Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. 2026/06/04 14:09:24 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 114.248087][ T4664] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 116.010623][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.018747][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.030659][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.052658][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.060626][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.071049][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.537391][ T4698] chnl_net:caif_netlink_parms(): no params data found [ 116.598120][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.605394][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.613591][ T4698] device bridge_slave_0 entered promiscuous mode [ 116.622321][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.629653][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.637984][ T4698] device bridge_slave_1 entered promiscuous mode [ 116.666694][ T4698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.678611][ T4698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.710422][ T4698] team0: Port device team_slave_0 added [ 116.718791][ T4698] team0: Port device team_slave_1 added [ 116.750799][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.758042][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.784132][ T4698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.796766][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.803849][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.830101][ T4698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.871276][ T4698] device hsr_slave_0 entered promiscuous mode [ 116.878309][ T4698] device hsr_slave_1 entered promiscuous mode [ 117.598713][ T4698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.616204][ T4698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.638585][ T4698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.657500][ T4698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.745111][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.762593][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.771584][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.784264][ T4698] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.805142][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.824455][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.836039][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.843195][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.865743][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.874443][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.883904][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.897461][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.904614][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.916198][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.925711][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.936367][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.949688][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.975099][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.984194][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.993577][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.002639][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.014062][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.027492][ T4698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.039282][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.049579][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.058828][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.205801][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.214273][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.228169][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.257328][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.267659][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.300616][ T4698] device veth0_vlan entered promiscuous mode [ 118.307505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.318658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.328648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.337892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.351793][ T4698] device veth1_vlan entered promiscuous mode [ 118.375102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.385477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.394251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.405620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.416906][ T4698] device veth0_macvtap entered promiscuous mode [ 118.429181][ T4698] device veth1_macvtap entered promiscuous mode [ 118.447086][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.456725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.466338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.475063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.485509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.497565][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.522520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.531934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.545229][ T4698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.554317][ T4698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.563529][ T4698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.572268][ T4698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/04 14:09:35 executed programs: 0 [ 121.556342][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.699433][ T4857] chnl_net:caif_netlink_parms(): no params data found [ 