Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://36969 syzkaller login: [ 31.787954][ T4340] cgroup: Unknown subsys name 'net' [ 32.076898][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.349027][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 35.928892][ T1589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.930393][ T1589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.932990][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.942817][ T1659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.944273][ T1659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.945934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.339478][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 36.357593][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.358972][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.360519][ T4376] device bridge_slave_0 entered promiscuous mode [ 36.363136][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.364657][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.366124][ T4376] device bridge_slave_1 entered promiscuous mode [ 36.372322][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.374836][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.380882][ T4376] team0: Port device team_slave_0 added [ 36.382562][ T4376] team0: Port device team_slave_1 added [ 36.388238][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.389449][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.393355][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.396075][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.397228][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.401528][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.445622][ T4376] device hsr_slave_0 entered promiscuous mode [ 36.484584][ T4376] device hsr_slave_1 entered promiscuous mode [ 36.559098][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.624413][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.666305][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.715954][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.773262][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.774522][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.775933][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.777131][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.794284][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.798739][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.800996][ T1659] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.803013][ T1659] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.808841][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.812276][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.813906][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.815153][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.819403][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.821038][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.822196][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.829191][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.830862][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.834099][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.840711][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.843477][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.847291][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.901388][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.902893][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.907242][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.912307][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.919437][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.922004][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.923572][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.935782][ T4376] device veth0_vlan entered promiscuous mode [ 36.938907][ T4376] device veth1_vlan entered promiscuous mode [ 36.945796][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.947512][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.949723][ T4376] device veth0_macvtap entered promiscuous mode [ 36.952294][ T4376] device veth1_macvtap entered promiscuous mode [ 36.958798][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.960151][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.961840][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.963382][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.965993][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.968647][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.969861][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.971729][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.974214][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.976649][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.978101][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.979548][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.406994][ T4419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.408862][ T4419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.410319][ T4419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.412449][ T4419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.413988][ T4419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.416761][ T4419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:38 executed programs: 0 [ 38.036287][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.038139][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.039637][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.041039][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.042374][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.043680][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.356483][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 38.401863][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.403108][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.405279][ T4434] device bridge_slave_0 entered promiscuous mode [ 38.407031][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.408220][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.409778][ T4434] device bridge_slave_1 entered promiscuous mode [ 38.418304][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.420759][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.427141][ T4434] team0: Port device team_slave_0 added [ 38.429205][ T4434] team0: