program: r0 = open(&(0x7f0000000040)='./file1\x00', 0x880, 0x41) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0xffffffff, 0x0, 0x0, 0x0, [0x0], [0xffffffff, 0xfffffffd, 0x1], [0x5, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3, [r5], [0x2b8, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x80000]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200a50000000000000000000800060000000000"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = gettid() r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) r12 = getpid() r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0xfffffe83, 0x1, 0x3}}}}]}, 0x38}}, 0x20000054) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r14 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r14, 0x1, &(0x7f0000258f88)) msgsnd(r14, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff1e76849985efed13b50e6b7a"], 0x0, 0x0) msgrcv(r14, &(0x7f00000000c0)={0x0, ""/245}, 0xfd, 0x0, 0x0) msgctl$IPC_SET(r14, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xf4, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001340)={0x64, r7, 0x4e37d87d90bbb029, 0x0, 0x0, {0x2f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffeac}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x2}) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f0000000200)={[{@skip_balance}, {@autodefrag}, {@noacl}, {@ref_verify}, {@rescue={'rescue', 0x3d, 'ibadroots'}}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@nodiscard}, {@nodatasum}, {@acl}, {@commit={'commit', 0x3d, 0x6}}, {@ssd_spread}]}, 0x9, 0x55cb, &(0x7f0000007900)="$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") [ 74.034581][ T5306] Bluetooth: hci0: command tx timeout [ 74.127286][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.0'. [ 74.140676][ T5327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.219028][ T5328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.0'. [ 74.542264][ T5328] loop0: detected capacity change from 0 to 32768 [ 74.566527][ T5328] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.0 (5328) [ 74.624983][ T5328] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.636511][ T5328] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 74.650703][ T5328] BTRFS info (device loop0): using free-space-tree [ 74.692417][ T1039] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 74.712572][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 74.743753][ T1039] BTRFS warning (device loop0): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0 [ 74.768574][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 74.796516][ T5328] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 74.802059][ T5328] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 74.806302][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 74.811878][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.816856][ T5328] RIP: 0010:btrfs_root_node+0x7f/0x3b0 [ 74.819926][ T5328] Code: 67 72 e1 fd 48 83 c4 08 e8 be 4d a9 07 89 c5 31 ff 89 c6 e8 13 a1 03 fe 85 ed 74 17 e8 1a 64 ea fd 84 c0 74 1c e8 c1 9c 03 fe <42> 80 3c 2b 00 75 4b eb 51 e8 b3 9c 03 fe 42 80 3c 2b 00 75 3d eb [ 74.828778][ T5328] RSP: 0018:ffffc9000d667710 EFLAGS: 00010283 [ 74.831805][ T5328] RAX: ffffffff83bcc22f RBX: 0000000000000003 RCX: 0000000000100000 [ 74.836035][ T5328] RDX: ffffc9000e84b000 RSI: 0000000000018fd4 RDI: 0000000000018fd5 [ 74.839687][ T5328] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff83bcc1ec [ 74.843297][ T5328] R10: dffffc0000000000 R11: ffffed100a69680e R12: ffffffff83bcc1ec [ 74.846891][ T5328] R13: dffffc0000000000 R14: 0000000000000018 R15: 0000000000000000 [ 74.850989][ T5328] FS: 00007fbf0f8116c0(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 74.855293][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.858353][ T5328] CR2: 0000560e94b8d030 CR3: 0000000042713000 CR4: 0000000000352ef0 [ 74.862090][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.866320][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.869817][ T5328] Call Trace: [ 74.871353][ T5328] [ 74.872642][ T5328] btrfs_read_lock_root_node+0x27/0xd0 [ 74.874789][ T5328] btrfs_build_ref_tree+0x110/0x13e0 [ 74.877030][ T5328] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 74.879862][ T5328] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.882759][ T5328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.886094][ T5328] ? __pfx_btrfs_read_qgroup_config+0x10/0x10 [ 74.888910][ T5328] ? do_raw_spin_unlock+0x4d/0x240 [ 74.891190][ T5328] ? __pfx_btrfs_build_ref_tree+0x10/0x10 [ 74.893704][ T5328] ? try_to_wake_up+0x7e5/0x1290 [ 74.896208][ T5328] open_ctree+0x1d81/0x2800 [ 74.898385][ T5328] ? bdi_register_va+0x58d/0x740 [ 74.900485][ T5328] ? __pfx_open_ctree+0x10/0x10 [ 74.902675][ T5328] ? __pfx_snprintf+0x10/0x10 [ 74.904764][ T5328] btrfs_fill_super+0x19d/0x2e0 [ 74.907347][ T5328] btrfs_get_tree+0x107c/0x1630 [ 74.910061][ T5328] ? __pfx_btrfs_get_tree+0x10/0x10 [ 74.912325][ T5328] ? rcu_is_watching+0x15/0xb0 [ 74.915125][ T5328] vfs_get_tree+0x92/0x2b0 [ 74.917168][ T5328] fc_mount+0x1c/0xb0 [ 74.918901][ T5328] btrfs_get_tree+0x67d/0x1630 [ 74.921054][ T5328] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 74.923552][ T5328] ? __pfx_btrfs_get_tree+0x10/0x10 [ 74.925907][ T5328] ? rcu_is_watching+0x15/0xb0 [ 74.928225][ T5328] ? apparmor_capable+0x137/0x1b0 [ 74.930433][ T5328] vfs_get_tree+0x92/0x2b0 [ 74.932513][ T5328] do_new_mount+0x24a/0xa40 [ 74.934647][ T5328] __se_sys_mount+0x317/0x410 [ 74.936926][ T5328] ? __pfx___se_sys_mount+0x10/0x10 [ 74.939399][ T5328] ? do_syscall_64+0xbe/0x3b0 [ 74.941564][ T5328] ? __x64_sys_mount+0x20/0xc0 [ 74.943674][ T5328] do_syscall_64+0xfa/0x3b0 [ 74.945806][ T5328] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.948607][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.951701][ T5328] ? clear_bhb_loop+0x60/0xb0 [ 74.953841][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.956563][ T5328] RIP: 0033:0x7fbf0e9900ca [ 74.958814][ T5328] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.967717][ T5328] RSP: 002b:00007fbf0f810e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.971379][ T5328] RAX: ffffffffffffffda RBX: 00007fbf0f810ef0 RCX: 00007fbf0e9900ca [ 74.975397][ T5328] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007fbf0f810eb0 [ 74.979196][ T5328] RBP: 0000200000000080 R08: 00007fbf0f810ef0 R09: 000000000001c005 [ 74.982747][ T5328] R10: 000000000001c005 R11: 0000000000000246 R12: 0000200000000000 [ 74.986357][ T5328] R13: 00007fbf0f810eb0 R14: 00000000000055cb R15: 0000200000000200 [ 74.990516][ T5328] [ 74.992320][ T5328] Modules linked in: [ 74.994502][ T5328] ---[ end trace 0000000000000000 ]--- [ 75.090513][ T5328] RIP: 0010:btrfs_root_node+0x7f/0x3b0 [ 75.093226][ T5328] Code: 67 72 e1 fd 48 83 c4 08 e8 be 4d a9 07 89 c5 31 ff 89 c6 e8 13 a1 03 fe 85 ed 74 17 e8 1a 64 ea fd 84 c0 74 1c e8 c1 9c 03 fe <42> 80 3c 2b 00 75 4b eb 51 e8 b3 9c 03 fe 42 80 3c 2b 00 75 3d eb [ 75.110393][ T5328] RSP: 0018:ffffc9000d667710 EFLAGS: 00010283 [ 75.113257][ T5328] RAX: ffffffff83bcc22f RBX: 0000000000000003 RCX: 0000000000100000 [ 75.116979][ T5328] RDX: ffffc9000e84b000 RSI: 0000000000018fd4 RDI: 0000000000018fd5 [ 75.130195][ T5328] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff83bcc1ec [ 75.133551][ T5328] R10: dffffc0000000000 R11: ffffed100a69680e R12: ffffffff83bcc1ec [ 75.137081][ T5328] R13: dffffc0000000000 R14: 0000000000000018 R15: 0000000000000000 [ 75.159953][ T5328] FS: 00007fbf0f8116c0(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 75.163979][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.166918][ T5328] CR2: 000055705b5615f8 CR3: 0000000042713000 CR4: 0000000000352ef0 [ 75.180025][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.183563][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.187559][ T5328] Kernel panic - not syncing: Fatal exception [ 75.191057][ T5328] Kernel Offset: disabled [ 75.193078][ T5328] Rebooting in 86400 seconds..