Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. 1970/01/01 00:01:07 ignoring optional flag "type"="gce" 1970/01/01 00:01:07 parsed 1 programs [ 68.978507][ T4441] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.598784][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.599704][ T1969] cfg80211: failed to load regulatory.db [ 69.599968][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.465611][ T4547] chnl_net:caif_netlink_parms(): no params data found [ 70.484757][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.485925][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.487475][ T4547] device bridge_slave_0 entered promiscuous mode [ 70.489804][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.490930][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.492410][ T4547] device bridge_slave_1 entered promiscuous mode [ 70.501232][ T4547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.503685][ T4547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.511349][ T4547] team0: Port device team_slave_0 added [ 70.513128][ T4547] team0: Port device team_slave_1 added [ 70.520959][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.522092][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.525959][ T4547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.528692][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.529658][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.533454][ T4547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.598584][ T4547] device hsr_slave_0 entered promiscuous mode [ 70.637768][ T4547] device hsr_slave_1 entered promiscuous mode [ 71.319600][ T4547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.348764][ T4547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.387631][ T4547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.439346][ T4547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.512038][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.513395][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.514648][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.515930][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.529734][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.531275][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.562052][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.566144][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.567492][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.573261][ T4547] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.576217][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.577829][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.579381][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.580500][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.586849][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.590054][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.591525][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.592583][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.596058][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.599875][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.602851][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.605030][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.609351][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.613514][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.615105][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.616578][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.622810][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.625949][ T4547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.628689][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.631302][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.633112][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.690720][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.692047][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.694919][ T4547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.700879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.702664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.708554][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.710583][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.712132][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.713462][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.718715][ T4547] device veth0_vlan entered promiscuous mode [ 71.721954][ T4547] device veth1_vlan entered promiscuous mode [ 71.730723][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.732240][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.733631][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.735084][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.737330][ T4547] device veth0_macvtap entered promiscuous mode [ 71.740871][ T4547] device veth1_macvtap entered promiscuous mode [ 71.745905][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.747079][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.749827][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.751303][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.752844][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.755585][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.759549][ T4547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.760985][ T4547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.762388][ T4547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.763705][ T4547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.768475][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.770097][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.162810][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.303192][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.304504][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.306069][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.322035][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.323349][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.324888][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:12 executed programs: 0 [ 72.764439][ T4808] chnl_net:caif_netlink_parms(): no params data found [ 72.783849][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.785174][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.786778][ T4808] device bridge_slave_0 entered promiscuous mode [ 72.788992][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.790210][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.791740][ T4808] device bridge_slave_1 entered promiscuous mode [ 72.801356][ T4808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.804258][ T4808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.817008][ T4808] team0: Port device team_slave_0 added [ 72.819074][ T4808] team0: Port device team_slave_1 added [ 72.825821][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.826918][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.831200][ T4808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.833422][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.834448][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.838466][ T4808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.888775][ T4808] device hsr_slave_0 entered promiscuous mode [ 72.927955][ T4808] device hsr_slave_1 entered promiscuous mode [ 72.977606][ T4808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.978824][ T4808] Cannot create hsr debugfs directory [ 74.797615][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 74.950406][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.877729][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 77.270701][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.331603][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.221684][ T4808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.258996][ T4808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.299094][ T4808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.338964][ T4808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.406595][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.410867][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.412473][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.415008][ T4808] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.417420][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.420611][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.422158][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.423354][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.425163][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.430465][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.432079][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.433561][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.434584][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.436985][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.440641][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.443315][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.445342][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.447213][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.450895][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.452474][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.455519][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.457046][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.460270][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.461859][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.464671][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.504200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.505468][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.509341][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.515730][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.517389][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.523663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.525212][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.526776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.528598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.530956][ T4808] device veth0_vlan entered promiscuous mode [ 78.534682][ T4808] device veth1_vlan entered promiscuous mode [ 78.542062][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.543581][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.544994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.546504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.556908][ T4808] device veth0_macvtap entered promiscuous mode [ 78.560466][ T4808] device veth1_macvtap entered promiscuous mode [ 78.565146][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.566836][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.569358][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.570576][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.572125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.573608][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.575138][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.577472][ T4808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.579390][ T4808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.581714][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.590013][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.591705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.593487][ T4808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.594832][ T4808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.596202][ T4808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.597748][ T4808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.620694][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.622461][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.624950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.629768][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.631215][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.634168][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 2 [ 78.752591][ T5012] loop0: detected capacity change from 0 to 32768 [ 78.802068][ T5012] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (5012) [ 78.807306][ T5012] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 78.809355][ T5012] BTRFS info (device loop0): enabling auto defrag [ 78.810521][ T5012] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 78.812091][ T5012] BTRFS info (device loop0): trying to use backup root at mount time [ 78.813360][ T5012] BTRFS info (device loop0): metadata ratio 7 [ 78.814192][ T5012] BTRFS info (device loop0): force clearing of disk cache [ 78.815316][ T5012] BTRFS info (device loop0): turning on sync discard [ 78.816306][ T5012] BTRFS info (device loop0): disabling free space tree [ 78.817459][ T5012] BTRFS info (device loop0): has skinny extents [ 78.824950][ T1621] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0xb8b9d82e4a9942122dd30d6e1a5f8e2661e72a0b7a021b669507c1487c9951e3 