Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. 2025/04/15 17:31:16 ignoring optional flag "sandboxArg"="0" 2025/04/15 17:31:16 ignoring optional flag "type"="gce" 2025/04/15 17:31:16 parsed 1 programs [ 117.900308][ T6003] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.405634][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.414814][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.425119][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.433644][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.442925][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.706920][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 121.775428][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.782820][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.790076][ T6057] bridge_slave_0: entered allmulticast mode [ 121.797341][ T6057] bridge_slave_0: entered promiscuous mode [ 121.805351][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.812700][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.819909][ T6057] bridge_slave_1: entered allmulticast mode [ 121.827148][ T6057] bridge_slave_1: entered promiscuous mode [ 121.857266][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.869006][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.902741][ T6057] team0: Port device team_slave_0 added [ 121.910659][ T6057] team0: Port device team_slave_1 added [ 121.937009][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.944054][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.971525][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.984562][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.991572][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.017533][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.059449][ T6057] hsr_slave_0: entered promiscuous mode [ 122.066881][ T6057] hsr_slave_1: entered promiscuous mode [ 122.174238][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.222293][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.301580][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.382645][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.502368][ T6057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.513449][ T6057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.523134][ T6057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.533829][ T6057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.558164][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.565332][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.573273][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.580595][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.636058][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.652574][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.661746][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.681623][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.693582][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.700904][ T4642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.717054][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.724198][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.874921][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.918467][ T6057] veth0_vlan: entered promiscuous mode [ 122.932585][ T6057] veth1_vlan: entered promiscuous mode [ 122.962270][ T6057] veth0_macvtap: entered promiscuous mode [ 122.973032][ T6057] veth1_macvtap: entered promiscuous mode [ 122.989825][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.001768][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.014371][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.029079][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.040608][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.052390][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.065898][ T6057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.074772][ T6057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.083916][ T6057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.094220][ T6057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.428853][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.441502][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.468013][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.476483][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/04/15 17:31:27 executed programs: 0 [ 124.421702][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.434280][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.442241][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.453176][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.466158][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.619017][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 