Warning: Permanently added '[localhost]:30013' (ED25519) to the list of known hosts. 2025/09/01 10:14:01 parsed 1 programs syzkaller login: [ 84.121247][ T5349] cgroup: Unknown subsys name 'net' [ 84.190159][ T5349] cgroup: Unknown subsys name 'cpuset' [ 84.198857][ T5349] cgroup: Unknown subsys name 'rlimit' [ 85.866384][ T5349] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.838513][ T5361] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.601487][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 91.705491][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.709385][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.712313][ T5390] bridge_slave_0: entered allmulticast mode [ 91.717341][ T5390] bridge_slave_0: entered promiscuous mode [ 91.723191][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.726800][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730042][ T5390] bridge_slave_1: entered allmulticast mode [ 91.733827][ T5390] bridge_slave_1: entered promiscuous mode [ 91.757809][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.763299][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.784936][ T5390] team0: Port device team_slave_0 added [ 91.789382][ T5390] team0: Port device team_slave_1 added [ 91.812403][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.815233][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.827012][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.833404][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.836816][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.847785][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.882308][ T5390] hsr_slave_0: entered promiscuous mode [ 91.885610][ T5390] hsr_slave_1: entered promiscuous mode [ 91.920276][ T10] cfg80211: failed to load regulatory.db [ 92.040322][ T5390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.048308][ T5390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.054465][ T5390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.061233][ T5390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.085620][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.088504][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.092389][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.095773][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.154799][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.168111][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.172307][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.185368][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.196011][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.199288][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.214692][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.218870][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.399674][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.434640][ T5390] veth0_vlan: entered promiscuous mode [ 92.445691][ T5390] veth1_vlan: entered promiscuous mode [ 92.471541][ T5390] veth0_macvtap: entered promiscuous mode [ 92.478143][ T5390] veth1_macvtap: entered promiscuous mode [ 92.493856][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.507716][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.519075][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528745][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.532601][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.555900][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.723340][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.784268][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.837263][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.955976][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.000870][ T5417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.004575][ T5417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.008683][ T5417] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.012366][ T5417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.015744][ T5417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.030897][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.034481][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.069966][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.073449][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.301621][ T31] bridge_slave_1: left allmulticast mode [ 95.303753][ T31] bridge_slave_1: left promiscuous mode [ 95.316951][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.348043][ T31] bridge_slave_0: left allmulticast mode [ 95.350273][ T31] bridge_slave_0: left promiscuous mode [ 95.352809][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.860380][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.866868][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.871604][ T31] bond0 (unregistering): Released all slaves [ 96.011709][ T31] hsr_slave_0: left promiscuous mode [ 96.026536][ T31] hsr_slave_1: left promiscuous mode [ 96.030690][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.033757][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.047406][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.050614][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.078026][ T31] veth1_macvtap: left promiscuous mode [ 96.080240][ T31] veth0_macvtap: left promiscuous mode [ 96.082401][ T31] veth1_vlan: left promiscuous mode [ 96.084791][ T31] veth0_vlan: left promiscuous mode [ 96.494833][ T31] team0 (unregistering): Port device team_slave_1 removed [ 96.513249][ T31] team0 (unregistering): Port device team_slave_0 removed 2025/09/01 10:14:17 executed programs: 0 [ 97.718887][ T4704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.723494][ T4704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.728232][ T4704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.731952][ T4704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.735353][ T4704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.460095][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 98.692505][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.695798][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.707522][ T5477] bridge_slave_0: entered allmulticast mode [ 98.711137][ T5477] bridge_slave_0: entered promiscuous mode [ 98.733922][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.747958][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.750979][ T5477] bridge_slave_1: entered allmulticast mode [ 98.757320][ T5477] bridge_slave_1: entered promiscuous mode [ 98.804037][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.830993][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.893366][ T5477] team0: Port device team_slave_0 added [ 98.909849][ T5477] team0: Port device team_slave_1 added [ 98.949622][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.952768][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.986278][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.992254][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.995254][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.026755][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.087171][ T5477] hsr_slave_0: entered promiscuous mode [ 99.097332][ T5477] hsr_slave_1: entered promiscuous mode [ 99.572232][ T5477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.584730][ T5477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.603386][ T5477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.617259][ T5477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.758185][ T4704] Bluetooth: hci0: command tx timeout [ 99.766998][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.795831][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.817179][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.820988][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.840894][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.844080][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.209179][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.297989][ T5477] veth0_vlan: entered promiscuous mode [ 100.309931][ T5477] veth1_vlan: entered promiscuous mode [ 100.353888][ T5477] veth0_macvtap: entered promiscuous mode [ 100.378253][ T5477] veth1_macvtap: entered promiscuous mode [ 100.408186][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.423309][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.451123][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.470424][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.474604][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.497292][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.599552][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.602884][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.673968][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.680540][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.221639][ T5529] loop0: detected capacity change from 0 to 32768 [ 101.243978][ T5529] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5529) [ 101.295923][ T5529] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 101.317819][ T5529] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.321702][ T5529] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.434999][ T5529] BTRFS info (device loop0): rebuilding free space tree [ 101.522089][ T5529] BTRFS info (device loop0): disabling free space tree [ 101.536843][ T5529] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.540738][ T5529] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.585906][ T5529] BTRFS info (device loop0): setting nodatasum [ 101.594007][ T5529] BTRFS info (device loop0): enabling ssd optimizations [ 101.616430][ T5529] BTRFS info (device loop0): enabling disk space caching [ 101.619190][ T5529] BTRFS info (device loop0): force clearing of disk cache [ 101.621979][ T5529] BTRFS info (device loop0): force zlib compression, level 3 [ 101.665817][ T5529] BTRFS info (device loop0): balance: start -susage=12582912,drange=8796093022212..9223372036854775807,limit=10376293541461622786,limit=2..2415919104 [ 101.717490][ T5529] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 101.720546][ T5529] BTRFS info (device loop0): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 101.724718][ T5529] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 101.731158][ T5529] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 101.735437][ T5529] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 101.738910][ T5529] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 