Warning: Permanently added '[localhost]:33555' (ED25519) to the list of known hosts. [ 81.202393][ T9] cfg80211: failed to load regulatory.db 2025/11/22 00:04:37 parsed 1 programs [ 84.277505][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.174681][ T4667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.186392][ T4667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.189043][ T4667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.196056][ T4667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.198633][ T4667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.610659][ T5611] chnl_net:caif_netlink_parms(): no params data found [ 86.652715][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.655122][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.657446][ T5611] bridge_slave_0: entered allmulticast mode [ 86.660084][ T5611] bridge_slave_0: entered promiscuous mode [ 86.663521][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.665880][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.668237][ T5611] bridge_slave_1: entered allmulticast mode [ 86.670847][ T5611] bridge_slave_1: entered promiscuous mode [ 86.685003][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.689267][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.702512][ T5611] team0: Port device team_slave_0 added [ 86.705516][ T5611] team0: Port device team_slave_1 added [ 86.716843][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.719139][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.727717][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.732580][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.734863][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.743435][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.761980][ T5611] hsr_slave_0: entered promiscuous mode [ 86.764273][ T5611] hsr_slave_1: entered promiscuous mode [ 87.103241][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.113119][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.117161][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.125677][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.204543][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.219681][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.253351][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.255759][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.258861][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.261196][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.284292][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.443319][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.492453][ T5611] veth0_vlan: entered promiscuous mode [ 87.497216][ T5611] veth1_vlan: entered promiscuous mode [ 87.531488][ T5611] veth0_macvtap: entered promiscuous mode [ 87.544327][ T5611] veth1_macvtap: entered promiscuous mode [ 87.551191][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.574898][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.596378][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.599348][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615502][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.625993][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.739353][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.819017][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.874778][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.939933][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.143634][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.146264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.185302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.188392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/22 00:04:45 executed programs: 0 [ 89.447076][ T4667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.450974][ T4667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.454066][ T4667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.462868][ T4667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.465428][ T4667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.590459][ T5731] chnl_net:caif_netlink_parms(): no params data found [ 89.627259][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.629702][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.632406][ T5731] bridge_slave_0: entered allmulticast