Warning: Permanently added '[localhost]:9231' (ED25519) to the list of known hosts. 2025/08/16 21:41:19 ignoring optional flag "sandboxArg"="0" 2025/08/16 21:41:20 parsed 1 programs syzkaller login: [ 51.843515][ T5847] cgroup: Unknown subsys name 'net' [ 51.951980][ T5847] cgroup: Unknown subsys name 'cpuset' [ 51.955751][ T5847] cgroup: Unknown subsys name 'rlimit' [ 53.807300][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.980873][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.430200][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 57.480787][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.483598][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.485946][ T5903] bridge_slave_0: entered allmulticast mode [ 57.488686][ T5903] bridge_slave_0: entered promiscuous mode [ 57.492686][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.495048][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.497416][ T5903] bridge_slave_1: entered allmulticast mode [ 57.500460][ T5903] bridge_slave_1: entered promiscuous mode [ 57.561647][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.568007][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.603691][ T5903] team0: Port device team_slave_0 added [ 57.608403][ T5903] team0: Port device team_slave_1 added [ 57.636546][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.640310][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.651909][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.659030][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.662681][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.674598][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.714818][ T5903] hsr_slave_0: entered promiscuous mode [ 57.718060][ T5903] hsr_slave_1: entered promiscuous mode [ 57.862571][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.867907][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.872453][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.876683][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.923358][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.935774][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.942898][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.945427][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.952890][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.955644][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.054137][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.079105][ T5903] veth0_vlan: entered promiscuous mode [ 58.086303][ T5903] veth1_vlan: entered promiscuous mode [ 58.103778][ T5903] veth0_macvtap: entered promiscuous mode [ 58.107793][ T5903] veth1_macvtap: entered promiscuous mode [ 58.117575][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.124390][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.133669][ T5719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.137601][ T5719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.141427][ T5719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.146281][ T5719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.221811][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.225591][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.234076][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.235582][ T5910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.241696][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.245136][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.301149][ T5910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.356562][ T5910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.431249][ T5910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.784293][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.787036][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.807089][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.810799][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/16 21:41:29 executed programs: 0 [ 59.052365][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.055441][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.058100][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.061280][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.064110][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.193831][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 59.240844][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.243541][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.245876][ T5951] bridge_slave_0: entered allmulticast