Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. 2025/05/24 20:01:11 ignoring optional flag "sandboxArg"="0" 2025/05/24 20:01:11 ignoring optional flag "type"="gce" 2025/05/24 20:01:12 parsed 1 programs [ 117.503546][ T6248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.730074][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.738242][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.751456][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.761676][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.769685][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.066369][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.074392][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.106007][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.115292][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.837184][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 121.933429][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.940749][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.947941][ T6296] bridge_slave_0: entered allmulticast mode [ 121.956315][ T6296] bridge_slave_0: entered promiscuous mode [ 121.967775][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.976316][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.984314][ T6296] bridge_slave_1: entered allmulticast mode [ 121.992449][ T6296] bridge_slave_1: entered promiscuous mode [ 122.028572][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.040380][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.071540][ T6296] team0: Port device team_slave_0 added [ 122.081156][ T6296] team0: Port device team_slave_1 added [ 122.107723][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.115203][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.141929][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.157710][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.165031][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.191450][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.238873][ T6296] hsr_slave_0: entered promiscuous mode [ 122.245804][ T6296] hsr_slave_1: entered promiscuous mode [ 122.850539][ T6296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.862531][ T6296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.875851][ T6296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.893841][ T6296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.008528][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.034671][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.049618][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.056843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.086462][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.093695][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.347510][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.405278][ T6296] veth0_vlan: entered promiscuous mode [ 123.420905][ T6296] veth1_vlan: entered promiscuous mode [ 123.461715][ T6296] veth0_macvtap: entered promiscuous mode [ 123.472849][ T6296] veth1_macvtap: entered promiscuous mode [ 123.503095][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.521762][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.535520][ T6296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.547604][ T6296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.558058][ T6296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.568792][ T6296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.783230][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.866720][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.994476][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.118418][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/05/24 20:01:23 executed programs: 0 [ 125.362649][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.373245][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.381175][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.394403][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.402476][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.715917][ T6413] chnl_net:caif_netlink_parms(): no params data found [ 125.925966][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.936106][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.943916][ T6413] bridge_slave_0: entered allmulticast mode [ 125.952522][ T6413] bridge_slave_0: entered promiscuous mode [ 125.961690][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.968988][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.976731][ T6413] bridge_slave_1: entered allmulticast mode [ 125.985585][ T6413] bridge_slave_1: entered promiscuous mode [ 126.030979][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.043820][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.106950][ T6413] team0: Port device team_slave_0 added [ 126.116227][ T6413] team0: Port device team_slave_1 added [ 126.154475][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.162230][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.188813][ T6413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.205974][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.213237][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.249846][ T6413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.406304][ T6413] hsr_slave_0: entered promiscuous mode [ 126.415138][ T6413] hsr_slave_1: entered promiscuous mode [ 126.421660][ T6413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.429555][ T6413] Cannot create hsr debugfs directory [ 126.435365][ T1102] bridge_slave_1: left allmulticast mode [ 126.443434][ T1102] bridge_slave_1: left promiscuous mode [ 126.450797][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.465149][ T1102] bridge_slave_0: left allmulticast mode [ 126.470950][ T1102] bridge_slave_0: left promiscuous mode [ 126.477419][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.756630][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.767786][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.778316][ T1102] bond0 (unregistering): Released all slaves [ 126.874060][ T1102] hsr_slave_0: left promiscuous mode [ 126.880867][ T1102] hsr_slave_1: left promiscuous mode [ 126.886881][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.894452][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.904184][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.911755][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.932992][ T1102] veth1_macvtap: left promiscuous mode [ 126.938589][ T1102] veth0_macvtap: left promiscuous mode [ 126.946276][ T1102] veth1_vlan: left promiscuous mode [ 126.951852][ T1102] veth0_vlan: left promiscuous mode [ 127.424414][ T55] Bluetooth: hci0: command tx timeout [ 127.439543][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 127.472631][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 128.625982][ T6413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.644289][ T6413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.663561][ T6413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.696252][ T6413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.917187][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.944337][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.963199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.970492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.992767][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.000088][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.274795][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.347625][ T6413] veth0_vlan: entered promiscuous mode [ 129.362411][ T6413] veth1_vlan: entered promiscuous mode [ 129.405942][ T6413] veth0_macvtap: entered promiscuous mode [ 129.418582][ T6413] veth1_macvtap: entered promiscuous mode [ 129.445585][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.463006][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.475352][ T6413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.486075][ T6413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.495470][ T6413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.505197][ T55] Bluetooth: hci0: command tx timeout [ 129.512031][ T6413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.608088][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.622321][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.652555][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.661839][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.757707][ T6525] loop0: detected capacity change from 0 to 1024 [ 129.768175][ T6525] EXT4-fs: Ignoring removed orlov option [ 129.774588][ T6525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.829005][ T6525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 129.845822][ T6525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.919803][ T6525] loop0: detected capacity change from 1024 to 1023 [ 129.928190][ T6525] [ 129.930553][ T6525] ====================================================== [ 129.937560][ T6525] WARNING: possible circular locking dependency detected [ 129.944573][ T6525] 