mode [ 89.635077][ T5731] bridge_slave_0: entered promiscuous mode [ 89.638226][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.640608][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.643436][ T5731] bridge_slave_1: entered allmulticast mode [ 89.646097][ T5731] bridge_slave_1: entered promiscuous mode [ 89.660567][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.665139][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.680355][ T5731] team0: Port device team_slave_0 added [ 89.684152][ T5731] team0: Port device team_slave_1 added [ 89.696386][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.698712][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.707641][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.712495][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.714798][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.723490][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.744003][ T5731] hsr_slave_0: entered promiscuous mode [ 89.746314][ T5731] hsr_slave_1: entered promiscuous mode [ 89.748503][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 89.750446][ T5731] Cannot create hsr debugfs directory [ 90.193857][ T1139] bridge_slave_1: left allmulticast mode [ 90.195814][ T1139] bridge_slave_1: left promiscuous mode [ 90.197763][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.202590][ T1139] bridge_slave_0: left allmulticast mode [ 90.204502][ T1139] bridge_slave_0: left promiscuous mode [ 90.206442][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.423902][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.427764][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.431632][ T1139] bond0 (unregistering): Released all slaves [ 90.525669][ T1139] hsr_slave_0: left promiscuous mode [ 90.529023][ T1139] hsr_slave_1: left promiscuous mode [ 90.535726][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.538212][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.552876][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.555384][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.564838][ T1139] veth1_macvtap: left promiscuous mode [ 90.566746][ T1139] veth0_macvtap: left promiscuous mode [ 90.568640][ T1139] veth1_vlan: left promiscuous mode [ 90.570437][ T1139] veth0_vlan: left promiscuous mode [ 90.764698][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 90.774597][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 90.984639][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.998180][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.014602][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.024970][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.258449][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.292181][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.329567][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.332060][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.339536][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.342011][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.531389][ T4667] Bluetooth: hci0: command tx timeout [ 91.626126][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.658053][ T5731] veth0_vlan: entered promiscuous mode [ 91.673403][ T5731] veth1_vlan: entered promiscuous mode [ 91.702911][ T5731] veth0_macvtap: entered promiscuous mode [ 91.708329][ T5731] veth1_macvtap: entered promiscuous mode [ 91.719959][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.727664][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.734784][ T1039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737631][ T1039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740465][ T1039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755284][ T1039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.779316][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.786650][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.799080][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.805419][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.925821][ T5774] loop0: detected capacity change from 0 to 32768 [ 91.935380][ T5774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15 (5774) [ 91.953163][ T5774] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.961911][ T5774] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 92.023501][ T5774] BTRFS info (device loop0): setting nodatasum [ 92.025599][ T5774] BTRFS info (device loop0): turning on sync discard [ 92.027847][ T5774] BTRFS info (device loop0): enabling free space tree [ 92.043625][ T5774] BTRFS info (device loop0): enabling auto defrag [ 92.045756][ T5774] BTRFS info (device loop0): max_inline set to 0 [ 92.097499][ T5774] FAULT_INJECTION: forcing a failure. [ 92.097499][ T5774] name failslab, interval 1, probability 0, space 0, times 1 [ 92.121407][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 92.121418][ T5774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.121422][ T5774] Call Trace: [ 92.121425][ T5774] [ 92.121429][ T5774] dump_stack_lvl+0x189/0x250 [ 92.121459][ T5774] ? __pfx____ratelimit+0x10/0x10 [ 92.121473][ T5774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.121481][ T5774] ? __pfx__printk+0x10/0x10 [ 92.121490][ T5774] ? __pfx___might_resched+0x10/0x10 [ 92.121499][ T5774] should_fail_ex+0x414/0x560 [ 92.121514][ T5774] should_failslab+0xa8/0x100 [ 92.121523][ T5774] kmem_cache_alloc_noprof+0x74/0x6e0 [ 92.121532][ T5774] ? alloc_extent_state+0x22/0x2f0 [ 92.121543][ T5774] alloc_extent_state+0x22/0x2f0 [ 92.121552][ T5774] set_extent_bit+0x270/0x21a0 [ 92.121569][ T5774] ? __pfx_set_extent_bit+0x10/0x10 [ 92.121577][ T5774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 92.121589][ T5774] btrfs_lock_extent_bits+0xd6/0x6e0 [ 92.121596][ T5774] ? qgroup_reserve_data+0xb1/0x8d0 [ 92.121608][ T5774] ? __pfx_btrfs_lock_extent_bits+0x10/0x10 [ 92.121616][ T5774] ? btrfs_qgroup_reserve_data+0x98/0xb0 [ 92.121628][ T5774] btrfs_dio_iomap_begin+0x500/0x1030 [ 92.121640][ T5774] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.121650][ T5774] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.121658][ T5774] iomap_iter+0x534/0xde0 [ 92.121666][ T5774] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 92.121677][ T5774] __iomap_dio_rw+0xc57/0x1e50 [ 92.121691][ T5774] ? btrfs_cont_expand+0x6ce/0xd00 [ 92.121699][ T5774] ? __pfx___iomap_dio_rw+0x10/0x10 [ 92.121707][ T5774] ? btrfs_cont_expand+0xaa9/0xd00 [ 92.121722][ T5774] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 92.121731][ T5774] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 92.121739][ T5774] ? down_write+0x162/0x1f0 [ 92.121751][ T5774] btrfs_direct_write+0x820/0xba0 [ 92.121764][ T5774] ? __pfx_btrfs_direct_write+0x10/0x10 [ 92.121776][ T5774] btrfs_do_write_iter+0x25f/0x710 [ 92.121789][ T5774] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 92.121798][ T5774] ? aio_write+0x4c4/0x7a0 [ 92.121806][ T5774] aio_write+0x535/0x7a0 [ 92.121815][ T5774] ? __pfx_aio_write+0x10/0x10 [ 92.121825][ T5774] ? __might_fault+0xb0/0x130 [ 92.121840][ T5774] io_submit_one+0x78b/0x1310 [ 92.121851][ T5774] ? __pfx_io_submit_one+0x10/0x10 [ 92.121858][ T5774] ? __might_fault+0xb0/0x130 [ 92.121869][ T5774] ? __might_fault+0xb0/0x130 [ 92.121877][ T5774] __se_sys_io_submit+0x185/0x2f0 [ 92.121887][ T5774] ? __pfx___se_sys_io_submit+0x10/0x10 [ 92.121895][ T5774] ? ksys_write+0x22a/0x250 [ 92.121905][ T5774] ? do_syscall_64+0xbe/0xfa0 [ 92.121915][ T5774] do_syscall_64+0xfa/0xfa0 [ 92.121922][ T5774] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.121930][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.121936][ T5774] ? clear_bhb_loop+0x60/0xb0 [ 92.121943][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.121949][ T5774] RIP: 0033:0x7f346097e719 [ 92.121956][ T5774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.121961][ T5774] RSP: 002b:00007f34616ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 92.121969][ T5774] RAX: ffffffffffffffda RBX: 00007f3460b35f80 RCX: 00007f346097e719 [ 92.121974][ T5774] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f34616c5000 [ 92.121978][ T5774] RBP: 00007f34616ee090 R08: 0000000000000000 R09: 0000000000000000 [ 92.121982][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.121986][ T5774] R13: 0000000000000000 R14: 00007f3460b35f80 R15: 00007ffea1e0fce8 [ 92.121996][ T5774] [ 92.432088][ T5731] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.627828][ T5793] loop0: detected capacity change from 0 to 32768 [ 92.636654][ T5793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16 (5793) [ 92.655046][ T5793] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.658427][ T5793] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 92.685012][ T5793] BTRFS info (device loop0): setting nodatasum [ 92.687149][ T5793] BTRFS info (device loop0): turning on sync discard [ 92.689367][ T5793] BTRFS info (device loop0): enabling free space tree [ 92.701668][ T5793] BTRFS info (device loop0): enabling auto defrag [ 92.703872][ T5793] BTRFS info (device loop0): max_inline set to 0 [ 92.710525][ T5793] FAULT_INJECTION: forcing a failure. [ 92.710525][ T5793] name failslab, interval 1, probability 0, space 0, times 0 [ 92.724479][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 92.724490][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.724494][ T5793] Call Trace: [ 92.724497][ T5793] [ 92.724500][ T5793] dump_stack_lvl+0x189/0x250 [ 92.724512][ T5793] ? __pfx____ratelimit+0x10/0x10 [ 92.724522][ T5793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.724530][ T5793] ? __pfx__printk+0x10/0x10 [ 92.724537][ T5793] ? __pfx___might_resched+0x10/0x10 [ 92.724545][ T5793] ? fs_reclaim_acquire+0x7d/0x100 [ 92.724555][ T5793] should_fail_ex+0x414/0x560 [ 92.724566][ T5793] should_failslab+0xa8/0x100 [ 92.724575][ T5793] kmem_cache_alloc_noprof+0x74/0x6e0 [ 92.724583][ T5793] ? alloc_ordered_extent+0x113/0x680 [ 92.724593][ T5793] alloc_ordered_extent+0x113/0x680 [ 92.724600][ T5793] ? percpu_counter_add_batch+0xea/0x1e0 [ 92.724609][ T5793] ? __pfx_alloc_ordered_extent+0x10/0x10 [ 92.724621][ T5793] btrfs_alloc_ordered_extent+0x200/0xab0 [ 92.724629][ T5793] ? btrfs_create_io_em+0x53c/0x700 [ 92.724638][ T5793] btrfs_create_dio_extent+0x7c/0x170 [ 92.724648][ T5793] btrfs_get_blocks_direct_write+0x7de/0xc20 [ 92.724661][ T5793] ? __pfx_btrfs_get_blocks_direct_write+0x10/0x10 [ 92.724680][ T5793] btrfs_dio_iomap_begin+0xa58/0x1030 [ 92.724692][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.724703][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.724710][ T5793] iomap_iter+0x534/0xde0 [ 92.724719][ T5793] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 92.724730][ T5793] __iomap_dio_rw+0xc57/0x1e50 [ 92.724745][ T5793] ? btrfs_cont_expand+0x6ce/0xd00 [ 92.724752][ T5793] ? __pfx___iomap_dio_rw+0x10/0x10 [ 92.724760][ T5793] ? btrfs_cont_expand+0xaa9/0xd00 [ 92.724775][ T5793] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 92.724784][ T5793] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 92.724791][ T5793] ? down_write+0x162/0x1f0 [ 92.724803][ T5793] btrfs_direct_write+0x820/0xba0 [ 92.724810][ T5793] ? unwind_get_return_address+0x4d/0x90 [ 92.724823][ T5793] ? __pfx_btrfs_direct_write+0x10/0x10 [ 92.724835][ T5793] btrfs_do_write_iter+0x25f/0x710 [ 92.724847][ T5793] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 92.724857][ T5793] ? aio_write+0x4c4/0x7a0 [ 92.724865][ T5793] aio_write+0x535/0x7a0 [ 92.724873][ T5793] ? __pfx_aio_write+0x10/0x10 [ 92.724884][ T5793] ? __might_fault+0xb0/0x130 [ 92.724898][ T5793] io_submit_one+0x78b/0x1310 [ 92.724910][ T5793] ? __pfx_io_submit_one+0x10/0x10 [ 92.724916][ T5793] ? __might_fault+0xb0/0x130 [ 92.724927][ T5793] ? __might_fault+0xb0/0x130 [ 92.724935][ T5793] __se_sys_io_submit+0x185/0x2f0 [ 92.724945][ T5793] ? __pfx___se_sys_io_submit+0x10/0x10 [ 92.724953][ T5793] ? ksys_write+0x22a/0x250 [ 92.724964][ T5793] ? do_syscall_64+0xbe/0xfa0 [ 92.724973][ T5793] do_syscall_64+0xfa/0xfa0 [ 92.724980][ T5793] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.724988][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.724994][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 92.725002][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.725008][ T5793] RIP: 0033:0x7f346097e719 [ 92.725015][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.725020][ T5793] RSP: 002b:00007f34616ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 92.725028][ T5793] RAX: ffffffffffffffda RBX: 00007f3460b35f80 RCX: 00007f346097e719 [ 92.725033][ T5793] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f34616c5000 [ 92.725037][ T5793] RBP: 00007f34616ee090 R08: 0000000000000000 R09: 0000000000000000 [ 92.725041][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.725045][ T5793] R13: 0000000000000000 R14: 00007f3460b35f80 R15: 00007ffea1e0fce8 [ 92.725056][ T5793] [ 92.725375][ T5793] ------------[ cut here ]------------ [ 92.852779][ T5793] WARNING: CPU: 0 PID: 5793 at fs/btrfs/space-info.h:265 btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 92.856572][ T5793] Modules linked in: [ 92.857973][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 92.860984][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.864578][ T5793] RIP: 0010:btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 92.867110][ T5793] Code: 00 00 74 08 48 89 df e8 0f ca 34 fe 4c 8b 3b 4c 89 ff 4c 8b 64 24 08 4c 89 e6 e8 dc 80 cd fd 4d 39 e7 73 1a e8 72 7e cd fd 90 <0f> 0b 90 45 31 ff 41 80 7c 2d 00 00 0f 85 7b ff ff ff eb 81 e8 58 [ 92.873339][ T5793] RSP: 0018:ffffc9000ca3f238 EFLAGS: 00010293 [ 92.875358][ T5793] RAX: ffffffff83f294ee RBX: ffff88804e422080 RCX: ffff88803335a480 [ 92.877991][ T5793] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 000000000064d000 [ 92.880625][ T5793] RBP: dffffc0000000000 R08: ffffffff8f7d0f77 R09: 1ffffffff1efa1ee [ 92.883444][ T5793] R10: dffffc0000000000 R11: fffffbfff1efa1ef R12: 0000000000800000 [ 92.886077][ T5793] R13: 1ffff11009c84410 R14: ffff88804e422000 R15: 000000000064d000 [ 92.888705][ T5793] FS: 00007f34616ee6c0(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 92.891708][ T5793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.893883][ T5793] CR2: 00007f9bdcce5730 CR3: 0000000033422000 CR4: 0000000000352ef0 [ 92.896528][ T5793] Call Trace: [ 92.897671][ T5793] [ 92.898696][ T5793] btrfs_free_reserved_data_space+0x9f/0xe0 [ 92.900671][ T5793] btrfs_dio_iomap_begin+0x7c3/0x1030 [ 92.902557][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.904524][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 92.906483][ T5793] iomap_iter+0x534/0xde0 [ 92.907952][ T5793] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 92.909804][ T5793] __iomap_dio_rw+0xc57/0x1e50 [ 92.911478][ T5793] ? btrfs_cont_expand+0x6ce/0xd00 [ 92.913202][ T5793] ? __pfx___iomap_dio_rw+0x10/0x10 [ 92.914959][ T5793] ? btrfs_cont_expand+0xaa9/0xd00 [ 92.916690][ T5793] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 92.918589][ T5793] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 92.920615][ T5793] ? down_write+0x162/0x1f0 [ 92.922218][ T5793] btrfs_direct_write+0x820/0xba0 [ 92.923936][ T5793] ? unwind_get_return_address+0x4d/0x90 [ 92.925811][ T5793] ? __pfx_btrfs_direct_write+0x10/0x10 [ 92.927679][ T5793] btrfs_do_write_iter+0x25f/0x710 [ 92.929412][ T5793] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 92.931361][ T5793] ? aio_write+0x4c4/0x7a0 [ 92.932887][ T5793] aio_write+0x535/0x7a0 [ 92.934296][ T5793] ? __pfx_aio_write+0x10/0x10 [ 92.935904][ T5793] ? __might_fault+0xb0/0x130 [ 92.937485][ T5793] io_submit_one+0x78b/0x1310 [ 92.939078][ T5793] ? __pfx_io_submit_one+0x10/0x10 [ 92.940780][ T5793] ? __might_fault+0xb0/0x130 [ 92.942438][ T5793] ? __might_fault+0xb0/0x130 [ 92.944018][ T5793] __se_sys_io_submit+0x185/0x2f0 [ 92.945681][ T5793] ? __pfx___se_sys_io_submit+0x10/0x10 [ 92.947532][ T5793] ? ksys_write+0x22a/0x250 [ 92.949023][ T5793] ? do_syscall_64+0xbe/0xfa0 [ 92.950534][ T5793] do_syscall_64+0xfa/0xfa0 [ 92.952290][ T5793] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.954034][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.956077][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 92.957669][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.959628][ T5793] RIP: 0033:0x7f346097e719 [ 92.961136][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.967731][ T5793] RSP: 002b:00007f34616ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 92.970483][ T5793] RAX: ffffffffffffffda RBX: 00007f3460b35f80 RCX: 00007f346097e719 [ 92.973168][ T5793] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f34616c5000 [ 92.975813][ T5793] RBP: 00007f34616ee090 R08: 0000000000000000 R09: 0000000000000000 [ 92.978405][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.981037][ T5793] R13: 0000000000000000 R14: 00007f3460b35f80 R15: 00007ffea1e0fce8 [ 92.983702][ T5793] [ 92.984747][ T5793] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.987177][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 92.990055][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.993476][ T5793] Call Trace: [ 92.994555][ T5793] [ 92.995532][ T5793] dump_stack_lvl+0x99/0x250 [ 92.997050][ T5793] ? __asan_memcpy+0x40/0x70 [ 92.998584][ T5793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.000323][ T5793] ? __pfx__printk+0x10/0x10 [ 93.001872][ T5793] vpanic+0x237/0x6d0 [ 93.003185][ T5793] ? __pfx_vpanic+0x10/0x10 [ 93.004702][ T5793] panic+0xb9/0xc0 [ 93.005970][ T5793] ? __pfx_panic+0x10/0x10 [ 93.007473][ T5793] __warn+0x31b/0x4b0 [ 93.008800][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 93.011056][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 93.013310][ T5793] report_bug+0x2be/0x4f0 [ 93.014748][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 93.017010][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 93.019280][ T5793] ? btrfs_free_reserved_data_space_noquota+0x421/0x6c0 [ 93.021557][ T5793] handle_bug+0x84/0x160 [ 93.022972][ T5793] exc_invalid_op+0x1a/0x50 [ 93.024477][ T5793] asm_exc_invalid_op+0x1a/0x20 [ 93.026099][ T5793] RIP: 0010:btrfs_free_reserved_data_space_noquota+0x41f/0x6c0 [ 93.028575][ T5793] Code: 00 00 74 08 48 89 df e8 0f ca 34 fe 4c 8b 3b 4c 89 ff 4c 8b 64 24 08 4c 89 e6 e8 dc 80 cd fd 4d 39 e7 73 1a e8 72 7e cd fd 90 <0f> 0b 90 45 31 ff 41 80 7c 2d 00 00 0f 85 7b ff ff ff eb 81 e8 58 [ 93.035390][ T5793] RSP: 0018:ffffc9000ca3f238 EFLAGS: 00010293 [ 93.037431][ T5793] RAX: ffffffff83f294ee RBX: ffff88804e422080 RCX: ffff88803335a480 [ 93.040009][ T5793] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 000000000064d000 [ 93.042644][ T5793] RBP: dffffc0000000000 R08: ffffffff8f7d0f77 R09: 1ffffffff1efa1ee [ 93.045166][ T5793] R10: dffffc0000000000 R11: fffffbfff1efa1ef R12: 0000000000800000 [ 93.047801][ T5793] R13: 1ffff11009c84410 R14: ffff88804e422000 R15: 000000000064d000 [ 93.050423][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41e/0x6c0 [ 93.052860][ T5793] ? btrfs_free_reserved_data_space_noquota+0x41e/0x6c0 [ 93.055152][ T5793] btrfs_free_reserved_data_space+0x9f/0xe0 [ 93.057116][ T5793] btrfs_dio_iomap_begin+0x7c3/0x1030 [ 93.058922][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 93.060859][ T5793] ? __pfx_btrfs_dio_iomap_begin+0x10/0x10 [ 93.062807][ T5793] iomap_iter+0x534/0xde0 [ 93.064316][ T5793] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 93.066154][ T5793] __iomap_dio_rw+0xc57/0x1e50 [ 93.067784][ T5793] ? btrfs_cont_expand+0x6ce/0xd00 [ 93.069490][ T5793] ? __pfx___iomap_dio_rw+0x10/0x10 [ 93.071231][ T5793] ? btrfs_cont_expand+0xaa9/0xd00 [ 93.072945][ T5793] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 93.074842][ T5793] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 93.076871][ T5793] ? down_write+0x162/0x1f0 [ 93.078434][ T5793] btrfs_direct_write+0x820/0xba0 [ 93.080125][ T5793] ? unwind_get_return_address+0x4d/0x90 [ 93.081998][ T5793] ? __pfx_btrfs_direct_write+0x10/0x10 [ 93.083867][ T5793] btrfs_do_write_iter+0x25f/0x710 [ 93.085570][ T5793] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 93.087443][ T5793] ? aio_write+0x4c4/0x7a0 [ 93.088940][ T5793] aio_write+0x535/0x7a0 [ 93.090360][ T5793] ? __pfx_aio_write+0x10/0x10 [ 93.091971][ T5793] ? __might_fault+0xb0/0x130 [ 93.093552][ T5793] io_submit_one+0x78b/0x1310 [ 93.095136][ T5793] ? __pfx_io_submit_one+0x10/0x10 [ 93.096841][ T5793] ? __might_fault+0xb0/0x130 [ 93.098420][ T5793] ? __might_fault+0xb0/0x130 [ 93.100004][ T5793] __se_sys_io_submit+0x185/0x2f0 [ 93.101694][ T5793] ? __pfx___se_sys_io_submit+0x10/0x10 [ 93.103542][ T5793] ? ksys_write+0x22a/0x250 [ 93.105061][ T5793] ? do_syscall_64+0xbe/0xfa0 [ 93.106645][ T5793] do_syscall_64+0xfa/0xfa0 [ 93.108217][ T5793] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.109953][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.111987][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 93.113568][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.115541][ T5793] RIP: 0033:0x7f346097e719 [ 93.117058][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.123383][ T5793] RSP: 002b:00007f34616ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 93.126129][ T5793] RAX: ffffffffffffffda RBX: 00007f3460b35f80 RCX: 00007f346097e719 [ 93.128765][ T5793] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f34616c5000 [ 93.131379][ T5793] RBP: 00007f34616ee090 R08: 0000000000000000 R09: 0000000000000000 [ 93.133988][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.136609][ T5793] R13: 0000000000000000 R14: 00007f3460b35f80 R15: 00007ffea1e0fce8 [ 93.139232][ T5793] [ 93.140909][ T5793] Kernel Offset: disabled [ 93.142404][ T5793] Rebooting in 86400 seconds..