124.696514][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.705003][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.712731][ T6108] bridge_slave_0: entered allmulticast mode [ 124.720063][ T6108] bridge_slave_0: entered promiscuous mode [ 124.729142][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.736460][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.744224][ T6108] bridge_slave_1: entered allmulticast mode [ 124.751970][ T6108] bridge_slave_1: entered promiscuous mode [ 124.783608][ T6108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.796406][ T6108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.834950][ T6108] team0: Port device team_slave_0 added [ 124.843799][ T6108] team0: Port device team_slave_1 added [ 124.875160][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.882935][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.909501][ T6108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.922115][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.929723][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.957347][ T6108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.004728][ T6108] hsr_slave_0: entered promiscuous mode [ 125.011449][ T6108] hsr_slave_1: entered promiscuous mode [ 125.017554][ T6108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.027262][ T6108] Cannot create hsr debugfs directory [ 125.136606][ T6108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.521297][ T6108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.540421][ T56] Bluetooth: hci0: command tx timeout [ 126.562974][ T6108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.662987][ T6108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.827364][ T6108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.837618][ T6108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.848634][ T6108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.858321][ T6108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.934124][ T6108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.956457][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.968542][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.975902][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.993589][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.000906][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.154513][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.202833][ T6108] veth0_vlan: entered promiscuous mode [ 127.214336][ T6108] veth1_vlan: entered promiscuous mode [ 127.244372][ T6108] veth0_macvtap: entered promiscuous mode [ 127.254682][ T6108] veth1_macvtap: entered promiscuous mode [ 127.272777][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.284339][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.294424][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.305218][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.316464][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.332595][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.343759][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.354636][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.365545][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.377182][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.391578][ T6108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.401169][ T6108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.409889][ T6108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.419147][ T6108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.485410][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.495397][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.525583][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.534072][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.608802][ T6122] loop0: detected capacity change from 0 to 1024 [ 127.616263][ T6122] EXT4-fs: Ignoring removed orlov option [ 127.622354][ T6122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.653727][ T6122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 127.715848][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.810897][ T6122] loop0: detected capacity change from 1024 to 1023 [ 127.818583][ T6122] [ 127.820922][ T6122] ====================================================== [ 127.829086][ T6122] WARNING: possible circular locking dependency detected [ 127.836317][ T6122] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 