Warning: Permanently added '[localhost]:64552' (ED25519) to the list of known hosts. 2025/09/01 15:27:33 parsed 1 programs syzkaller login: [ 88.008498][ T5350] cgroup: Unknown subsys name 'net' [ 88.098398][ T5350] cgroup: Unknown subsys name 'cpuset' [ 88.104200][ T5350] cgroup: Unknown subsys name 'rlimit' [ 89.854390][ T5350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.924970][ T55] cfg80211: failed to load regulatory.db [ 94.128646][ T5366] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.701055][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 95.775021][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.778987][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.782282][ T5393] bridge_slave_0: entered allmulticast mode [ 95.787960][ T5393] bridge_slave_0: entered promiscuous mode [ 95.793434][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.797073][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.800386][ T5393] bridge_slave_1: entered allmulticast mode [ 95.805352][ T5393] bridge_slave_1: entered promiscuous mode [ 95.832377][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.840192][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.867545][ T5393] team0: Port device team_slave_0 added [ 95.872255][ T5393] team0: Port device team_slave_1 added [ 95.897017][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.900072][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.911635][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.918760][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.921606][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.933287][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.974922][ T5393] hsr_slave_0: entered promiscuous mode [ 95.978938][ T5393] hsr_slave_1: entered promiscuous mode [ 96.136338][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.149297][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.157182][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.165166][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.197909][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.201153][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.204780][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.207868][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271068][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.288114][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.292100][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.307455][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.317358][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.320491][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.336251][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.339426][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.546531][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.592424][ T5393] veth0_vlan: entered promiscuous mode [ 96.602133][ T5393] veth1_vlan: entered promiscuous mode [ 96.632787][ T5393] veth0_macvtap: entered promiscuous mode [ 96.641853][ T5393] veth1_macvtap: entered promiscuous mode [ 96.659788][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.671046][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.686091][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.697398][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711142][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727852][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.867242][ T1041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.925854][ T1041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.986015][ T1041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.055869][ T1041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.241843][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.249105][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.281972][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.285512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.158491][ T5450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.162537][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.166431][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.170227][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.173539][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.326113][ T1041] bridge_slave_1: left allmulticast mode [ 99.328638][ T1041] bridge_slave_1: left promiscuous mode [ 99.332065][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.356962][ T1041] bridge_slave_0: left allmulticast mode [ 99.359540][ T1041] bridge_slave_0: left promiscuous mode [ 99.362127][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.772205][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.778872][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.783111][ T1041] bond0 (unregistering): Released all slaves [ 99.880642][ T1041] hsr_slave_0: left promiscuous mode [ 99.899224][ T1041] hsr_slave_1: left promiscuous mode [ 99.902288][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.927362][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.949571][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.953278][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.059742][ T1041] veth1_macvtap: left promiscuous mode [ 100.062309][ T1041] veth0_macvtap: left promiscuous mode [ 100.083727][ T1041] veth1_vlan: left promiscuous mode [ 100.098915][ T1041] veth0_vlan: left promiscuous mode [ 100.497552][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 100.516936][ T1041] team0 (unregistering): Port device team_slave_0 removed 2025/09/01 15:27:49 executed programs: 0 [ 102.048202][ T4706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.067920][ T4706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.071554][ T4706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.075694][ T4706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.078617][ T4706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.812610][ T5481] chnl_net:caif_netlink_parms(): no params data found [ 102.977353][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.990755][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.995696][ T5481] bridge_slave_0: entered allmulticast mode [ 103.001404][ T5481] bridge_slave_0: entered promiscuous mode [ 103.012275][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.020456][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.023370][ T5481] bridge_slave_1: entered allmulticast mode [ 103.030652][ T5481] bridge_slave_1: entered promiscuous mode [ 103.054475][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.059974][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.080249][ T5481] team0: Port device team_slave_0 added [ 103.085023][ T5481] team0: Port device team_slave_1 added [ 103.101461][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.106102][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.120832][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.130447][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.133723][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.146153][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.179206][ T5481] hsr_slave_0: entered promiscuous mode [ 103.182249][ T5481] hsr_slave_1: entered promiscuous mode [ 103.608554][ T5481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.635707][ T5481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.642599][ T5481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.657508][ T5481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.815592][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.839892][ T5481] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.863269][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.866364][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.888093][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.891035][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.155920][ T4706] Bluetooth: hci0: command tx timeout [ 104.249166][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.323653][ T5481] veth0_vlan: entered promiscuous mode [ 104.351371][ T5481] veth1_vlan: entered promiscuous mode [ 104.397630][ T5481] veth0_macvtap: entered promiscuous mode [ 104.416140][ T5481] veth1_macvtap: entered promiscuous mode [ 104.447397][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.458627][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.484149][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.488149][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.492010][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.515272][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.595915][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.599740][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.655770][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.660573][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.166177][ T5530] loop0: detected capacity change from 0 to 32768 [ 105.186968][ T5530] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5530) [ 105.249853][ T5530] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.273736][ T5530] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.285924][ T5530] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 105.415578][ T5530] BTRFS info (device loop0): rebuilding free space tree [ 105.477975][ T5530] BTRFS info (device loop0): disabling free space tree [ 105.480683][ T5530] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.517880][ T5530] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.539262][ T5530] BTRFS info (device loop0): setting nodatasum [ 105.542069][ T5530] BTRFS info (device loop0): enabling ssd optimizations [ 105.575141][ T5530] BTRFS info (device loop0): enabling disk space caching [ 105.577870][ T5530] BTRFS info (device loop0): force clearing of disk cache [ 105.581042][ T5530] BTRFS info (device loop0): force zlib compression, level 3 [ 105.644805][ T5530] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..9223372036854775807,limit=10376293541461622786,limit=2..2415919104 [ 105.679913][ T5530] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 105.683179][ T5530] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 105.687914][ T5530] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 105.694246][ T5530] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 105.698260][ T5530] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 105.701539][ T5530] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 105.705529][ T5530] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 105.708814][ T5530] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 105.779426][ T5530] BTRFS error (device loop0): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 105.795859][ T5530] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2240512 free, is full [ 105.800485][ T5530] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 105.806699][ T5530] BTRFS info (device loop0): global_block_rsv: size 983040 reserved 983040 [ 105.810578][ T5530] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 105.814089][ T5530] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 105.817502][ T5530] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 105.820944][ T5530] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 105.856202][ T5530] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 105.864541][ T5530] BTRFS critical (device loop0): entry offset 5242880, bytes 12288, bitmap no [ 105.869133][ T5530] BTRFS critical (device loop0): entry offset 5259264, bytes 8192, bitmap no [ 105.872916][ T5530] BTRFS critical (device loop0): entry offset 5271552, bytes 16384, bitmap no [ 105.876952][ T5530] BTRFS critical (device loop0): entry offset 5316608, bytes 36864, bitmap no [ 105.880662][ T5530] BTRFS critical (device loop0): entry offset 5357568, bytes 12288, bitmap no [ 105.884960][ T5530] BTRFS critical (device loop0): entry offset 5378048, bytes 1503232, bitmap no [ 105.925404][ T5530] BTRFS info (device loop0): block group has cluster?: no [ 105.929227][ T5530] BTRFS info (device loop0): 6 free space entries at or bigger than 4096 bytes [ 105.932844][ T5530] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 105.954597][ T5530] BTRFS critical (device loop0): entry offset 6881280, bytes 1638400, bitmap no [ 105.965439][ T5530] BTRFS info (device loop0): block group has cluster?: no [ 105.968086][ T5530] BTRFS info (device loop0): 1 free space entries at or bigger than 4096 bytes [ 105.971603][ T5530] BTRFS info (device loop0): 3227648 bytes available across all block groups [ 105.999387][ T5530] ------------[ cut here ]------------ [ 106.001883][ T5530] BTRFS: Transaction aborted (error -28) [ 106.009155][ T5530] WARNING: CPU: 0 PID: 5530 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.014544][ T5530] Modules linked in: [ 106.017660][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.021680][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.026486][ T5530] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.029655][ T5530] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 106.038135][ T5530] RSP: 0018:ffffc9000cbcf6e0 EFLAGS: 00010246 [ 106.040756][ T5530] RAX: 727c34e24ff52d00 RBX: ffff88804e8b0001 RCX: ffff88803d5da440 [ 106.044485][ T5530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 106.047730][ T5530] RBP: ffffc9000cbcf948 R08: 0000000000000003 R09: 0000000000000004 [ 106.050968][ T5530] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: 0000000000000000 [ 106.054716][ T5530] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888059338800 [ 106.058113][ T5530] FS: 00005555751b0500(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 106.061873][ T5530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.065085][ T5530] CR2: 00007f8d87a11e9c CR3: 0000000049a3f000 CR4: 0000000000352ef0 [ 106.068578][ T5530] Call Trace: [ 106.070045][ T5530] [ 106.071362][ T5530] ? _raw_spin_unlock+0x28/0x50 [ 106.073519][ T5530] ? kfree+0x18e/0x440 [ 106.075376][ T5530] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 106.077998][ T5530] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 106.080361][ T5530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.082652][ T5530] ? do_raw_spin_unlock+0x4d/0x240 [ 106.084850][ T5530] ? _raw_spin_unlock+0x28/0x50 [ 106.086872][ T5530] __btrfs_end_transaction+0x140/0x640 [ 106.089126][ T5530] btrfs_inc_block_group_ro+0x641/0x6f0 [ 106.091310][ T5530] btrfs_relocate_block_group+0x3f1/0xc60 [ 106.093806][ T5530] btrfs_relocate_chunk+0x12f/0x5c0 [ 106.096479][ T5530] __btrfs_balance+0x1860/0x23f0 [ 106.098567][ T5530] ? __pfx___btrfs_balance+0x10/0x10 [ 106.100842][ T5530] ? __wait_for_common+0x650/0x710 [ 106.102992][ T5530] ? do_raw_spin_unlock+0x4d/0x240 [ 106.105761][ T5530] btrfs_balance+0xac2/0x11b0 [ 106.107541][ T5530] btrfs_ioctl_balance+0x3d3/0x610 [ 106.109491][ T5530] ? btrfs_ioctl+0xb19/0xd00 [ 106.111550][ T5530] ? __pfx_btrfs_ioctl+0x10/0x10 [ 106.113688][ T5530] __se_sys_ioctl+0xf9/0x170 [ 106.115869][ T5530] do_syscall_64+0xfa/0x3b0 [ 106.117849][ T5530] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.120170][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.122727][ T5530] ? clear_bhb_loop+0x60/0xb0 [ 106.124884][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.127454][ T5530] RIP: 0033:0x7f870db8ebe9 [ 106.129447][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.137461][ T5530] RSP: 002b:00007ffccb5f5728 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.140948][ T5530] RAX: ffffffffffffffda RBX: 00007f870ddc5fa0 RCX: 