[ 71.759962][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.766741][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. 2025/07/03 09:24:19 ignoring optional flag "sandboxArg"="0" 2025/07/03 09:24:19 ignoring optional flag "type"="gce" 2025/07/03 09:24:19 parsed 1 programs 2025/07/03 09:24:19 executed programs: 0 [ 72.761564][ T4396] chnl_net:caif_netlink_parms(): no params data found [ 72.823084][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.831399][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.840175][ T4396] device bridge_slave_0 entered promiscuous mode [ 72.850219][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.857726][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.865627][ T4396] device bridge_slave_1 entered promiscuous mode [ 72.890232][ T4396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.902740][ T4396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.936870][ T4396] team0: Port device team_slave_0 added [ 72.945158][ T4396] team0: Port device team_slave_1 added [ 72.974789][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.986548][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.012721][ T4396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.026352][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.033987][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.062345][ T4396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.103085][ T4396] device hsr_slave_0 entered promiscuous mode [ 73.113074][ T4396] device hsr_slave_1 entered promiscuous mode [ 73.716121][ T4396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.729113][ T4396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.739575][ T4396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.751752][ T4396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.832276][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.848246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.857627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.869216][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.880787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.889824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.900146][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.907401][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.918810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.930783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.941113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.950326][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.958023][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.979105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.989502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.000354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.012443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.027691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.035920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.045332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.054719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.063899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.075367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.084360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.097523][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.214803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.222622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.239737][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.263114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.274542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.299267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.309168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.320861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.329562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.342887][ T4396] device veth0_vlan entered promiscuous mode [ 74.355968][ T4396] device veth1_vlan entered promiscuous mode [ 74.379144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.388711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.397503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.406554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.420523][ T4396] device veth0_macvtap entered promiscuous mode [ 74.432200][ T4396] device veth1_macvtap entered promiscuous mode [ 74.450656][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.458316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.468768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.477374][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.486254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.500457][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.509277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.518906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.530369][ T4396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.540730][ T4396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.552227][ T4396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.561803][ T4396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.637693][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 