Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. 1970/01/01 00:01:21 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:21 ignoring optional flag "type"="gce" 1970/01/01 00:01:22 parsed 1 programs [ 84.410872][ T4427] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 92.225470][ T4472] chnl_net:caif_netlink_parms(): no params data found [ 92.257507][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.259464][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.262030][ T4472] device bridge_slave_0 entered promiscuous mode [ 92.265697][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.267696][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.270234][ T4472] device bridge_slave_1 entered promiscuous mode [ 92.283139][ T4472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.287424][ T4472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.367961][ T4472] team0: Port device team_slave_0 added [ 92.371099][ T4472] team0: Port device team_slave_1 added [ 92.382664][ T4472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.385827][ T4472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.392702][ T4472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.397233][ T4472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.399147][ T4472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.407616][ T4472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.516192][ T4472] device hsr_slave_0 entered promiscuous mode [ 92.574710][ T4472] device hsr_slave_1 entered promiscuous mode [ 93.335473][ T4472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.375986][ T4472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.396309][ T4472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.447833][ T4472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.532791][ T4472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.562662][ T4472] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.568241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.570652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.576011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.578635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.581318][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.585203][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.600560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.604980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.607557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.610068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.612009][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.614239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.635563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.638328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.641371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.650189][ T4472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.652953][ T4472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.657702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.660150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.663090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.666067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.668650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.671379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.673919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.681079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.753529][ T4472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.756507][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.758578][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.773531][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.777183][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.789211][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.791878][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.795977][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.798370][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.803157][ T4472] device veth0_vlan entered promiscuous mode [ 93.808682][ T4472] device veth1_vlan entered promiscuous mode [ 93.820286][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.822963][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.827960][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.830555][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.834723][ T4472] device veth0_macvtap entered promiscuous mode [ 93.838657][ T4472] device veth1_macvtap entered promiscuous mode [ 93.848680][ T4472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.850776][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.854875][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.857421][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.860007][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.865437][ T4472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.869124][ T4472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.871440][ T4472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.873704][ T4472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877720][ T4472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.881846][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.884964][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.027140][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.029295][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.031961][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.048754][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.051015][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.053542][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:34 executed programs: 0 [ 94.787909][ T4622] chnl_net:caif_netlink_parms(): no params data found [ 94.822935][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.826313][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.828900][ T4622] device bridge_slave_0 entered promiscuous mode [ 94.832325][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.836674][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.839242][ T4622] device bridge_slave_1 entered promiscuous mode [ 94.875379][ T4622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.879684][ T4622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.894087][ T4622] team0: Port device team_slave_0 added [ 94.898028][ T4622] team0: Port device team_slave_1 added [ 