Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts.
syzkaller login: [ 87.039080][ T10] cfg80211: failed to load regulatory.db
2026/02/22 08:27:57 parsed 1 programs
[ 90.377684][ T5799] cgroup: Unknown subsys name 'net'
[ 90.619102][ T5799] cgroup: Unknown subsys name 'cpuset'
[ 90.674247][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.693931][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.659986][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.661378][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.662027][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.663378][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.678231][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.920687][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.920702][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.963552][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.964133][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.090723][ T5858] chnl_net:caif_netlink_parms(): no params data found
[ 99.215369][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.216258][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.216377][ T5858] bridge_slave_0: entered allmulticast mode
[ 99.217977][ T5858] bridge_slave_0: entered promiscuous mode
[ 99.221599][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.221725][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.221853][ T5858] bridge_slave_1: entered allmulticast mode
[ 99.223340][ T5858] bridge_slave_1: entered promiscuous mode
[ 99.307460][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.310155][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.347199][ T5858] team0: Port device team_slave_0 added
[ 99.349329][ T5858] team0: Port device team_slave_1 added
[ 99.391555][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.391575][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.391604][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.438875][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.438891][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.438907][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.497125][ T5858] hsr_slave_0: entered promiscuous mode
[ 99.498116][ T5858] hsr_slave_1: entered promiscuous mode
[ 100.756873][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.803368][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.839362][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.858096][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.045809][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.072490][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.087642][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.088344][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.107797][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.108047][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.502805][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.550537][ T5858] veth0_vlan: entered promiscuous mode
[ 101.562497][ T5858] veth1_vlan: entered promiscuous mode
[ 101.601081][ T5858] veth0_macvtap: entered promiscuous mode
[ 101.611672][ T5858] veth1_macvtap: entered promiscuous mode
[ 101.635050][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.642684][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.667599][ T3534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.668757][ T3534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.668805][ T3534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.668843][ T3534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.480593][ T3534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.738493][ T3534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.966788][ T3534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.599340][ T3534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.715047][ T3534] bridge_slave_1: left allmulticast mode
[ 104.715247][ T3534] bridge_slave_1: left promiscuous mode
[ 104.717133][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.828471][ T3534] bridge_slave_0: left allmulticast mode
[ 104.828506][ T3534] bridge_slave_0: left promiscuous mode
[ 104.828757][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state
2026/02/22 08:28:14 executed programs: 0