74.648894][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.661438][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.680607][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.698666][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.708581][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.723255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.005641][ T4509] loop0: detected capacity change from 0 to 32768 [ 75.022113][ T4509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4509) [ 75.082091][ T4509] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.100426][ T4509] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 75.112053][ T4509] BTRFS info (device loop0): using free space tree [ 75.121555][ T4509] BTRFS info (device loop0): has skinny extents [ 75.238682][ T4509] BTRFS info (device loop0): enabling ssd optimizations [ 76.718190][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 76.879615][ T7] cfg80211: failed to load regulatory.db [ 78.796980][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 80.876843][ T7] Bluetooth: hci0: command 0x0419 tx timeout 2025/07/03 09:25:16 executed programs: 1 [ 130.910377][ T4752] chnl_net:caif_netlink_parms(): no params data found [ 130.949933][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.957255][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.964941][ T4752] device bridge_slave_0 entered promiscuous mode [ 130.973790][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.980991][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.989221][ T4752] device bridge_slave_1 entered promiscuous mode [ 131.008945][ T4752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.019805][ T4752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.046797][ T4752] team0: Port device team_slave_0 added [ 131.054593][ T4752] team0: Port device team_slave_1 added [ 131.073122][ T4752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.080230][ T4752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.106772][ T4752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.118716][ T4752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.125675][ T4752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.152078][ T4752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.180322][ T4752] device hsr_slave_0 entered promiscuous mode [ 131.187376][ T4752] device hsr_slave_1 entered promiscuous mode [ 131.194025][ T4752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.202133][ T4752] Cannot create hsr debugfs directory [ 131.265225][ T4752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.339104][ T4752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.404869][ T4752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.474372][ T4752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.593541][ T4752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.602915][ T4752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.611891][ T4752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.621769][ T4752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.643917][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.651057][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.658536][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.665610][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.703667][ T4752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.716942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.725764][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.733614][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.742036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 131.756425][ T4752] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.770832][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.779462][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.786525][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.798647][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.807353][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.814439][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.835063][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.843666][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.856967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.874136][ T4752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.885013][ T4752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.899199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.908149][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.918163][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.993211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.001067][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.012993][ T4752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.031227][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.041067][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.061422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.070282][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.082866][ T4752] device veth0_vlan entered promiscuous mode [ 132.089919][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.097901][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.112048][ T4752] device veth1_vlan entered promiscuous mode [ 132.132313][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.140829][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.149605][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.158529][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.169387][ T4752] device veth0_macvtap entered promiscuous mode [ 132.180868][ T4752] device veth1_macvtap entered promiscuous mode [ 132.195099][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.206011][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.218172][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.225607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.234407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.242959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.251988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.263172][ T4752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.274616][ T4752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.286199][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.294546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.303514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.315140][ T4752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.324596][ T4752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.333614][ T4752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.342571][ T4752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.393478][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.409732][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.420356][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.430592][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.439433][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.450237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.877056][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 133.200319][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.206751][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/03 09:25:22 executed programs: 10 [ 134.956732][ T4194] Bluetooth: hci1: command 0x041b tx timeout [ 137.036792][ T4194] Bluetooth: hci1: command 0x040f tx timeout [ 139.116685][ T4194] Bluetooth: hci1: command 0x0419 tx timeout 2025/07/03 09:25:27 executed programs: 29 2025/07/03 09:25:32 executed programs: 49 2025/07/03 09:25:37 executed programs: 69 2025/07/03 09:25:42 executed programs: 89 2025/07/03 09:25:47 executed programs: 109 2025/07/03 09:25:52 executed programs: 129 2025/07/03 09:25:57 executed programs: 150 2025/07/03 09:26:02 executed programs: 170 2025/07/03 09:26:08 executed programs: 190 2025/07/03 09:26:13 executed programs: 211 2025/07/03 09:26:18 executed programs: 232 [ 194.648285][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/03 09:26:23 executed programs: 252 [ 196.716780][ T4194] Bluetooth: hci0: command 0x0406 tx timeout 2025/07/03 09:26:28 executed programs: 272 2025/07/03 09:26:33 executed programs: 292 2025/07/03 09:26:38 executed programs: 313 2025/07/03 09:26:44 executed programs: 334 2025/07/03 09:26:49 executed programs: 355 2025/07/03 09:26:54 executed programs: 375 2025/07/03 09:26:59 executed programs: 396 [ 236.236841][ T27] INFO: task syz-executor.0:4509 blocked for more than 143 seconds. [ 236.245241][ T27] Not tainted 5.15.186-syzkaller #0 [ 236.261244][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.276603][ T27] task:syz-executor.0 state:D stack:24016 pid: 4509 ppid: 4396 flags:0x00004006 [ 236.285898][ T27] Call Trace: [ 236.306614][ T27] [ 236.309615][ T27] __schedule+0x11b8/0x43b0 [ 236.314628][ T27] ? wait_extent_bit+0x396/0x4d0 [ 236.326612][ T27] ? release_firmware_map_entry+0x190/0x190 [ 236.332581][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 236.346617][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 236.352663][ T27] ? _raw_spin_unlock+0x40/0x40 [ 236.366613][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 236.371617][ T27] schedule+0x11b/0x1e0 [ 236.375815][ T27] wait_extent_bit+0x39b/0x4d0 [ 236.381866][ T27] ? lock_extent_bits+0x110/0x110 [ 236.388349][ T27] ? init_wait_entry+0xd0/0xd0 [ 236.394121][ T27] ? __might_sleep+0xf0/0xf0 [ 236.399586][ T27] ? file_update_time+0x3a2/0x400 [ 236.404893][ T27] lock_extent_bits+0x82/0x110 [ 236.410149][ T27] btrfs_page_mkwrite+0x5b1/0xc50 [ 236.415408][ T27] ? btrfs_submit_direct+0x10c0/0x10c0 [ 236.421880][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 236.427251][ T27] do_page_mkwrite+0x168/0x3c0 [ 236.432043][ T27] wp_page_shared+0x16b/0x6d0 [ 236.437080][ T27] handle_mm_fault+0x1eca/0x43c0 [ 236.442150][ T27] ? get_page+0xe0/0xe0 [ 236.446331][ T27] ? vmacache_find+0x1e2/0x590 [ 236.451646][ T27] ? vmacache_update+0xa0/0x100 [ 236.466852][ T27] ? find_vma+0x1df/0x230 [ 236.471245][ T27] do_user_addr_fault+0x489/0xc80 [ 236.476477][ T27] exc_page_fault+0x60/0x100 [ 236.481668][ T27] asm_exc_page_fault+0x22/0x30 [ 236.496685][ T27] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 236.503342][ T27] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 236.536616][ T27] RSP: 0018:ffffc90002edf6a0 EFLAGS: 00050202 [ 236.542754][ T27] RAX: ffffffff83db8d01 RBX: 0000000000000038 RCX: 0000000000000007 [ 236.556612][ T27] RDX: 0000000000000000 RSI: ffffc90002edf740 RDI: 00000000200000e0 [ 236.564839][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520005dbeef [ 236.586597][ T27] R10: fffff520005dbeef R11: 1ffff920005dbee8 R12: 00007ffffffff000 [ 236.595052][ T27] R13: 0000000020000118 R14: ffffc90002edf740 R15: 00000000200000e0 [ 236.603470][ T27] ? _copy_to_user+0x61/0x130 [ 236.608496][ T27] _copy_to_user+0xf0/0x130 [ 236.613025][ T27] fiemap_fill_next_extent+0x19d/0x360 [ 236.618895][ T27] ? vfs_ioctl+0xb0/0xb0 [ 236.623200][ T27] ? lock_extent_bits+0xbf/0x110 [ 236.628531][ T27] ? lock_extent_bits+0xdf/0x110 [ 236.633499][ T27] extent_fiemap+0x10ff/0x14f0 [ 236.638706][ T27] ? extent_fiemap+0xf21/0x14f0 [ 236.643596][ T27] ? try_release_extent_mapping+0x570/0x570 [ 236.649882][ T27] ? fiemap_prep+0x1be/0x240 [ 236.654509][ T27] btrfs_fiemap+0xc0/0x110 [ 236.659359][ T27] ? btrfs_getattr+0x4a0/0x4a0 [ 236.664150][ T27] ? __might_fault+0xb3/0x110 [ 236.669411][ T27] ? _copy_from_user+0x111/0x170 [ 236.674573][ T27] do_vfs_ioctl+0x1464/0x1de0 [ 236.679888][ T27] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 236.685757][ T27] ? rcu_lock_release+0x5/0x20 [ 236.691001][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 236.696259][ T27] ? kfree+0xef/0x2a0 [ 236.700822][ T27] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 236.707101][ T27] ? verify_lock_unused+0x140/0x140 [ 236.712440][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 236.718411][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 236.723392][ T27] ? security_file_ioctl+0x7c/0xa0 [ 236.728973][ T27] __se_sys_ioctl+0x83/0x170 [ 236.733597][ T27] do_syscall_64+0x4c/0xa0 [ 236.738420][ T27] ? clear_bhb_loop+0x30/0x80 [ 236.743133][ T27] ? clear_bhb_loop+0x30/0x80 [ 236.748207][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.754133][ T27] RIP: 0033:0x7f43824e8959 [ 236.759032][ T27] RSP: 002b:00007f438186a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.767814][ T27] RAX: ffffffffffffffda RBX: 00007f4382607f80 RCX: 00007f43824e8959 [ 236.775815][ T27] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 236.784212][ T27] RBP: 00007f4382544c88 R08: 0000000000000000 R09: 0000000000000000 [ 236.792517][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.800926][ T27] R13: 000000000000000b R14: 00007f4382607f80 R15: 00007ffd5e8c27f8 [ 236.809394][ T27] [ 236.812558][ T27] [ 236.812558][ T27] Showing all locks held in the system: [ 236.826642][ T27] 1 lock held by khungtaskd/27: [ 236.831599][ T27] #0: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 236.846663][ T27] 3 locks held by kworker/0:2/1111: [ 236.851998][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 236.877912][ T27] #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 236.889818][ T27] #2: ffff88802b334ee0 (&r->consumer_lock#2){+.+.}-{2:2}, at: wg_packet_decrypt_worker+0x8ed/0xda0 [ 236.902062][ T27] 2 locks held by getty/3938: [ 236.907130][ T27] #0: ffff88802bd45098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 236.917352][ T27] #1: ffffc900025d62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 236.928450][ T27] 3 locks held by syz-executor.0/4509: [ 236.934764][ T27] #0: ffff8880725a6328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2b9/0xc80 [ 236.945333][ T27] #1: ffff88807c47c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x168/0x3c0 [ 236.959722][ T27] #2: ffff88806ed98e68 (&ei->i_mmap_lock){.+.+}-{3:3}, at: btrfs_page_mkwrite+0x461/0xc50 [ 236.970561][ T27] 4 locks held by udevadm/6021: [ 236.975905][ T27] [ 236.978702][ T27] ============================================= [ 236.978702][ T27] [ 236.987681][ T27] NMI backtrace for cpu 1 [ 236.992033][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.186-syzkaller #0 [ 237.000146][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.010307][ T27] Call Trace: [ 237.013607][ T27] [ 237.016545][ T27] dump_stack_lvl+0x168/0x230 [ 237.021267][ T27] ? show_regs_print_info+0x20/0x20 [ 237.026496][ T27] ? load_image+0x3b0/0x3b0 [ 237.031111][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 237.036756][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 237.041896][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 237.046862][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 237.053223][ T27] ? _printk+0xcc/0x110 [ 237.057400][ T27] ? load_image+0x3b0/0x3b0 [ 237.062128][ T27] ? load_image+0x3b0/0x3b0 [ 237.067477][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 237.073556][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 237.079561][ T27] watchdog+0xe0f/0xe50 [ 237.083756][ T27] kthread+0x436/0x520 [ 237.088036][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.093086][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.097700][ T27] ret_from_fork+0x1f/0x30 [ 237.102225][ T27] [ 237.105342][ T27] Sending NMI from CPU 1 to CPUs 0: [ 237.110635][ C0] NMI backtrace for cpu 0 [ 237.110651][ C0] CPU: 0 PID: 6023 Comm: syz-executor.0 Not tainted 5.15.186-syzkaller #0 [ 237.110669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.110676][ C0] RIP: 0010:__lock_acquire+0xe67/0x7c60 [ 237.110701][ C0] Code: 68 00 00 00 00 48 8b 5c 24 78 48 89 d8 48 c1 e8 03 42 80 3c 00 00 74 12 48 89 df e8 83 43 61 00 49 b8 00 00 00 00 00 fc ff df <4c> 89 3b 48 8b 84 24 88 00 00 00 42 0f b6 04 00 84 c0 0f 85 cd 5a [ 237.110715][ C0] RSP: 0018:ffffc9000616f3c0 EFLAGS: 00000046 [ 237.110729][ C0] RAX: 1ffff110057908d8 RBX: ffff88802bc846c0 RCX: ffffffff815bf864 [ 237.110740][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff9b0c0 [ 237.110749][ C0] RBP: ffffc9000616f610 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 237.110758][ C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffff88802bc846e0 [ 237.110768][ C0] R13: ffff88802bc83b80 R14: 1ffff110057908cc R15: cc507a6d64426c8f [ 237.110778][ C0] FS: 00007f604bf9c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 237.110790][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.110800][ C0] CR2: 00007f6044b7b000 CR3: 000000007bcbb000 CR4: 00000000003506f0 [ 237.110812][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.110820][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.110829][ C0] Call Trace: [ 237.110834][ C0] [ 237.110842][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 237.110862][ C0] ? try_charge_memcg+0x1ee/0x14a0 [ 237.110877][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 237.110896][ C0] ? verify_lock_unused+0x140/0x140 [ 237.110915][ C0] ? mark_lock+0x94/0x320 [ 237.110931][ C0] lock_acquire+0x197/0x3f0 [ 237.110945][ C0] ? __page_memcg+0x140/0x140 [ 237.110960][ C0] ? charge_memcg+0x23f/0x2e0 [ 237.110972][ C0] ? read_lock_is_recursive+0x10/0x10 [ 237.110987][ C0] ? charge_memcg+0x23f/0x2e0 [ 237.111000][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 237.111013][ C0] rcu_lock_acquire+0x20/0x30 [ 237.111026][ C0] ? __page_memcg+0x140/0x140 [ 237.111038][ C0] percpu_ref_put+0x16/0x150 [ 237.111051][ C0] __mem_cgroup_charge+0x52/0x80 [ 237.111065][ C0] shmem_add_to_page_cache+0xa83/0x14b0 [ 237.111087][ C0] ? put_page+0x200/0x200 [ 237.111102][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 237.111118][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 237.111132][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 237.111146][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 237.111161][ C0] shmem_getpage_gfp+0x1793/0x2d40 [ 237.111184][ C0] shmem_write_begin+0xcd/0x1a0 [ 237.111200][ C0] generic_perform_write+0x2aa/0x530 [ 237.111220][ C0] ? grab_cache_page_write_begin+0xa0/0xa0 [ 237.111233][ C0] ? file_remove_privs+0x590/0x590 [ 237.111246][ C0] ? read_lock_is_recursive+0x10/0x10 [ 237.111260][ C0] ? preempt_count_add+0x8d/0x190 [ 237.111275][ C0] ? rwsem_write_trylock+0x12f/0x1b0 [ 237.111288][ C0] ? clear_nonspinnable+0x60/0x60 [ 237.111302][ C0] __generic_file_write_iter+0x25f/0x4e0 [ 237.111317][ C0] generic_file_write_iter+0xa6/0x1b0 [ 237.111331][ C0] vfs_write+0x712/0xd00 [ 237.111347][ C0] ? file_end_write+0x250/0x250 [ 237.111362][ C0] ? __fget_files+0x40f/0x480 [ 237.111378][ C0] ? __fdget_pos+0x1e2/0x370 [ 237.111389][ C0] ? ksys_write+0x71/0x250 [ 237.111402][ C0] ksys_write+0x14d/0x250 [ 237.111415][ C0] ? __ia32_sys_read+0x80/0x80 [ 237.111429][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 237.111443][ C0] do_syscall_64+0x4c/0xa0 [ 237.111456][ C0] ? clear_bhb_loop+0x30/0x80 [ 237.111469][ C0] ? clear_bhb_loop+0x30/0x80 [ 237.111482][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.111495][ C0] RIP: 0033:0x7f604cc197af [ 237.111508][ C0] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 a9 7f 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 fc 7f 02 00 48 [ 237.111524][ C0] RSP: 002b:00007f604bf9be70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 237.111537][ C0] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007f604cc197af [ 237.111547][ C0] RDX: 0000000001000000 RSI: 00007f6043b7c000 RDI: 0000000000000003 [ 237.111555][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000050e7 [ 237.111563][ C0] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000003 [ 237.111571][ C0] R13: 00007f604bf9bf3c R14: 00007f604bf9bf40 R15: 00007f6043b7c000 [ 237.111585][ C0] [ 237.240628][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 237.559720][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.186-syzkaller #0 [ 237.567696][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.577836][ T27] Call Trace: [ 237.581122][ T27] [ 237.584048][ T27] dump_stack_lvl+0x168/0x230 [ 237.588718][ T27] ? show_regs_print_info+0x20/0x20 [ 237.593905][ T27] ? load_image+0x3b0/0x3b0 [ 237.598415][ T27] panic+0x2c9/0x7f0 [ 237.602328][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 237.607963][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 237.612461][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 237.617993][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 237.624160][ T27] watchdog+0xe4e/0xe50 [ 237.628307][ T27] kthread+0x436/0x520 [ 237.632356][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.637454][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.642025][ T27] ret_from_fork+0x1f/0x30 [ 237.646431][ T27] [ 237.649693][ T27] Kernel Offset: disabled [ 237.654207][ T27] Rebooting in 86400 seconds..