 25 de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 40 42 65 fe 4d 8b 2c 24 e8 f7 dd [ 86.798383][ T5362] RSP: 0018:ffffc9000d2d7800 EFLAGS: 00010287 [ 86.800989][ T5362] RAX: 0000000000000003 RBX: ffffffff83bf602e RCX: 0000000000100000 [ 86.804311][ T5362] RDX: ffffc9000dbf2000 RSI: 0000000000017587 RDI: 0000000000017588 [ 86.807971][ T5362] RBP: ffffc9000d2d78c0 R08: 0000000000000000 R09: ffffffff83bf602e [ 86.811400][ T5362] R10: dffffc0000000000 R11: ffffed100a3da00e R12: 0000000000000018 [ 86.814933][ T5362] R13: ffff888032eb2440 R14: dffffc0000000000 R15: 0000000000000001 [ 86.818986][ T5362] FS: 00007fa32dfed6c0(0000) GS:ffff88808d211000(0000) knlGS:0000000000000000 [ 86.822664][ T5362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.825201][ T5362] CR2: 0000557215144368 CR3: 0000000042a98000 CR4: 0000000000352ef0 [ 86.829035][ T5362] Kernel panic - not syncing: Fatal exception [ 86.831812][ T5362] Kernel Offset: disabled [ 86.833693][ T5362] Rebooting in 86400 seconds..