121.762196][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.769510][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.778351][ T4857] device bridge_slave_0 entered promiscuous mode [ 121.787667][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.795219][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.811795][ T4857] device bridge_slave_1 entered promiscuous mode [ 121.839496][ T4857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.851167][ T4857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.884554][ T4857] team0: Port device team_slave_0 added [ 121.892708][ T4857] team0: Port device team_slave_1 added [ 121.917925][ T4857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.925474][ T4857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.951777][ T4857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.964639][ T4857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.971640][ T4857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.997661][ T4857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.038788][ T4857] device hsr_slave_0 entered promiscuous mode [ 122.045872][ T4857] device hsr_slave_1 entered promiscuous mode [ 122.052811][ T4857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.061208][ T4857] Cannot create hsr debugfs directory [ 123.563377][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 124.069309][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.111028][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.185159][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.125672][ T4857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.140135][ T4857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.160127][ T4857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.170159][ T4857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.258981][ T4857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.277322][ T4857] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.286493][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.296883][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.309185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.321433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.331394][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.338580][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.349885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.363627][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.372506][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.381298][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.388456][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.446139][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.455976][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.468265][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.482063][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.494447][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.506349][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.515330][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.527051][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.535941][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.550885][ T4857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.565547][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.575647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.587709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.644290][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 125.750034][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.758302][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.771556][ T4857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.816496][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.825989][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.850214][ T144] device hsr_slave_0 left promiscuous mode [ 125.857542][ T144] device hsr_slave_1 left promiscuous mode [ 125.864568][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.872018][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.880355][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.889059][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.899693][ T144] device bridge_slave_1 left promiscuous mode [ 125.908298][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.919740][ T144] device bridge_slave_0 left promiscuous mode [ 125.926455][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.942475][ T144] device veth1_macvtap left promiscuous mode [ 125.948793][ T144] device veth0_macvtap left promiscuous mode [ 125.957546][ T144] device veth1_vlan left promiscuous mode [ 125.963925][ T144] device veth0_vlan left promiscuous mode [ 126.234166][ T144] team0 (unregistering): Port device team_slave_1 removed [ 126.255459][ T144] team0 (unregistering): Port device team_slave_0 removed [ 126.268863][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.282862][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.342999][ T144] bond0 (unregistering): Released all slaves [ 126.403277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.412004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.421754][ T4857] device veth0_vlan entered promiscuous mode [ 126.430259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.438832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.456695][ T4857] device veth1_vlan entered promiscuous mode [ 126.490939][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.504201][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.512400][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.521690][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.533412][ T4857] device veth0_macvtap entered promiscuous mode [ 126.542913][ T4857] device