Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 2026/03/08 09:00:10 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 129.428224][ T6114] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.811082][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.814770][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.815622][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.816639][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.818068][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.996683][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.996741][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.811765][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 135.889370][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.889501][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.889588][ T6169] bridge_slave_0: entered allmulticast mode [ 135.901199][ T6169] bridge_slave_0: entered promiscuous mode [ 135.919312][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.919422][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.919532][ T6169] bridge_slave_1: entered allmulticast mode [ 135.931066][ T6169] bridge_slave_1: entered promiscuous mode [ 135.976269][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.978907][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.019529][ T6169] team0: Port device team_slave_0 added [ 136.028018][ T6169] team0: Port device team_slave_1 added [ 136.054962][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.054979][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.054996][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.056215][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.056227][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.056245][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.205655][ T6169] hsr_slave_0: entered promiscuous mode [ 136.206365][ T6169] hsr_slave_1: entered promiscuous mode [ 137.822481][ T6169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.867795][ T6169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.908736][ T6169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.946772][ T6169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.138915][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.158413][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.172017][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.172971][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.184800][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.185004][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.503908][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.572451][ T6169] veth0_vlan: entered promiscuous mode [ 138.577321][ T6169] veth1_vlan: entered promiscuous mode [ 138.627521][ T6169] veth0_macvtap: entered promiscuous mode [ 138.633069][ T6169] veth1_macvtap: entered promiscuous mode [ 138.649790][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.674147][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.693265][ T2352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.695058][ T2352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.696564][ T2352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.700143][ T2352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.617649][ T3914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.894631][ T3914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.424158][ T3914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.117967][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.117987][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.216793][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.216813][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.815990][ T3914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/08 09:00:26 executed programs: 0 [ 142.253352][ T3914] bridge_slave_1: left allmulticast mode [ 142.253386][ T3914] bridge_slave_1: left promiscuous mode [ 142.253648][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.364683][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.368844][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.380826][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.387760][ T3914] bridge_slave_0: left allmulticast mode [ 142.387791][ T3914] bridge_slave_0: left promiscuous mode [ 142.388069][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.388348][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.389079][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.181675][ T3914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.261515][ T3914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.313539][ T3914] bond0 (unregistering): Released all slaves [ 143.791964][ T3914] hsr_slave_0: left promiscuous mode [ 143.830740][ T3914] hsr_slave_1: left promiscuous mode [ 143.831919][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.831947][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.901597][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.901633][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.982055][ T3914] veth1_macvtap: left promiscuous mode [ 143.982161][ T3914] veth0_macvtap: left promiscuous mode [ 143.982354][ T3914] veth1_vlan: left promiscuous mode [ 143.982448][ T3914] veth0_vlan: left promiscuous mode [ 144.440700][ T5899] Bluetooth: hci0: command tx timeout [ 144.601571][ T3914] team0 (unregistering): Port device team_slave_1 removed [ 144.624966][ T3914] team0 (unregistering): Port device team_slave_0 removed [ 144.967071][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 145.134230][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.134722][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.134884][ T6365] bridge_slave_0: entered allmulticast mode [ 145.137353][ T6365] bridge_slave_0: entered promiscuous mode [ 145.170669][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.170857][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.171047][ T6365] bridge_slave_1: entered allmulticast mode [ 145.175064][ T6365] bridge_slave_1: entered promiscuous mode [ 145.251691][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.255424][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.320262][ T6365] team0: Port device team_slave_0 added [ 145.329741][ T6365] team0: Port device team_slave_1 added [ 145.375097][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.375112][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.375135][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.377198][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.377210][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.377233][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.529919][ T6365] hsr_slave_0: entered promiscuous mode [ 145.537012][ T6365] hsr_slave_1: entered promiscuous mode [ 146.510638][ T5899] Bluetooth: hci0: command tx timeout [ 148.010750][ T6365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.046315][ T6365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.121061][ T6365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.181088][ T6365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.368184][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.403280][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.408376][ T2352] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.408592][ T2352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.444117][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.444276][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.590713][ T5899] Bluetooth: hci0: command tx timeout [ 148.658458][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.700190][ T6365] veth0_vlan: entered promiscuous mode [ 148.715980][ T6365] veth1_vlan: entered promiscuous mode [ 148.744895][ T6365] veth0_macvtap: entered promiscuous mode [ 148.748604][ T6365] veth1_macvtap: entered promiscuous mode [ 148.763967][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.780426][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.794588][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.794818][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.794851][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.794892][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.006156][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.006180][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.046201][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.046225][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/08 09:00:33 executed programs: 2 [ 149.317191][ T6495] loop0: detected capacity change from 0 to 32768 [ 149.335605][ T6495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (6495) [ 149.371094][ T6495] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.371138][ T6495] BTRFS info (device loop0): using sha256 checksum algorithm [ 149.488896][ T6495] BTRFS info (device loop0): enabling ssd optimizations [ 149.488927][ T6495] BTRFS info (device loop0): turning on async discard [ 149.488941][ T6495] BTRFS info (device loop0): enabling free space tree [ 149.704773][ T2352] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 149.725917][ T37] audit: type=1800 audit(1772960434.374:2): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 149.938336][ T6365] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.374691][ T6514] loop0: detected capacity change from 0 to 32768 [ 150.376987][ T6514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18 (6514) [ 150.429210][ T6514] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.429239][ T6514] BTRFS info (device loop0): using sha256 checksum algorithm [ 150.517842][ T6514] BTRFS info (device loop0): enabling ssd optimizations [ 150.517865][ T6514] BTRFS info (device loop0): turning on async discard [ 150.517878][ T6514] BTRFS info (device loop0): enabling free space tree [ 150.657669][ T37] audit: type=1800 audit(1772960435.324:3): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 150.671521][ T5899] Bluetooth: hci0: command tx timeout [ 150.719846][ T6514] BTRFS info (device loop0): balance: start -d -m -s [ 150.797178][ T3914] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 150.848985][ T6514] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 150.980031][ T6514] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 151.050216][ T6514] BTRFS info (device loop0): balance: canceled [ 151.107176][ T6365] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.460187][ T6533] loop0: detected capacity change from 0 to 32768 [ 151.482466][ T6533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.19 (6533) [ 151.488681][ T6533] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.488709][ T6533] BTRFS info (device loop0): using sha256 checksum algorithm [ 151.646620][ T6533] BTRFS info (device loop0): enabling ssd optimizations [ 151.646645][ T6533] BTRFS info (device loop0): turning on async discard [ 151.646663][ T6533] BTRFS info (device loop0): enabling free space tree [ 151.816769][ T2352] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 151.829775][ T37] audit: type=1800 audit(1772960436.494:4): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.19" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 151.835362][ T6533] BTRFS info (device loop0): balance: start -d -m -s [ 151.848307][ T6533] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 151.874592][ T6533] ------------[ cut here ]------------ [ 151.874605][ T6533] ret [ 151.874618][ T6533] WARNING: fs/btrfs/extent-tree.c:837 at lookup_inline_extent_backref+0x143e/0x1980, CPU#1: syz.0.19/6533 [ 151.874660][ T6533] Modules linked in: [ 151.874698][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.874718][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.874734][ T6533] RIP: 0010:lookup_inline_extent_backref+0x143e/0x1980 [ 151.874755][ T6533] Code: d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 99 4a 07 cc e8 02 cb e8 fd bb fe ff ff ff 4c 8b 74 24 50 e9 af fe ff ff 90 <0f> 0b 90 48 8b 84 24 88 00 00 00 48 b9 00 00 00 00 00 fc ff df 80 [ 151.874769][ T6533] RSP: 0018:ffffc90003aa69c0 EFLAGS: 00010202 [ 151.874785][ T6533] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888026331e80 [ 151.874797][ T6533] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.874808][ T6533] RBP: ffffc90003aa6be8 R08: 0000000000000000 R09: 0000000000000000 [ 151.874820][ T6533] R10: dffffc0000000000 R11: fffff940000898a1 R12: 0000000000510000 [ 151.874832][ T6533] R13: ffff8880346bcd10 R14: 0000000000000009 R15: ffff888044e80000 [ 151.874845][ T6533] FS: 00007fd7780ae6c0(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 151.874860][ T6533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.874872][ T6533] CR2: 0000200000002000 CR3: 0000000032b4e000 CR4: 00000000003526f0 [ 151.874888][ T6533] Call Trace: [ 151.874899][ T6533] [ 151.874915][ T6533] ? kasan_save_track+0x3e/0x80 [ 151.874950][ T6533] ? btrfs_relocate_chunk+0x10f/0x820 [ 151.874974][ T6533] ? btrfs_balance+0xafa/0x11f0 [ 151.875010][ T6533] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 151.875060][ T6533] insert_inline_extent_backref+0xa8/0x300 [ 151.875096][ T6533] __btrfs_inc_extent_ref+0x271/0xa00 [ 151.875116][ T6533] ? reacquire_held_locks+0x104/0x190 [ 151.875144][ T6533] ? __pfx___btrfs_inc_extent_ref+0x10/0x10 [ 151.875165][ T6533] ? rt_spin_unlock+0x14f/0x200 [ 151.875198][ T6533] __btrfs_run_delayed_refs+0xf93/0x4240 [ 151.875268][ T6533] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 151.875294][ T6533] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.875331][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.875356][ T6533] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.875380][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.875403][ T6533] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 151.875422][ T6533] ? rt_spin_lock+0x1e0/0x400 [ 151.875457][ T6533] ? rt_spin_unlock+0x160/0x200 [ 151.875480][ T6533] btrfs_run_delayed_refs+0x191/0x3b0 [ 151.875509][ T6533] create_pending_snapshot+0x1141/0x3ac0 [ 151.875566][ T6533] ? __pfx_create_pending_snapshot+0x10/0x10 [ 151.875595][ T6533] ? __lock_acquire+0x6b5/0x2cf0 [ 151.875643][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.875670][ T6533] create_pending_snapshots+0x17c/0x1c0 [ 151.875700][ T6533] btrfs_commit_transaction+0xf75/0x31a0 [ 151.875725][ T6533] ? btrfs_commit_transaction+0x1a2/0x31a0 [ 151.875752][ T6533] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 151.875786][ T6533] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 151.875812][ T6533] ? join_transaction+0x41b/0xc90 [ 151.875839][ T6533] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.875867][ T6533] ? btrfs_record_root_in_trans+0x91/0x180 [ 151.875893][ T6533] ? start_transaction+0x43a/0x1650 [ 151.875934][ T6533] prepare_to_relocate+0x3a1/0x490 [ 151.875961][ T6533] relocate_block_group+0x149/0xe90 [ 151.875982][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.876014][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.876050][ T6533] ? __pfx_relocate_block_group+0x10/0x10 [ 151.876076][ T6533] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.876126][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.876149][ T6533] ? mutex_lock_nested+0x152/0x1d0 [ 151.876167][ T6533] ? do_nonremap_reloc+0x9f/0x5b0 [ 151.876191][ T6533] do_nonremap_reloc+0xa7/0x5b0 [ 151.876224][ T6533] btrfs_relocate_block_group+0x5fe/0x980 [ 151.876253][ T6533] btrfs_relocate_chunk+0x10f/0x820 [ 151.876281][ T6533] __btrfs_balance+0x1dba/0x2af0 [ 151.876345][ T6533] ? __pfx___btrfs_balance+0x10/0x10 [ 151.876371][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.876394][ T6533] ? rt_mutex_slowunlock+0x1cb/0x300 [ 151.876413][ T6533] ? rt_mutex_slowlock+0x7a0/0x7b0 [ 151.876440][ T6533] ? btrfs_balance+0xaf2/0x11f0 [ 151.876470][ T6533] btrfs_balance+0xafa/0x11f0 [ 151.876516][ T6533] btrfs_ioctl_balance+0x3d6/0x610 [ 151.876540][ T6533] ? btrfs_ioctl+0xb1c/0xd00 [ 151.876561][ T6533] ? __pfx_btrfs_ioctl+0x10/0x10 [ 151.876582][ T6533] __se_sys_ioctl+0xff/0x170 [ 151.876614][ T6533] do_syscall_64+0x14d/0xf80 [ 151.876635][ T6533] ? trace_irq_disable+0x3b/0x150 [ 151.876656][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.876675][ T6533] ? clear_bhb_loop+0x40/0x90 [ 151.876698][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.876715][ T6533] RIP: 0033:0x7fd778a4c629 [ 151.876738][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.876752][ T6533] RSP: 002b:00007fd7780ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.876770][ T6533] RAX: ffffffffffffffda RBX: 00007fd778cc5fa0 RCX: 00007fd778a4c629 [ 151.876783][ T6533] RDX: 0000200000000180 RSI: 00000000c4009420 RDI: 0000000000000004 [ 151.876795][ T6533] RBP: 00007fd778ae2b39 R08: 0000000000000000 R09: 0000000000000000 [ 151.876806][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.876817][ T6533] R13: 00007fd778cc6038 R14: 00007fd778cc5fa0 R15: 00007fffa02b2158 [ 151.876851][ T6533] [ 151.876861][ T6533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.876873][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.876892][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.876902][ T6533] Call Trace: [ 151.876909][ T6533] [ 151.876916][ T6533] vpanic+0x56c/0xa60 [ 151.876942][ T6533] ? __pfx__printk+0x10/0x10 [ 151.876962][ T6533] ? __pfx_vpanic+0x10/0x10 [ 151.876983][ T6533] ? is_bpf_text_address+0x292/0x2b0 [ 151.877013][ T6533] ? is_bpf_text_address+0x26/0x2b0 [ 151.877045][ T6533] panic+0xc5/0xd0 [ 151.877068][ T6533] ? __pfx_panic+0x10/0x10 [ 151.877112][ T6533] __warn+0x315/0x4f0 [ 151.877134][ T6533] ? lookup_inline_extent_backref+0x143e/0x1980 [ 151.877155][ T6533] ? lookup_inline_extent_backref+0x143e/0x1980 [ 151.877176][ T6533] __report_bug+0x29a/0x540 [ 151.877199][ T6533] ? unlock_up+0x5b4/0x5e0 [ 151.877223][ T6533] ? lookup_inline_extent_backref+0x143e/0x1980 [ 151.877243][ T6533] ? __pfx___report_bug+0x10/0x10 [ 151.877269][ T6533] ? btrfs_search_slot+0x2720/0x2d30 [ 151.877302][ T6533] ? lookup_inline_extent_backref+0x143e/0x1980 [ 151.877321][ T6533] report_bug+0x16a/0x220 [ 151.877343][ T6533] ? lookup_inline_extent_backref+0x143e/0x1980 [ 151.877361][ T6533] ? lookup_inline_extent_backref+0x1440/0x1980 [ 151.877379][ T6533] handle_bug+0x9c/0x200 [ 151.877404][ T6533] exc_invalid_op+0x1a/0x50 [ 151.877429][ T6533] asm_exc_invalid_op+0x1a/0x20 [ 151.877446][ T6533] RIP: 0010:lookup_inline_extent_backref+0x143e/0x1980 [ 151.877465][ T6533] Code: d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 99 4a 07 cc e8 02 cb e8 fd bb fe ff ff ff 4c 8b 74 24 50 e9 af fe ff ff 90 <0f> 0b 90 48 8b 84 24 88 00 00 00 48 b9 00 00 00 00 00 fc ff df 