Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. syzkaller login: [ 47.262514][ T5059] chnl_net:caif_netlink_parms(): no params data found [ 47.300857][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.308058][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.317031][ T5059] device bridge_slave_0 entered promiscuous mode [ 47.325323][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.332395][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.340786][ T5059] device bridge_slave_1 entered promiscuous mode [ 47.359377][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.370589][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.391140][ T5059] team0: Port device team_slave_0 added [ 47.398206][ T5059] team0: Port device team_slave_1 added [ 47.414483][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.421778][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.448090][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.460624][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.467622][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.493561][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.520703][ T5059] device hsr_slave_0 entered promiscuous mode [ 47.527581][ T5059] device hsr_slave_1 entered promiscuous mode [ 47.598698][ T5059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.609297][ T5059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.618418][ T5059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.627363][ T5059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.645540][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.652779][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.660832][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.668010][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.708947][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.720635][ T1754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.730110][ T1754] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.738810][ T1754] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.746696][ T1754] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.760099][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.770646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.780151][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.787286][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.806094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.814397][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.821710][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.830957][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.844754][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.856208][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.866784][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.883467][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.891609][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.903213][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.922093][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.939557][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.947961][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.956560][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.966604][ T5059] device veth0_vlan entered promiscuous mode [ 47.978549][ T5059] device veth1_vlan entered promiscuous mode [ 47.995555][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.003998][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.012824][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.025307][ T5059] device veth0_macvtap entered promiscuous mode [ 48.034061][ T5059] device veth1_macvtap entered promiscuous mode [ 48.051847][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.059704][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.069320][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.079858][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.088510][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.099276][ T5059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.109441][ T5059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 48.118399][ T5059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.128508][ T5059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.283129][ T5059] loop0: detected capacity change from 0 to 32768 [ 48.293537][ T5059] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor337 (5059) [ 48.313513][ T5059] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 48.323238][ T5059] BTRFS info (device loop0): force clearing of disk cache [ 48.330724][ T5059] BTRFS info (device loop0): setting nodatasum [ 48.337158][ T5059] BTRFS info (device loop0): allowing degraded mounts [ 48.343963][ T5059] BTRFS info (device loop0): enabling disk space caching [ 48.351546][ T5059] BTRFS info (device loop0): disk space caching is enabled [ 48.378444][ T5059] BTRFS info (device loop0): enabling ssd optimizations [ 48.386251][ T5059] BTRFS info (device loop0): auto enabling async discard [ 48.395273][ T5059] BTRFS info (device loop0): clearing free space tree [ 48.402260][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.413248][ T5059] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.433928][ T5059] BTRFS info (device loop0): checking UUID tree [ 48.472108][ T41] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 48.483047][ T5059] FAULT_INJECTION: forcing a failure. [ 48.483047][ T5059] name failslab, interval 1, probability 0, space 0, times 1 [ 48.495962][ T5059] CPU: 0 PID: 5059 Comm: syz-executor337 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 48.506051][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.516136][ T5059] Call Trace: [ 48.519439][ T5059] [ 48.522391][ T5059] dump_stack_lvl+0xd1/0x138 [ 48.527038][ T5059] should_fail_ex.cold+0x5/0xa [ 48.531857][ T5059] should_failslab+0x9/0x20 [ 48.536393][ T5059] __kmem_cache_alloc_node+0x5b/0x430 [ 48.541787][ T5059] ? ulist_add_merge.part.0+0x85/0x490 [ 48.547629][ T5059] kmalloc_trace+0x26/0x60 [ 48.552083][ T5059] ulist_add_merge.part.0+0x85/0x490 [ 48.557406][ T5059] ? btrfs_clear_delalloc_extent+0x1b7/0x910 [ 48.563457][ T5059] ulist_add+0x106/0x160 [ 48.567731][ T5059] clear_state_bit+0x151/0x3a0 [ 48.572615][ T5059] __clear_extent_bit+0x5a6/0xc80 [ 48.577847][ T5059] clear_record_extent_bits+0x5c/0x70 [ 48.583253][ T5059] __btrfs_qgroup_release_data+0x1a2/0xa40 [ 48.589104][ T5059] ? btrfs_qgroup_account_extents+0xb50/0xb50 [ 48.595216][ T5059] ? btrfs_reserve_extent+0x4de/0x690 [ 48.600625][ T5059] insert_prealloc_file_extent+0x182/0x420 [ 48.606460][ T5059] ? walk_down_tree+0x490/0x490 [ 48.611311][ T5059] ? insert_reserved_file_extent+0x910/0x910 [ 48.617316][ T5059] __btrfs_prealloc_file_range+0x298/0x940 [ 48.623129][ T5059] ? priority_reclaim_metadata_space+0x5f0/0x5f0 [ 48.629467][ T5059] ? async_cow_start+0xa0/0xa0 [ 48.634707][ T5059] btrfs_prealloc_file_range+0x42/0x50 [ 48.640173][ T5059] btrfs_fallocate+0x191e/0x27b0 [ 48.645125][ T5059] ? btrfs_replace_file_extents+0x14e0/0x14e0 [ 48.651319][ T5059] ? lock_release+0x810/0x810 [ 48.656011][ T5059] ? btrfs_replace_file_extents+0x14e0/0x14e0 [ 48.662085][ T5059] vfs_fallocate+0x48b/0xe00 [ 48.666684][ T5059] __x64_sys_fallocate+0xd3/0x140 [ 48.671714][ T5059] do_syscall_64+0x39/0xb0 [ 48.676156][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.682043][ T5059] RIP: 0033:0x7f75f1b10b39 [ 48.686451][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.706234][ T5059] RSP: 002b:00007ffcd72e29c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 48.714648][ T5059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f75f1b10b39 [ 48.722621][ T5059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 48.730604][ T5059] RBP: 00007ffcd72e29d0 R08: 0000000000000002 R09: 0000000000003131 [ 48.738619][ T5059] R10: 0000000000280404 R11: 0000000000000246 R12: 0000000000000006 [ 48.746601][ T5059] R13: 0000000000000003 R14: 00007ffcd72e2a30 R15: 0000000000000001 [ 48.754689][ T5059] [ 48.760038][ T5059] ------------[ cut here ]------------ [ 48.765571][ T5059] kernel BUG at fs/btrfs/extent-io-tree.c:515! [ 48.771761][ T5059] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 48.777847][ T5059] CPU: 0 PID: 5059 Comm: syz-executor337 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 