Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 2025/12/27 00:53:43 parsed 1 programs [ 86.970026][ T4198] cgroup: Unknown subsys name 'net' [ 87.109252][ T4198] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.769720][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.367682][ T4210] chnl_net:caif_netlink_parms(): no params data found [ 90.425964][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.433820][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.443288][ T4210] device bridge_slave_0 entered promiscuous mode [ 90.457515][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.465170][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.473584][ T4210] device bridge_slave_1 entered promiscuous mode [ 90.498240][ T4210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.513295][ T4210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.539341][ T4210] team0: Port device team_slave_0 added [ 90.547809][ T4210] team0: Port device team_slave_1 added [ 90.568725][ T4210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.576368][ T4210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.603908][ T4210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.620623][ T4210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.628000][ T4210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.657251][ T4210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.696631][ T4210] device hsr_slave_0 entered promiscuous mode [ 90.704694][ T4210] device hsr_slave_1 entered promiscuous mode [ 90.814849][ T4210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.826876][ T4210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.837882][ T4210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.850845][ T4210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.879167][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.886548][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.895102][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.902506][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.973761][ T4210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.989710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.003290][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.012947][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.027875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 91.046032][ T4210] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.059620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.069432][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.076634][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.104246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.114630][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121817][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.134274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.153865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.163141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.174101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.189596][ T4210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.202332][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.214715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.344888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.353399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.370020][ T4210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.394474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.404698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.426812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.437748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.448650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.458344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.469699][ T4210] device veth0_vlan entered promiscuous mode [ 91.494359][ T4210] device veth1_vlan entered promiscuous mode [ 91.521382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.529678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.539643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.548954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.562636][ T4210] device veth0_macvtap entered promiscuous mode [ 91.575027][ T4210] device veth1_macvtap entered promiscuous mode [ 91.595457][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.606219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.616599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.625633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.643412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.657894][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.666726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.678115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.692200][ T4210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.701859][ T4210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712991][ T4210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722531][ T4210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357605][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.377035][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.399178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.412230][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.422867][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.434769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.616331][ T3091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390150][ T3091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.378393][ T3091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.460224][ T3091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.883840][ T21] cfg80211: failed to load regulatory.db [ 98.990159][ T3091] device hsr_slave_0 left promiscuous mode [ 99.009006][ T3091] device hsr_slave_1 left promiscuous mode [ 99.028317][ T3091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.048205][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.075664][ T3091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.100374][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.114300][ T3091] device bridge_slave_1 left promiscuous mode [ 99.123624][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.154121][ T3091] device bridge_slave_0 left promiscuous mode [ 99.161974][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.195349][ T3091] device veth1_macvtap left promiscuous mode [ 99.206155][ T3091] device veth0_macvtap left promiscuous mode [ 99.213103][ T3091] device veth1_vlan left promiscuous mode [ 99.219543][ T3091] device veth0_vlan left promiscuous mode 2025/12/27 00:53:58 executed programs: 0 [ 99.540477][ T3091] team0 (unregistering): Port device team_slave_1 removed [ 99.556722][ T3091] team0 (unregistering): Port device team_slave_0 removed [ 99.574044][ T3091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.592754][ T3091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.666691][ T3091] bond0 (unregistering): Released all slaves [ 99.924110][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 99.988119][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.997473][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.007744][ T4336] device bridge_slave_0 entered promiscuous mode [ 100.018557][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.027646][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.037208][ T4336] device bridge_slave_1 entered promiscuous mode [ 100.087831][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.103384][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.156227][ T4336] team0: Port device team_slave_0 added [ 100.167603][ T4336] team0: Port device team_slave_1 added [ 100.235172][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.243765][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.275843][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.292875][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.311050][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.370569][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.467355][ T4336] device hsr_slave_0 entered promiscuous mode [ 100.479258][ T4336] device hsr_slave_1 entered promiscuous mode [ 101.193491][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.207667][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.235626][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.247956][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.387344][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.418792][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.432359][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.455473][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.486126][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.505288][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.522542][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.531592][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.549866][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.561196][ T4200] Bluetooth: hci0: command 0x0409 tx timeout [ 101.576198][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.592036][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.605928][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.614852][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.638188][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.651805][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.676478][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.689991][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.702403][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.717619][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.736564][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.750565][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.769860][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.781564][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.795511][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.808354][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.843810][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.861799][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.072449][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.087031][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.109602][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.158207][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.173499][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.216224][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.242786][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.264498][ T4336] device veth0_vlan entered promiscuous mode [ 102.274417][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.292133][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.317150][ T4336] device veth1_vlan entered promiscuous mode [ 102.373084][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.383981][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.396544][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.407292][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.423511][ T4336] device veth0_macvtap entered promiscuous mode [ 102.439096][ T4336] device veth1_macvtap entered promiscuous mode [ 