Warning: Permanently added '[localhost]:64653' (ED25519) to the list of known hosts. 2025/08/23 17:23:43 parsed 1 programs syzkaller login: [ 90.151176][ T5346] cgroup: Unknown subsys name 'net' [ 90.245520][ T5346] cgroup: Unknown subsys name 'cpuset' [ 90.251000][ T5346] cgroup: Unknown subsys name 'rlimit' [ 91.962047][ T10] cfg80211: failed to load regulatory.db [ 92.041551][ T5346] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.454566][ T5363] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.950846][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 98.025185][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.028928][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.034828][ T5390] bridge_slave_0: entered allmulticast mode [ 98.038518][ T5390] bridge_slave_0: entered promiscuous mode [ 98.044956][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.048082][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.051074][ T5390] bridge_slave_1: entered allmulticast mode [ 98.056623][ T5390] bridge_slave_1: entered promiscuous mode [ 98.085653][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.093228][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.122656][ T5390] team0: Port device team_slave_0 added [ 98.127473][ T5390] team0: Port device team_slave_1 added [ 98.150680][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.153787][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.165587][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.173045][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.176224][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.188416][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.228968][ T5390] hsr_slave_0: entered promiscuous mode [ 98.232955][ T5390] hsr_slave_1: entered promiscuous mode [ 98.409019][ T5390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.418651][ T5390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.428043][ T5390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.436349][ T5390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.474833][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.479053][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.484374][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.488322][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.554962][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.569822][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.576662][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.590444][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.601013][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.604286][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.617123][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.620546][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.837974][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.880636][ T5390] veth0_vlan: entered promiscuous mode [ 98.893683][ T5390] veth1_vlan: entered promiscuous mode [ 98.926011][ T5390] veth0_macvtap: entered promiscuous mode [ 98.934710][ T5390] veth1_macvtap: entered promiscuous mode [ 98.954634][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.967513][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.980610][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.987890][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.005572][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009864][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.165725][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.238106][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.304106][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.404754][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.328380][ T5441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.335473][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.338779][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.343024][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.346236][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.619533][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.628066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.730630][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.746004][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.813202][ T1037] bridge_slave_1: left allmulticast mode [ 101.815860][ T1037] bridge_slave_1: left promiscuous mode [ 101.819054][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.934997][ T1037] bridge_slave_0: left allmulticast mode [ 101.937369][ T1037] bridge_slave_0: left promiscuous mode [ 101.939864][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.394156][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.405299][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.412255][ T1037] bond0 (unregistering): Released all slaves [ 102.584941][ T1037] hsr_slave_0: left promiscuous mode [ 102.601692][ T1037] hsr_slave_1: left promiscuous mode [ 102.606240][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.632010][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.636388][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.639706][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.684722][ T1037] veth1_macvtap: left promiscuous mode [ 102.687570][ T1037] veth0_macvtap: left promiscuous mode [ 102.690167][ T1037] veth1_vlan: left promiscuous mode [ 102.712700][ T1037] veth0_vlan: left promiscuous mode [ 103.392642][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 103.430219][ T1037] team0 (unregistering): Port