Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts.
2025/06/22 23:26:28 ignoring optional flag "sandboxArg"="0"
2025/06/22 23:26:28 ignoring optional flag "type"="gce"
2025/06/22 23:26:28 parsed 1 programs
2025/06/22 23:26:30 executed programs: 0
[ 100.336755][ T6151] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 100.399403][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.407656][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.415928][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.424234][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.432335][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.569440][ T6158] chnl_net:caif_netlink_parms(): no params data found
[ 100.638293][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.645519][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.652638][ T6158] bridge_slave_0: entered allmulticast mode
[ 100.660014][ T6158] bridge_slave_0: entered promiscuous mode
[ 100.667869][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.675405][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.682540][ T6158] bridge_slave_1: entered allmulticast mode
[ 100.689808][ T6158] bridge_slave_1: entered promiscuous mode
[ 100.718716][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.730293][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.760509][ T6158] team0: Port device team_slave_0 added
[ 100.769207][ T6158] team0: Port device team_slave_1 added
[ 100.796879][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.803956][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.830018][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.843771][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.850737][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.877001][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.917191][ T6158] hsr_slave_0: entered promiscuous mode
[ 100.923740][ T6158] hsr_slave_1: entered promiscuous mode
[ 101.499023][ T6158] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.518388][ T6158] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.529650][ T6158] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.541278][ T6158] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.649659][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.674413][ T6158] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.688100][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.695441][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.715552][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.722752][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.995357][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.056889][ T6158] veth0_vlan: entered promiscuous mode
[ 102.072838][ T6158] veth1_vlan: entered promiscuous mode
[ 102.112399][ T6158] veth0_macvtap: entered promiscuous mode
[ 102.125120][ T6158] veth1_macvtap: entered promiscuous mode
[ 102.148569][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.166921][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.185992][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.197345][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.222512][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.248073][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.310223][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.322640][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.356452][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.367717][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.454466][ T5151] Bluetooth: hci0: command tx timeout
[ 102.729009][ T6215] loop0: detected capacity change from 0 to 32768
[ 102.742768][ T6215] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6215)
[ 102.778469][ T6215] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 102.789915][ T6215] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[ 102.800273][ T6215] BTRFS info (device loop0): using free-space-tree
[ 102.878110][ T6215]
[ 102.880492][ T6215] ======================================================
[ 102.887524][ T6215] WARNING: possible circular locking dependency detected
[ 102.894653][ T6215] 6.16.0-rc2-next-20250620-syzkaller-04336-g5d4809e25903 #0 Not tainted
[ 102.902976][ T6215] ------------------------------------------------------
[ 102.909996][ T6215] syz-executor.0/6215 is trying to acquire lock:
[ 102.916323][ T6215] ffffffff8e6e9fe8 (uuid_mutex){+.+.}-{4:4}, at: btrfs_read_chunk_tree+0xef/0x2170
[ 102.925761][ T6215]
[ 102.925761][ T6215] but task is already holding lock:
[ 102.933129][ T6215] ffff8880698680e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[ 102.942825][ T6215]
[ 102.942825][ T6215] which lock already depends on the new lock.