mode [ 59.248552][ T5951] bridge_slave_0: entered promiscuous mode [ 59.252309][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.254678][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.257099][ T5951] bridge_slave_1: entered allmulticast mode [ 59.259825][ T5951] bridge_slave_1: entered promiscuous mode [ 59.283466][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.288229][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.311046][ T5951] team0: Port device team_slave_0 added [ 59.314950][ T5951] team0: Port device team_slave_1 added [ 59.332403][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.334684][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.345734][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.350348][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.352629][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.361644][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.388761][ T5951] hsr_slave_0: entered promiscuous mode [ 59.391403][ T5951] hsr_slave_1: entered promiscuous mode [ 59.393723][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 59.395760][ T5951] Cannot create hsr debugfs directory [ 61.120705][ T5926] Bluetooth: hci0: command tx timeout [ 61.215714][ T5910] bridge_slave_1: left allmulticast mode [ 61.217621][ T5910] bridge_slave_1: left promiscuous mode [ 61.221460][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.228341][ T5910] bridge_slave_0: left allmulticast mode [ 61.231034][ T5910] bridge_slave_0: left promiscuous mode [ 61.233400][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.432972][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.437672][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.442976][ T5910] bond0 (unregistering): Released all slaves [ 61.518183][ T5910] hsr_slave_0: left promiscuous mode [ 61.524219][ T5910] hsr_slave_1: left promiscuous mode [ 61.526903][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.530099][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.533887][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.536922][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.550123][ T5910] veth1_macvtap: left promiscuous mode [ 61.552596][ T5910] veth0_macvtap: left promiscuous mode [ 61.555018][ T5910] veth1_vlan: left promiscuous mode [ 61.557351][ T5910] veth0_vlan: left promiscuous mode [ 61.743876][ T5910] team0 (unregistering): Port device team_slave_1 removed [ 61.758729][ T5910] team0 (unregistering): Port device team_slave_0 removed [ 62.164685][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.174388][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.181290][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.189888][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.357740][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.366898][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.372472][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.374748][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.381425][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.383703][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.518935][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.538810][ T5951] veth0_vlan: entered promiscuous mode [ 62.544949][ T5951] veth1_vlan: entered promiscuous mode [ 62.558893][ T5951] veth0_macvtap: entered promiscuous mode [ 62.563706][ T5951] veth1_macvtap: entered promiscuous mode [ 62.579673][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.595732][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.603399][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.606271][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609060][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.613449][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.647999][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.651939][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.671518][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.674064][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.800849][ T5996] loop0: detected capacity change from 0 to 32768 [ 62.807465][ T5996] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5996) [ 62.818298][ T5996] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 62.821898][ T5996] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 62.825141][ T5996] BTRFS info (device loop0): disk space caching is enabled [ 62.827827][ T5996] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 62.844516][ T5996] BTRFS