Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 1970/01/01 00:01:01 ignoring optional flag "type"="gce" 1970/01/01 00:01:01 parsed 1 programs [ 62.433800][ T4380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 63.997716][ T1904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.999109][ T1904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.000471][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.006352][ T1904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.007690][ T1904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.009055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.103742][ T4534] chnl_net:caif_netlink_parms(): no params data found [ 64.122297][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.123552][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.124935][ T4534] device bridge_slave_0 entered promiscuous mode [ 64.126946][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.128063][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.129557][ T4534] device bridge_slave_1 entered promiscuous mode [ 64.137481][ T4534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.139942][ T4534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.148283][ T4534] team0: Port device team_slave_0 added [ 64.150202][ T4534] team0: Port device team_slave_1 added [ 64.156572][ T4534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.157737][ T4534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.161718][ T4534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.165478][ T4534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.166628][ T4534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.170606][ T4534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.214059][ T4534] device hsr_slave_0 entered promiscuous mode [ 64.252936][ T4534] device hsr_slave_1 entered promiscuous mode [ 64.874554][ T4534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.914660][ T4534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.953702][ T4534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.993830][ T4534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.078131][ T4534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.082495][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.084412][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.087670][ T4534] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.090166][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.091807][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.094342][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.095420][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.097110][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.100554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.102082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.106112][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.107294][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.110836][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.114627][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.117936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.119516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.121036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.124315][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.126044][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.130421][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.131913][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.135600][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.137124][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.139236][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.212800][ T4534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.214539][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.215884][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.223714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.225322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.233766][ T4534] device veth0_vlan entered promiscuous mode [ 65.234908][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.236455][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.238117][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.239520][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.245391][ T4534] device veth1_vlan entered promiscuous mode [ 65.252451][ T4534] device veth0_macvtap entered promiscuous mode [ 65.255731][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.257236][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.258660][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.260100][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.263798][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.266270][ T4534] device veth1_macvtap entered promiscuous mode [ 65.271494][ T4534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.272979][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.274397][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.276064][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.279601][ T4534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.280814][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.282352][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.285360][ T4534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.286703][ T4534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.288117][ T4534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.289467][ T4534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:05 executed programs: 0 [ 65.581997][ T4697] chnl_net:caif_netlink_parms(): no params data found [ 65.600223][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.601528][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.605435][ T4697] device bridge_slave_0 entered promiscuous mode [ 65.607827][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.609004][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.610537][ T4697] device bridge_slave_1 entered promiscuous mode [ 65.618993][ T4697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.621717][ T4697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.631162][ T4697] team0: Port device team_slave_0 added [ 65.633169][ T4697] team0: Port device team_slave_1 added [ 65.639732][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.640893][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.646763][ T4697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.649793][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.650898][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.655167][ T4697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.694114][ T4697] device hsr_slave_0 entered promiscuous mode [ 65.733310][ T4697] device hsr_slave_1 entered promiscuous mode [ 65.782871][ T4697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.784031][ T4697] Cannot create hsr debugfs directory [ 65.812089][ T4697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.553077][ T4701] Bluetooth: hci1: command 0x0409 tx timeout [ 68.267635][ T4697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.624034][ T1970] cfg80211: failed to load regulatory.db [ 69.624664][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.626072][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.627521][ T4701] Bluetooth: hci1: command 0x041b tx timeout [ 70.876050][ T4697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.916684][ T4697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.065770][ T4697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.114606][ T4697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.153843][ T4697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.194089][ T4697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.264051][ T4697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.267698][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.269303][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.271748][ T4697] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.274990][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.276637][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.278143][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.279267][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.280723][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.283510][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.285065][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.286560][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.287772][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.290234][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.293382][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.296786][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.298617][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.300215][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.302681][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.305307][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.307992][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.309618][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.312068][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.314371][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.316784][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.356636][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.357960][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.360990][ T4697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.367503][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.369154][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.375114][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.376714][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.378337][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.379690][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.381812][ T4697] device veth0_vlan entered promiscuous mode [ 71.393961][ T4697] device veth1_vlan entered promiscuous mode [ 71.400090][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.401528][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.403479][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.405046][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.408513][ T4697] device veth0_macvtap entered promiscuous mode [ 71.410849][ T4697] device veth1_macvtap entered promiscuous mode [ 71.416244][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.418065][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.420222][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.421358][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.423294][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.424691][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.426133][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.428500][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.430129][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.432186][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.434738][ T4697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.436065][ T4697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.437573][ T4697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.439010][ T4697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.440962][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.442577][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.460632][ T1904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.464953][ T1904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.466693][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.471637][ T1904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.474434][ T1904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.475684][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 2 [ 71.588996][ T4927] loop0: detected capacity change from 0 to 32768 [ 71.595910][ T4927] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (4927) [ 71.604352][ T4927] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 71.606117][ T4927] BTRFS info (device loop0): enabling auto defrag [ 71.607165][ T4927] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.608874][ T4927] BTRFS info (device loop0): trying to use backup root at mount time [ 71.610310][ T4927] BTRFS info (device loop0): metadata ratio 7 [ 71.611527][ T4927] BTRFS info (device loop0): force clearing of disk cache [ 71.612655][ T4927] BTRFS info (device loop0): turning on sync discard [ 71.614603][ T4927] BTRFS info (device loop0): disabling free space tree [ 71.615690][ T4927] BTRFS info (device loop0): has skinny extents [ 71.622660][ T1375] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0xb8b9d82e4a9942122dd30d6e1a5f8e2661e72a0b7a021b669507c1487c9951e3 level 0 [ 71.627417][ T4927] BTRFS warning (device loop0): couldn't read tree root [ 71.630074][ T1904] BTRFS warning (device loop0): checksum verify failed on 5320704 wanted 0x3a96b260394a7399f18798ce453684459093f28a490b1793d7ea697f0b0df10a found 0x43d57e81b22147e305dff737e146f6d81c05c3a9a4fec171a05f978e77d965b6 level 0 [ 71.634466][ T4927] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 71.636160][ T4927] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 71.637843][ T4927] BTRFS warning (device loop0): couldn't read tree root [ 71.641181][ T4927] BTRFS info (device loop0): enabling ssd optimizations [ 71.642907][ T4927] BTRFS info (device loop0): clearing free space tree [ 71.646036][ T4927] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.647979][ T4927] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.656813][ T4927] ================================================================== [ 71.658133][ T4927] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3cc [ 71.659301][ T4927] Write of size 4 at addr 0000000000000060 by task syz.0.15/4927 [ 71.660649][ T4927] [ 71.661024][ T4927] CPU: 0 PID: 4927 Comm: syz.0.15 Not tainted syzkaller #0 [ 71.662255][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 71.664035][ T4927] Call trace: [ 71.664598][ T4927] dump_backtrace+0x0/0x458 [ 71.665431][ T4927] show_stack+0x2c/0x3c [ 71.666167][ T4927] __dump_stack+0x30/0x40 [ 71.666941][ T4927] dump_stack_lvl+0xf4/0x15c [ 71.667714][ T4927] kasan_report+0xe0/0x158 [ 71.668429][ T4927] kasan_check_range+0x268/0x2a0 [ 71.669282][ T4927] __kasan_check_write+0x44/0x54 [ 71.670068][ T4927] btrfs_root_node+0x14c/0x3cc [ 71.670853][ T4927] btrfs_read_lock_root_node+0x68/0x35c [ 71.671742][ T4927] btrfs_search_slot+0x2fc/0x1f44 [ 71.672619][ T4927] btrfs_orphan_cleanup+0x194/0x7fc [ 71.673528][ T4927] btrfs_cleanup_fs_roots+0x53c/0x7c4 [ 71.674402][ T4927] btrfs_start_pre_rw_mount+0x14c/0x568 [ 71.675332][ T4927] open_ctree+0x1f18/0x27e8 [ 71.676113][ T4927] btrfs_fill_super+0x1b4/0x2d4 [ 71.676955][ T4927] btrfs_mount_root+0x780/0x7d0 [ 71.677816][ T4927] legacy_get_tree+0xd4/0x16c [ 71.678655][ T4927] vfs_get_tree+0x90/0x274 [ 71.679423][ T4927] vfs_kern_mount+0xdc/0x178 [ 71.680232][ T4927] btrfs_mount+0x2d4/0x950 [ 71.680992][ T4927] legacy_get_tree+0xd4/0x16c [ 71.681751][ T4927] vfs_get_tree+0x90/0x274 [ 71.682465][ T4927] do_new_mount+0x228/0x810 [ 71.683175][ T4927] path_mount+0x5bc/0x1008 [ 71.683859][ T4927] __arm64_sys_mount+0x514/0x5f0 [ 71.684659][ T4927] invoke_syscall+0x98/0x2b0 [ 71.685475][ T4927] el0_svc_common+0x138/0x258 [ 71.686286][ T4927] do_el0_svc+0x58/0x13c [ 71.686953][ T4927] el0_svc+0x78/0x1d0 [ 71.687610][ T4927] el0t_64_sync_handler+0xcc/0xe4 [ 71.688487][ T4927] el0t_64_sync+0x1a0/0x1a4 [ 71.689196][ T4927] ================================================================== [ 71.690539][ T4927] Disabling lock debugging due to kernel taint [ 71.692832][ T4927] Unable to handle kernel paging request at virtual address dfff80000000000c [ 71.694293][ T4927] Mem abort info: [ 71.694851][ T4927] ESR = 0x0000000096000006 [ 71.695590][ T4927] EC = 0x25: DABT (current EL), IL = 32 bits [ 71.696588][ T4927] SET = 0, FnV = 0 [ 71.697222][ T4927] EA = 0, S1PTW = 0 [ 71.697876][ T4927] FSC = 0x06: level 2 translation fault [ 71.698831][ T4927] Data abort info: [ 71.699494][ T4927] ISV = 0, ISS = 0x00000006 [ 71.700278][ T4927] CM = 0, WnR = 0 [ 71.700896][ T4927] [dfff80000000000c] address between user and kernel address ranges [ 71.702188][ T4927] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 71.703332][ T4927] Modules linked in: [ 71.703362][ T4921] Bluetooth: hci1: command 0x040f tx timeout [ 71.703973][ T4927] CPU: 1 PID: 4927 Comm: syz.0.15 Tainted: G B syzkaller #0 [ 71.706321][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 71.707849][ T4927] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.709160][ T4927] pc : btrfs_root_node+0x150/0x3cc [ 71.710002][ T4927] lr : btrfs_root_node+0x14c/0x3cc [ 71.710860][ T4927] sp : ffff80001f8b6f90 [ 71.711494][ T4927] x29: ffff80001f8b6f90 x28: dfff800000000000 x27: ffff8000117858c0 [ 71.712735][ T4927] x26: 0000000000000060 x25: 0000000000000000 x24: ffff8000117858c0 [ 71.714119][ T4927] x23: ffff8000166df000 x22: ffff800011786040 x21: 0000000000000001 [ 71.715474][ T4927] x20: 1fffe0001ac24000 x19: ffff0000d6120000 x18: 0000000000000002 [ 71.716775][ T4927] x17: 0000000040000000 x16: ffff8000082d87e4 x15: 0000000000000002 [ 71.718125][ T4927] x14: ffff700002d1cb70 x13: 1ffff00002d1cb70 x12: 0000000000ff0100 [ 71.719498][ T4927] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 71.720837][ T4927] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff800008247e40 [ 71.722124][ T4927] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008186eb0 [ 71.723381][ T4927] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 71.724592][ T4927] Call trace: [ 71.725117][ T4927] btrfs_root_node+0x150/0x3cc [ 71.725863][ T4927] btrfs_read_lock_root_node+0x68/0x35c [ 71.726661][ T4927] btrfs_search_slot+0x2fc/0x1f44 [ 71.727478][ T4927] btrfs_orphan_cleanup+0x194/0x7fc [ 71.728320][ T4927] btrfs_cleanup_fs_roots+0x53c/0x7c4 [ 71.729203][ T4927] btrfs_start_pre_rw_mount+0x14c/0x568 [ 71.730107][ T4927] open_ctree+0x1f18/0x27e8 [ 71.730796][ T4927] btrfs_fill_super+0x1b4/0x2d4 [ 71.731559][ T4927] btrfs_mount_root+0x780/0x7d0 [ 71.732411][ T4927] legacy_get_tree+0xd4/0x16c [ 71.733184][ T4927] vfs_get_tree+0x90/0x274 [ 71.733938][ T4927] vfs_kern_mount+0xdc/0x178 [ 71.734724][ T4927] btrfs_mount+0x2d4/0x950 [ 71.735469][ T4927] legacy_get_tree+0xd4/0x16c [ 71.736276][ T4927] vfs_get_tree+0x90/0x274 [ 71.737050][ T4927] do_new_mount+0x228/0x810 [ 71.737792][ T4927] path_mount+0x5bc/0x1008 [ 71.738488][ T4927] __arm64_sys_mount+0x514/0x5f0 [ 71.739300][ T4927] invoke_syscall+0x98/0x2b0 [ 71.740063][ T4927] el0_svc_common+0x138/0x258 [ 71.740858][ T4927] do_el0_svc+0x58/0x13c [ 71.741554][ T4927] el0_svc+0x78/0x1d0 [ 71.742161][ T4927] el0t_64_sync_handler+0xcc/0xe4 [ 71.742952][ T4927] el0t_64_sync+0x1a0/0x1a4 [ 71.743645][ T4927] Code: aa1b03f8 aa1a03e0 97a875ae d343ff48 (38fc6908) [ 71.744791][ T4927] ---[ end trace b34cb3c7bf0997b7 ]--- [ 71.976263][ T4927] Kernel panic - not syncing: Oops: Fatal exception [ 71.977323][ T4927] SMP: stopping secondary CPUs [ 71.978121][ T4927] Kernel Offset: disabled [ 71.978882][ T4927] CPU features: 0x8,000003c1,7d33ffd9 [ 71.979763][ T4927] Memory Limit: none [ 72.198077][ T4927] Rebooting in 86400 seconds..