[ 102.942825][ T6215]
[ 102.953311][ T6215]
[ 102.953311][ T6215] the existing dependency chain (in reverse order) is:
[ 102.962333][ T6215]
[ 102.962333][ T6215] -> #1 (&type->s_umount_key#49/1){+.+.}-{4:4}:
[ 102.970979][ T6215] lock_acquire+0x120/0x360
[ 102.976020][ T6215] down_write_nested+0x9d/0x200
[ 102.981399][ T6215] alloc_super+0x204/0x970
[ 102.986337][ T6215] sget_fc+0x329/0xa40
[ 102.990947][ T6215] btrfs_get_tree+0x4c6/0x12d0
[ 102.996248][ T6215] vfs_get_tree+0x8f/0x2b0
[ 103.001269][ T6215] do_new_mount+0x24a/0xa40
[ 103.006278][ T6215] __se_sys_mount+0x317/0x410
[ 103.011456][ T6215] do_syscall_64+0xfa/0x3b0
[ 103.016506][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.023117][ T6215]
[ 103.023117][ T6215] -> #0 (uuid_mutex){+.+.}-{4:4}:
[ 103.030331][ T6215] validate_chain+0xb9b/0x2140
[ 103.035700][ T6215] __lock_acquire+0xab9/0xd20
[ 103.040973][ T6215] lock_acquire+0x120/0x360
[ 103.046020][ T6215] __mutex_lock+0x182/0xe80
[ 103.051043][ T6215] btrfs_read_chunk_tree+0xef/0x2170
[ 103.056927][ T6215] open_ctree+0x17f2/0x3a10
[ 103.062028][ T6215] btrfs_get_tree+0xc6f/0x12d0
[ 103.067388][ T6215] vfs_get_tree+0x8f/0x2b0
[ 103.072327][ T6215] do_new_mount+0x24a/0xa40
[ 103.077349][ T6215] __se_sys_mount+0x317/0x410
[ 103.082651][ T6215] do_syscall_64+0xfa/0x3b0
[ 103.087668][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.094453][ T6215]
[ 103.094453][ T6215] other info that might help us debug this:
[ 103.094453][ T6215]
[ 103.104755][ T6215] Possible unsafe locking scenario:
[ 103.104755][ T6215]
[ 103.112480][ T6215] CPU0 CPU1
[ 103.117956][ T6215] ---- ----
[ 103.123328][ T6215] lock(&type->s_umount_key#49/1);
[ 103.128542][ T6215] lock(uuid_mutex);
[ 103.135045][ T6215] lock(&type->s_umount_key#49/1);
[ 103.142788][ T6215] lock(uuid_mutex);
[ 103.146778][ T6215]
[ 103.146778][ T6215] *** DEADLOCK ***
[ 103.146778][ T6215]
[ 103.154903][ T6215] 1 lock held by syz-executor.0/6215:
[ 103.160267][ T6215] #0: ffff8880698680e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[ 103.170474][ T6215]
[ 103.170474][ T6215] stack backtrace:
[ 103.178125][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz-executor.0 Not tainted 6.16.0-rc2-next-20250620-syzkaller-04336-g5d4809e25903 #0 PREEMPT(full)
[ 103.178145][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 103.178167][ T6215] Call Trace:
[ 103.178174][ T6215]
[ 103.178180][ T6215] dump_stack_lvl+0x189/0x250
[ 103.178203][ T6215] ? __pfx_dump_stack_lvl+0x10/0x10
[ 103.178220][ T6215] ? __pfx__printk+0x10/0x10
[ 103.178233][ T6215] ? print_lock_name+0xde/0x100
[ 103.178247][ T6215] print_circular_bug+0x2ee/0x310
[ 103.178260][ T6215] check_noncircular+0x134/0x160
