Warning: Permanently added '[localhost]:19813' (ED25519) to the list of known hosts. 2025/08/25 22:58:52 parsed 1 programs syzkaller login: [ 91.279612][ T5350] cgroup: Unknown subsys name 'net' [ 91.349257][ T5350] cgroup: Unknown subsys name 'cpuset' [ 91.357686][ T5350] cgroup: Unknown subsys name 'rlimit' [ 91.985874][ T54] cfg80211: failed to load regulatory.db [ 93.171779][ T5350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.592294][ T5366] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.889258][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.893124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.934386][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.939128][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.003285][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 100.077681][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.081922][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.085020][ T5398] bridge_slave_0: entered allmulticast mode [ 100.089797][ T5398] bridge_slave_0: entered promiscuous mode [ 100.096062][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.099392][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.103681][ T5398] bridge_slave_1: entered allmulticast mode [ 100.108733][ T5398] bridge_slave_1: entered promiscuous mode [ 100.136341][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.142655][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.170723][ T5398] team0: Port device team_slave_0 added [ 100.175864][ T5398] team0: Port device team_slave_1 added [ 100.198841][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.202070][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.214421][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.221555][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.224457][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.238084][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.275180][ T5398] hsr_slave_0: entered promiscuous mode [ 100.279728][ T5398] hsr_slave_1: entered promiscuous mode [ 100.438387][ T5398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.449657][ T5398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.458309][ T5398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.464930][ T5398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.504245][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.507506][ T5398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.511363][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.514790][ T5398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.587925][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.604231][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.611667][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.625195][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.638400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.642162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.654586][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.657897][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.877976][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.923401][ T5398] veth0_vlan: entered promiscuous mode [ 100.940209][ T5398] veth1_vlan: entered promiscuous mode [ 100.972406][ T5398] veth0_macvtap: entered promiscuous mode [ 100.983005][ T5398] veth1_macvtap: entered promiscuous mode [ 101.003763][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.020580][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.034855][ T1137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.047702][ T1137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.051569][ T1137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.055364][ T1137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.232813][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.290374][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.328767][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.379341][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.642019][ T5430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.647749][ T5430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.651398][ T5430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.660352][ T5430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.664707][ T5430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.755340][ T1137] bridge_slave_1: left allmulticast mode [ 103.762806][ T1137] bridge_slave_1: left promiscuous mode [ 103.782470][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.824027][ T1137] bridge_slave_0: left allmulticast mode [ 103.835679][ T1137] bridge_slave_0: left promiscuous mode [ 103.838833][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state 2025/08/25 22:59:07 executed programs: 0 [ 104.530141][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.534175][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.540040][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.550592][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.554789][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.662533][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.669800][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.675355][ T1137] bond0 (unregistering): Released all slaves [ 104.805739][ T1137] hsr_slave_0: left promiscuous mode [ 104.809961][ T1137] hsr_slave_1: left promiscuous mode [ 104.813472][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.822515][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.837181][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.840535][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.865204][ T1137] veth1_macvtap: left promiscuous mode [ 104.876385][ T1137] veth0_macvtap: left promiscuous mode [ 104.879375][ T1137] veth1_vlan: left promiscuous mode [ 104.884089][ T1137] veth0_vlan: left promiscuous mode [ 105.398013][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 105.421028][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 106.044651][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 106.622815][ T5430] Bluetooth: hci0: command tx timeout [ 106.798630][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.801766][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.804847][ T5468] bridge_slave_0: entered allmulticast mode [ 106.813771][ T5468] bridge_slave_0: entered promiscuous mode [ 106.857111][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.860223][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.863270][ T5468] bridge_slave_1: entered allmulticast mode [ 106.891335][ T5468] bridge_slave_1: entered promiscuous mode [ 106.986916][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.993599][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.088572][ T5468] team0: Port device team_slave_0 added [ 107.092893][ T5468] team0: Port device team_slave_1 added [ 107.189937][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.193490][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.208266][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.247350][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.250319][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.285626][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.360677][ T5468] hsr_slave_0: entered promiscuous mode [ 107.367248][ T5468] hsr_slave_1: entered promiscuous mode [ 108.038342][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.059605][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.067425][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.083539][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.260143][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.300207][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.317663][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.321255][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.348800][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.351942][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.695923][ T5430] Bluetooth: hci0: command tx timeout [ 108.750947][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.833951][ T5468] veth0_vlan: entered promiscuous mode [ 108.852245][ T5468] veth1_vlan: entered promiscuous mode [ 108.905244][ T5468] veth0_macvtap: entered promiscuous mode [ 108.928021][ T5468] veth1_macvtap: entered promiscuous mode [ 108.955197][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.973481][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.017162][ T1137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.027245][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.033724][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.058071][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.122031][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.134912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.201419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.207800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.667789][ T5529] loop0: detected capacity change from 0 to 32768 [ 109.722929][ T5529] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5529) [ 109.798371][ T5529] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.803530][ T5529] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.860410][ T5529] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 110.005194][ T5529] BTRFS info (device loop0): rebuilding free space tree [ 110.080175][ T5529] BTRFS info (device loop0): disabling free space tree [ 110.083515][ T5529] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.117500][ T5529] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.129786][ T5529] BTRFS info (device loop0): setting nodatasum [ 110.133734][ T5529] BTRFS info (device loop0): enabling ssd optimizations [ 110.165826][ T5529] BTRFS info (device loop0): enabling disk space caching [ 110.168853][ T5529] BTRFS info (device loop0): force clearing of disk cache [ 110.171823][ T5529] BTRFS info (device loop0): force zlib compression, level 3 [ 110.247776][ T5529] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..7,limit=10376293541461622786,limit=2..2415919104 [ 110.274560][ T5529] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 110.286882][ T5529] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 110.292072][ T5529] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 110.300924][ T5529] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 110.304921][ T5529] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 110.308303][ T5529] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 110.311490][ T5529] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 110.314649][ T5529] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 110.400283][ T5529] BTRFS error (device loop0): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 110.447965][ T5529] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2240512 free, is full [ 110.453887][ T5529] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 110.460289][ T5529] BTRFS info (device loop0): global_block_rsv: size 983040 reserved 983040 [ 110.464828][ T5529] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 110.469005][ T5529] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 110.472870][ T5529] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 110.477279][ T5529] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 110.556273][ T5529] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 110.564039][ T5529] BTRFS critical (device loop0): entry offset 5242880, bytes 12288, bitmap no [ 110.569598][ T5529] BTRFS critical (device loop0): entry offset 5259264, bytes 8192, bitmap no [ 110.573974][ T5529] BTRFS critical (device loop0): entry offset 5271552, bytes 16384, bitmap no [ 110.577858][ T5529] BTRFS critical (device loop0): entry offset 5316608, bytes 36864, bitmap no [ 110.581563][ T5529] BTRFS critical (device loop0): entry offset 5357568, bytes 12288, bitmap no [ 110.585760][ T5529] BTRFS critical (device loop0): entry offset 5378048, bytes 1503232, bitmap no [ 110.657209][ T5529] BTRFS info (device loop0): block group has cluster?: no [ 110.661544][ T5529] BTRFS info (device loop0): 6 free space entries at or bigger than 4096 bytes [ 110.703244][ T5529] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 110.735800][ T5529] BTRFS critical (device loop0): entry offset 6881280, bytes 1638400, bitmap no [ 110.740072][ T5529] BTRFS info (device loop0): block group has cluster?: no [ 110.743762][ T5529] BTRFS info (device loop0): 1 free space entries at or bigger than 4096 bytes [ 110.770119][ T5529] BTRFS info (device loop0): 3227648 bytes available across all block groups [ 110.774121][ T5529] ------------[ cut here ]------------ [ 110.776975][ T5529] BTRFS: Transaction aborted (error -28) [ 110.781322][ T5430] Bluetooth: hci0: command tx timeout [ 110.794041][ T5529] WARNING: CPU: 0 PID: 5529 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x1150/0x1780 [ 110.800891][ T5529] Modules linked in: [ 110.805065][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.809293][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.813229][ T5529] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 110.817437][ T5529] Code: 00 e8 04 20 b9 fd 84 c0 74 29 e8 0b 7e d2 fd e9 fd 01 00 00 e8 01 7e d2 fd 90 48 c7 c7 20 06 d0 8b 44 89 f6 e8 e1 0c 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 82 61 8e 07 41 89 c7 31 ff 89 c6 e8 [ 110.826547][ T5529] RSP: 0018:ffffc9000cabf6e0 EFLAGS: 00010246 [ 110.829172][ T5529] RAX: 62fa8872d97cf000 RBX: ffff888050490001 RCX: ffff888000382440 [ 110.832241][ T5529] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 110.836146][ T5529] RBP: ffffc9000cabf948 R08: 0000000000000003 R09: 0000000000000004 [ 110.839246][ T5529] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 110.844825][ T5529] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88803e984000 [ 110.849778][ T5529] FS: 0000555560286500(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 110.854416][ T5529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.858116][ T5529] CR2: 00007f3149af7368 CR3: 0000000044bc8000 CR4: 0000000000352ef0 [ 110.862903][ T5529] Call Trace: [ 110.865302][ T5529] [ 110.867438][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 110.869636][ T5529] ? kfree+0x18e/0x440 [ 110.871762][ T5529] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 110.874865][ T5529] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 110.877785][ T5529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.880836][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 110.884081][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 110.887291][ T5529] __btrfs_end_transaction+0x140/0x640 [ 110.889795][ T5529] btrfs_inc_block_group_ro+0x641/0x6f0 [ 110.892272][ T5529] btrfs_relocate_block_group+0x3f1/0xc60 [ 110.894948][ T5529] btrfs_relocate_chunk+0x12f/0x5c0 [ 110.897715][ T5529] __btrfs_balance+0x1860/0x23f0 [ 110.899993][ T5529] ? __pfx___btrfs_balance+0x10/0x10 [ 110.902424][ T5529] ? __wait_for_common+0x650/0x710 [ 110.904801][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 110.907611][ T5529] btrfs_balance+0xac2/0x11b0 [ 110.910096][ T5529] btrfs_ioctl_balance+0x3d3/0x610 [ 110.912491][ T5529] ? btrfs_ioctl+0xb19/0xd00 [ 110.914407][ T5529] ? __pfx_btrfs_ioctl+0x10/0x10 [ 110.916858][ T5529] __se_sys_ioctl+0xf9/0x170 [ 110.918975][ T5529] do_syscall_64+0xfa/0x3b0 [ 110.921097][ T5529] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.923319][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.925661][ T5529] ? clear_bhb_loop+0x60/0xb0 [ 110.927681][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.930334][ T5529] RIP: 0033:0x7f2a42f8ebe9 [ 110.933422][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.944688][ T5529] RSP: 002b:00007ffdce891558 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.948564][ T5529] RAX: ffffffffffffffda RBX: 00007f2a431b5fa0 RCX: 00007f2a42f8ebe9 [ 110.951645][ T5529] RDX: 0000200000000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 