101.742278][ T5529] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 101.745624][ T5529] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 101.820578][ T5529] BTRFS error (device loop0): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 101.825257][ T5529] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2240512 free, is full [ 101.829923][ T5529] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 101.835726][ T5529] BTRFS info (device loop0): global_block_rsv: size 983040 reserved 983040 [ 101.839825][ T5529] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 101.843199][ T5529] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 101.846596][ T5529] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 101.850032][ T5529] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 101.857814][ T4704] Bluetooth: hci0: command tx timeout [ 101.945250][ T5529] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 101.986399][ T5529] BTRFS critical (device loop0): entry offset 5242880, bytes 12288, bitmap no [ 101.990696][ T5529] BTRFS critical (device loop0): entry offset 5259264, bytes 8192, bitmap no [ 101.994626][ T5529] BTRFS critical (device loop0): entry offset 5271552, bytes 16384, bitmap no [ 101.999279][ T5529] BTRFS critical (device loop0): entry offset 5316608, bytes 36864, bitmap no [ 102.003288][ T5529] BTRFS critical (device loop0): entry offset 5357568, bytes 12288, bitmap no [ 102.007672][ T5529] BTRFS critical (device loop0): entry offset 5378048, bytes 1503232, bitmap no [ 102.059629][ T5529] BTRFS info (device loop0): block group has cluster?: no [ 102.063063][ T5529] BTRFS info (device loop0): 6 free space entries at or bigger than 4096 bytes [ 102.088585][ T5529] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 102.095657][ T5529] BTRFS critical (device loop0): entry offset 6881280, bytes 1638400, bitmap no [ 102.136221][ T5529] BTRFS info (device loop0): block group has cluster?: no [ 102.139463][ T5529] BTRFS info (device loop0): 1 free space entries at or bigger than 4096 bytes [ 102.143357][ T5529] BTRFS info (device loop0): 3227648 bytes available across all block groups [ 102.168560][ T5529] ------------[ cut here ]------------ [ 102.171230][ T5529] BTRFS: Transaction aborted (error -28) [ 102.174227][ T5529] WARNING: CPU: 0 PID: 5529 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.179446][ T5529] Modules linked in: [ 102.181578][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.186368][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.191000][ T5529] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.194242][ T5529] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 102.202774][ T5529] RSP: 0018:ffffc9000cb276e0 EFLAGS: 00010246 [ 102.205572][ T5529] RAX: abe0def685a52300 RBX: ffff88804f23c001 RCX: ffff888036b3a440 [ 102.209146][ T5529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.212597][ T5529] RBP: ffffc9000cb27948 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 102.216012][ T5529] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 102.219699][ T5529] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888059a7a800 [ 102.223243][ T5529] FS: 0000555555db6500(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 102.227465][ T5529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.230525][ T5529] CR2: 00007f8d8e43f020 CR3: 0000000040582000 CR4: 0000000000352ef0 [ 102.234142][ T5529] Call Trace: [ 102.235767][ T5529] [ 102.237417][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 102.239689][ T5529] ? kfree+0x18e/0x440 [ 102.241603][ T5529] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 102.244724][ T5529] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 102.247471][ T5529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.250151][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 102.252474][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 102.254668][ T5529] __btrfs_end_transaction+0x140/0x640 [ 102.257270][ T5529] btrfs_inc_block_group_ro+0x641/0x6f0 [ 102.259824][ T5529] btrfs_relocate_block_group+0x3f1/0xc60 [ 102.262420][ T5529] btrfs_relocate_chunk+0x12f/0x5c0 [ 102.265055][ T5529] __btrfs_balance+0x1860/0x23f0 [ 102.267512][ T5529] ? __pfx___btrfs_balance+0x10/0x10 [ 102.269671][ T5529] ? __wait_for_common+0x650/0x710 [ 102.271802][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 102.273908][ T5529] btrfs_balance+0xac2/0x11b0 [ 102.275874][ T5529] btrfs_ioctl_balance+0x3d3/0x610 [ 102.278118][ T5529] ? btrfs_ioctl+0xb19/0xd00 [ 102.280287][ T5529] ? __pfx_btrfs_ioctl+0x10/0x10 [ 102.282543][ T5529] __se_sys_ioctl+0xf9/0x170 [ 102.284655][ T5529] do_syscall_64+0xfa/0x3b0 [ 102.286854][ T5529] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.289233][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.292052][ T5529] ? clear_bhb_loop+0x60/0xb0 [ 102.294370][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.297078][ T5529] RIP: 0033:0x7f722378ebe9 [ 102.299026][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.307644][ T5529] RSP: 002b:00007ffc4b2cff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.311556][ T5529] RAX: ffffffffffffffda RBX: 00007f72239c5fa0 RCX: 00007f722378ebe9 [ 102.316490][ T5529] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 