[ 103.178280][ T6215] validate_chain+0xb9b/0x2140
[ 103.178304][ T6215] __lock_acquire+0xab9/0xd20
[ 103.178321][ T6215] ? btrfs_read_chunk_tree+0xef/0x2170
[ 103.178335][ T6215] lock_acquire+0x120/0x360
[ 103.178349][ T6215] ? btrfs_read_chunk_tree+0xef/0x2170
[ 103.178366][ T6215] __mutex_lock+0x182/0xe80
[ 103.178379][ T6215] ? btrfs_read_chunk_tree+0xef/0x2170
[ 103.178395][ T6215] ? btrfs_read_chunk_tree+0xef/0x2170
[ 103.178408][ T6215] ? __pfx___mutex_lock+0x10/0x10
[ 103.178422][ T6215] ? rcu_is_watching+0x15/0xb0
[ 103.178439][ T6215] ? trace_kmem_cache_alloc+0x1f/0xc0
[ 103.178456][ T6215] ? btrfs_read_chunk_tree+0xcd/0x2170
[ 103.178470][ T6215] btrfs_read_chunk_tree+0xef/0x2170
[ 103.178485][ T6215] ? btrfs_root_node+0xae/0x4a0
[ 103.178501][ T6215] ? btrfs_root_node+0x459/0x4a0
[ 103.178514][ T6215] ? btrfs_root_node+0xae/0x4a0
[ 103.178528][ T6215] ? __pfx_btrfs_root_node+0x10/0x10
[ 103.178544][ T6215] ? __pfx_btrfs_read_chunk_tree+0x10/0x10
[ 103.178558][ T6215] ? load_super_root+0x2b2/0x3f0
[ 103.178571][ T6215] ? __pfx_load_super_root+0x10/0x10
[ 103.178586][ T6215] ? read_extent_buffer+0x120/0x5e0
[ 103.178599][ T6215] ? open_ctree+0x17ea/0x3a10
[ 103.178613][ T6215] open_ctree+0x17f2/0x3a10
[ 103.178626][ T6215] ? bdi_register_va+0x58d/0x740
[ 103.178639][ T6215] ? open_ctree+0xa1a/0x3a10
[ 103.178656][ T6215] ? __pfx_open_ctree+0x10/0x10
[ 103.178671][ T6215] btrfs_get_tree+0xc6f/0x12d0
[ 103.178688][ T6215] vfs_get_tree+0x8f/0x2b0
[ 103.178707][ T6215] do_new_mount+0x24a/0xa40
[ 103.178722][ T6215] __se_sys_mount+0x317/0x410
[ 103.178735][ T6215] ? __pfx___se_sys_mount+0x10/0x10
[ 103.178748][ T6215] ? do_syscall_64+0xbe/0x3b0
[ 103.178761][ T6215] ? __x64_sys_mount+0x20/0xc0
[ 103.178773][ T6215] do_syscall_64+0xfa/0x3b0
[ 103.178784][ T6215] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.178795][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.178807][ T6215] ? clear_bhb_loop+0x60/0xb0
[ 103.178820][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.178832][ T6215] RIP: 0033:0x7f4931c7e1ea
[ 103.178849][ T6215] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 103.178859][ T6215] RSP: 002b:00007f4932ab4ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 103.178879][ T6215] RAX: ffffffffffffffda RBX: 00007f4932ab4f80 RCX: 00007f4931c7e1ea
[ 103.178888][ T6215] RDX: 0000000020005100 RSI: 0000000020005140 RDI: 00007f4932ab4f40
[ 103.178896][ T6215] RBP: 0000000020005100 R08: 00007f4932ab4f80 R09: 0000000000000000
[ 103.178905][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005140
[ 103.178912][ T6215] R13: 00007f4932ab4f40 R14: 00000000000050d4 R15: 0000000020000340
[ 103.178925][ T6215]
[ 103.543853][ T6215] FAULT_INJECTION: forcing a failure.
