program: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1802002, &(0x7f0000001b80)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES8=0x0], 0x0, 0x2e7, &(0x7f0000000280)="$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") (async) socket$inet_sctp(0x2, 0x5, 0x84) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) r3 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64=r2], 0x2b) (async) sendfile(r5, r3, 0x0, 0x4000000053d2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="ffca5f73584790b1b33dc6f969b957a12e972c7788fbc9c63c5082b1c665d5ada7092a67f64c33e07c7d01129bc85f6cafdd9aac2084b9ab4550803fdf1db995b424eddc3000c0426e24"], 0x30}}, 0x0) (async) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1c005, &(0x7f0000000180)={[{@skip_balance}, {@autodefrag}, {@noacl}, {@treelog}, {@rescue={'rescue', 0x3d, 'ibadroots'}}, {@ref_verify}, {@nodiscard}, {@compress_force}, {@acl}, {@discard_async}, {@datasum}, {@thread_pool={'thread_pool', 0x3d, 0x6}}]}, 0x9, 0x55cb, &(0x7f0000007900)="$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") [ 74.616983][ T5335] Bluetooth: hci0: command tx timeout [ 74.669976][ T5358] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.690596][ T5358] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 74.713283][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.0'. [ 74.914922][ T5359] loop0: detected capacity change from 0 to 32768 [ 74.933916][ T5359] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5359) [ 74.972319][ T5359] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.987686][ T5359] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 74.992119][ T5359] BTRFS info (device loop0): using free-space-tree [ 75.061372][ T1042] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 75.085906][ T5359] BTRFS error (device loop0): failed to load root extent [ 75.097649][ T1044] BTRFS warning (device loop0): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 75.127150][ T5359] BTRFS error (device loop0): failed to load root free space [ 75.131568][ T1042] BTRFS warning (device loop0): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0 [ 75.154097][ T1044] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 75.182767][ T5359] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 75.188738][ T5359] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 75.192898][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 75.198408][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.203275][ T5359] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 75.205904][ T5359] Code: 24 e8 d3 d2 00 fe c6 05 99 45 ce 0b 01 48 c7 c7 20 1c cd 8b be 4b 03 00 00 48 c7 c2 60 1c cd 8b e8 54 9d de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 d0 bb 65 fe 4d 8b 2c 24 e8 17 a6 [ 75.215542][ T5359] RSP: 0018:ffffc9000fd8f800 EFLAGS: 00010293 [ 75.218434][ T5359] RAX: 0000000000000003 RBX: ffffffff83bee80e RCX: ffff88803d9ac880 [ 75.221830][ T5359] RDX: 0000000000000000 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 75.225199][ T5359] RBP: ffffc9000fd8f8c0 R08: 0000000000000000 R09: ffffffff83bee80e [ 75.228718][ T5359] R10: dffffc0000000000 R11: ffffed100a5f980e R12: 0000000000000018 [ 75.232566][ T5359] R13: ffff88803e870000 R14: dffffc0000000000 R15: 0000000000000001 [ 75.236871][ T5359] FS: 00007fd5e101c6c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 75.241023][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.244053][ T5359] CR2: 000056176a8265f8 CR3: 000000003f855000 CR4: 0000000000352ef0 [ 75.247601][ T5359] Call Trace: [ 75.249079][ T5359] [ 75.250438][ T5359] ? _raw_read_unlock+0x28/0x50 [ 75.252654][ T5359] ? __pfx_btrfs_root_node+0x10/0x10 [ 