Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. 1970/01/01 00:01:04 parsed 1 programs [ 65.535817][ T4433] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.624809][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.626189][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.632112][ T1979] cfg80211: failed to load regulatory.db [ 69.866700][ T4465] chnl_net:caif_netlink_parms(): no params data found [ 69.886990][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.893163][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.894777][ T4465] device bridge_slave_0 entered promiscuous mode [ 69.897254][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.898555][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.900065][ T4465] device bridge_slave_1 entered promiscuous mode [ 69.910646][ T4465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.913667][ T4465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.922549][ T4465] team0: Port device team_slave_0 added [ 69.925966][ T4465] team0: Port device team_slave_1 added [ 69.934069][ T4465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.935217][ T4465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.939206][ T4465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.941692][ T4465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.942810][ T4465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.947707][ T4465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.074289][ T4465] device hsr_slave_0 entered promiscuous mode [ 70.113334][ T4465] device hsr_slave_1 entered promiscuous mode [ 70.849774][ T4465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.885478][ T4465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.946260][ T4465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.004463][ T4465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.096546][ T4465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.101063][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.105126][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.114343][ T4465] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.117222][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.118753][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.120200][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.121394][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.122760][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.128132][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.131604][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.133814][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.134949][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.142610][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.145119][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.146792][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.148841][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.158327][ T4465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.160089][ T4465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.162373][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.165109][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.167229][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.168855][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.170437][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.172093][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.180002][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.184691][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.249114][ T4465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.255031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.256413][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.259960][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.261559][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.275021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.276643][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.278275][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.279657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.292751][ T4465] device veth0_vlan entered promiscuous mode [ 71.297379][ T4465] device veth1_vlan entered promiscuous mode [ 71.308320][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.309899][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.311332][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.312800][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.316044][ T4465] device veth0_macvtap entered promiscuous mode [ 71.319127][ T4465] device veth1_macvtap entered promiscuous mode [ 71.330851][ T4465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.332058][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.333680][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.335163][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.336723][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.344167][ T4465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.345627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.347288][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.353069][ T4465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.355447][ T4465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.356865][ T4465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.358240][ T4465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.709930][ T284] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.400399][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.401674][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.403033][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.415322][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.416648][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.417899][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:12 executed programs: 0 [ 72.726373][ T4753] chnl_net:caif_netlink_parms(): no params data found [ 72.748196][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.749396][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.750997][ T4753] device bridge_slave_0 entered promiscuous mode [ 72.753881][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.754989][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.756463][ T4753] device bridge_slave_1 entered promiscuous mode [ 72.766185][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.768950][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.784863][ T4753] team0: Port device team_slave_0 added [ 72.787105][ T4753] team0: Port device team_slave_1 added [ 72.794708][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.795848][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.799813][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.802151][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.803381][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.807415][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.865364][ T4753] device hsr_slave_0 entered promiscuous mode [ 72.904851][ T4753] device hsr_slave_1 entered promiscuous mode [ 72.924540][ T4753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.925780][ T4753] Cannot create hsr debugfs directory [ 74.217035][ T284] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.743180][ T4143] Bluetooth: hci0: command 0x0409 tx timeout [ 76.456548][ T284] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.510873][ T284] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.823313][ T4062] Bluetooth: hci0: command 0x041b tx timeout [ 77.368049][ T4753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.411945][ T4753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.454558][ T4753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.500421][ T4753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.565999][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.570220][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.571731][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.579476][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.582149][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.584029][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.585535][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.586608][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.587976][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.591542][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.594471][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.595967][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.597082][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.600043][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.603038][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.612559][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.614491][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.616819][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.618957][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.621400][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.625196][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.626798][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.629029][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.630582][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.634599][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.676149][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.677520][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.681004][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.688806][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.690445][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.697827][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.699537][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.701059][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.702483][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.706733][ T4753] device veth0_vlan entered promiscuous mode [ 77.710449][ T4753] device veth1_vlan entered promiscuous mode [ 77.720174][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.721828][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.723995][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.725520][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.728206][ T4753] device veth0_macvtap entered promiscuous mode [ 77.730940][ T4753] device veth1_macvtap entered promiscuous mode [ 77.737663][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.739376][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.741622][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.742858][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.745438][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.746997][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.748607][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.758069][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.759889][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.762028][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.765035][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.766741][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.769163][ T4753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.770617][ T4753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.772138][ T4753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.774304][ T4753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.798687][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.801091][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.807479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.811825][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.813707][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.815058][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 77.937400][ T4910] loop0: detected capacity change from 0 to 32768 [ 77.993380][ T4910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.16 (4910) [ 78.001522][ T4910] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 78.002921][ T4910] BTRFS info (device loop0): using free space tree [ 78.004627][ T4910] BTRFS info (device loop0): has skinny extents [ 78.021042][ T4910] BTRFS info (device loop0): enabling ssd optimizations [ 78.039328][ T4910] FAULT_INJECTION: forcing a failure. [ 78.039328][ T4910] name failslab, interval 1, probability 0, space 0, times 1 [ 78.041417][ T4910] CPU: 1 PID: 4910 Comm: syz.0.16 Not tainted syzkaller #0 [ 78.042552][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.044169][ T4910] Call trace: [ 78.044655][ T4910] dump_backtrace+0x0/0x458 [ 78.045432][ T4910] show_stack+0x2c/0x3c [ 78.046183][ T4910] __dump_stack+0x30/0x40 [ 78.046940][ T4910] dump_stack_lvl+0xf4/0x15c [ 78.047708][ T4910] dump_stack+0x1c/0x5c [ 78.048368][ T4910] should_fail+0x3bc/0x514 [ 78.049123][ T4910] __should_failslab+0xbc/0x10c [ 78.049872][ T4910] should_failslab+0x10/0x28 [ 78.050572][ T4910] slab_pre_alloc_hook+0x64/0xe8 [ 78.051403][ T4910] kmem_cache_alloc+0x94/0x3d4 [ 78.052145][ T4910] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 78.053024][ T4910] btrfs_inc_extent_ref+0x100/0x198 [ 78.053830][ T4910] btrfs_insert_replace_extent+0x6a0/0x9cc [ 78.054771][ T4910] btrfs_replace_file_extents+0x89c/0x1238 [ 78.055589][ T4910] btrfs_clone+0xb7c/0x1d14 [ 78.056225][ T4910] btrfs_clone_files+0x278/0x320 [ 78.056935][ T4910] btrfs_remap_file_range+0x488/0xb9c [ 78.057732][ T4910] vfs_copy_file_range+0xab0/0x10fc [ 78.058498][ T4910] __arm64_sys_copy_file_range+0x540/0x8d4 [ 78.059398][ T4910] invoke_syscall+0x98/0x2b0 [ 78.060101][ T4910] el0_svc_common+0x138/0x258 [ 78.060788][ T4910] do_el0_svc+0x58/0x13c [ 78.061392][ T4910] el0_svc+0x78/0x1d0 [ 78.062018][ T4910] el0t_64_sync_handler+0xcc/0xe4 [ 78.062796][ T4910] el0t_64_sync+0x1a0/0x1a4 [ 78.067829][ T4910] ------------[ cut here ]------------ [ 78.068827][ T4910] WARNING: CPU: 0 PID: 4910 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 78.070304][ T4910] Modules linked in: [ 78.070956][ T4910] CPU: 0 PID: 4910 Comm: syz.0.16 Not tainted syzkaller #0 [ 78.072176][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.073906][ T4910] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.075190][ T4910] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 78.076161][ T4910] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 78.077145][ T4910] sp : ffff80001fbc7440 [ 78.077810][ T4910] x29: ffff80001fbc7560 x28: dfff800000000000 x27: 000000000000e000 [ 78.079122][ T4910] x26: ffff0000d12a9600 x25: ffff80001fbc7890 x24: ffff0000e2330000 [ 78.080335][ T4910] x23: ffff700003f78e98 x22: 00000000fffffff4 x21: 1fffe0001bccf68f [ 78.081579][ T4910] x20: ffff0000de67b420 x19: ffff0000de67b478 x18: 0000000000000001 [ 78.082812][ T4910] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 78.084028][ T4910] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 78.085248][ T4910] x11: 0000000000000000 x10: 0000000000000000 x9 : c89e61c3d8e10d00 [ 78.086512][ T4910] x8 : c89e61c3d8e10d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.087731][ T4910] x5 : ffff80001fbc6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 78.089026][ T4910] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 