[ 103.543853][ T6215] name failslab, interval 1, probability 0, space 0, times 1
[ 103.556561][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz-executor.0 Not tainted 6.16.0-rc2-next-20250620-syzkaller-04336-g5d4809e25903 #0 PREEMPT(full)
[ 103.556586][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 103.556596][ T6215] Call Trace:
[ 103.556602][ T6215]
[ 103.556610][ T6215] dump_stack_lvl+0x189/0x250
[ 103.556638][ T6215] ? __pfx____ratelimit+0x10/0x10
[ 103.556653][ T6215] ? __pfx_dump_stack_lvl+0x10/0x10
[ 103.556674][ T6215] ? __pfx__printk+0x10/0x10
[ 103.556690][ T6215] ? fs_reclaim_acquire+0x7d/0x100
[ 103.556707][ T6215] ? rcu_is_watching+0x15/0xb0
[ 103.556728][ T6215] ? __pfx___might_resched+0x10/0x10
[ 103.556749][ T6215] ? lock_acquire+0x5f/0x360
[ 103.556768][ T6215] should_fail_ex+0x414/0x560
[ 103.556784][ T6215] should_failslab+0xa8/0x100
[ 103.556798][ T6215] __kmalloc_cache_noprof+0x70/0x3d0
[ 103.556819][ T6215] ? ulist_prealloc+0x9c/0x110
[ 103.556840][ T6215] ulist_prealloc+0x9c/0x110
[ 103.556860][ T6215] set_extent_bit+0x260/0x21a0
[ 103.556911][ T6215] ? __pfx_set_extent_bit+0x10/0x10
[ 103.556927][ T6215] ? __kasan_kmalloc+0x93/0xb0
[ 103.556949][ T6215] btrfs_set_record_extent_bits+0x50/0x90
[ 103.556967][ T6215] qgroup_reserve_data+0x29e/0x8d0
[ 103.556988][ T6215] btrfs_qgroup_reserve_data+0x2e/0xb0
[ 103.557004][ T6215] btrfs_fallocate+0xfda/0x1ba0
[ 103.557028][ T6215] ? __pfx_btrfs_fallocate+0x10/0x10
[ 103.557043][ T6215] ? vfs_fallocate+0x62a/0x830
[ 103.557064][ T6215] ? rcu_is_watching+0x15/0xb0
[ 103.557084][ T6215] ? lock_acquire+0x5f/0x360
[ 103.557103][ T6215] ? end_current_label_crit_section+0x152/0x180
[ 103.557126][ T6215] ? common_file_perm+0x199/0x200
[ 103.557146][ T6215] ? preempt_count_add+0x91/0x1a0
[ 103.557168][ T6215] vfs_fallocate+0x6a0/0x830
[ 103.557191][ T6215] ? __pfx_vfs_fallocate+0x10/0x10
[ 103.557213][ T6215] ? __might_fault+0xcc/0x130
[ 103.557236][ T6215] file_ioctl+0x611/0x780
[ 103.557256][ T6215] ? __pfx_file_ioctl+0x10/0x10
[ 103.557276][ T6215] ? kasan_save_track+0x4f/0x80
[ 103.557296][ T6215] ? kasan_save_track+0x3e/0x80
[ 103.557314][ T6215] ? kasan_save_free_info+0x46/0x50
[ 103.557330][ T6215] ? __kasan_slab_free+0x62/0x70
[ 103.557350][ T6215] ? kfree+0x18e/0x440
[ 103.557368][ T6215] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 103.557387][ T6215] ? security_file_ioctl+0xcb/0x2d0
[ 103.557405][ T6215] ? __se_sys_ioctl+0x47/0x170
[ 103.557423][ T6215] ? do_syscall_64+0xfa/0x3b0
[ 103.557438][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.557462][ T6215] do_vfs_ioctl+0xe80/0x1990
[ 103.557483][ T6215] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 103.557505][ T6215] ? rcu_is_watching+0x15/0xb0
[ 103.557527][ T6215] ? rcu_is_watching+0x15/0xb0
[ 103.557548][ T6215] ? lock_release+0x4b/0x3e0
[ 103.557565][ T6215] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 103.557584][ T6215] ? kfree+0x18e/0x440
[ 103.557603][ T6215] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 103.557622][ T6215] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 103.557641][ T6215] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 103.557660][ T6215] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 103.557681][ T6215] ? lock_release+0x4b/0x3e0
[ 103.557699][ T6215] ? vfs_write+0x8d8/0xa90
