DUID 00:04:ac:03:58:10:d0:76:5c:28:30:a7:8a:8b:4a:a3:06:e2 forked to background, child pid 3171 [ 29.217028][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.226773][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.115' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.660493][ T3586] loop0: detected capacity change from 0 to 264192 [ 50.673964][ T3586] BTRFS: device fsid 9ef2b0c0-0642-4475-a2ba-d53d18884f0b devid 1 transid 7 /dev/loop0 scanned by syz-executor095 (3586) [ 50.703640][ T3586] BTRFS info (device loop0): disk space caching is enabled [ 50.711159][ T3586] BTRFS info (device loop0): has skinny extents [ 50.739164][ T3586] BTRFS info (device loop0): enabling ssd optimizations [ 50.751799][ T10] BTRFS error (device loop0): bad tree block start, want 30449664 have 0 [ 50.761384][ T44] BTRFS error (device loop0): bad tree block start, want 30449664 have 0 [ 50.785194][ T3586] general protection fault, probably for non-canonical address 0xdffffc000000002f: 0000 [#1] PREEMPT SMP KASAN [ 50.796944][ T3586] KASAN: null-ptr-deref in range [0x0000000000000178-0x000000000000017f] [ 50.805376][ T3586] CPU: 0 PID: 3586 Comm: syz-executor095 Not tainted 5.17.0-rc2-next-20220203-syzkaller #0 [ 50.815368][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.825432][ T3586] RIP: 0010:submit_bio_checks+0x7c0/0x1bf0 [ 50.831279][ T3586] Code: 08 3c 03 0f 8e 4a 11 00 00 48 b8 00 00 00 00 00 fc ff df 44 8b 6d 10 41 83 e5 01 4a 8d bc 2b 7c 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 09 11 00 00 [ 50.850900][ T3586] RSP: 0018:ffffc9000293f278 EFLAGS: 00010203 [ 50.856973][ T3586] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 50.864947][ T3586] RDX: 000000000000002f RSI: ffffffff83d5d9de RDI: 000000000000017d [ 50.872926][ T3586] RBP: ffff888014fbd300 R08: ffffffff8a044f00 R09: 0000000000000000 [ 50.880902][ T3586] R10: ffffffff83d5d9d0 R11: 0000000000000000 R12: 0000000000000000 [ 50.888884][ T3586] R13: 0000000000000001 R14: 00000000fffffffe R15: ffff88801a2be93c [ 50.896854][ T3586] FS: 0000555555975300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 50.905791][ T3586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.912372][ T3586] CR2: 00007f9789f79668 CR3: 00000000145d1000 CR4: 00000000003506f0 [ 50.920338][ T3586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.928298][ T3586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.936257][ T3586] Call Trace: [ 50.939539][ T3586] [ 50.942462][ T3586] ? should_fail_request+0x80/0x80 [ 50.947579][ T3586] __submit_bio+0xaf/0x360 [ 50.951993][ T3586] ? submit_bio_checks+0x1bf0/0x1bf0 [ 50.957276][ T3586] submit_bio_noacct+0x6c9/0x8a0 [ 50.962208][ T3586] ? __mutex_lock+0x21a/0x12f0 [ 50.966984][ T3586] ? __submit_bio+0x360/0x360 [ 50.971656][ T3586] ? btrfs_global_root+0xf1/0x120 [ 50.976761][ T3586] ? mutex_lock_io_nested+0x1150/0x1150 [ 50.982307][ T3586] submit_bio+0x1ea/0x430 [ 50.986641][ T3586] ? submit_bio_noacct+0x8a0/0x8a0 [ 50.991761][ T3586] ? lockdep_init_map_type+0x2c3/0x7b0 [ 50.997232][ T3586] write_all_supers+0x3038/0x4440 [ 51.002264][ T3586] ? btrfs_get_num_tolerated_disk_barrier_failures+0x1f0/0x1f0 [ 51.009990][ T3586] ? lock_downgrade+0x6e0/0x6e0 [ 51.014851][ T3586] ? btrfs_free_redirty_list+0x158/0x200 [ 51.020485][ T3586] btrfs_commit_transaction+0x1be3/0x3180 [ 51.026206][ T3586] ? btrfs_apply_pending_changes+0x90/0x90 [ 51.032011][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.038257][ T3586] ? start_transaction+0x2ad/0x1470 [ 51.043456][ T3586] btrfs_commit_super+0xc1/0x100 [ 51.048389][ T3586] close_ctree+0x314/0xccc [ 51.052891][ T3586] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 51.059137][ T3586] ? __destroy_inode+0x2da/0x700 [ 51.064075][ T3586] ? btrfs_alloc_inode+0x930/0x930 [ 51.069192][ T3586] ? btrfs_free_inode+0x20/0x20 [ 51.074047][ T3586] ? btrfs_cleanup_one_transaction.cold+0x4f/0x4f [ 51.080456][ T3586] ? destroy_inode+0x129/0x1b0 [ 51.085220][ T3586] ? iput.part.0+0x562/0x820 [ 51.089810][ T3586] ? btrfs_destroy_inode+0x670/0x670 [ 51.095110][ T3586] ? iput+0x58/0x70 [ 51.098916][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.105161][ T3586] ? btrfs_iget+0x149/0x210 [ 51.109669][ T3586] ? btrfs_orphan_cleanup+0x710/0x710 [ 51.115046][ T3586] btrfs_mount_root.cold+0xb1/0x162 [ 51.120249][ T3586] ? parse_rescue_options+0x350/0x350 [ 51.125616][ T3586] ? kfree+0x1ed/0x2d0 [ 51.129673][ T3586] ? vfs_parse_fs_param_source+0x1e0/0x1e0 [ 51.136004][ T3586] ? vfs_parse_fs_string+0xf8/0x150 [ 51.141201][ T3586] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 51.146402][ T3586] ? __kasan_kmalloc+0xa9/0xd0 [ 51.151162][ T3586] ? parse_rescue_options+0x350/0x350 [ 51.156528][ T3586] legacy_get_tree+0x105/0x220 [ 51.161292][ T3586] vfs_get_tree+0x89/0x2f0 [ 51.165706][ T3586] vfs_kern_mount.part.0+0xd3/0x170 [ 51.170904][ T3586] vfs_kern_mount+0x3c/0x60 [ 51.176623][ T3586] btrfs_mount+0x234/0xa60 [ 51.181038][ T3586] ? btrfs_show_options+0x1290/0x1290 [ 51.186414][ T3586] ? rcu_read_lock_sched_held+0x3a/0x70 [ 51.192071][ T3586] ? kfree+0x1ed/0x2d0 [ 51.196130][ T3586] ? vfs_parse_fs_param_source+0x1e0/0x1e0 [ 51.201938][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.208188][ T3586] ? apparmor_capable+0x1d8/0x460 [ 51.213211][ T3586] ? btrfs_show_options+0x1290/0x1290 [ 51.218575][ T3586] legacy_get_tree+0x105/0x220 [ 51.223337][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.229589][ T3586] vfs_get_tree+0x89/0x2f0 [ 51.234007][ T3586] path_mount+0x1320/0x1fa0 [ 51.238514][ T3586] ? putname+0xfe/0x140 [ 51.242669][ T3586] ? finish_automount+0xaf0/0xaf0 [ 51.247693][ T3586] ? putname+0xfe/0x140 [ 51.251852][ T3586] __x64_sys_mount+0x27f/0x300 [ 51.256619][ T3586] ? copy_mnt_ns+0xae0/0xae0 [ 51.261209][ T3586] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.267106][ T3586] do_syscall_64+0x35/0xb0 [ 51.271518][ T3586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.277405][ T3586] RIP: 0033:0x7ff53f71fd8a [ 51.281812][ T3586] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.301413][ T3586] RSP: 002b:00007ffeaf8661f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 51.309819][ T3586] RAX: ffffffffffffffda RBX: 00007ffeaf866250 RCX: 00007ff53f71fd8a [ 51.317780][ T3586] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffeaf866210 [ 51.325741][ T3586] RBP: 00007ffeaf866210 R08: 00007ffeaf866250 R09: 0000000000000000 [ 51.333701][ T3586] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000020000f50 [ 51.341659][ T3586] R13: 0000000000000003 R14: 0000000000000004 R15: 000000000000008e [ 51.349629][ T3586] [ 51.352632][ T3586] Modules linked in: [ 51.357444][ T3586] ---[ end trace 0000000000000000 ]--- [ 51.363042][ T3586] RIP: 0010:submit_bio_checks+0x7c0/0x1bf0 [ 51.368897][ T3586] Code: 08 3c 03 0f 8e 4a 11 00 00 48 b8 00 00 00 00 00 fc ff df 44 8b 6d 10 41 83 e5 01 4a 8d bc 2b 7c 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 09 11 00 00 [ 51.388616][ T3586] RSP: 0018:ffffc9000293f278 EFLAGS: 00010203 [ 51.394675][ T3586] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.402660][ T3586] RDX: 000000000000002f RSI: ffffffff83d5d9de RDI: 000000000000017d [ 51.410650][ T3586] RBP: ffff888014fbd300 R08: ffffffff8a044f00 R09: 0000000000000000 [ 51.418641][ T3586] R10: ffffffff83d5d9d0 R11: 0000000000000000 R12: 0000000000000000 [ 51.426611][ T3586] R13: 0000000000000001 R14: 00000000fffffffe R15: ffff88801a2be93c [ 51.434882][ T3586] FS: 0000555555975300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 51.443855][ T3586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.450495][ T3586] CR2: 00007fab1d1bfe28 CR3: 00000000145d1000 CR4: 00000000003506e0 [ 51.458510][ T3586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.466745][ T3586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.474765][ T3586] Kernel panic - not syncing: Fatal exception [ 51.481037][ T3586] Kernel Offset: disabled [ 51.485347][ T3586] Rebooting in 86400 seconds..