00007f870db8ebe9 [ 106.144371][ T5530] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 106.147686][ T5530] RBP: 00007f870dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.151074][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.155391][ T5530] R13: 00007f870ddc5fa0 R14: 00007f870ddc5fa0 R15: 0000000000000003 [ 106.158767][ T5530] [ 106.160128][ T5530] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.163247][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.167159][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.171637][ T5530] Call Trace: [ 106.173139][ T5530] [ 106.174533][ T5530] dump_stack_lvl+0x99/0x250 [ 106.176583][ T5530] ? __asan_memcpy+0x40/0x70 [ 106.178657][ T5530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.180771][ T5530] ? __pfx__printk+0x10/0x10 [ 106.182684][ T5530] vpanic+0x281/0x750 [ 106.184318][ T5530] ? __pfx__printk+0x10/0x10 [ 106.186190][ T5530] ? __pfx_vpanic+0x10/0x10 [ 106.188031][ T5530] ? is_bpf_text_address+0x26/0x2b0 [ 106.190133][ T5530] panic+0xb9/0xc0 [ 106.191723][ T5530] ? __pfx_panic+0x10/0x10 [ 106.193590][ T5530] __warn+0x31b/0x4b0 [ 106.195385][ T5530] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.198189][ T5530] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.201169][ T5530] report_bug+0x2be/0x4f0 [ 106.203267][ T5530] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.206184][ T5530] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.209068][ T5530] ? btrfs_create_pending_block_groups+0x1152/0x1780 [ 106.211877][ T5530] handle_bug+0x84/0x160 [ 106.213704][ T5530] exc_invalid_op+0x1a/0x50 [ 106.215740][ T5530] asm_exc_invalid_op+0x1a/0x20 [ 106.217815][ T5530] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 106.221030][ T5530] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 106.228764][ T5530] RSP: 0018:ffffc9000cbcf6e0 EFLAGS: 00010246 [ 106.231184][ T5530] RAX: 727c34e24ff52d00 RBX: ffff88804e8b0001 RCX: ffff88803d5da440 [ 106.234305][ T5530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 106.237415][ T5530] RBP: ffffc9000cbcf948 R08: 0000000000000003 R09: 0000000000000004 [ 106.240751][ T5530] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: 0000000000000000 [ 106.244168][ T5530] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888059338800 [ 106.247565][ T5530] ? _raw_spin_unlock+0x28/0x50 [ 106.249665][ T5530] ? kfree+0x18e/0x440 [ 106.251512][ T5530] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 106.254163][ T5530] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 106.256479][ T5530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.258896][ T5530] ? do_raw_spin_unlock+0x4d/0x240 [ 106.260996][ T5530] ? _raw_spin_unlock+0x28/0x50 [ 106.262996][ T5530] __btrfs_end_transaction+0x140/0x640 [ 106.265155][ T5530] btrfs_inc_block_group_ro+0x641/0x6f0 [ 106.267511][ T5530] btrfs_relocate_block_group+0x3f1/0xc60 [ 106.270002][ T5530] btrfs_relocate_chunk+0x12f/0x5c0 [ 106.272210][ T5530] __btrfs_balance+0x1860/0x23f0 [ 106.274438][ T5530] ? __pfx___btrfs_balance+0x10/0x10 [ 106.276708][ T5530] ? __wait_for_common+0x650/0x710 [ 106.278960][ T5530] ? do_raw_spin_unlock+0x4d/0x240 [ 106.281252][ T5530] btrfs_balance+0xac2/0x11b0 [ 106.283398][ T5530] btrfs_ioctl_balance+0x3d3/0x610 [ 106.285641][ T5530] ? btrfs_ioctl+0xb19/0xd00 [ 106.287772][ T5530] ? __pfx_btrfs_ioctl+0x10/0x10 [ 106.289907][ T5530] __se_sys_ioctl+0xf9/0x170 [ 106.291967][ T5530] do_syscall_64+0xfa/0x3b0 [ 106.294029][ T5530] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.296399][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.299111][ T5530] ? clear_bhb_loop+0x60/0xb0 [ 106.301233][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.303897][ T5530] RIP: 0033:0x7f870db8ebe9 [ 106.305881][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.314519][ T5530] RSP: 002b:00007ffccb5f5728 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.318234][ T5530] RAX: ffffffffffffffda RBX: 00007f870ddc5fa0 RCX: 00007f870db8ebe9 [ 106.321767][ T5530] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 106.325267][ T5530] RBP: 00007f870dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.328722][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.332117][ T5530] R13: 00007f870ddc5fa0 R14: 00007f870ddc5fa0 R15: 0000000000000003 [ 106.335722][ T5530] [ 106.337444][ T5530] Kernel Offset: disabled [ 106.339510][ T5530] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:27:53 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000cbcee30 R8 =ffff888033908237 R9 =1ffff11006721046 R10=dffffc0000000000 R11=ffffffff8550ca40 R12=dffffc0000000000 R13=ffffffff99b088e3 R14=ffffffff99dfd820 R15=0000000000000000 RIP=ffffffff8550cabc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555751b0500 ffffffff 00c00000 GS =0000 ffff88808d20d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d87a11e9c CR3=0000000049a3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccb5f5a00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccb5f5b86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccb5f5b86 00007ffccb5f5b8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f870dc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000