[ 103.557721][ T6215] ? __mutex_unlock_slowpath+0x1cd/0x700
[ 103.557743][ T6215] ? lock_release+0x4b/0x3e0
[ 103.557764][ T6215] ? __fget_files+0x2a/0x420
[ 103.557778][ T6215] ? __fget_files+0x3a0/0x420
[ 103.557792][ T6215] ? __fget_files+0x2a/0x420
[ 103.557808][ T6215] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.557829][ T6215] __se_sys_ioctl+0x82/0x170
[ 103.557849][ T6215] do_syscall_64+0xfa/0x3b0
[ 103.557864][ T6215] ? lockdep_hardirqs_on+0x9c/0x150
[ 103.557877][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.557903][ T6215] ? clear_bhb_loop+0x60/0xb0
[ 103.557920][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.557935][ T6215] RIP: 0033:0x7f4931c7cae9
[ 103.557951][ T6215] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 103.557965][ T6215] RSP: 002b:00007f4932ab50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.557983][ T6215] RAX: ffffffffffffffda RBX: 00007f4931d9bf80 RCX: 00007f4931c7cae9
[ 103.557994][ T6215] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004
[ 103.558004][ T6215] RBP: 00007f4932ab5120 R08: 0000000000000000 R09: 0000000000000000
[ 103.558014][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 103.558023][ T6215] R13: 000000000000000b R14: 00007f4931d9bf80 R15: 00007ffe9b8659a8
[ 103.558040][ T6215]
[ 103.560811][ T1323] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 104.028957][ T6158] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 104.368534][ T6263] loop0: detected capacity change from 0 to 32768
[ 104.383574][ T6263] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6263)
[ 104.401227][ T6263] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 104.433377][ T6263] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[ 104.453826][ T6263] BTRFS info (device loop0): using free-space-tree
[ 104.533693][ T5151] Bluetooth: hci0: command tx timeout
[ 104.575506][ T36] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 104.585740][ T6263] FAULT_INJECTION: forcing a failure.
[ 104.585740][ T6263] name failslab, interval 1, probability 0, space 0, times 0
[ 104.598607][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz-executor.0 Not tainted 6.16.0-rc2-next-20250620-syzkaller-04336-g5d4809e25903 #0 PREEMPT(full)
[ 104.598632][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 104.598642][ T6263] Call Trace:
[ 104.598648][ T6263]
[ 104.598655][ T6263] dump_stack_lvl+0x189/0x250
[ 104.598682][ T6263] ? __pfx____ratelimit+0x10/0x10
[ 104.598697][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.598718][ T6263] ? __pfx__printk+0x10/0x10
[ 104.598739][ T6263] should_fail_ex+0x414/0x560
[ 104.598756][ T6263] should_failslab+0xa8/0x100
[ 104.598771][ T6263] __kmalloc_cache_noprof+0x70/0x3d0
[ 104.598794][ T6263] ? ulist_add_merge+0x196/0x4c0
[ 104.598817][ T6263] ulist_add_merge+0x196/0x4c0
[ 104.598838][ T6263] clear_state_bit+0x15f/0x3c0
[ 104.598855][ T6263] btrfs_clear_extent_bit_changeset+0x97b/0xf00
[ 104.598876][ T6263] ? __pfx_btrfs_clear_extent_bit_changeset+0x10/0x10
[ 104.598893][ T6263] ? __asan_memset+0x22/0x50
[ 104.598913][ T6263] __btrfs_qgroup_release_data+0x21c/0xa20
[ 104.598940][ T6263] ? __pfx___btrfs_qgroup_release_data+0x10/0x10
[ 104.598965][ T6263] __btrfs_prealloc_file_range+0x365/0xcf0
[ 104.598985][ T6263] ? do_raw_spin_unlock+0x122/0x240
[ 104.599010][ T6263] ? __pfx___btrfs_prealloc_file_range+0x10/0x10