level 0 [ 78.828812][ T5012] BTRFS warning (device loop0): couldn't read tree root [ 78.832180][ T336] BTRFS warning (device loop0): checksum verify failed on 5320704 wanted 0x3a96b260394a7399f18798ce453684459093f28a490b1793d7ea697f0b0df10a found 0x43d57e81b22147e305dff737e146f6d81c05c3a9a4fec171a05f978e77d965b6 level 0 [ 78.835532][ T5012] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 78.837109][ T5012] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 78.839364][ T5012] BTRFS warning (device loop0): couldn't read tree root [ 78.848078][ T5012] BTRFS info (device loop0): enabling ssd optimizations [ 78.849959][ T5012] BTRFS info (device loop0): clearing free space tree [ 78.851172][ T5012] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.852665][ T5012] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.861943][ T5012] ================================================================== [ 78.863201][ T5012] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3d4 [ 78.864218][ T5012] Write of size 4 at addr 0000000000000060 by task syz.0.15/5012 [ 78.865394][ T5012] [ 78.865759][ T5012] CPU: 1 PID: 5012 Comm: syz.0.15 Not tainted syzkaller #0 [ 78.866764][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.868192][ T5012] Call trace: [ 78.868655][ T5012] dump_backtrace+0x0/0x43c [ 78.869318][ T5012] show_stack+0x2c/0x3c [ 78.869945][ T5012] __dump_stack+0x30/0x40 [ 78.870573][ T5012] dump_stack_lvl+0xf8/0x160 [ 78.871233][ T5012] kasan_report+0xe0/0x15c [ 78.871870][ T5012] kasan_check_range+0x270/0x2b0 [ 78.872564][ T5012] __kasan_check_write+0x44/0x54 [ 78.873323][ T5012] btrfs_root_node+0x14c/0x3d4 [ 78.874043][ T5012] btrfs_read_lock_root_node+0x68/0x35c [ 78.874945][ T5012] btrfs_search_slot+0x2fc/0x1f4c [ 78.875792][ T5012] btrfs_orphan_cleanup+0x17c/0x7e0 [ 78.876605][ T5012] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 78.877442][ T5012] btrfs_start_pre_rw_mount+0x14c/0x568 [ 78.878243][ T5012] open_ctree+0x1ef0/0x27b8 [ 78.878869][ T5012] btrfs_fill_super+0x1b4/0x2d4 [ 78.879567][ T5012] btrfs_mount_root+0x730/0x780 [ 78.880279][ T5012] legacy_get_tree+0xd4/0x16c [ 78.880990][ T5012] vfs_get_tree+0x90/0x274 [ 78.881650][ T5012] vfs_kern_mount+0xdc/0x178 [ 78.882320][ T5012] btrfs_mount+0x2a0/0x8d4 [ 78.882996][ T5012] legacy_get_tree+0xd4/0x16c [ 78.883699][ T5012] vfs_get_tree+0x90/0x274 [ 78.884367][ T5012] do_new_mount+0x228/0x810 [ 78.885002][ T5012] path_mount+0x5b4/0x1000 [ 78.885652][ T5012] __arm64_sys_mount+0x514/0x5e4 [ 78.886415][ T5012] invoke_syscall+0x98/0x2b8 [ 78.887050][ T5012] el0_svc_common+0x138/0x258 [ 78.887756][ T5012] do_el0_svc+0x58/0x14c [ 78.888372][ T5012] el0_svc+0x78/0x1e0 [ 78.888966][ T5012] el0t_64_sync_handler+0xcc/0xe4 [ 78.889778][ T5012] el0t_64_sync+0x1a0/0x1a4 [ 78.890530][ T5012] ================================================================== [ 78.891751][ T5012] Disabling lock debugging due to kernel taint [ 78.894050][ T5012] Unable to handle kernel paging request at virtual address dfff80000000000c [ 78.895324][ T5012] Mem abort info: [ 78.895828][ T5012] ESR = 0x0000000096000006 [ 78.896530][ T5012] EC = 0x25: DABT (current EL), IL = 32 bits [ 78.897436][ T5012] SET = 0, FnV = 0 [ 78.899350][ T5012] EA = 0, S1PTW = 0 [ 78.899954][ T5012] FSC = 0x06: level 2 translation fault [ 78.900884][ T5012] Data abort info: [ 78.901441][ T5012] ISV = 0, ISS = 0x00000006 [ 78.902161][ T5012] CM = 0, WnR = 0 [ 78.902684][ T5012] [dfff80000000000c] address between user and kernel address ranges [ 78.903833][ T5012] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 78.904910][ T5012] Modules linked in: [ 78.905502][ T5012] CPU: 1 PID: 5012 Comm: syz.0.15 Tainted: G B syzkaller #0 [ 78.906798][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.908330][ T5012] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.909483][ T5012] pc : btrfs_root_node+0x150/0x3d4 [ 78.910318][ T5012] lr : btrfs_root_node+0x14c/0x3d4 [ 78.911062][ T5012] sp : ffff80001f5f6f90 [ 78.911677][ T5012] x29: ffff80001f5f6f90 x28: dfff800000000000 x27: ffff800011694740 [ 78.912907][ T5012] x26: 0000000000000060 x25: 0000000000000000 x24: ffff800011694740 [ 78.914204][ T5012] x23: ffff80001655e000 x22: ffff800011694ec0 x21: 0000000000000001 [ 78.915441][ T5012] x20: 1fffe0001b3ec400 x19: ffff0000d9f62000 x18: 0000000000000002 [ 78.916660][ T5012] x17: 0000000040000000 x16: ffff8000082d6484 x15: 0000000000000002 [ 78.917800][ T5012] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 78.918989][ T5012] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 78.920184][ T5012] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff8000082459cc [ 78.921517][ T5012] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008185e44 [ 78.922775][ T5012] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 78.923976][ T5012] Call trace: [ 78.924439][ T5012] btrfs_root_node+0x150/0x3d4 [ 78.925169][ T5012] btrfs_read_lock_root_node+0x68/0x35c [ 78.925975][ T5012] btrfs_search_slot+0x2fc/0x1f4c [ 78.926727][ T5012] btrfs_orphan_cleanup+0x17c/0x7e0 [ 78.927506][ T5012] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 78.928280][ T5012] btrfs_start_pre_rw_mount+0x14c/0x568 [ 78.929094][ T5012] open_ctree+0x1ef0/0x27b8 [ 78.929750][ T5012] btrfs_fill_super+0x1b4/0x2d4 [ 78.930459][ T5012] btrfs_mount_root+0x730/0x780 [ 78.931195][ T5012] legacy_get_tree+0xd4/0x16c [ 78.931880][ T5012] vfs_get_tree+0x90/0x274 [ 78.932529][ T5012] vfs_kern_mount+0xdc/0x178 [ 78.933223][ T5012] btrfs_mount+0x2a0/0x8d4 [ 78.933848][ T5012] legacy_get_tree+0xd4/0x16c [ 78.934573][ T5012] vfs_get_tree+0x90/0x274 [ 78.935258][ T5012] do_new_mount+0x228/0x810 [ 78.935955][ T5012] path_mount+0x5b4/0x1000 [ 78.936584][ T5012] __arm64_sys_mount+0x514/0x5e4 [ 78.937319][ T5012] invoke_syscall+0x98/0x2b8 [ 78.938015][ T5012] el0_svc_common+0x138/0x258 [ 78.938751][ T5012] do_el0_svc+0x58/0x14c [ 78.939434][ T5012] el0_svc+0x78/0x1e0 [ 78.940047][ T5012] el0t_64_sync_handler+0xcc/0xe4 [ 78.940834][ T5012] el0t_64_sync+0x1a0/0x1a4 [ 78.941488][ T5012] Code: aa1b03f8 aa1a03e0 97a8fc42 d343ff48 (38fc6908) [ 78.942491][ T5012] ---[ end trace 12b3dad9d1c9dea2 ]--- [ 79.151707][ T5012] Kernel panic - not syncing: Oops: Fatal exception [ 79.152707][ T5012] SMP: stopping secondary CPUs [ 79.153420][ T5012] Kernel Offset: disabled [ 79.154088][ T5012] CPU features: 0x8,000003c1,7d33ffd9 [ 79.154877][ T5012] Memory Limit: none [ 79.366840][ T5012] Rebooting in 86400 seconds..