device team_slave_0 removed 2025/08/23 17:24:00 executed programs: 0 [ 104.614587][ T4703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.618750][ T4703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.623100][ T4703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.627125][ T4703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.631014][ T4703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.430728][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 105.665126][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.672954][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.676731][ T5475] bridge_slave_0: entered allmulticast mode [ 105.690325][ T5475] bridge_slave_0: entered promiscuous mode [ 105.703785][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.707226][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.710744][ T5475] bridge_slave_1: entered allmulticast mode [ 105.724968][ T5475] bridge_slave_1: entered promiscuous mode [ 105.775190][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.793506][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.820622][ T5475] team0: Port device team_slave_0 added [ 105.827326][ T5475] team0: Port device team_slave_1 added [ 105.858623][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.862985][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.875812][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.882802][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.885799][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.897635][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.937728][ T5475] hsr_slave_0: entered promiscuous mode [ 105.940946][ T5475] hsr_slave_1: entered promiscuous mode [ 106.416942][ T5475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.436469][ T5475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.463693][ T5475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.470160][ T5475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.607768][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.655595][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.673727][ T4703] Bluetooth: hci0: command tx timeout [ 106.683335][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.686818][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.694035][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.697262][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.083908][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.160349][ T5475] veth0_vlan: entered promiscuous mode [ 107.177808][ T5475] veth1_vlan: entered promiscuous mode [ 107.234732][ T5475] veth0_macvtap: entered promiscuous mode [ 107.254473][ T5475] veth1_macvtap: entered promiscuous mode [ 107.285555][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.305190][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.334930][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.339053][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.352402][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.357075][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.483853][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.487105][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.563494][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.569630][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.094049][ T5528] loop0: detected capacity change from 0 to 32768 [ 108.134409][ T5528] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5528) [ 108.197954][ T5528] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 108.219161][ T5528] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 108.229625][ T5528] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 108.341627][ T5528] BTRFS info (device loop0): rebuilding free space tree [ 108.402881][ T5528] BTRFS info (device loop0): disabling free space tree [ 108.406110][ T5528] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.410484][ T5528] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.474833][ T5528] BTRFS info (device loop0): setting nodatasum [ 108.477987][ T5528] BTRFS info (device loop0): enabling ssd optimizations [ 108.480911][ T5528] BTRFS info (device loop0): enabling disk space caching [ 108.506939][ T5528] BTRFS info (device loop0): force clearing of disk cache [ 108.510734][ T5528] BTRFS info (device loop0): force zlib compression, level 3 [ 108.576628][ T5528] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..7,limit=10376293541461622786,limit=2..2415919104 [ 108.605467][ T5528] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 108.609614][ T5528] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 108.614327][ T5528] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 108.619756][ T5528] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 108.624043][ T5528] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 108.627456][ T5528] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 108.630753][ T5528] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 108.634646][ T5528] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 108.712980][ T5528] BTRFS error (device loop0): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 108.717571][ T5528] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2240512 free, is full [ 108.722520][ T5528] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 108.728021][ T5528] BTRFS info (device loop0): global_block_rsv: size 983040 reserved 983040 [ 108.731867][ T5528] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 108.734818][ T5528] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 108.737704][ T5528] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 108.740657][ T5528] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 108.764721][ T4703] Bluetooth: hci0: command tx timeout [ 108.793037][ T5528] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 108.799856][ T5528] BTRFS critical (device loop0): entry offset 5242880, bytes 12288, bitmap no [ 108.804153][ T5528] BTRFS critical (device loop0): entry offset 5259264, bytes 8192, bitmap no [ 108.807861][ T5528] BTRFS critical (device loop0): entry offset 5271552, bytes 16384, bitmap no [ 108.811641][ T5528] BTRFS critical (device loop0): entry offset 5316608, bytes 36864, bitmap no [ 108.815249][ T5528] BTRFS critical (device loop0): entry offset 5357568, bytes 12288, bitmap no [ 108.818938][ T5528] BTRFS critical (device loop0): entry offset 5378048, bytes 1503232, bitmap no [ 108.858769][ T5528] BTRFS info (device loop0): block group has cluster?: no [ 108.865398][ T5528] BTRFS info (device loop0): 6 free space entries at or bigger than 4096 bytes [ 108.869856][ T5528] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 108.878151][ T5528] BTRFS critical (device loop0): entry offset 6881280, bytes 1638400, bitmap no [ 108.886023][ T5528] BTRFS info (device loop0): block group has cluster?: no [ 108.889539][ T5528] BTRFS info (device loop0): 1 free space entries at or bigger than 4096 bytes [ 108.894399][ T5528] BTRFS info (device loop0): 3227648 bytes available across all block groups [ 108.898987][ T5528] ------------[ cut here ]------------ [ 108.901644][ T5528] BTRFS: Transaction aborted (error -28) [ 108.905915][ T5528] WARNING: CPU: 0 PID: 5528 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x1150/0x1780 [ 108.911782][ T5528] Modules linked in: [ 108.914966][ T5528] CPU: 0 UID: 0 PID: 5528 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.918541][ T5528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.922983][ T5528] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 108.925867][ T5528] Code: 00 e8 a4 25 b9 fd 84 c0 74 29 e8 ab 83 d2 fd e9 fd 01 00 00 e8 a1 83 d2 fd 90 48 c7 c7 20 06 d0 8b 44 89 f6 e8 91 12 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 32 67 8e 07 41 89 c7 31 ff 89 c6 e8 [ 108.934029][ T5528] RSP: 0018:ffffc90002b6f6e0 EFLAGS: 00010246 [ 108.936976][ T5528] RAX: 3fe26530c5ed4a00 RBX: ffff888033364001 RCX: ffff8880006d0000 [ 108.941087][ T5528] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 108.944649][ T5528] RBP: ffffc90002b6f948 R08: 0000000000000003 R09: 0000000000000004 [ 108.948108][ T5528] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 108.951994][ T5528] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888043686000 [ 108.956172][ T5528] FS: 000055556b01b500(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 108.961611][ T5528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.964677][ T5528] CR2: 0000557fd9286138 CR3: 0000000044816000 CR4: 0000000000352ef0 [ 108.968565][ T5528] Call Trace: [ 108.970104][ T5528] [ 108.971550][ T5528] ? _raw_spin_unlock+0x28/0x50 [ 108.973766][ T5528] ? kfree+0x18e/0x440 [ 108.975595][ T5528] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 108.978592][ T5528] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 108.981136][ T5528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.984027][ T5528] ? do_raw_spin_unlock+0x4d/0x240 [ 108.986499][ T5528] ? _raw_spin_unlock+0x28/0x50 [ 108.988843][ T5528] __btrfs_end_transaction+0x140/0x640 [ 108.991919][ T5528] btrfs_inc_block_group_ro+0x641/0x6f0 [ 108.994483][ T5528] btrfs_relocate_block_group+0x3f1/0xc60 [ 108.997075][ T5528] btrfs_relocate_chunk+0x12f/0x5c0 [ 108.999502][ T5528] __btrfs_balance+0x1860/0x23f0 [ 109.001757][ T5528] ? __pfx___btrfs_balance+0x10/0x10 [ 109.004095][ T5528] ? __wait_for_common+0x650/0x710 [ 109.006562][ T5528] ? do_raw_spin_unlock+0x4d/0x240 [ 109.009032][ T5528] btrfs_balance+0xac2/0x11b0 [ 109.011461][ T5528] btrfs_ioctl_balance+0x3d3/0x610 [ 109.013804][ T5528] ? btrfs_ioctl+0xb19/0xd00 [ 109.016283][ T5528] ? __pfx_btrfs_ioctl+0x10/0x10 [ 109.018989][ T5528] __se_sys_ioctl+0xfc/0x170 [ 109.021691][ T5528] do_syscall_64+0xfa/0x3b0 [ 109.023699][ T5528] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.026076][ T5528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.029062][ T5528] ? clear_bhb_loop+0x60/0xb0 [ 109.031642][ T5528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.034268][ T5528] RIP: 0033:0x7f9debf8ebe9 [ 109.036282][ T5528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.044691][ T5528] RSP: 002b:00007ffea14b81d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.048485][ T5528] RAX: ffffffffffffffda RBX: 00007f9dec1b5fa0 RCX: 00007f9debf8ebe9 [ 109.052314][ T5528] RDX: 0000200000000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 109.056014][ T5528] RBP: 00007f9dec011e19 R08: 0000000000000000 R09: 0000000000000000 [ 109.059877][ T5528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.063807][ T5528] R13: 00007f9dec1b5fa0 R14: 00007f9dec1b5fa0 R15: 0000000000000003 [ 109.067900][ T5528] [ 109.069366][ T5528] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.072453][ T5528] CPU: 0 UID: 0 PID: 5528 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.076312][ T5528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.080727][ T5528] Call Trace: [ 109.082220][ T5528] [ 109.083506][ T5528] dump_stack_lvl+0x99/0x250 [ 109.085515][ T5528] ? __asan_memcpy+0x40/0x70 [ 109.087508][ T5528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.089825][ T5528] ? __pfx__printk+0x10/0x10 [ 109.091852][ T5528] vpanic+0x281/0x750 [ 109.093541][ T5528] ? __pfx__printk+0x10/0x10 [ 109.095515][ T5528] ? __pfx_vpanic+0x10/0x10 [ 109.097401][ T5528] ? is_bpf_text_address+0x26/0x2b0 [ 109.099791][ T5528] panic+0xb9/0xc0 [ 109.101425][ T5528] ? __pfx_panic+0x10/0x10 [ 109.103380][ T5528] __warn+0x31b/0x4b0 [ 109.105082][ T5528] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 109.107760][ T5528] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 109.110376][ T5528] report_bug+0x2be/0x4f0 [ 109.112161][ T5528] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 109.114716][ T5528] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 109.117383][ T5528] ? btrfs_create_pending_block_groups+0x1152/0x1780 [ 109.120111][ T5528] handle_bug+0x84/0x160 [ 109.122037][ T5528] exc_invalid_op+0x1a/0x50 [ 109.124163][ T5528] asm_exc_invalid_op+0x1a/0x20 [ 109.126324][ T5528] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 109.129535][ T5528] Code: 00 e8 a4 25 b9 fd 84 c0 74 29 e8 ab 83 d2 fd e9 fd 01 00 00 e8 a1 83 d2 fd 90 48 c7 c7 20 06 d0 8b 44 89 f6 e8 91 12 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 32 67 8e 07 41 89 c7 31 ff 89 c6 e8 [ 109.137387][ T5528] RSP: 0018:ffffc90002b6f6e0 EFLAGS: 00010246 [ 109.139985][ T5528] RAX: 3fe26530c5ed4a00 RBX: ffff888033364001 RCX: ffff8880006d0000 [ 109.143281][ T5528] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 109.146678][ T5528] RBP: ffffc90002b6f948 R08: 0000000000000003 R09: 0000000000000004 [ 109.150093][ T5528] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 109.153422][ T5528] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888043686000 [ 109.156672][ T5528] ? _raw_spin_unlock+0x28/0x50 [ 109.158684][ T5528] ? kfree+0x18e/0x440 [ 109.160463][ T5528] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 109.163311][ T5528] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 109.165708][ T5528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.168305][ T5528] ? do_raw_spin_unlock+0x4d/0x240 [ 109.170521][ T5528] ? _raw_spin_unlock+0x28/0x50 [ 109.172560][ T5528] __btrfs_end_transaction+0x140/0x640 [ 109.174889][ T5528] btrfs_inc_block_group_ro+0x641/0x6f0 [ 109.177205][ T5528] btrfs_relocate_block_group+0x3f1/0xc60 [ 109.179581][ T5528] btrfs_relocate_chunk+0x12f/0x5c0 [ 109.181681][ T5528] __btrfs_balance+0x1860/0x23f0 [ 109.183844][ T5528] ? __pfx___btrfs_balance+0x10/0x10 [ 109.186057][ T5528] ? __wait_for_common+0x650/0x710 [ 109.188254][ T5528] ? do_raw_spin_unlock+0x4d/0x240 [ 109.190382][ T5528] btrfs_balance+0xac2/0x11b0 [ 109.192435][ T5528] btrfs_ioctl_balance+0x3d3/0x610 [ 109.194625][ T5528] ? btrfs_ioctl+0xb19/0xd00 [ 109.196604][ T5528] ? __pfx_btrfs_ioctl+0x10/0x10 [ 109.198749][ T5528] __se_sys_ioctl+0xfc/0x170 [ 109.200715][ T5528] do_syscall_64+0xfa/0x3b0 [ 109.202645][ T5528] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.204860][ T5528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.207389][ T5528] ? clear_bhb_loop+0x60/0xb0 [ 109.209464][ T5528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.212080][ T5528] RIP: 0033:0x7f9debf8ebe9 [ 109.214104][ T5528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.222445][ T5528] RSP: 002b:00007ffea14b81d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.226068][ T5528] RAX: ffffffffffffffda RBX: 00007f9dec1b5fa0 RCX: 00007f9debf8ebe9 [ 109.229887][ T5528] RDX: 0000200000000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 109.233595][ T5528] RBP: 00007f9dec011e19 R08: 0000000000000000 R09: 0000000000000000 [ 109.238013][ T5528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.241773][ T5528] R13: 00007f9dec1b5fa0 R14: 00007f9dec1b5fa0 R15: 0000000000000003 [ 109.245143][ T5528] [ 109.246802][ T5528] Kernel Offset: disabled [ 109.248797][ T5528] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:24:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b6ee30 R8 =ffff888033a48237 R9 =1ffff11006749046 R10=dffffc0000000000 R11=ffffffff8550bd00 R12=dffffc0000000000 R13=ffffffff99b058e5 R14=ffffffff99dfa820 R15=0000000000000000 RIP=ffffffff8550bd7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556b01b500 ffffffff 00c00000 GS =0000 ffff88808d210000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557fd9286138 CR3=0000000044816000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000060000000 Opmask03=0000000000000000 Opmask04=00000000dfffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcfbd145b 00007ffdcfbd145b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcfbd1960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcfbd1960 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361682030383231 3838362070756f72 67206b636f6c6220 3a2930706f6f6c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361622030323231 3232362070756572 6720616365666220 3023307065656600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6120736574796220 3834363732323320 3a2930706f6f6c20 6563697665642820 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029656c62616c69 6176612073657479 6220303034383336 312820656c626173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756e755f656e6f7a 2030207265707573 203020636f6c6c61 6c65642030206465 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7672657365722030 2064656e6e697020 3020646573752030 202c736574796220 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030343833363120 7361682030383231 3838362070756f72 67206b636f6c6220 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000