[ 104.599045][ T6263] btrfs_prealloc_file_range+0x40/0x60
[ 104.599066][ T6263] btrfs_fallocate+0x1647/0x1ba0
[ 104.599090][ T6263] ? __pfx_btrfs_fallocate+0x10/0x10
[ 104.599105][ T6263] ? vfs_fallocate+0x62a/0x830
[ 104.599125][ T6263] ? rcu_is_watching+0x15/0xb0
[ 104.599147][ T6263] ? lock_acquire+0x5f/0x360
[ 104.599166][ T6263] ? end_current_label_crit_section+0x152/0x180
[ 104.599187][ T6263] ? common_file_perm+0x199/0x200
[ 104.599206][ T6263] ? preempt_count_add+0x91/0x1a0
[ 104.599226][ T6263] vfs_fallocate+0x6a0/0x830
[ 104.599245][ T6263] ? __pfx_vfs_fallocate+0x10/0x10
[ 104.599263][ T6263] ? __might_fault+0xcc/0x130
[ 104.599285][ T6263] file_ioctl+0x611/0x780
[ 104.599302][ T6263] ? __pfx_file_ioctl+0x10/0x10
[ 104.599321][ T6263] ? kasan_save_track+0x4f/0x80
[ 104.599339][ T6263] ? kasan_save_track+0x3e/0x80
[ 104.599355][ T6263] ? kasan_save_free_info+0x46/0x50
[ 104.599370][ T6263] ? __kasan_slab_free+0x62/0x70
[ 104.599389][ T6263] ? kfree+0x18e/0x440
[ 104.599405][ T6263] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 104.599424][ T6263] ? security_file_ioctl+0xcb/0x2d0
[ 104.599439][ T6263] ? __se_sys_ioctl+0x47/0x170
[ 104.599456][ T6263] ? do_syscall_64+0xfa/0x3b0
[ 104.599470][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.599493][ T6263] do_vfs_ioctl+0xe80/0x1990
[ 104.599512][ T6263] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 104.599533][ T6263] ? rcu_is_watching+0x15/0xb0
[ 104.599555][ T6263] ? rcu_is_watching+0x15/0xb0
[ 104.599575][ T6263] ? lock_release+0x4b/0x3e0
[ 104.599592][ T6263] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 104.599610][ T6263] ? kfree+0x18e/0x440
[ 104.599629][ T6263] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 104.599649][ T6263] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 104.599667][ T6263] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 104.599686][ T6263] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 104.599706][ T6263] ? lock_release+0x4b/0x3e0
[ 104.599723][ T6263] ? vfs_write+0x8d8/0xa90
[ 104.599745][ T6263] ? __mutex_unlock_slowpath+0x1cd/0x700
[ 104.599767][ T6263] ? lock_release+0x4b/0x3e0
[ 104.599786][ T6263] ? __fget_files+0x2a/0x420
[ 104.599800][ T6263] ? __fget_files+0x3a0/0x420
[ 104.599814][ T6263] ? __fget_files+0x2a/0x420
[ 104.599828][ T6263] ? bpf_lsm_file_ioctl+0x9/0x20
[ 104.599848][ T6263] __se_sys_ioctl+0x82/0x170
[ 104.599866][ T6263] do_syscall_64+0xfa/0x3b0
[ 104.599880][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.599894][ T6263] ? clear_bhb_loop+0x60/0xb0
[ 104.599911][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.599926][ T6263] RIP: 0033:0x7f4931c7cae9
[ 104.599970][ T6263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 104.599984][ T6263] RSP: 002b:00007f4932ab50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 104.600001][ T6263] RAX: ffffffffffffffda RBX: 00007f4931d9bf80 RCX: 00007f4931c7cae9
[ 104.600013][ T6263] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004
[ 104.600023][ T6263] RBP: 00007f4932ab5120 R08: 0000000000000000 R09: 0000000000000000
[ 104.600032][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 104.600041][ T6263] R13: 000000000000000b R14: 00007f4931d9bf80 R15: 00007ffe9b8659a8
[ 104.600057][ T6263]
[ 104.600450][ T6263] ------------[ cut here ]------------
[ 105.052359][ T6263] kernel BUG at fs/btrfs/extent-io-tree.c:572!