127.843535][ T6122] ------------------------------------------------------ [ 127.850734][ T6122] syz.0.15/6122 is trying to acquire lock: [ 127.856648][ T6122] ffffffff90455448 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x280/0x580 [ 127.867476][ T6122] [ 127.867476][ T6122] but task is already holding lock: [ 127.874852][ T6122] ffff888025691de8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: loop_set_status+0x223/0xb20 [ 127.885070][ T6122] [ 127.885070][ T6122] which lock already depends on the new lock. [ 127.885070][ T6122] [ 127.895651][ T6122] [ 127.895651][ T6122] the existing dependency chain (in reverse order) is: [ 127.904679][ T6122] [ 127.904679][ T6122] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 127.913392][ T6122] lock_acquire+0x116/0x2f0 [ 127.918585][ T6122] blk_alloc_queue+0x542/0x620 [ 127.923882][ T6122] __blk_mq_alloc_disk+0x162/0x380 [ 127.929530][ T6122] loop_add+0x445/0xaf0 [ 127.934199][ T6122] loop_init+0x168/0x220 [ 127.938964][ T6122] do_one_initcall+0x24a/0x940 [ 127.944235][ T6122] do_initcall_level+0x157/0x210 [ 127.949700][ T6122] do_initcalls+0x71/0xd0 [ 127.954529][ T6122] kernel_init_freeable+0x432/0x5d0 [ 127.960240][ T6122] kernel_init+0x1d/0x2b0 [ 127.965090][ T6122] ret_from_fork+0x4b/0x80 [ 127.970113][ T6122] ret_from_fork_asm+0x1a/0x30 [ 127.975414][ T6122] [ 127.975414][ T6122] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 127.982722][ T6122] lock_acquire+0x116/0x2f0 [ 127.987914][ T6122] fs_reclaim_acquire+0x88/0x130 [ 127.993394][ T6122] kmem_cache_alloc_node_noprof+0x4e/0x3b0 [ 127.999739][ T6122] __alloc_skb+0x1c2/0x480 [ 128.004687][ T6122] alloc_uevent_skb+0x74/0x230 [ 128.009969][ T6122] kobject_uevent_net_broadcast+0x2fd/0x580 [ 128.016382][ T6122] kobject_uevent_env+0x57d/0x8e0 [ 128.021924][ T6122] kobject_synth_uevent+0x4f4/0xaf0 [ 128.027755][ T6122] bus_uevent_store+0x116/0x170 [ 128.033218][ T6122] kernfs_fop_write_iter+0x398/0x510 [ 128.039041][ T6122] vfs_write+0x70f/0xd10 [ 128.043889][ T6122] ksys_write+0x19d/0x2d0 [ 128.048735][ T6122] do_syscall_64+0xf3/0x230 [ 128.053788][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.060384][ T6122] [ 128.060384][ T6122] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 128.068213][ T6122] validate_chain+0xa69/0x24e0 [ 128.073502][ T6122] __lock_acquire+0xad5/0xd80 [ 128.078739][ T6122] lock_acquire+0x116/0x2f0 [ 128.083979][ T6122] __mutex_lock+0x1a5/0x10c0 [ 128.089089][ T6122] kobject_uevent_net_broadcast+0x280/0x580 [ 128.095497][ T6122] kobject_uevent_env+0x57d/0x8e0 [ 128.101031][ T6122] set_capacity_and_notify+0x269/0x2d0 [ 128.107004][ T6122] loop_set_status+0x4a4/0xb20 [ 128.112280][ T6122] lo_ioctl+0xce1/0x2850 [ 128.117032][ T6122] blkdev_ioctl+0x5df/0x710 [ 128.122042][ T6122] __se_sys_ioctl+0xf1/0x160 [ 128.127164][ T6122] do_syscall_64+0xf3/0x230 [ 128.132270][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.138689][ T6122] [ 128.138689][ T6122] other info that might help us debug this: [ 128.138689][ T6122] [ 128.148907][ T6122] Chain exists of: [ 128.148907][ T6122] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 128.148907][ T6122] [ 128.162745][ T6122] Possible unsafe locking scenario: [ 128.162745][ T6122] [ 128.170198][ T6122] CPU0 CPU1 [ 128.175584][ T6122] ---- ---- [ 128.181059][ T6122] lock(&q->q_usage_counter(io)#17); [ 128.186538][ T6122] lock(fs_reclaim); [ 128.193125][ T6122] lock(&q->q_usage_counter(io)#17); [ 128.201059][ T6122] lock(uevent_sock_mutex); [ 128.205832][ T6122] [ 128.205832][ T6122] *** DEADLOCK *** [ 128.205832][ T6122] [ 128.213988][ T6122] 3 locks held by syz.0.15/6122: [ 128.218932][ T6122] #0: ffff88814238ab68 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2b/0xb20 [ 128.228400][ T6122] #1: ffff888025691de8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: loop_set_status+0x223/0xb20 [ 128.239014][ T6122] #2: ffff888025691e20 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: loop_set_status+0x223/0xb20 [ 128.249880][ T6122] [ 128.249880][ T6122] stack backtrace: [ 128.255766][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.0.15 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 128.255780][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.255789][ T6122] Call Trace: [ 128.255795][ T6122] [ 128.255800][ T6122] dump_stack_lvl+0x241/0x360 [ 128.255818][ T6122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.255830][ T6122] ? __pfx__printk+0x10/0x10 [ 128.255842][ T6122] ? print_lock+0x171/0x1a0 [ 128.255853][ T6122] print_circular_bug+0x2e1/0x300 [ 128.255864][ T6122] check_noncircular+0x142/0x160 [ 128.255877][ T6122] validate_chain+0xa69/0x24e0 [ 128.255887][ T6122] ? __pfx_number+0x10/0x10 [ 128.255900][ T6122] __lock_acquire+0xad5/0xd80 [ 128.255913][ T6122] lock_acquire+0x116/0x2f0 [ 128.255926][ T6122] ? kobject_uevent_net_broadcast+0x280/0x580 [ 128.255949][ T6122] ? vsnprintf+0x1156/0x1230 [ 128.255965][ T6122] __mutex_lock+0x1a5/0x10c0 [ 128.255982][ T6122] ? kobject_uevent_net_broadcast+0x280/0x580 [ 128.255995][ T6122] ? __pfx_vsnprintf+0x10/0x10 [ 128.256004][ T6122] ? kobject_uevent_net_broadcast+0x280/0x580 [ 128.256016][ T6122] ? __pfx___mutex_lock+0x10/0x10 [ 128.256026][ T6122] ? add_uevent_var+0x291/0x490 [ 128.256039][ T6122] ? kobject_uevent_env+0x503/0x8e0 [ 128.256051][ T6122] ? __pfx_add_uevent_var+0x10/0x10 [ 128.256064][ T6122] kobject_uevent_net_broadcast+0x280/0x580 [ 128.256078][ T6122] kobject_uevent_env+0x57d/0x8e0 [ 128.256092][ T6122] set_capacity_and_notify+0x269/0x2d0 [ 128.256105][ T6122] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 128.256116][ T6122] ? __asan_memcpy+0x40/0x70 [ 128.256128][ T6122] ? loop_set_status_from_info+0x184/0x240 [ 128.256141][ T6122] loop_set_status+0x4a4/0xb20 [ 128.256155][ T6122] lo_ioctl+0xce1/0x2850 [ 128.256166][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256176][ T6122] ? __pfx_lo_ioctl+0x10/0x10 [ 128.256190][ T6122] ? xfd_validate_state+0x6e/0x150 [ 128.256200][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256208][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256217][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256225][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256234][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256243][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256254][ T6122] ? is_bpf_text_address+0x26/0x2a0 [ 128.256265][ T6122] ? is_bpf_text_address+0x288/0x2a0 [ 128.256273][ T6122] ? is_bpf_text_address+0x26/0x2a0 [ 128.256282][ T6122] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.256295][ T6122] ? kernel_text_address+0xa7/0xe0 [ 128.256308][ T6122] ? __kernel_text_address+0xd/0x40 [ 128.256320][ T6122] ? unwind_get_return_address+0x4d/0x90 [ 128.256331][ T6122] ? arch_stack_walk+0xff/0x150 [ 128.256344][ T6122] ? stack_trace_save+0x11a/0x1d0 [ 128.256356][ T6122] ? __pfx_stack_trace_save+0x10/0x10 [ 128.256367][ T6122] ? stack_depot_save_flags+0x44/0x940 [ 128.256380][ T6122] ? do_syscall_64+0xf3/0x230 [ 128.256390][ T6122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.256400][ T6122] ? do_vfs_ioctl+0xef8/0x2750 [ 128.256419][ T6122] ? kasan_quarantine_put+0xdc/0x230 [ 128.256430][ T6122] ? lockdep_hardirqs_on+0x9d/0x150 [ 128.256442][ T6122] ? tomoyo_path_number_perm+0x215/0x790 [ 128.256454][ T6122] ? blkdev_common_ioctl+0x1060/0x25a0 [ 128.256466][ T6122] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 128.256476][ T6122] ? tomoyo_path_number_perm+0x215/0x790 [ 128.256488][ T6122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.256503][ T6122] ? __lock_acquire+0xad5/0xd80 [ 128.256511][ T6122] ? __asan_memset+0x23/0x50 [ 128.256521][ T6122] ? smack_file_ioctl+0x2a7/0x3b0 [ 128.256533][ T6122] ? __pfx_smack_file_ioctl+0x10/0x10 [ 128.256544][ T6122] ? file_to_blk_mode+0xcb/0x140 [ 128.256556][ T6122] ? __pfx_lo_ioctl+0x10/0x10 [ 128.256573][ T6122] blkdev_ioctl+0x5df/0x710 [ 128.256584][ T6122] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.256595][ T6122] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.256605][ T6122] __se_sys_ioctl+0xf1/0x160 [ 128.256617][ T6122] do_syscall_64+0xf3/0x230 [ 128.256628][ T6122] ? clear_bhb_loop+0x45/0xa0 [ 128.256637][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.256650][ T6122] RIP: 0033:0x7f89dd779e79 [ 128.256662][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.256669][ T6122] RSP: 002b:00007f89de5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.256680][ T6122] RAX: ffffffffffffffda RBX: 00007f89dd915f80 RCX: 00007f89dd779e79 [ 128.256686][ T6122] RDX: 0000000020000140 RSI: 0000000000004c02 RDI: 0000000000000006 [ 128.256692][ T6122] RBP: 00007f89dd7e793e R08: 0000000000000000 R09: 0000000000000000 [ 128.256698][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.256703][ T6122] R13: 0000000000000000 R14: 00007f89dd915f80 R15: 00007ffecc9f44c8 [ 128.256712][ T6122] [ 128.660365][ T56] Bluetooth: hci0: command tx timeout [ 128.698669][ T6121] ------------[ cut here ]------------ [ 128.737920][ T6121] kernel BUG at fs/ext4/inline.c:1905! [ 128.743785][ T6121] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 128.750071][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.0.15 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 