110.955738][ T5529] RBP: 00007f2a43011e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.959343][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.963293][ T5529] R13: 00007f2a431b5fa0 R14: 00007f2a431b5fa0 R15: 0000000000000003 [ 110.966886][ T5529] [ 110.968050][ T5529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.971006][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.976801][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.981827][ T5529] Call Trace: [ 110.983279][ T5529] [ 110.984514][ T5529] dump_stack_lvl+0x99/0x250 [ 110.986436][ T5529] ? __asan_memcpy+0x40/0x70 [ 110.988312][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.990291][ T5529] ? __pfx__printk+0x10/0x10 [ 110.992230][ T5529] vpanic+0x281/0x750 [ 110.993925][ T5529] ? __pfx__printk+0x10/0x10 [ 110.996090][ T5529] ? __pfx_vpanic+0x10/0x10 [ 110.998193][ T5529] ? is_bpf_text_address+0x26/0x2b0 [ 111.001128][ T5529] panic+0xb9/0xc0 [ 111.002880][ T5529] ? __pfx_panic+0x10/0x10 [ 111.004866][ T5529] __warn+0x31b/0x4b0 [ 111.006780][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 111.009747][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 111.012748][ T5529] report_bug+0x2be/0x4f0 [ 111.014775][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 111.018319][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 111.021592][ T5529] ? btrfs_create_pending_block_groups+0x1152/0x1780 [ 111.025036][ T5529] handle_bug+0x84/0x160 [ 111.026799][ T5529] exc_invalid_op+0x1a/0x50 [ 111.028803][ T5529] asm_exc_invalid_op+0x1a/0x20 [ 111.030928][ T5529] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 111.033903][ T5529] Code: 00 e8 04 20 b9 fd 84 c0 74 29 e8 0b 7e d2 fd e9 fd 01 00 00 e8 01 7e d2 fd 90 48 c7 c7 20 06 d0 8b 44 89 f6 e8 e1 0c 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 82 61 8e 07 41 89 c7 31 ff 89 c6 e8 [ 111.042613][ T5529] RSP: 0018:ffffc9000cabf6e0 EFLAGS: 00010246 [ 111.045493][ T5529] RAX: 62fa8872d97cf000 RBX: ffff888050490001 RCX: ffff888000382440 [ 111.048759][ T5529] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 111.052993][ T5529] RBP: ffffc9000cabf948 R08: 0000000000000003 R09: 0000000000000004 [ 111.056419][ T5529] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 111.060327][ T5529] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88803e984000 [ 111.065151][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 111.067522][ T5529] ? kfree+0x18e/0x440 [ 111.069426][ T5529] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 111.072363][ T5529] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 111.074747][ T5529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.077347][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 111.079794][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 111.082261][ T5529] __btrfs_end_transaction+0x140/0x640 [ 111.085402][ T5529] btrfs_inc_block_group_ro+0x641/0x6f0 [ 111.088140][ T5529] btrfs_relocate_block_group+0x3f1/0xc60 [ 111.091207][ T5529] btrfs_relocate_chunk+0x12f/0x5c0 [ 111.093481][ T5529] __btrfs_balance+0x1860/0x23f0 [ 111.095514][ T5529] ? __pfx___btrfs_balance+0x10/0x10 [ 111.097638][ T5529] ? __wait_for_common+0x650/0x710 [ 111.099758][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 111.101937][ T5529] btrfs_balance+0xac2/0x11b0 [ 111.104157][ T5529] btrfs_ioctl_balance+0x3d3/0x610 [ 111.106636][ T5529] ? btrfs_ioctl+0xb19/0xd00 [ 111.108671][ T5529] ? __pfx_btrfs_ioctl+0x10/0x10 [ 111.110978][ T5529] __se_sys_ioctl+0xf9/0x170 [ 111.113249][ T5529] do_syscall_64+0xfa/0x3b0 [ 111.115195][ T5529] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.117269][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.119875][ T5529] ? clear_bhb_loop+0x60/0xb0 [ 111.121866][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.124869][ T5529] RIP: 0033:0x7f2a42f8ebe9 [ 111.127568][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.136569][ T5529] RSP: 002b:00007ffdce891558 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.140132][ T5529] RAX: ffffffffffffffda RBX: 00007f2a431b5fa0 RCX: 00007f2a42f8ebe9 [ 111.143617][ T5529] RDX: 0000200000000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 111.147514][ T5529] RBP: 00007f2a43011e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.151226][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.154908][ T5529] R13: 00007f2a431b5fa0 R14: 00007f2a431b5fa0 R15: 0000000000000003 [ 111.158338][ T5529] [ 111.160047][ T5529] Kernel Offset: disabled [ 111.162055][ T5529] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:59:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000cabee30 R8 =ffff888033d68237 R9 =1ffff110067ad046 R10=dffffc0000000000 R11=ffffffff8550c280 R12=dffffc0000000000 R13=ffffffff99b058df R14=ffffffff99dfa820 R15=0000000000000000 RIP=ffffffff8550c2fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560286500 ffffffff 00c00000 GS =0000 ffff88808d210000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3149af7368 CR3=0000000044bc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce891830 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce8919b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce8919b6 00007ffdce8919bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a43012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000