48.787914][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.797958][ T5059] RIP: 0010:clear_state_bit+0x31b/0x3a0 [ 48.803500][ T5059] Code: 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 33 44 8b 7d 7c e9 af fe ff ff e8 ae 59 f9 fd 0f 0b eb 97 e8 a5 59 f9 fd <0f> 0b 4c 89 f7 e8 2b 61 47 fe e9 72 fd ff ff 4c 89 f7 e8 1e 61 47 [ 48.824064][ T5059] RSP: 0018:ffffc90003cff708 EFLAGS: 00010293 [ 48.830134][ T5059] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000 [ 48.838097][ T5059] RDX: ffff8880233dd7c0 RSI: ffffffff8387f89b RDI: 0000000000000005 [ 48.846059][ T5059] RBP: ffff88807325e480 R08: 0000000000000005 R09: 0000000000000000 [ 48.854017][ T5059] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880734e9400 [ 48.861980][ T5059] R13: 0000000000000000 R14: ffff88807325e4fc R15: 0000000000280fff [ 48.869946][ T5059] FS: 00005555559ae3c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 48.878964][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.885541][ T5059] CR2: 00007f9d0ae78250 CR3: 00000000209f7000 CR4: 0000000000350ef0 [ 48.893503][ T5059] Call Trace: [ 48.896768][ T5059] [ 48.899686][ T5059] __clear_extent_bit+0x5a6/0xc80 [ 48.904713][ T5059] clear_record_extent_bits+0x5c/0x70 [ 48.910164][ T5059] __btrfs_qgroup_release_data+0x1a2/0xa40 [ 48.915968][ T5059] ? btrfs_qgroup_account_extents+0xb50/0xb50 [ 48.922033][ T5059] ? btrfs_reserve_extent+0x4de/0x690 [ 48.927399][ T5059] insert_prealloc_file_extent+0x182/0x420 [ 48.933208][ T5059] ? walk_down_tree+0x490/0x490 [ 48.938051][ T5059] ? insert_reserved_file_extent+0x910/0x910 [ 48.944033][ T5059] __btrfs_prealloc_file_range+0x298/0x940 [ 48.949841][ T5059] ? priority_reclaim_metadata_space+0x5f0/0x5f0 [ 48.956173][ T5059] ? async_cow_start+0xa0/0xa0 [ 48.960937][ T5059] btrfs_prealloc_file_range+0x42/0x50 [ 48.966392][ T5059] btrfs_fallocate+0x191e/0x27b0 [ 48.971334][ T5059] ? btrfs_replace_file_extents+0x14e0/0x14e0 [ 48.977405][ T5059] ? lock_release+0x810/0x810 [ 48.982073][ T5059] ? btrfs_replace_file_extents+0x14e0/0x14e0 [ 48.988137][ T5059] vfs_fallocate+0x48b/0xe00 [ 48.992725][ T5059] __x64_sys_fallocate+0xd3/0x140 [ 48.997748][ T5059] do_syscall_64+0x39/0xb0 [ 49.002161][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.008047][ T5059] RIP: 0033:0x7f75f1b10b39 [ 49.012458][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.032067][ T5059] RSP: 002b:00007ffcd72e29c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 49.040473][ T5059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f75f1b10b39 [ 49.048553][ T5059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 49.056625][ T5059] RBP: 00007ffcd72e29d0 R08: 0000000000000002 R09: 0000000000003131 [ 49.064587][ T5059] R10: 0000000000280404 R11: 0000000000000246 R12: 0000000000000006 [ 49.072552][ T5059] R13: 0000000000000003 R14: 00007ffcd72e2a30 R15: 0000000000000001 [ 49.080526][ T5059] [ 49.083533][ T5059] Modules linked in: [ 49.087457][ T5059] ---[ end trace 0000000000000000 ]--- [ 49.092914][ T5059] RIP: 0010:clear_state_bit+0x31b/0x3a0 [ 49.098716][ T5059] Code: 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 33 44 8b 7d 7c e9 af fe ff ff e8 ae 59 f9 fd 0f 0b eb 97 e8 a5 59 f9 fd <0f> 0b 4c 89 f7 e8 2b 61 47 fe e9 72 fd ff ff 4c 89 f7 e8 1e 61 47 [ 49.118573][ T5059] RSP: 0018:ffffc90003cff708 EFLAGS: 00010293 [ 49.124643][ T5059] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000 [ 49.132664][ T5059] RDX: ffff8880233dd7c0 RSI: ffffffff8387f89b RDI: 0000000000000005 [ 49.140681][ T5059] RBP: ffff88807325e480 R08: 0000000000000005 R09: 0000000000000000 [ 49.148682][ T5059] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880734e9400 [ 49.156691][ T5059] R13: 0000000000000000 R14: ffff88807325e4fc R15: 0000000000280fff [ 49.164652][ T5059] FS: 00005555559ae3c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 49.173644][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.180535][ T5059] CR2: 00007f9d0ae78250 CR3: 00000000209f7000 CR4: 0000000000350ef0 [ 49.188542][ T5059] Kernel panic - not syncing: Fatal exception [ 49.195285][ T5059] Kernel Offset: disabled [ 49.199616][ T5059] Rebooting in 86400 seconds..