[ 81.396745][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:45575' (ED25519) to the list of known hosts. executing program [ 155.753859][ T5110] loop0: detected capacity change from 0 to 32768 [ 155.774271][ T5110] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor381 (5110) [ 155.812578][ T5110] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 155.821674][ T5110] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 155.825961][ T5110] BTRFS info (device loop0 state S): using free-space-tree [ 155.839568][ T5110] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 155.845062][ T5110] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 155.863067][ T5110] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 155.873014][ T5110] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 155.882377][ T5110] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 155.900083][ T5110] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 155.905014][ T5110] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 155.969009][ T5110] workqueue: max_active 32767 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 155.974113][ T5110] BTRFS info (device loop0 state CS): scrub: started on devid 1 [ 155.979975][ T5110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000041: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 155.984588][ T5110] KASAN: null-ptr-deref in range [0x0000000000000208-0x000000000000020f] [ 155.988555][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz-executor381 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 155.992549][ T5110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.996524][ T5110] RIP: 0010:btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 155.999071][ T5110] Code: 8c 24 a8 00 00 00 42 c7 44 31 08 f3 f3 f3 f3 e8 d2 83 e1 fd 48 89 9c 24 88 00 00 00 48 81 c3 08 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9d 39 4b fe 4c 8b 2b ba 11 00 00 [ 156.006380][ T5110] RSP: 0018:ffffc9000af5f100 EFLAGS: 00010206 [ 156.008666][ T5110] RAX: 0000000000000041 RBX: 0000000000000208 RCX: ffff888000cf2440 [ 156.011642][ T5110] RDX: 0000000000000000 RSI: ffff888047132080 RDI: 0000000000000000 [ 156.014494][ T5110] RBP: ffffc9000af5f290 R08: ffff88801fb3c800 R09: ffffc9000af5f420 [ 156.017347][ T5110] R10: dffffc0000000000 R11: ffffed1008e2402e R12: 0000000000500000 [ 156.020167][ T5110] R13: ffffc9000af5f420 R14: dffffc0000000000 R15: 0000000000500000 [ 156.023101][ T5110] FS: 00005555764d5480(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 156.026267][ T5110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.028492][ T5110] CR2: 000055572fc64400 CR3: 0000000040a06000 CR4: 0000000000352ef0 [ 156.031317][ T5110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.034211][ T5110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.037160][ T5110] Call Trace: [ 156.038359][ T5110] [ 156.039474][ T5110] ? __die_body+0x5f/0xb0 [ 156.041068][ T5110] ? die_addr+0xb0/0xe0 [ 156.042598][ T5110] ? exc_general_protection+0x3dd/0x5d0 [ 156.044661][ T5110] ? asm_exc_general_protection+0x26/0x30 [ 156.046756][ T5110] ? btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 156.048930][ T5110] ? __pfx_btrfs_get_64+0x10/0x10 [ 156.050791][ T5110] ? read_extent_buffer+0x11b/0x440 [ 156.052784][ T5110] ? get_extent_info+0x2fa/0x450 [ 156.054668][ T5110] ? __pfx_btrfs_lookup_csums_bitmap+0x10/0x10 [ 156.057003][ T5110] ? __lock_acquire+0x1384/0x2050 [ 156.058800][ T5110] scrub_find_fill_first_stripe+0xe96/0x1200 [ 156.060971][ T5110] ? __pfx_scrub_find_fill_first_stripe+0x10/0x10 [ 156.063222][ T5110] ? scrub_simple_mirror+0x33e/0x960 [ 156.065145][ T5110] ? do_raw_spin_lock+0x14f/0x370 [ 156.066975][ T5110] ? __pfx_lock_release+0x10/0x10 [ 156.068820][ T5110] ? do_raw_spin_unlock+0x58/0x8b0 [ 156.070657][ T5110] scrub_simple_mirror+0x5c6/0x960 [ 156.072555][ T5110] scrub_stripe+0xa7a/0x2a60 [ 156.074292][ T5110] ? mark_lock+0x9a/0x360 [ 156.075656][ T5110] ? __lock_acquire+0x1384/0x2050 [ 156.077248][ T5110] ? mark_lock+0x9a/0x360 [ 156.078640][ T5110] ? __pfx_scrub_stripe+0x10/0x10 [ 156.080543][ T5110] ? mark_lock+0x9a/0x360 [ 156.082160][ T5110] ? __lock_acquire+0x1384/0x2050 [ 156.084076][ T5110] ? __pfx_lock_acquire+0x10/0x10 [ 156.085960][ T5110] ? btrfs_find_chunk_map+0x41/0x50 [ 156.087904][ T5110] ? __pfx_lock_release+0x10/0x10 [ 156.089744][ T5110] ? lockdep_hardirqs_on+0x99/0x150 [ 156.091499][ T5110] ? do_raw_read_unlock+0x3c/0x80 [ 156.093273][ T5110] ? _raw_read_unlock+0x28/0x50 [ 156.095105][ T5110] scrub_chunk+0x2e3/0x470 [ 156.096784][ T5110] scrub_enumerate_chunks+0xc4f/0x16a0 [ 156.098840][ T5110] ? __pfx_scrub_enumerate_chunks+0x10/0x10 [ 156.101167][ T5110] ? do_raw_spin_lock+0x14f/0x370 [ 156.103112][ T5110] ? do_raw_spin_unlock+0x58/0x8b0 [ 156.104951][ T5110] btrfs_scrub_dev+0x774/0xde0 [ 156.106656][ T5110] ? __pfx_btrfs_scrub_dev+0x10/0x10 [ 156.108714][ T5110] ? __might_fault+0xc6/0x120 [ 156.110594][ T5110] ? _copy_from_user+0xa6/0xe0 [ 156.112558][ T5110] btrfs_ioctl_scrub+0x236/0x370 [ 156.114601][ T5110] ? __pfx_btrfs_ioctl+0x10/0x10 [ 156.116590][ T5110] __se_sys_ioctl+0xf9/0x170 [ 156.118374][ T5110] do_syscall_64+0xf3/0x230 [ 156.120077][ T5110] ? clear_bhb_loop+0x35/0x90 [ 156.121816][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.124042][ T5110] RIP: 0033:0x7f4e99a28f19 [ 156.125928][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 156.133137][ T5110] RSP: 002b:00007ffcb799b9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.136017][ T5110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e99a28f19 [ 156.138771][ T5110] RDX: 0000000020000000 RSI: 00000000c400941b RDI: 0000000000000004 [ 156.141752][ T5110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.144759][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb799ba00 [ 156.147873][ T5110] R13: 00007ffcb799bc88 R14: 431bde82d7b634db R15: 00007f4e99a7103b [ 156.150835][ T5110] [ 156.152045][ T5110] Modules linked in: [ 156.153871][ T5110] ---[ end trace 0000000000000000 ]--- [ 156.162050][ T5110] RIP: 0010:btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 156.164555][ T5110] Code: 8c 24 a8 00 00 00 42 c7 44 31 08 f3 f3 f3 f3 e8 d2 83 e1 fd 48 89 9c 24 88 00 00 00 48 81 c3 08 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9d 39 4b fe 4c 8b 2b ba 11 00 00 [ 156.171997][ T5110] RSP: 0018:ffffc9000af5f100 EFLAGS: 00010206 [ 156.174264][ T5110] RAX: 0000000000000041 RBX: 0000000000000208 RCX: ffff888000cf2440 [ 156.177207][ T5110] RDX: 0000000000000000 RSI: ffff888047132080 RDI: 0000000000000000 [ 156.180098][ T5110] RBP: ffffc9000af5f290 R08: ffff88801fb3c800 R09: ffffc9000af5f420 [ 156.183530][ T5110] R10: dffffc0000000000 R11: ffffed1008e2402e R12: 0000000000500000 [ 156.186380][ T5110] R13: ffffc9000af5f420 R14: dffffc0000000000 R15: 0000000000500000 [ 156.189339][ T5110] FS: 00005555764d5480(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 156.193128][ T5110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.195589][ T5110] CR2: 000055572fc64400 CR3: 0000000040a06000 CR4: 0000000000352ef0 [ 156.198596][ T5110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.201741][ T5110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.204751][ T5110] Kernel panic - not syncing: Fatal exception [ 156.207500][ T5110] Kernel Offset: disabled [ 156.209141][ T5110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:25:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000af5e830 R8 =ffffffff854a5d3b R9 =1ffff11003d72046 R10=dffffc0000000000 R11=ffffffff854a5cf0 R12=dffffc0000000000 R13=ffffffff9a410f18 R14=0000000000000030 R15=00000000000003f8 RIP=ffffffff854a5d6e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555764d5480 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055572fc64400 CR3=0000000040a06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb799b9e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000