Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.544620][ T4336] cgroup: Unknown subsys name 'net' [ 31.780116][ T4336] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.054104][ T4336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.056147][ T4402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.057871][ T4402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.059216][ T4402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.060798][ T4402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.062123][ T4402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.063433][ T4402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.234881][ T4412] chnl_net:caif_netlink_parms(): no params data found [ 37.250751][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.251895][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.253370][ T4412] device bridge_slave_0 entered promiscuous mode [ 37.255970][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.257174][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.260661][ T4412] device bridge_slave_1 entered promiscuous mode [ 37.267271][ T4412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.270911][ T4412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.278025][ T4412] team0: Port device team_slave_0 added [ 37.280272][ T4412] team0: Port device team_slave_1 added [ 37.285415][ T4412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.286556][ T4412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.291115][ T4412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.293719][ T4412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.294930][ T4412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.299609][ T4412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.348743][ T4412] device hsr_slave_0 entered promiscuous mode [ 37.387626][ T4412] device hsr_slave_1 entered promiscuous mode [ 37.468075][ T4412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.495997][ T4412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.545927][ T4412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.589787][ T4412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.654224][ T4412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.658341][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.660332][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.662981][ T4412] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.665372][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.667260][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.669465][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.670698][ T1654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.672421][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.675118][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.676804][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.679165][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.680332][ T1654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.691517][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.694383][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.697079][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.700628][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.702188][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.704946][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.706712][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.718293][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.719895][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.722583][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.724119][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.727554][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.779572][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.781054][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.784632][ T4412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.795385][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.797017][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.802688][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.804626][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.806332][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.808375][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.810616][ T4412] device veth0_vlan entered promiscuous mode [ 37.813695][ T4412] device veth1_vlan entered promiscuous mode [ 37.821306][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.822761][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.824321][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.826643][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.829399][ T4412] device veth0_macvtap entered promiscuous mode [ 37.831897][ T4412] device veth1_macvtap entered promiscuous mode [ 37.836902][ T4412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.839378][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.840917][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.842450][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.844093][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.854317][ T4412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.856127][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.860044][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.862564][ T4412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.864060][ T4412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.865559][ T4412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.866955][ T4412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.235377][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.236743][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.240191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.252147][ T1654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.253600][ T1654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.255028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:38 executed programs: 0 [ 