info (device loop0): rebuilding free space tree [ 62.854836][ T5996] BTRFS info (device loop0): disabling free space tree [ 62.857245][ T5996] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 62.860862][ T5996] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 62.880680][ T5951] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 62.899878][ T5951] page: refcount:4 mapcount:0 mapping:ffff88802bf285c0 index:0x101 pfn:0x201c5 [ 62.902849][ T5951] aops:btree_aops ino:1 [ 62.904411][ T5951] flags: 0xfff00000004008(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 62.907237][ T5951] raw: 00fff00000004008 0000000000000000 dead000000000122 ffff88802bf285c0 [ 62.910318][ T5951] raw: 0000000000000101 ffff8880285a01e0 00000004ffffffff 0000000000000000 [ 62.913137][ T5951] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 62.916041][ T5951] page_owner tracks the page as allocated [ 62.917950][ T5951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x8c40(GFP_NOFS|__GFP_NOFAIL), pid 5996, tgid 5996 (syz.0.17), ts 62838362260, free_ts 62838334038 [ 62.923800][ T5951] post_alloc_hook+0x240/0x2a0 [ 62.925358][ T5951] get_page_from_freelist+0x21e4/0x22c0 [ 62.927162][ T5951] __alloc_frozen_pages_noprof+0x181/0x370 [ 62.929041][ T5951] alloc_pages_bulk_noprof+0x560/0x710 [ 62.931105][ T5951] alloc_eb_folio_array+0xfc/0x4a0 [ 62.932856][ T5951] alloc_extent_buffer+0x38c/0x2a40 [ 62.934935][ T5951] load_super_root+0x136/0x3f0 [ 62.936862][ T5951] open_ctree+0x1800/0x3a80 [ 62.938350][ T5951] btrfs_get_tree+0xf55/0x1820 [ 62.940269][ T5951] vfs_get_tree+0x92/0x2b0 [ 62.941752][ T5951] do_new_mount+0x2a2/0x9e0 [ 62.943278][ T5951] __se_sys_mount+0x317/0x410 [ 62.944831][ T5951] do_syscall_64+0xfa/0x3b0 [ 62.946299][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.948224][ T5951] page last free pid 5996 tgid 5996 stack trace: [ 62.950743][ T5951] __free_frozen_pages+0xbc4/0xd30 [ 62.952433][ T5951] __folio_put+0x21b/0x2c0 [ 62.953920][ T5951] detach_extent_buffer_folio+0x5dc/0x730 [ 62.955817][ T5951] btrfs_release_extent_buffer_folios+0xc9/0x4b0 [ 62.957915][ T5951] release_extent_buffer+0x16b/0x240 [ 62.959988][ T5951] btrfs_read_sys_array+0x2ea/0x4a0 [ 62.961734][ T5951] open_ctree+0x16fe/0x3a80 [ 62.963251][ T5951] btrfs_get_tree+0xf55/0x1820 [ 62.964851][ T5951] vfs_get_tree+0x92/0x2b0 [ 62.966343][ T5951] do_new_mount+0x2a2/0x9e0 [ 62.967861][ T5951] __se_sys_mount+0x317/0x410 [ 62.969695][ T5951] do_syscall_64+0xfa/0x3b0 [ 62.971479][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.973519][ T5951] ------------[ cut here ]------------ [ 62.975340][ T5951] WARNING: CPU: 0 PID: 5951 at ./include/linux/memcontrol.h:734 folio_lruvec_lock_irqsave+0x184/0x1d0 [ 62.978903][ T5951] Modules linked in: [ 62.981083][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) [ 62.985459][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.988748][ T5951] RIP: 0010:folio_lruvec_lock_irqsave+0x184/0x1d0 [ 62.991151][ T5951] Code: 74 0c 4c 89 f7 e8 cc 53 f8 ff 48 8b 04 24 49 89 06 eb a0 48 89 df 48 c7 c6 60 4e 98 8b e8 a4 36 fd fe c6 05 52 a1 62 0d 01 90 <0f> 0b 90 e9 a5 fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 22 [ 62.997433][ T5951] RSP: 0018:ffffc9000359f540 EFLAGS: 00010246 [ 62.999642][ T5951] RAX: f0f9782cf8520600 RBX: ffffea0000807140 RCX: f0f9782cf8520600 [ 63.002357][ T5951] RDX: 0000000000000002 RSI: ffffffff8dba6067 RDI: ffff888020a73980 [ 63.004983][ T5951] RBP: ffffc9000359f5e0 R08: ffff88804b024253 R09: 1ffff1100960484a [ 63.007613][ T5951] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff88804b032fe8 [ 63.010341][ T5951] R13: ffff88801ba80918 R14: ffff888106950000 R15: 0000000000000000 [ 63.012930][ T5951] FS: 0000555587fa3500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000 [ 63.015861][ T5951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.018010][ T5951] CR2: 000000c00003e720 CR3: 0000000029a9c000 CR4: 00000000000006f0 [ 63.020717][ T5951] Call Trace: [ 63.021852][ T5951] [ 63.022845][ T5951] folio_batch_move_lru+0x20a/0x3a0 [ 63.024584][ T5951] ? __pfx_lru_add+0x10/0x10 [ 63.026145][ T5951] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 63.028018][ T5951] lru_add_drain_cpu+0x119/0x880 [ 63.029768][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.031336][ T5951] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 63.033288][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.034854][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.036431][ T5951] lru_add_drain+0x122/0x3e0 [ 