102.460645][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.469619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.480491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.490666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.503465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.518760][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.529110][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.542347][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.564388][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.577311][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.589183][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.601262][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.749112][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.766136][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.795525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.820386][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.834053][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.867281][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.048046][ T4437] loop0: detected capacity change from 0 to 512 [ 103.088398][ T4437] EXT4-fs (loop0): Ignoring removed bh option [ 103.112737][ T4437] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 103.168093][ T4437] EXT4-fs (loop0): 1 truncate cleaned up [ 103.181265][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 103.266499][ T4437] [ 103.269030][ T4437] ===================================== [ 103.276667][ T4437] WARNING: bad unlock balance detected! [ 103.283864][ T4437] syzkaller #0 Not tainted [ 103.289101][ T4437] ------------------------------------- [ 103.295680][ T4437] syz.0.17/4437 is trying to release lock (&type->i_mutex_dir_key) at: [ 103.305561][ T4437] [] swap_inode_boot_loader+0x310/0x10f0 [ 103.313839][ T4437] but there are no more locks to release! [ 103.320403][ T4437] [ 103.320403][ T4437] other info that might help us debug this: [ 103.328864][ T4437] 1 lock held by syz.0.17/4437: [ 103.335079][ T4437] #0: ffff88807bc04460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 103.348003][ T4437] [ 103.348003][ T4437] stack backtrace: [ 103.355526][ T4437] CPU: 1 PID: 4437 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.363755][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.378261][ T4437] Call Trace: [ 103.382909][ T4437] [ 103.386359][ T4437] dump_stack_lvl+0x168/0x230 [ 103.393375][ T4437] ? show_regs_print_info+0x20/0x20 [ 103.399119][ T4437] ? swap_inode_boot_loader+0x310/0x10f0 [ 103.405348][ T4437] lock_release+0x52f/0x870 [ 103.410093][ T4437] ? unlock_two_nondirectories+0xbc/0x120 [ 103.416354][ T4437] ? swap_inode_boot_loader+0x310/0x10f0 [ 103.422400][ T4437] ? __lock_acquire+0x7c60/0x7c60 [ 103.428473][ T4437] ? __rwlock_init+0x140/0x140 [ 103.433387][ T4437] ? preempt_count_add+0x8d/0x190 [ 103.438636][ T4437] up_write+0x29/0x420 [ 103.442759][ T4437] swap_inode_boot_loader+0x310/0x10f0 [ 103.448642][ T4437] ext4_ioctl+0x18f3/0x3590 [ 103.453908][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.461016][ T4437] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 103.468247][ T4437] ? rcu_lock_release+0x5/0x20 [ 103.473590][ T4437] ? __lock_acquire+0x7c60/0x7c60 [ 103.480796][ T4437] ? kfree+0xef/0x2a0 [ 103.485865][ T4437] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 103.492250][ T4437] ? verify_lock_unused+0x140/0x140 [ 103.498011][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.503851][ T4437] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.510076][ T4437] ? lock_chain_count+0x20/0x20 [ 103.516690][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.522043][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 103.527386][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.533631][ T4437] __se_sys_ioctl+0xfa/0x170 [ 103.539002][ T4437] do_syscall_64+0x4c/0xa0 [ 103.543472][ T4437] ? clear_bhb_loop+0x30/0x80 [ 103.548984][ T4437] ? clear_bhb_loop+0x30/0x80 [ 103.553717][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.560471][ T4437] RIP: 0033:0x7fce1e634749 [ 103.566254][ T4437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.591332][ T4437] RSP: 002b:00007ffd1a3eb6e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.602607][ T4437] RAX: ffffffffffffffda RBX: 00007fce1e88afa0 RCX: 00007fce1e634749 [ 103.611273][ T4437] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 103.619902][ T4437] RBP: 00007fce1e6b8f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.628118][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.636739][ T4437] R13: 00007fce1e88afa0 R14: 00007fce1e88afa0 R15: 0000000000000003 [ 103.645512][ T4437] [ 103.651810][ T4434] Bluetooth: hci0: command 0x041b tx timeout [ 103.663971][ T4437] ------------[ cut here ]------------ [ 103.670591][ T4437] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888069165d38, owner = 0x0, curr 0xffff88807de58000, list empty [ 103.700018][ T4437] WARNING: CPU: 1 PID: 4437 at kernel/locking/rwsem.c:1350 up_write+0x3a1/0x420 [ 103.710638][ T4437] Modules linked in: [ 103.716986][ T4437] CPU: 1 PID: 4437 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.724950][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.740438][ T4437] RIP: 0010:up_write+0x3a1/0x420 [ 103.747349][ T4437] Code: 44 d0 48 c7 c7 60 0f 0b 8a 48 c7 c6 20 12 0b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 c3 d0 3b 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 48 69 69 8d 80 e1 07 80 c1 03 38 c1 [ 103.773057][ T4437] RSP: 0018:ffffc9000325f950 EFLAGS: 00010296 [ 103.782839][ T4437] RAX: 6a1c4ce19e5e3700 RBX: ffff888069165d38 RCX: ffff88807de58000 [ 103.794902][ T4437] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 103.806275][ T4437] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172267b0 [ 103.818624][ T4437] R10: ffffed10172267b0 R11: 1ffff110172267af R12: 0000000000000000 [ 103.830661][ T4437] R13: ffff888069165d90 R14: ffff888069165d38 R15: 1ffff1100d22cba8 [ 103.839877][ T4437] FS: 000055556b80c500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 103.851357][ T4437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.860383][ T4437] CR2: 0000000000000000 CR3: 0000000024566000 CR4: 00000000003506e0 [ 103.871782][ T4437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.885694][ T4437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.896135][ T4437] Call Trace: [ 103.899871][ T4437] [ 103.903396][ T4437] swap_inode_boot_loader+0x310/0x10f0 [ 103.909907][ T4437] ext4_ioctl+0x18f3/0x3590 [ 103.916196][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.922850][ T4437] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 103.929146][ T4437] ? rcu_lock_release+0x5/0x20 [ 103.934863][ T4437] ? __lock_acquire+0x7c60/0x7c60 [ 103.940940][ T4437] ? kfree+0xef/0x2a0 [ 103.946720][ T4437] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 103.954545][ T4437] ? verify_lock_unused+0x140/0x140 [ 103.961367][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.967981][ T4437] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.978040][ T4437] ? lock_chain_count+0x20/0x20 [ 103.998174][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 104.010444][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 104.018261][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 104.025144][ T4437] __se_sys_ioctl+0xfa/0x170 [ 104.031523][ T4437] do_syscall_64+0x4c/0xa0 [ 104.037563][ T4437] ? clear_bhb_loop+0x30/0x80 [ 104.047467][ T4437] ? clear_bhb_loop+0x30/0x80 [ 104.065833][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.073928][ T4437] RIP: 0033:0x7fce1e634749 [ 104.079250][ T4437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.101751][ T4437] RSP: 002b:00007ffd1a3eb6e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.115289][ T4437] RAX: ffffffffffffffda RBX: 00007fce1e88afa0 RCX: 00007fce1e634749 [ 104.125211][ T4437] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 104.136299][ T4437] RBP: 00007fce1e6b8f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.145863][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.158785][ T4437] R13: 00007fce1e88afa0 R14: 00007fce1e88afa0 R15: 0000000000000003 [ 104.181413][ T4437] [ 104.185196][ T4437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.195520][ T4437] CPU: 1 PID: 4437 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.205947][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.219762][ T4437] Call Trace: [ 104.223467][ T4437] [ 104.227928][ T4437] dump_stack_lvl+0x168/0x230 [ 104.233924][ T4437] ? show_regs_print_info+0x20/0x20 [ 104.241280][ T4437] ? load_image+0x3b0/0x3b0 [ 104.247427][ T4437] panic+0x2c9/0x7f0 [ 104.252274][ T4437] ? bpf_jit_dump+0xd0/0xd0 [ 104.259355][ T4437] ? up_write+0x3a1/0x420 [ 104.264176][ T4437] __warn+0x248/0x2b0 [ 104.270207][ T4437] ? up_write+0x3a1/0x420 [ 104.276070][ T4437] report_bug+0x1b7/0x2e0 [ 104.281363][ T4437] handle_bug+0x3a/0x70 [ 104.287103][ T4437] exc_invalid_op+0x16/0x40 [ 104.292209][ T4437] asm_exc_invalid_op+0x16/0x20 [ 104.299281][ T4437] RIP: 0010:up_write+0x3a1/0x420 [ 104.305805][ T4437] Code: 44 d0 48 c7 c7 60 0f 0b 8a 48 c7 c6 20 12 0b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 c3 d0 3b 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 48 69 69 8d 80 e1 07 80 c1 03 38 c1 [ 104.336026][ T4437] RSP: 0018:ffffc9000325f950 EFLAGS: 00010296 [ 104.345692][ T4437] RAX: 6a1c4ce19e5e3700 RBX: ffff888069165d38 RCX: ffff88807de58000 [ 104.355855][ T4437] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 104.367372][ T4437] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172267b0 [ 104.378014][ T4437] R10: ffffed10172267b0 R11: 1ffff110172267af R12: 0000000000000000 [ 104.388617][ T4437] R13: ffff888069165d90 R14: ffff888069165d38 R15: 1ffff1100d22cba8 [ 104.398284][ T4437] swap_inode_boot_loader+0x310/0x10f0 [ 104.404630][ T4437] ext4_ioctl+0x18f3/0x3590 [ 104.410717][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 104.416915][ T4437] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 104.424795][ T4437] ? rcu_lock_release+0x5/0x20 [ 104.429906][ T4437] ? __lock_acquire+0x7c60/0x7c60 [ 104.436483][ T4437] ? kfree+0xef/0x2a0 [ 104.441285][ T4437] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 104.449367][ T4437] ? verify_lock_unused+0x140/0x140 [ 104.455968][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 104.463593][ T4437] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 104.470077][ T4437] ? lock_chain_count+0x20/0x20 [ 104.475026][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 104.480381][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 104.485804][ T4437] ? ext4_fileattr_set+0x16a0/0x16a0 [ 104.491138][ T4437] __se_sys_ioctl+0xfa/0x170 [ 104.496494][ T4437] do_syscall_64+0x4c/0xa0 [ 104.501222][ T4437] ? clear_bhb_loop+0x30/0x80 [ 104.506220][ T4437] ? clear_bhb_loop+0x30/0x80 [ 104.511119][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.517853][ T4437] RIP: 0033:0x7fce1e634749 [ 104.522321][ T4437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.544525][ T4437] RSP: 002b:00007ffd1a3eb6e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.554513][ T4437] RAX: ffffffffffffffda RBX: 00007fce1e88afa0 RCX: 00007fce1e634749 [ 104.564651][ T4437] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 104.573564][ T4437] RBP: 00007fce1e6b8f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.583065][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.592455][ T4437] R13: 00007fce1e88afa0 R14: 00007fce1e88afa0 R15: 0000000000000003 [ 104.601111][ T4437] [ 104.604994][ T4437] Kernel Offset: disabled [ 104.611148][ T4437] Rebooting in 86400 seconds..