75.255372][ T5359] ? __pfx_btrfs_extent_root+0x10/0x10 [ 75.258278][ T5359] ? rcu_is_watching+0x15/0xb0 [ 75.260378][ T5359] btrfs_read_lock_root_node+0x27/0xd0 [ 75.262772][ T5359] btrfs_build_ref_tree+0x113/0x1680 [ 75.264930][ T5359] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 75.267436][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.269799][ T5359] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.272841][ T5359] ? __pfx_btrfs_read_qgroup_config+0x10/0x10 [ 75.275844][ T5359] ? do_raw_spin_unlock+0x4d/0x240 [ 75.278245][ T5359] ? __pfx_btrfs_build_ref_tree+0x10/0x10 [ 75.280856][ T5359] ? try_to_wake_up+0x7f5/0x12b0 [ 75.283123][ T5359] ? btrfs_check_active_zone_reservation+0x96/0x4b0 [ 75.286044][ T5359] open_ctree+0x2504/0x3a10 [ 75.287992][ T5359] ? bdi_register_va+0x58d/0x740 [ 75.289977][ T5359] ? open_ctree+0xa1a/0x3a10 [ 75.292081][ T5359] ? __pfx_open_ctree+0x10/0x10 [ 75.294321][ T5359] btrfs_get_tree+0xf55/0x1820 [ 75.296517][ T5359] vfs_get_tree+0x92/0x2b0 [ 75.298657][ T5359] do_new_mount+0x2a2/0x9e0 [ 75.300703][ T5359] ? ns_capable+0x8a/0xf0 [ 75.302630][ T5359] ? __pfx_do_new_mount+0x10/0x10 [ 75.304851][ T5359] ? path_mount+0x61c/0xfe0 [ 75.306841][ T5359] ? user_path_at+0x44/0x60 [ 75.308767][ T5359] __se_sys_mount+0x317/0x410 [ 75.310803][ T5359] ? __pfx___se_sys_mount+0x10/0x10 [ 75.313219][ T5359] ? do_syscall_64+0xbe/0x3b0 [ 75.315609][ T5359] ? __x64_sys_mount+0x20/0xc0 [ 75.317784][ T5359] do_syscall_64+0xfa/0x3b0 [ 75.319741][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.322123][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.324862][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 75.327063][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.329708][ T5359] RIP: 0033:0x7fd5e019038a [ 75.331710][ T5359] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.340228][ T5359] RSP: 002b:00007fd5e101be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.343933][ T5359] RAX: ffffffffffffffda RBX: 00007fd5e101bef0 RCX: 00007fd5e019038a [ 75.347500][ T5359] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007fd5e101beb0 [ 75.351079][ T5359] RBP: 00002000000000c0 R08: 00007fd5e101bef0 R09: 000000000001c005 [ 75.354807][ T5359] R10: 000000000001c005 R11: 0000000000000246 R12: 0000200000000040 [ 75.358288][ T5359] R13: 00007fd5e101beb0 R14: 00000000000055cb R15: 0000200000000180 [ 75.361485][ T5359] [ 75.362902][ T5359] Modules linked in: [ 75.365273][ T5359] ---[ end trace 0000000000000000 ]--- [ 75.386784][ T5359] RIP: 0010:btrfs_root_node+0x151/0x4a0 [ 75.389506][ T5359] Code: 24 e8 d3 d2 00 fe c6 05 99 45 ce 0b 01 48 c7 c7 20 1c cd 8b be 4b 03 00 00 48 c7 c2 60 1c cd 8b e8 54 9d de fd 48 8b 44 24 18 <42> 80 3c 30 00 74 08 4c 89 e7 e8 d0 bb 65 fe 4d 8b 2c 24 e8 17 a6 [ 75.398369][ T5359] RSP: 0018:ffffc9000fd8f800 EFLAGS: 00010293 [ 75.400817][ T5359] RAX: 0000000000000003 RBX: ffffffff83bee80e RCX: ffff88803d9ac880 [ 75.404183][ T5359] RDX: 0000000000000000 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 75.408310][ T5359] RBP: ffffc9000fd8f8c0 R08: 0000000000000000 R09: ffffffff83bee80e [ 75.411903][ T5359] R10: dffffc0000000000 R11: ffffed100a5f980e R12: 0000000000000018 [ 75.418528][ T5359] R13: ffff88803e870000 R14: dffffc0000000000 R15: 0000000000000001 [ 75.422718][ T5359] FS: 00007fd5e101c6c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 75.428552][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.431623][ T5359] CR2: 00005633166516a0 CR3: 000000003f855000 CR4: 0000000000352ef0 [ 75.435488][ T5359] Kernel panic - not syncing: Fatal exception [ 75.438734][ T5359] Kernel Offset: disabled [ 75.440909][ T5359] Rebooting in 86400 seconds..