[ 105.058636][ T6263] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 105.064892][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz-executor.0 Not tainted 6.16.0-rc2-next-20250620-syzkaller-04336-g5d4809e25903 #0 PREEMPT(full)
[ 105.078437][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 105.088507][ T6263] RIP: 0010:clear_state_bit+0x3be/0x3c0
[ 105.094073][ T6263] Code: fe e9 27 fd ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 3e fe ff ff 4c 89 ef e8 fd 50 36 fe e9 31 fe ff ff e8 43 26 d2 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00
[ 105.113952][ T6263] RSP: 0018:ffffc9000474efd8 EFLAGS: 00010293
[ 105.120035][ T6263] RAX: ffffffff83ee329d RBX: ffff8880270c8480 RCX: ffff88802ef6bc00
[ 105.128021][ T6263] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 105.136019][ T6263] RBP: 0000000000001000 R08: 0000000000000820 R09: 00000000ffffffff
[ 105.144001][ T6263] R10: dffffc0000000000 R11: fffffbfff1c4c267 R12: 0000000000000000
[ 105.152071][ T6263] R13: ffffc9000474f258 R14: 0000000000000000 R15: 00000000fffffff4
[ 105.160199][ T6263] FS: 00007f4932ab56c0(0000) GS:ffff888125d26000(0000) knlGS:0000000000000000
[ 105.169137][ T6263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 105.175714][ T6263] CR2: 00007f4931d98000 CR3: 0000000074f1a000 CR4: 00000000003526f0
[ 105.183688][ T6263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 105.191674][ T6263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 105.199641][ T6263] Call Trace:
[ 105.202907][ T6263]
[ 105.205825][ T6263] btrfs_clear_extent_bit_changeset+0x97b/0xf00
[ 105.212059][ T6263] ? __pfx_btrfs_clear_extent_bit_changeset+0x10/0x10
[ 105.218818][ T6263] ? __asan_memset+0x22/0x50
[ 105.223401][ T6263] __btrfs_qgroup_release_data+0x21c/0xa20
[ 105.229203][ T6263] ? __pfx___btrfs_qgroup_release_data+0x10/0x10
[ 105.235518][ T6263] __btrfs_prealloc_file_range+0x365/0xcf0
[ 105.241308][ T6263] ? do_raw_spin_unlock+0x122/0x240
[ 105.246496][ T6263] ? __pfx___btrfs_prealloc_file_range+0x10/0x10
[ 105.252818][ T6263] btrfs_prealloc_file_range+0x40/0x60
[ 105.258267][ T6263] btrfs_fallocate+0x1647/0x1ba0
[ 105.263198][ T6263] ? __pfx_btrfs_fallocate+0x10/0x10
[ 105.268465][ T6263] ? vfs_fallocate+0x62a/0x830
[ 105.273215][ T6263] ? rcu_is_watching+0x15/0xb0
[ 105.277971][ T6263] ? lock_acquire+0x5f/0x360
[ 105.282545][ T6263] ? end_current_label_crit_section+0x152/0x180
[ 105.288771][ T6263] ? common_file_perm+0x199/0x200
[ 105.293905][ T6263] ? preempt_count_add+0x91/0x1a0
[ 105.298928][ T6263] vfs_fallocate+0x6a0/0x830
[ 105.303525][ T6263] ? __pfx_vfs_fallocate+0x10/0x10
[ 105.308707][ T6263] ? __might_fault+0xcc/0x130
[ 105.313384][ T6263] file_ioctl+0x611/0x780
[ 105.317704][ T6263] ? __pfx_file_ioctl+0x10/0x10
[ 105.322551][ T6263] ? kasan_save_track+0x4f/0x80
[ 105.327489][ T6263] ? kasan_save_track+0x3e/0x80
[ 105.332430][ T6263] ? kasan_save_free_info+0x46/0x50
[ 105.337702][ T6263] ? __kasan_slab_free+0x62/0x70
[ 105.342715][ T6263] ? kfree+0x18e/0x440
[ 105.346775][ T6263] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 105.352395][ T6263] ? security_file_ioctl+0xcb/0x2d0
[ 105.357577][ T6263] ? __se_sys_ioctl+0x47/0x170
[ 105.362330][ T6263] ? do_syscall_64+0xfa/0x3b0
[ 105.366991][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.373048][ T6263] do_vfs_ioctl+0xe80/0x1990