80 [ 151.877478][ T6533] RSP: 0018:ffffc90003aa69c0 EFLAGS: 00010202 [ 151.877492][ T6533] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888026331e80 [ 151.877504][ T6533] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.877514][ T6533] RBP: ffffc90003aa6be8 R08: 0000000000000000 R09: 0000000000000000 [ 151.877525][ T6533] R10: dffffc0000000000 R11: fffff940000898a1 R12: 0000000000510000 [ 151.877538][ T6533] R13: ffff8880346bcd10 R14: 0000000000000009 R15: ffff888044e80000 [ 151.877576][ T6533] ? kasan_save_track+0x3e/0x80 [ 151.877608][ T6533] ? btrfs_relocate_chunk+0x10f/0x820 [ 151.877630][ T6533] ? btrfs_balance+0xafa/0x11f0 [ 151.877659][ T6533] ? __pfx_lookup_inline_extent_backref+0x10/0x10 [ 151.877708][ T6533] insert_inline_extent_backref+0xa8/0x300 [ 151.877743][ T6533] __btrfs_inc_extent_ref+0x271/0xa00 [ 151.877763][ T6533] ? reacquire_held_locks+0x104/0x190 [ 151.877789][ T6533] ? __pfx___btrfs_inc_extent_ref+0x10/0x10 [ 151.877809][ T6533] ? rt_spin_unlock+0x14f/0x200 [ 151.877840][ T6533] __btrfs_run_delayed_refs+0xf93/0x4240 [ 151.877906][ T6533] ? __pfx___btrfs_run_delayed_refs+0x10/0x10 [ 151.877932][ T6533] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.877968][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.877995][ T6533] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.878017][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.878040][ T6533] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 151.878058][ T6533] ? rt_spin_lock+0x1e0/0x400 [ 151.878093][ T6533] ? rt_spin_unlock+0x160/0x200 [ 151.878116][ T6533] btrfs_run_delayed_refs+0x191/0x3b0 [ 151.878145][ T6533] create_pending_snapshot+0x1141/0x3ac0 [ 151.878200][ T6533] ? __pfx_create_pending_snapshot+0x10/0x10 [ 151.878228][ T6533] ? __lock_acquire+0x6b5/0x2cf0 [ 151.878276][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.878303][ T6533] create_pending_snapshots+0x17c/0x1c0 [ 151.878333][ T6533] btrfs_commit_transaction+0xf75/0x31a0 [ 151.878359][ T6533] ? btrfs_commit_transaction+0x1a2/0x31a0 [ 151.878386][ T6533] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 151.878419][ T6533] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 151.878444][ T6533] ? join_transaction+0x41b/0xc90 [ 151.878471][ T6533] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.878496][ T6533] ? btrfs_record_root_in_trans+0x91/0x180 [ 151.878522][ T6533] ? start_transaction+0x43a/0x1650 [ 151.878563][ T6533] prepare_to_relocate+0x3a1/0x490 [ 151.878589][ T6533] relocate_block_group+0x149/0xe90 [ 151.878610][ T6533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.878635][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.878670][ T6533] ? __pfx_relocate_block_group+0x10/0x10 [ 151.878696][ T6533] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.878718][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.878740][ T6533] ? mutex_lock_nested+0x152/0x1d0 [ 151.878757][ T6533] ? do_nonremap_reloc+0x9f/0x5b0 [ 151.878781][ T6533] do_nonremap_reloc+0xa7/0x5b0 [ 151.878814][ T6533] btrfs_relocate_block_group+0x5fe/0x980 [ 151.878842][ T6533] btrfs_relocate_chunk+0x10f/0x820 [ 151.878870][ T6533] __btrfs_balance+0x1dba/0x2af0 [ 151.878944][ T6533] ? __pfx___btrfs_balance+0x10/0x10 [ 151.878970][ T6533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.878998][ T6533] ? rt_mutex_slowunlock+0x1cb/0x300 [ 151.879017][ T6533] ? rt_mutex_slowlock+0x7a0/0x7b0 [ 151.879044][ T6533] ? btrfs_balance+0xaf2/0x11f0 [ 151.879077][ T6533] btrfs_balance+0xafa/0x11f0 [ 151.879123][ T6533] btrfs_ioctl_balance+0x3d6/0x610 [ 151.879146][ T6533] ? btrfs_ioctl+0xb1c/0xd00 [ 151.879168][ T6533] ? __pfx_btrfs_ioctl+0x10/0x10 [ 151.879188][ T6533] __se_sys_ioctl+0xff/0x170 [ 151.879216][ T6533] do_syscall_64+0x14d/0xf80 [ 151.879237][ T6533] ? trace_irq_disable+0x3b/0x150 [ 151.879256][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.879274][ T6533] ? clear_bhb_loop+0x40/0x90 [ 151.879297][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.879315][ T6533] RIP: 0033:0x7fd778a4c629 [ 151.879330][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.879344][ T6533] RSP: 002b:00007fd7780ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.879361][ T6533] RAX: ffffffffffffffda RBX: 00007fd778cc5fa0 RCX: 00007fd778a4c629 [ 151.879373][ T6533] RDX: 0000200000000180 RSI: 00000000c4009420 RDI: 0000000000000004 [ 151.879385][ T6533] RBP: 00007fd778ae2b39 R08: 0000000000000000 R09: 0000000000000000 [ 151.879396][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.879407][ T6533] R13: 00007fd778cc6038 R14: 00007fd778cc5fa0 R15: 00007fffa02b2158 [ 151.879440][ T6533] [ 151.879820][ T6533] Kernel Offset: disabled