[ 105.021108][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.033246][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.034894][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.037327][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.038098][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 105.574348][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.665418][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.685752][ T3534] bond0 (unregistering): Released all slaves
[ 106.053894][ T3534] hsr_slave_0: left promiscuous mode
[ 106.093767][ T3534] hsr_slave_1: left promiscuous mode
[ 106.095239][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 106.095309][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 106.157287][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 106.157316][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 106.245304][ T3534] veth1_macvtap: left promiscuous mode
[ 106.245470][ T3534] veth0_macvtap: left promiscuous mode
[ 106.246656][ T3534] veth1_vlan: left promiscuous mode
[ 106.246865][ T3534] veth0_vlan: left promiscuous mode
[ 106.974373][ T3534] team0 (unregistering): Port device team_slave_1 removed
[ 107.014379][ T3534] team0 (unregistering): Port device team_slave_0 removed
[ 107.115844][ T5113] Bluetooth: hci0: command tx timeout
[ 107.356084][ T5905] chnl_net:caif_netlink_parms(): no params data found
[ 107.534807][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.535011][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.535286][ T5905] bridge_slave_0: entered allmulticast mode
[ 107.538923][ T5905] bridge_slave_0: entered promiscuous mode
[ 107.545461][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.545662][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.545834][ T5905] bridge_slave_1: entered allmulticast mode
[ 107.548444][ T5905] bridge_slave_1: entered promiscuous mode
[ 107.595060][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.599285][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.655974][ T5905] team0: Port device team_slave_0 added
[ 107.660070][ T5905] team0: Port device team_slave_1 added
[ 107.707521][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.707539][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.707567][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.710029][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.710042][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.710070][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.866945][ T5905] hsr_slave_0: entered promiscuous mode
[ 107.868432][ T5905] hsr_slave_1: entered promiscuous mode
[ 109.193721][ T5113] Bluetooth: hci0: command tx timeout
[ 109.997762][ T5905] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.038262][ T5905] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.080606][ T5905] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.128271][ T5905] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.732706][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.801690][ T5905] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.826894][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.827045][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.829902][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.830674][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.205453][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.250354][ T5905] veth0_vlan: entered promiscuous mode
[ 111.261950][ T5905] veth1_vlan: entered promiscuous mode
[ 111.276786][ T5113] Bluetooth: hci0: command tx timeout
[ 111.300192][ T5905] veth0_macvtap: entered promiscuous mode
[ 111.304314][ T5905] veth1_macvtap: entered promiscuous mode
[ 111.321815][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.337974][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.351876][ T3534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.365725][ T3534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.368141][ T3534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.371584][ T3534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.563354][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.563379][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.622853][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.622878][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/22 08:28:21 executed programs: 2
[ 111.973071][ T6008] loop0: detected capacity change from 0 to 32768
