Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. executing program syzkaller login: [ 71.421592][ T4244] loop0: detected capacity change from 0 to 32768 [ 71.433554][ T4244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor394 (4244) [ 71.453097][ T4244] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.463517][ T4244] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 71.472700][ T4244] BTRFS info (device loop0): metadata ratio 2 [ 71.478822][ T4244] BTRFS info (device loop0): force zlib compression, level 3 [ 71.486670][ T4244] BTRFS info (device loop0): use zlib compression, level 3 [ 71.494264][ T4244] BTRFS info (device loop0): enabling auto defrag [ 71.500777][ T4244] BTRFS info (device loop0): max_inline at 0 [ 71.507198][ T4244] BTRFS info (device loop0): using free space tree [ 71.535215][ T4244] BTRFS info (device loop0): enabling ssd optimizations [ 71.557467][ T26] audit: type=1800 audit(1730644005.214:2): pid=4244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor394" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 81.374024][ T952] cfg80211: failed to load regulatory.db [ 286.173056][ T28] INFO: task syz-executor394:4244 blocked for more than 143 seconds. [ 286.181290][ T28] Not tainted 6.1.115-syzkaller #0 [ 286.187280][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.196079][ T28] task:syz-executor394 state:D stack:23152 pid:4244 ppid:4243 flags:0x00004006 [ 286.205396][ T28] Call Trace: [ 286.208716][ T28] [ 286.211654][ T28] __schedule+0x143f/0x4570 [ 286.216258][ T28] ? release_firmware_map_entry+0x186/0x186 [ 286.222222][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.228127][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 286.233368][ T28] schedule+0xbf/0x180 [ 286.237470][ T28] wait_extent_bit+0x423/0x570 [ 286.242355][ T28] ? __set_extent_bit+0x13b1/0x18c0 [ 286.247594][ T28] ? clear_state_bit+0x330/0x330 [ 286.252576][ T28] ? wake_bit_function+0x210/0x210 [ 286.257714][ T28] lock_extent+0x17a/0x200 [ 286.262198][ T28] ? try_lock_extent+0x1a0/0x1a0 [ 286.267177][ T28] ? folio_wait_writeback+0x1aa/0x1e0 [ 286.272596][ T28] btrfs_page_mkwrite+0x550/0xc90 [ 286.277664][ T28] ? btrfs_dio_write+0x100/0x100 [ 286.282662][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 286.287720][ T28] do_page_mkwrite+0x1a1/0x5f0 [ 286.292532][ T28] wp_page_shared+0x164/0x380 [ 286.297234][ T28] handle_mm_fault+0x2525/0x5340 [ 286.302485][ T28] ? mt_find+0x29a/0xc60 [ 286.306788][ T28] ? mt_find+0x29a/0xc60 [ 286.311064][ T28] ? numa_migrate_prep+0x250/0x250 [ 286.316236][ T28] ? lock_mm_and_find_vma+0xae/0x2e0 [ 286.321542][ T28] exc_page_fault+0x26f/0x620 [ 286.326285][ T28] asm_exc_page_fault+0x22/0x30 [ 286.331168][ T28] RIP: 0010:copy_user_short_string+0xd/0x40 [ 286.337115][ T28] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 286.356781][ T28] RSP: 0018:ffffc90003d1f3b0 EFLAGS: 00050202 [ 286.362910][ T28] RAX: ffffffff8439c801 RBX: 00007fffffffefc8 RCX: 0000000000000007 [ 286.370934][ T28] RDX: 0000000000000000 RSI: ffffc90003d1f460 RDI: 00000000200004e0 [ 286.378957][ T28] RBP: ffffc90003d1f510 R08: 0000000000000000 R09: fffff520007a3e93 [ 286.386984][ T28] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000038 [ 286.395163][ T28] R13: ffffc90003d1f460 R14: 00000000200004e0 R15: ffffc90003d1f460 [ 286.403191][ T28] ? _copy_to_user+0x81/0x130 [ 286.407889][ T28] _copy_to_user+0xe9/0x130 [ 286.412680][ T28] fiemap_fill_next_extent+0x231/0x410 [ 286.418169][ T28] ? vfs_ioctl+0xc0/0xc0 [ 286.422463][ T28] ? btrfs_is_data_extent_shared+0x110c/0x1390 [ 286.428646][ T28] fiemap_process_hole+0x107e/0x1290 [ 286.434033][ T28] ? extent_fiemap+0x1ff0/0x1ff0 [ 286.438989][ T28] ? btrfs_get_token_64+0x600/0x600 [ 286.444234][ T28] ? memcpy+0x3c/0x60 [ 286.448230][ T28] extent_fiemap+0xef7/0x1ff0 [ 286.452982][ T28] ? try_release_extent_mapping+0x560/0x560 [ 286.458891][ T28] ? finish_wait+0xcf/0x1e0 [ 286.463442][ T28] ? btrfs_start_ordered_extent+0x482/0x6a0 [ 286.469361][ T28] ? btrfs_start_ordered_extent+0x321/0x6a0 [ 286.475315][ T28] ? btrfs_wait_ordered_roots+0x950/0x950 [ 286.481112][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.486357][ T28] ? btrfs_put_ordered_extent+0x1da/0x5c0 [ 286.492164][ T28] ? btrfs_wait_ordered_range+0x242/0x260 [ 286.497894][ T28] btrfs_fiemap+0x174/0x1e0 [ 286.502453][ T28] ? btrfs_getattr+0x4f0/0x4f0 [ 286.507233][ T28] ? __might_fault+0xbd/0x110 [ 286.511914][ T28] ? btrfs_getattr+0x4f0/0x4f0 [ 286.516729][ T28] do_vfs_ioctl+0x18e9/0x2a90 [ 286.521437][ T28] ? __x64_compat_sys_ioctl+0x80/0x80 [ 286.527011][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 286.532104][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 286.537347][ T28] ? __kmem_cache_free+0x25c/0x3c0 [ 286.542522][ T28] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 286.548187][ T28] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 286.553866][ T28] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 286.559522][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 286.565073][ T28] ? rcu_is_watching+0x11/0xb0 [ 286.569876][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 286.575938][ T28] ? print_irqtrace_events+0x210/0x210 [ 286.581431][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 286.586606][ T28] ? security_file_ioctl+0x7d/0xa0 [ 286.591765][ T28] __se_sys_ioctl+0x81/0x160 [ 286.596462][ T28] do_syscall_64+0x3b/0xb0 [ 286.600895][ T28] ? clear_bhb_loop+0x45/0xa0 [ 286.605643][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.611579][ T28] RIP: 0033:0x7fa215ffcf99 [ 286.616045][ T28] RSP: 002b:00007ffc2bd73298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.624514][ T28] RAX: ffffffffffffffda RBX: 70735f6473736f6e RCX: 00007fa215ffcf99 [ 286.632522][ T28] RDX: 00000000200004c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 286.640507][ T28] RBP: 00007fa2160765f0 R08: 0000000000000000 R09: 0000000000000000 [ 286.648548][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2bd732d0 [ 286.656678][ T28] R13: 00007ffc2bd734f8 R14: 431bde82d7b634db R15: 00007fa21604603b [ 286.664729][ T28] [ 286.667889][ T28] [ 286.667889][ T28] Showing all locks held in the system: [ 286.675655][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.680963][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 286.691491][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.696803][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 286.707840][ T28] 1 lock held by khungtaskd/28: [ 286.712712][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 286.722648][ T28] 2 locks held by getty/4006: [ 286.727338][ T28] #0: ffff88807e1a8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.737154][ T28] #1: ffffc900032462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 286.747334][ T28] 4 locks held by syz-executor394/4244: [ 286.752965][ T28] #0: ffff88806e819920 (&sb->s_type->i_mutex_key#15){++++}-{3:3}, at: btrfs_inode_lock+0x5c/0xd0 [ 286.763720][ T28] #1: ffff88807cebae58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 286.773723][ T28] #2: ffff888077112558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x5f0 [ 286.783335][ T28] #3: ffff88806e8197a8 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x421/0xc90 [ 286.793427][ T28] [ 286.795761][ T28] ============================================= [ 286.795761][ T28] [ 286.804240][ T28] NMI backtrace for cpu 0 [ 286.808604][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.115-syzkaller #0 [ 286.816490][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.826537][ T28] Call Trace: [ 286.829809][ T28] [ 286.832735][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.837410][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 286.842885][ T28] ? panic+0x764/0x764 [ 286.846963][ T28] ? vprintk_emit+0x622/0x740 [ 286.851662][ T28] ? printk_sprint+0x490/0x490 [ 286.856427][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 286.861532][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 286.866467][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 286.872611][ T28] ? _printk+0xd1/0x111 [ 286.876766][ T28] ? panic+0x764/0x764 [ 286.880828][ T28] ? __wake_up_klogd+0xcc/0x100 [ 286.885678][ T28] ? panic+0x764/0x764 [ 286.889752][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 286.895823][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.901888][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 286.907874][ T28] watchdog+0xf88/0xfd0 [ 286.912127][ T28] ? watchdog+0x1f8/0xfd0 [ 286.916467][ T28] kthread+0x28d/0x320 [ 286.920533][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.925557][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.930151][ T28] ret_from_fork+0x1f/0x30 [ 286.934585][ T28] [ 286.938169][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.943449][ C1] NMI backtrace for cpu 1 [ 286.943463][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.115-syzkaller #0 [ 286.943480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.943490][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.943517][ C1] RIP: 0010:insn_decode+0xb5/0x500 [ 286.943538][ C1] Code: 