102.320476][ T5529] RBP: 00007f7223811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.323819][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.327111][ T5529] R13: 00007f72239c5fa0 R14: 00007f72239c5fa0 R15: 0000000000000003 [ 102.330510][ T5529] [ 102.331935][ T5529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.335120][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.338995][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.343611][ T5529] Call Trace: [ 102.345155][ T5529] [ 102.346488][ T5529] dump_stack_lvl+0x99/0x250 [ 102.348480][ T5529] ? __asan_memcpy+0x40/0x70 [ 102.350442][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.352654][ T5529] ? __pfx__printk+0x10/0x10 [ 102.354675][ T5529] vpanic+0x281/0x750 [ 102.356603][ T5529] ? __pfx__printk+0x10/0x10 [ 102.358613][ T5529] ? __pfx_vpanic+0x10/0x10 [ 102.360738][ T5529] ? is_bpf_text_address+0x26/0x2b0 [ 102.362998][ T5529] panic+0xb9/0xc0 [ 102.364607][ T5529] ? __pfx_panic+0x10/0x10 [ 102.366366][ T5529] __warn+0x31b/0x4b0 [ 102.367888][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.370609][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.373051][ T5529] report_bug+0x2be/0x4f0 [ 102.374868][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.377788][ T5529] ? btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.380762][ T5529] ? btrfs_create_pending_block_groups+0x1152/0x1780 [ 102.383610][ T5529] handle_bug+0x84/0x160 [ 102.385771][ T5529] exc_invalid_op+0x1a/0x50 [ 102.388376][ T5529] asm_exc_invalid_op+0x1a/0x20 [ 102.390605][ T5529] RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 [ 102.393596][ T5529] Code: 00 e8 64 1d b9 fd 84 c0 74 29 e8 6b 7b d2 fd e9 fd 01 00 00 e8 61 7b d2 fd 90 48 c7 c7 20 08 d0 8b 44 89 f6 e8 c1 07 96 fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 62 7c 8e 07 41 89 c7 31 ff 89 c6 e8 [ 102.401504][ T5529] RSP: 0018:ffffc9000cb276e0 EFLAGS: 00010246 [ 102.403810][ T5529] RAX: abe0def685a52300 RBX: ffff88804f23c001 RCX: ffff888036b3a440 [ 102.407624][ T5529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.410750][ T5529] RBP: ffffc9000cb27948 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 102.413627][ T5529] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 102.416418][ T5529] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff888059a7a800 [ 102.419674][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 102.421453][ T5529] ? kfree+0x18e/0x440 [ 102.423225][ T5529] ? __pfx_btrfs_create_pending_block_groups+0x10/0x10 [ 102.426227][ T5529] ? btrfs_inc_block_group_ro+0x639/0x6f0 [ 102.428733][ T5529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.431372][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 102.433771][ T5529] ? _raw_spin_unlock+0x28/0x50 [ 102.435958][ T5529] __btrfs_end_transaction+0x140/0x640 [ 102.438285][ T5529] btrfs_inc_block_group_ro+0x641/0x6f0 [ 102.440918][ T5529] btrfs_relocate_block_group+0x3f1/0xc60 [ 102.443430][ T5529] btrfs_relocate_chunk+0x12f/0x5c0 [ 102.445824][ T5529] __btrfs_balance+0x1860/0x23f0 [ 102.448175][ T5529] ? __pfx___btrfs_balance+0x10/0x10 [ 102.450487][ T5529] ? __wait_for_common+0x650/0x710 [ 102.452594][ T5529] ? do_raw_spin_unlock+0x4d/0x240 [ 102.454715][ T5529] btrfs_balance+0xac2/0x11b0 [ 102.456569][ T5529] btrfs_ioctl_balance+0x3d3/0x610 [ 102.458637][ T5529] ? btrfs_ioctl+0xb19/0xd00 [ 102.460844][ T5529] ? __pfx_btrfs_ioctl+0x10/0x10 [ 102.463141][ T5529] __se_sys_ioctl+0xf9/0x170 [ 102.465284][ T5529] do_syscall_64+0xfa/0x3b0 [ 102.467211][ T5529] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.469442][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.472095][ T5529] ? clear_bhb_loop+0x60/0xb0 [ 102.474148][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.476645][ T5529] RIP: 0033:0x7f722378ebe9 [ 102.478564][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.486716][ T5529] RSP: 002b:00007ffc4b2cff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.490539][ T5529] RAX: ffffffffffffffda RBX: 00007f72239c5fa0 RCX: 00007f722378ebe9 [ 102.494052][ T5529] RDX: 0000200000000500 RSI: 00000000c4009420 RDI: 0000000000000003 [ 102.497510][ T5529] RBP: 00007f7223811e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.501019][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.504479][ T5529] R13: 00007f72239c5fa0 R14: 00007f72239c5fa0 R15: 0000000000000003 [ 102.507852][ T5529] [ 102.509581][ T5529] Kernel Offset: disabled [ 102.511592][ T5529] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:14:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000cb26e90 R8 =ffff888033bd0237 R9 =1ffff1100677a046 R10=dffffc0000000000 R11=ffffffff8550ca40 R12=dffffc0000000000 R13=ffffffff99b088c2 R14=ffffffff99dfd820 R15=0000000000000000 RIP=ffffffff8550cabc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555db6500 ffffffff 00c00000 GS =0000 ffff88808d20d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d8e43f020 CR3=0000000040582000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b2d0220 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b2d03a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b2d03a6 00007ffc4b2d03ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7223812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000