Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 2026/01/10 19:55:46 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 90.963556][ T4644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.252268][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.260923][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.273466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.288757][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.297176][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.307799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.074640][ T4701] chnl_net:caif_netlink_parms(): no params data found [ 94.149153][ T4701] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.156330][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.164532][ T4701] device bridge_slave_0 entered promiscuous mode [ 94.172665][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.179847][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.188510][ T4701] device bridge_slave_1 entered promiscuous mode [ 94.210453][ T4701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.221362][ T4701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.241978][ T4701] team0: Port device team_slave_0 added [ 94.249219][ T4701] team0: Port device team_slave_1 added [ 94.264841][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.271931][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.298568][ T4701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.311655][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.318706][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.345078][ T4701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.371893][ T4701] device hsr_slave_0 entered promiscuous mode [ 94.378977][ T4701] device hsr_slave_1 entered promiscuous mode [ 94.877157][ T4701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.889278][ T4701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.899178][ T4701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.935003][ T4701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.961509][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.969144][ T4701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.977361][ T4701] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.984491][ T4701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.062877][ T4701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.078753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.087972][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.100242][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.109648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 95.124104][ T4701] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.159836][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.177285][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.186290][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.193577][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.203097][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.211873][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.221344][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.228791][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.242821][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.272533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.288281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.298886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.326979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.335129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.344873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.354123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.362875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.381624][ T4701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.408372][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.418134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.427587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.580097][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.588421][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.601335][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.633606][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.643360][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.656470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.665999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.676598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.685220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.696889][ T4701] device veth0_vlan entered promiscuous mode [ 95.729263][ T4701] device veth1_vlan entered promiscuous mode [ 95.775936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.785989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.803015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.823022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.845130][ T4701] device veth0_macvtap entered promiscuous mode [ 95.861015][ T4701] device veth1_macvtap entered promiscuous mode [ 95.884929][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.902971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.922768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.930891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.943127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.966928][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.982568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.003236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.028531][ T4701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038258][ T4701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.048261][ T4701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.057266][ T4701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/10 19:55:55 executed programs: 0 [ 97.608564][ T4844] chnl_net:caif_netlink_parms(): no params data found [ 97.647837][ T151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.694936][ T4844] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.702127][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.710575][ T4844] device bridge_slave_0 entered promiscuous mode [ 97.721705][ T4844] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.730211][ T4844] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.740518][ T4844] device bridge_slave_1 entered promiscuous mode [ 97.769760][ T4844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.783827][ T4844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.819775][ T4844] team0: Port device team_slave_0 added [ 97.828109][ T4844] team0: Port device team_slave_1 added [ 97.854902][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.862008][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.891016][ T4844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.906552][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.913649][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.942212][ T4844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.983946][ T4844] device hsr_slave_0 entered promiscuous mode [ 97.991142][ T4844] device hsr_slave_1 entered promiscuous mode [ 98.000677][ T4844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.008442][ T4844] Cannot create hsr debugfs directory [ 99.482468][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 100.189823][ T151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.338837][ T151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.390497][ T151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.247706][ T4844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.256512][ T4844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.274904][ T4844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.284707][ T4844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.338211][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.349517][ T151] device hsr_slave_0 left promiscuous mode [ 101.356138][ T151] device hsr_slave_1 left promiscuous mode [ 101.362909][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.370336][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.378503][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.386186][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.393834][ T151] device bridge_slave_1 left promiscuous mode [ 101.400424][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.413902][ T151] device bridge_slave_0 left promiscuous mode [ 101.420093][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.431139][ T151] device veth1_macvtap left promiscuous mode [ 101.437341][ T151] device veth0_macvtap left promiscuous mode [ 101.444530][ T151] device veth1_vlan left promiscuous mode [ 101.450290][ T151] device veth0_vlan left promiscuous mode [ 101.562422][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 101.569416][ T151] team0 (unregistering): Port device team_slave_1 removed [ 101.583340][ T151] team0 (unregistering): Port device team_slave_0 removed [ 101.596846][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.609367][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.656945][ T151] bond0 (unregistering): Released all slaves [ 101.710928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.718876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.729075][ T4844] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.739162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.748199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.756868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.763986][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.775291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.784809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.793776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.802073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.809164][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.822740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.836814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.847089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.861376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.869910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.880158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.889879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.904326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.913485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.924706][ T4844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.936081][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.944227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.953111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.035144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.042923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.057386][ T4844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.072091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.081615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.109311][ T4844] device veth0_vlan entered promiscuous mode [ 102.117880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.128572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.137705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.145857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.159038][ T4844] device veth1_vlan entered promiscuous mode [ 102.193888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.203179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.211328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.220257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.231912][ T4844] device veth0_macvtap entered promiscuous mode [ 102.243803][ T4844] device veth1_macvtap entered promiscuous mode [ 102.262203][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.269941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.278958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.287885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.297313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.308963][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.317494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.326867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.337722][ T4844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.347963][ T4844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.357233][ T4844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.367629][ T4844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.435666][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.463486][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.472491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/01/10 19:56:01 executed programs: 2 [ 102.495161][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.503959][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.516133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.581021][ T5127] loop0: detected capacity change from 0 to 512 [ 102.605955][ T5127] EXT4-fs (loop0): Ignoring removed bh option [ 102.626412][ T5127] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 102.647846][ T5127] EXT4-fs (loop0): 1 truncate cleaned up [ 102.653690][ T5127] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 102.688915][ T5127] [ 102.691286][ T5127] ===================================== [ 102.696825][ T5127] WARNING: bad unlock balance detected! [ 102.702373][ T5127] syzkaller #0 Not tainted [ 102.706775][ T5127] ------------------------------------- [ 102.712304][ T5127] syz.0.17/5127 is trying to release lock (&type->i_mutex_dir_key) at: [ 102.720543][ T5127] [] swap_inode_boot_loader+0x310/0x10f0 [ 102.727780][ T5127] but there are no more locks to release! [ 102.733504][ T5127] [ 102.733504][ T5127] other info that might help us debug this: [ 102.741552][ T5127] 1 lock held by syz.0.17/5127: [ 102.746401][ T5127] #0: ffff88807a234460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 102.756268][ T5127] [ 102.756268][ T5127] stack backtrace: [ 102.762157][ T5127] CPU: 0 PID: 5127 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.769355][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.779442][ T5127] Call Trace: [ 102.782803][ T5127] [ 102.785719][ T5127] dump_stack_lvl+0x168/0x230 [ 102.790508][ T5127] ? show_regs_print_info+0x20/0x20 [ 102.795710][ T5127] ? swap_inode_boot_loader+0x310/0x10f0 [ 102.801591][ T5127] lock_release+0x52f/0x870 [ 102.806082][ T5127] ? unlock_two_nondirectories+0xbc/0x120 [ 102.811782][ T5127] ? swap_inode_boot_loader+0x310/0x10f0 [ 102.817395][ T5127] ? __lock_acquire+0x7c60/0x7c60 [ 102.822408][ T5127] ? __rwlock_init+0x140/0x140 [ 102.827158][ T5127] ? preempt_count_add+0x8d/0x190 [ 102.832282][ T5127] up_write+0x29/0x420 [ 102.836346][ T5127] swap_inode_boot_loader+0x310/0x10f0 [ 102.841791][ T5127] ext4_ioctl+0x18f3/0x3590 [ 102.846399][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 102.851792][ T5127] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 102.857416][ T5127] ? rcu_lock_release+0x5/0x20 [ 102.862168][ T5127] ? __lock_acquire+0x7c60/0x7c60 [ 102.867175][ T5127] ? kfree+0xef/0x2a0 [ 102.871139][ T5127] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 102.876751][ T5127] ? verify_lock_unused+0x140/0x140 [ 102.882024][ T5127] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.887479][ T5127] ? bpf_lsm_file_ioctl+0x5/0x10 [ 102.892483][ T5127] ? security_file_ioctl+0x7c/0xa0 [ 102.897682][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 102.903478][ T5127] __se_sys_ioctl+0xfa/0x170 [ 102.908141][ T5127] do_syscall_64+0x4c/0xa0 [ 102.912563][ T5127] ? clear_bhb_loop+0x30/0x80 [ 102.917224][ T5127] ? clear_bhb_loop+0x30/0x80 [ 102.921881][ T5127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.927852][ T5127] RIP: 0033:0x7f63a149a749 [ 102.932250][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.952058][ T5127] RSP: 002b:00007f63a0b09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.960454][ T5127] RAX: ffffffffffffffda RBX: 00007f63a16f0fa0 RCX: 00007f63a149a749 [ 102.968494][ T5127] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 102.976455][ T5127] RBP: 00007f63a151ef91 R08: 0000000000000000 R09: 0000000000000000 [ 102.984422][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.992479][ T5127] R13: 00007f63a16f1038 R14: 00007f63a16f0fa0 R15: 00007ffdc2927e28 [ 103.000451][ T5127] [ 103.021228][ T5127] ------------[ cut here ]------------ [ 103.026896][ T5127] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888070520380, owner = 0x0, curr 0xffff888029b35940, list empty [ 103.046212][ T5127] WARNING: CPU: 0 PID: 5127 at kernel/locking/rwsem.c:1350 up_write+0x3a1/0x420 [ 103.055348][ T5127] Modules linked in: [ 103.059353][ T5127] CPU: 0 PID: 5127 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.067435][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.078239][ T5127] RIP: 0010:up_write+0x3a1/0x420 [ 103.084507][ T5127] Code: 44 d0 48 c7 c7 60 0f 0b 8a 48 c7 c6 20 12 0b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 c3 d0 3b 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 48 69 69 8d 80 e1 07 80 c1 03 38 c1 [ 103.104420][ T5127] RSP: 0018:ffffc900032df950 EFLAGS: 00010296 [ 103.110514][ T5127] RAX: 70688a5622e99900 RBX: ffff888070520380 RCX: ffff888029b35940 [ 103.118807][ T5127] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 103.127421][ T5127] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 103.135621][ T5127] R10: ffffed10172067b0 R11: 1ffff110172067af R12: 0000000000000000 [ 103.143654][ T5127] R13: ffff8880705203d8 R14: ffff888070520380 R15: 1ffff1100e0a4071 [ 103.151718][ T5127] FS: 00007f63a0b096c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 103.160706][ T5127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.168542][ T5127] CR2: 00007f667e3f4000 CR3: 0000000023c5d000 CR4: 00000000003506f0 [ 103.176847][ T5127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.184851][ T5127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.192892][ T5127] Call Trace: [ 103.196178][ T5127] [ 103.199182][ T5127] swap_inode_boot_loader+0x310/0x10f0 [ 103.204701][ T5127] ext4_ioctl+0x18f3/0x3590 [ 103.209246][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.214599][ T5127] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 103.220246][ T5127] ? rcu_lock_release+0x5/0x20 [ 103.225103][ T5127] ? __lock_acquire+0x7c60/0x7c60 [ 103.230304][ T5127] ? kfree+0xef/0x2a0 [ 103.234677][ T5127] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 103.240319][ T5127] ? verify_lock_unused+0x140/0x140 [ 103.246480][ T5127] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.251971][ T5127] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.256998][ T5127] ? security_file_ioctl+0x7c/0xa0 [ 103.262118][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.267538][ T5127] __se_sys_ioctl+0xfa/0x170 [ 103.272261][ T5127] do_syscall_64+0x4c/0xa0 [ 103.277430][ T5127] ? clear_bhb_loop+0x30/0x80 [ 103.282114][ T5127] ? clear_bhb_loop+0x30/0x80 [ 103.286982][ T5127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.293226][ T5127] RIP: 0033:0x7f63a149a749 [ 103.297663][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.317593][ T5127] RSP: 002b:00007f63a0b09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.326812][ T5127] RAX: ffffffffffffffda RBX: 00007f63a16f0fa0 RCX: 00007f63a149a749 [ 103.334877][ T5127] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 103.343235][ T5127] RBP: 00007f63a151ef91 R08: 0000000000000000 R09: 0000000000000000 [ 103.351210][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.359272][ T5127] R13: 00007f63a16f1038 R14: 00007f63a16f0fa0 R15: 00007ffdc2927e28 [ 103.367358][ T5127] [ 103.370390][ T5127] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.377660][ T5127] CPU: 0 PID: 5127 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.384837][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.394878][ T5127] Call Trace: [ 103.398150][ T5127] [ 103.401069][ T5127] dump_stack_lvl+0x168/0x230 [ 103.405735][ T5127] ? show_regs_print_info+0x20/0x20 [ 103.411094][ T5127] ? load_image+0x3b0/0x3b0 [ 103.415594][ T5127] panic+0x2c9/0x7f0 [ 103.419470][ T5127] ? bpf_jit_dump+0xd0/0xd0 [ 103.423962][ T5127] ? up_write+0x3a1/0x420 [ 103.428309][ T5127] __warn+0x248/0x2b0 [ 103.432274][ T5127] ? up_write+0x3a1/0x420 [ 103.436585][ T5127] report_bug+0x1b7/0x2e0 [ 103.440901][ T5127] handle_bug+0x3a/0x70 [ 103.445039][ T5127] exc_invalid_op+0x16/0x40 [ 103.449529][ T5127] asm_exc_invalid_op+0x16/0x20 [ 103.454364][ T5127] RIP: 0010:up_write+0x3a1/0x420 [ 103.459281][ T5127] Code: 44 d0 48 c7 c7 60 0f 0b 8a 48 c7 c6 20 12 0b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 c3 d0 3b 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 48 69 69 8d 80 e1 07 80 c1 03 38 c1 [ 103.478871][ T5127] RSP: 0018:ffffc900032df950 EFLAGS: 00010296 [ 103.484920][ T5127] RAX: 70688a5622e99900 RBX: ffff888070520380 RCX: ffff888029b35940 [ 103.492903][ T5127] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 103.500854][ T5127] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 103.508809][ T5127] R10: ffffed10172067b0 R11: 1ffff110172067af R12: 0000000000000000 [ 103.516771][ T5127] R13: ffff8880705203d8 R14: ffff888070520380 R15: 1ffff1100e0a4071 [ 103.524743][ T5127] swap_inode_boot_loader+0x310/0x10f0 [ 103.530263][ T5127] ext4_ioctl+0x18f3/0x3590 [ 103.534764][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.540032][ T5127] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 103.545739][ T5127] ? rcu_lock_release+0x5/0x20 [ 103.550491][ T5127] ? __lock_acquire+0x7c60/0x7c60 [ 103.555667][ T5127] ? kfree+0xef/0x2a0 [ 103.559649][ T5127] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 103.565366][ T5127] ? verify_lock_unused+0x140/0x140 [ 103.570549][ T5127] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.576008][ T5127] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.580931][ T5127] ? security_file_ioctl+0x7c/0xa0 [ 103.586111][ T5127] ? ext4_fileattr_set+0x16a0/0x16a0 [ 103.591396][ T5127] __se_sys_ioctl+0xfa/0x170 [ 103.595970][ T5127] do_syscall_64+0x4c/0xa0 [ 103.600369][ T5127] ? clear_bhb_loop+0x30/0x80 [ 103.605025][ T5127] ? clear_bhb_loop+0x30/0x80 [ 103.609687][ T5127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.615581][ T5127] RIP: 0033:0x7f63a149a749 [ 103.619979][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.639569][ T5127] RSP: 002b:00007f63a0b09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.647963][ T5127] RAX: ffffffffffffffda RBX: 00007f63a16f0fa0 RCX: 00007f63a149a749 [ 103.656117][ T5127] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 103.664074][ T5127] RBP: 00007f63a151ef91 R08: 0000000000000000 R09: 0000000000000000 [ 103.672027][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.672942][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 103.679995][ T5127] R13: 00007f63a16f1038 R14: 00007f63a16f0fa0 R15: 00007ffdc2927e28 [ 103.693938][ T5127] [ 103.697269][ T5127] Kernel Offset: disabled [ 103.701593][ T5127] Rebooting in 86400 seconds..