[ 56.340508][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.379836][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.421806][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.102457][ T9] device hsr_slave_0 left promiscuous mode [ 57.110881][ T9] device hsr_slave_1 left promiscuous mode [ 57.120014][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.128082][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.138735][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.146456][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.154283][ T9] device bridge_slave_1 left promiscuous mode [ 57.162913][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.179360][ T9] device bridge_slave_0 left promiscuous mode [ 57.188192][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.209376][ T9] device veth1_macvtap left promiscuous mode [ 57.215765][ T9] device veth0_macvtap left promiscuous mode [ 57.221886][ T9] device veth1_vlan left promiscuous mode [ 57.228065][ T9] device veth0_vlan left promiscuous mode [ 57.349446][ T9] team0 (unregistering): Port device team_slave_1 removed [ 57.362215][ T9] team0 (unregistering): Port device team_slave_0 removed [ 57.374006][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.386783][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.433664][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. 2026/10/22 00:02:36 ignoring optional flag "type"="gce" 2026/10/22 00:02:37 parsed 1 programs 2026/10/22 00:02:37 executed programs: 0 [ 60.162105][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 60.196858][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.203989][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.212865][ T4391] device bridge_slave_0 entered promiscuous mode [ 60.220811][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.228097][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.236151][ T4391] device bridge_slave_1 entered promiscuous mode [ 60.253711][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.264495][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.289556][ T4391] team0: Port device team_slave_0 added [ 60.298162][ T4391] team0: Port device team_slave_1 added [ 60.313780][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.320871][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.346881][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.358678][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.365682][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.392269][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.419073][ T4391] device hsr_slave_0 entered promiscuous mode [ 60.425731][ T4391] device hsr_slave_1 entered promiscuous mode [ 60.860305][ T4391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.870148][ T4391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.880759][ T4391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.890376][ T4391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.913810][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920935][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.928333][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.935534][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.988957][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.005345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.014105][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.024048][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.033160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 61.047218][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.059371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.069460][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.076581][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.097768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.106451][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.113616][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.124730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.133689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.149665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.160960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.175980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.185972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.194407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.203186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.216557][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.331239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.339566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.353237][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.373406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.383954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.406802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.416780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.427247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.436740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.445537][ T4391] device veth0_vlan entered promiscuous mode [ 61.457183][ T4391] device veth1_vlan entered promiscuous mode [ 61.481268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.491118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.499667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.509975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.522377][ T4391] device veth0_macvtap entered promiscuous mode [ 61.534570][ T4391] device veth1_macvtap entered promiscuous mode [ 61.563433][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.572004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.581683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.591049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.600276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.613373][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.623828][ T4391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.634479][ T4391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.644181][ T4391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.654289][ T4391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.666779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.675821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.959757][ T4468] loop0: detected capacity change from 0 to 32768 [ 61.976362][ T4468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4468) [ 62.001314][ T4468] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 62.012148][ T4468] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 62.023683][ T4468] BTRFS info (device loop0): using free space tree [ 62.031871][ T4468] BTRFS info (device loop0): has skinny extents [ 62.095955][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 62.183057][ T4468] BTRFS info (device loop0): enabling ssd optimizations [ 64.175607][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 66.256354][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 68.335089][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 71.377632][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.384111][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.619870][ T1347] cfg80211: failed to load regulatory.db 2026/10/22 00:03:33 executed programs: 1 [ 117.862224][ T4682] chnl_net:caif_netlink_parms(): no params data found [ 117.899689][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.907491][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.915344][ T4682] device bridge_slave_0 entered promiscuous mode [ 117.923514][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.930817][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.938543][ T4682] device bridge_slave_1 entered promiscuous mode [ 117.957311][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.967961][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.990897][ T4682] team0: Port device team_slave_0 added [ 117.998376][ T4682] team0: Port device team_slave_1 added [ 118.015663][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.022720][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.048634][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.060470][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.067471][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.093377][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.120468][ T4682] device hsr_slave_0 entered promiscuous mode [ 118.127490][ T4682] device hsr_slave_1 entered promiscuous mode [ 118.134224][ T4682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.142103][ T4682] Cannot create hsr debugfs directory [ 118.203628][ T4682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.271962][ T4682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.305379][ T4682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.372027][ T4682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.427699][ T4682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.437123][ T4682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.447566][ T4682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.458502][ T4682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.476097][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.483177][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.490552][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.497681][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.530758][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.543054][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.551715][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.560079][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.568680][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 118.581202][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.591403][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.600035][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.607137][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.619578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.628034][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.635266][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.654212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.663070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.676988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.688722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.700337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.711031][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.783479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.791287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.803531][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.820907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.840096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.849325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.857934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.868670][ T4682] device veth0_vlan entered promiscuous mode [ 118.880417][ T4682] device veth1_vlan entered promiscuous mode [ 118.899430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.908275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.919617][ T4682] device veth0_macvtap entered promiscuous mode [ 118.929010][ T4682] device veth1_macvtap entered promiscuous mode [ 118.942453][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.953511][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.967262][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.974575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.983876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.992335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.001064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.012338][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.023122][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.034080][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.041910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.050931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.061701][ T4682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.070759][ T4682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.079687][ T4682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.088824][ T4682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.855467][ T1325] Bluetooth: hci1: command 0x0409 tx timeout 2026/10/22 00:03:39 executed programs: 12 [ 121.935342][ T1325] Bluetooth: hci1: command 0x041b tx timeout [ 124.015810][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 126.095304][ T13] Bluetooth: hci1: command 0x0419 tx timeout 2026/10/22 00:03:44 executed programs: 34 2026/10/22 00:03:49 executed programs: 56 [ 132.817474][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823815][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 2026/10/22 00:03:54 executed programs: 78 2026/10/22 00:03:59 executed programs: 99 2026/10/22 00:04:04 executed programs: 120 2026/10/22 00:04:10 executed programs: 142 2026/10/22 00:04:15 executed programs: 164 2026/10/22 00:04:20 executed programs: 186 2026/10/22 00:04:25 executed programs: 208 2026/10/22 00:04:30 executed programs: 230 2026/10/22 00:04:35 executed programs: 252 2026/10/22 00:04:40 executed programs: 274 [ 186.095069][ T13] Bluetooth: hci0: command 0x0406 tx timeout 2026/10/22 00:04:45 executed programs: 296 2026/10/22 00:04:51 executed programs: 318 [ 194.256919][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263374][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 2026/10/22 00:04:56 executed programs: 340 2026/10/22 00:05:01 executed programs: 361 2026/10/22 00:05:06 executed programs: 383 [ 212.825129][ T27] INFO: task syz-executor.0:4468 blocked for more than 143 seconds. [ 212.833362][ T27] Not tainted syzkaller #0 [ 212.841829][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.851202][ T27] task:syz-executor.0 state:D stack:24112 pid: 4468 ppid: 4391 flags:0x00004006 [ 212.863845][ T27] Call Trace: [ 212.875512][ T27] [ 212.880691][ T27] __schedule+0x11c3/0x4350 [ 212.890150][ T27] ? wait_extent_bit+0x3ab/0x4e0 [ 212.898015][ T27] ? release_firmware_map_entry+0x190/0x190 [ 212.908718][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 212.913790][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.927223][ T27] ? _raw_spin_unlock+0x40/0x40 [ 212.932131][ T27] schedule+0x11b/0x1e0 [ 212.936353][ T27] wait_extent_bit+0x3b0/0x4e0 [ 212.941127][ T27] ? lock_extent_bits+0x110/0x110 [ 212.948413][ T27] ? init_wait_entry+0xd0/0xd0 [ 212.953391][ T27] ? __might_sleep+0xf0/0xf0 [ 212.958201][ T27] ? file_update_time+0x3d7/0x440 [ 212.963348][ T27] lock_extent_bits+0x85/0x110 [ 212.970252][ T27] btrfs_page_mkwrite+0x5b8/0xc90 [ 212.975558][ T27] ? btrfs_submit_direct+0x1140/0x1140 [ 212.981661][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 212.989494][ T27] do_page_mkwrite+0x168/0x3c0 [ 212.994652][ T27] wp_page_shared+0x163/0x6c0 [ 212.999413][ T27] handle_mm_fault+0x1fbd/0x4440 [ 213.004376][ T27] ? get_page+0xe0/0xe0 [ 213.010893][ T27] ? vmacache_find+0x1e2/0x590 [ 213.015758][ T27] ? vmacache_update+0xa0/0x100 [ 213.020634][ T27] ? find_vma+0x1df/0x230 [ 213.027088][ T27] do_user_addr_fault+0x494/0xc90 [ 213.032160][ T27] exc_page_fault+0x60/0x100 [ 213.036813][ T27] asm_exc_page_fault+0x22/0x30 [ 213.041696][ T27] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 213.050259][ T27] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 213.072192][ T27] RSP: 0018:ffffc900023476a0 EFLAGS: 00050202 [ 213.078357][ T27] RAX: ffffffff83e93b01 RBX: 0000000000000038 RCX: 0000000000000007 [ 213.088438][ T27] RDX: 0000000000000000 RSI: ffffc90002347740 RDI: 00000000200000e0 [ 213.097216][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 1ffff92000468eee [ 213.107334][ T27] R10: dffffc0000000000 R11: fffff52000468eef R12: 00007ffffffff000 [ 213.115380][ T27] R13: 0000000020000118 R14: ffffc90002347740 R15: 00000000200000e0 [ 213.134921][ T27] ? _copy_to_user+0x1/0x130 [ 213.139570][ T27] _copy_to_user+0xf0/0x130 [ 213.144129][ T27] fiemap_fill_next_extent+0x1ba/0x380 [ 213.164921][ T27] ? vfs_ioctl+0xb0/0xb0 [ 213.169229][ T27] ? down_read+0x1aa/0x2e0 [ 213.173749][ T27] extent_fiemap+0x1264/0x1650 [ 213.191568][ T27] ? try_release_extent_mapping+0x560/0x560 [ 213.197696][ T27] ? fiemap_prep+0x1be/0x240 [ 213.202385][ T27] btrfs_fiemap+0xc0/0x110 [ 213.207636][ T27] ? btrfs_getattr+0x4e0/0x4e0 [ 213.212962][ T27] ? __might_fault+0xb3/0x110 [ 213.217875][ T27] ? _copy_from_user+0x111/0x170 [ 213.233965][ T27] do_vfs_ioctl+0x1543/0x1f40 [ 213.238785][ T27] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 213.244437][ T27] ? rcu_lock_release+0x5/0x20 [ 213.254913][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 213.259985][ T27] ? kfree+0xef/0x2a0 [ 213.264029][ T27] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 213.280963][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 213.290074][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 213.295170][ T27] ? security_file_ioctl+0x7c/0xa0 [ 213.300300][ T27] __se_sys_ioctl+0x83/0x170 [ 213.307546][ T27] do_syscall_64+0x4c/0xa0 [ 213.312111][ T27] ? clear_bhb_loop+0x30/0x80 [ 213.317555][ T27] ? clear_bhb_loop+0x30/0x80 [ 213.322347][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.328358][ T27] RIP: 0033:0x7fc501045fb9 [ 213.332874][ T27] RSP: 002b:00007fc5003d70b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.341576][ T27] RAX: ffffffffffffffda RBX: 00007fc501184f80 RCX: 00007fc501045fb9 [ 213.350134][ T27] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 213.358285][ T27] RBP: 00007fc5010bbb38 R08: 0000000000000000 R09: 0000000000000000 [ 213.366499][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.374658][ T27] R13: 000000000000000b R14: 00007fc501184f80 R15: 00007fff49fd29c8 [ 213.382788][ T27] [ 213.385991][ T27] [ 213.385991][ T27] Showing all locks held in the system: [ 213.393895][ T27] 1 lock held by khungtaskd/27: [ 213.398983][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 213.411061][ T27] 2 locks held by getty/3946: [ 213.415888][ T27] #0: ffff88802cef7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 213.426454][ T27] #1: ffffc900021ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 213.436760][ T27] 4 locks held by syz-executor.0/4468: [ 213.442321][ T27] #0: ffff8880716b99b0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: btrfs_inode_lock+0x61/0xe0 [ 213.453117][ T27] #1: ffff88807afb0f28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 213.463258][ T27] #2: ffff888078f34558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x168/0x3c0 [ 213.473063][ T27] #3: ffff8880716b9838 (&ei->i_mmap_lock){.