Warning: Permanently added '[localhost]:47186' (ED25519) to the list of known hosts. executing program [ 77.447894][ T5316] loop0: detected capacity change from 0 to 32768 [ 77.484757][ T5316] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor269 (5316) [ 77.513190][ T5316] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 77.517596][ T5316] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 77.521348][ T5316] BTRFS info (device loop0 state S): using free-space-tree [ 77.542234][ T5316] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 77.564823][ T5316] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 77.574936][ T5316] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 77.601464][ T5316] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 77.612714][ T5316] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 77.621558][ T5316] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 77.633119][ T5316] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 77.733677][ T5316] workqueue: max_active 2097158 requested for btrfs-scrub is out of range, clamping between 1 and 2048 [ 77.738893][ T5316] BTRFS info (device loop0 state CS): scrub: started on devid 1 [ 77.754413][ T5316] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000041: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 77.759130][ T5316] KASAN: null-ptr-deref in range [0x0000000000000208-0x000000000000020f] [ 77.763692][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz-executor269 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 77.768557][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.772672][ T5316] RIP: 0010:btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 77.775498][ T5316] Code: 8c 24 a8 00 00 00 42 c7 44 31 08 f3 f3 f3 f3 e8 82 0e e4 fd 48 89 9c 24 88 00 00 00 48 81 c3 08 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 7d a7 4a fe 4c 8b 2b ba 11 00 00 [ 77.783412][ T5316] RSP: 0000:ffffc9000d367100 EFLAGS: 00010206 [ 77.785786][ T5316] RAX: 0000000000000041 RBX: 0000000000000208 RCX: ffff8880002fa440 [ 77.788938][ T5316] RDX: 0000000000000000 RSI: ffff888048c32080 RDI: 0000000000000000 [ 77.792280][ T5316] RBP: ffffc9000d367290 R08: ffff88803f131800 R09: ffffc9000d367420 [ 77.795293][ T5316] R10: dffffc0000000000 R11: ffffed100918402e R12: 0000000000500000 [ 77.798334][ T5316] R13: ffffc9000d367420 R14: dffffc0000000000 R15: 0000000000500000 [ 77.802353][ T5316] FS: 0000555560794380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 77.806594][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.809383][ T5316] CR2: 00007f217eacadc3 CR3: 00000000359f0000 CR4: 0000000000352ef0 [ 77.812664][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.816064][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.818954][ T5316] Call Trace: [ 77.820158][ T5316] [ 77.821268][ T5316] ? __die_body+0x5f/0xb0 [ 77.822862][ T5316] ? die_addr+0xb0/0xe0 [ 77.824530][ T5316] ? exc_general_protection+0x3dd/0x5d0 [ 77.827220][ T5316] ? asm_exc_general_protection+0x26/0x30 [ 77.830037][ T5316] ? btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 77.832140][ T5316] ? __pfx_btrfs_get_64+0x10/0x10 [ 77.834061][ T5316] ? read_extent_buffer+0x11b/0x540 [ 77.836057][ T5316] ? get_extent_info+0x2fa/0x450 [ 77.837919][ T5316] ? __pfx_btrfs_lookup_csums_bitmap+0x10/0x10 [ 77.840249][ T5316] ? __lock_acquire+0x1397/0x2100 [ 77.842358][ T5316] scrub_find_fill_first_stripe+0xe9f/0x1230 [ 77.845091][ T5316] ? __pfx_scrub_find_fill_first_stripe+0x10/0x10 [ 77.847943][ T5316] ? scrub_simple_mirror+0x33e/0x960 [ 77.850046][ T5316] ? do_raw_spin_lock+0x14f/0x370 [ 77.852032][ T5316] ? __pfx_lock_release+0x10/0x10 [ 77.854161][ T5316] ? do_raw_spin_unlock+0x58/0x8b0 [ 77.856224][ T5316] scrub_simple_mirror+0x5c6/0x960 [ 77.858648][ T5316] scrub_stripe+0xa7a/0x2a60 [ 77.861430][ T5316] ? mark_lock+0x9a/0x360 [ 77.863873][ T5316] ? mark_lock+0x9a/0x360 [ 77.865762][ T5316] ? __pfx_scrub_stripe+0x10/0x10 [ 77.867735][ T5316] ? mark_lock+0x9a/0x360 [ 77.869501][ T5316] ? __lock_acquire+0x1397/0x2100 [ 77.871325][ T5316] ? __pfx_lock_acquire+0x10/0x10 [ 77.873321][ T5316] ? btrfs_find_chunk_map+0x41/0x50 [ 77.875382][ T5316] ? __pfx_lock_release+0x10/0x10 [ 77.877457][ T5316] ? lockdep_hardirqs_on+0x99/0x150 [ 77.879568][ T5316] ? do_raw_read_unlock+0x3c/0x80 [ 77.881578][ T5316] ? _raw_read_unlock+0x28/0x50 [ 77.883585][ T5316] scrub_chunk+0x2e3/0x470 [ 77.885740][ T5316] scrub_enumerate_chunks+0xc4f/0x16a0 [ 77.887862][ T5316] ? __pfx_scrub_enumerate_chunks+0x10/0x10 [ 77.890169][ T5316] ? do_raw_spin_lock+0x14f/0x370 [ 77.892292][ T5316] ? do_raw_spin_unlock+0x58/0x8b0 [ 77.894456][ T5316] btrfs_scrub_dev+0x774/0xde0 [ 77.896828][ T5316] ? __pfx_btrfs_scrub_dev+0x10/0x10 [ 77.899273][ T5316] ? __might_fault+0xc6/0x120 [ 77.901248][ T5316] ? _copy_from_user+0x95/0xb0 [ 77.903173][ T5316] btrfs_ioctl_scrub+0x236/0x370 [ 77.905019][ T5316] ? __pfx_btrfs_ioctl+0x10/0x10 [ 77.906928][ T5316] __se_sys_ioctl+0xf5/0x170 [ 77.908804][ T5316] do_syscall_64+0xf3/0x230 [ 77.910652][ T5316] ? clear_bhb_loop+0x35/0x90 [ 77.912578][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.914941][ T5316] RIP: 0033:0x7faa0a29dfd9 [ 77.916873][ T5316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.923992][ T5316] RSP: 002b:00007ffe2b781af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.926938][ T5316] RAX: ffffffffffffffda RBX: 0000400000000040 RCX: 00007faa0a29dfd9 [ 77.930152][ T5316] RDX: 0000400000000000 RSI: 00000000c400941b RDI: 0000000000000004 [ 77.933741][ T5316] RBP: 00007faa0a2e7095 R08: 00005555607954c0 R09: 00005555607954c0 [ 77.936860][ T5316] R10: 00005555607954c0 R11: 0000000000000246 R12: 00007ffe2b781b20 [ 77.940262][ T5316] R13: 00007ffe2b781d48 R14: 431bde82d7b634db R15: 00007faa0a2e703b [ 77.943651][ T5316] [ 77.944816][ T5316] Modules linked in: [ 77.946636][ T5316] ---[ end trace 0000000000000000 ]--- [ 77.987518][ T5316] RIP: 0010:btrfs_lookup_csums_bitmap+0xc4/0x1600 [ 77.990544][ T5316] Code: 8c 24 a8 00 00 00 42 c7 44 31 08 f3 f3 f3 f3 e8 82 0e e4 fd 48 89 9c 24 88 00 00 00 48 81 c3 08 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 7d a7 4a fe 4c 8b 2b ba 11 00 00 [ 78.000011][ T5316] RSP: 0000:ffffc9000d367100 EFLAGS: 00010206 [ 78.002414][ T5316] RAX: 0000000000000041 RBX: 0000000000000208 RCX: ffff8880002fa440 [ 78.005306][ T5316] RDX: 0000000000000000 RSI: ffff888048c32080 RDI: 0000000000000000 [ 78.008523][ T5316] RBP: ffffc9000d367290 R08: ffff88803f131800 R09: ffffc9000d367420 [ 78.012688][ T5316] R10: dffffc0000000000 R11: ffffed100918402e R12: 0000000000500000 [ 78.015593][ T5316] R13: ffffc9000d367420 R14: dffffc0000000000 R15: 0000000000500000 [ 78.018495][ T5316] FS: 0000555560794380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 78.021581][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.024631][ T5316] CR2: 0000563a5b6dfaf0 CR3: 00000000359f0000 CR4: 0000000000352ef0 [ 78.028906][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.031654][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.034955][ T5316] Kernel panic - not syncing: Fatal exception [ 78.037531][ T5316] Kernel Offset: disabled [ 78.039178][ T5316] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:18:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=ffffffff9a746080 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d366830 R8 =ffffffff8576d71b R9 =1ffff11003dfd046 R10=dffffc0000000000 R11=ffffffff8576d6d0 R12=dffffc0000000000 R13=0000000000000030 R14=0000000000000030 R15=00000000000003f8 RIP=ffffffff8576d74e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560794380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f217eacadc3 CR3=00000000359f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544156 4952505f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007000700020007 0007000700000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000