Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. 2025/11/27 15:21:38 ignoring optional flag "type"="gce" 2025/11/27 15:21:39 parsed 1 programs 2025/11/27 15:21:39 executed programs: 0 [ 79.278748][ T4424] chnl_net:caif_netlink_parms(): no params data found [ 79.318613][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.327325][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.336175][ T4424] device bridge_slave_0 entered promiscuous mode [ 79.345535][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.353114][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.361651][ T4424] device bridge_slave_1 entered promiscuous mode [ 79.382686][ T4424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.394266][ T4424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.416564][ T4424] team0: Port device team_slave_0 added [ 79.424490][ T4424] team0: Port device team_slave_1 added [ 79.444150][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.451225][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.477984][ T4424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.490673][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.498213][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.524766][ T4424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.564113][ T4424] device hsr_slave_0 entered promiscuous mode [ 79.571239][ T4424] device hsr_slave_1 entered promiscuous mode [ 80.086438][ T4424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.096877][ T4424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.106234][ T4424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.116419][ T4424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.137655][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.144933][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.152391][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.159669][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.217473][ T4424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.234002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.243576][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.251542][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.260676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.280613][ T4424] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.291312][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.301653][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.310914][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.318101][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.339586][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.348530][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.358984][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.366236][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.385503][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.403817][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.413812][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.426172][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.435870][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.445839][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.463092][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.472012][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.481441][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.491393][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.502974][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.513419][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.645759][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.655576][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.671063][ T4424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.696837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.707474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.730691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.742002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.754436][ T4424] device veth0_vlan entered promiscuous mode [ 80.764807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.773420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.786680][ T4424] device veth1_vlan entered promiscuous mode [ 80.811809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.821504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.831168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.842989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.856576][ T4424] device veth0_macvtap entered promiscuous mode [ 80.869585][ T4424] device veth1_macvtap entered promiscuous mode [ 80.890044][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.900323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.909538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.919977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.929625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.943248][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.953759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.963982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.976960][ T4424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.987115][ T4424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.996990][ T4424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.007234][ T4424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.253481][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 81.379673][ T4513] loop0: detected capacity change from 0 to 32768 [ 81.413894][ T4513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4513) [ 81.462758][ T4513] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 81.479883][ T4513] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 81.491671][ T4513] BTRFS info (device loop0): using free space tree [ 81.512437][ T4513] BTRFS info (device loop0): has skinny extents [ 81.650560][ T4513] BTRFS info (device loop0): enabling ssd optimizations [ 81.727219][ T2033] cfg80211: failed to load regulatory.db [ 83.334116][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 85.403359][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 87.482572][ T2862] Bluetooth: hci0: command 0x0419 tx timeout [ 132.925236][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931641][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/27 15:22:36 executed programs: 1 [ 137.214436][ T4769] chnl_net:caif_netlink_parms(): no params data found [ 137.254896][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.262171][ T4769] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.270313][ T4769] device bridge_slave_0 entered promiscuous mode [ 137.278504][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.286288][ T4769] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.294162][ T4769] device bridge_slave_1 entered promiscuous mode [ 137.315265][ T4769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.326197][ T4769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.348421][ T4769] team0: Port device team_slave_0 added [ 137.356668][ T4769] team0: Port device team_slave_1 added [ 137.375259][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.382508][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.409851][ T4769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.423571][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.430752][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.457442][ T4769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.486098][ T4769] device hsr_slave_0 entered promiscuous mode [ 137.493699][ T4769] device hsr_slave_1 entered promiscuous mode [ 137.500449][ T4769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.509161][ T4769] Cannot create hsr debugfs directory [ 137.575635][ T4769] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.644568][ T4769] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.702252][ T4769] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.761337][ T4769] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.866723][ T4769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.877046][ T4769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.886485][ T4769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.896644][ T4769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.918537][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.925912][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.933641][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.941448][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.980232][ T4769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.995331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.004546][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.013380][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.021627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 138.034193][ T4769] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.046256][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.055132][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.062468][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.075479][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.084255][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.091531][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.112102][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.121107][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.134579][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.146721][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.158749][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.169926][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.251749][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.259681][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.271301][ T4769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.290551][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.299896][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.318936][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.329040][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.338832][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.346939][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.357553][ T4769] device veth0_vlan entered promiscuous mode [ 138.369318][ T4769] device veth1_vlan entered promiscuous mode [ 138.387648][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.397266][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.406135][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.415491][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.426670][ T4769] device veth0_macvtap entered promiscuous mode [ 138.436741][ T4769] device veth1_macvtap entered promiscuous mode [ 138.450663][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.461740][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.474778][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.482726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.491370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.500141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.509222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.521149][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.532551][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.545419][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.553951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.563077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.573405][ T4769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.582110][ T4769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.591576][ T4769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.600616][ T4769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.163282][ T4223] Bluetooth: hci1: command 0x0409 tx timeout [ 141.242441][ T2862] Bluetooth: hci1: command 0x041b tx timeout 2025/11/27 15:22:41 executed programs: 10 [ 143.322410][ T2862] Bluetooth: hci1: command 0x040f tx timeout [ 145.402415][ T2033] Bluetooth: hci1: command 0x0419 tx timeout 2025/11/27 15:22:46 executed programs: 27 2025/11/27 15:22:51 executed programs: 45 2025/11/27 15:22:57 executed programs: 63 2025/11/27 15:23:02 executed programs: 81 2025/11/27 15:23:07 executed programs: 99 2025/11/27 15:23:12 executed programs: 117 2025/11/27 15:23:17 executed programs: 135 2025/11/27 15:23:23 executed programs: 153 2025/11/27 15:23:28 executed programs: 171 2025/11/27 15:23:33 executed programs: 189 [ 194.366198][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.373376][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/27 15:23:38 executed programs: 207 [ 201.572512][ T13] Bluetooth: hci0: command 0x0406 tx timeout 2025/11/27 15:23:43 executed programs: 225 2025/11/27 15:23:48 executed programs: 242 2025/11/27 15:23:54 executed programs: 260 2025/11/27 15:23:59 executed programs: 278 2025/11/27 15:24:04 executed programs: 296 2025/11/27 15:24:09 executed programs: 314 2025/11/27 15:24:14 executed programs: 332 2025/11/27 15:24:19 executed programs: 350 [ 242.372748][ T27] INFO: task syz-executor.0:4513 blocked for more than 143 seconds. [ 242.380995][ T27] Not tainted syzkaller #0 [ 242.390943][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.400024][ T27] task:syz-executor.0 state:D stack:23816 pid: 4513 ppid: 4424 flags:0x00004006 [ 242.412045][ T27] Call Trace: [ 242.415610][ T27] [ 242.418656][ T27] __schedule+0x11bb/0x4390 [ 242.425813][ T27] ? wait_extent_bit+0x396/0x4d0 [ 242.431008][ T27] ? release_firmware_map_entry+0x190/0x190 [ 242.437350][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 242.446142][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 242.452200][ T27] ? _raw_spin_unlock+0x40/0x40 [ 242.457414][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 242.465348][ T27] schedule+0x11b/0x1e0 [ 242.470022][ T27] wait_extent_bit+0x39b/0x4d0 [ 242.475420][ T27] ? lock_extent_bits+0x110/0x110 [ 242.480885][ T27] ? init_wait_entry+0xd0/0xd0 [ 242.488345][ T27] ? __might_sleep+0xf0/0xf0 [ 242.493983][ T27] ? file_update_time+0x3a2/0x400 [ 242.499339][ T27] lock_extent_bits+0x82/0x110 [ 242.506896][ T27] btrfs_page_mkwrite+0x5b1/0xc50 [ 242.512677][ T27] ? btrfs_submit_direct+0x10d0/0x10d0 [ 242.518298][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 242.532489][ T27] do_page_mkwrite+0x168/0x3c0 [ 242.537417][ T27] wp_page_shared+0x16b/0x6d0 [ 242.542769][ T27] handle_mm_fault+0x1ec7/0x43b0 [ 242.547957][ T27] ? get_page+0xe0/0xe0 [ 242.552736][ T27] ? vmacache_find+0x1e2/0x590 [ 242.557703][ T27] ? vmacache_update+0xa0/0x100 [ 242.563083][ T27] ? find_vma+0x1df/0x230 [ 242.567836][ T27] do_user_addr_fault+0x489/0xc80 [ 242.573584][ T27] exc_page_fault+0x60/0x100 [ 242.578751][ T27] asm_exc_page_fault+0x22/0x30 [ 242.584147][ T27] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 242.590635][ T27] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 242.624646][ T27] RSP: 0018:ffffc9000339f6a0 EFLAGS: 00050202 [ 242.637589][ T27] RAX: ffffffff83daee01 RBX: 0000000000000038 RCX: 0000000000000007 [ 242.646238][ T27] RDX: 0000000000000000 RSI: ffffc9000339f740 RDI: 00000000200000e0 [ 242.664589][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000673eef [ 242.684889][ T27] R10: fffff52000673eef R11: 1ffff92000673ee8 R12: 00007ffffffff000 [ 242.704593][ T27] R13: 0000000020000118 R14: ffffc9000339f740 R15: 00000000200000e0 [ 242.724559][ T27] ? _copy_to_user+0x71/0x130 [ 242.729582][ T27] _copy_to_user+0xf0/0x130 [ 242.744594][ T27] fiemap_fill_next_extent+0x19d/0x360 [ 242.750130][ T27] ? vfs_ioctl+0xb0/0xb0 [ 242.766292][ T27] ? lock_extent_bits+0x59/0x110 [ 242.771309][ T27] ? lock_extent_bits+0xe6/0x110 [ 242.788074][ T27] extent_fiemap+0x10ff/0x14f0 [ 242.797898][ T27] ? extent_fiemap+0xf81/0x14f0 [ 242.803237][ T27] ? try_release_extent_mapping+0x570/0x570 [ 242.809480][ T27] ? fiemap_prep+0x1be/0x240 [ 242.814616][ T27] btrfs_fiemap+0xc0/0x110 [ 242.819267][ T27] ? btrfs_getattr+0x4a0/0x4a0 [ 242.824592][ T27] ? __might_fault+0xb3/0x110 [ 242.829407][ T27] ? _copy_from_user+0x111/0x170 [ 242.835683][ T27] do_vfs_ioctl+0x1464/0x1de0 [ 242.841306][ T27] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 242.847988][ T27] ? rcu_lock_release+0x5/0x20 [ 242.853385][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 242.858657][ T27] ? kfree+0xef/0x2a0 [ 242.863401][ T27] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 242.869213][ T27] ? verify_lock_unused+0x140/0x140 [ 242.874954][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 242.880709][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 242.886226][ T27] ? security_file_ioctl+0x7c/0xa0 [ 242.891646][ T27] __se_sys_ioctl+0x83/0x170 [ 242.896840][ T27] do_syscall_64+0x4c/0xa0 [ 242.901565][ T27] ? clear_bhb_loop+0x30/0x80 [ 242.906893][ T27] ? clear_bhb_loop+0x30/0x80 [ 242.911960][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.918653][ T27] RIP: 0033:0x7ff615d14959 [ 242.923834][ T27] RSP: 002b:00007ff6150960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.932893][ T27] RAX: ffffffffffffffda RBX: 00007ff615e33f80 RCX: 00007ff615d14959 [ 242.941272][ T27] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 242.950890][ T27] RBP: 00007ff615d70c88 R08: 0000000000000000 R09: 0000000000000000 [ 242.961863][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.970521][ T27] R13: 000000000000000b R14: 00007ff615e33f80 R15: 00007ffc18383ac8 [ 242.981335][ T27] [ 242.988108][ T27] [ 242.988108][ T27] Showing all locks held in the system: [ 243.006465][ T27] 1 lock held by khungtaskd/27: [ 243.017848][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 243.031371][ T27] 2 locks held by getty/3953: [ 243.036257][ T27] #0: ffff88802c291098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 243.047328][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 243.058606][ T27] 3 locks held by syz-executor.0/4513: [ 243.064311][ T27] #0: ffff88807c74f828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2b9/0xc80 [ 243.075330][ T27] #1: ffff888022d1c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x168/0x3c0 [ 243.085159][ T27] #2: ffff88806ec89838 (&ei->i_mmap_lock){.+.+}-{3:3}, at: btrfs_page_mkwrite+0x461/0xc50 [ 243.095983][ T27] [ 243.111532][ T27] ============================================= [ 243.111532][ T27] [ 243.120296][ T27] NMI backtrace for cpu 1 [ 243.124650][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 243.131884][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.141960][ T27] Call Trace: [ 243.145263][ T27] [ 243.148223][ T27] dump_stack_lvl+0x168/0x230 [ 243.153022][ T27] ? show_regs_print_info+0x20/0x20 [ 243.158247][ T27] ? load_image+0x3b0/0x3b0 [ 243.163041][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 243.168497][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 243.173924][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 243.179065][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 243.185246][ T27] ? _printk+0xcc/0x110 [ 243.189543][ T27] ? load_image+0x3b0/0x3b0 [ 243.194080][ T27] ? load_image+0x3b0/0x3b0 [ 243.198681][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 243.204947][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 243.211273][ T27] watchdog+0xe0f/0xe50 [ 243.215689][ T27] kthread+0x436/0x520 [ 243.219974][ T27] ? hungtask_pm_notify+0x40/0x40 [ 243.225212][ T27] ? kthread_blkcg+0xd0/0xd0 [ 243.230201][ T27] ret_from_fork+0x1f/0x30 [ 243.234845][ T27] [ 243.238441][ T27] Sending NMI from CPU 1 to CPUs 0: [ 243.243704][ C0] NMI backtrace for cpu 0 [ 243.243715][ C0] CPU: 0 PID: 5882 Comm: syz-executor.0 Not tainted syzkaller #0 [ 243.243730][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.243737][ C0] RIP: 0033:0x7f3be2970926 [ 243.243751][ C0] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 243.243763][ C0] RSP: 002b:00007f3be1d45520 EFLAGS: 00000202 [ 243.243777][ C0] RAX: 0000000000b4bab6 RBX: 00007f3be1d455c0 RCX: 0000000000000073 [ 243.243787][ C0] RDX: 0000000000000015 RSI: 0000000000000001 RDI: 00007f3be1d45660 [ 243.243796][ C0] RBP: 0000000000000102 R08: 00007f3bd9926000 R09: 0000000000b4bab5 [ 243.243805][ C0] R10: 0000000000000000 R11: 00007f3be1d455d0 R12: 0000000000000001 [ 243.243813][ C0] R13: 00007f3be2a322c0 R14: 0000000000000000 R15: 00007f3be1d45660 [ 243.243823][ C0] FS: 00007f3be1d466c0 GS: 0000000000000000 [ 243.355339][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 243.362321][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 243.370427][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.380690][ T27] Call Trace: [ 243.384098][ T27] [ 243.387151][ T27] dump_stack_lvl+0x168/0x230 [ 243.391954][ T27] ? show_regs_print_info+0x20/0x20 [ 243.397182][ T27] ? load_image+0x3b0/0x3b0 [ 243.401726][ T27] panic+0x2c9/0x7f0 [ 243.405745][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 243.411675][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 243.416314][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 243.422720][ T27] watchdog+0xe4e/0xe50 [ 243.427043][ T27] kthread+0x436/0x520 [ 243.431230][ T27] ? hungtask_pm_notify+0x40/0x40 [ 243.436378][ T27] ? kthread_blkcg+0xd0/0xd0 [ 243.441181][ T27] ret_from_fork+0x1f/0x30 [ 243.445738][ T27] [ 243.449010][ T27] Kernel Offset: disabled [ 243.453597][ T27] Rebooting in 86400 seconds..