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 Not tainted [ 129.951666][ T6525] ------------------------------------------------------ [ 129.958756][ T6525] syz.0.15/6525 is trying to acquire lock: [ 129.964560][ T6525] ffffffff8f64bac8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 129.975101][ T6525] [ 129.975101][ T6525] but task is already holding lock: [ 129.982458][ T6525] ffff8881437a1de8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 129.992638][ T6525] [ 129.992638][ T6525] which lock already depends on the new lock. [ 129.992638][ T6525] [ 130.003031][ T6525] [ 130.003031][ T6525] the existing dependency chain (in reverse order) is: [ 130.012040][ T6525] [ 130.012040][ T6525] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 130.020647][ T6525] lock_acquire+0x120/0x360 [ 130.025670][ T6525] blk_alloc_queue+0x538/0x620 [ 130.030944][ T6525] __blk_mq_alloc_disk+0x164/0x350 [ 130.036654][ T6525] loop_add+0x41d/0xae0 [ 130.041329][ T6525] loop_init+0x173/0x230 [ 130.046076][ T6525] do_one_initcall+0x233/0x820 [ 130.051525][ T6525] do_initcall_level+0x137/0x1f0 [ 130.057074][ T6525] do_initcalls+0x69/0xd0 [ 130.062009][ T6525] kernel_init_freeable+0x3d9/0x570 [ 130.067986][ T6525] kernel_init+0x1d/0x1d0 [ 130.072880][ T6525] ret_from_fork+0x4b/0x80 [ 130.077850][ T6525] ret_from_fork_asm+0x1a/0x30 [ 130.083127][ T6525] [ 130.083127][ T6525] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 130.090421][ T6525] lock_acquire+0x120/0x360 [ 130.095529][ T6525] fs_reclaim_acquire+0x72/0x100 [ 130.100995][ T6525] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 130.107337][ T6525] __alloc_skb+0x112/0x2d0 [ 130.112747][ T6525] alloc_uevent_skb+0x7d/0x230 [ 130.118037][ T6525] kobject_uevent_net_broadcast+0x2fa/0x560 [ 130.124460][ T6525] kobject_uevent_env+0x55b/0x8c0 [ 130.130521][ T6525] kobject_synth_uevent+0x527/0xb00 [ 130.136236][ T6525] bus_uevent_store+0x115/0x170 [ 130.141606][ T6525] kernfs_fop_write_iter+0x378/0x4f0 [ 130.147673][ T6525] vfs_write+0x54b/0xa90 [ 130.152620][ T6525] ksys_write+0x145/0x250 [ 130.157466][ T6525] do_syscall_64+0xf6/0x210 [ 130.162483][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.168888][ T6525] [ 130.168888][ T6525] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 130.176793][ T6525] validate_chain+0xb9b/0x2140 [ 130.182162][ T6525] __lock_acquire+0xaac/0xd20 [ 130.187362][ T6525] lock_acquire+0x120/0x360 [ 130.192379][ T6525] __mutex_lock+0x182/0xe80 [ 130.197396][ T6525] kobject_uevent_net_broadcast+0x27e/0x560 [ 130.203891][ T6525] kobject_uevent_env+0x55b/0x8c0 [ 130.209535][ T6525] set_capacity_and_notify+0x26d/0x2d0 [ 130.215520][ T6525] loop_set_status+0x459/0xaf0 [ 130.220803][ T6525] lo_ioctl+0xa5d/0x2410 [ 130.225572][ T6525] blkdev_ioctl+0x5a8/0x6d0 [ 130.230582][ T6525] __se_sys_ioctl+0xf9/0x170 [ 130.235684][ T6525] do_syscall_64+0xf6/0x210 [ 130.240713][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.247117][ T6525] [ 130.247117][ T6525] other info that might help us debug this: [ 130.247117][ T6525] [ 130.257420][ T6525] Chain exists of: [ 130.257420][ T6525] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 130.257420][ T6525] [ 130.271166][ T6525] Possible unsafe locking scenario: [ 130.271166][ T6525] [ 130.278707][ T6525] CPU0 CPU1 [ 130.284064][ T6525] ---- ---- [ 130.289414][ T6525] lock(&q->q_usage_counter(io)#17); [ 130.294829][ T6525] lock(fs_reclaim); [ 130.301324][ T6525] lock(&q->q_usage_counter(io)#17); [ 130.309233][ T6525] lock(uevent_sock_mutex); [ 130.313814][ T6525] [ 130.313814][ T6525] *** DEADLOCK *** [ 130.313814][ T6525] [ 130.321943][ T6525] 3 locks held by syz.0.15/6525: [ 130.326954][ T6525] #0: ffff888142f24b68 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xaf0 [ 130.336376][ T6525] #1: ffff8881437a1de8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 130.347103][ T6525] #2: ffff8881437a1e20 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 130.358216][ T6525] [ 130.358216][ T6525] stack backtrace: [ 130.364215][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.0.15 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 130.364231][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.364245][ T6525] Call Trace: [ 130.364253][ T6525] [ 130.364262][ T6525] dump_stack_lvl+0x189/0x250 [ 130.364288][ T6525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.364303][ T6525] ? __pfx__printk+0x10/0x10 [ 130.364322][ T6525] ? print_lock_name+0xde/0x100 [ 130.364339][ T6525] print_circular_bug+0x2ee/0x310 [ 130.364353][ T6525] check_noncircular+0x134/0x160 [ 130.364366][ T6525] validate_chain+0xb9b/0x2140 [ 130.364385][ T6525] ? number+0xd18/0xf60 [ 130.364401][ T6525] __lock_acquire+0xaac/0xd20 [ 130.364418][ T6525] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.364435][ T6525] lock_acquire+0x120/0x360 [ 130.364449][ T6525] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.364470][ T6525] __mutex_lock+0x182/0xe80 [ 130.364485][ T6525] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.364502][ T6525] ? vsnprintf+0xe11/0xf00 [ 130.364514][ T6525] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.364532][ T6525] ? __pfx___mutex_lock+0x10/0x10 [ 130.364545][ T6525] ? add_uevent_var+0x278/0x450 [ 130.364562][ T6525] ? kobject_uevent_env+0x50a/0x8c0 [ 130.364579][ T6525] ? __pfx_add_uevent_var+0x10/0x10 [ 130.364596][ T6525] kobject_uevent_net_broadcast+0x27e/0x560 [ 130.364614][ T6525] kobject_uevent_env+0x55b/0x8c0 [ 130.364633][ T6525] set_capacity_and_notify+0x26d/0x2d0 [ 130.364650][ T6525] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 130.364681][ T6525] ? loop_set_status_from_info+0x185/0x250 [ 130.364698][ T6525] loop_set_status+0x459/0xaf0 [ 130.364717][ T6525] lo_ioctl+0xa5d/0x2410 [ 130.364732][ T6525] ? mas_destroy+0x1678/0x1c60 [ 130.364745][ T6525] ? __pfx_lo_ioctl+0x10/0x10 [ 130.364758][ T6525] ? mas_destroy+0x173e/0x1c60 [ 130.364774][ T6525] ? mas_next_node+0x3a5/0xd60 [ 130.364795][ T6525] ? unwind_next_frame+0xa5/0x2390 [ 130.364808][ T6525] ? rcu_is_watching+0x15/0xb0 [ 130.364826][ T6525] ? __lock_acquire+0xaac/0xd20 [ 130.364842][ T6525] ? __lock_acquire+0xaac/0xd20 [ 130.364860][ T6525] ? __lock_acquire+0xaac/0xd20 [ 130.364878][ T6525] ? __lock_acquire+0xaac/0xd20 [ 130.364897][ T6525] ? is_bpf_text_address+0x26/0x2b0 [ 130.364914][ T6525] ? is_bpf_text_address+0x292/0x2b0 [ 130.364929][ T6525] ? is_bpf_text_address+0x26/0x2b0 [ 130.364945][ T6525] ? kernel_text_address+0xa5/0xe0 [ 130.364960][ T6525] ? __kernel_text_address+0xd/0x40 [ 130.364974][ T6525] ? unwind_get_return_address+0x4d/0x90 [ 130.364987][ T6525] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.364999][ T6525] ? arch_stack_walk+0xfc/0x150 [ 130.365021][ T6525] ? kasan_save_track+0x4f/0x80 [ 130.365042][ T6525] ? kasan_save_track+0x3e/0x80 [ 130.365069][ T6525] ? kasan_quarantine_put+0xdd/0x220 [ 130.365085][ T6525] ? blkdev_common_ioctl+0xfc3/0x2450 [ 130.365100][ T6525] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.365114][ T6525] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 130.365127][ T6525] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.365140][ T6525] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 130.365152][ T6525] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.365165][ T6525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.365177][ T6525] ? x64_setup_rt_frame+0x96c/0xd40 [ 130.365198][ T6525] ? __lock_acquire+0xaac/0xd20 [ 130.365214][ T6525] ? __asan_memset+0x22/0x50 [ 130.365227][ T6525] ? smack_file_ioctl+0x24a/0x340 [ 130.365240][ T6525] ? __pfx_smack_file_ioctl+0x10/0x10 [ 130.365252][ T6525] ? __pfx_lo_ioctl+0x10/0x10 [ 130.365266][ T6525] blkdev_ioctl+0x5a8/0x6d0 [ 130.365280][ T6525] ? __pfx_blkdev_ioctl+0x10/0x10 [ 130.365292][ T6525] ? __fget_files+0x3a0/0x420 [ 130.365303][ T6525] ? __fget_files+0x2a/0x420 [ 130.365314][ T6525] ? bpf_lsm_file_ioctl+0x9/0x20 [ 130.365329][ T6525] ? __pfx_blkdev_ioctl+0x10/0x10 [ 130.365342][ T6525] __se_sys_ioctl+0xf9/0x170 [ 130.365357][ T6525] do_syscall_64+0xf6/0x210 [ 130.365372][ T6525] ? clear_bhb_loop+0x60/0xb0 [ 130.365385][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.365398][ T6525] RIP: 0033:0x7f6cbdb79e79 [ 130.365417][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.365428][ T6525] RSP: 002b:00007f6cbe91d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.365441][ T6525] RAX: ffffffffffffffda RBX: 00007f6cbdd15f80 RCX: 00007f6cbdb79e79 [ 130.365451][ T6525] RDX: 0000000020000140 RSI: 0000000000004c02 RDI: 0000000000000006 [ 130.365458][ T6525] RBP: 00007f6cbdbe793e R08: 0000000000000000 R09: 0000000000000000 [ 130.365466][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.365473][ T6525] R13: 0000000000000000 R14: 00007f6cbdd15f80 R15: 00007ffec9ff23e8 [ 130.365486][ T6525] [ 130.855962][ T6524] ------------[ cut here ]------------ [ 130.861758][ T6524] kernel BUG at fs/ext4/inline.c:1905! [ 130.867395][ T6524] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 130.873654][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.0.15 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 