program: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c02000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f00294b0000"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nojournal_checksum}, {@journal_checksum}, {@errors_remount}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@mblk_io_submit}, {@usrquota}, {@noauto_da_alloc}]}, 0xfa, 0x57a, &(0x7f00000013c0)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r2, 0x36545000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r3 = getpid() syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) socketpair(0x24, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000009b00)={{r6}, 0x7, &(0x7f0000009ac0)=[0x3c, 0xb2bb, 0x8000000000000001, 0x7, 0x6, 0x2, 0xe], 0xfffffffffffffff9, 0x1, 0x1}) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000000c0)={[{@nobarrier}, {@skip_balance}, {@autodefrag}, {@ref_verify}, {@rescue={'rescue', 0x3d, 'all'}}, {}, {@nodiscard}, {@commit={'commit', 0x3d, 0xe}}, {@acl}, {@datacow}, {@ssd_spread}]}, 0x9, 0x55ae, &(0x7f0000010200)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x2}, 0x2404, 0x800, 0x80001ffd, 0x2, 0x2e, 0xfffffffd, 0x47, 0x0, 0x0, 0x0, 0xffffffffffff4643}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r8, &(0x7f000001be80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040081}, 0x5) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='.dead\x00', 0x0, 0x0) [ 85.105195][ T5337] Bluetooth: hci0: command tx timeout [ 85.220806][ T5359] loop0: detected capacity change from 0 to 1024 [ 85.261705][ T5359] EXT4-fs: Ignoring removed bh option [ 85.308221][ T5359] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.353789][ T5359] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 85.379554][ T5359] ptrace attach of "/syz-executor exec snapshot"[5336] was attempted by " <   €\x09  ipip \x0c €  )K [ 85.392307][ T25] audit: type=1326 audit(1756598973.371:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5358 comm="syz.0.0" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d5858ebe9 code=0x0 [ 86.717257][ T5370] loop0: detected capacity change from 0 to 32768 [ 86.966278][ T5370] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5370) [ 86.993364][ T5370] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 86.998846][ T5370] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 87.153687][ T5337] Bluetooth: hci0: command tx timeout [ 87.188725][ T13] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xfcf03e3b0b760edc680c540494bbac365df44223a091eabbf5846f39f75fca31 level 0, ignored [ 87.254672][ T5370] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 87.259328][ T5370] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 87.264436][ T5370] BTRFS error (device loop0 state S): failed to load root extent [ 87.287343][ T5370] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 87.291940][ T5370] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 87.296121][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.300704][ T5370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.305525][ T5370] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 87.308046][ T5370] Code: 24 e8 d3 40 00 fe c6 05 99 fe cd 0b 01 48 c7 c7 e0 2a cd 8b be 4b 03 00 00 48 c7 c2 20 2b cd 8b e8 24 0b de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 50 2d 65 fe 4d 8b 2c 24 e8 37 44 [ 87.319056][ T5370] RSP: 0000:ffffc9000d4bf800 EFLAGS: 00010287 [ 87.321697][ T5370] RAX: 0000000000000003 RBX: ffffffff83bf79ee RCX: 0000000000100000 [ 87.325076][ T5370] RDX: ffffc90020001000 RSI: 0000000000015d9b RDI: 0000000000015d9c [ 87.328596][ T5370] RBP: ffffc9000d4bf8c0 R08: 0000000000000000 R09: ffffffff83bf79ee [ 87.333172][ T5370] R10: dffffc0000000000 R11: ffffed100a4f400e R12: 0000000000000018 [ 87.337208][ T5370] R13: ffff888032e98000 R14: dffffc0000000000 R15: 0000000000000001 [ 87.341343][ T5370] FS: 00007f3d593b76c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 87.345229][ T5370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.348151][ T5370] CR2: 00007f70fed39620 CR3: 00000000436be000 CR4: 0000000000352ef0 [ 87.352941][ T5370] Call Trace: [ 87.354744][ T5370] [ 87.356402][ T5370] ? _raw_read_unlock+0x28/0x50 [ 87.358824][ T5370] ? __pfx_btrfs_root_node+0x10/0x10 [ 87.361354][ T5370] ? __pfx_btrfs_extent_root+0x10/0x10 [ 87.363924][ T5370] ? rcu_is_watching+0x15/0xb0 [ 87.365931][ T5370] btrfs_read_lock_root_node+0x27/0xd0 [ 87.369115][ T5370] btrfs_build_ref_tree+0x113/0x1680 [ 87.373272][ T5370] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.375541][ T5370] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.378180][ T5370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.381125][ T5370] ? __pfx_btrfs_read_qgroup_config+0x10/0x10 [ 87.383751][ T5370] ? do_raw_spin_unlock+0x4d/0x240 [ 87.385999][ T5370] ? __pfx_btrfs_build_ref_tree+0x10/0x10 [ 87.388743][ T5370] ? try_to_wake_up+0x7f5/0x12b0 [ 87.390996][ T5370] ? btrfs_check_active_zone_reservation+0x96/0x4b0 [ 87.394201][ T5370] open_ctree+0x2504/0x3a10 [ 87.396372][ T5370] ? bdi_register_va+0x58d/0x740 [ 87.398590][ T5370] ? open_ctree+0xa1a/0x3a10 [ 87.400592][ T5370] ? __pfx_open_ctree+0x10/0x10 [ 87.402859][ T5370] btrfs_get_tree+0xf55/0x1820 [ 87.405677][ T5370] vfs_get_tree+0x92/0x2b0 [ 87.408063][ T5370] do_new_mount+0x2a2/0x9e0 [ 87.410097][ T5370] ? ns_capable+0x8a/0xf0 [ 87.412081][ T5370] ? __pfx_do_new_mount+0x10/0x10 [ 87.414344][ T5370] ? path_mount+0x61c/0xfe0 [ 87.416733][ T5370] ? user_path_at+0x44/0x60 [ 87.419059][ T5370] __se_sys_mount+0x317/0x410 [ 87.421229][ T5370] ? __pfx___se_sys_mount+0x10/0x10 [ 87.423613][ T5370] ? do_syscall_64+0xbe/0x3b0 [ 87.425690][ T5370] ? __x64_sys_mount+0x20/0xc0 [ 87.427918][ T5370] do_syscall_64+0xfa/0x3b0 [ 87.429928][ T5370] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.432320][ T5370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.435259][ T5370] ? clear_bhb_loop+0x60/0xb0 [ 87.437559][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.440309][ T5370] RIP: 0033:0x7f3d5859038a [ 87.442422][ T5370] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.451203][ T5370] RSP: 002b:00007f3d593b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.454953][ T5370] RAX: ffffffffffffffda RBX: 00007f3d593b6ef0 RCX: 00007f3d5859038a [ 87.458507][ T5370] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007f3d593b6eb0 [ 87.462251][ T5370] RBP: 0000200000000080 R08: 00007f3d593b6ef0 R09: 000000000001c005 [ 87.466135][ T5370] R10: 000000000001c005 R11: 0000000000000246 R12: 0000200000000040 [ 87.470361][ T5370] R13: 00007f3d593b6eb0 R14: 00000000000055ae R15: 00002000000000c0 [ 87.474135][ T5370] [ 87.475679][ T5370] Modules linked in: [ 87.478314][ T5370] ---[ end trace 0000000000000000 ]--- [ 87.480760][ T5370] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 87.483786][ T5370] Code: 24 e8 d3 40 00 fe c6 05 99 fe cd 0b 01 48 c7 c7 e0 2a cd 8b be 4b 03 00 00 48 c7 c2 20 2b cd 8b e8 24 0b de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 50 2d 65 fe 4d 8b 2c 24 e8 37 44 [ 87.493352][ T5370] RSP: 0000:ffffc9000d4bf800 EFLAGS: 00010287 [ 87.497075][ T5370] RAX: 0000000000000003 RBX: ffffffff83bf79ee RCX: 0000000000100000 [ 87.501742][ T5370] RDX: ffffc90020001000 RSI: 0000000000015d9b RDI: 0000000000015d9c [ 87.505637][ T5370] RBP: ffffc9000d4bf8c0 R08: 0000000000000000 R09: ffffffff83bf79ee [ 87.509233][ T5370] R10: dffffc0000000000 R11: ffffed100a4f400e R12: 0000000000000018 [ 87.512609][ T5370] R13: ffff888032e98000 R14: dffffc0000000000 R15: 0000000000000001 [ 87.516146][ T5370] FS: 00007f3d593b76c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 87.519909][ T5370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.522806][ T5370] CR2: 00007f70fed39620 CR3: 00000000436be000 CR4: 0000000000352ef0 [ 87.526856][ T5370] Kernel panic - not syncing: Fatal exception [ 87.530958][ T5370] Kernel Offset: disabled [ 87.533405][ T5370] Rebooting in 86400 seconds..