[ 51.487888][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.509443][ T44] device veth1_macvtap left promiscuous mode [ 51.515994][ T44] device veth0_macvtap left promiscuous mode [ 51.523057][ T44] device veth1_vlan left promiscuous mode [ 51.530659][ T44] device veth0_vlan left promiscuous mode [ 51.732048][ T44] team0 (unregistering): Port device team_slave_1 removed [ 51.744566][ T44] team0 (unregistering): Port device team_slave_0 removed [ 51.756555][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.770114][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.815242][ T44] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. [ 65.688986][ T4049] loop0: detected capacity change from 0 to 264192 [ 65.703268][ T4049] BTRFS: device fsid 9ef2b0c0-0642-4475-a2ba-d53d18884f0b devid 1 transid 7 /dev/loop0 scanned by syz-executor700 (4049) [ 65.738502][ T4049] BTRFS info (device loop0): disk space caching is enabled [ 65.746140][ T4049] BTRFS info (device loop0): has skinny extents [ 65.772245][ T4049] BTRFS info (device loop0): enabling ssd optimizations [ 65.784494][ T44] BTRFS error (device loop0): bad tree block start, want 30449664 have 0 [ 65.794378][ T55] BTRFS error (device loop0): bad tree block start, want 30449664 have 0 [ 65.815164][ T4049] general protection fault, probably for non-canonical address 0xdffffc000000002f: 0000 [#1] PREEMPT SMP KASAN [ 65.827252][ T4049] KASAN: null-ptr-deref in range [0x0000000000000178-0x000000000000017f] [ 65.835878][ T4049] CPU: 1 PID: 4049 Comm: syz-executor700 Not tainted 5.17.0-rc2-syzkaller #0 [ 65.844617][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.854655][ T4049] RIP: 0010:submit_bio_checks+0x61f/0x17a0 [ 65.860530][ T4049] Code: 74 08 3c 03 0f 8e ba 0e 00 00 48 b8 00 00 00 00 00 fc ff df 41 8b 6f 10 83 e5 01 49 8d bc 2e 7c 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 7a 0e 00 00 [ 65.880119][ T4049] RSP: 0018:ffffc900026ef2e0 EFLAGS: 00010203 [ 65.886251][ T4049] RAX: dffffc0000000000 RBX: 1ffff920004dde63 RCX: ffff88801ba61214 [ 65.894200][ T4049] RDX: 000000000000002f RSI: 0000000000000008 RDI: 000000000000017d [ 65.902234][ T4049] RBP: 0000000000000001 R08: 0000000000000000 R09: ffff88814700b96f [ 65.910182][ T4049] R10: ffffed1028e0172d R11: 0000000000000000 R12: ffff88801ba61210 [ 65.918208][ T4049] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801ba61200 [ 65.926449][ T4049] FS: 00005555566e9300(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 65.935346][ T4049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.941901][ T4049] CR2: 00007fdb355e2c28 CR3: 00000000797cf000 CR4: 00000000003506e0 [ 65.949857][ T4049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.957997][ T4049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.965948][ T4049] Call Trace: [ 65.969213][ T4049] [ 65.972123][ T4049] ? add_lock_to_list.constprop.0+0x185/0x370 [ 65.978164][ T4049] ? should_fail_request+0x60/0x60 [ 65.983252][ T4049] ? lock_acquire+0x1ab/0x510 [ 65.988019][ T4049] __submit_bio+0xa9/0x2f0 [ 65.992400][ T4049] ? submit_bio_checks+0x17a0/0x17a0 [ 65.997653][ T4049] submit_bio_noacct+0x5c8/0x830 [ 66.002555][ T4049] ? __mutex_lock+0x21a/0x12f0 [ 66.007287][ T4049] ? __submit_bio+0x2f0/0x2f0 [ 66.011939][ T4049] ? mutex_lock_io_nested+0x1150/0x1150 [ 66.017449][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 66.022280][ T4049] submit_bio+0x158/0x360 [ 66.026605][ T4049] ? lockdep_init_map_type+0x2c3/0x7b0 [ 66.032053][ T4049] ? submit_bio_noacct+0x830/0x830 [ 66.037224][ T4049] ? lockdep_init_map_type+0x2c3/0x7b0 [ 66.042687][ T4049] write_all_supers+0x29b4/0x3460 [ 66.047693][ T4049] ? btrfs_get_num_tolerated_disk_barrier_failures+0x170/0x170 [ 66.055204][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 66.060025][ T4049] ? btrfs_free_redirty_list+0x2c/0x200 [ 66.065541][ T4049] btrfs_commit_transaction+0x1520/0x26f0 [ 66.071249][ T4049] ? btrfs_apply_pending_changes+0x50/0x50 [ 66.077026][ T4049] ? start_transaction+0x21c/0x10c0 [ 66.082208][ T4049] close_ctree+0x2bc/0xa8f [ 66.086611][ T4049] ? btrfs_cleanup_one_transaction.cold+0x40/0x40 [ 66.092998][ T4049] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 66.099295][ T4049] ? call_rcu+0x2dd/0x740 [ 66.103598][ T4049] ? lockdep_hardirqs_on+0x79/0x100 [ 66.108763][ T4049] ? btrfs_put_root+0x25/0x220 [ 66.113493][ T4049] ? btrfs_iget+0x17f/0x1c0 [ 66.118052][ T4049] ? btrfs_orphan_cleanup+0x5c0/0x5c0 [ 66.123389][ T4049] btrfs_mount_root.cold+0x83/0x118 [ 66.128566][ T4049] ? parse_rescue_options+0x2a0/0x2a0 [ 66.133906][ T4049] ? kfree+0x1bc/0x280 [ 66.137943][ T4049] ? vfs_parse_fs_string+0xd2/0x120 [ 66.143107][ T4049] ? vfs_parse_fs_param+0x360/0x360 [ 66.148270][ T4049] ? parse_rescue_options+0x2a0/0x2a0 [ 66.153655][ T4049] legacy_get_tree+0xfa/0x1f0 [ 66.158297][ T4049] vfs_get_tree+0x7f/0x2c0 [ 66.162683][ T4049] vfs_kern_mount.part.0+0x70/0x100 [ 66.167851][ T4049] btrfs_mount+0x1aa/0x860 [ 66.172253][ T4049] ? btrfs_show_options+0xeb0/0xeb0 [ 66.177421][ T4049] ? rcu_read_lock_sched_held+0x3a/0x70 [ 66.182949][ T4049] ? kfree+0x1bc/0x280 [ 66.186987][ T4049] ? vfs_parse_fs_string+0xd2/0x120 [ 66.192168][ T4049] ? vfs_parse_fs_param+0x360/0x360 [ 66.197334][ T4049] ? btrfs_show_options+0xeb0/0xeb0 [ 66.202497][ T4049] legacy_get_tree+0xfa/0x1f0 [ 66.207139][ T4049] vfs_get_tree+0x7f/0x2c0 [ 66.211527][ T4049] path_mount+0x7e8/0x1a40 [ 66.215929][ T4049] ? slab_free_freelist_hook+0x8b/0x1c0 [ 66.221443][ T4049] ? finish_automount+0x900/0x900 [ 66.226429][ T4049] ? kmem_cache_free+0xd8/0x340 [ 66.231250][ T4049] __x64_sys_mount+0x1f5/0x260 [ 66.235995][ T4049] ? copy_mnt_ns+0xd20/0xd20 [ 66.240553][ T4049] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 66.246501][ T4049] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.252359][ T4049] do_syscall_64+0x35/0xb0 [ 66.256741][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.262634][ T4049] RIP: 0033:0x7f9c6f128d6a [ 66.267033][ T4049] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.286608][ T4049] RSP: 002b:00007ffeed457828 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 66.294989][ T4049] RAX: ffffffffffffffda RBX: 00007ffeed457880 RCX: 00007f9c6f128d6a [ 66.302964][ T4049] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffeed457840 [ 66.310912][ T4049] RBP: 00007ffeed457840 R08: 00007ffeed457880 R09: 0000000000000000 [ 66.318878][ T4049] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000020000f50 [ 66.326823][ T4049] R13: 0000000000000003 R14: 0000000000000004 R15: 000000000000008e [ 66.334766][ T4049] [ 66.337758][ T4049] Modules linked in: [ 66.346949][ T4049] ---[ end trace 0000000000000000 ]--- [ 66.352426][ T4049] RIP: 0010:submit_bio_checks+0x61f/0x17a0 [ 66.358505][ T4049] Code: 74 08 3c 03 0f 8e ba 0e 00 00 48 b8 00 00 00 00 00 fc ff df 41 8b 6f 10 83 e5 01 49 8d bc 2e 7c 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 7a 0e 00 00 [ 66.378316][ T4049] RSP: 0018:ffffc900026ef2e0 EFLAGS: 00010203 [ 66.384497][ T4049] RAX: dffffc0000000000 RBX: 1ffff920004dde63 RCX: ffff88801ba61214 [ 66.392461][ T4049] RDX: 000000000000002f RSI: 0000000000000008 RDI: 000000000000017d [ 66.400475][ T4049] RBP: 0000000000000001 R08: 0000000000000000 R09: ffff88814700b96f [ 66.408456][ T4049] R10: ffffed1028e0172d R11: 0000000000000000 R12: ffff88801ba61210 [ 66.417025][ T4049] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801ba61200 [ 66.425009][ T4049] FS: 00005555566e9300(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 66.433972][ T4049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.440654][ T4049] CR2: 00007f31e169a600 CR3: 00000000797cf000 CR4: 00000000003506e0 [ 66.448786][ T4049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.456778][ T4049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.464762][ T4049] Kernel panic - not syncing: Fatal exception [ 66.471061][ T4049] Kernel Offset: disabled [ 66.475411][ T4049] Rebooting in 86400 seconds..