Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. 2025/07/15 14:46:28 ignoring optional flag "sandboxArg"="0" 2025/07/15 14:46:28 parsed 1 programs [ 115.440877][ T6278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 118.181453][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.191294][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.200831][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.209611][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.226393][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.313452][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 119.375709][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.383035][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.390321][ T6320] bridge_slave_0: entered allmulticast mode [ 119.397834][ T6320] bridge_slave_0: entered promiscuous mode [ 119.405879][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.413082][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.420541][ T6320] bridge_slave_1: entered allmulticast mode [ 119.427581][ T6320] bridge_slave_1: entered promiscuous mode [ 119.454361][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.465604][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.494016][ T6320] team0: Port device team_slave_0 added [ 119.504848][ T6320] team0: Port device team_slave_1 added [ 119.529800][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.537098][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.563441][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.575646][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.583425][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.609394][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.647192][ T6320] hsr_slave_0: entered promiscuous mode [ 119.653564][ T6320] hsr_slave_1: entered promiscuous mode [ 120.273889][ T6320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.285694][ T6320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.305867][ T6320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.324571][ T6320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.423186][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.444354][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.463181][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.470389][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.487327][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.494621][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.758479][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.805598][ T6320] veth0_vlan: entered promiscuous mode [ 120.823276][ T6320] veth1_vlan: entered promiscuous mode [ 120.861235][ T6320] veth0_macvtap: entered promiscuous mode [ 120.871551][ T6320] veth1_macvtap: entered promiscuous mode [ 120.899298][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.918673][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.932444][ T6320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.941623][ T6320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.951301][ T6320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.960932][ T6320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.139676][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.230121][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.342662][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.406050][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.258971][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.287125][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.327737][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.335709][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/15 14:46:39 executed programs: 0 [ 122.889407][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.898323][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.906603][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.915066][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.926532][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.183850][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 123.297262][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.304504][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.312264][ T6452] bridge_slave_0: entered allmulticast mode [ 123.320204][ T6452] bridge_slave_0: entered promiscuous mode [ 123.329604][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.337113][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.344441][ T6452] bridge_slave_1: entered allmulticast mode [ 123.357582][ T6452] bridge_slave_1: entered promiscuous mode [ 123.413916][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.426962][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.510360][ T6452] team0: Port device team_slave_0 added [ 123.540596][ T6452] team0: Port device team_slave_1 added [ 