Port device team_slave_1 added [ 38.435668][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.436850][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.440848][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.443237][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.444759][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.448917][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.615575][ T4434] device hsr_slave_0 entered promiscuous mode [ 38.654510][ T4434] device hsr_slave_1 entered promiscuous mode [ 38.724392][ T4434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.725794][ T4434] Cannot create hsr debugfs directory [ 39.006253][ T4434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.084805][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 42.154326][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 42.485440][ T4434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.825520][ T4434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.916544][ T4434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.119280][ T4434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.205902][ T4434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.315795][ T4434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.355403][ T4434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.493914][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.497704][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.499163][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.501979][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.504705][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.506366][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.507898][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.509032][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.510492][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.512950][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.516501][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.518009][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.519163][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.567521][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.570361][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.572977][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.575356][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.577323][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.579671][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.581441][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.583926][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.585692][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.588421][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.589988][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.592248][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.669220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.670482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.673617][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.679097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.680774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.687282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.691752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.694033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.695769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.697925][ T4434] device veth0_vlan entered promiscuous mode [ 43.701229][ T4434] device veth1_vlan entered promiscuous mode [ 43.707504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.708938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.710513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.712067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.715791][ T4434] device veth0_macvtap entered promiscuous mode [ 43.747630][ T4434] device veth1_macvtap entered promiscuous mode [ 43.751827][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.753452][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.755853][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.757023][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.759224][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.760734][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.762925][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.767990][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.769937][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.772022][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.773249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.775078][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.778309][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.779753][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.781160][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.782517][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.843759][ T1659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.846495][ T1659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.848390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.853811][ T1659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.855605][ T1659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.856914][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.929450][ T512] device hsr_slave_0 left promiscuous mode [ 43.965649][ T512] device hsr_slave_1 left promiscuous mode [ 43.979210][ T4468] loop0: detected capacity change from 0 to 32768 [ 43.988226][ T4468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4468) [ 43.993048][ T4468] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 43.995241][ T4468] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 43.996747][ T4468] BTRFS info (device loop0): setting nodatacow, compression disabled [ 43.998086][ T4468] BTRFS info (device loop0): setting datasum, datacow enabled [ 43.999190][ T4468] BTRFS info (device loop0): force clearing of disk cache [ 44.000356][ T4468] BTRFS info (device loop0): enabling ssd optimizations [ 44.001427][ T4468] BTRFS info (device loop0): using spread ssd allocation scheme [ 44.002672][ T4468] BTRFS info (device loop0): turning on sync discard [ 44.003647][ T4468] BTRFS info (device loop0): turning off barriers [ 44.004905][ T4468] BTRFS info (device loop0): setting nodatacow, compression disabled [ 44.006301][ T4468] BTRFS info (device loop0): not using ssd optimizations [ 44.007400][ T4468] BTRFS info (device loop0): not using spread ssd allocation scheme [ 44.008641][ T4468] BTRFS info (device loop0): using free space tree [ 44.035174][ T512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.036550][ T512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.038819][ T512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.039972][ T512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.041430][ T512] device bridge_slave_1 left promiscuous mode [ 44.042720][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.081431][ T4468] BTRFS info (device loop0): rebuilding free space tree [ 44.085196][ T512] device bridge_slave_0 left promiscuous mode [ 44.086407][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.098738][ T4468] FAULT_INJECTION: forcing a failure. [ 44.098738][ T4468] name failslab, interval 1, probability 0, space 0, times 1 [ 44.100800][ T4468] CPU: 0 PID: 4468 Comm: syz.0.17 Not tainted syzkaller #0 [ 44.101863][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 44.103567][ T4468] Call trace: [ 44.104082][ T4468] dump_backtrace+0x1c4/0x1f0 [ 44.104867][ T4468] show_stack+0x2c/0x3c [ 44.105602][ T4468] __dump_stack+0x30/0x40 [ 44.106343][ T4468] dump_stack_lvl+0xf4/0x15c [ 44.107104][ T4468] dump_stack+0x1c/0x5c [ 44.107891][ T4468] should_fail_ex+0x3cc/0x524 [ 44.108639][ T4468] __should_failslab+0xc0/0x11c [ 44.109430][ T4468] should_failslab+0x10/0x28 [ 44.110332][ T4468] kmem_cache_alloc+0x88/0x310 [ 44.111131][ T4468] btrfs_alloc_tree_block+0x9bc/0x1178 [ 44.112114][ T4468] btrfs_force_cow_block+0x3ac/0x18c0 [ 44.113069][ T4468] btrfs_cow_block+0x2e0/0x71c [ 44.113907][ T4468] btrfs_search_slot+0xa48/0x2380 [ 44.114752][ T4468] lookup_inline_extent_backref+0x284/0xeb8 [ 44.115774][ T4468] __btrfs_free_extent+0x22c/0x2254 [ 44.116676][ T4468] __btrfs_run_delayed_refs+0xbb8/0x3368 [ 44.117684][ T4468] btrfs_run_delayed_refs+0x11c/0x474 [ 44.118602][ T4468] btrfs_commit_transaction+0x1e4/0x28e4 [ 44.119595][ T4468] btrfs_sync_fs+0x25c/0xa30 [ 44.120395][ T4468] sync_filesystem+0x1a0/0x218 [ 44.121158][ T4468] btrfs_remount+0x188/0x11b8 [ 44.121927][ T4468] legacy_reconfigure+0xfc/0x114 [ 44.122741][ T4468] reconfigure_super+0x1d4/0x7cc [ 44.123562][ T4468] path_mount+0xc98/0xe6c [ 44.124311][ T4468] __arm64_sys_mount+0x4a0/0x5a0 [ 44.125126][ T4468] invoke_syscall+0x98/0x290 [ 44.125968][ T4468] el0_svc_common+0x13c/0x258 [ 44.126864][ T4468] do_el0_svc+0x5c/0x134 [ 44.127543][ T4468] el0_svc+0x58/0x128 [ 44.128231][ T4468] el0t_64_sync_handler+0x84/0xf0 [ 44.129110][ T4468] el0t_64_sync+0x18c/0x190 [ 44.132544][ T4468] BTRFS: error (device loop0: state A) in __btrfs_free_extent:3092: errno=-12 Out of memory [ 44.134203][ T4468] BTRFS info (device loop0: state EA): forced readonly [ 44.136278][ T4468] BTRFS error (device loop0: state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -12 [ 44.138599][ T4468] BTRFS: error (device loop0: state EA) in btrfs_run_delayed_refs:2165: errno=-12 Out of memory [ 44.141021][ T4468] BTRFS error (device loop0: state EMA): Remounting read-write after error is not allowed [ 44.146587][ T4434] BTRFS info (device loop0: state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.183119][ T4434] ------------[ cut here ]------------ [ 44.184144][ T4434] WARNING: CPU: 1 PID: 4434 at fs/btrfs/space-info.h:191 btrfs_space_info_update_bytes_may_use+0x2f0/0x774 [ 44.186072][ T4434] Modules linked in: [ 44.186645][ T4434] CPU: 1 PID: 4434 Comm: syz-executor Not tainted syzkaller #0 [ 44.187954][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 44.189580][ T4434] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 44.190935][ T4434] pc : btrfs_space_info_update_bytes_may_use+0x2f0/0x774 [ 44.192077][ T4434] lr : btrfs_space_info_update_bytes_may_use+0x2ec/0x774 [ 44.193293][ T4434] sp : ffff8000212976b0 [ 44.193968][ T4434] x29: ffff8000212976c0 x28: ffff0000d3c42158 x27: 1fffe00019bb0f10 [ 44.195226][ T4434] x26: dfff800000000000 x25: ffff80001537d160 x24: 0000000000000002 [ 44.196525][ T4434] x23: 0000000000000005 x22: 0000000000160000 x21: 000000000015f000 [ 44.197767][ T4434] x20: ffff0000cdd87880 x19: 0000000000000000 x18: 1fffe00033e7697e [ 44.199013][ T4434] x17: ffff80001537d000 x16: ffff800011b8ee98 x15: 000000000004ffff [ 44.200267][ T4434] x14: ffff700004252ecc x13: 1ffff00004252ecc x12: 0000000000000004 [ 44.201517][ T4434] x11: ff0080000a1da56c x10: 0000000000000000 x9 : ffff80000a1da56c [ 44.202766][ T4434] x8 : ffff0000d559b800 x7 : 0000000000000000 x6 : 0000000000000000 [ 44.204009][ T4434] x5 : ffff8000186b0390 x4 : 0000000000000008 x3 : ffff8000082f265c [ 44.205251][ T4434] x2 : ffffffffffea0000 x1 : 0000000000160000 x0 : 000000000015f000 [ 44.206493][ T4434] Call trace: [ 44.207030][ T4434] btrfs_space_info_update_bytes_may_use+0x2f0/0x774 [ 44.208103][ T4434] btrfs_block_rsv_release+0x398/0x464 [ 44.208987][ T4434] btrfs_release_global_block_rsv+0x38/0x22c [ 44.209971][ T4434] btrfs_free_block_groups+0x904/0xaec [ 44.210801][ T4434] close_ctree+0x60c/0xa84 [ 44.211576][ T4434] btrfs_put_super+0x70/0x80 [ 44.212370][ T4434] generic_shutdown_super+0x138/0x32c [ 44.213308][ T4434] kill_anon_super+0x4c/0x80 [ 44.214056][ T4434] btrfs_kill_super+0x44/0x5c [ 44.214844][ T4434] deactivate_locked_super+0xb4/0x128 [ 44.215732][ T4434] deactivate_super+0xe4/0x104 [ 44.216494][ T4434] cleanup_mnt+0x3a8/0x430 [ 44.217285][ T4434] __cleanup_mnt+0x20/0x30 [ 44.218058][ T4434] task_work_run+0x1f4/0x280 [ 44.218847][ T4434] do_notify_resume+0x20f8/0x2c84 [ 44.219658][ T4434] el0_svc+0x98/0x128 [ 44.220311][ T4434] el0t_64_sync_handler+0x84/0xf0 [ 44.221145][ T4434] el0t_64_sync+0x18c/0x190 [ 44.221896][ T4434] irq event stamp: 163814 [ 44.222608][ T4434] hardirqs last enabled at (163813): [] kasan_quarantine_put+0xc4/0x200 [ 44.224195][ T4434] hardirqs last disabled at (163814): [] el1_dbg+0x24/0x80 [ 44.225603][ T4434] softirqs last enabled at (162408): [] local_bh_enable+0x10/0x34 [ 44.227332][ T4434] softirqs last disabled at (162406): [] local_bh_disable+0x10/0x34 [ 44.228944][ T4434] ---[ end trace 0000000000000000 ]--- [ 44.236247][ T512] device veth1_macvtap left promiscuous mode [ 44.237398][ T512] device veth0_macvtap left promiscuous mode [ 44.238356][ T512] device veth1_vlan left promiscuous mode [ 44.239334][ T512] device veth0_vlan left promiscuous mode [ 44.244508][ T47] Bluetooth: hci0: command 0x040f tx timeout