[ 105.377710][ T6263] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 105.382717][ T6263] ? rcu_is_watching+0x15/0xb0
[ 105.387467][ T6263] ? rcu_is_watching+0x15/0xb0
[ 105.392243][ T6263] ? lock_release+0x4b/0x3e0
[ 105.396941][ T6263] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 105.402589][ T6263] ? kfree+0x18e/0x440
[ 105.406664][ T6263] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 105.412292][ T6263] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 105.417917][ T6263] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 105.423542][ T6263] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 105.429511][ T6263] ? lock_release+0x4b/0x3e0
[ 105.434087][ T6263] ? vfs_write+0x8d8/0xa90
[ 105.438501][ T6263] ? __mutex_unlock_slowpath+0x1cd/0x700
[ 105.444210][ T6263] ? lock_release+0x4b/0x3e0
[ 105.448817][ T6263] ? __fget_files+0x2a/0x420
[ 105.453474][ T6263] ? __fget_files+0x3a0/0x420
[ 105.458135][ T6263] ? __fget_files+0x2a/0x420
[ 105.462714][ T6263] ? bpf_lsm_file_ioctl+0x9/0x20
[ 105.467658][ T6263] __se_sys_ioctl+0x82/0x170
[ 105.472254][ T6263] do_syscall_64+0xfa/0x3b0
[ 105.476754][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.482824][ T6263] ? clear_bhb_loop+0x60/0xb0
[ 105.487513][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.493403][ T6263] RIP: 0033:0x7f4931c7cae9
[ 105.497853][ T6263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 105.517651][ T6263] RSP: 002b:00007f4932ab50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.526058][ T6263] RAX: ffffffffffffffda RBX: 00007f4931d9bf80 RCX: 00007f4931c7cae9
[ 105.534016][ T6263] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004
[ 105.541971][ T6263] RBP: 00007f4932ab5120 R08: 0000000000000000 R09: 0000000000000000
[ 105.549939][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 105.558330][ T6263] R13: 000000000000000b R14: 00007f4931d9bf80 R15: 00007ffe9b8659a8
[ 105.566388][ T6263]
[ 105.569397][ T6263] Modules linked in:
[ 105.573700][ T6263] ---[ end trace 0000000000000000 ]---
[ 105.579434][ T6263] RIP: 0010:clear_state_bit+0x3be/0x3c0
[ 105.585037][ T6263] Code: fe e9 27 fd ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 3e fe ff ff 4c 89 ef e8 fd 50 36 fe e9 31 fe ff ff e8 43 26 d2 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00
[ 105.604895][ T6263] RSP: 0018:ffffc9000474efd8 EFLAGS: 00010293
[ 105.611012][ T6263] RAX: ffffffff83ee329d RBX: ffff8880270c8480 RCX: ffff88802ef6bc00
[ 105.619163][ T6263] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[ 105.627338][ T6263] RBP: 0000000000001000 R08: 0000000000000820 R09: 00000000ffffffff
[ 105.635511][ T6263] R10: dffffc0000000000 R11: fffffbfff1c4c267 R12: 0000000000000000
[ 105.643539][ T6263] R13: ffffc9000474f258 R14: 0000000000000000 R15: 00000000fffffff4
[ 105.651549][ T6263] FS: 00007f4932ab56c0(0000) GS:ffff888125d26000(0000) knlGS:0000000000000000
[ 105.660743][ T6263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 105.667414][ T6263] CR2: 00007f4931d98000 CR3: 0000000074f1a000 CR4: 00000000003526f0
[ 105.675435][ T6263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 105.683467][ T6263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 105.691456][ T6263] Kernel panic - not syncing: Fatal exception
[ 105.697848][ T6263] Kernel Offset: disabled
[ 105.702174][ T6263] Rebooting in 86400 seconds..