123.596045][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.604276][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.632672][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.650160][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.657325][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.685470][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.764910][ T13] bridge_slave_1: left allmulticast mode [ 123.771986][ T13] bridge_slave_1: left promiscuous mode [ 123.779606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.790197][ T13] bridge_slave_0: left allmulticast mode [ 123.795901][ T13] bridge_slave_0: left promiscuous mode [ 123.804765][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.019852][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.030737][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.040530][ T13] bond0 (unregistering): Released all slaves [ 124.056624][ T6452] hsr_slave_0: entered promiscuous mode [ 124.062889][ T6452] hsr_slave_1: entered promiscuous mode [ 124.069915][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.077535][ T6452] Cannot create hsr debugfs directory [ 124.199494][ T13] hsr_slave_0: left promiscuous mode [ 124.220293][ T13] hsr_slave_1: left promiscuous mode [ 124.230547][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.276205][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.294572][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.307900][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.341521][ T13] veth1_macvtap: left promiscuous mode [ 124.357602][ T13] veth0_macvtap: left promiscuous mode [ 124.363705][ T13] veth1_vlan: left promiscuous mode [ 124.386284][ T13] veth0_vlan: left promiscuous mode [ 124.884531][ T13] team0 (unregistering): Port device team_slave_1 removed [ 124.924853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 125.020898][ T51] Bluetooth: hci0: command tx timeout [ 126.099591][ T6452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.144376][ T6452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.164544][ T6452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.188588][ T6452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.453403][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.478435][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.501020][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.508289][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.581528][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.588738][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.867495][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.928816][ T6452] veth0_vlan: entered promiscuous mode [ 126.943050][ T6452] veth1_vlan: entered promiscuous mode [ 126.989591][ T6452] veth0_macvtap: entered promiscuous mode [ 127.002149][ T6452] veth1_macvtap: entered promiscuous mode [ 127.025811][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.045082][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.060231][ T6452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.070616][ T6452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.080874][ T6452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.090922][ T6452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.096847][ T51] Bluetooth: hci0: command tx timeout [ 127.185069][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.199052][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.235534][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.246512][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.627831][ T6573] loop0: detected capacity change from 0 to 32768 [ 127.645044][ T6573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15 (6573) [ 127.687222][ T6573] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.699428][ T6573] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 127.708924][ T6573] BTRFS info (device loop0): using free-space-tree [ 127.803767][ T6573] BTRFS info (device loop0): rebuilding free space tree [ 127.869470][ T30] audit: type=1800 audit(1752590804.958:2): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.15" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 129.038839][ T6608] assertion failed: block_start != EXTENT_MAP_HOLE :: 0, in fs/btrfs/extent_io.c:1522 [ 129.050567][ T6608] ------------[ cut here ]------------ [ 129.056689][ T6608] kernel BUG at fs/btrfs/extent_io.c:1522! [ 129.065523][ T6608] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 129.071825][ T6608] CPU: 0 UID: 0 PID: 6608 Comm: syz.0.15 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 129.083633][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.093971][ T6608] RIP: 0010:extent_writepage_io+0xe28/0xf30 [ 129.099875][ T6608] Code: 0f 0b e8 4b 2d f5 fd 48 c7 c7 40 15 ce 8b 48 c7 c6 60 26 ce 8b 31 d2 48 c7 c1 e0 14 ce 8b 41 b8 f2 05 00 00 e8 79 93 5c fd 90 <0f> 0b e8 21 2d f5 