[ 112.004356][ T6008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (6008)
[ 112.058805][ T6008] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 112.058846][ T6008] BTRFS info (device loop0): using sha256 checksum algorithm
[ 112.176398][ T6008] BTRFS info (device loop0): enabling ssd optimizations
[ 112.176425][ T6008] BTRFS info (device loop0): turning on async discard
[ 112.176443][ T6008] BTRFS info (device loop0): enabling free space tree
[ 112.432572][ T37] audit: type=1800 audit(1771748902.191:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 112.456069][ T6024] BTRFS info (device loop0): balance: start -d -m -s
[ 112.483369][ T3534] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 112.681180][ T6024] BTRFS info (device loop0): balance: canceled
[ 112.765825][ T5905] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 113.246615][ T6028] loop0: detected capacity change from 0 to 32768
[ 113.261109][ T6028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18 (6028)
[ 113.278323][ T6028] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 113.278360][ T6028] BTRFS info (device loop0): using sha256 checksum algorithm
[ 113.353874][ T5113] Bluetooth: hci0: command tx timeout
[ 113.423071][ T6028] BTRFS info (device loop0): enabling ssd optimizations
[ 113.423100][ T6028] BTRFS info (device loop0): turning on async discard
[ 113.423117][ T6028] BTRFS info (device loop0): enabling free space tree
[ 113.557142][ T6028] BTRFS info (device loop0): balance: start -d -m -s
[ 113.620443][ T3534] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 113.622323][ T37] audit: type=1800 audit(1771748903.391:3): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 113.627858][ T6028] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[ 113.668460][ T6044] ---------[ 113.668460][ T6044] ------------[ cut here ]------------
[ 113.668474][ T6044] ret
[ 113.668480][ T6044] WARNING: fs/btrfs/extent-tree.c:837 at lookup_inline_extent_backref+0x143e/0x1980, CPU#1: syz.0.18/6044
[ 113.668530][ T6044] Modules linked in:
[ 113.668549][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.668571][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 113.668582][ T6044] RIP: 0010:lookup_inline_extent_backref+0x143e/0x1980
[ 113.668613][ T6044] Code: d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 4d 4a 07 cc e8 82 1d e9 fd bb fe ff ff ff 4c 8b 74 24 50 e9 af fe ff ff 90 <0f> 0b 90 48 8b 84 24 88 00 00 00 48 b9 00 00 00 00 00 fc ff df 80
[ 113.668629][ T6044] RSP: 0018:ffffc90003b66dc0 EFLAGS: 00010202
[ 113.668646][ T6044] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888032d2dac0
[ 113.668660][ T6044] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 113.668671][ T6044] RBP: ffffc90003b66fe8 R08: 0000000000000000 R09: 0000000000000000
[ 113.668683][ T6044] R10: dffffc0000000000 R11: fffff94000224951 R12: 0000000000510000
[ 113.668697][ T6044] R13: ffff888044855c60 R14: 0000000000000009 R15: ffff88805b6b0000
[ 113.668711][ T6044] FS: 00007f14435fd6c0(0000) GS:ffff888126443000(0000) knlGS:0000000000000000
[ 113.668728][ T6044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.668741][ T6044] CR2: 0000200000002000 CR3: 000000003a9da000 CR4: 00000000003526f0
[ 113.668760][ T6044] Call Trace:
[ 113.668768][ T6044]
[ 113.668783][ T6044] ? kasan_save_track+0x3e/0x80
[ 113.668820][ T6044] ? btrfs_ioctl+0xa65/0xd00
[ 113.668840][ T6044] ? do_syscall_64+0x14d/0xf80
[ 113.668874][ T6044] ? __pfx_lookup_inline_extent_backref+0x10/0x10
[ 113.668935][ T6044] insert_inline_extent_backref+0xa8/0x300
[ 113.668982][ T6044] __btrfs_inc_extent_ref+0x271/0xa00
[ 113.669012][ T6044] ? reacquire_held_locks+0x104/0x190
[ 113.669043][ T6044] ? __pfx___btrfs_inc_extent_ref+0x10/0x10
[ 113.669073][ T6044] ? rt_spin_unlock+0x14f/0x200
[ 113.669106][ T6044] __btrfs_run_delayed_refs+0xf93/0x4240
[ 113.669178][ T6044] ? __pfx___btrfs_run_delayed_refs+0x10/0x10
[ 113.669213][ T6044] ? do_raw_spin_lock+0x12b/0x2f0
[ 113.669255][ T6044] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 113.669281][ T6044] ? lockdep_hardirqs_on+0x7a/0x110
[ 113.669306][ T6044] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 113.669332][ T6044] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 113.669352][ T6044] ? rt_spin_lock+0x1e0/0x400
[ 113.669390][ T6044] ? rt_spin_unlock+0x160/0x200
[ 113.669414][ T6044] btrfs_run_delayed_refs+0x191/0x3b0