78.090378][ T4910] Call trace: [ 78.090894][ T4910] btrfs_replace_file_extents+0xcc4/0x1238 [ 78.091873][ T4910] btrfs_clone+0xb7c/0x1d14 [ 78.092585][ T4910] btrfs_clone_files+0x278/0x320 [ 78.093329][ T4910] btrfs_remap_file_range+0x488/0xb9c [ 78.094205][ T4910] vfs_copy_file_range+0xab0/0x10fc [ 78.095003][ T4910] __arm64_sys_copy_file_range+0x540/0x8d4 [ 78.095999][ T4910] invoke_syscall+0x98/0x2b0 [ 78.096680][ T4910] el0_svc_common+0x138/0x258 [ 78.097386][ T4910] do_el0_svc+0x58/0x13c [ 78.098145][ T4910] el0_svc+0x78/0x1d0 [ 78.098805][ T4910] el0t_64_sync_handler+0xcc/0xe4 [ 78.099624][ T4910] el0t_64_sync+0x1a0/0x1a4 [ 78.100386][ T4910] irq event stamp: 83972 [ 78.101108][ T4910] hardirqs last enabled at (83971): [] __up_console_sem+0xb4/0xfc [ 78.102645][ T4910] hardirqs last disabled at (83972): [] el1_dbg+0x24/0x80 [ 78.104044][ T4910] softirqs last enabled at (83946): [] handle_softirqs+0xa40/0xbe4 [ 78.105555][ T4910] softirqs last disabled at (83705): [] __irq_exit_rcu+0x240/0x43c [ 78.107047][ T4910] ---[ end trace 4943a00d9a39209f ]--- [ 78.108879][ T4910] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 78.110433][ T4910] BTRFS info (device loop0): forced readonly [ 78.285124][ T4935] loop0: detected capacity change from 0 to 32768 [ 78.366483][ T284] device hsr_slave_0 left promiscuous mode [ 78.368643][ T4935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4935) [ 78.372495][ T4935] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 78.374229][ T4935] BTRFS info (device loop0): using free space tree [ 78.375287][ T4935] BTRFS info (device loop0): has skinny extents [ 78.383994][ T4935] BTRFS info (device loop0): enabling ssd optimizations [ 78.391584][ T4935] FAULT_INJECTION: forcing a failure. [ 78.391584][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 78.394304][ T284] device hsr_slave_1 left promiscuous mode [ 78.395625][ T4935] CPU: 1 PID: 4935 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 78.397044][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.398643][ T4935] Call trace: [ 78.399199][ T4935] dump_backtrace+0x0/0x458 [ 78.399930][ T4935] show_stack+0x2c/0x3c [ 78.400596][ T4935] __dump_stack+0x30/0x40 [ 78.401327][ T4935] dump_stack_lvl+0xf4/0x15c [ 78.402085][ T4935] dump_stack+0x1c/0x5c [ 78.402743][ T4935] should_fail+0x3bc/0x514 [ 78.403468][ T4935] __should_failslab+0xbc/0x10c [ 78.404276][ T4935] should_failslab+0x10/0x28 [ 78.405034][ T4935] slab_pre_alloc_hook+0x64/0xe8 [ 78.405866][ T4935] kmem_cache_alloc+0x94/0x3d4 [ 78.406651][ T4935] btrfs_add_delayed_data_ref+0x160/0xd08 [ 78.407568][ T4935] btrfs_inc_extent_ref+0x100/0x198 [ 78.408432][ T4935] btrfs_insert_replace_extent+0x6a0/0x9cc [ 78.409350][ T4935] btrfs_replace_file_extents+0x89c/0x1238 [ 78.410289][ T4935] btrfs_clone+0xb7c/0x1d14 [ 78.411026][ T4935] btrfs_clone_files+0x278/0x320 [ 78.411801][ T4935] btrfs_remap_file_range+0x488/0xb9c [ 78.412648][ T4935] vfs_copy_file_range+0xab0/0x10fc [ 78.413474][ T4935] __arm64_sys_copy_file_range+0x540/0x8d4 [ 78.414421][ T4935] invoke_syscall+0x98/0x2b0 [ 78.415139][ T4935] el0_svc_common+0x138/0x258 [ 78.415855][ T4935] do_el0_svc+0x58/0x13c [ 78.416524][ T4935] el0_svc+0x78/0x1d0 [ 78.417156][ T4935] el0t_64_sync_handler+0xcc/0xe4 [ 78.417907][ T4935] el0t_64_sync+0x1a0/0x1a4 [ 78.419434][ T4935] ------------[ cut here ]------------ [ 78.420353][ T4935] WARNING: CPU: 1 PID: 4935 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 78.421722][ T4935] Modules linked in: [ 78.422328][ T4935] CPU: 1 PID: 4935 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 78.423739][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.425376][ T4935] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.426612][ T4935] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 78.427550][ T4935] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 78.428601][ T4935] sp : ffff80001f297440 [ 78.429270][ T4935] x29: ffff80001f297560 x28: dfff800000000000 x27: 000000000000e000 [ 78.430584][ T4935] x26: ffff0000d1c8d000 x25: ffff80001f297890 x24: ffff0000e2331d70 [ 78.431828][ T4935] x23: ffff700003e52e98 x22: 00000000fffffff4 x21: 1fffe0001bccf713 [ 78.433183][ T4935] x20: ffff0000de67b840 x19: ffff0000de67b898 x18: 0000000000000001 [ 78.434546][ T4935] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 78.435862][ T4935] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 78.437226][ T4935] x11: 0000000000000000 x10: 0000000000000000 x9 : 21932ca444f23c00 [ 78.438609][ T4935] x8 : 21932ca444f23c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.439885][ T4935] x5 : ffff80001f296d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 78.441168][ T4935] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 78.442392][ T4935] Call trace: [ 78.442891][ T4935] btrfs_replace_file_extents+0xcc4/0x1238 [ 78.443825][ T4935] btrfs_clone+0xb7c/0x1d14 [ 78.444596][ T4935] btrfs_clone_files+0x278/0x320 [ 78.445376][ T4935] btrfs_remap_file_range+0x488/0xb9c [ 78.446235][ T4935] vfs_copy_file_range+0xab0/0x10fc [ 78.447049][ T4935] __arm64_sys_copy_file_range+0x540/0x8d4 [ 78.447944][ T4935] invoke_syscall+0x98/0x2b0 [ 78.448661][ T4935] el0_svc_common+0x138/0x258 [ 78.449420][ T4935] do_el0_svc+0x58/0x13c [ 78.450123][ T4935] el0_svc+0x78/0x1d0 [ 78.450819][ T4935] el0t_64_sync_handler+0xcc/0xe4 [ 78.451609][ T4935] el0t_64_sync+0x1a0/0x1a4 [ 78.452319][ T4935] irq event stamp: 80736 [ 78.453030][ T4935] hardirqs last enabled at (80735): [] __up_console_sem+0xb4/0xfc [ 78.454580][ T4935] hardirqs last disabled at (80736): [] el1_dbg+0x24/0x80 [ 78.455926][ T4935] softirqs last enabled at (80716): [] handle_softirqs+0xa40/0xbe4 [ 78.457420][ T4935] softirqs last disabled at (80685): [] __irq_exit_rcu+0x240/0x43c [ 78.458955][ T4935] ---[ end trace 4943a00d9a3920a0 ]--- [ 78.461245][ T4935] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 78.462959][ T4935] BTRFS info (device loop0): forced readonly [ 78.508970][ T284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.510264][ T284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.514169][ T284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.515388][ T284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.518335][ T284] device bridge_slave_1 left promiscuous mode [ 78.519428][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566677][ T284] device bridge_slave_0 left promiscuous mode [ 78.567826][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.616593][ T4960] loop0: detected capacity change from 0 to 32768 [ 78.646438][ T4960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.18 (4960) [ 78.649950][ T4960] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 78.651422][ T4960] BTRFS info (device loop0): using free space tree [ 78.652433][ T4960] BTRFS info (device loop0): has skinny extents [ 78.666799][ T4960] BTRFS info (device loop0): enabling ssd optimizations [ 78.675481][ T4960] FAULT_INJECTION: forcing a failure. [ 78.675481][ T4960] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.677594][ T4960] CPU: 0 PID: 4960 Comm: syz.0.18 Tainted: G W syzkaller #0 [ 78.678882][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.680414][ T4960] Call trace: [ 78.680934][ T4960] dump_backtrace+0x0/0x458 [ 78.681691][ T4960] show_stack+0x2c/0x3c [ 78.682372][ T4960] __dump_stack+0x30/0x40 [ 78.683121][ T4960] dump_stack_lvl+0xf4/0x15c [ 78.683907][ T4960] dump_stack+0x1c/0x5c [ 78.684636][ T4960] should_fail+0x3bc/0x514 [ 78.685377][ T4960] should_fail_alloc_page+0x74/0xa8 [ 78.686243][ T4960] prepare_alloc_pages+0x160/0x45c [ 78.687000][ T4960] __alloc_pages+0x108/0x470 [ 78.687678][ T4960] alloc_pages+0x34c/0x5c0 [ 78.688380][ T4960] new_slab+0xe0/0x544 [ 78.689053][ T4960] ___slab_alloc+0x6b4/0xd8c [ 78.689880][ T4960] __slab_alloc+0x68/0xc0 [ 78.690596][ T4960] kmem_cache_alloc+0x2a4/0x3d4 [ 78.691390][ T4960] btrfs_add_delayed_data_ref+0x160/0xd08 [ 78.692303][ T4960] btrfs_inc_extent_ref+0x100/0x198 [ 78.693170][ T4960] btrfs_insert_replace_extent+0x6a0/0x9cc [ 78.693580][ T284] device veth1_macvtap left promiscuous mode [ 78.694145][ T4960] btrfs_replace_file_extents+0x89c/0x1238 [ 78.695188][ T284] device veth0_macvtap left promiscuous mode [ 78.696039][ T4960] btrfs_clone+0xb7c/0x1d14 [ 78.697059][ T284] device veth1_vlan left promiscuous mode [ 78.697660][ T4960] btrfs_clone_files+0x278/0x320 [ 78.698525][ T284] device veth0_vlan left promiscuous mode [ 78.699259][ T4960] btrfs_remap_file_range+0x488/0xb9c [ 78.700940][ T4960] vfs_copy_file_range+0xab0/0x10fc [ 78.701821][ T4960] __arm64_sys_copy_file_range+0x540/0x8d4 [ 78.702813][ T4960] invoke_syscall+0x98/0x2b0 [ 78.703614][ T4960] el0_svc_common+0x138/0x258 [ 78.704415][ T4960] do_el0_svc+0x58/0x13c [ 78.705133][ T4960] el0_svc+0x78/0x1d0 [ 78.705744][ T4960] el0t_64_sync_handler+0xcc/0xe4 [ 78.706540][ T4960] el0t_64_sync+0x1a0/0x1a4 [ 78.852868][ T284] team0 (unregistering): Port device team_slave_1 removed [ 78.859832][ T284] team0 (unregistering): Port device team_slave_0 removed [ 78.881355][ T284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.897674][ T284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.903172][ T4142] Bluetooth: hci0: command 0x040f tx timeout [ 78.966084][ T4983] loop0: detected capacity change from 0 to 32768 [ 79.005728][ T4983] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.19 (4983) [ 79.029033][ T284] bond0 (unregistering): Released all slaves [ 79.046637][ T4983] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 79.048060][ T4983] BTRFS info (device loop0): using free space tree [ 79.049132][ T4983] BTRFS info (device loop0): has skinny extents [ 79.057958][ T4983] BTRFS info (device loop0): enabling ssd optimizations [ 79.068904][ T4983] FAULT_INJECTION: forcing a failure. [ 79.068904][ T4983] name failslab, interval 1, probability 0, space 0, times 0 [ 79.071189][ T4983] CPU: 0 PID: 4983 Comm: syz.0.19 Tainted: G W syzkaller #0 [ 79.072533][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.074151][ T4983] Call trace: [ 79.074756][ T4983] dump_backtrace+0x0/0x458 [ 79.075475][ T4983] show_stack+0x2c/0x3c [ 79.076109][ T4983] __dump_stack+0x30/0x40 [ 79.076822][ T4983] dump_stack_lvl+0xf4/0x15c [ 79.077598][ T4983] dump_stack+0x1c/0x5c [ 79.078291][ T4983] should_fail+0x3bc/0x514 [ 79.079042][ T4983] __should_failslab+0xbc/0x10c [ 79.079838][ T4983] should_failslab+0x10/0x28 [ 79.080609][ T4983] slab_pre_alloc_hook+0x64/0xe8 [ 79.081394][ T4983] kmem_cache_alloc+0x94/0x3d4 [ 79.082232][ T4983] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 79.083173][ T4983] btrfs_inc_extent_ref+0x100/0x198 [ 79.084036][ T4983] btrfs_insert_replace_extent+0x6a0/0x9cc [ 79.085019][ T4983] btrfs_replace_file_extents+0x89c/0x1238 [ 79.085945][ T4983] btrfs_clone+0xb7c/0x1d14 [ 79.086716][ T4983] btrfs_clone_files+0x278/0x320 [ 79.087569][ T4983] btrfs_remap_file_range+0x488/0xb9c [ 79.088504][ T4983] vfs_copy_file_range+0xab0/0x10fc [ 79.089379][ T4983] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.090389][ T4983] invoke_syscall+0x98/0x2b0 [ 79.091155][ T4983] el0_svc_common+0x138/0x258 [ 79.091847][ T4983] do_el0_svc+0x58/0x13c [ 79.092521][ T4983] el0_svc+0x78/0x1d0 [ 79.093189][ T4983] el0t_64_sync_handler+0xcc/0xe4 [ 79.093996][ T4983] el0t_64_sync+0x1a0/0x1a4 [ 79.098679][ T4983] ------------[ cut here ]------------ [ 79.099703][ T4983] WARNING: CPU: 0 PID: 4983 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 79.101414][ T4983] Modules linked in: [ 79.102040][ T4983] CPU: 0 PID: 4983 Comm: syz.0.19 Tainted: G W syzkaller #0 [ 79.103387][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.105034][ T4983] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 79.106249][ T4983] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.107265][ T4983] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.108272][ T4983] sp : ffff800020307440 [ 79.108991][ T4983] x29: ffff800020307560 x28: dfff800000000000 x27: 000000000000e000 [ 79.110303][ T4983] x26: ffff0000ebd16b00 x25: ffff800020307890 x24: ffff0000ec43b110 [ 79.111610][ T4983] x23: ffff700004060e98 x22: 00000000fffffff4 x21: 1fffe0001bcdbd3f [ 79.112898][ T4983] x20: ffff0000de6de9a0 x19: ffff0000de6de9f8 x18: 0000000000000001 [ 79.114255][ T4983] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 79.115496][ T4983] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 79.116796][ T4983] x11: 0000000000000000 x10: 0000000000000000 x9 : d39daf77e13e4e00 [ 79.118091][ T4983] x8 : d39daf77e13e4e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 79.119480][ T4983] x5 : ffff800020306d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 79.120824][ T4983] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 79.122122][ T4983] Call trace: [ 79.122683][ T4983] btrfs_replace_file_extents+0xcc4/0x1238 [ 79.123614][ T4983] btrfs_clone+0xb7c/0x1d14 [ 79.124311][ T4983] btrfs_clone_files+0x278/0x320 [ 79.125116][ T4983] btrfs_remap_file_range+0x488/0xb9c [ 79.126058][ T4983] vfs_copy_file_range+0xab0/0x10fc [ 79.126880][ T4983] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.127819][ T4983] invoke_syscall+0x98/0x2b0 [ 79.128571][ T4983] el0_svc_common+0x138/0x258 [ 79.129356][ T4983] do_el0_svc+0x58/0x13c [ 79.130038][ T4983] el0_svc+0x78/0x1d0 [ 79.130687][ T4983] el0t_64_sync_handler+0xcc/0xe4 [ 79.131482][ T4983] el0t_64_sync+0x1a0/0x1a4 [ 79.132223][ T4983] irq event stamp: 81160 [ 79.132914][ T4983] hardirqs last enabled at (81159): [] __up_console_sem+0xb4/0xfc [ 79.134451][ T4983] hardirqs last disabled at (81160): [] el1_dbg+0x24/0x80 [ 79.135839][ T4983] softirqs last enabled at (81136): [] handle_softirqs+0xa40/0xbe4 [ 79.137357][ T4983] softirqs last disabled at (81051): [] __irq_exit_rcu+0x240/0x43c [ 79.138984][ T4983] ---[ end trace 4943a00d9a3920a1 ]--- [ 79.143612][ T4983] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 79.145190][ T4983] BTRFS info (device loop0): forced readonly [ 79.352160][ T5006] loop0: detected capacity change from 0 to 32768 [ 79.408244][ T5006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (5006) [ 79.414610][ T5006] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 79.416489][ T5006] BTRFS info (device loop0): using free space tree [ 79.417611][ T5006] BTRFS info (device loop0): has skinny extents [ 79.434537][ T5006] BTRFS info (device loop0): enabling ssd optimizations [ 79.443895][ T5006] FAULT_INJECTION: forcing a failure. [ 79.443895][ T5006] name failslab, interval 1, probability 0, space 0, times 0 [ 79.446005][ T5006] CPU: 1 PID: 5006 Comm: syz.0.20 Tainted: G W syzkaller #0 [ 79.447470][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.449045][ T5006] Call trace: [ 79.449584][ T5006] dump_backtrace+0x0/0x458 [ 79.450317][ T5006] show_stack+0x2c/0x3c [ 79.450941][ T5006] __dump_stack+0x30/0x40 [ 79.451647][ T5006] dump_stack_lvl+0xf4/0x15c [ 79.452390][ T5006] dump_stack+0x1c/0x5c [ 79.453054][ T5006] should_fail+0x3bc/0x514 [ 79.453771][ T5006] __should_failslab+0xbc/0x10c [ 79.454549][ T5006] should_failslab+0x10/0x28 [ 79.455289][ T5006] slab_pre_alloc_hook+0x64/0xe8 [ 79.456095][ T5006] kmem_cache_alloc+0x94/0x3d4 [ 79.456865][ T5006] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 