Warning: Permanently added '[localhost]:31104' (ED25519) to the list of known hosts. 2025/09/01 06:19:04 parsed 1 programs syzkaller login: [ 84.801874][ T5345] cgroup: Unknown subsys name 'net' [ 84.889452][ T5345] cgroup: Unknown subsys name 'cpuset' [ 84.901767][ T5345] cgroup: Unknown subsys name 'rlimit' [ 86.654888][ T5345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.953706][ T5364] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.064521][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.069301][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.072959][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.076948][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.080008][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.859538][ T9] cfg80211: failed to load regulatory.db [ 92.467372][ T5391] chnl_net:caif_netlink_parms(): no params data found [ 92.535356][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.540131][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.543341][ T5391] bridge_slave_0: entered allmulticast mode [ 92.547973][ T5391] bridge_slave_0: entered promiscuous mode [ 92.552370][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.556443][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.559549][ T5391] bridge_slave_1: entered allmulticast mode [ 92.563665][ T5391] bridge_slave_1: entered promiscuous mode [ 92.589753][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.597357][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.622369][ T5391] team0: Port device team_slave_0 added [ 92.627261][ T5391] team0: Port device team_slave_1 added [ 92.649484][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.652101][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.664270][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.671016][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.673988][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.686433][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.722240][ T5391] hsr_slave_0: entered promiscuous mode [ 92.725373][ T5391] hsr_slave_1: entered promiscuous mode [ 92.874328][ T5391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.884078][ T5391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.891720][ T5391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.901250][ T5391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.931697][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.936275][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.940597][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.943560][ T5391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.006811][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.020524][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.028493][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.040763][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.050355][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053341][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.070575][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.073711][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.254337][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.316363][ T5391] veth0_vlan: entered promiscuous mode [ 93.323810][ T5391] veth1_vlan: entered promiscuous mode [ 93.354384][ T5391] veth0_macvtap: entered promiscuous mode [ 93.362228][ T5391] veth1_macvtap: entered promiscuous mode [ 93.380934][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.392641][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.402695][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423141][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.440085][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.457782][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562351][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.634289][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.694474][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.775370][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.864169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.871306][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.911711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.915165][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.062784][ T1038] bridge_slave_1: left allmulticast mode [ 96.076181][ T1038] bridge_slave_1: left promiscuous mode [ 96.079800][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.147363][ T1038] bridge_slave_0: left allmulticast mode [ 96.149937][ T1038] bridge_slave_0: left promiscuous mode [ 96.152646][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.774312][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.781559][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.787396][ T1038] bond0 (unregistering): Released all slaves [ 96.913406][ T1038] hsr_slave_0: left promiscuous mode [ 96.947698][ T1038] hsr_slave_1: left promiscuous mode [ 96.951051][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.954428][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.988066][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.991478][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.057499][ T1038] veth1_macvtap: left promiscuous mode [ 97.059835][ T1038] veth0_macvtap: left promiscuous mode [ 97.063372][ T1038] veth1_vlan: left promiscuous mode [ 97.073755][ T1038] veth0_vlan: left promiscuous mode 2025/09/01 06:19:19 executed programs: 0 [ 97.682798][ T4702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.686879][ T4702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.691533][ T4702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.700671][ T4702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.704993][ T4702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.749049][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 97.772061][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 98.674713][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 98.999792][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.019379][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.022601][ T5468] bridge_slave_0: entered allmulticast mode [ 99.046436][ T5468] bridge_slave_0: entered promiscuous mode [ 99.057320][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.060786][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.064662][ T5468] bridge_slave_1: entered allmulticast mode [ 99.101693][ T5468] bridge_slave_1: entered promiscuous mode [ 99.227823][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.308207][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.356629][ T5468] team0: Port device team_slave_0 added [ 99.378655][ T5468] team0: Port device team_slave_1 added [ 99.437045][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.440091][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.466712][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.487538][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.491230][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.521518][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.621450][ T5468] hsr_slave_0: entered promiscuous mode [ 99.624848][ T5468] hsr_slave_1: entered promiscuous mode [ 99.776648][ T4702] Bluetooth: hci0: command tx timeout [ 100.131121][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.149245][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.166116][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.181164][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.343673][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.382193][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.401795][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.404659][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.422862][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.426672][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.756186][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.837751][ T5468] veth0_vlan: entered promiscuous mode [ 100.844744][ T5468] veth1_vlan: entered promiscuous mode [ 100.897905][ T5468] veth0_macvtap: entered promiscuous mode [ 100.903223][ T5468] veth1_macvtap: entered promiscuous mode [ 100.949020][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.978389][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.006788][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.010805][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.014706][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.031168][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.130444][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.133605][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.198344][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.201393][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.628155][ T5524] loop0: detected capacity change from 0 to 32768 [ 101.651485][ T5524] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5524) [ 101.714506][ T5524] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 101.733759][ T5524] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.746436][ T5524] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.856091][ T4702] Bluetooth: hci0: command tx timeout [ 101.862401][ T5524] BTRFS info (device loop0): rebuilding free space tree [ 101.926910][ T5524] BTRFS info (device loop0): disabling free space tree [ 101.929871][ T5524] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.934049][ T5524] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.978314][ T5524] BTRFS info (device loop0): setting nodatasum [ 101.981343][ T5524] BTRFS info (device loop0): enabling ssd optimizations [ 101.984273][ T5524] BTRFS info (device loop0): enabling disk space caching [ 102.020009][ T5524] BTRFS info (device loop0): force clearing of disk cache [ 102.022977][ T5524] BTRFS info (device loop0): force zlib compression, level 3 [ 102.087625][ T5524] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..9223372036854775807,limit=10376293541461622786,limit=2..2415919104 [ 102.123297][ T5524] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 102.136945][ T5524] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 102.141185][ T5524] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 102.147179][ T5524] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 102.150995][ T5524] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 102.154262][ T5524] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 102.157729][ T5524] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 102.160983][ T5524] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 102.198979][ T5524] BTRFS error (device loop0): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 102.216441][ T5524] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2240512 