[ 113.669445][ T6044] create_pending_snapshot+0x1141/0x3ac0
[ 113.669505][ T6044] ? __pfx_create_pending_snapshot+0x10/0x10
[ 113.669535][ T6044] ? __lock_acquire+0x6b5/0x2cf0
[ 113.669586][ T6044] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 113.669616][ T6044] create_pending_snapshots+0x17c/0x1c0
[ 113.669648][ T6044] btrfs_commit_transaction+0xf75/0x31a0
[ 113.669675][ T6044] ? btrfs_commit_transaction+0x1a2/0x31a0
[ 113.669715][ T6044] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 113.669734][ T6044] ? reacquire_held_locks+0x104/0x190
[ 113.669760][ T6044] ? __pfx_btrfs_commit_transaction+0x10/0x10
[ 113.669783][ T6044] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 113.669806][ T6044] ? rt_spin_unlock+0x14f/0x200
[ 113.669832][ T6044] ? rt_spin_unlock+0x160/0x200
[ 113.669857][ T6044] ? btrfs_qgroup_convert_reserved_meta+0x6cb/0xd50
[ 113.669896][ T6044] ? __pfx_autoremove_wake_function+0x10/0x10
[ 113.669926][ T6044] ? __pfx_btrfs_qgroup_convert_reserved_meta+0x10/0x10
[ 113.669961][ T6044] ? btrfs_record_root_in_trans+0x124/0x180
[ 113.669988][ T6044] btrfs_mksubvol+0x9bc/0x10a0
[ 113.670030][ T6044] ? __pfx_btrfs_mksubvol+0x10/0x10
[ 113.670060][ T6044] ? __fget_files+0x3a6/0x420
[ 113.670088][ T6044] btrfs_mksnapshot+0xab/0xf0
[ 113.670120][ T6044] __btrfs_ioctl_snap_create+0x534/0x750
[ 113.670155][ T6044] ? __pfx___btrfs_ioctl_snap_create+0x10/0x10
[ 113.670186][ T6044] ? rep_movs_alternative+0x4a/0x90
[ 113.670225][ T6044] ? _copy_from_user+0x94/0xb0
[ 113.670252][ T6044] btrfs_ioctl_snap_create_v2+0x1fb/0x3b0
[ 113.670276][ T6044] ? __fget_files+0x3a6/0x420
[ 113.670304][ T6044] btrfs_ioctl+0xa65/0xd00
[ 113.670327][ T6044] ? __pfx_btrfs_ioctl+0x10/0x10
[ 113.670349][ T6044] __se_sys_ioctl+0xff/0x170
[ 113.670381][ T6044] do_syscall_64+0x14d/0xf80
[ 113.670405][ T6044] ? trace_irq_disable+0x3b/0x150
[ 113.670427][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.670448][ T6044] ? clear_bhb_loop+0x40/0x90
[ 113.670473][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.670493][ T6044] RIP: 0033:0x7f1443fbc629
[ 113.670513][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 113.670528][ T6044] RSP: 002b:00007f14435fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 113.670547][ T6044] RAX: ffffffffffffffda RBX: 00007f1444236090 RCX: 00007f1443fbc629
[ 113.670561][ T6044] RDX: 0000200000001480 RSI: 0000000050009417 RDI: 0000000000000003
[ 113.670573][ T6044] RBP: 00007f1444052b39 R08: 0000000000000000 R09: 0000000000000000
[ 113.670585][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.670597][ T6044] R13: 00007f1444236128 R14: 00007f1444236090 R15: 00007ffc2861aba8
[ 113.670634][ T6044]
[ 113.670644][ T6044] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 113.670658][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.670679][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 113.670690][ T6044] Call Trace:
[ 113.670697][ T6044]
[ 113.670705][ T6044] vpanic+0x56c/0xa60
[ 113.670736][ T6044] ? __pfx__printk+0x10/0x10
[ 113.670758][ T6044] ? __pfx_vpanic+0x10/0x10
[ 113.670783][ T6044] ? is_bpf_text_address+0x292/0x2b0
[ 113.670809][ T6044] ? is_bpf_text_address+0x26/0x2b0
[ 113.670845][ T6044] panic+0xc5/0xd0
[ 113.670872][ T6044] ? __pfx_panic+0x10/0x10
[ 113.670921][ T6044] __warn+0x315/0x4f0
[ 113.670947][ T6044] ? lookup_inline_extent_backref+0x143e/0x1980
[ 113.670978][ T6044] ? lookup_inline_extent_backref+0x143e/0x1980
[ 113.671009][ T6044] __report_bug+0x29a/0x540
[ 113.671033][ T6044] ? unlock_up+0x5b4/0x5e0
[ 113.671057][ T6044] ? lookup_inline_extent_backref+0x143e/0x1980
[ 113.671094][ T6044] ? __pfx___report_bug+0x10/0x10
[ 113.671123][ T6044] ? btrfs_search_slot+0x2720/0x2d30
[ 113.671173][ T6044] ? lookup_inline_extent_backref+0x143e/0x1980
[ 113.671210][ T6044] report_bug+0x16a/0x220
[ 113.671235][ T6044] ? lookup_inline_extent_backref+0x143e/0x1980
[ 113.671263][ T6044] ? lookup_inline_extent_backref+0x1440/0x1980
[ 113.671291][ T6044] handle_bug+0x98/0x200
[ 113.671320][ T6044] exc_invalid_op+0x1a/0x50
[ 113.671348][ T6044] asm_exc_invalid_op+0x1a/0x20
[ 113.671367][ T6044] RIP: 0010:lookup_inline_extent_backref+0x143e/0x1980
[ 113.671396][ T6044] Code: d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 4d 4a 07 cc e8 82 1d e9 fd bb fe ff ff ff 4c 8b 74 24 50 e9 af fe ff ff 90 <0f> 0b 90 48 8b 84 24 88 00 00 00 48 b9 00 00 00 00 00 fc ff df 80