63.037967][ T5951] __folio_batch_release+0x48/0x90 [ 63.040016][ T5951] invalidate_inode_pages2_range+0x889/0xa80 [ 63.041976][ T5951] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 63.044076][ T5951] ? do_raw_read_unlock+0x3d/0x80 [ 63.045708][ T5951] ? btrfs_next_block_group+0x14e/0x190 [ 63.047490][ T5951] close_ctree+0x6ff/0x1380 [ 63.049008][ T5951] ? rcu_is_watching+0x15/0xb0 [ 63.050780][ T5951] ? __pfx_close_ctree+0x10/0x10 [ 63.052401][ T5951] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 63.054229][ T5951] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 63.056205][ T5951] ? __rcu_read_unlock+0x84/0xe0 [ 63.057855][ T5951] ? btrfs_put_super+0x48/0x1b0 [ 63.059573][ T5951] ? __pfx_btrfs_put_super+0x10/0x10 [ 63.061341][ T5951] generic_shutdown_super+0x135/0x2c0 [ 63.063038][ T5951] kill_anon_super+0x3b/0x70 [ 63.064547][ T5951] btrfs_kill_super+0x41/0x50 [ 63.066069][ T5951] deactivate_locked_super+0xbc/0x130 [ 63.067850][ T5951] cleanup_mnt+0x425/0x4c0 [ 63.069379][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 63.071071][ T5951] task_work_run+0x1d4/0x260 [ 63.072580][ T5951] ? __pfx_task_work_run+0x10/0x10 [ 63.074268][ T5951] ? __x64_sys_umount+0x122/0x160 [ 63.075906][ T5951] ? exit_to_user_mode_loop+0x40/0x110 [ 63.077681][ T5951] exit_to_user_mode_loop+0xec/0x110 [ 63.079457][ T5951] do_syscall_64+0x2bd/0x3b0 [ 63.080959][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 63.082653][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.084594][ T5951] ? exc_page_fault+0x9f/0xf0 [ 63.086144][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.088073][ T5951] RIP: 0033:0x7f4a78b8ff17 [ 63.089714][ T5951] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 63.095930][ T5951] RSP: 002b:00007ffe33fe80a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.098681][ T5951] RAX: 0000000000000000 RBX: 00007f4a78c11c05 RCX: 00007f4a78b8ff17 [ 63.101312][ T5951] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe33fe8160 [ 63.103831][ T5951] RBP: 00007ffe33fe8160 R08: 0000000000000000 R09: 0000000000000000 [ 63.106369][ T5951] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe33fe91f0 [ 63.108970][ T5951] R13: 00007f4a78c11c05 R14: 000000000000f471 R15: 00007ffe33fe9230 [ 63.111677][ T5951] [ 63.112737][ T5951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.115178][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) [ 63.119612][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.122888][ T5951] Call Trace: [ 63.124027][ T5951] [ 63.125145][ T5951] dump_stack_lvl+0x99/0x250 [ 63.126701][ T5951] ? __asan_memcpy+0x40/0x70 [ 63.128241][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.129930][ T5951] ? __pfx__printk+0x10/0x10 [ 63.131460][ T5951] vpanic+0x281/0x750 [ 63.132778][ T5951] ? __pfx__printk+0x10/0x10 [ 63.134300][ T5951] ? __pfx_vpanic+0x10/0x10 [ 63.135793][ T5951] ? is_bpf_text_address+0x26/0x2b0 [ 63.137488][ T5951] panic+0xb9/0xc0 [ 63.138721][ T5951] ? __pfx_panic+0x10/0x10 [ 63.140200][ T5951] __warn+0x31b/0x4b0 [ 63.141520][ T5951] ? folio_lruvec_lock_irqsave+0x184/0x1d0 [ 63.143428][ T5951] ? folio_lruvec_lock_irqsave+0x184/0x1d0 [ 63.145300][ T5951] report_bug+0x2be/0x4f0 [ 63.146754][ T5951] ? folio_lruvec_lock_irqsave+0x184/0x1d0 [ 63.148696][ T5951] ? folio_lruvec_lock_irqsave+0x184/0x1d0 [ 63.150626][ T5951] ? folio_lruvec_lock_irqsave+0x186/0x1d0 [ 63.152502][ T5951] handle_bug+0x84/0x160 [ 63.153848][ T5951] exc_invalid_op+0x1a/0x50 [ 63.155330][ T5951] asm_exc_invalid_op+0x1a/0x20 [ 63.156966][ T5951] RIP: 0010:folio_lruvec_lock_irqsave+0x184/0x1d0 [ 63.159045][ T5951] Code: 74 0c 4c 89 f7 e8 cc 53 f8 ff 48 8b 04 24 49 89 06 eb a0 48 89 df 48 c7 c6 60 4e 98 8b e8 a4 36 fd fe c6 05 52 a1 62 0d 01 90 <0f> 0b 90 e9 a5 fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 22 [ 63.165199][ T5951] RSP: 0018:ffffc9000359f540 EFLAGS: 00010246 [ 63.167228][ T5951] RAX: f0f9782cf8520600 RBX: ffffea0000807140 RCX: f0f9782cf8520600 [ 63.169827][ T5951] RDX: 0000000000000002 RSI: ffffffff8dba6067 RDI: ffff888020a73980 [ 63.172426][ T5951] RBP: ffffc9000359f5e0 R08: ffff88804b024253 R09: 1ffff1100960484a [ 63.174999][ T5951] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff88804b032fe8 [ 63.177598][ T5951] R13: ffff88801ba80918 R14: ffff888106950000 R15: 0000000000000000 [ 63.180139][ T5951] folio_batch_move_lru+0x20a/0x3a0 [ 63.181832][ T5951] ? __pfx_lru_add+0x10/0x10 [ 63.183326][ T5951] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 63.185168][ T5951] lru_add_drain_cpu+0x119/0x880 [ 63.186774][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.188323][ T5951] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 63.190081][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.191661][ T5951] ? lru_add_drain+0x79/0x3e0 [ 63.193231][ T5951] lru_add_drain+0x122/0x3e0 [ 63.194774][ T5951] __folio_batch_release+0x48/0x90 [ 63.196454][ T5951] invalidate_inode_pages2_range+0x889/0xa80 [ 63.198412][ T5951] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 63.200505][ T5951] ? do_raw_read_unlock+0x3d/0x80 [ 63.202190][ T5951] ? btrfs_next_block_group+0x14e/0x190 [ 63.203960][ T5951] close_ctree+0x6ff/0x1380 [ 63.205449][ T5951] ? rcu_is_watching+0x15/0xb0 [ 63.207006][ T5951] ? __pfx_close_ctree+0x10/0x10 [ 63.208620][ T5951] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 63.210435][ T5951] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 63.212332][ T5951] ? __rcu_read_unlock+0x84/0xe0 [ 63.213908][ T5951] ? btrfs_put_super+0x48/0x1b0 [ 63.215472][ T5951] ? __pfx_btrfs_put_super+0x10/0x10 [ 63.217219][ T5951] generic_shutdown_super+0x135/0x2c0 [ 63.218942][ T5951] kill_anon_super+0x3b/0x70 [ 63.220422][ T5951] btrfs_kill_super+0x41/0x50 [ 63.221945][ T5951] deactivate_locked_super+0xbc/0x130 [ 63.223669][ T5951] cleanup_mnt+0x425/0x4c0 [ 63.225128][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 63.226835][ T5951] task_work_run+0x1d4/0x260 [ 63.228351][ T5951] ? __pfx_task_work_run+0x10/0x10 [ 63.229961][ T5951] ? __x64_sys_umount+0x122/0x160 [ 63.231544][ T5951] ? exit_to_user_mode_loop+0x40/0x110 [ 63.233286][ T5951] exit_to_user_mode_loop+0xec/0x110 [ 63.235003][ T5951] do_syscall_64+0x2bd/0x3b0 [ 63.236522][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 63.238179][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.240133][ T5951] ? exc_page_fault+0x9f/0xf0 [ 63.241691][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.243651][ T5951] RIP: 0033:0x7f4a78b8ff17 [ 63.245131][ T5951] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 63.251402][ T5951] RSP: 002b:00007ffe33fe80a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.254442][ T5951] RAX: 0000000000000000 RBX: 00007f4a78c11c05 RCX: 00007f4a78b8ff17 [ 63.257538][ T5951] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe33fe8160 [ 63.260505][ T5951] RBP: 00007ffe33fe8160 R08: 0000000000000000 R09: 0000000000000000 [ 63.263520][ T5951] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe33fe91f0 [ 63.266052][ T5951] R13: 00007f4a78c11c05 R14: 000000000000f471 R15: 00007ffe33fe9230 [ 63.268569][ T5951] [ 63.270221][ T5951] Kernel Offset: disabled [ 63.271642][ T5951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:41:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8dbded10 RCX=f0f9782cf8520600 RDX=0000000000000002 RSI=ffffffff8be33460 RDI=ffffffff8be33420 RBP=0000000000000000 RSP=ffffc90000007de8 R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7 R12=1ffffffff1bc1819 R13=0000000000000002 R14=dffffc0000000000 R15=ffffffff8de0c0c8 RIP=ffffffff8b796185 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555587fa3500 ffffffff 00c00000 GS =0000 ffff8880b861c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00003e720 CR3=0000000029a9c000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3e9d51b33e9d51b3 3e9d51b33e9d51b3 XMM01=70585ecc70585ecc 70585ecc70585ecc XMM02=727e245d727e245d 727e245d727e245d XMM03=47c466bf47c466bf 47c466bf47c466bf XMM04=9f46df468275f47d 00185a5eebc7db8a XMM05=e90f5b6abe1c2c1e fdaa0a779d22b883 XMM06=51bdc5cc842a12b5 888c0e9d7076ad47 XMM07=1710527ab0c359d8 9aba7883adb666de XMM08=2a2ec02087888018 080e07f3173cc19e XMM09=255b66dd19793e7d 26058e168fe2e792 XMM10=2f5351d7ab3176cc b146b05270f0eef1 XMM11=624db15fe7663202 bbb66710a2633bee XMM12=3d8182023d818202 3d8182023d818202 XMM13=d30b493cd30b493c d30b493cd30b493c XMM14=751a9e2b751a9e2b 751a9e2b751a9e2b XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff81fb1f7d RBX=ffffea0000f3c000 RCX=00000000ffffffff RDX=0000000000000002 RSI=ffffea0000f3c000 RDI=ffff88801ba80048 RBP=ffffc9000372ef28 RSP=ffffc9000372ede0 R8 =ffffc9000372eec7 R9 =1ffff920006e5dd8 R10=dffffc0000000000 R11=fffff520006e5dd9 R12=008dc00000020901 R13=008dc60000020838 R14=fffff1ffffffffff R15=0000000000000100 RIP=ffffffff81fb21ee RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c00007b098 ffffffff 00c00000 GS =0000 ffff8881a3c1c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561a628d3a90 CR3=0000000011456000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000