130.885580][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.895818][ T6524] RIP: 0010:ext4_inline_data_truncate+0xac3/0xad0 [ 130.902328][ T6524] Code: b1 ff e9 4c fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fd ff ff 48 89 df e8 d8 c2 b1 ff e9 e6 fd ff ff e8 7e ed 51 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 130.921953][ T6524] RSP: 0018:ffffc90003daf820 EFLAGS: 00010293 [ 130.928114][ T6524] RAX: ffffffff826e0362 RBX: 00000000ffffffc3 RCX: ffff88802ba90000 [ 130.936257][ T6524] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 130.944369][ T6524] RBP: ffffc90003daf990 R08: ffff888073509e0f R09: 1ffff1100e6a13c1 [ 130.952349][ T6524] R10: dffffc0000000000 R11: ffffed100e6a13c2 R12: dffffc0000000000 [ 130.960410][ T6524] R13: 0000000000000002 R14: 1ffff920007b5f10 R15: ffff88807350a0a8 [ 130.968466][ T6524] FS: 000055555f49e500(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 130.977566][ T6524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.984521][ T6524] CR2: 00007f493de66e9c CR3: 0000000032246000 CR4: 00000000003526f0 [ 130.992585][ T6524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.000634][ T6524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.008595][ T6524] Call Trace: [ 131.011980][ T6524] [ 131.014914][ T6524] ? __pfx_ext4_inline_data_truncate+0x10/0x10 [ 131.021078][ T6524] ext4_truncate+0x3b5/0x10f0 [ 131.025751][ T6524] ? up_write+0x1c4/0x420 [ 131.030076][ T6524] ? __pfx_ext4_truncate+0x10/0x10 [ 131.035263][ T6524] ext4_evict_inode+0x8ca/0xed0 [ 131.040103][ T6524] ? __pfx_ext4_evict_inode+0x10/0x10 [ 131.045465][ T6524] ? do_raw_spin_unlock+0x122/0x240 [ 131.050658][ T6524] ? __pfx_ext4_evict_inode+0x10/0x10 [ 131.056026][ T6524] evict+0x501/0x9c0 [ 131.059966][ T6524] ? __pfx_evict+0x10/0x10 [ 131.064403][ T6524] ? do_raw_spin_unlock+0x122/0x240 [ 131.069625][ T6524] ? _raw_spin_unlock+0x28/0x50 [ 131.074510][ T6524] ? iput+0x6d8/0x9d0 [ 131.078500][ T6524] __dentry_kill+0x209/0x660 [ 131.083099][ T6524] ? dput+0x37/0x2b0 [ 131.086987][ T6524] dput+0x19f/0x2b0 [ 131.090785][ T6524] __fput+0x68e/0xa70 [ 131.094763][ T6524] task_work_run+0x1d4/0x260 [ 131.099347][ T6524] ? __pfx_task_work_run+0x10/0x10 [ 131.104552][ T6524] resume_user_mode_work+0x5e/0x80 [ 131.109654][ T6524] syscall_exit_to_user_mode+0x9a/0x120 [ 131.115194][ T6524] do_syscall_64+0x103/0x210 [ 131.119781][ T6524] ? clear_bhb_loop+0x60/0xb0 [ 131.124458][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.130448][ T6524] RIP: 0033:0x7f6cbdb79e79 [ 131.134854][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.154798][ T6524] RSP: 002b:00007ffec9ff2548 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 131.163300][ T6524] RAX: 0000000000000000 RBX: 00007f6cbdd17a80 RCX: 00007f6cbdb79e79 [ 131.171281][ T6524] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 131.179253][ T6524] RBP: 00007f6cbdd17a80 R08: 0000000000000006 R09: 00007ffec9ff282f [ 131.187300][ T6524] R10: 000000000003fd90 R11: 0000000000000246 R12: 000000000001fdd3 [ 131.195265][ T6524] R13: 00007ffec9ff2640 R14: 00007ffec9ff2660 R15: ffffffffffffffff [ 131.203236][ T6524] [ 131.206246][ T6524] Modules linked in: [ 131.210451][ T6524] ---[ end trace 0000000000000000 ]--- [ 131.221415][ T6524] RIP: 0010:ext4_inline_data_truncate+0xac3/0xad0 [ 131.228158][ T6524] Code: b1 ff e9 4c fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fd ff ff 48 89 df e8 d8 c2 b1 ff e9 e6 fd ff ff e8 7e ed 51 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 131.251825][ T6524] RSP: 0018:ffffc90003daf820 EFLAGS: 00010293 [ 131.257950][ T6524] RAX: ffffffff826e0362 RBX: 00000000ffffffc3 RCX: ffff88802ba90000 [ 131.270591][ T6524] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 131.278912][ T6524] RBP: ffffc90003daf990 R08: ffff888073509e0f R09: 1ffff1100e6a13c1 [ 131.290144][ T6524] R10: dffffc0000000000 R11: ffffed100e6a13c2 R12: dffffc0000000000 [ 131.298167][ T6524] R13: 0000000000000002 R14: 1ffff920007b5f10 R15: ffff88807350a0a8 [ 131.306590][ T6524] FS: 000055555f49e500(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 131.316050][ T6524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.323814][ T6524] CR2: 000055a70f518b40 CR3: 0000000032246000 CR4: 00000000003526f0 [ 131.332455][ T6524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.341423][ T6524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.352478][ T6524] Kernel panic - not syncing: Fatal exception [ 131.358815][ T6524] Kernel Offset: disabled [ 131.363132][ T6524] Rebooting in 86400 seconds..