8d 04 b5 00 00 00 00 04 04 89 44 24 04 48 ba 00 00 00 00 00 fc ff df 48 63 db 49 8d 6d 58 48 89 e8 48 c1 e8 03 48 89 44 24 08 <80> 3c 10 00 74 12 48 89 ef e8 cd 01 3d f7 48 ba 00 00 00 00 00 fc [ 286.943552][ C1] RSP: 0018:ffffc900001078f0 EFLAGS: 00000a02 [ 286.943571][ C1] RAX: 1ffff92000020f3b RBX: 000000000000000f RCX: 0000000000000000 [ 286.943582][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc900001079d8 [ 286.943594][ C1] RBP: ffffc900001079d8 R08: dffffc0000000000 R09: ffffc90000107980 [ 286.943606][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff81e14cca [ 286.943618][ C1] R13: ffffc90000107980 R14: fffffffff5001301 R15: dffffc0000000000 [ 286.943631][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 286.943645][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.943658][ C1] CR2: 0000562680761600 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 286.943672][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.943682][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.943692][ C1] Call Trace: [ 286.943697][ C1] [ 286.943702][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 286.943720][ C1] ? read_lock_is_recursive+0x10/0x10 [ 286.943747][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 286.943765][ C1] ? nmi_handle+0x25/0x440 [ 286.943797][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 286.943812][ C1] ? nmi_handle+0x12e/0x440 [ 286.943837][ C1] ? nmi_handle+0x25/0x440 [ 286.943862][ C1] ? insn_decode+0xb5/0x500 [ 286.943880][ C1] ? default_do_nmi+0x62/0x150 [ 286.943898][ C1] ? exc_nmi+0xa8/0x100 [ 286.943915][ C1] ? end_repeat_nmi+0x16/0x31 [ 286.943931][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 286.943956][ C1] ? insn_decode+0xb5/0x500 [ 286.943974][ C1] ? insn_decode+0xb5/0x500 [ 286.943993][ C1] ? insn_decode+0xb5/0x500 [ 286.944011][ C1] [ 286.944015][ C1] [ 286.944021][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 286.944043][ C1] __jump_label_patch+0xe4/0x440 [ 286.944060][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 286.944082][ C1] ? arch_jump_label_transform_queue+0xd0/0xd0 [ 286.944106][ C1] ? static_key_disable_cpuslocked+0x97/0x1b0 [ 286.944129][ C1] ? mutex_lock_nested+0x10/0x10 [ 286.944149][ C1] arch_jump_label_transform_queue+0x4a/0xd0 [ 286.944168][ C1] __jump_label_update+0x177/0x3a0 [ 286.944194][ C1] static_key_disable_cpuslocked+0xce/0x1b0 [ 286.944217][ C1] static_key_disable+0x16/0x20 [ 286.944237][ C1] toggle_allocation_gate+0x3e0/0x480 [ 286.944259][ C1] ? show_object+0xa0/0xa0 [ 286.944280][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 286.944307][ C1] ? print_irqtrace_events+0x210/0x210 [ 286.944330][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.944354][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 286.944374][ C1] ? process_one_work+0x7a9/0x11d0 [ 286.944394][ C1] process_one_work+0x8a9/0x11d0 [ 286.944421][ C1] ? worker_detach_from_pool+0x260/0x260 [ 286.944443][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.944464][ C1] ? kthread_data+0x4e/0xc0 [ 286.944490][ C1] ? wq_worker_running+0x97/0x190 [ 286.944507][ C1] worker_thread+0xa47/0x1200 [ 286.944539][ C1] kthread+0x28d/0x320 [ 286.944553][ C1] ? worker_clr_flags+0x190/0x190 [ 286.944583][ C1] ? kthread_blkcg+0xd0/0xd0 [ 286.944599][ C1] ret_from_fork+0x1f/0x30 [ 286.944629][ C1] [ 286.944635][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.186 msecs [ 286.945446][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.327736][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.115-syzkaller #0 [ 287.335626][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.345673][ T28] Call Trace: [ 287.348947][ T28] [ 287.351875][ T28] dump_stack_lvl+0x1e3/0x2cb [ 287.356558][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 287.362023][ T28] ? panic+0x764/0x764 [ 287.366100][ T28] ? vscnprintf+0x59/0x80 [ 287.370430][ T28] panic+0x318/0x764 [ 287.374339][ T28] ? asm_sysvec_call_function_single+0x16/0x20 [ 287.380591][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 287.386745][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 287.392127][ T28] ? nmi_trigger_cpumask_backtrace+0x2c8/0x3f0 [ 287.398289][ T28] watchdog+0xfc7/0xfd0 [ 287.402454][ T28] ? watchdog+0x1f8/0xfd0 [ 287.406801][ T28] kthread+0x28d/0x320 [ 287.410883][ T28] ? hungtask_pm_notify+0x50/0x50 [ 287.415908][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.420500][ T28] ret_from_fork+0x1f/0x30 [ 287.424944][ T28] [ 287.428366][ T28] Kernel Offset: disabled [ 287.432686][ T28] Rebooting in 86400 seconds..