128.761906][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.771960][ T6121] RIP: 0010:ext4_inline_data_truncate+0xcee/0xcf0 [ 128.778374][ T6121] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 62 7e aa ff e9 3a fd ff ff e8 88 62 a8 09 e8 f3 d5 42 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa [ 128.797987][ T6121] RSP: 0018:ffffc90003007800 EFLAGS: 00010293 [ 128.804047][ T6121] RAX: ffffffff82806e7d RBX: ffffc900030078a0 RCX: ffff88802ee1da00 [ 128.812011][ T6121] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 128.820065][ T6121] RBP: ffffc90003007990 R08: ffffffff82806b29 R09: 1ffff1100c3c400a [ 128.828211][ T6121] R10: dffffc0000000000 R11: ffffed100c3c400b R12: ffffc90003007900 [ 128.836206][ T6121] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 128.844171][ T6121] FS: 00005555670d4500(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 128.853300][ T6121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.859974][ T6121] CR2: 00007f89dd917a8c CR3: 0000000022bfa000 CR4: 00000000003526f0 [ 128.868656][ T6121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.876622][ T6121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.884611][ T6121] Call Trace: [ 128.887966][ T6121] [ 128.890884][ T6121] ? __pfx_ext4_inline_data_truncate+0x10/0x10 [ 128.897023][ T6121] ? __ext4_mark_inode_dirty+0x5b4/0x880 [ 128.902675][ T6121] ext4_truncate+0x3cf/0x1220 [ 128.907343][ T6121] ? __pfx_ext4_truncate+0x10/0x10 [ 128.912451][ T6121] ? ext4_journal_check_start+0x1d0/0x2a0 [ 128.918177][ T6121] ? ext4_inode_is_fast_symlink+0x266/0x3a0 [ 128.924155][ T6121] ext4_evict_inode+0x94d/0xfc0 [ 128.929014][ T6121] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.934390][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 128.939575][ T6121] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.944957][ T6121] evict+0x4f9/0x9b0 [ 128.948850][ T6121] ? __pfx_evict+0x10/0x10 [ 128.953271][ T6121] ? iput+0x713/0xa50 [ 128.957262][ T6121] __dentry_kill+0x20d/0x630 [ 128.961839][ T6121] ? dput+0x37/0x2b0 [ 128.965715][ T6121] dput+0x19f/0x2b0 [ 128.969596][ T6121] __fput+0x60b/0x9f0 [ 128.973563][ T6121] task_work_run+0x251/0x310 [ 128.978146][ T6121] ? _raw_spin_unlock+0x28/0x50 [ 128.982983][ T6121] ? __pfx_task_work_run+0x10/0x10 [ 128.988117][ T6121] ? rcu_is_watching+0x15/0xb0 [ 128.992899][ T6121] syscall_exit_to_user_mode+0x13f/0x340 [ 128.998645][ T6121] do_syscall_64+0x100/0x230 [ 129.003336][ T6121] ? clear_bhb_loop+0x45/0xa0 [ 129.008038][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.014096][ T6121] RIP: 0033:0x7f89dd779e79 [ 129.018524][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.038509][ T6121] RSP: 002b:00007ffecc9f4628 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 129.046945][ T6121] RAX: 0000000000000000 RBX: 00007f89dd917a80 RCX: 00007f89dd779e79 [ 129.054913][ T6121] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 129.062875][ T6121] RBP: 00007f89dd917a80 R08: 0000000000000006 R09: 00007ffecc9f490f [ 129.071219][ T6121] R10: 000000000003fd90 R11: 0000000000000246 R12: 000000000001f589 [ 129.079187][ T6121] R13: 00007ffecc9f4720 R14: 00007ffecc9f4740 R15: ffffffffffffffff [ 129.087687][ T6121] [ 129.090704][ T6121] Modules linked in: [ 129.095801][ T6121] ---[ end trace 0000000000000000 ]--- [ 129.102221][ T6121] RIP: 0010:ext4_inline_data_truncate+0xcee/0xcf0 [ 129.108752][ T6121] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 62 7e aa ff e9 3a fd ff ff e8 88 62 a8 09 e8 f3 d5 42 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa [ 129.131538][ T6121] RSP: 0018:ffffc90003007800 EFLAGS: 00010293 [ 129.137651][ T6121] RAX: ffffffff82806e7d RBX: ffffc900030078a0 RCX: ffff88802ee1da00 [ 129.146131][ T6121] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 129.154392][ T6121] RBP: ffffc90003007990 R08: ffffffff82806b29 R09: 1ffff1100c3c400a [ 129.162477][ T6121] R10: dffffc0000000000 R11: ffffed100c3c400b R12: ffffc90003007900 [ 129.170685][ T6121] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 129.178787][ T6121] FS: 00005555670d4500(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000 [ 129.188774][ T6121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.195759][ T6121] CR2: 000056068f9ab2c8 CR3: 0000000022bfa000 CR4: 00000000003526f0 [ 129.204011][ T6121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.212276][ T6121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.220939][ T6121] Kernel panic - not syncing: Fatal exception [ 129.227305][ T6121] Kernel Offset: disabled [ 129.231620][ T6121] Rebooting in 86400 seconds..