free, is full [ 102.221179][ T5524] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 102.227080][ T5524] BTRFS info (device loop0): global_block_rsv: size 983040 reserved 983040 [ 102.230742][ T5524] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 102.234025][ T5524] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 102.237452][ T5524] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 102.240829][ T5524] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 102.277476][ T5524] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 102.284378][ T5524] BTRFS critical (device loop0): entry offset 5242880, bytes 12288, bitmap no [ 102.288533][ T5524] BTRFS critical (device loop0): entry offset 5259264, bytes 8192, bitmap no [ 102.292101][ T5524] BTRFS critical (device loop0): entry offset 5271552, bytes 16384, bitmap no [ 102.295889][ T5524] BTRFS critical (device loop0): entry offset 5316608, bytes 36864, bitmap no [ 102.299575][ T5524] BTRFS critical (device loop0): entry offset 5357568, bytes 12288, bitmap no [ 102.303181][ T5524] BTRFS critical (device loop0): entry offset 5378048, bytes 1503232, bitmap no [ 102.319796][ T5524] BTRFS info (device loop0): block group has cluster?: no [ 102.322564][ T5524] BTRFS info (device loop0): 6 free space entries at or bigger than 4096 bytes [ 102.330025][ T5524] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 102.340151][ T5524] BTRFS critical (device loop0): entry offset 6881280, bytes 1638400, bitmap no [ 102.343813][ T5524] BTRFS info (device loop0): block group has cluster?: no [ 102.348638][ T5524] BTRFS info (device loop0): 1 free space entries at or bigger than 4096 bytes [ 102.352223][ T5524] BTRFS info (device loop0): 3227648 bytes available across all block groups [ 102.357188][ T5524] ------------[ cut here ]------------ [ 102.359666][ T5524] BTRFS: Transaction aborted (error -28) [ 102.362186][ T5524] WARNING: CPU: 0 PID: 5524 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.367625][ T5524] Modules linked in: [ 102.370915][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.374739][ T5524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.379380][ T5524] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.382485][ T5524] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 102.390530][ T5524] RSP: 0018:ffffc9000ca2f6e0 EFLAGS: 00010246 [ 102.393247][ T5524] RAX: 4e3b251450b25f00 RBX: ffff888059f90001 RCX: ffff8880007a4880 [ 102.396652][ T5524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.399887][ T5524] RBP: ffffc9000ca2f948 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 102.403210][ T5524] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 102.406779][ T5524] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88804d9cc000 [ 102.410209][ T5524] FS: 0000555582190500(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 102.414067][ T5524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.417371][ T5524] CR2: 0000556f8de86138 CR3: 00000000514e1000 CR4: 0000000000352ef0 [ 102.420391][ T5524] Call Trace: [ 102.421825][ T5524] [ 102.423191][ T5524] ? _raw_spin_unlock+0x28/0x50 [ 102.426723][ T5524] ? kfree+0x18e/0x440 [ 102.428624][ T5524] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 102.431997][ T5524] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 102.434925][ T5524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.437608][ T5524] ? do_raw_spin_unlock+0x4d/0x240 [ 102.439681][ T5524] ? _raw_spin_unlock+0x28/0x50 [ 102.441824][ T5524] __btrfs_end_transaction+0x140/0x640 [ 102.444470][ T5524] btrfs_inc_block_group_ro+0x641/0x6f0 [ 102.446901][ T5524] btrfs_relocate_block_group+0x3f1/0xc60 [ 102.449351][ T5524] btrfs_relocate_chunk+0x12f/0x5c0 [ 102.451589][ T5524] __btrfs_balance+0x1860/0x23f0 [ 102.453789][ T5524] ? __pfx___btrfs_balance+0x10/0x10 [ 102.456096][ T5524] ? __wait_for_common+0x650/0x710 [ 102.458253][ T5524] ? do_raw_spin_unlock+0x4d/0x240 [ 102.460387][ T5524] btrfs_balance+0xac2/0x11b0 [ 102.462483][ T5524] btrfs_ioctl_balance+0x3d3/0x610 [ 102.464743][ T5524] ? btrfs_ioctl+0xb19/0xd00 [ 102.466834][ T5524] ? __pfx_btrfs_ioctl+0x10/0x10 [ 102.469007][ T5524] __se_sys_ioctl+0xf9/0x170 [ 102.471292][ T5524] do_syscall_64+0xfa/0x3b0 [ 102.473260][ T5524] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.475340][ T5524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.478006][ T5524] ? clear_bhb_loop+0x60/0xb0 [ 102.479916][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.482333][ T5524] RIP: 0033:0x7f6c4878ebe9 [ 102.484146][ T5524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.492294][ T5524] RSP: 002b:00007ffdcfbf2298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.495914][ T5524] RAX: ffffffffffffffda RBX: 00007f6c489c5fa0 RCX: 00007f6c4878ebe9 [ 102.499207][ T5524] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 102.502408][ T5524] RBP: 00007f6c48811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.505740][ T5524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.509449][ T5524] R13: 00007f6c489c5fa0 R14: 00007f6c489c5fa0 R15: 0000000000000003 [ 102.512913][ T5524] [ 102.514313][ T5524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.517014][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.520537][ T5524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.524722][ T5524] Call Trace: [ 102.526206][ T5524] [ 102.527464][ T5524] dump_stack_lvl+0x99/0x250 [ 102.529153][ T5524] ? __asan_memcpy+0x40/0x70 [ 102.530935][ T5524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.533132][ T5524] ? __pfx__printk+0x10/0x10 [ 102.535200][ T5524] vpanic+0x281/0x750 [ 102.537022][ T5524] ? __pfx__printk+0x10/0x10 [ 102.539085][ T5524] ? __pfx_vpanic+0x10/0x10 [ 102.541108][ T5524] ? is_bpf_text_address+0x26/0x2b0 [ 102.543220][ T5524] panic+0xb9/0xc0 [ 102.544816][ T5524] ? __pfx_panic+0x10/0x10 [ 102.546755][ T5524] __warn+0x31b/0x4b0 [ 102.548507][ T5524] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.551342][ T5524] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.554177][ T5524] report_bug+0x2be/0x4f0 [ 102.556063][ T5524] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.558798][ T5524] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.561589][ T5524] ? btrfs_create_pending_block_groups+0x1152/0x1780 [ 102.564269][ T5524] handle_bug+0x84/0x160 [ 102.565905][ T5524] exc_invalid_op+0x1a/0x50 [ 102.567691][ T5524] asm_exc_invalid_op+0x1a/0x20 [ 102.569664][ T5524] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.572532][ T5524] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 102.580589][ T5524] RSP: 0018:ffffc9000ca2f6e0 EFLAGS: 00010246 [ 102.583263][ T5524] RAX: 4e3b251450b25f00 RBX: ffff888059f90001 RCX: ffff8880007a4880 [ 102.586527][ T5524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.589720][ T5524] RBP: ffffc9000ca2f948 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 102.592995][ T5524] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 102.596378][ T5524] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88804d9cc000 [ 102.599769][ T5524] ? _raw_spin_unlock+0x28/0x50 [ 102.601946][ T5524] ? kfree+0x18e/0x440 [ 102.603729][ T5524] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 102.606745][ T5524] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 102.609254][ T5524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.611923][ T5524] ? do_raw_spin_unlock+0x4d/0x240 [ 102.614345][ T5524] ? _raw_spin_unlock+0x28/0x50 [ 102.616529][ T5524] __btrfs_end_transaction+0x140/0x640 [ 102.618847][ T5524] btrfs_inc_block_group_ro+0x641/0x6f0 [ 102.621251][ T5524] btrfs_relocate_block_group+0x3f1/0xc60 [ 102.623897][ T5524] btrfs_relocate_chunk+0x12f/0x5c0 [ 102.626105][ T5524] __btrfs_balance+0x1860/0x23f0 [ 102.628404][ T5524] ? __pfx___btrfs_balance+0x10/0x10 [ 102.630560][ T5524] ? __wait_for_common+0x650/0x710 [ 102.633005][ T5524] ? do_raw_spin_unlock+0x4d/0x240 [ 102.635065][ T5524] btrfs_balance+0xac2/0x11b0 [ 102.636985][ T5524] btrfs_ioctl_balance+0x3d3/0x610 [ 102.639146][ T5524] ? btrfs_ioctl+0xb19/0xd00 [ 102.641102][ T5524] ? __pfx_btrfs_ioctl+0x10/0x10 [ 102.643083][ T5524] __se_sys_ioctl+0xf9/0x170 [ 102.645046][ T5524] do_syscall_64+0xfa/0x3b0 [ 102.646962][ T5524] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.649161][ T5524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.651727][ T5524] ? clear_bhb_loop+0x60/0xb0 [ 102.653843][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.656406][ T5524] RIP: 0033:0x7f6c4878ebe9 [ 102.658550][ T5524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.666978][ T5524] RSP: 002b:00007ffdcfbf2298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.670434][ T5524] RAX: ffffffffffffffda RBX: 00007f6c489c5fa0 RCX: 00007f6c4878ebe9 [ 102.673778][ T5524] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 102.677243][ T5524] RBP: 00007f6c48811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.680536][ T5524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.683937][ T5524] R13: 00007f6c489c5fa0 R14: 00007f6c489c5fa0 R15: 0000000000000003 [ 102.687453][ T5524] [ 102.689186][ T5524] Kernel Offset: disabled [ 102.691075][ T5524] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:19:24 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000ca2ee30 R8 =ffff888033938237 R9 =1ffff11006727046 R10=dffffc0000000000 R11=ffffffff8550ca40 R12=dffffc0000000000 R13=ffffffff99b088ea R14=ffffffff99dfd820 R15=0000000000000000 RIP=ffffffff8550cabc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555582190500 ffffffff 00c00000 GS =0000 ffff88808d20d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556f8de86138 CR3=00000000514e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000330 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdca6d36fb 00007ffdca6d36fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdca6d3c00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdca6d3c00 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c206563697665 6428206c61636974 6972632053465254 42205d3432353500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6566206563637665 6422206661636374 6372632053465254 4220573432353500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6120736574796220 3834363732323320 3a2930706f6f6c20 6563697665642820 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029656c62616c69 6176612073657479 6220303034383336 312820656c626173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756e755f656e6f7a 2030207265707573 203020636f6c6c61 6c65642030206465 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7672657365722030 2064656e6e697020 3020646573752030 202c736574796220 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030343833363120 7361682030383231 3838362070756f72 67206b636f6c6220 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000