38.435711][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.437373][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.440348][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.441960][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.443336][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.444625][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.610252][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.652008][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 38.666487][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.668133][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.669712][ T4434] device bridge_slave_0 entered promiscuous mode [ 38.671602][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.672961][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.674515][ T4434] device bridge_slave_1 entered promiscuous mode [ 38.681684][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.684157][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.690358][ T4434] team0: Port device team_slave_0 added [ 38.692078][ T4434] team0: Port device team_slave_1 added [ 38.697257][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.698742][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.703121][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.705551][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.706744][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.711439][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.758696][ T4434] device hsr_slave_0 entered promiscuous mode [ 38.797905][ T4434] device hsr_slave_1 entered promiscuous mode [ 38.837540][ T4434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.839079][ T4434] Cannot create hsr debugfs directory [ 40.477973][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 41.048879][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.567430][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 43.388542][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.469368][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.463848][ T4434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.566181][ T4434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.618877][ T4434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.637634][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 44.658542][ T4434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.763026][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.766301][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.768016][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.770493][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.772935][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.774511][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.776087][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.777291][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.868193][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.869773][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.871351][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.872792][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.873930][ T1654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.875358][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.877100][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.880127][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.881863][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.883482][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.885037][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.886655][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.888243][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.889658][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.891136][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.893598][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.895650][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.027605][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.028929][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.031857][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.036632][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.039550][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.045424][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.046934][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.048954][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.050493][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.053392][ T4434] device veth0_vlan entered promiscuous mode [ 45.056872][ T4434] device veth1_vlan entered promiscuous mode [ 45.063262][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.064790][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.066263][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.069682][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.105154][ T4434] device veth0_macvtap entered promiscuous mode [ 45.108165][ T4434] device veth1_macvtap entered promiscuous mode [ 45.112714][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.114424][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.116475][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.117990][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.119595][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.121051][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.122668][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.124920][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.126577][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.128741][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.129986][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.131555][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.133834][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.135302][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.136941][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.138576][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.188018][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.190122][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.193253][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.199025][ T1654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.200201][ T1654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.201738][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.333304][ T4526] loop0: detected capacity change from 0 to 32768 [ 45.340888][ T4526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4526) [ 45.347979][ T4526] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.349625][ T4526] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 45.350944][ T4526] BTRFS info (device loop0): force clearing of disk cache [ 45.352231][ T4526] BTRFS info (device loop0): enabling auto defrag [ 45.353433][ T4526] BTRFS info (device loop0): max_inline at 0 [ 45.354473][ T4526] BTRFS info (device loop0): enabling disk space caching [ 45.355567][ T4526] BTRFS info (device loop0): disk space caching is enabled [ 45.419448][ T4526] BTRFS info (device loop0): enabling ssd optimizations [ 45.423636][ T4526] BTRFS info (device loop0): rebuilding free space tree [ 45.431337][ T4526] BTRFS info (device loop0): disabling free space tree [ 45.432650][ T4526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 45.434316][ T4526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 45.453675][ T39] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 45.459419][ T4526] FAULT_INJECTION: forcing a failure. [ 45.459419][ T4526] name failslab, interval 1, probability 0, space 0, times 1 [ 45.461492][ T4526] CPU: 0 PID: 4526 Comm: syz.0.17 Not tainted syzkaller #0 [ 45.462590][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.464132][ T4526] Call trace: [ 45.464652][ T4526] dump_backtrace+0x1c0/0x1ec [ 45.465398][ T4526] show_stack+0x2c/0x3c [ 45.466069][ T4526] __dump_stack+0x30/0x40 [ 45.476889][ T4526] dump_stack_lvl+0xf4/0x15c [ 45.477705][ T4526] dump_stack+0x1c/0x5c [ 45.478440][ T4526] should_fail_ex+0x3c0/0x518 [ 45.479350][ T4526] __should_failslab+0xc0/0x120 [ 45.480212][ T4526] should_failslab+0x10/0x28 [ 45.481024][ T4526] __kmem_cache_alloc_node+0x7c/0x314 [ 45.481950][ T4526] kmalloc_trace+0x48/0x94 [ 45.482678][ T4526] ulist_add_merge+0x148/0x41c [ 45.483527][ T4526] ulist_add+0x40/0x54 [ 45.484200][ T4526] insert_state_fast+0x138/0x224 [ 45.485038][ T4526] __set_extent_bit+0x13f4/0x1964 [ 45.485911][ T4526] set_record_extent_bits+0x68/0x98 [ 45.486846][ T4526] qgroup_reserve_data+0x20c/0x8d4 [ 45.487791][ T4526] btrfs_qgroup_reserve_data+0x40/0xec [ 45.488760][ T4526] btrfs_check_data_free_space+0x12c/0x208 [ 45.489788][ T4526] btrfs_truncate_block+0x184/0xe34 [ 45.490751][ T4526] btrfs_cont_expand+0x114/0xa2c [ 45.491618][ T4526] btrfs_write_check+0x3e4/0x4e4 [ 45.492466][ T4526] btrfs_buffered_write+0x1a0/0xe04 [ 45.493329][ T4526] btrfs_do_write_iter+0x354/0x10ac [ 45.494299][ T4526] btrfs_file_write_iter+0x2c/0x3c [ 45.495127][ T4526] vfs_write+0x3ec/0x7f0 [ 45.495839][ T4526] __arm64_sys_pwrite64+0x174/0x20c [ 45.496726][ T4526] invoke_syscall+0x98/0x2b4 [ 45.497494][ T4526] el0_svc_common+0x138/0x258 [ 45.498262][ T4526] do_el0_svc+0x58/0x130 [ 45.498992][ T4526] el0_svc+0x58/0x128 [ 45.499715][ T4526] el0t_64_sync_handler+0x84/0xf0 [ 45.500573][ T4526] el0t_64_sync+0x18c/0x190 [ 45.501669][ T4526] ------------[ cut here ]------------ [ 45.502552][ T4526] kernel BUG at fs/btrfs/extent-io-tree.c:381! [ 45.503731][ T4526] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 45.505027][ T4526] Modules linked in: [ 45.505710][ T4526] CPU: 0 PID: 4526 Comm: syz.0.17 Not tainted syzkaller #0 [ 45.506999][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.508791][ T4526] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.510110][ T4526] pc : insert_state_fast+0x220/0x224 [ 45.510955][ T4526] lr : insert_state_fast+0x220/0x224 [ 45.511823][ T4526] sp : ffff800020f170c0 [ 45.512567][ T4526] x29: ffff800020f170c0 x28: ffff0000ea2a1400 x27: 0000000000007000 [ 45.513917][ T4526] x26: dfff800000000000 x25: 0000000000007fff x24: 00000000fffffff4 [ 45.515295][ T4526] x23: 0000000000001000 x22: ffff0000ef8e2490 x21: ffff0000ef8e2498 [ 45.516638][ T4526] x20: ffff0000ea2a1400 x19: ffff0000ef8e2cc0 x18: 0000000000000000 [ 45.517884][ T4526] x17: 0000000000000000 x16: ffff8000082d93d8 x15: 0000000000000000 [ 45.519248][ T4526] x14: 0000000000000001 x13: 1ffff00002a9af8e x12: 0000000000ff0100 [ 45.520581][ T4526] x11: ff0080000a18d164 x10: 0000000000000000 x9 : ffff80000a18d164 [ 45.521910][ T4526] x8 : ffff0000d4bd8000 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.523272][ T4526] x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000a20 [ 45.524767][ T4526] x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000 [ 45.526085][ T4526] Call trace: [ 45.526658][ T4526] insert_state_fast+0x220/0x224 [ 45.527473][ T4526] __set_extent_bit+0x13f4/0x1964 [ 45.528341][ T4526] set_record_extent_bits+0x68/0x98 [ 45.529253][ T4526] qgroup_reserve_data+0x20c/0x8d4 [ 45.530137][ T4526] btrfs_qgroup_reserve_data+0x40/0xec [ 45.531031][ T4526] btrfs_check_data_free_space+0x12c/0x208 [ 45.532002][ T4526] btrfs_truncate_block+0x184/0xe34 [ 45.532865][ T4526] btrfs_cont_expand+0x114/0xa2c [ 45.533715][ T4526] btrfs_write_check+0x3e4/0x4e4 [ 45.534502][ T4526] btrfs_buffered_write+0x1a0/0xe04 [ 45.535310][ T4526] btrfs_do_write_iter+0x354/0x10ac [ 45.536057][ T4526] btrfs_file_write_iter+0x2c/0x3c [ 45.536899][ T4526] vfs_write+0x3ec/0x7f0 [ 45.537538][ T4526] __arm64_sys_pwrite64+0x174/0x20c [ 45.538326][ T4526] invoke_syscall+0x98/0x2b4 [ 45.539025][ T4526] el0_svc_common+0x138/0x258 [ 45.539705][ T4526] do_el0_svc+0x58/0x130 [ 45.540307][ T4526] el0_svc+0x58/0x128 [ 45.540898][ T4526] el0t_64_sync_handler+0x84/0xf0 [ 45.541677][ T4526] el0t_64_sync+0x18c/0x190 [ 45.542430][ T4526] Code: aa1903e0 979d697f 17ffffa0 978c7975 (d4210000) [ 45.543646][ T4526] ---[ end trace 0000000000000000 ]--- [ 45.836444][ T4526] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 45.837597][ T4526] SMP: stopping secondary CPUs [ 45.838390][ T4526] Kernel Offset: disabled [ 45.839055][ T4526] CPU features: 0x080000,000f0097,a65bfea7 [ 45.839942][ T4526] Memory Limit: none [ 46.102346][ T4526] Rebooting in 86400 seconds..