94.909829][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.911773][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.919304][ T4622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.925578][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.927510][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.934501][ T4622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.006305][ T4622] device hsr_slave_0 entered promiscuous mode [ 95.015672][ T4622] device hsr_slave_1 entered promiscuous mode [ 95.054703][ T4622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.056796][ T4622] Cannot create hsr debugfs directory [ 95.137767][ T4622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.754397][ T4101] Bluetooth: hci0: command 0x0409 tx timeout [ 97.823353][ T4622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.834911][ T4101] Bluetooth: hci0: command 0x041b tx timeout [ 99.280944][ T4622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.350114][ T4622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.516468][ T4622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.558466][ T4622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.596606][ T4622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.636961][ T4622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.735379][ T4622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.742061][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.745355][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.749615][ T4622] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.757242][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.759910][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.762756][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.764794][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.767569][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.770296][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.772872][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.774882][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.777804][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.782376][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.788813][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.793543][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.802245][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.806896][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.828162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.830941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.835734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.838346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.842813][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.846091][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.850594][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.922301][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.925033][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.930470][ T4622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.947270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.950165][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.961776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.967159][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.970359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.972837][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.992207][ T4622] device veth0_vlan entered promiscuous mode [ 99.998939][ T4622] device veth1_vlan entered promiscuous mode [ 100.010425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.013025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.016152][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.018693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.022829][ T4622] device veth0_macvtap entered promiscuous mode [ 100.028194][ T4622] device veth1_macvtap entered promiscuous mode [ 100.037169][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.039997][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.043568][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.048514][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.051235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.053636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.056402][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.061478][ T4622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.065743][ T4622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.069294][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.071812][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.074700][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.078987][ T4622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.081357][ T4622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.083658][ T4622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.086265][ T4622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.120270][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.122537][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.127535][ T1630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.129811][ T1630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.132998][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.136482][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:40 executed programs: 2 [ 100.350925][ T4860] loop0: detected capacity change from 0 to 32768 [ 100.405594][ T4860] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (4860) [ 100.418389][ T4860] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 100.420830][ T4860] BTRFS info (device loop0): enabling auto defrag [ 100.422684][ T4860] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.425848][ T4860] BTRFS info (device loop0): trying to use backup root at mount time [ 100.428047][ T4860] BTRFS info (device loop0): metadata ratio 7 [ 100.429622][ T4860] BTRFS info (device loop0): force clearing of disk cache [ 100.431515][ T4860] BTRFS info (device loop0): turning on sync discard [ 100.433282][ T4860] BTRFS info (device loop0): disabling free space tree [ 100.435725][ T4860] BTRFS info (device loop0): has skinny extents [ 100.448188][ T136] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0xb8b9d82e4a9942122dd30d6e1a5f8e2661e72a0b7a021b669507c1487c9951e3 level 0 [ 100.454010][ T4860] BTRFS warning (device loop0): couldn't read tree root [ 100.459228][ T9] BTRFS warning (device loop0): checksum verify failed