79.457790][ T5006] btrfs_inc_extent_ref+0x100/0x198 [ 79.458650][ T5006] btrfs_insert_replace_extent+0x6a0/0x9cc [ 79.459612][ T5006] btrfs_replace_file_extents+0x89c/0x1238 [ 79.460527][ T5006] btrfs_clone+0xb7c/0x1d14 [ 79.461211][ T5006] btrfs_clone_files+0x278/0x320 [ 79.461967][ T5006] btrfs_remap_file_range+0x488/0xb9c [ 79.462798][ T5006] vfs_copy_file_range+0xab0/0x10fc [ 79.463599][ T5006] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.464464][ T5006] invoke_syscall+0x98/0x2b0 [ 79.465182][ T5006] el0_svc_common+0x138/0x258 [ 79.465933][ T5006] do_el0_svc+0x58/0x13c [ 79.466644][ T5006] el0_svc+0x78/0x1d0 [ 79.467299][ T5006] el0t_64_sync_handler+0xcc/0xe4 [ 79.468070][ T5006] el0t_64_sync+0x1a0/0x1a4 [ 79.469111][ T5006] ------------[ cut here ]------------ [ 79.470068][ T5006] WARNING: CPU: 1 PID: 5006 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 79.471648][ T5006] Modules linked in: [ 79.472217][ T5006] CPU: 1 PID: 5006 Comm: syz.0.20 Tainted: G W syzkaller #0 [ 79.473476][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.474941][ T5006] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 79.476109][ T5006] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.477049][ T5006] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.478025][ T5006] sp : ffff800020497440 [ 79.478652][ T5006] x29: ffff800020497560 x28: dfff800000000000 x27: 000000000000e000 [ 79.479973][ T5006] x26: ffff0000c7cab800 x25: ffff800020497890 x24: ffff0000ec43c4b0 [ 79.481276][ T5006] x23: ffff700004092e98 x22: 00000000fffffff4 x21: 1fffe0001bccf76b [ 79.482567][ T5006] x20: ffff0000de67bb00 x19: ffff0000de67bb58 x18: 0000000000000001 [ 79.483824][ T5006] x17: 0000000000000000 x16: ffff800008304ad4 x15: 00000000ffffffff [ 79.485145][ T5006] x14: 0000000000000001 x13: 1ffff00004092da8 x12: 0000000000ff0100 [ 79.486448][ T5006] x11: 0000000000000000 x10: 0000000000000000 x9 : 3aff991bb9137500 [ 79.487729][ T5006] x8 : 3aff991bb9137500 x7 : 0000000000000001 x6 : 0000000000000001 [ 79.488991][ T5006] x5 : ffff800020496d58 x4 : ffff80001436f3e0 x3 : ffff800008304be4 [ 79.490308][ T5006] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 79.491513][ T5006] Call trace: [ 79.492054][ T5006] btrfs_replace_file_extents+0xcc4/0x1238 [ 79.493062][ T5006] btrfs_clone+0xb7c/0x1d14 [ 79.493810][ T5006] btrfs_clone_files+0x278/0x320 [ 79.494619][ T5006] btrfs_remap_file_range+0x488/0xb9c [ 79.495470][ T5006] vfs_copy_file_range+0xab0/0x10fc [ 79.496386][ T5006] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.497315][ T5006] invoke_syscall+0x98/0x2b0 [ 79.498019][ T5006] el0_svc_common+0x138/0x258 [ 79.498784][ T5006] do_el0_svc+0x58/0x13c [ 79.499516][ T5006] el0_svc+0x78/0x1d0 [ 79.500167][ T5006] el0t_64_sync_handler+0xcc/0xe4 [ 79.500921][ T5006] el0t_64_sync+0x1a0/0x1a4 [ 79.501586][ T5006] irq event stamp: 80798 [ 79.502296][ T5006] hardirqs last enabled at (80797): [] __up_console_sem+0xb4/0xfc [ 79.503707][ T5006] hardirqs last disabled at (80798): [] el1_dbg+0x24/0x80 [ 79.505053][ T5006] softirqs last enabled at (80774): [] handle_softirqs+0xa40/0xbe4 [ 79.506503][ T5006] softirqs last disabled at (80699): [] __irq_exit_rcu+0x240/0x43c [ 79.507962][ T5006] ---[ end trace 4943a00d9a3920a2 ]--- [ 79.509419][ T5006] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 79.511122][ T5006] BTRFS info (device loop0): forced readonly [ 79.652415][ T5028] loop0: detected capacity change from 0 to 32768 [ 79.695695][ T5028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (5028) [ 79.702190][ T5028] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 79.703766][ T5028] BTRFS info (device loop0): using free space tree [ 79.704745][ T5028] BTRFS info (device loop0): has skinny extents [ 79.712875][ T5028] BTRFS info (device loop0): enabling ssd optimizations [ 79.720525][ T5028] FAULT_INJECTION: forcing a failure. [ 79.720525][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 79.722502][ T5028] CPU: 0 PID: 5028 Comm: syz.0.21 Tainted: G W syzkaller #0 [ 79.723744][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.725290][ T5028] Call trace: [ 79.725773][ T5028] dump_backtrace+0x0/0x458 [ 79.726436][ T5028] show_stack+0x2c/0x3c [ 79.727069][ T5028] __dump_stack+0x30/0x40 [ 79.727718][ T5028] dump_stack_lvl+0xf4/0x15c [ 79.728460][ T5028] dump_stack+0x1c/0x5c [ 79.729130][ T5028] should_fail+0x3bc/0x514 [ 79.729817][ T5028] __should_failslab+0xbc/0x10c [ 79.730648][ T5028] should_failslab+0x10/0x28 [ 79.731492][ T5028] slab_pre_alloc_hook+0x64/0xe8 [ 79.732275][ T5028] kmem_cache_alloc+0x94/0x3d4 [ 79.733076][ T5028] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 79.734028][ T5028] btrfs_inc_extent_ref+0x100/0x198 [ 79.734897][ T5028] btrfs_insert_replace_extent+0x6a0/0x9cc [ 79.735877][ T5028] btrfs_replace_file_extents+0x89c/0x1238 [ 79.736873][ T5028] btrfs_clone+0xb7c/0x1d14 [ 79.737642][ T5028] btrfs_clone_files+0x278/0x320 [ 79.738477][ T5028] btrfs_remap_file_range+0x488/0xb9c [ 79.739379][ T5028] vfs_copy_file_range+0xab0/0x10fc [ 79.740291][ T5028] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.741255][ T5028] invoke_syscall+0x98/0x2b0 [ 79.742010][ T5028] el0_svc_common+0x138/0x258 [ 79.742794][ T5028] do_el0_svc+0x58/0x13c [ 79.743471][ T5028] el0_svc+0x78/0x1d0 [ 79.744133][ T5028] el0t_64_sync_handler+0xcc/0xe4 [ 79.744979][ T5028] el0t_64_sync+0x1a0/0x1a4 [ 79.747692][ T5028] ------------[ cut here ]------------ [ 79.748609][ T5028] WARNING: CPU: 0 PID: 5028 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 79.750251][ T5028] Modules linked in: [ 79.750828][ T5028] CPU: 0 PID: 5028 Comm: syz.0.21 Tainted: G W syzkaller #0 [ 79.752057][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.753479][ T5028] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 79.754612][ T5028] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.755541][ T5028] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 79.756438][ T5028] sp : ffff8000202f7440 [ 79.757103][ T5028] x29: ffff8000202f7560 x28: dfff800000000000 x27: 000000000000e000 [ 79.758294][ T5028] x26: ffff0000d3295200 x25: ffff8000202f7890 x24: ffff0000ec43d850 [ 79.759538][ T5028] x23: ffff70000405ee98 x22: 00000000fffffff4 x21: 1fffe0001bcdb437 [ 79.760860][ T5028] x20: ffff0000de6da160 x19: ffff0000de6da1b8 x18: 0000000000000001 [ 79.762149][ T5028] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 79.763373][ T5028] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 79.764567][ T5028] x11: 0000000000000000 x10: 0000000000000000 x9 : 36afe2713e9eb200 [ 79.765731][ T5028] x8 : 36afe2713e9eb200 x7 : 0000000000000001 x6 : 0000000000000001 [ 79.766972][ T5028] x5 : ffff8000202f6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 79.768317][ T5028] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 79.769651][ T5028] Call trace: [ 79.770203][ T5028] btrfs_replace_file_extents+0xcc4/0x1238 [ 79.771241][ T5028] btrfs_clone+0xb7c/0x1d14 [ 79.772003][ T5028] btrfs_clone_files+0x278/0x320 [ 79.772794][ T5028] btrfs_remap_file_range+0x488/0xb9c [ 79.773653][ T5028] vfs_copy_file_range+0xab0/0x10fc [ 79.774505][ T5028] __arm64_sys_copy_file_range+0x540/0x8d4 [ 79.775537][ T5028] invoke_syscall+0x98/0x2b0 [ 79.776309][ T5028] el0_svc_common+0x138/0x258 [ 79.777081][ T5028] do_el0_svc+0x58/0x13c [ 79.777874][ T5028] el0_svc+0x78/0x1d0 [ 79.778509][ T5028] el0t_64_sync_handler+0xcc/0xe4 [ 79.779338][ T5028] el0t_64_sync+0x1a0/0x1a4 [ 79.780095][ T5028] irq event stamp: 80972 [ 79.780812][ T5028] hardirqs last enabled at (80971): [] __up_console_sem+0xb4/0xfc [ 79.782399][ T5028] hardirqs last disabled at (80972): [] el1_dbg+0x24/0x80 [ 79.783730][ T5028] softirqs last enabled at (80948): [] handle_softirqs+0xa40/0xbe4 [ 79.785241][ T5028] softirqs last disabled at (80833): [] __irq_exit_rcu+0x240/0x43c [ 79.786762][ T5028] ---[ end trace 4943a00d9a3920a3 ]--- [ 79.788964][ T5028] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 79.790443][ T5028] BTRFS info (device loop0): forced readonly [ 79.986189][ T5051] loop0: detected capacity change from 0 to 32768 [ 80.039739][ T5051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.22 (5051) [ 80.044354][ T5051] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 80.045755][ T5051] BTRFS info (device loop0): using free space tree [ 80.046795][ T5051] BTRFS info (device loop0): has skinny extents [ 80.060212][ T5051] BTRFS info (device loop0): enabling ssd optimizations [ 80.067848][ T5051] FAULT_INJECTION: forcing a failure. [ 80.067848][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 80.069679][ T5051] CPU: 0 PID: 5051 Comm: syz.0.22 Tainted: G W syzkaller #0 [ 80.070894][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 80.072358][ T5051] Call trace: [ 80.072826][ T5051] dump_backtrace+0x0/0x458 [ 80.073499][ T5051] show_stack+0x2c/0x3c [ 80.074149][ T5051] __dump_stack+0x30/0x40 [ 80.074812][ T5051] dump_stack_lvl+0xf4/0x15c [ 80.075543][ T5051] dump_stack+0x1c/0x5c [ 80.076214][ T5051] should_fail+0x3bc/0x514 [ 80.076862][ T5051] __should_failslab+0xbc/0x10c [ 80.077636][ T5051] should_failslab+0x10/0x28 [ 80.078398][ T5051] slab_pre_alloc_hook+0x64/0xe8 [ 80.079220][ T5051] kmem_cache_alloc+0x94/0x3d4 [ 80.079979][ T5051] alloc_extent_state+0x38/0x42c [ 80.080781][ T5051] __clear_extent_bit+0x1f0/0xb24 [ 80.081583][ T5051] clear_extent_bit+0x68/0x8c [ 80.082324][ T5051] btrfs_clone_files+0x29c/0x320 [ 80.083036][ T5051] btrfs_remap_file_range+0x488/0xb9c [ 80.083870][ T5051] vfs_copy_file_range+0xab0/0x10fc [ 80.084724][ T5051] __arm64_sys_copy_file_range+0x540/0x8d4 [ 80.085666][ T5051] invoke_syscall+0x98/0x2b0 [ 80.086387][ T5051] el0_svc_common+0x138/0x258 [ 80.087188][ T5051] do_el0_svc+0x58/0x13c [ 80.087870][ T5051] el0_svc+0x78/0x1d0 [ 80.088538][ T5051] el0t_64_sync_handler+0xcc/0xe4 [ 80.089305][ T5051] el0t_64_sync+0x1a0/0x1a4 [ 80.247280][ T5073] loop0: detected capacity change from 0 to 32768 [ 80.284795][ T5073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.23 (5073) [ 80.334856][ T5073] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 80.336288][ T5073] BTRFS info (device loop0): using free space tree [ 80.337435][ T5073] BTRFS info (device loop0): has skinny extents [ 80.443488][ T5073] BTRFS info (device loop0): enabling ssd optimizations [ 80.451464][ T5073] FAULT_INJECTION: forcing a failure. [ 80.451464][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 80.460130][ T5073] CPU: 0 PID: 5073 Comm: syz.0.23 Tainted: G W syzkaller #0 [ 80.461402][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 80.462908][ T5073] Call trace: [ 80.463399][ T5073] dump_backtrace+0x0/0x458 [ 80.464134][ T5073] show_stack+0x2c/0x3c [ 80.464770][ T5073] __dump_stack+0x30/0x40 [ 80.465454][ T5073] dump_stack_lvl+0xf4/0x15c [ 80.466195][ T5073] dump_stack+0x1c/0x5c [ 80.466842][ T5073] should_fail+0x3bc/0x514 [ 80.467602][ T5073] __should_failslab+0xbc/0x10c [ 80.468429][ T5073] should_failslab+0x10/0x28 [ 80.469176][ T5073] slab_pre_alloc_hook+0x64/0xe8 [ 80.469952][ T5073] kmem_cache_alloc+0x94/0x3d4 [ 80.470727][ T5073] alloc_extent_state+0x38/0x42c [ 80.471562][ T5073] __clear_extent_bit+0x1f0/0xb24 [ 80.472381][ T5073] clear_extent_bit+0x68/0x8c [ 80.473205][ T5073] btrfs_clone_files+0x29c/0x320 [ 80.474092][ T5073] btrfs_remap_file_range+0x488/0xb9c [ 80.474976][ T5073] vfs_copy_file_range+0xab0/0x10fc [ 80.475842][ T5073] __arm64_sys_copy_file_range+0x540/0x8d4 [ 80.476782][ T5073] invoke_syscall+0x98/0x2b0 [ 80.477519][ T5073] el0_svc_common+0x138/0x258 [ 80.478274][ T5073] do_el0_svc+0x58/0x13c [ 80.478942][ T5073] el0_svc+0x78/0x1d0 [ 80.479684][ T5073] el0t_64_sync_handler+0xcc/0xe4 [ 80.480566][ T5073] el0t_64_sync+0x1a0/0x1a4 [ 80.685600][ T5096] loop0: detected capacity change from 0 to 32768 [ 80.688997][ T5096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.24 (5096) [ 80.725367][ T5096] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 80.726690][ T5096] BTRFS info (device loop0): using free space tree [ 80.727849][ T5096] BTRFS info (device loop0): has skinny extents [ 80.738482][ T5096] BTRFS info (device loop0): enabling ssd optimizations [ 80.746611][ T5096] FAULT_INJECTION: forcing a failure. [ 80.746611][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 80.748653][ T5096] CPU: 0 PID: 5096 Comm: syz.0.24 Tainted: G W syzkaller #0 [ 80.750012][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 80.751692][ T5096] Call trace: [ 80.752231][ T5096] dump_backtrace+0x0/0x458 [ 80.753032][ T5096] show_stack+0x2c/0x3c [ 80.753722][ T5096] __dump_stack+0x30/0x40 [ 80.754440][ T5096] dump_stack_lvl+0xf4/0x15c [ 80.755282][ T5096] dump_stack+0x1c/0x5c [ 80.755998][ T5096] should_fail+0x3bc/0x514 [ 80.756700][ T5096] __should_failslab+0xbc/0x10c [ 80.757530][ T5096] should_failslab+0x10/0x28 [ 80.758331][ T5096] slab_pre_alloc_hook+0x64/0xe8 [ 80.759171][ T5096] kmem_cache_alloc+0x94/0x3d4 [ 80.759952][ T5096] alloc_extent_map+0x28/0x128 [ 80.760708][ T5096] btrfs_drop_extent_cache+0x164/0xd90 [ 80.761557][ T5096] btrfs_drop_extents+0x2e8/0x2254 [ 80.762430][ T5096] btrfs_replace_file_extents+0x338/0x1238 [ 80.763334][ T5096] btrfs_clone+0xb7c/0x1d14 [ 80.764085][ T5096] btrfs_clone_files+0x278/0x320 [ 80.764876][ T5096] btrfs_remap_file_range+0x488/0xb9c [ 80.765792][ T5096] vfs_copy_file_range+0xab0/0x10fc [ 80.766614][ T5096] __arm64_sys_copy_file_range+0x540/0x8d4 [ 80.767518][ T5096] invoke_syscall+0x98/0x2b0 [ 80.768236][ T5096] el0_svc_common+0x138/0x258 [ 80.768954][ T5096] do_el0_svc+0x58/0x13c [ 80.769719][ T5096] el0_svc+0x78/0x1d0 [ 80.770383][ T5096] el0t_64_sync_handler+0xcc/0xe4 [ 80.771227][ T5096] el0t_64_sync+0x1a0/0x1a4 [ 80.937937][ T5117] loop0: detected capacity change from 0 to 32768 [ 80.983601][ T1540] Bluetooth: hci0: command 0x0419 tx timeout [ 80.987561][ T5117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.25 (5117) [ 81.008735][ T5117] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 81.010154][ T5117] BTRFS info (device loop0): using free space tree [ 81.011258][ T5117] BTRFS info (device loop0): has skinny extents [ 81.027411][ T5117] BTRFS info (device loop0): enabling ssd optimizations [ 81.036225][ T5117] FAULT_INJECTION: forcing a failure. [ 81.036225][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 81.038342][ T5117] CPU: 1 PID: 5117 Comm: syz.0.25 Tainted: G W syzkaller #0 [ 81.039705][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.041295][ T5117] Call trace: [ 81.041790][ T5117] dump_backtrace+0x0/0x458 [ 81.042470][ T5117] show_stack+0x2c/0x3c [ 81.043101][ T5117] __dump_stack+0x30/0x40 [ 81.043820][ T5117] dump_stack_lvl+0xf4/0x15c [ 81.044583][ T5117] dump_stack+0x1c/0x5c [ 81.045277][ T5117] should_fail+0x3bc/0x514 [ 81.045986][ T5117] __should_failslab+0xbc/0x10c [ 81.046855][ T5117] should_failslab+0x10/0x28 [ 81.047614][ T5117] slab_pre_alloc_hook+0x64/0xe8 [ 81.048385][ T5117] kmem_cache_alloc+0x94/0x3d4 [ 81.049140][ T5117] alloc_extent_map+0x28/0x128 [ 81.049890][ T5117] btrfs_drop_extent_cache+0x164/0xd90 [ 81.050771][ T5117] btrfs_drop_extents+0x2e8/0x2254 [ 81.051637][ T5117] btrfs_replace_file_extents+0x338/0x1238 [ 81.052583][ T5117] btrfs_clone+0xb7c/0x1d14 [ 81.053349][ T5117] btrfs_clone_files+0x278/0x320 [ 81.054158][ T5117] btrfs_remap_file_range+0x488/0xb9c [ 81.055095][ T5117] vfs_copy_file_range+0xab0/0x10fc [ 81.055961][ T5117] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.056933][ T5117] invoke_syscall+0x98/0x2b0 [ 81.057706][ T5117] el0_svc_common+0x138/0x258 [ 81.058464][ T5117] do_el0_svc+0x58/0x13c [ 81.059134][ T5117] el0_svc+0x78/0x1d0 [ 81.059803][ T5117] el0t_64_sync_handler+0xcc/0xe4 [ 81.060600][ T5117] el0t_64_sync+0x1a0/0x1a4 [ 81.109599][ T4877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4877) [ 81.295531][ T5140] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 81.296969][ T5140] BTRFS info (device loop0): using free space tree [ 81.298050][ T5140] BTRFS info (device loop0): has skinny extents [ 81.316454][ T5140] BTRFS info (device loop0): enabling ssd optimizations [ 81.327769][ T5140] FAULT_INJECTION: forcing a failure. [ 81.327769][ T5140] name failslab, interval 1, probability 0, space 0, times 0 [ 81.330007][ T5140] CPU: 0 PID: 5140 Comm: syz.0.26 Tainted: G W syzkaller #0 [ 81.331235][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.332874][ T5140] Call trace: [ 81.333375][ T5140] dump_backtrace+0x0/0x458 [ 81.334089][ T5140] show_stack+0x2c/0x3c [ 81.334766][ T5140] __dump_stack+0x30/0x40 [ 81.335474][ T5140] dump_stack_lvl+0xf4/0x15c [ 81.336222][ T5140] dump_stack+0x1c/0x5c [ 81.336918][ T5140] should_fail+0x3bc/0x514 [ 81.337593][ T5140] __should_failslab+0xbc/0x10c [ 81.338408][ T5140] should_failslab+0x10/0x28 [ 81.339187][ T5140] slab_pre_alloc_hook+0x64/0xe8 [ 81.340037][ T5140] kmem_cache_alloc+0x94/0x3d4 [ 81.340833][ T5140] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 81.341759][ T5140] btrfs_inc_extent_ref+0x100/0x198 [ 81.342583][ T5140] btrfs_insert_replace_extent+0x6a0/0x9cc [ 81.343587][ T5140] btrfs_replace_file_extents+0x89c/0x1238 [ 81.344551][ T5140] btrfs_clone+0xb7c/0x1d14 [ 81.345340][ T5140] btrfs_clone_files+0x278/0x320 [ 81.346186][ T5140] btrfs_remap_file_range+0x488/0xb9c [ 81.347062][ T5140] vfs_copy_file_range+0xab0/0x10fc [ 81.347869][ T5140] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.348814][ T5140] invoke_syscall+0x98/0x2b0 [ 81.349518][ T5140] el0_svc_common+0x138/0x258 [ 81.350331][ T5140] do_el0_svc+0x58/0x13c [ 81.351041][ T5140] el0_svc+0x78/0x1d0 [ 81.351697][ T5140] el0t_64_sync_handler+0xcc/0xe4 [ 81.352558][ T5140] el0t_64_sync+0x1a0/0x1a4 [ 81.354524][ T5140] ------------[ cut here ]------------ [ 81.355461][ T5140] WARNING: CPU: 0 PID: 5140 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 81.356919][ T5140] Modules linked in: [ 81.357526][ T5140] CPU: 0 PID: 5140 Comm: syz.0.26 Tainted: G W syzkaller #0 [ 81.358794][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.360171][ T5140] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 81.361243][ T5140] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 81.362131][ T5140] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 81.363048][ T5140] sp : ffff800020a47440 [ 81.363690][ T5140] x29: ffff800020a47560 x28: dfff800000000000 x27: 000000000000e000 [ 81.364957][ T5140] x26: ffff0000ec334600 x25: ffff800020a47890 x24: ffff0000ec4b3ae0 [ 81.366141][ T5140] x23: ffff700004148e98 x22: 00000000fffffff4 x21: 1fffe0001b9df4d1 [ 81.367355][ T5140] x20: ffff0000dcefa630 x19: ffff0000dcefa688 x18: 0000000000000001 [ 81.368533][ T5140] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 81.369716][ T5140] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 81.370956][ T5140] x11: 0000000000000000 x10: 0000000000000000 x9 : 36e09f249e883000 [ 81.372260][ T5140] x8 : 36e09f249e883000 x7 : 0000000000000001 x6 : 0000000000000001 [ 81.373631][ T5140] x5 : ffff800020a46d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 81.374864][ T5140] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 81.376125][ T5140] Call trace: [ 81.376660][ T5140] btrfs_replace_file_extents+0xcc4/0x1238 [ 81.377541][ T5140] btrfs_clone+0xb7c/0x1d14 [ 81.378242][ T5140] btrfs_clone_files+0x278/0x320 [ 81.378999][ T5140] btrfs_remap_file_range+0x488/0xb9c [ 81.379768][ T5140] vfs_copy_file_range+0xab0/0x10fc [ 81.380596][ T5140] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.381568][ T5140] invoke_syscall+0x98/0x2b0 [ 81.382247][ T5140] el0_svc_common+0x138/0x258 [ 81.382997][ T5140] do_el0_svc+0x58/0x13c [ 81.383633][ T5140] el0_svc+0x78/0x1d0 [ 81.384259][ T5140] el0t_64_sync_handler+0xcc/0xe4 [ 81.385003][ T5140] el0t_64_sync+0x1a0/0x1a4 [ 81.385741][ T5140] irq event stamp: 81906 [ 81.386394][ T5140] hardirqs last enabled at (81905): [] __up_console_sem+0xb4/0xfc [ 81.387832][ T5140] hardirqs last disabled at (81906): [] el1_dbg+0x24/0x80 [ 81.389291][ T5140] softirqs last enabled at (81882): [] handle_softirqs+0xa40/0xbe4 [ 81.390885][ T5140] softirqs last disabled at (81861): [] __irq_exit_rcu+0x240/0x43c [ 81.392561][ T5140] ---[ end trace 4943a00d9a3920a4 ]--- [ 81.394712][ T5140] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 81.396458][ T5140] BTRFS info (device loop0): forced readonly [ 81.551346][ T5163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (5163) [ 81.554924][ T5163] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 81.556613][ T5163] BTRFS info (device loop0): using free space tree [ 81.557610][ T5163] BTRFS info (device loop0): has skinny extents [ 81.569939][ T5163] BTRFS info (device loop0): enabling ssd optimizations [ 81.578674][ T5163] FAULT_INJECTION: forcing a failure. [ 81.578674][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 81.580697][ T5163] CPU: 0 PID: 5163 Comm: syz.0.27 Tainted: G W syzkaller #0 [ 81.581948][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.583521][ T5163] Call trace: [ 81.584051][ T5163] dump_backtrace+0x0/0x458 [ 81.584785][ T5163] show_stack+0x2c/0x3c [ 81.585382][ T5163] __dump_stack+0x30/0x40 [ 81.586026][ T5163] dump_stack_lvl+0xf4/0x15c [ 81.586771][ T5163] dump_stack+0x1c/0x5c [ 81.587470][ T5163] should_fail+0x3bc/0x514 [ 81.588157][ T5163] __should_failslab+0xbc/0x10c [ 81.588894][ T5163] should_failslab+0x10/0x28 [ 81.589583][ T5163] slab_pre_alloc_hook+0x64/0xe8 [ 81.590340][ T5163] kmem_cache_alloc+0x94/0x3d4 [ 81.591018][ T5163] btrfs_add_delayed_data_ref+0x160/0xd08 [ 81.591853][ T5163] btrfs_inc_extent_ref+0x100/0x198 [ 81.592672][ T5163] btrfs_insert_replace_extent+0x6a0/0x9cc [ 81.593637][ T5163] btrfs_replace_file_extents+0x89c/0x1238 [ 81.594580][ T5163] btrfs_clone+0xb7c/0x1d14 [ 81.595281][ T5163] btrfs_clone_files+0x278/0x320 [ 81.596075][ T5163] btrfs_remap_file_range+0x488/0xb9c [ 81.596883][ T5163] vfs_copy_file_range+0xab0/0x10fc [ 81.597768][ T5163] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.598714][ T5163] invoke_syscall+0x98/0x2b0 [ 81.599453][ T5163] el0_svc_common+0x138/0x258 [ 81.600279][ T5163] do_el0_svc+0x58/0x13c [ 81.601017][ T5163] el0_svc+0x78/0x1d0 [ 81.601665][ T5163] el0t_64_sync_handler+0xcc/0xe4 [ 81.602473][ T5163] el0t_64_sync+0x1a0/0x1a4 [ 81.604238][ T5163] ------------[ cut here ]------------ [ 81.605200][ T5163] WARNING: CPU: 0 PID: 5163 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 81.606876][ T5163] Modules linked in: [ 81.607501][ T5163] CPU: 0 PID: 5163 Comm: syz.0.27 Tainted: G W syzkaller #0 [ 81.608835][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.610332][ T5163] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 81.611661][ T5163] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 81.612698][ T5163] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 81.613761][ T5163] sp : ffff800020b27440 [ 81.614461][ T5163] x29: ffff800020b27560 x28: dfff800000000000 x27: 000000000000e000 [ 81.615796][ T5163] x26: ffff0000c1a27c00 x25: ffff800020b27890 x24: ffff0000ec4b5850 [ 81.617083][ T5163] x23: ffff700004164e98 x22: 00000000fffffff4 x21: 1fffe0001b9df53f [ 81.618371][ T5163] x20: ffff0000dcefa9a0 x19: ffff0000dcefa9f8 x18: 0000000000000001 [ 81.619690][ T5163] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 81.621061][ T5163] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 81.622448][ T5163] x11: 0000000000000000 x10: 0000000000000000 x9 : d982407404ebbe00 [ 81.623870][ T5163] x8 : d982407404ebbe00 x7 : 0000000000000001 x6 : 0000000000000001 [ 81.625223][ T5163] x5 : ffff800020b26d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 81.626459][ T5163] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 81.627663][ T5163] Call trace: [ 81.628217][ T5163] btrfs_replace_file_extents+0xcc4/0x1238 [ 81.629079][ T5163] btrfs_clone+0xb7c/0x1d14 [ 81.629801][ T5163] btrfs_clone_files+0x278/0x320 [ 81.630626][ T5163] btrfs_remap_file_range+0x488/0xb9c [ 81.631542][ T5163] vfs_copy_file_range+0xab0/0x10fc [ 81.632385][ T5163] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.633305][ T5163] invoke_syscall+0x98/0x2b0 [ 81.634050][ T5163] el0_svc_common+0x138/0x258 [ 81.634786][ T5163] do_el0_svc+0x58/0x13c [ 81.635471][ T5163] el0_svc+0x78/0x1d0 [ 81.636102][ T5163] el0t_64_sync_handler+0xcc/0xe4 [ 81.636947][ T5163] el0t_64_sync+0x1a0/0x1a4 [ 81.637675][ T5163] irq event stamp: 82570 [ 81.638362][ T5163] hardirqs last enabled at (82569): [] __up_console_sem+0xb4/0xfc [ 81.639919][ T5163] hardirqs last disabled at (82570): [] el1_dbg+0x24/0x80 [ 81.641317][ T5163] softirqs last enabled at (82550): [] handle_softirqs+0xa40/0xbe4 [ 81.642979][ T5163] softirqs last disabled at (82445): [] __irq_exit_rcu+0x240/0x43c [ 81.644582][ T5163] ---[ end trace 4943a00d9a3920a5 ]--- [ 81.646820][ T5163] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 81.648318][ T5163] BTRFS info (device loop0): forced readonly [ 81.835332][ T5185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.28 (5185) [ 81.841384][ T5185] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 81.842828][ T5185] BTRFS info (device loop0): using free space tree [ 81.844161][ T5185] BTRFS info (device loop0): has skinny extents [ 81.851830][ T5185] BTRFS info (device loop0): enabling ssd optimizations [ 81.861892][ T5185] FAULT_INJECTION: forcing a failure. [ 81.861892][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 81.864239][ T5185] CPU: 0 PID: 5185 Comm: syz.0.28 Tainted: G W syzkaller #0 [ 81.865564][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 81.867176][ T5185] Call trace: [ 81.867659][ T5185] dump_backtrace+0x0/0x458 [ 81.868368][ T5185] show_stack+0x2c/0x3c [ 81.869001][ T5185] __dump_stack+0x30/0x40 [ 81.869668][ T5185] dump_stack_lvl+0xf4/0x15c [ 81.870375][ T5185] dump_stack+0x1c/0x5c [ 81.871005][ T5185] should_fail+0x3bc/0x514 [ 81.871709][ T5185] __should_failslab+0xbc/0x10c [ 81.872476][ T5185] should_failslab+0x10/0x28 [ 81.873180][ T5185] slab_pre_alloc_hook+0x64/0xe8 [ 81.873932][ T5185] kmem_cache_alloc+0x94/0x3d4 [ 81.874673][ T5185] alloc_extent_state+0x38/0x42c [ 81.875407][ T5185] __clear_extent_bit+0x1f0/0xb24 [ 81.876220][ T5185] clear_extent_bit+0x68/0x8c [ 81.876974][ T5185] btrfs_clone_files+0x29c/0x320 [ 81.877739][ T5185] btrfs_remap_file_range+0x488/0xb9c [ 81.878637][ T5185] vfs_copy_file_range+0xab0/0x10fc [ 81.879512][ T5185] __arm64_sys_copy_file_range+0x540/0x8d4 [ 81.880445][ T5185] invoke_syscall+0x98/0x2b0 [ 81.881222][ T5185] el0_svc_common+0x138/0x258 [ 81.881990][ T5185] do_el0_svc+0x58/0x13c [ 81.882676][ T5185] el0_svc+0x78/0x1d0 [ 81.883308][ T5185] el0t_64_sync_handler+0xcc/0xe4 [ 81.884169][ T5185] el0t_64_sync+0x1a0/0x1a4 [ 82.114490][ T5207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.29 (5207) [ 82.176228][ T5207] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 82.177797][ T5207] BTRFS info (device loop0): using free space tree [ 82.178836][ T5207] BTRFS info (device loop0): has skinny extents [ 82.188319][ T5207] BTRFS info (device loop0): enabling ssd optimizations [ 82.196954][ T5207] FAULT_INJECTION: forcing a failure. [ 82.196954][ T5207] name failslab, interval 1, probability 0, space 0, times 0 [ 82.199046][ T5207] CPU: 1 PID: 5207 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 82.200444][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 82.202098][ T5207] Call trace: [ 82.202616][ T5207] dump_backtrace+0x0/0x458 [ 82.203390][ T5207] show_stack+0x2c/0x3c [ 82.204021][ T5207] __dump_stack+0x30/0x40 [ 82.204679][ T5207] dump_stack_lvl+0xf4/0x15c [ 82.205479][ T5207] dump_stack+0x1c/0x5c [ 82.206208][ T5207] should_fail+0x3bc/0x514 [ 82.207028][ T5207] __should_failslab+0xbc/0x10c [ 82.207812][ T5207] should_failslab+0x10/0x28 [ 82.208586][ T5207] slab_pre_alloc_hook+0x64/0xe8 [ 82.209406][ T5207] kmem_cache_alloc+0x94/0x3d4 [ 82.210172][ T5207] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 82.211048][ T5207] btrfs_inc_extent_ref+0x100/0x198 [ 82.211840][ T5207] btrfs_insert_replace_extent+0x6a0/0x9cc [ 82.212838][ T5207] btrfs_replace_file_extents+0x89c/0x1238 [ 82.213858][ T5207] btrfs_clone+0xb7c/0x1d14 [ 82.214611][ T5207] btrfs_clone_files+0x278/0x320 [ 82.215402][ T5207] btrfs_remap_file_range+0x488/0xb9c [ 82.216231][ T5207] vfs_copy_file_range+0xab0/0x10fc [ 82.217096][ T5207] __arm64_sys_copy_file_range+0x540/0x8d4 [ 82.218082][ T5207] invoke_syscall+0x98/0x2b0 [ 82.218828][ T5207] el0_svc_common+0x138/0x258 [ 82.219631][ T5207] do_el0_svc+0x58/0x13c [ 82.220304][ T5207] el0_svc+0x78/0x1d0 [ 82.220950][ T5207] el0t_64_sync_handler+0xcc/0xe4 [ 82.221715][ T5207] el0t_64_sync+0x1a0/0x1a4 [ 82.223932][ T5207] ------------[ cut here ]------------ [ 82.224835][ T5207] WARNING: CPU: 1 PID: 5207 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 82.226336][ T5207] Modules linked in: [ 82.227004][ T5207] CPU: 1 PID: 5207 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 82.228407][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 82.230124][ T5207] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 82.231364][ T5207] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 82.232362][ T5207] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 82.233409][ T5207] sp : ffff800020a17440 [ 82.234095][ T5207] x29: ffff800020a17560 x28: dfff800000000000 x27: 000000000000e000 [ 82.235304][ T5207] x26: ffff0000ed26c700 x25: ffff800020a17890 x24: ffff0000e20209d0 [ 82.236446][ T5207] x23: ffff700004142e98 x22: 00000000fffffff4 x21: 1fffe0001bcec981 [ 82.237615][ T5207] x20: ffff0000de764bb0 x19: ffff0000de764c08 x18: 0000000000000001 [ 82.239060][ T5207] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 82.240394][ T5207] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 82.241694][ T5207] x11: 0000000000000000 x10: 0000000000000000 x9 : 900f974b7b215600 [ 82.243016][ T5207] x8 : 900f974b7b215600 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.244339][ T5207] x5 : ffff800020a16d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 82.245584][ T5207] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 82.246841][ T5207] Call trace: [ 82.247344][ T5207] btrfs_replace_file_extents+0xcc4/0x1238 [ 82.248339][ T5207] btrfs_clone+0xb7c/0x1d14 [ 82.249063][ T5207] btrfs_clone_files+0x278/0x320 [ 82.249866][ T5207] btrfs_remap_file_range+0x488/0xb9c [ 82.250695][ T5207] vfs_copy_file_range+0xab0/0x10fc [ 82.251560][ T5207] __arm64_sys_copy_file_range+0x540/0x8d4 [ 82.252509][ T5207] invoke_syscall+0x98/0x2b0 [ 82.253224][ T5207] el0_svc_common+0x138/0x258 [ 82.253983][ T5207] do_el0_svc+0x58/0x13c [ 82.254672][ T5207] el0_svc+0x78/0x1d0 [ 82.255313][ T5207] el0t_64_sync_handler+0xcc/0xe4 [ 82.256061][ T5207] el0t_64_sync+0x1a0/0x1a4 [ 82.256782][ T5207] irq event stamp: 80688 [ 82.257410][ T5207] hardirqs last enabled at (80687): [] __up_console_sem+0xb4/0xfc [ 82.259000][ T5207] hardirqs last disabled at (80688): [] el1_dbg+0x24/0x80 [ 82.260436][ T5207] softirqs last enabled at (80664): [] handle_softirqs+0xa40/0xbe4 [ 82.262044][ T5207] softirqs last disabled at (80629): [] __irq_exit_rcu+0x240/0x43c [ 82.263606][ T5207] ---[ end trace 4943a00d9a3920a6 ]--- [ 82.266406][ T5207] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 82.267905][ T5207] BTRFS info (device loop0): forced readonly [ 82.466181][ T5229] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (5229) [ 82.471153][ T5229] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 82.472595][ T5229] BTRFS info (device loop0): using free space tree [ 82.473832][ T5229] BTRFS info (device loop0): has skinny extents [ 82.492777][ T5229] BTRFS info (device loop0): enabling ssd optimizations [ 82.500410][ T5229] FAULT_INJECTION: forcing a failure. [ 82.500410][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 82.502468][ T5229] CPU: 1 PID: 5229 Comm: syz.0.30 Tainted: G W syzkaller #0 [ 82.503869][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 82.505510][ T5229] Call trace: [ 82.506029][ T5229] dump_backtrace+0x0/0x458 [ 82.506764][ T5229] show_stack+0x2c/0x3c [ 82.507437][ T5229] __dump_stack+0x30/0x40 [ 82.508139][ T5229] dump_stack_lvl+0xf4/0x15c [ 82.508905][ T5229] dump_stack+0x1c/0x5c [ 82.509513][ T5229] should_fail+0x3bc/0x514 [ 82.510251][ T5229] __should_failslab+0xbc/0x10c [ 82.511088][ T5229] should_failslab+0x10/0x28 [ 82.511785][ T5229] slab_pre_alloc_hook+0x64/0xe8 [ 82.512528][ T5229] kmem_cache_alloc+0x94/0x3d4 [ 82.513272][ T5229] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 82.514277][ T5229] btrfs_inc_extent_ref+0x100/0x198 [ 82.515104][ T5229] btrfs_insert_replace_extent+0x6a0/0x9cc [ 82.515985][ T5229] btrfs_replace_file_extents+0x89c/0x1238 [ 82.516921][ T5229] btrfs_clone+0xb7c/0x1d14 [ 82.517633][ T5229] btrfs_clone_files+0x278/0x320 [ 82.518409][ T5229] btrfs_remap_file_range+0x488/0xb9c [ 82.519262][ T5229] vfs_copy_file_range+0xab0/0x10fc [ 82.520103][ T5229] __arm64_sys_copy_file_range+0x540/0x8d4 [ 82.521057][ T5229] invoke_syscall+0x98/0x2b0 [ 82.521767][ T5229] el0_svc_common+0x138/0x258 [ 82.522551][ T5229] do_el0_svc+0x58/0x13c [ 82.523235][ T5229] el0_svc+0x78/0x1d0 [ 82.523886][ T5229] el0t_64_sync_handler+0xcc/0xe4 [ 82.524753][ T5229] el0t_64_sync+0x1a0/0x1a4 [ 82.526355][ T5229] ------------[ cut here ]------------ [ 82.527376][ T5229] WARNING: CPU: 1 PID: 5229 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 82.528959][ T5229] Modules linked in: [ 82.529569][ T5229] CPU: 1 PID: 5229 Comm: syz.0.30 Tainted: G W syzkaller #0 [ 82.530883][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 82.532564][ T5229] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 82.533853][ T5229] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 82.534870][ T5229] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 82.535861][ T5229] sp : ffff800021177440 [ 82.536527][ T5229] x29: ffff800021177560 x28: dfff800000000000 x27: 000000000000e000 [ 82.537801][ T5229] x26: ffff0000ebd6c200 x25: ffff800021177890 x24: ffff0000e2022740 [ 82.539153][ T5229] x23: ffff70000422ee98 x22: 00000000fffffff4 x21: 1fffe0001bccf73f [ 82.540585][ T5229] x20: ffff0000de67b9a0 x19: ffff0000de67b9f8 x18: 0000000000000001 [ 82.541917][ T5229] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 82.543183][ T5229] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 82.544471][ T5229] x11: 0000000000000000 x10: 0000000000000000 x9 : 6dc2551d71400000 [ 82.545740][ T5229] x8 : 6dc2551d71400000 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.546968][ T5229] x5 : ffff800021176d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 82.548208][ T5229] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 82.549468][ T5229] Call trace: [ 82.550002][ T5229] btrfs_replace_file_extents+0xcc4/0x1238 [ 82.550960][ T5229] btrfs_clone+0xb7c/0x1d14 [ 82.551683][ T5229] btrfs_clone_files+0x278/0x320 [ 82.552520][ T5229] btrfs_remap_file_range+0x488/0xb9c [ 82.553401][ T5229] vfs_copy_file_range+0xab0/0x10fc [ 82.554248][ T5229] __arm64_sys_copy_file_range+0x540/0x8d4 [ 82.555214][ T5229] invoke_syscall+0x98/0x2b0 [ 82.555906][ T5229] el0_svc_common+0x138/0x258 [ 82.556707][ T5229] do_el0_svc+0x58/0x13c [ 82.557432][ T5229] el0_svc+0x78/0x1d0 [ 82.558077][ T5229] el0t_64_sync_handler+0xcc/0xe4 [ 82.558877][ T5229] el0t_64_sync+0x1a0/0x1a4 [ 82.559551][ T5229] irq event stamp: 80676 [ 82.560225][ T5229] hardirqs last enabled at (80675): [] __up_console_sem+0xb4/0xfc [ 82.561767][ T5229] hardirqs last disabled at (80676): [] el1_dbg+0x24/0x80 [ 82.563223][ T5229] softirqs last enabled at (80652): [] handle_softirqs+0xa40/0xbe4 [ 82.564754][ T5229] softirqs last disabled at (80617): [] __irq_exit_rcu+0x240/0x43c [ 82.566240][ T5229] ---[ end trace 4943a00d9a3920a7 ]--- [ 82.569771][ T5229] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 82.571347][ T5229] BTRFS info (device loop0): forced readonly [ 82.786676][ T5251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (5251) [ 82.790482][ T5251] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 82.792145][ T5251] BTRFS info (device loop0): using free space tree [ 82.793304][ T5251] BTRFS info (device loop0): has skinny extents [ 82.801561][ T5251] BTRFS info (device loop0): enabling ssd optimizations [ 82.809767][ T5251] FAULT_INJECTION: forcing a failure. [ 82.809767][ T5251] name failslab, interval 1, probability 0, space 0, times 0 [ 82.811888][ T5251] CPU: 1 PID: 5251 Comm: syz.0.31 Tainted: G W syzkaller #0 [ 82.813188][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 82.814794][ T5251] Call trace: [ 82.815312][ T5251] dump_backtrace+0x0/0x458 [ 82.816040][ T5251] show_stack+0x2c/0x3c [ 82.816723][ T5251] __dump_stack+0x30/0x40 [ 82.817448][ T5251] dump_stack_lvl+0xf4/0x15c [ 82.818227][ T5251] dump_stack+0x1c/0x5c [ 82.818901][ T5251] should_fail+0x3bc/0x514 [ 82.819614][ T5251] __should_failslab+0xbc/0x10c [ 82.820407][ T5251] should_failslab+0x10/0x28 [ 82.821147][ T5251] slab_pre_alloc_hook+0x64/0xe8 [ 82.821939][ T5251] kmem_cache_alloc+0x94/0x3d4 [ 82.822697][ T5251] alloc_extent_state+0x38/0x42c [ 82.823551][ T5251] __clear_extent_bit+0x1f0/0xb24 [ 82.824394][ T5251] clear_extent_bit+0x68/0x8c [ 82.825160][ T5251] btrfs_clone_files+0x29c/0x320 [ 82.825952][ T5251] btrfs_remap_file_range+0x488/0xb9c [ 82.826783][ T5251] vfs_copy_file_range+0xab0/0x10fc [ 82.827640][ T5251] __arm64_sys_copy_file_range+0x540/0x8d4 [ 82.828648][ T5251] invoke_syscall+0x98/0x2b0 [ 82.829408][ T5251] el0_svc_common+0x138/0x258 [ 82.830254][ T5251] do_el0_svc+0x58/0x13c [ 82.830963][ T5251] el0_svc+0x78/0x1d0 [ 82.831643][ T5251] el0t_64_sync_handler+0xcc/0xe4 [ 82.832404][ T5251] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:22 executed programs: 18 [ 82.990923][ T5272] set_capacity_and_notify: 6 callbacks suppressed [ 82.990933][ T5272] loop0: detected capacity change from 0 to 32768 [ 83.024592][ T5272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.32 (5272) [ 83.032981][ T5272] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 83.034939][ T5272] BTRFS info (device loop0): using free space tree [ 83.036166][ T5272] BTRFS info (device loop0): has skinny extents [ 83.056344][ T5272] BTRFS info (device loop0): enabling ssd optimizations [ 83.064592][ T5272] FAULT_INJECTION: forcing a failure. [ 83.064592][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 83.066678][ T5272] CPU: 0 PID: 5272 Comm: syz.0.32 Tainted: G W syzkaller #0 [ 83.068116][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.069765][ T5272] Call trace: [ 83.070285][ T5272] dump_backtrace+0x0/0x458 [ 83.071037][ T5272] show_stack+0x2c/0x3c [ 83.071738][ T5272] __dump_stack+0x30/0x40 [ 83.072500][ T5272] dump_stack_lvl+0xf4/0x15c [ 83.073283][ T5272] dump_stack+0x1c/0x5c [ 83.073995][ T5272] should_fail+0x3bc/0x514 [ 83.074697][ T5272] __should_failslab+0xbc/0x10c [ 83.075445][ T5272] should_failslab+0x10/0x28 [ 83.076141][ T5272] slab_pre_alloc_hook+0x64/0xe8 [ 83.076926][ T5272] kmem_cache_alloc+0x94/0x3d4 [ 83.077700][ T5272] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 83.078593][ T5272] btrfs_inc_extent_ref+0x100/0x198 [ 83.079472][ T5272] btrfs_insert_replace_extent+0x6a0/0x9cc [ 83.080343][ T5272] btrfs_replace_file_extents+0x89c/0x1238 [ 83.081327][ T5272] btrfs_clone+0xb7c/0x1d14 [ 83.082123][ T5272] btrfs_clone_files+0x278/0x320 [ 83.082960][ T5272] btrfs_remap_file_range+0x488/0xb9c [ 83.083843][ T5272] vfs_copy_file_range+0xab0/0x10fc [ 83.084689][ T5272] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.085656][ T5272] invoke_syscall+0x98/0x2b0 [ 83.086486][ T5272] el0_svc_common+0x138/0x258 [ 83.087296][ T5272] do_el0_svc+0x58/0x13c [ 83.088034][ T5272] el0_svc+0x78/0x1d0 [ 83.088692][ T5272] el0t_64_sync_handler+0xcc/0xe4 [ 83.089506][ T5272] el0t_64_sync+0x1a0/0x1a4 [ 83.094374][ T5272] ------------[ cut here ]------------ [ 83.095355][ T5272] WARNING: CPU: 0 PID: 5272 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 83.096871][ T5272] Modules linked in: [ 83.097509][ T5272] CPU: 0 PID: 5272 Comm: syz.0.32 Tainted: G W syzkaller #0 [ 83.098816][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.100365][ T5272] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.101751][ T5272] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 83.102732][ T5272] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 83.103694][ T5272] sp : ffff8000214c7440 [ 83.104380][ T5272] x29: ffff8000214c7560 x28: dfff800000000000 x27: 000000000000e000 [ 83.105566][ T5272] x26: ffff0000cdcd6e00 x25: ffff8000214c7890 x24: ffff0000ec439d70 [ 83.106727][ T5272] x23: ffff700004298e98 x22: 00000000fffffff4 x21: 1fffe0001bcdbcbb [ 83.108029][ T5272] x20: ffff0000de6de580 x19: ffff0000de6de5d8 x18: 0000000000000001 [ 83.109335][ T5272] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 83.110651][ T5272] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 83.111914][ T5272] x11: 0000000000000000 x10: 0000000000000000 x9 : a4226988006ff700 [ 83.113251][ T5272] x8 : a4226988006ff700 x7 : 0000000000000001 x6 : 0000000000000001 [ 83.114595][ T5272] x5 : ffff8000214c6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 83.115942][ T5272] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 83.117385][ T5272] Call trace: [ 83.117907][ T5272] btrfs_replace_file_extents+0xcc4/0x1238 [ 83.118856][ T5272] btrfs_clone+0xb7c/0x1d14 [ 83.119565][ T5272] btrfs_clone_files+0x278/0x320 [ 83.120392][ T5272] btrfs_remap_file_range+0x488/0xb9c [ 83.121310][ T5272] vfs_copy_file_range+0xab0/0x10fc [ 83.122164][ T5272] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.123071][ T5272] invoke_syscall+0x98/0x2b0 [ 83.123784][ T5272] el0_svc_common+0x138/0x258 [ 83.124506][ T5272] do_el0_svc+0x58/0x13c [ 83.125175][ T5272] el0_svc+0x78/0x1d0 [ 83.125835][ T5272] el0t_64_sync_handler+0xcc/0xe4 [ 83.126666][ T5272] el0t_64_sync+0x1a0/0x1a4 [ 83.127382][ T5272] irq event stamp: 81242 [ 83.128029][ T5272] hardirqs last enabled at (81241): [] __up_console_sem+0xb4/0xfc [ 83.129354][ T5272] hardirqs last disabled at (81242): [] el1_dbg+0x24/0x80 [ 83.130616][ T5272] softirqs last enabled at (81218): [] handle_softirqs+0xa40/0xbe4 [ 83.132071][ T5272] softirqs last disabled at (81049): [] __irq_exit_rcu+0x240/0x43c [ 83.133669][ T5272] ---[ end trace 4943a00d9a3920a8 ]--- [ 83.137555][ T5272] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 83.139198][ T5272] BTRFS info (device loop0): forced readonly [ 83.321597][ T5294] loop0: detected capacity change from 0 to 32768 [ 83.355075][ T5294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.33 (5294) [ 83.359459][ T5294] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 83.360941][ T5294] BTRFS info (device loop0): using free space tree [ 83.362030][ T5294] BTRFS info (device loop0): has skinny extents [ 83.370429][ T5294] BTRFS info (device loop0): enabling ssd optimizations [ 83.379266][ T5294] FAULT_INJECTION: forcing a failure. [ 83.379266][ T5294] name failslab, interval 1, probability 0, space 0, times 0 [ 83.381219][ T5294] CPU: 0 PID: 5294 Comm: syz.0.33 Tainted: G W syzkaller #0 [ 83.382559][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.384149][ T5294] Call trace: [ 83.384667][ T5294] dump_backtrace+0x0/0x458 [ 83.385381][ T5294] show_stack+0x2c/0x3c [ 83.386090][ T5294] __dump_stack+0x30/0x40 [ 83.386857][ T5294] dump_stack_lvl+0xf4/0x15c [ 83.387626][ T5294] dump_stack+0x1c/0x5c [ 83.388348][ T5294] should_fail+0x3bc/0x514 [ 83.389074][ T5294] __should_failslab+0xbc/0x10c [ 83.389763][ T5294] should_failslab+0x10/0x28 [ 83.390443][ T5294] slab_pre_alloc_hook+0x64/0xe8 [ 83.391129][ T5294] kmem_cache_alloc+0x94/0x3d4 [ 83.391866][ T5294] alloc_extent_state+0x38/0x42c [ 83.392634][ T5294] __clear_extent_bit+0x1f0/0xb24 [ 83.393408][ T5294] clear_extent_bit+0x68/0x8c [ 83.394113][ T5294] btrfs_clone_files+0x29c/0x320 [ 83.394810][ T5294] btrfs_remap_file_range+0x488/0xb9c [ 83.395597][ T5294] vfs_copy_file_range+0xab0/0x10fc [ 83.396451][ T5294] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.397432][ T5294] invoke_syscall+0x98/0x2b0 [ 83.398197][ T5294] el0_svc_common+0x138/0x258 [ 83.399003][ T5294] do_el0_svc+0x58/0x13c [ 83.399682][ T5294] el0_svc+0x78/0x1d0 [ 83.400271][ T5294] el0t_64_sync_handler+0xcc/0xe4 [ 83.401079][ T5294] el0t_64_sync+0x1a0/0x1a4 [ 83.569752][ T5316] loop0: detected capacity change from 0 to 32768 [ 83.605194][ T5316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (5316) [ 83.608405][ T5316] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 83.610843][ T5316] BTRFS info (device loop0): using free space tree [ 83.611988][ T5316] BTRFS info (device loop0): has skinny extents [ 83.620130][ T5316] BTRFS info (device loop0): enabling ssd optimizations [ 83.627796][ T5316] FAULT_INJECTION: forcing a failure. [ 83.627796][ T5316] name failslab, interval 1, probability 0, space 0, times 0 [ 83.629805][ T5316] CPU: 1 PID: 5316 Comm: syz.0.34 Tainted: G W syzkaller #0 [ 83.631165][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.632787][ T5316] Call trace: [ 83.633322][ T5316] dump_backtrace+0x0/0x458 [ 83.634051][ T5316] show_stack+0x2c/0x3c [ 83.634723][ T5316] __dump_stack+0x30/0x40 [ 83.635374][ T5316] dump_stack_lvl+0xf4/0x15c [ 83.636108][ T5316] dump_stack+0x1c/0x5c [ 83.636842][ T5316] should_fail+0x3bc/0x514 [ 83.637593][ T5316] __should_failslab+0xbc/0x10c [ 83.638433][ T5316] should_failslab+0x10/0x28 [ 83.639199][ T5316] slab_pre_alloc_hook+0x64/0xe8 [ 83.639995][ T5316] kmem_cache_alloc+0x94/0x3d4 [ 83.640781][ T5316] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 83.641733][ T5316] btrfs_inc_extent_ref+0x100/0x198 [ 83.642570][ T5316] btrfs_insert_replace_extent+0x6a0/0x9cc [ 83.643461][ T5316] btrfs_replace_file_extents+0x89c/0x1238 [ 83.644325][ T5316] btrfs_clone+0xb7c/0x1d14 [ 83.645010][ T5316] btrfs_clone_files+0x278/0x320 [ 83.645785][ T5316] btrfs_remap_file_range+0x488/0xb9c [ 83.646691][ T5316] vfs_copy_file_range+0xab0/0x10fc [ 83.647570][ T5316] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.648498][ T5316] invoke_syscall+0x98/0x2b0 [ 83.649262][ T5316] el0_svc_common+0x138/0x258 [ 83.650001][ T5316] do_el0_svc+0x58/0x13c [ 83.650668][ T5316] el0_svc+0x78/0x1d0 [ 83.651286][ T5316] el0t_64_sync_handler+0xcc/0xe4 [ 83.652084][ T5316] el0t_64_sync+0x1a0/0x1a4 [ 83.655483][ T5316] ------------[ cut here ]------------ [ 83.656530][ T5316] WARNING: CPU: 1 PID: 5316 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 83.658201][ T5316] Modules linked in: [ 83.658744][ T5316] CPU: 1 PID: 5316 Comm: syz.0.34 Tainted: G W syzkaller #0 [ 83.660065][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.661657][ T5316] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.662922][ T5316] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 83.663930][ T5316] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 83.664902][ T5316] sp : ffff800021817440 [ 83.665606][ T5316] x29: ffff800021817560 x28: dfff800000000000 x27: 000000000000e000 [ 83.666966][ T5316] x26: ffff0000c291c800 x25: ffff800021817890 x24: ffff0000e2024e80 [ 83.668359][ T5316] x23: ffff700004302e98 x22: 00000000fffffff4 x21: 1fffe0001bccf621 [ 83.669710][ T5316] x20: ffff0000de67b0b0 x19: ffff0000de67b108 x18: 0000000000000001 [ 83.671006][ T5316] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 83.672274][ T5316] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 83.673690][ T5316] x11: 0000000000000000 x10: 0000000000000000 x9 : 1a88c8dcc40c2a00 [ 83.674950][ T5316] x8 : 1a88c8dcc40c2a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 83.676252][ T5316] x5 : ffff800021816d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 83.677490][ T5316] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 83.678811][ T5316] Call trace: [ 83.679352][ T5316] btrfs_replace_file_extents+0xcc4/0x1238 [ 83.680304][ T5316] btrfs_clone+0xb7c/0x1d14 [ 83.681023][ T5316] btrfs_clone_files+0x278/0x320 [ 83.681819][ T5316] btrfs_remap_file_range+0x488/0xb9c [ 83.682868][ T5316] vfs_copy_file_range+0xab0/0x10fc [ 83.683627][ T5316] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.684494][ T5316] invoke_syscall+0x98/0x2b0 [ 83.685162][ T5316] el0_svc_common+0x138/0x258 [ 83.685900][ T5316] do_el0_svc+0x58/0x13c [ 83.686503][ T5316] el0_svc+0x78/0x1d0 [ 83.687087][ T5316] el0t_64_sync_handler+0xcc/0xe4 [ 83.687838][ T5316] el0t_64_sync+0x1a0/0x1a4 [ 83.688597][ T5316] irq event stamp: 80756 [ 83.689293][ T5316] hardirqs last enabled at (80755): [] __up_console_sem+0xb4/0xfc [ 83.690813][ T5316] hardirqs last disabled at (80756): [] el1_dbg+0x24/0x80 [ 83.692261][ T5316] softirqs last enabled at (80732): [] handle_softirqs+0xa40/0xbe4 [ 83.693766][ T5316] softirqs last disabled at (80713): [] __irq_exit_rcu+0x240/0x43c [ 83.695221][ T5316] ---[ end trace 4943a00d9a3920a9 ]--- [ 83.698443][ T5316] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 83.700099][ T5316] BTRFS info (device loop0): forced readonly [ 83.848233][ T5338] loop0: detected capacity change from 0 to 32768 [ 83.885428][ T5338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.35 (5338) [ 83.891400][ T5338] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 83.892878][ T5338] BTRFS info (device loop0): using free space tree [ 83.894343][ T5338] BTRFS info (device loop0): has skinny extents [ 83.903793][ T5338] BTRFS info (device loop0): enabling ssd optimizations [ 83.910879][ T5338] FAULT_INJECTION: forcing a failure. [ 83.910879][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 83.912878][ T5338] CPU: 1 PID: 5338 Comm: syz.0.35 Tainted: G W syzkaller #0 [ 83.914059][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.915706][ T5338] Call trace: [ 83.916236][ T5338] dump_backtrace+0x0/0x458 [ 83.916984][ T5338] show_stack+0x2c/0x3c [ 83.917738][ T5338] __dump_stack+0x30/0x40 [ 83.918476][ T5338] dump_stack_lvl+0xf4/0x15c [ 83.919281][ T5338] dump_stack+0x1c/0x5c [ 83.920004][ T5338] should_fail+0x3bc/0x514 [ 83.920711][ T5338] __should_failslab+0xbc/0x10c [ 83.921461][ T5338] should_failslab+0x10/0x28 [ 83.922181][ T5338] slab_pre_alloc_hook+0x64/0xe8 [ 83.922942][ T5338] kmem_cache_alloc+0x94/0x3d4 [ 83.923678][ T5338] alloc_extent_state+0x38/0x42c [ 83.924447][ T5338] __clear_extent_bit+0x1f0/0xb24 [ 83.925243][ T5338] clear_extent_bit+0x68/0x8c [ 83.926033][ T5338] btrfs_clone_files+0x29c/0x320 [ 83.926851][ T5338] btrfs_remap_file_range+0x488/0xb9c [ 83.927714][ T5338] vfs_copy_file_range+0xab0/0x10fc [ 83.928592][ T5338] __arm64_sys_copy_file_range+0x540/0x8d4 [ 83.929575][ T5338] invoke_syscall+0x98/0x2b0 [ 83.930300][ T5338] el0_svc_common+0x138/0x258 [ 83.931063][ T5338] do_el0_svc+0x58/0x13c [ 83.931667][ T5338] el0_svc+0x78/0x1d0 [ 83.932345][ T5338] el0t_64_sync_handler+0xcc/0xe4 [ 83.933176][ T5338] el0t_64_sync+0x1a0/0x1a4 [ 84.085618][ T5360] loop0: detected capacity change from 0 to 32768 [ 84.094261][ T5360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.36 (5360) [ 84.099105][ T5360] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 84.100680][ T5360] BTRFS info (device loop0): using free space tree [ 84.101680][ T5360] BTRFS info (device loop0): has skinny extents [ 84.133760][ T5360] BTRFS info (device loop0): enabling ssd optimizations [ 84.141726][ T5360] FAULT_INJECTION: forcing a failure. [ 84.141726][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 84.143774][ T5360] CPU: 0 PID: 5360 Comm: syz.0.36 Tainted: G W syzkaller #0 [ 84.145010][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 84.146445][ T5360] Call trace: [ 84.146940][ T5360] dump_backtrace+0x0/0x458 [ 84.147625][ T5360] show_stack+0x2c/0x3c [ 84.148275][ T5360] __dump_stack+0x30/0x40 [ 84.148949][ T5360] dump_stack_lvl+0xf4/0x15c [ 84.149740][ T5360] dump_stack+0x1c/0x5c [ 84.150398][ T5360] should_fail+0x3bc/0x514 [ 84.151043][ T5360] __should_failslab+0xbc/0x10c [ 84.151802][ T5360] should_failslab+0x10/0x28 [ 84.152509][ T5360] slab_pre_alloc_hook+0x64/0xe8 [ 84.153330][ T5360] kmem_cache_alloc+0x94/0x3d4 [ 84.154133][ T5360] alloc_extent_state+0x38/0x42c [ 84.154957][ T5360] __clear_extent_bit+0x1f0/0xb24 [ 84.155845][ T5360] clear_extent_bit+0x68/0x8c [ 84.156677][ T5360] btrfs_clone_files+0x29c/0x320 [ 84.157576][ T5360] btrfs_remap_file_range+0x488/0xb9c [ 84.158450][ T5360] vfs_copy_file_range+0xab0/0x10fc [ 84.159268][ T5360] __arm64_sys_copy_file_range+0x540/0x8d4 [ 84.160221][ T5360] invoke_syscall+0x98/0x2b0 [ 84.161002][ T5360] el0_svc_common+0x138/0x258 [ 84.161748][ T5360] do_el0_svc+0x58/0x13c [ 84.162479][ T5360] el0_svc+0x78/0x1d0 [ 84.163187][ T5360] el0t_64_sync_handler+0xcc/0xe4 [ 84.163998][ T5360] el0t_64_sync+0x1a0/0x1a4 [ 84.324423][ T5382] loop0: detected capacity change from 0 to 32768 [ 84.332069][ T5382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.37 (5382) [ 84.336882][ T5382] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 84.338499][ T5382] BTRFS info (device loop0): using free space tree [ 84.339573][ T5382] BTRFS info (device loop0): has skinny extents [ 84.350364][ T5382] BTRFS info (device loop0): enabling ssd optimizations [ 84.367221][ T5382] FAULT_INJECTION: forcing a failure. [ 84.367221][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 84.369354][ T5382] CPU: 0 PID: 5382 Comm: syz.0.37 Tainted: G W syzkaller #0 [ 84.370671][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 84.372213][ T5382] Call trace: [ 84.372707][ T5382] dump_backtrace+0x0/0x458 [ 84.373391][ T5382] show_stack+0x2c/0x3c [ 84.374101][ T5382] __dump_stack+0x30/0x40 [ 84.374867][ T5382] dump_stack_lvl+0xf4/0x15c [ 84.375569][ T5382] dump_stack+0x1c/0x5c [ 84.376282][ T5382] should_fail+0x3bc/0x514 [ 84.377019][ T5382] __should_failslab+0xbc/0x10c [ 84.377786][ T5382] should_failslab+0x10/0x28 [ 84.378539][ T5382] slab_pre_alloc_hook+0x64/0xe8 [ 84.379364][ T5382] kmem_cache_alloc+0x94/0x3d4 [ 84.380171][ T5382] alloc_extent_state+0x38/0x42c [ 84.380949][ T5382] __clear_extent_bit+0x1f0/0xb24 [ 84.381698][ T5382] clear_extent_bit+0x68/0x8c [ 84.382455][ T5382] btrfs_clone_files+0x29c/0x320 [ 84.383309][ T5382] btrfs_remap_file_range+0x488/0xb9c [ 84.384211][ T5382] vfs_copy_file_range+0xab0/0x10fc [ 84.385010][ T5382] __arm64_sys_copy_file_range+0x540/0x8d4 [ 84.386035][ T5382] invoke_syscall+0x98/0x2b0 [ 84.386729][ T5382] el0_svc_common+0x138/0x258 [ 84.387412][ T5382] do_el0_svc+0x58/0x13c [ 84.387992][ T5382] el0_svc+0x78/0x1d0 [ 84.388553][ T5382] el0t_64_sync_handler+0xcc/0xe4 [ 84.389415][ T5382] el0t_64_sync+0x1a0/0x1a4 [ 84.576401][ T5404] loop0: detected capacity change from 0 to 32768 [ 84.670025][ T5404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.38 (5404) [ 84.674375][ T5404] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 84.675774][ T5404] BTRFS info (device loop0): using free space tree [ 84.676646][ T5404] BTRFS info (device loop0): has skinny extents [ 84.684785][ T5404] BTRFS info (device loop0): enabling ssd optimizations [ 84.691872][ T5404] FAULT_INJECTION: forcing a failure. [ 84.691872][ T5404] name failslab, interval 1, probability 0, space 0, times 0 [ 84.694334][ T5404] CPU: 0 PID: 5404 Comm: syz.0.38 Tainted: G W syzkaller #0 [ 84.695701][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 84.697322][ T5404] Call trace: [ 84.697869][ T5404] dump_backtrace+0x0/0x458 [ 84.698596][ T5404] show_stack+0x2c/0x3c [ 84.699271][ T5404] __dump_stack+0x30/0x40 [ 84.699964][ T5404] dump_stack_lvl+0xf4/0x15c [ 84.700750][ T5404] dump_stack+0x1c/0x5c [ 84.701403][ T5404] should_fail+0x3bc/0x514 [ 84.702123][ T5404] __should_failslab+0xbc/0x10c [ 84.702868][ T5404] should_failslab+0x10/0x28 [ 84.703592][ T5404] slab_pre_alloc_hook+0x64/0xe8 [ 84.704368][ T5404] kmem_cache_alloc+0x94/0x3d4 [ 84.705113][ T5404] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 84.706029][ T5404] btrfs_inc_extent_ref+0x100/0x198 [ 84.706819][ T5404] btrfs_insert_replace_extent+0x6a0/0x9cc [ 84.707764][ T5404] btrfs_replace_file_extents+0x89c/0x1238 [ 84.708641][ T5404] btrfs_clone+0xb7c/0x1d14 [ 84.709346][ T5404] btrfs_clone_files+0x278/0x320 [ 84.710231][ T5404] btrfs_remap_file_range+0x488/0xb9c [ 84.711124][ T5404] vfs_copy_file_range+0xab0/0x10fc [ 84.711964][ T5404] __arm64_sys_copy_file_range+0x540/0x8d4 [ 84.712870][ T5404] invoke_syscall+0x98/0x2b0 [ 84.713656][ T5404] el0_svc_common+0x138/0x258 [ 84.714484][ T5404] do_el0_svc+0x58/0x13c [ 84.715188][ T5404] el0_svc+0x78/0x1d0 [ 84.715807][ T5404] el0t_64_sync_handler+0xcc/0xe4 [ 84.716663][ T5404] el0t_64_sync+0x1a0/0x1a4 [ 84.719721][ T5404] ------------[ cut here ]------------ [ 84.720681][ T5404] WARNING: CPU: 0 PID: 5404 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 84.722216][ T5404] Modules linked in: [ 84.722772][ T5404] CPU: 0 PID: 5404 Comm: syz.0.38 Tainted: G W syzkaller #0 [ 84.724032][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 84.725489][ T5404] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 84.726685][ T5404] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 84.727647][ T5404] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 84.728560][ T5404] sp : ffff800021a77440 [ 84.729205][ T5404] x29: ffff800021a77560 x28: dfff800000000000 x27: 000000000000e000 [ 84.730528][ T5404] x26: ffff0000c188e800 x25: ffff800021a77890 x24: ffff0000ec43b110 [ 84.731763][ T5404] x23: ffff70000434ee98 x22: 00000000fffffff4 x21: 1fffe0001b9cfa0b [ 84.732948][ T5404] x20: ffff0000dce7d000 x19: ffff0000dce7d058 x18: 0000000000000001 [ 84.734192][ T5404] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 84.735439][ T5404] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 84.736720][ T5404] x11: 0000000000000000 x10: 0000000000000000 x9 : 680a490ee53b4d00 [ 84.738088][ T5404] x8 : 680a490ee53b4d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 84.739489][ T5404] x5 : ffff800021a76d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 84.740853][ T5404] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 84.742195][ T5404] Call trace: [ 84.742741][ T5404] btrfs_replace_file_extents+0xcc4/0x1238 [ 84.743688][ T5404] btrfs_clone+0xb7c/0x1d14 [ 84.744460][ T5404] btrfs_clone_files+0x278/0x320 [ 84.745215][ T5404] btrfs_remap_file_range+0x488/0xb9c [ 84.746067][ T5404] vfs_copy_file_range+0xab0/0x10fc [ 84.746931][ T5404] __arm64_sys_copy_file_range+0x540/0x8d4 [ 84.747923][ T5404] invoke_syscall+0x98/0x2b0 [ 84.748726][ T5404] el0_svc_common+0x138/0x258 [ 84.749458][ T5404] do_el0_svc+0x58/0x13c [ 84.750110][ T5404] el0_svc+0x78/0x1d0 [ 84.750750][ T5404] el0t_64_sync_handler+0xcc/0xe4 [ 84.751519][ T5404] el0t_64_sync+0x1a0/0x1a4 [ 84.752222][ T5404] irq event stamp: 81312 [ 84.752887][ T5404] hardirqs last enabled at (81311): [] __up_console_sem+0xb4/0xfc [ 84.754399][ T5404] hardirqs last disabled at (81312): [] el1_dbg+0x24/0x80 [ 84.755736][ T5404] softirqs last enabled at (81288): [] handle_softirqs+0xa40/0xbe4 [ 84.757177][ T5404] softirqs last disabled at (81207): [] __irq_exit_rcu+0x240/0x43c [ 84.758674][ T5404] ---[ end trace 4943a00d9a3920aa ]--- [ 84.762248][ T5404] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 84.763859][ T5404] BTRFS info (device loop0): forced readonly [ 84.933545][ T5426] loop0: detected capacity change from 0 to 32768 [ 84.942256][ T5426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.39 (5426) [ 84.948154][ T5426] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 84.949618][ T5426] BTRFS info (device loop0): using free space tree [ 84.950704][ T5426] BTRFS info (device loop0): has skinny extents [ 84.977059][ T5426] BTRFS info (device loop0): enabling ssd optimizations [ 84.985815][ T5426] FAULT_INJECTION: forcing a failure. [ 84.985815][ T5426] name failslab, interval 1, probability 0, space 0, times 0 [ 84.987798][ T5426] CPU: 1 PID: 5426 Comm: syz.0.39 Tainted: G W syzkaller #0 [ 84.989119][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 84.990874][ T5426] Call trace: [ 84.991414][ T5426] dump_backtrace+0x0/0x458 [ 84.992109][ T5426] show_stack+0x2c/0x3c [ 84.992686][ T5426] __dump_stack+0x30/0x40 [ 84.993336][ T5426] dump_stack_lvl+0xf4/0x15c [ 84.994082][ T5426] dump_stack+0x1c/0x5c [ 84.994751][ T5426] should_fail+0x3bc/0x514 [ 84.995518][ T5426] __should_failslab+0xbc/0x10c [ 84.996398][ T5426] should_failslab+0x10/0x28 [ 84.997116][ T5426] slab_pre_alloc_hook+0x64/0xe8 [ 84.997923][ T5426] kmem_cache_alloc+0x94/0x3d4 [ 84.998733][ T5426] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 84.999681][ T5426] btrfs_inc_extent_ref+0x100/0x198 [ 85.000515][ T5426] btrfs_insert_replace_extent+0x6a0/0x9cc [ 85.001454][ T5426] btrfs_replace_file_extents+0x89c/0x1238 [ 85.002356][ T5426] btrfs_clone+0xb7c/0x1d14 [ 85.003055][ T5426] btrfs_clone_files+0x278/0x320 [ 85.003845][ T5426] btrfs_remap_file_range+0x488/0xb9c [ 85.004780][ T5426] vfs_copy_file_range+0xab0/0x10fc [ 85.005653][ T5426] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.006625][ T5426] invoke_syscall+0x98/0x2b0 [ 85.007378][ T5426] el0_svc_common+0x138/0x258 [ 85.008130][ T5426] do_el0_svc+0x58/0x13c [ 85.008782][ T5426] el0_svc+0x78/0x1d0 [ 85.009405][ T5426] el0t_64_sync_handler+0xcc/0xe4 [ 85.010145][ T5426] el0t_64_sync+0x1a0/0x1a4 [ 85.012691][ T5426] ------------[ cut here ]------------ [ 85.014321][ T5426] WARNING: CPU: 1 PID: 5426 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 85.015909][ T5426] Modules linked in: [ 85.016535][ T5426] CPU: 1 PID: 5426 Comm: syz.0.39 Tainted: G W syzkaller #0 [ 85.017936][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 85.019500][ T5426] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 85.020634][ T5426] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 85.021525][ T5426] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 85.022507][ T5426] sp : ffff800021a77440 [ 85.023202][ T5426] x29: ffff800021a77560 x28: dfff800000000000 x27: 000000000000e000 [ 85.024506][ T5426] x26: ffff0000e7a10400 x25: ffff800021a77890 x24: ffff0000e218a740 [ 85.025752][ T5426] x23: ffff70000434ee98 x22: 00000000fffffff4 x21: 1fffe0001bcdb56b [ 85.026940][ T5426] x20: ffff0000de6dab00 x19: ffff0000de6dab58 x18: 0000000000000001 [ 85.028166][ T5426] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 85.029348][ T5426] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 85.030550][ T5426] x11: 0000000000000000 x10: 0000000000000000 x9 : 27a3292f2ced0500 [ 85.031697][ T5426] x8 : 27a3292f2ced0500 x7 : 0000000000000001 x6 : 0000000000000001 [ 85.032873][ T5426] x5 : ffff800021a76d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 85.034117][ T5426] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 85.035391][ T5426] Call trace: [ 85.035912][ T5426] btrfs_replace_file_extents+0xcc4/0x1238 [ 85.036816][ T5426] btrfs_clone+0xb7c/0x1d14 [ 85.037527][ T5426] btrfs_clone_files+0x278/0x320 [ 85.038297][ T5426] btrfs_remap_file_range+0x488/0xb9c [ 85.039188][ T5426] vfs_copy_file_range+0xab0/0x10fc [ 85.039987][ T5426] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.040961][ T5426] invoke_syscall+0x98/0x2b0 [ 85.041790][ T5426] el0_svc_common+0x138/0x258 [ 85.042610][ T5426] do_el0_svc+0x58/0x13c [ 85.043337][ T5426] el0_svc+0x78/0x1d0 [ 85.043992][ T5426] el0t_64_sync_handler+0xcc/0xe4 [ 85.044856][ T5426] el0t_64_sync+0x1a0/0x1a4 [ 85.045672][ T5426] irq event stamp: 82332 [ 85.046389][ T5426] hardirqs last enabled at (82331): [] __up_console_sem+0xb4/0xfc [ 85.047867][ T5426] hardirqs last disabled at (82332): [] el1_dbg+0x24/0x80 [ 85.049193][ T5426] softirqs last enabled at (82320): [] handle_softirqs+0xa40/0xbe4 [ 85.050572][ T5426] softirqs last disabled at (82249): [] __irq_exit_rcu+0x240/0x43c [ 85.052020][ T5426] ---[ end trace 4943a00d9a3920ab ]--- [ 85.055238][ T5426] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 85.056843][ T5426] BTRFS info (device loop0): forced readonly [ 85.251691][ T5448] loop0: detected capacity change from 0 to 32768 [ 85.294627][ T5448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.40 (5448) [ 85.298009][ T5448] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 85.299466][ T5448] BTRFS info (device loop0): using free space tree [ 85.300563][ T5448] BTRFS info (device loop0): has skinny extents [ 85.312084][ T5448] BTRFS info (device loop0): enabling ssd optimizations [ 85.319154][ T5448] FAULT_INJECTION: forcing a failure. [ 85.319154][ T5448] name failslab, interval 1, probability 0, space 0, times 0 [ 85.321028][ T5448] CPU: 1 PID: 5448 Comm: syz.0.40 Tainted: G W syzkaller #0 [ 85.322316][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 85.323942][ T5448] Call trace: [ 85.324458][ T5448] dump_backtrace+0x0/0x458 [ 85.325234][ T5448] show_stack+0x2c/0x3c [ 85.325918][ T5448] __dump_stack+0x30/0x40 [ 85.326637][ T5448] dump_stack_lvl+0xf4/0x15c [ 85.327334][ T5448] dump_stack+0x1c/0x5c [ 85.327967][ T5448] should_fail+0x3bc/0x514 [ 85.328675][ T5448] __should_failslab+0xbc/0x10c [ 85.329445][ T5448] should_failslab+0x10/0x28 [ 85.330270][ T5448] slab_pre_alloc_hook+0x64/0xe8 [ 85.331045][ T5448] kmem_cache_alloc+0x94/0x3d4 [ 85.331788][ T5448] alloc_extent_state+0x38/0x42c [ 85.332528][ T5448] __clear_extent_bit+0x1f0/0xb24 [ 85.333296][ T5448] clear_extent_bit+0x68/0x8c [ 85.334001][ T5448] btrfs_clone_files+0x29c/0x320 [ 85.334734][ T5448] btrfs_remap_file_range+0x488/0xb9c [ 85.335636][ T5448] vfs_copy_file_range+0xab0/0x10fc [ 85.336487][ T5448] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.337497][ T5448] invoke_syscall+0x98/0x2b0 [ 85.338239][ T5448] el0_svc_common+0x138/0x258 [ 85.338989][ T5448] do_el0_svc+0x58/0x13c [ 85.339785][ T5448] el0_svc+0x78/0x1d0 [ 85.340470][ T5448] el0t_64_sync_handler+0xcc/0xe4 [ 85.341329][ T5448] el0t_64_sync+0x1a0/0x1a4 [ 85.518576][ T5470] loop0: detected capacity change from 0 to 32768 [ 85.565374][ T5470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.41 (5470) [ 85.568553][ T5470] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 85.570072][ T5470] BTRFS info (device loop0): using free space tree [ 85.571235][ T5470] BTRFS info (device loop0): has skinny extents [ 85.579891][ T5470] BTRFS info (device loop0): enabling ssd optimizations [ 85.587513][ T5470] FAULT_INJECTION: forcing a failure. [ 85.587513][ T5470] name failslab, interval 1, probability 0, space 0, times 0 [ 85.589848][ T5470] CPU: 0 PID: 5470 Comm: syz.0.41 Tainted: G W syzkaller #0 [ 85.591209][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 85.592847][ T5470] Call trace: [ 85.593375][ T5470] dump_backtrace+0x0/0x458 [ 85.594123][ T5470] show_stack+0x2c/0x3c [ 85.594853][ T5470] __dump_stack+0x30/0x40 [ 85.595594][ T5470] dump_stack_lvl+0xf4/0x15c [ 85.596349][ T5470] dump_stack+0x1c/0x5c [ 85.597046][ T5470] should_fail+0x3bc/0x514 [ 85.597753][ T5470] __should_failslab+0xbc/0x10c [ 85.598609][ T5470] should_failslab+0x10/0x28 [ 85.599361][ T5470] slab_pre_alloc_hook+0x64/0xe8 [ 85.600147][ T5470] kmem_cache_alloc+0x94/0x3d4 [ 85.600975][ T5470] alloc_extent_state+0x38/0x42c [ 85.601776][ T5470] __clear_extent_bit+0x1f0/0xb24 [ 85.602611][ T5470] clear_extent_bit+0x68/0x8c [ 85.603384][ T5470] btrfs_clone_files+0x29c/0x320 [ 85.604195][ T5470] btrfs_remap_file_range+0x488/0xb9c [ 85.605016][ T5470] vfs_copy_file_range+0xab0/0x10fc [ 85.605854][ T5470] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.606828][ T5470] invoke_syscall+0x98/0x2b0 [ 85.607562][ T5470] el0_svc_common+0x138/0x258 [ 85.608308][ T5470] do_el0_svc+0x58/0x13c [ 85.609005][ T5470] el0_svc+0x78/0x1d0 [ 85.609626][ T5470] el0t_64_sync_handler+0xcc/0xe4 [ 85.610412][ T5470] el0t_64_sync+0x1a0/0x1a4 [ 85.670327][ T4877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4877) [ 85.875716][ T5491] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 85.877201][ T5491] BTRFS info (device loop0): using free space tree [ 85.878183][ T5491] BTRFS info (device loop0): has skinny extents [ 85.897247][ T5491] BTRFS info (device loop0): enabling ssd optimizations [ 85.904102][ T5491] FAULT_INJECTION: forcing a failure. [ 85.904102][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 85.906174][ T5491] CPU: 0 PID: 5491 Comm: syz.0.42 Tainted: G W syzkaller #0 [ 85.907472][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 85.909000][ T5491] Call trace: [ 85.909468][ T5491] dump_backtrace+0x0/0x458 [ 85.910109][ T5491] show_stack+0x2c/0x3c [ 85.910709][ T5491] __dump_stack+0x30/0x40 [ 85.911326][ T5491] dump_stack_lvl+0xf4/0x15c [ 85.912004][ T5491] dump_stack+0x1c/0x5c [ 85.912563][ T5491] should_fail+0x3bc/0x514 [ 85.913274][ T5491] __should_failslab+0xbc/0x10c [ 85.914112][ T5491] should_failslab+0x10/0x28 [ 85.914850][ T5491] slab_pre_alloc_hook+0x64/0xe8 [ 85.915612][ T5491] kmem_cache_alloc+0x94/0x3d4 [ 85.916291][ T5491] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 85.917120][ T5491] btrfs_inc_extent_ref+0x100/0x198 [ 85.917924][ T5491] btrfs_insert_replace_extent+0x6a0/0x9cc [ 85.918789][ T5491] btrfs_replace_file_extents+0x89c/0x1238 [ 85.919742][ T5491] btrfs_clone+0xb7c/0x1d14 [ 85.920404][ T5491] btrfs_clone_files+0x278/0x320 [ 85.921161][ T5491] btrfs_remap_file_range+0x488/0xb9c [ 85.921939][ T5491] vfs_copy_file_range+0xab0/0x10fc [ 85.922687][ T5491] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.923577][ T5491] invoke_syscall+0x98/0x2b0 [ 85.924249][ T5491] el0_svc_common+0x138/0x258 [ 85.924942][ T5491] do_el0_svc+0x58/0x13c [ 85.925557][ T5491] el0_svc+0x78/0x1d0 [ 85.926135][ T5491] el0t_64_sync_handler+0xcc/0xe4 [ 85.927003][ T5491] el0t_64_sync+0x1a0/0x1a4 [ 85.928470][ T5491] ------------[ cut here ]------------ [ 85.929488][ T5491] WARNING: CPU: 0 PID: 5491 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 85.931097][ T5491] Modules linked in: [ 85.931719][ T5491] CPU: 0 PID: 5491 Comm: syz.0.42 Tainted: G W syzkaller #0 [ 85.933166][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 85.934868][ T5491] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 85.936179][ T5491] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 85.937217][ T5491] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 85.938213][ T5491] sp : ffff800021ee7440 [ 85.938831][ T5491] x29: ffff800021ee7560 x28: dfff800000000000 x27: 000000000000e000 [ 85.940117][ T5491] x26: ffff0000ebc29600 x25: ffff800021ee7890 x24: ffff0000ec4b75c0 [ 85.941383][ T5491] x23: ffff7000043dce98 x22: 00000000fffffff4 x21: 1fffe0001b9cfb6b [ 85.942630][ T5491] x20: ffff0000dce7db00 x19: ffff0000dce7db58 x18: 0000000000000001 [ 85.943972][ T5491] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 85.945253][ T5491] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 85.946630][ T5491] x11: 0000000000000000 x10: 0000000000000000 x9 : 1ffb843e17776700 [ 85.947906][ T5491] x8 : 1ffb843e17776700 x7 : 0000000000000001 x6 : 0000000000000001 [ 85.949293][ T5491] x5 : ffff800021ee6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 85.950710][ T5491] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 85.952037][ T5491] Call trace: [ 85.952541][ T5491] btrfs_replace_file_extents+0xcc4/0x1238 [ 85.953428][ T5491] btrfs_clone+0xb7c/0x1d14 [ 85.954202][ T5491] btrfs_clone_files+0x278/0x320 [ 85.954971][ T5491] btrfs_remap_file_range+0x488/0xb9c [ 85.955831][ T5491] vfs_copy_file_range+0xab0/0x10fc [ 85.956671][ T5491] __arm64_sys_copy_file_range+0x540/0x8d4 [ 85.957598][ T5491] invoke_syscall+0x98/0x2b0 [ 85.958301][ T5491] el0_svc_common+0x138/0x258 [ 85.959077][ T5491] do_el0_svc+0x58/0x13c [ 85.959730][ T5491] el0_svc+0x78/0x1d0 [ 85.960352][ T5491] el0t_64_sync_handler+0xcc/0xe4 [ 85.961151][ T5491] el0t_64_sync+0x1a0/0x1a4 [ 85.961918][ T5491] irq event stamp: 80604 [ 85.962663][ T5491] hardirqs last enabled at (80603): [] __up_console_sem+0xb4/0xfc [ 85.964288][ T5491] hardirqs last disabled at (80604): [] el1_dbg+0x24/0x80 [ 85.965721][ T5491] softirqs last enabled at (80580): [] handle_softirqs+0xa40/0xbe4 [ 85.967176][ T5491] softirqs last disabled at (80569): [] __irq_exit_rcu+0x240/0x43c [ 85.968613][ T5491] ---[ end trace 4943a00d9a3920ac ]--- [ 85.971171][ T5491] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 85.972705][ T5491] BTRFS info (device loop0): forced readonly [ 86.168062][ T5514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.43 (5514) [ 86.171373][ T5514] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 86.172828][ T5514] BTRFS info (device loop0): using free space tree [ 86.175735][ T5514] BTRFS info (device loop0): has skinny extents [ 86.188659][ T5514] BTRFS info (device loop0): enabling ssd optimizations [ 86.196010][ T5514] FAULT_INJECTION: forcing a failure. [ 86.196010][ T5514] name failslab, interval 1, probability 0, space 0, times 0 [ 86.198059][ T5514] CPU: 0 PID: 5514 Comm: syz.0.43 Tainted: G W syzkaller #0 [ 86.199418][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 86.201062][ T5514] Call trace: [ 86.201604][ T5514] dump_backtrace+0x0/0x458 [ 86.202330][ T5514] show_stack+0x2c/0x3c [ 86.202957][ T5514] __dump_stack+0x30/0x40 [ 86.203701][ T5514] dump_stack_lvl+0xf4/0x15c [ 86.204512][ T5514] dump_stack+0x1c/0x5c [ 86.205176][ T5514] should_fail+0x3bc/0x514 [ 86.205903][ T5514] __should_failslab+0xbc/0x10c [ 86.206746][ T5514] should_failslab+0x10/0x28 [ 86.207568][ T5514] slab_pre_alloc_hook+0x64/0xe8 [ 86.208398][ T5514] kmem_cache_alloc+0x94/0x3d4 [ 86.209211][ T5514] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 86.210168][ T5514] btrfs_inc_extent_ref+0x100/0x198 [ 86.211012][ T5514] btrfs_insert_replace_extent+0x6a0/0x9cc [ 86.211998][ T5514] btrfs_replace_file_extents+0x89c/0x1238 [ 86.212946][ T5514] btrfs_clone+0xb7c/0x1d14 [ 86.213665][ T5514] btrfs_clone_files+0x278/0x320 [ 86.214454][ T5514] btrfs_remap_file_range+0x488/0xb9c [ 86.215309][ T5514] vfs_copy_file_range+0xab0/0x10fc [ 86.216169][ T5514] __arm64_sys_copy_file_range+0x540/0x8d4 [ 86.217123][ T5514] invoke_syscall+0x98/0x2b0 [ 86.217826][ T5514] el0_svc_common+0x138/0x258 [ 86.218555][ T5514] do_el0_svc+0x58/0x13c [ 86.219249][ T5514] el0_svc+0x78/0x1d0 [ 86.219934][ T5514] el0t_64_sync_handler+0xcc/0xe4 [ 86.220709][ T5514] el0t_64_sync+0x1a0/0x1a4 [ 86.224245][ T5514] ------------[ cut here ]------------ [ 86.225242][ T5514] WARNING: CPU: 0 PID: 5514 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 86.226842][ T5514] Modules linked in: [ 86.227448][ T5514] CPU: 0 PID: 5514 Comm: syz.0.43 Tainted: G W syzkaller #0 [ 86.228739][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 86.230250][ T5514] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 86.231485][ T5514] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 86.232481][ T5514] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 86.233501][ T5514] sp : ffff800022267440 [ 86.234218][ T5514] x29: ffff800022267560 x28: dfff800000000000 x27: 000000000000e000 [ 86.235523][ T5514] x26: ffff0000caeb1c00 x25: ffff800022267890 x24: ffff0000ec4b44b0 [ 86.236879][ T5514] x23: ffff70000444ce98 x22: 00000000fffffff4 x21: 1fffe0001b9df5ef [ 86.238253][ T5514] x20: ffff0000dcefaf20 x19: ffff0000dcefaf78 x18: 0000000000000001 [ 86.239622][ T5514] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 86.240938][ T5514] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 86.242159][ T5514] x11: 0000000000000000 x10: 0000000000000000 x9 : 2221e62a19736100 [ 86.243357][ T5514] x8 : 2221e62a19736100 x7 : 0000000000000001 x6 : 0000000000000001 [ 86.244633][ T5514] x5 : ffff800022266d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 86.245923][ T5514] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 86.247282][ T5514] Call trace: [ 86.247871][ T5514] btrfs_replace_file_extents+0xcc4/0x1238 [ 86.248874][ T5514] btrfs_clone+0xb7c/0x1d14 [ 86.249620][ T5514] btrfs_clone_files+0x278/0x320 [ 86.250441][ T5514] btrfs_remap_file_range+0x488/0xb9c [ 86.251291][ T5514] vfs_copy_file_range+0xab0/0x10fc [ 86.252092][ T5514] __arm64_sys_copy_file_range+0x540/0x8d4 [ 86.253021][ T5514] invoke_syscall+0x98/0x2b0 [ 86.253784][ T5514] el0_svc_common+0x138/0x258 [ 86.254576][ T5514] do_el0_svc+0x58/0x13c [ 86.255269][ T5514] el0_svc+0x78/0x1d0 [ 86.255918][ T5514] el0t_64_sync_handler+0xcc/0xe4 [ 86.256702][ T5514] el0t_64_sync+0x1a0/0x1a4 [ 86.257396][ T5514] irq event stamp: 80694 [ 86.258083][ T5514] hardirqs last enabled at (80693): [] __up_console_sem+0xb4/0xfc [ 86.259683][ T5514] hardirqs last disabled at (80694): [] el1_dbg+0x24/0x80 [ 86.261147][ T5514] softirqs last enabled at (80670): [] handle_softirqs+0xa40/0xbe4 [ 86.262730][ T5514] softirqs last disabled at (80557): [] __irq_exit_rcu+0x240/0x43c [ 86.264227][ T5514] ---[ end trace 4943a00d9a3920ad ]--- [ 86.267409][ T5514] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 86.269099][ T5514] BTRFS info (device loop0): forced readonly [ 86.490557][ T5536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.44 (5536) [ 86.495115][ T5536] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 86.496732][ T5536] BTRFS info (device loop0): using free space tree [ 86.498368][ T5536] BTRFS info (device loop0): has skinny extents [ 86.522470][ T5536] BTRFS info (device loop0): enabling ssd optimizations [ 86.529657][ T5536] FAULT_INJECTION: forcing a failure. [ 86.529657][ T5536] name failslab, interval 1, probability 0, space 0, times 0 [ 86.531803][ T5536] CPU: 0 PID: 5536 Comm: syz.0.44 Tainted: G W syzkaller #0 [ 86.533085][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 86.534535][ T5536] Call trace: [ 86.535040][ T5536] dump_backtrace+0x0/0x458 [ 86.535786][ T5536] show_stack+0x2c/0x3c [ 86.536390][ T5536] __dump_stack+0x30/0x40 [ 86.537069][ T5536] dump_stack_lvl+0xf4/0x15c [ 86.537755][ T5536] dump_stack+0x1c/0x5c [ 86.538359][ T5536] should_fail+0x3bc/0x514 [ 86.538987][ T5536] __should_failslab+0xbc/0x10c [ 86.539825][ T5536] should_failslab+0x10/0x28 [ 86.540628][ T5536] slab_pre_alloc_hook+0x64/0xe8 [ 86.541486][ T5536] kmem_cache_alloc+0x94/0x3d4 [ 86.542287][ T5536] alloc_extent_state+0x38/0x42c [ 86.543063][ T5536] __clear_extent_bit+0x1f0/0xb24 [ 86.543896][ T5536] clear_extent_bit+0x68/0x8c [ 86.544673][ T5536] btrfs_clone_files+0x29c/0x320 [ 86.545505][ T5536] btrfs_remap_file_range+0x488/0xb9c [ 86.546469][ T5536] vfs_copy_file_range+0xab0/0x10fc [ 86.547375][ T5536] __arm64_sys_copy_file_range+0x540/0x8d4 [ 86.548342][ T5536] invoke_syscall+0x98/0x2b0 [ 86.549152][ T5536] el0_svc_common+0x138/0x258 [ 86.549996][ T5536] do_el0_svc+0x58/0x13c [ 86.550693][ T5536] el0_svc+0x78/0x1d0 [ 86.551310][ T5536] el0t_64_sync_handler+0xcc/0xe4 [ 86.552064][ T5536] el0t_64_sync+0x1a0/0x1a4 [ 86.767085][ T5558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.45 (5558) [ 86.770783][ T5558] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 86.772239][ T5558] BTRFS info (device loop0): using free space tree [ 86.773339][ T5558] BTRFS info (device loop0): has skinny extents [ 86.780736][ T5558] BTRFS info (device loop0): enabling ssd optimizations [ 86.788516][ T5558] FAULT_INJECTION: forcing a failure. [ 86.788516][ T5558] name failslab, interval 1, probability 0, space 0, times 0 [ 86.790597][ T5558] CPU: 1 PID: 5558 Comm: syz.0.45 Tainted: G W syzkaller #0 [ 86.792020][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 86.793592][ T5558] Call trace: [ 86.794116][ T5558] dump_backtrace+0x0/0x458 [ 86.794901][ T5558] show_stack+0x2c/0x3c [ 86.795526][ T5558] __dump_stack+0x30/0x40 [ 86.796180][ T5558] dump_stack_lvl+0xf4/0x15c [ 86.796883][ T5558] dump_stack+0x1c/0x5c [ 86.797479][ T5558] should_fail+0x3bc/0x514 [ 86.798173][ T5558] __should_failslab+0xbc/0x10c [ 86.798880][ T5558] should_failslab+0x10/0x28 [ 86.799593][ T5558] slab_pre_alloc_hook+0x64/0xe8 [ 86.800356][ T5558] kmem_cache_alloc+0x94/0x3d4 [ 86.801158][ T5558] alloc_extent_state+0x38/0x42c [ 86.802062][ T5558] __clear_extent_bit+0x1f0/0xb24 [ 86.802902][ T5558] clear_extent_bit+0x68/0x8c [ 86.803694][ T5558] btrfs_clone_files+0x29c/0x320 [ 86.804504][ T5558] btrfs_remap_file_range+0x488/0xb9c [ 86.805435][ T5558] vfs_copy_file_range+0xab0/0x10fc [ 86.806296][ T5558] __arm64_sys_copy_file_range+0x540/0x8d4 [ 86.807199][ T5558] invoke_syscall+0x98/0x2b0 [ 86.807937][ T5558] el0_svc_common+0x138/0x258 [ 86.808734][ T5558] do_el0_svc+0x58/0x13c [ 86.809397][ T5558] el0_svc+0x78/0x1d0 [ 86.809983][ T5558] el0t_64_sync_handler+0xcc/0xe4 [ 86.810752][ T5558] el0t_64_sync+0x1a0/0x1a4 [ 86.874379][ T4877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4877) [ 87.045069][ T5579] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 87.046684][ T5579] BTRFS info (device loop0): using free space tree [ 87.047729][ T5579] BTRFS info (device loop0): has skinny extents [ 87.057363][ T5579] BTRFS info (device loop0): enabling ssd optimizations [ 87.067875][ T5579] FAULT_INJECTION: forcing a failure. [ 87.067875][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 87.069751][ T5579] CPU: 1 PID: 5579 Comm: syz.0.46 Tainted: G W syzkaller #0 [ 87.071068][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.072570][ T5579] Call trace: [ 87.073082][ T5579] dump_backtrace+0x0/0x458 [ 87.073852][ T5579] show_stack+0x2c/0x3c [ 87.074589][ T5579] __dump_stack+0x30/0x40 [ 87.075315][ T5579] dump_stack_lvl+0xf4/0x15c [ 87.076072][ T5579] dump_stack+0x1c/0x5c [ 87.076759][ T5579] should_fail+0x3bc/0x514 [ 87.077412][ T5579] __should_failslab+0xbc/0x10c [ 87.078172][ T5579] should_failslab+0x10/0x28 [ 87.078885][ T5579] slab_pre_alloc_hook+0x64/0xe8 [ 87.079782][ T5579] kmem_cache_alloc+0x94/0x3d4 [ 87.080534][ T5579] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 87.081393][ T5579] btrfs_inc_extent_ref+0x100/0x198 [ 87.082176][ T5579] btrfs_insert_replace_extent+0x6a0/0x9cc [ 87.083141][ T5579] btrfs_replace_file_extents+0x89c/0x1238 [ 87.084091][ T5579] btrfs_clone+0xb7c/0x1d14 [ 87.084791][ T5579] btrfs_clone_files+0x278/0x320 [ 87.085608][ T5579] btrfs_remap_file_range+0x488/0xb9c [ 87.086477][ T5579] vfs_copy_file_range+0xab0/0x10fc [ 87.087311][ T5579] __arm64_sys_copy_file_range+0x540/0x8d4 [ 87.088273][ T5579] invoke_syscall+0x98/0x2b0 [ 87.089027][ T5579] el0_svc_common+0x138/0x258 [ 87.089786][ T5579] do_el0_svc+0x58/0x13c [ 87.090543][ T5579] el0_svc+0x78/0x1d0 [ 87.091188][ T5579] el0t_64_sync_handler+0xcc/0xe4 [ 87.092023][ T5579] el0t_64_sync+0x1a0/0x1a4 [ 87.094728][ T5579] ------------[ cut here ]------------ [ 87.095691][ T5579] WARNING: CPU: 1 PID: 5579 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 87.097267][ T5579] Modules linked in: [ 87.097901][ T5579] CPU: 1 PID: 5579 Comm: syz.0.46 Tainted: G W syzkaller #0 [ 87.099247][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.100810][ T5579] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 87.101977][ T5579] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 87.102892][ T5579] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 87.103855][ T5579] sp : ffff8000225e7440 [ 87.104507][ T5579] x29: ffff8000225e7560 x28: dfff800000000000 x27: 000000000000e000 [ 87.105785][ T5579] x26: ffff0000c8823a00 x25: ffff8000225e7890 x24: ffff0000ec4b2740 [ 87.107084][ T5579] x23: ffff7000044bce98 x22: 00000000fffffff4 x21: 1fffe0001bcec8fd [ 87.108429][ T5579] x20: ffff0000de764790 x19: ffff0000de7647e8 x18: 0000000000000001 [ 87.109637][ T5579] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 87.110829][ T5579] x14: 0000000000000001 x13: 1fffe000341f49ab x12: 0000000000ff0100 [ 87.112101][ T5579] x11: 0000000000000000 x10: 0000000000000000 x9 : ed03eb98d9356000 [ 87.113338][ T5579] x8 : ed03eb98d9356000 x7 : 0000000000000001 x6 : 0000000000000001 [ 87.114466][ T5579] x5 : ffff8000225e6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 87.115636][ T5579] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 87.116756][ T5579] Call trace: [ 87.117285][ T5579] btrfs_replace_file_extents+0xcc4/0x1238 [ 87.118177][ T5579] btrfs_clone+0xb7c/0x1d14 [ 87.118858][ T5579] btrfs_clone_files+0x278/0x320 [ 87.119624][ T5579] btrfs_remap_file_range+0x488/0xb9c [ 87.120406][ T5579] vfs_copy_file_range+0xab0/0x10fc [ 87.121142][ T5579] __arm64_sys_copy_file_range+0x540/0x8d4 [ 87.122092][ T5579] invoke_syscall+0x98/0x2b0 [ 87.122828][ T5579] el0_svc_common+0x138/0x258 [ 87.123629][ T5579] do_el0_svc+0x58/0x13c [ 87.124291][ T5579] el0_svc+0x78/0x1d0 [ 87.124908][ T5579] el0t_64_sync_handler+0xcc/0xe4 [ 87.125690][ T5579] el0t_64_sync+0x1a0/0x1a4 [ 87.126373][ T5579] irq event stamp: 81342 [ 87.127053][ T5579] hardirqs last enabled at (81341): [] __up_console_sem+0xb4/0xfc [ 87.128483][ T5579] hardirqs last disabled at (81342): [] el1_dbg+0x24/0x80 [ 87.129802][ T5579] softirqs last enabled at (81318): [] handle_softirqs+0xa40/0xbe4 [ 87.131318][ T5579] softirqs last disabled at (81163): [] __irq_exit_rcu+0x240/0x43c [ 87.132756][ T5579] ---[ end trace 4943a00d9a3920ae ]--- [ 87.135793][ T5579] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 87.137406][ T5579] BTRFS info (device loop0): forced readonly [ 87.324914][ T5602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.47 (5602) [ 87.375475][ T5602] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 87.376976][ T5602] BTRFS info (device loop0): using free space tree [ 87.378069][ T5602] BTRFS info (device loop0): has skinny extents [ 87.387356][ T5602] BTRFS info (device loop0): enabling ssd optimizations [ 87.397379][ T5602] FAULT_INJECTION: forcing a failure. [ 87.397379][ T5602] name failslab, interval 1, probability 0, space 0, times 0 [ 87.399498][ T5602] CPU: 0 PID: 5602 Comm: syz.0.47 Tainted: G W syzkaller #0 [ 87.400833][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.402281][ T5602] Call trace: [ 87.402771][ T5602] dump_backtrace+0x0/0x458 [ 87.403490][ T5602] show_stack+0x2c/0x3c [ 87.404211][ T5602] __dump_stack+0x30/0x40 [ 87.404927][ T5602] dump_stack_lvl+0xf4/0x15c [ 87.405590][ T5602] dump_stack+0x1c/0x5c [ 87.406253][ T5602] should_fail+0x3bc/0x514 [ 87.406964][ T5602] __should_failslab+0xbc/0x10c [ 87.407725][ T5602] should_failslab+0x10/0x28 [ 87.408480][ T5602] slab_pre_alloc_hook+0x64/0xe8 [ 87.409253][ T5602] kmem_cache_alloc+0x94/0x3d4 [ 87.410074][ T5602] btrfs_add_delayed_data_ref+0x3b8/0xd08 [ 87.410946][ T5602] btrfs_inc_extent_ref+0x100/0x198 [ 87.411791][ T5602] btrfs_insert_replace_extent+0x6a0/0x9cc [ 87.412761][ T5602] btrfs_replace_file_extents+0x89c/0x1238 [ 87.413657][ T5602] btrfs_clone+0xb7c/0x1d14 [ 87.414396][ T5602] btrfs_clone_files+0x278/0x320 [ 87.415187][ T5602] btrfs_remap_file_range+0x488/0xb9c [ 87.416081][ T5602] vfs_copy_file_range+0xab0/0x10fc [ 87.416974][ T5602] __arm64_sys_copy_file_range+0x540/0x8d4 [ 87.417955][ T5602] invoke_syscall+0x98/0x2b0 [ 87.418750][ T5602] el0_svc_common+0x138/0x258 [ 87.419498][ T5602] do_el0_svc+0x58/0x13c [ 87.420223][ T5602] el0_svc+0x78/0x1d0 [ 87.420909][ T5602] el0t_64_sync_handler+0xcc/0xe4 [ 87.421741][ T5602] el0t_64_sync+0x1a0/0x1a4 [ 87.423576][ T5602] ------------[ cut here ]------------ [ 87.424585][ T5602] WARNING: CPU: 0 PID: 5602 at fs/btrfs/file.c:2983 btrfs_replace_file_extents+0xcc4/0x1238 [ 87.426144][ T5602] Modules linked in: [ 87.426790][ T5602] CPU: 0 PID: 5602 Comm: syz.0.47 Tainted: G W syzkaller #0 [ 87.428089][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.429678][ T5602] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 87.430985][ T5602] pc : btrfs_replace_file_extents+0xcc4/0x1238 [ 87.432033][ T5602] lr : btrfs_replace_file_extents+0xcc4/0x1238 [ 87.433069][ T5602] sp : ffff8000225e7440 [ 87.433747][ T5602] x29: ffff8000225e7560 x28: dfff800000000000 x27: 000000000000e000 [ 87.435073][ T5602] x26: ffff0000cf6b5c00 x25: ffff8000225e7890 x24: ffff0000ec43bae0 [ 87.436383][ T5602] x23: ffff7000044bce98 x22: 00000000fffffff4 x21: 1fffe0001bca5437 [ 87.437685][ T5602] x20: ffff0000de52a160 x19: ffff0000de52a1b8 x18: 0000000000000001 [ 87.438995][ T5602] x17: 0000000000000000 x16: ffff800011255484 x15: 00000000ffffffff [ 87.440392][ T5602] x14: 0000000000000001 x13: 1fffe000341f07ab x12: 0000000000ff0100 [ 87.441682][ T5602] x11: 0000000000000000 x10: 0000000000000000 x9 : 58d3208391ca5600 [ 87.442972][ T5602] x8 : 58d3208391ca5600 x7 : 0000000000000001 x6 : 0000000000000001 [ 87.444233][ T5602] x5 : ffff8000225e6d58 x4 : ffff80001436f3e0 x3 : ffff800008508fa8 [ 87.445613][ T5602] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 87.446905][ T5602] Call trace: [ 87.447415][ T5602] btrfs_replace_file_extents+0xcc4/0x1238 [ 87.448360][ T5602] btrfs_clone+0xb7c/0x1d14 [ 87.449125][ T5602] btrfs_clone_files+0x278/0x320 [ 87.449905][ T5602] btrfs_remap_file_range+0x488/0xb9c [ 87.450849][ T5602] vfs_copy_file_range+0xab0/0x10fc [ 87.451688][ T5602] __arm64_sys_copy_file_range+0x540/0x8d4 [ 87.452562][ T5602] invoke_syscall+0x98/0x2b0 [ 87.453253][ T5602] el0_svc_common+0x138/0x258 [ 87.453940][ T5602] do_el0_svc+0x58/0x13c [ 87.454590][ T5602] el0_svc+0x78/0x1d0 [ 87.455181][ T5602] el0t_64_sync_handler+0xcc/0xe4 [ 87.455895][ T5602] el0t_64_sync+0x1a0/0x1a4 [ 87.456608][ T5602] irq event stamp: 81590 [ 87.457335][ T5602] hardirqs last enabled at (81589): [] __up_console_sem+0xb4/0xfc [ 87.458922][ T5602] hardirqs last disabled at (81590): [] el1_dbg+0x24/0x80 [ 87.460319][ T5602] softirqs last enabled at (81566): [] handle_softirqs+0xa40/0xbe4 [ 87.461898][ T5602] softirqs last disabled at (81551): [] __irq_exit_rcu+0x240/0x43c [ 87.463312][ T5602] ---[ end trace 4943a00d9a3920af ]--- [ 87.465614][ T5602] BTRFS: error (device loop0) in btrfs_replace_file_extents:2983: errno=-12 Out of memory [ 87.467201][ T5602] BTRFS info (device loop0): forced readonly [ 87.635424][ T5624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.48 (5624) [ 87.664588][ T5624] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 87.666169][ T5624] BTRFS info (device loop0): using free space tree [ 87.667715][ T5624] BTRFS info (device loop0): has skinny extents [ 87.675875][ T5624] BTRFS info (device loop0): enabling ssd optimizations [ 87.688535][ T5624] FAULT_INJECTION: forcing a failure. [ 87.688535][ T5624] name failslab, interval 1, probability 0, space 0, times 0 [ 87.690642][ T5624] CPU: 1 PID: 5624 Comm: syz.0.48 Tainted: G W syzkaller #0 [ 87.691942][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.693535][ T5624] Call trace: [ 87.694020][ T5624] dump_backtrace+0x0/0x458 [ 87.694752][ T5624] show_stack+0x2c/0x3c [ 87.695424][ T5624] __dump_stack+0x30/0x40 [ 87.696100][ T5624] dump_stack_lvl+0xf4/0x15c [ 87.696861][ T5624] dump_stack+0x1c/0x5c [ 87.697521][ T5624] should_fail+0x3bc/0x514 [ 87.698264][ T5624] __should_failslab+0xbc/0x10c [ 87.699078][ T5624] should_failslab+0x10/0x28 [ 87.699786][ T5624] slab_pre_alloc_hook+0x64/0xe8 [ 87.700535][ T5624] kmem_cache_alloc+0x94/0x3d4 [ 87.701269][ T5624] alloc_extent_state+0x38/0x42c [ 87.702007][ T5624] __clear_extent_bit+0x1f0/0xb24 [ 87.702848][ T5624] clear_extent_bit+0x68/0x8c [ 87.703637][ T5624] btrfs_clone_files+0x29c/0x320 [ 87.704482][ T5624] btrfs_remap_file_range+0x488/0xb9c [ 87.705401][ T5624] vfs_copy_file_range+0xab0/0x10fc [ 87.706236][ T5624] __arm64_sys_copy_file_range+0x540/0x8d4 [ 87.707159][ T5624] invoke_syscall+0x98/0x2b0 [ 87.707889][ T5624] el0_svc_common+0x138/0x258 [ 87.708643][ T5624] do_el0_svc+0x58/0x13c [ 87.709280][ T5624] el0_svc+0x78/0x1d0 [ 87.709982][ T5624] el0t_64_sync_handler+0xcc/0xe4 [ 87.710740][ T5624] el0t_64_sync+0x1a0/0x1a4 [ 88.005483][ T5646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.49 (5646) [ 88.009544][ T5646] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 88.010932][ T5646] BTRFS info (device loop0): using free space tree [ 88.012047][ T5646] BTRFS info (device loop0): has skinny extents