syzkaller login: [ 97.190966][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:45314' (ED25519) to the list of known hosts. executing program [ 104.962933][ T5105] loop0: detected capacity change from 0 to 32768 [ 104.980669][ T5105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor368 (5105) [ 105.025861][ T5105] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.050633][ T5105] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.072341][ T5105] BTRFS info (device loop0): using free-space-tree [ 105.141804][ T1042] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x8b5b64de level 0 [ 105.162240][ T5105] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 105.167592][ T5105] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 105.172006][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz-executor368 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 105.177355][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.181340][ T5105] RIP: 0010:btrfs_root_node+0x86/0x3b0 [ 105.183636][ T5105] Code: a0 aa c8 fd 48 83 c4 08 e8 47 80 12 08 89 c3 31 ff 89 c6 e8 4c 6f ec fd 85 db 74 17 e8 33 a1 d2 fd 84 c0 74 1c e8 fa 6a ec fd <43> 80 3c 3c 00 75 4b eb 51 e8 ec 6a ec fd 43 80 3c 3c 00 75 3d eb [ 105.190911][ T5105] RSP: 0018:ffffc90000e376c0 EFLAGS: 00010293 [ 105.193392][ T5105] RAX: ffffffff83a72136 RBX: 0000000000000001 RCX: ffff888000784880 [ 105.197742][ T5105] RDX: 0000000000000000 RSI: ffffffff8c608d20 RDI: ffffffff8c608ce0 [ 105.201778][ T5105] RBP: ffffc90000e378b0 R08: ffffffff83a72124 R09: 1ffffffff283c908 [ 105.205082][ T5105] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 0000000000000003 [ 105.208324][ T5105] R13: dffffc0000000000 R14: 0000000000000018 R15: dffffc0000000000 [ 105.211115][ T5105] FS: 0000555578f7a380(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 105.214296][ T5105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.216798][ T5105] CR2: 00007f674dc59068 CR3: 0000000034fa8000 CR4: 0000000000350ef0 [ 105.220445][ T5105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.224373][ T5105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.227479][ T5105] Call Trace: [ 105.228700][ T5105] [ 105.229836][ T5105] ? __die_body+0x88/0xe0 [ 105.231443][ T5105] ? die_addr+0x108/0x140 [ 105.232946][ T5105] ? exc_general_protection+0x3dd/0x5d0 [ 105.235818][ T5105] ? asm_exc_general_protection+0x26/0x30 [ 105.237994][ T5105] ? btrfs_root_node+0x74/0x3b0 [ 105.239744][ T5105] ? btrfs_root_node+0x86/0x3b0 [ 105.241539][ T5105] ? btrfs_root_node+0x86/0x3b0 [ 105.243551][ T5105] ? btrfs_root_node+0x40/0x3b0 [ 105.246065][ T5105] btrfs_read_lock_root_node+0x27/0xd0 [ 105.249056][ T5105] btrfs_build_ref_tree+0x112/0x16f0 [ 105.251388][ T5105] ? try_to_wake_up+0x939/0x1470 [ 105.253274][ T5105] ? __pfx_transaction_kthread+0x10/0x10 [ 105.255371][ T5105] ? __pfx_btrfs_read_qgroup_config+0x10/0x10 [ 105.257559][ T5105] ? cpus_share_resources+0x120/0x120 [ 105.259344][ T5105] ? __pfx_btrfs_build_ref_tree+0x10/0x10 [ 105.261404][ T5105] ? btrfs_check_active_zone_reservation+0x95/0x4d0 [ 105.264021][ T5105] ? btrfs_free_zone_cache+0x15e/0x190 [ 105.266105][ T5105] open_ctree+0x1fea/0x2a10 [ 105.267831][ T5105] ? bdi_register_va+0x586/0x760 [ 105.269840][ T5105] ? __pfx_open_ctree+0x10/0x10 [ 105.271920][ T5105] btrfs_get_tree+0xe7a/0x1920 [ 105.274162][ T5105] ? __pfx_btrfs_get_tree+0x10/0x10 [ 105.276485][ T5105] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 105.278584][ T5105] vfs_get_tree+0x90/0x2b0 [ 105.280120][ T5105] fc_mount+0x1b/0xb0 [ 105.281493][ T5105] btrfs_get_tree+0x652/0x1920 [ 105.283109][ T5105] ? __pfx_aa_get_newest_label+0x10/0x10 [ 105.285018][ T5105] ? __pfx_btrfs_get_tree+0x10/0x10 [ 105.287137][ T5105] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 105.289789][ T5105] ? apparmor_capable+0x13b/0x1b0 [ 105.292339][ T5105] ? bpf_lsm_capable+0x9/0x10 [ 105.294433][ T5105] vfs_get_tree+0x90/0x2b0 [ 105.296522][ T5105] do_new_mount+0x2be/0xb40 [ 105.298205][ T5105] ? __pfx_do_new_mount+0x10/0x10 [ 105.299968][ T5105] __se_sys_mount+0x2d6/0x3c0 [ 105.301790][ T5105] ? __pfx___se_sys_mount+0x10/0x10 [ 105.303783][ T5105] ? do_syscall_64+0x100/0x230 [ 105.305686][ T5105] ? __x64_sys_mount+0x20/0xc0 [ 105.307575][ T5105] do_syscall_64+0xf3/0x230 [ 105.309381][ T5105] ? clear_bhb_loop+0x35/0x90 [ 105.311412][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.314244][ T5105] RIP: 0033:0x7f3e4d3e7eea [ 105.316392][ T5105] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.323714][ T5105] RSP: 002b:00007ffcc9f71558 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 105.326756][ T5105] RAX: ffffffffffffffda RBX: 00007ffcc9f71560 RCX: 00007f3e4d3e7eea [ 105.329725][ T5105] RDX: 0000000020005100 RSI: 0000000020000040 RDI: 00007ffcc9f71560 [ 105.332836][ T5105] RBP: 0000000000000004 R08: 00007ffcc9f715a0 R09: 0000000000005110 [ 105.336806][ T5105] R10: 0000000000a08811 R11: 0000000000000282 R12: 00007ffcc9f715a0 [ 105.340445][ T5105] R13: 0000000000000003 R14: 0000000001000000 R15: 00007f3e4d42f03b [ 105.343644][ T5105] [ 105.344892][ T5105] Modules linked in: [ 105.601034][ T5105] ---[ end trace 0000000000000000 ]--- [ 105.603919][ T5105] RIP: 0010:btrfs_root_node+0x86/0x3b0 [ 105.605675][ T5105] Code: a0 aa c8 fd 48 83 c4 08 e8 47 80 12 08 89 c3 31 ff 89 c6 e8 4c 6f ec fd 85 db 74 17 e8 33 a1 d2 fd 84 c0 74 1c e8 fa 6a ec fd <43> 80 3c 3c 00 75 4b eb 51 e8 ec 6a ec fd 43 80 3c 3c 00 75 3d eb [ 105.620869][ T5105] RSP: 0018:ffffc90000e376c0 EFLAGS: 00010293 [ 105.623251][ T5105] RAX: ffffffff83a72136 RBX: 0000000000000001 RCX: ffff888000784880 [ 105.630595][ T5105] RDX: 0000000000000000 RSI: ffffffff8c608d20 RDI: ffffffff8c608ce0 [ 105.633803][ T5105] RBP: ffffc90000e378b0 R08: ffffffff83a72124 R09: 1ffffffff283c908 [ 105.640866][ T5105] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 0000000000000003 [ 105.644476][ T5105] R13: dffffc0000000000 R14: 0000000000000018 R15: dffffc0000000000 [ 105.658177][ T5105] FS: 0000555578f7a380(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 105.661634][ T5105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.663960][ T5105] CR2: 00005610c6449d38 CR3: 0000000034fa8000 CR4: 0000000000350ef0 [ 105.666878][ T5105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.680319][ T5105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.690611][ T5105] Kernel panic - not syncing: Fatal exception [ 105.694485][ T5105] Kernel Offset: disabled [ 105.696464][ T5105] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:47:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff9a668f20 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90000e36d90 R8 =ffffffff85408c3b R9 =1ffff11003dcf046 R10=dffffc0000000000 R11=ffffffff85408bf0 R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8 RIP=ffffffff85408c6e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555578f7a380 ffffffff 00c00000 GS =0000 ffff88801fe00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f674dc59068 CR3=0000000034fa8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9f716e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4d46a560 00007f3e4d45e5d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e4d450384 00007f3e4d463240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000