fd 48 8b 7c 24 20 48 c7 c6 20 1a ce 8b e8 e0 c7 [ 129.119470][ T6608] RSP: 0018:ffffc90003077060 EFLAGS: 00010246 [ 129.125526][ T6608] RAX: 0000000000000053 RBX: ffffea00018a7a08 RCX: 9f891f867244dc00 [ 129.133492][ T6608] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 129.141453][ T6608] RBP: ffffc900030771f0 R08: ffffc90003076d87 R09: 1ffff9200060edb0 [ 129.149411][ T6608] R10: dffffc0000000000 R11: fffff5200060edb1 R12: dffffc0000000000 [ 129.157367][ T6608] R13: 0000000000007000 R14: 0000000000000fff R15: fffffffffffffffd [ 129.165343][ T6608] FS: 00007f4affe216c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 129.174281][ T6608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.180875][ T6608] CR2: 000055e442dbc950 CR3: 000000007a4fc000 CR4: 00000000003526f0 [ 129.188940][ T6608] Call Trace: [ 129.192212][ T6608] [ 129.195149][ T6608] ? __pfx_extent_writepage_io+0x10/0x10 [ 129.200794][ T6608] ? do_raw_spin_unlock+0x122/0x240 [ 129.205987][ T6608] ? set_folio_extent_mapped+0x114/0x2e0 [ 129.211614][ T6608] btrfs_writepages+0x1491/0x21a0 [ 129.216917][ T6608] ? __pfx_btrfs_writepages+0x10/0x10 [ 129.222296][ T6608] ? __pfx_end_bbio_data_write+0x10/0x10 [ 129.227923][ T6608] ? __lock_acquire+0xab9/0xd20 [ 129.232855][ T6608] ? __pfx_btrfs_writepages+0x10/0x10 [ 129.238317][ T6608] do_writepages+0x32e/0x550 [ 129.242905][ T6608] ? do_raw_spin_unlock+0x122/0x240 [ 129.248104][ T6608] filemap_fdatawrite_range+0x19d/0x240 [ 129.253646][ T6608] ? __pfx_filemap_fdatawrite_range+0x10/0x10 [ 129.259710][ T6608] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 129.265420][ T6608] btrfs_fdatawrite_range+0x54/0xf0 [ 129.270625][ T6608] btrfs_direct_write+0x637/0xb10 [ 129.275680][ T6608] ? __pfx_btrfs_direct_write+0x10/0x10 [ 129.281308][ T6608] btrfs_do_write_iter+0x25f/0x710 [ 129.286420][ T6608] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 129.292044][ T6608] do_iter_readv_writev+0x56b/0x7f0 [ 129.297338][ T6608] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 129.303059][ T6608] ? rcu_read_lock_any_held+0xb3/0x120 [ 129.308516][ T6608] vfs_writev+0x31a/0x960 [ 129.312852][ T6608] ? __lock_acquire+0xab9/0xd20 [ 129.317704][ T6608] ? __pfx_vfs_writev+0x10/0x10 [ 129.322571][ T6608] ? __fget_files+0x2a/0x420 [ 129.327597][ T6608] ? __fget_files+0x3a0/0x420 [ 129.332270][ T6608] ? __fget_files+0x2a/0x420 [ 129.336856][ T6608] __se_sys_pwritev2+0x179/0x290 [ 129.341786][ T6608] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 129.347235][ T6608] ? do_syscall_64+0xbe/0x3b0 [ 129.351989][ T6608] ? __x64_sys_pwritev2+0x20/0xc0 [ 129.357048][ T6608] do_syscall_64+0xfa/0x3b0 [ 129.361554][ T6608] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.366760][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.372846][ T6608] ? clear_bhb_loop+0x60/0xb0 [ 129.377523][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.383702][ T6608] RIP: 0033:0x7f4afef7dff9 [ 129.388166][ T6608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.408115][ T6608] RSP: 002b:00007f4affe21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 129.416525][ T6608] RAX: ffffffffffffffda RBX: 00007f4aff136130 RCX: 00007f4afef7dff9 [ 129.424617][ T6608] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 129.432580][ T6608] RBP: 00007f4afeff0296 R08: 0000000000000000 R09: 0000000000000003 [ 129.440570][ T6608] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 129.448532][ T6608] R13: 0000000000000001 R14: 00007f4aff136130 R15: 00007ffc49c20e38 [ 129.456498][ T6608] [ 129.459503][ T6608] Modules linked in: [ 129.463740][ T6608] ---[ end trace 0000000000000000 ]--- [ 129.469924][ T51] Bluetooth: hci0: command tx timeout [ 129.479017][ T6608] RIP: 0010:extent_writepage_io+0xe28/0xf30 [ 129.484975][ T6608] Code: 0f 0b e8 4b 2d f5 fd 48 c7 c7 40 15 ce 8b 48 c7 c6 60 26 ce 8b 31 d2 48 c7 c1 e0 14 ce 8b 41 b8 f2 05 00 00 e8 79 93 5c fd 90 <0f> 0b e8 21 2d f5 fd 48 8b 7c 24 20 48 c7 c6 20 1a ce 8b e8 e0 c7 [ 129.505297][ T6608] RSP: 0018:ffffc90003077060 EFLAGS: 00010246 [ 129.511614][ T6608] RAX: 0000000000000053 RBX: ffffea00018a7a08 RCX: 9f891f867244dc00 [ 129.520056][ T6608] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 129.528299][ T6608] RBP: ffffc900030771f0 R08: ffffc90003076d87 R09: 1ffff9200060edb0 [ 129.536620][ T6608] R10: dffffc0000000000 R11: fffff5200060edb1 R12: dffffc0000000000 [ 129.544624][ T6608] R13: 0000000000007000 R14: 0000000000000fff R15: fffffffffffffffd [ 129.552971][ T6608] FS: 00007f4affe216c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 129.562323][ T6608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.569217][ T6608] CR2: 000055e442dbc950 CR3: 000000007a4fc000 CR4: 00000000003526f0 [ 129.577556][ T6608] Kernel panic - not syncing: Fatal exception [ 129.583894][ T6608] Kernel Offset: disabled [ 129.588207][ T6608] Rebooting in 86400 seconds..