+.+}-{3:3}, at: btrfs_page_mkwrite+0x45b/0xc90 [ 213.483259][ T27] 1 lock held by syz-executor.0/5898: [ 213.488841][ T27] [ 213.491262][ T27] ============================================= [ 213.491262][ T27] [ 213.514028][ T27] NMI backtrace for cpu 1 [ 213.518403][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 213.525711][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.535788][ T27] Call Trace: [ 213.539091][ T27] [ 213.542029][ T27] dump_stack_lvl+0x188/0x250 [ 213.546807][ T27] ? show_regs_print_info+0x20/0x20 [ 213.552111][ T27] ? load_image+0x410/0x410 [ 213.556616][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 213.562015][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 213.567153][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 213.572609][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 213.578771][ T27] ? _printk+0xda/0x130 [ 213.583040][ T27] ? load_image+0x410/0x410 [ 213.587655][ T27] ? load_image+0x410/0x410 [ 213.592173][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 213.598344][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 213.604343][ T27] watchdog+0xe1b/0xe60 [ 213.608616][ T27] kthread+0x42e/0x520 [ 213.612709][ T27] ? hungtask_pm_notify+0x40/0x40 [ 213.617758][ T27] ? kthread_blkcg+0xd0/0xd0 [ 213.622491][ T27] ret_from_fork+0x1f/0x30 [ 213.627082][ T27] [ 213.630732][ T27] Sending NMI from CPU 1 to CPUs 0: [ 213.636095][ C0] NMI backtrace for cpu 0 [ 213.636106][ C0] CPU: 0 PID: 5899 Comm: udevadm Not tainted syzkaller #0 [ 213.636120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.636128][ C0] RIP: 0010:__lock_acquire+0x26a0/0x7d40 [ 213.636151][ C0] Code: 00 00 3b 05 c2 3b a4 0f 0f 87 af 42 00 00 48 c7 84 24 20 01 00 00 0e 36 e0 45 48 8b 84 24 d0 00 00 00 4a c7 04 00 00 00 00 00 <4a> c7 44 00 08 00 00 00 00 4a c7 44 00 10 00 00 00 00 42 c7 44 00 [ 213.636163][ C0] RSP: 0018:ffffc90006437ae0 EFLAGS: 00000093 [ 213.636176][ C0] RAX: 1ffff92000c86f80 RBX: ffff88801e644660 RCX: ffff88801e644668 [ 213.636187][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff910150d0 [ 213.636196][ C0] RBP: ffffc90006437d28 R08: dffffc0000000000 R09: 1ffffffff2202a1a [ 213.636206][ C0] R10: dffffc0000000000 R11: fffffbfff2202a1b R12: 1e40456c94acc51e [ 213.636216][ C0] R13: 0000000000000001 R14: ffffffff91018518 R15: ffff88801e644690 [ 213.636226][ C0] FS: 00007efe25e80880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 213.636238][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.636248][ C0] CR2: 000055635bea55f8 CR3: 000000007564a000 CR4: 00000000003506f0 [ 213.636260][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.636268][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.636276][ C0] Call Trace: [ 213.636281][ C0] [ 213.636293][ C0] ? verify_lock_unused+0x140/0x140 [ 213.636310][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 213.636326][ C0] ? verify_lock_unused+0x140/0x140 [ 213.636342][ C0] ? lock_chain_count+0x20/0x20 [ 213.636358][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 213.636372][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 213.636392][ C0] lock_acquire+0x19f/0x400 [ 213.636406][ C0] ? __context_tracking_exit+0x4c/0x80 [ 213.636428][ C0] ? __context_tracking_enter+0x60/0x90 [ 213.636441][ C0] ? read_lock_is_recursive+0x10/0x10 [ 213.636461][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 213.636479][ C0] vtime_user_exit+0x95/0x410 [ 213.636495][ C0] ? __context_tracking_exit+0x4c/0x80 [ 213.636507][ C0] ? vtime_user_enter+0x1ec/0x2c0 [ 213.636521][ C0] ? __context_tracking_exit+0x4c/0x80 [ 213.636535][ C0] __context_tracking_exit+0x4c/0x80 [ 213.636547][ C0] syscall_enter_from_user_mode+0x56/0x70 [ 213.636569][ C0] do_syscall_64+0x24/0xa0 [ 213.636583][ C0] ? clear_bhb_loop+0x30/0x80 [ 213.636598][ C0] ? clear_bhb_loop+0x30/0x80 [ 213.636613][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.636629][ C0] RIP: 0033:0x7efe25fd8ad7 [ 213.636639][ C0] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 213.636650][ C0] RSP: 002b:00007fff7d0c24d8 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 213.636663][ C0] RAX: ffffffffffffffda RBX: 000055635be922a0 RCX: 00007efe25fd8ad7 [ 213.636673][ C0] RDX: 00007efe260b6ea0 RSI: 00007fff7d0c24e0 RDI: 0000000000000005 [ 213.636682][ C0] RBP: 00007efe260b6ff0 R08: 0000000000000001 R09: 0000000000000000 [ 213.636690][ C0] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 213.636698][ C0] R13: 0000000000003fff R14: 0000000000000000 R15: 000055635be922a0 [ 213.636711][ C0] [ 213.644595][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 213.977291][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 213.984579][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.994711][ T27] Call Trace: [ 213.997978][ T27] [ 214.000910][ T27] dump_stack_lvl+0x188/0x250 [ 214.005938][ T27] ? show_regs_print_info+0x20/0x20 [ 214.011308][ T27] ? load_image+0x410/0x410 [ 214.015930][ T27] panic+0x2f8/0x850 [ 214.019915][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 214.025707][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 214.030230][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 214.035775][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 214.041933][ T27] watchdog+0xe5a/0xe60 [ 214.046092][ T27] kthread+0x42e/0x520 [ 214.050275][ T27] ? hungtask_pm_notify+0x40/0x40 [ 214.055297][ T27] ? kthread_blkcg+0xd0/0xd0 [ 214.059885][ T27] ret_from_fork+0x1f/0x30 [ 214.064303][ T27] [ 214.067537][ T27] Kernel Offset: disabled [ 214.071870][ T27] Rebooting in 86400 seconds..