[ 113.671411][ T6044] RSP: 0018:ffffc90003b66dc0 EFLAGS: 00010202
[ 113.671428][ T6044] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888032d2dac0
[ 113.671440][ T6044] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 113.671451][ T6044] RBP: ffffc90003b66fe8 R08: 0000000000000000 R09: 0000000000000000
[ 113.671464][ T6044] R10: dffffc0000000000 R11: fffff94000224951 R12: 0000000000510000
[ 113.671478][ T6044] R13: ffff888044855c60 R14: 0000000000000009 R15: ffff88805b6b0000
[ 113.671518][ T6044] ? kasan_save_track+0x3e/0x80
[ 113.671553][ T6044] ? btrfs_ioctl+0xa65/0xd00
[ 113.671573][ T6044] ? do_syscall_64+0x14d/0xf80
[ 113.671606][ T6044] ? __pfx_lookup_inline_extent_backref+0x10/0x10
[ 113.671665][ T6044] insert_inline_extent_backref+0xa8/0x300
[ 113.671712][ T6044] __btrfs_inc_extent_ref+0x271/0xa00
[ 113.671742][ T6044] ? reacquire_held_locks+0x104/0x190
[ 113.671772][ T6044] ? __pfx___btrfs_inc_extent_ref+0x10/0x10
[ 113.671801][ T6044] ? rt_spin_unlock+0x14f/0x200
[ 113.671833][ T6044] __btrfs_run_delayed_refs+0xf93/0x4240
[ 113.671903][ T6044] ? __pfx___btrfs_run_delayed_refs+0x10/0x10
[ 113.671930][ T6044] ? do_raw_spin_lock+0x12b/0x2f0
[ 113.671972][ T6044] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 113.671997][ T6044] ? lockdep_hardirqs_on+0x7a/0x110
[ 113.672022][ T6044] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 113.672048][ T6044] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 113.672067][ T6044] ? rt_spin_lock+0x1e0/0x400
[ 113.672104][ T6044] ? rt_spin_unlock+0x160/0x200
[ 113.672128][ T6044] btrfs_run_delayed_refs+0x191/0x3b0
[ 113.672159][ T6044] create_pending_snapshot+0x1141/0x3ac0
[ 113.672226][ T6044] ? __pfx_create_pending_snapshot+0x10/0x10
[ 113.672256][ T6044] ? __lock_acquire+0x6b5/0x2cf0
[ 113.672306][ T6044] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 113.672336][ T6044] create_pending_snapshots+0x17c/0x1c0
[ 113.672367][ T6044] btrfs_commit_transaction+0xf75/0x31a0
[ 113.672393][ T6044] ? btrfs_commit_transaction+0x1a2/0x31a0
[ 113.672432][ T6044] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 113.672451][ T6044] ? reacquire_held_locks+0x104/0x190
[ 113.672477][ T6044] ? __pfx_btrfs_commit_transaction+0x10/0x10
[ 113.672500][ T6044] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 113.672523][ T6044] ? rt_spin_unlock+0x14f/0x200
[ 113.672548][ T6044] ? rt_spin_unlock+0x160/0x200
[ 113.672572][ T6044] ? btrfs_qgroup_convert_reserved_meta+0x6cb/0xd50
[ 113.672609][ T6044] ? __pfx_autoremove_wake_function+0x10/0x10
[ 113.672639][ T6044] ? __pfx_btrfs_qgroup_convert_reserved_meta+0x10/0x10
[ 113.672673][ T6044] ? btrfs_record_root_in_trans+0x124/0x180
[ 113.672699][ T6044] btrfs_mksubvol+0x9bc/0x10a0
[ 113.672740][ T6044] ? __pfx_btrfs_mksubvol+0x10/0x10
[ 113.672770][ T6044] ? __fget_files+0x3a6/0x420
[ 113.672797][ T6044] btrfs_mksnapshot+0xab/0xf0
[ 113.672829][ T6044] __btrfs_ioctl_snap_create+0x534/0x750
[ 113.672863][ T6044] ? __pfx___btrfs_ioctl_snap_create+0x10/0x10
[ 113.672894][ T6044] ? rep_movs_alternative+0x4a/0x90
[ 113.672925][ T6044] ? _copy_from_user+0x94/0xb0
[ 113.672951][ T6044] btrfs_ioctl_snap_create_v2+0x1fb/0x3b0
[ 113.672976][ T6044] ? __fget_files+0x3a6/0x420
[ 113.673002][ T6044] btrfs_ioctl+0xa65/0xd00
[ 113.673025][ T6044] ? __pfx_btrfs_ioctl+0x10/0x10
[ 113.673047][ T6044] __se_sys_ioctl+0xff/0x170
[ 113.673079][ T6044] do_syscall_64+0x14d/0xf80
[ 113.673103][ T6044] ? trace_irq_disable+0x3b/0x150
[ 113.673124][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.673144][ T6044] ? clear_bhb_loop+0x40/0x90
[ 113.673169][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.673188][ T6044] RIP: 0033:0x7f1443fbc629
[ 113.673213][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 113.673228][ T6044] RSP: 002b:00007f14435fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 113.673246][ T6044] RAX: ffffffffffffffda RBX: 00007f1444236090 RCX: 00007f1443fbc629
[ 113.673259][ T6044] RDX: 0000200000001480 RSI: 0000000050009417 RDI: 0000000000000003
[ 113.673272][ T6044] RBP: 00007f1444052b39 R08: 0000000000000000 R09: 0000000000000000
[ 113.673284][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.673295][ T6044] R13: 00007f1444236128 R14: 00007f1444236090 R15: 00007ffc2861aba8
[ 113.673330][ T6044]
[ 113.673485][ T6044] Kernel Offset: disabled