on 5320704 wanted 0x3a96b260394a7399f18798ce453684459093f28a490b1793d7ea697f0b0df10a found 0x43d57e81b22147e305dff737e146f6d81c05c3a9a4fec171a05f978e77d965b6 level 0 [ 100.465389][ T4860] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 100.468031][ T4860] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 100.471035][ T4860] BTRFS warning (device loop0): couldn't read tree root [ 100.479645][ T4860] BTRFS info (device loop0): enabling ssd optimizations [ 100.482170][ T4860] BTRFS info (device loop0): clearing free space tree [ 100.484216][ T4860] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.488305][ T4860] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.508771][ T4860] ================================================================== [ 100.511107][ T4860] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3d4 [ 100.513062][ T4860] Write of size 4 at addr 0000000000000060 by task syz.0.15/4860 [ 100.515138][ T4860] [ 100.515764][ T4860] CPU: 0 PID: 4860 Comm: syz.0.15 Not tainted 5.15.182-syzkaller #0 [ 100.517881][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.520636][ T4860] Call trace: [ 100.521517][ T4860] dump_backtrace+0x0/0x43c [ 100.522737][ T4860] show_stack+0x2c/0x3c [ 100.523858][ T4860] __dump_stack+0x30/0x40 [ 100.525058][ T4860] dump_stack_lvl+0xf8/0x160 [ 100.526315][ T4860] kasan_report+0xe0/0x15c [ 100.527498][ T4860] kasan_check_range+0x270/0x2b0 [ 100.528838][ T4860] __kasan_check_write+0x44/0x54 [ 100.530230][ T4860] btrfs_root_node+0x14c/0x3d4 [ 100.531552][ T4860] btrfs_read_lock_root_node+0x68/0x35c [ 100.533035][ T4860] btrfs_search_slot+0x2fc/0x1f4c [ 100.534366][ T4860] btrfs_orphan_cleanup+0x17c/0x7e0 [ 100.535744][ T4860] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 100.537186][ T4860] btrfs_start_pre_rw_mount+0x14c/0x568 [ 100.538661][ T4860] open_ctree+0x1ef0/0x27b8 [ 100.539939][ T4860] btrfs_fill_super+0x1b4/0x2d4 [ 100.541276][ T4860] btrfs_mount_root+0x730/0x780 [ 100.542635][ T4860] legacy_get_tree+0xd4/0x16c [ 100.543848][ T4860] vfs_get_tree+0x90/0x274 [ 100.545071][ T4860] vfs_kern_mount+0xdc/0x178 [ 100.546290][ T4860] btrfs_mount+0x2a0/0x8d4 [ 100.547516][ T4860] legacy_get_tree+0xd4/0x16c [ 100.548811][ T4860] vfs_get_tree+0x90/0x274 [ 100.550020][ T4860] do_new_mount+0x228/0x810 [ 100.551242][ T4860] path_mount+0x5b4/0x1000 [ 100.552491][ T4860] __arm64_sys_mount+0x514/0x5e4 [ 100.553866][ T4860] invoke_syscall+0x98/0x2b8 [ 100.555144][ T4860] el0_svc_common+0x138/0x258 [ 100.556387][ T4860] do_el0_svc+0x58/0x14c [ 100.557503][ T4860] el0_svc+0x78/0x1e0 [ 100.558594][ T4860] el0t_64_sync_handler+0xcc/0xe4 [ 100.559933][ T4860] el0t_64_sync+0x1a0/0x1a4 [ 100.561149][ T4860] ================================================================== [ 100.563297][ T4860] Disabling lock debugging due to kernel taint [ 100.567548][ T4860] Unable to handle kernel paging request at virtual address dfff80000000000c [ 100.569889][ T4860] Mem abort info: [ 100.570864][ T4860] ESR = 0x0000000096000006 [ 100.572032][ T4860] EC = 0x25: DABT (current EL), IL = 32 bits [ 100.573592][ T4860] SET = 0, FnV = 0 [ 100.575798][ T4860] EA = 0, S1PTW = 0 [ 100.576888][ T4860] FSC = 0x06: level 2 translation fault [ 100.578524][ T4860] Data abort info: [ 100.579472][ T4860] ISV = 0, ISS = 0x00000006 [ 100.580708][ T4860] CM = 0, WnR = 0 [ 100.581704][ T4860] [dfff80000000000c] address between user and kernel address ranges [ 100.583827][ T4860] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 100.585733][ T4860] Modules linked in: [ 100.586742][ T4860] CPU: 0 PID: 4860 Comm: syz.0.15 Tainted: G B 5.15.182-syzkaller #0 [ 100.589303][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.592056][ T4860] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 100.594218][ T4860] pc : btrfs_root_node+0x150/0x3d4 [ 100.595576][ T4860] lr : btrfs_root_node+0x14c/0x3d4 [ 100.596950][ T4860] sp : ffff80001f406f90 [ 100.598051][ T4860] x29: ffff80001f406f90 x28: dfff800000000000 x27: ffff8000116c1e40 [ 100.600141][ T4860] x26: 0000000000000060 x25: 0000000000000000 x24: ffff8000116c1e40 [ 100.602480][ T4860] x23: ffff80001658d000 x22: ffff8000116c25c0 x21: 0000000000000001 [ 100.604682][ T4860] x20: 1fffe0001aecd000 x19: ffff0000d7668000 x18: 0000000000000002 [ 100.606879][ T4860] x17: 0000000040000000 x16: ffff8000082d4b24 x15: 0000000000000002 [ 100.609163][ T4860] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 100.611294][ T4860] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 100.613477][ T4860] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff800008244078 [ 100.615656][ T4860] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008184528 [ 100.617877][ T4860] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 100.620035][ T4860] Call trace: [ 100.620933][ T4860] btrfs_root_node+0x150/0x3d4 [ 100.622337][ T4860] btrfs_read_lock_root_node+0x68/0x35c [ 100.623809][ T4860] btrfs_search_slot+0x2fc/0x1f4c [ 100.625223][ T4860] btrfs_orphan_cleanup+0x17c/0x7e0 [ 100.626631][ T4860] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 100.628065][ T4860] btrfs_start_pre_rw_mount+0x14c/0x568 [ 100.629560][ T4860] open_ctree+0x1ef0/0x27b8 [ 100.630804][ T4860] btrfs_fill_super+0x1b4/0x2d4 [ 100.632141][ T4860] btrfs_mount_root+0x730/0x780 [ 100.633470][ T4860] legacy_get_tree+0xd4/0x16c [ 100.634790][ T4860] vfs_get_tree+0x90/0x274 [ 100.636036][ T4860] vfs_kern_mount+0xdc/0x178 [ 100.637267][ T4860] btrfs_mount+0x2a0/0x8d4 [ 100.638504][ T4860] legacy_get_tree+0xd4/0x16c [ 100.639896][ T4860] vfs_get_tree+0x90/0x274 [ 100.641143][ T4860] do_new_mount+0x228/0x810 [ 100.642385][ T4860] path_mount+0x5b4/0x1000 [ 100.643601][ T4860] __arm64_sys_mount+0x514/0x5e4 [ 100.645002][ T4860] invoke_syscall+0x98/0x2b8 [ 100.646259][ T4860] el0_svc_common+0x138/0x258 [ 100.647515][ T4860] do_el0_svc+0x58/0x14c [ 100.648667][ T4860] el0_svc+0x78/0x1e0 [ 100.649804][ T4860] el0t_64_sync_handler+0xcc/0xe4 [ 100.651263][ T4860] el0t_64_sync+0x1a0/0x1a4 [ 100.652482][ T4860] Code: aa1b03f8 aa1a03e0 97a91345 d343ff48 (38fc6908) [ 100.654447][ T4860] ---[ end trace 2e0c938ab23d270e ]--- [ 101.008358][ T4860] Kernel panic - not syncing: Oops: Fatal exception [ 101.010165][ T4860] SMP: stopping secondary CPUs [ 101.011513][ T4860] Kernel Offset: disabled [ 101.012629][ T4860] CPU features: 0x8,000081c1,21302e40 [ 101.014058][ T4860] Memory Limit: none [ 101.364491][ T4860] Rebooting in 86400 seconds..