veth1_macvtap entered promiscuous mode [ 126.558869][ T4857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.567261][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.577406][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.585958][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.597735][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.610252][ T4857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.621018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.630111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.642461][ T4857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.652371][ T4857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.661286][ T4857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.670524][ T4857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.737721][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.748219][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.759862][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/06/04 14:09:41 executed programs: 2 [ 126.785422][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.793710][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.801263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.868833][ T5090] loop0: detected capacity change from 0 to 512 [ 127.015467][ T5090] EXT4-fs (loop0): Ignoring removed bh option [ 127.025021][ T5090] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 127.076312][ T5090] EXT4-fs (loop0): 1 truncate cleaned up [ 127.082036][ T5090] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 127.140450][ T5090] [ 127.142847][ T5090] ===================================== [ 127.148521][ T5090] WARNING: bad unlock balance detected! [ 127.154088][ T5090] syzkaller #0 Not tainted [ 127.158517][ T5090] ------------------------------------- [ 127.164066][ T5090] syz.0.17/5090 is trying to release lock (&type->i_mutex_dir_key) at: [ 127.172329][ T5090] [] swap_inode_boot_loader+0x142/0x10b0 [ 127.179563][ T5090] but there are no more locks to release! [ 127.185289][ T5090] [ 127.185289][ T5090] other info that might help us debug this: [ 127.193361][ T5090] 1 lock held by syz.0.17/5090: [ 127.198273][ T5090] #0: ffff888024520460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 127.208072][ T5090] [ 127.208072][ T5090] stack backtrace: [ 127.213994][ T5090] CPU: 0 PID: 5090 Comm: syz.0.17 Not tainted syzkaller #0 [ 127.221244][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.231332][ T5090] Call Trace: [ 127.234672][ T5090] [ 127.237625][ T5090] dump_stack_lvl+0x188/0x250 [ 127.242332][ T5090] ? show_regs_print_info+0x20/0x20 [ 127.247559][ T5090] ? swap_inode_boot_loader+0x142/0x10b0 [ 127.253247][ T5090] lock_release+0x538/0x8a0 [ 127.257784][ T5090] ? swap_inode_boot_loader+0x142/0x10b0 [ 127.263444][ T5090] ? __lock_acquire+0x7d10/0x7d10 [ 127.268499][ T5090] up_write+0x29/0x420 [ 127.272602][ T5090] swap_inode_boot_loader+0x142/0x10b0 [ 127.278105][ T5090] ext4_ioctl+0x1ad2/0x3870 [ 127.282637][ T5090] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 127.287511][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 127.293171][ T5090] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 127.298828][ T5090] ? rcu_lock_release+0x5/0x20 [ 127.303632][ T5090] ? __lock_acquire+0x7d10/0x7d10 [ 127.308687][ T5090] ? kfree+0xef/0x2a0 [ 127.312723][ T5090] ? tomoyo_path_number_perm+0x5b4/0x660 [ 127.318389][ T5090] ? verify_lock_unused+0x140/0x140 [ 127.323621][ T5090] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 127.329131][ T5090] ? bpf_lsm_file_ioctl+0x5/0x10 [ 127.334104][ T5090] ? security_file_ioctl+0x7c/0xa0 [ 127.339243][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 127.344557][ T5090] __se_sys_ioctl+0xfa/0x170 [ 127.349173][ T5090] do_syscall_64+0x4c/0xa0 [ 127.353646][ T5090] ? clear_bhb_loop+0x30/0x80 [ 127.358347][ T5090] ? clear_bhb_loop+0x30/0x80 [ 127.363058][ T5090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.368986][ T5090] RIP: 0033:0x7f02e8a4def9 [ 127.373456][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.393206][ T5090] RSP: 002b:00007f02e80b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.401650][ T5090] RAX: ffffffffffffffda RBX: 00007f02e8cb8fa0 RCX: 00007f02e8a4def9 [ 127.409654][ T5090] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 127.417667][ T5090] RBP: 00007f02e8ae2ee0 R08: 0000000000000000 R09: 0000000000000000 [ 127.425674][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.433845][ T5090] R13: 00007f02e8cb9038 R14: 00007f02e8cb8fa0 R15: 00007fffc6013ed8 [ 127.441845][ T5090] [ 127.460992][ T5090] ------------[ cut here ]------------ [ 127.466640][ T5090] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888069345340, owner = 0x0, curr 0xffff888025ec9dc0, list empty [ 127.487643][ T5090] WARNING: CPU: 0 PID: 5090 at kernel/locking/rwsem.c:1350 up_write+0x3a1/0x420 [ 127.497438][ T5090] Modules linked in: [ 127.501533][ T5090] CPU: 0 PID: 5090 Comm: syz.0.17 Not tainted syzkaller #0 [ 127.509077][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.519632][ T5090] RIP: 0010:up_write+0x3a1/0x420 [ 127.525091][ T5090] Code: 44 d0 48 c7 c7 00 25 2b 8a 48 c7 c6 c0 27 2b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 03 0a 56 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 88 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 127.545234][ T5090] RSP: 0018:ffffc90002edf958 EFLAGS: 00010282 [ 127.551399][ T5090] RAX: ff06b50af4f8a600 RBX: ffff888069345340 RCX: ffff888025ec9dc0 [ 127.559746][ T5090] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 127.568393][ T5090] RBP: dffffc0000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 127.576736][ T5090] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 127.585000][ T5090] R13: ffff888069345398 R14: ffff888069345340 R15: 1ffff1100d268a69 [ 127.593538][ T5090] FS: 00007f02e80b16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 127.602568][ T5090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.609589][ T5090] CR2: 00007f02e8a9b640 CR3: 000000007c923000 CR4: 00000000003506f0 [ 127.618022][ T5090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.626347][ T5090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.635036][ T5090] Call Trace: [ 127.638435][ T5090] [ 127.641449][ T5090] swap_inode_boot_loader+0x142/0x10b0 [ 127.648010][ T5090] ext4_ioctl+0x1ad2/0x3870 [ 127.652690][ T5090] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 127.657883][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 127.663543][ T5090] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 127.669270][ T5090] ? rcu_lock_release+0x5/0x20 [ 127.674785][ T5090] ? __lock_acquire+0x7d10/0x7d10 [ 127.679940][ T5090] ? kfree+0xef/0x2a0 [ 127.684537][ T5090] ? tomoyo_path_number_perm+0x5b4/0x660 [ 127.690327][ T5090] ? verify_lock_unused+0x140/0x140 [ 127.696243][ T5090] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 127.701848][ T5090] ? bpf_lsm_file_ioctl+0x5/0x10 [ 127.707141][ T5090] ? security_file_ioctl+0x7c/0xa0 [ 127.712368][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 127.718032][ T5090] __se_sys_ioctl+0xfa/0x170 [ 127.722881][ T5090] do_syscall_64+0x4c/0xa0 [ 127.728504][ T5090] ? clear_bhb_loop+0x30/0x80 [ 127.733520][ T5090] ? clear_bhb_loop+0x30/0x80 [ 127.734436][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 127.738291][ T5090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.750634][ T5090] RIP: 0033:0x7f02e8a4def9 [ 127.755115][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.775278][ T5090] RSP: 002b:00007f02e80b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.784084][ T5090] RAX: ffffffffffffffda RBX: 00007f02e8cb8fa0 RCX: 00007f02e8a4def9 [ 127.792202][ T5090] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 127.800657][ T5090] RBP: 00007f02e8ae2ee0 R08: 0000000000000000 R09: 0000000000000000 [ 127.811297][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.819875][ T5090] R13: 00007f02e8cb9038 R14: 00007f02e8cb8fa0 R15: 00007fffc6013ed8 [ 127.828341][ T5090] [ 127.831419][ T5090] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.838714][ T5090] CPU: 0 PID: 5090 Comm: syz.0.17 Not tainted syzkaller #0 [ 127.845946][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.855998][ T5090] Call Trace: [ 127.859302][ T5090] [ 127.862232][ T5090] dump_stack_lvl+0x188/0x250 [ 127.866929][ T5090] ? show_regs_print_info+0x20/0x20 [ 127.872126][ T5090] ? load_image+0x400/0x400 [ 127.876631][ T5090] panic+0x2e5/0x810 [ 127.880526][ T5090] ? bpf_jit_dump+0xd0/0xd0 [ 127.885039][ T5090] ? up_write+0x3a1/0x420 [ 127.889392][ T5090] __warn+0x248/0x2b0 [ 127.893412][ T5090] ? up_write+0x3a1/0x420 [ 127.897741][ T5090] report_bug+0x1b7/0x2e0 [ 127.902070][ T5090] handle_bug+0x3a/0x70 [ 127.906239][ T5090] exc_invalid_op+0x16/0x40 [ 127.910740][ T5090] asm_exc_invalid_op+0x16/0x20 [ 127.915591][ T5090] RIP: 0010:up_write+0x3a1/0x420 [ 127.920717][ T5090] Code: 44 d0 48 c7 c7 00 25 2b 8a 48 c7 c6 c0 27 2b 8a 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 08 41 52 e8 03 0a 56 08 48 83 c4 08 <0f> 0b e9 6b fd ff ff 48 c7 c1 88 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 127.940321][ T5090] RSP: 0018:ffffc90002edf958 EFLAGS: 00010282 [ 127.946394][ T5090] RAX: ff06b50af4f8a600 RBX: ffff888069345340 RCX: ffff888025ec9dc0 [ 127.954375][ T5090] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 127.962350][ T5090] RBP: dffffc0000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 127.970323][ T5090] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 127.978317][ T5090] R13: ffff888069345398 R14: ffff888069345340 R15: 1ffff1100d268a69 [ 127.986311][ T5090] swap_inode_boot_loader+0x142/0x10b0 [ 127.991807][ T5090] ext4_ioctl+0x1ad2/0x3870 [ 127.996317][ T5090] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 128.001169][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 128.006454][ T5090] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 128.012173][ T5090] ? rcu_lock_release+0x5/0x20 [ 128.016942][ T5090] ? __lock_acquire+0x7d10/0x7d10 [ 128.021998][ T5090] ? kfree+0xef/0x2a0 [ 128.025988][ T5090] ? tomoyo_path_number_perm+0x5b4/0x660 [ 128.031780][ T5090] ? verify_lock_unused+0x140/0x140 [ 128.036984][ T5090] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 128.042484][ T5090] ? bpf_lsm_file_ioctl+0x5/0x10 [ 128.047521][ T5090] ? security_file_ioctl+0x7c/0xa0 [ 128.052638][ T5090] ? ext4_fileattr_set+0x1750/0x1750 [ 128.057931][ T5090] __se_sys_ioctl+0xfa/0x170 [ 128.062619][ T5090] do_syscall_64+0x4c/0xa0 [ 128.067055][ T5090] ? clear_bhb_loop+0x30/0x80 [ 128.071858][ T5090] ? clear_bhb_loop+0x30/0x80 [ 128.076543][ T5090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.082445][ T5090] RIP: 0033:0x7f02e8a4def9 [ 128.086867][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.106685][ T5090] RSP: 002b:00007f02e80b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.115112][ T5090] RAX: ffffffffffffffda RBX: 00007f02e8cb8fa0 RCX: 00007f02e8a4def9 [ 128.123096][ T5090] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 128.131085][ T5090] RBP: 00007f02e8ae2ee0 R08: 0000000000000000 R09: 0000000000000000 [ 128.139069][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.147071][ T5090] R13: 00007f02e8cb9038 R14: 00007f02e8cb8fa0 R15: 00007fffc6013ed8 [ 128.155082][ T5090] [ 128.158383][ T5090] Kernel Offset: disabled [ 128.162945][ T5090] Rebooting in 86400 seconds..