Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2026/01/02 08:01:16 parsed 1 programs [ 64.109828][ T5769] cgroup: Unknown subsys name 'net' [ 64.223095][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.641233][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.218543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.226484][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.252264][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.260278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.331794][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 68.387489][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.394916][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.402124][ T5803] bridge_slave_0: entered allmulticast mode [ 68.408864][ T5803] bridge_slave_0: entered promiscuous mode [ 68.416889][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.424083][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.432381][ T5803] bridge_slave_1: entered allmulticast mode [ 68.439193][ T5803] bridge_slave_1: entered promiscuous mode [ 68.499602][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.516703][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.558956][ T5803] team0: Port device team_slave_0 added [ 68.566710][ T5803] team0: Port device team_slave_1 added [ 68.586734][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.594128][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.620475][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.632504][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.639474][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.665391][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.698337][ T5803] hsr_slave_0: entered promiscuous mode [ 68.704717][ T5803] hsr_slave_1: entered promiscuous mode [ 68.830861][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.858208][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.867518][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.876583][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.901268][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.908518][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.916351][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.923513][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.983349][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.003403][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.014499][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.029760][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.055204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.062341][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.073790][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.080938][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.281354][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.325007][ T5803] veth0_vlan: entered promiscuous mode [ 69.339219][ T5803] veth1_vlan: entered promiscuous mode [ 69.374112][ T5803] veth0_macvtap: entered promiscuous mode [ 69.382873][ T5803] veth1_macvtap: entered promiscuous mode [ 69.402003][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.414055][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.432521][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.441369][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.450629][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.459861][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.774161][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.500067][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.508004][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.515447][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.524648][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.534811][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.542708][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.501834][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.508427][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/02 08:01:25 executed programs: 0 [ 71.831405][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.839500][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.846889][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.855638][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.864928][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.872303][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.989377][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 72.038700][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045831][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.053368][ T5876] bridge_slave_0: entered allmulticast mode [ 72.060703][ T5876] bridge_slave_0: entered promiscuous mode [ 72.068361][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.075416][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.083050][ T5876] bridge_slave_1: entered allmulticast mode [ 72.090677][ T5876] bridge_slave_1: entered promiscuous mode [ 72.113494][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.124847][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.151365][ T5876] team0: Port device team_slave_0 added [ 72.159475][ T5876] team0: Port device team_slave_1 added [ 72.181281][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.189043][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.218423][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.237542][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.252074][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.259478][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.285536][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.320490][ T5876] hsr_slave_0: entered promiscuous mode [ 72.326667][ T5876] hsr_slave_1: entered promiscuous mode [ 72.333095][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.341437][ T5876] Cannot create hsr debugfs directory [ 73.887709][ T5086] Bluetooth: hci0: command tx timeout [ 74.525171][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.588686][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.493264][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.503259][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.523755][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.533749][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.564841][ T1140] hsr_slave_0: left promiscuous mode [ 75.571570][ T1140] hsr_slave_1: left promiscuous mode [ 75.579869][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.588222][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.595975][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.603507][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.611033][ T1140] bridge_slave_1: left allmulticast mode [ 75.616662][ T1140] bridge_slave_1: left promiscuous mode [ 75.622843][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.632880][ T1140] bridge_slave_0: left allmulticast mode [ 75.638600][ T1140] bridge_slave_0: left promiscuous mode [ 75.644235][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.666979][ T1140] veth1_macvtap: left promiscuous mode [ 75.672693][ T1140] veth0_macvtap: left promiscuous mode [ 75.678522][ T1140] veth1_vlan: left promiscuous mode [ 75.683832][ T1140] veth0_vlan: left promiscuous mode [ 75.969668][ T5086] Bluetooth: hci0: command tx timeout [ 75.993774][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 76.021017][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 76.046600][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.073605][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.320123][ T1140] bond0 (unregistering): Released all slaves [ 76.429060][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.446073][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.462485][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.469649][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.483944][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.491071][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.719114][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.805715][ T5876] veth0_vlan: entered promiscuous mode [ 76.831126][ T5876] veth1_vlan: entered promiscuous mode [ 76.862066][ T5876] veth0_macvtap: entered promiscuous mode [ 76.872043][ T5876] veth1_macvtap: entered promiscuous mode [ 76.931505][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.973734][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.985833][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.994992][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004166][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013673][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.121702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.139260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.202598][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.216544][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.264124][ T5924] syz.0.17[5924]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.281339][ T5924] loop0: detected capacity change from 0 to 512 [ 77.328579][ T5924] [ 77.330931][ T5924] ====================================================== [ 77.337944][ T5924] WARNING: possible circular locking dependency detected [ 77.344967][ T5924] syzkaller #0 Not tainted [ 77.349396][ T5924] ------------------------------------------------------ [ 77.356413][ T5924] syz.0.17/5924 is trying to acquire lock: [ 77.362211][ T5924] ffff8880713dcbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 77.372230][ T5924] [ 77.372230][ T5924] but task is already holding lock: [ 77.379572][ T5924] ffff8880580294c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 77.389379][ T5924] [ 77.389379][ T5924] which lock already depends on the new lock. [ 77.389379][ T5924] [ 77.399761][ T5924] [ 77.399761][ T5924] the existing dependency chain (in reverse order) is: [ 77.408839][ T5924] [ 77.408839][ T5924] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 77.416393][ T5924] down_read+0x46/0x2e0 [ 77.421066][ T5924] ext4_setattr+0x86b/0x1c90 [ 77.426162][ T5924] notify_change+0xb0d/0xe10 [ 77.431254][ T5924] chown_common+0x3f9/0x5a0 [ 77.436261][ T5924] do_fchownat+0x168/0x270 [ 77.441185][ T5924] __x64_sys_chown+0x82/0x90 [ 77.446277][ T5924] do_syscall_64+0x55/0xb0 [ 77.451193][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.457601][ T5924] [ 77.457601][ T5924] -> #1 (jbd2_handle){++++}-{0:0}: [ 77.464881][ T5924] start_this_handle+0x1e9d/0x20c0 [ 77.470493][ T5924] jbd2__journal_start+0x2bb/0x5b0 [ 77.476106][ T5924] __ext4_journal_start_sb+0x203/0x570 [ 77.482078][ T5924] ext4_do_writepages+0xf92/0x38d0 [ 77.487693][ T5924] ext4_writepages+0x1a8/0x2f0 [ 77.492960][ T5924] do_writepages+0x3a2/0x600 [ 77.498056][ T5924] filemap_fdatawrite_wbc+0x122/0x180 [ 77.503933][ T5924] file_write_and_wait_range+0x171/0x240 [ 77.510070][ T5924] ext4_sync_file+0x281/0xc10 [ 77.515250][ T5924] __x64_sys_fsync+0x195/0x1d0 [ 77.520520][ T5924] do_syscall_64+0x55/0xb0 [ 77.525438][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.531833][ T5924] [ 77.531833][ T5924] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 77.540239][ T5924] __lock_acquire+0x2ddb/0x7c80 [ 77.545595][ T5924] lock_acquire+0x197/0x410 [ 77.550605][ T5924] percpu_down_read+0x44/0x1a0 [ 77.555873][ T5924] ext4_writepages+0x170/0x2f0 [ 77.561141][ T5924] do_writepages+0x3a2/0x600 [ 77.566236][ T5924] __writeback_single_inode+0x153/0xee0 [ 77.572287][ T5924] writeback_single_inode+0x211/0x720 [ 77.578175][ T5924] write_inode_now+0x161/0x1e0 [ 77.583444][ T5924] iput+0x5b2/0x920 [ 77.587764][ T5924] ext4_xattr_block_set+0x273a/0x32a0 [ 77.593641][ T5924] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 77.600040][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 77.606175][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 77.612139][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 77.617491][ T5924] evict+0x486/0x870 [ 77.621924][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 77.627628][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 77.633069][ T5924] get_tree_bdev+0x3e4/0x510 [ 77.638169][ T5924] vfs_get_tree+0x8c/0x280 [ 77.643094][ T5924] do_new_mount+0x24b/0xa40 [ 77.648100][ T5924] __se_sys_mount+0x2da/0x3c0 [ 77.653303][ T5924] do_syscall_64+0x55/0xb0 [ 77.658222][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.664620][ T5924] [ 77.664620][ T5924] other info that might help us debug this: [ 77.664620][ T5924] [ 77.674836][ T5924] Chain exists of: [ 77.674836][ T5924] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 77.674836][ T5924] [ 77.688196][ T5924] Possible unsafe locking scenario: [ 77.688196][ T5924] [ 77.695622][ T5924] CPU0 CPU1 [ 77.700966][ T5924] ---- ---- [ 77.706312][ T5924] lock(&ei->xattr_sem); [ 77.710624][ T5924] lock(jbd2_handle); [ 77.717193][ T5924] lock(&ei->xattr_sem); [ 77.724022][ T5924] rlock(&sbi->s_writepages_rwsem); [ 77.729287][ T5924] [ 77.729287][ T5924] *** DEADLOCK *** [ 77.729287][ T5924] [ 77.737413][ T5924] 3 locks held by syz.0.17/5924: [ 77.742328][ T5924] #0: ffff8880713da0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 77.752408][ T5924] #1: ffff8880713da608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 77.761784][ T5924] #2: ffff8880580294c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 77.772028][ T5924] [ 77.772028][ T5924] stack backtrace: [ 77.777908][ T5924] CPU: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 77.785086][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.795128][ T5924] Call Trace: [ 77.798409][ T5924] [ 77.801331][ T5924] dump_stack_lvl+0x16c/0x230 [ 77.805995][ T5924] ? load_image+0x3b0/0x3b0 [ 77.810485][ T5924] ? show_regs_print_info+0x20/0x20 [ 77.815672][ T5924] ? print_circular_bug+0x12b/0x1a0 [ 77.820857][ T5924] check_noncircular+0x2bd/0x3c0 [ 77.825778][ T5924] ? look_up_lock_class+0x75/0x140 [ 77.830877][ T5924] ? print_deadlock_bug+0x5d0/0x5d0 [ 77.836057][ T5924] ? lockdep_lock+0xe0/0x220 [ 77.840629][ T5924] ? __lock_acquire+0x1334/0x7c80 [ 77.845636][ T5924] ? _find_first_zero_bit+0xd3/0x100 [ 77.850914][ T5924] __lock_acquire+0x2ddb/0x7c80 [ 77.855755][ T5924] ? mark_lock+0x94/0x320 [ 77.860070][ T5924] ? verify_lock_unused+0x140/0x140 [ 77.865250][ T5924] ? __lock_acquire+0x1334/0x7c80 [ 77.870277][ T5924] ? verify_lock_unused+0x140/0x140 [ 77.875464][ T5924] lock_acquire+0x197/0x410 [ 77.879952][ T5924] ? ext4_writepages+0x170/0x2f0 [ 77.884876][ T5924] ? __might_sleep+0xe0/0xe0 [ 77.889451][ T5924] ? mark_lock+0x94/0x320 [ 77.894038][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 77.899394][ T5924] ? __lock_acquire+0x1334/0x7c80 [ 77.904410][ T5924] percpu_down_read+0x44/0x1a0 [ 77.909161][ T5924] ? ext4_writepages+0x170/0x2f0 [ 77.914084][ T5924] ext4_writepages+0x170/0x2f0 [ 77.918833][ T5924] ? ext4_read_folio+0x2f0/0x2f0 [ 77.923771][ T5924] ? __rwlock_init+0x150/0x150 [ 77.928520][ T5924] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 77.934398][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 77.939583][ T5924] ? ext4_read_folio+0x2f0/0x2f0 [ 77.944508][ T5924] do_writepages+0x3a2/0x600 [ 77.949090][ T5924] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 77.954798][ T5924] ? writeback_single_inode+0x206/0x720 [ 77.960338][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 77.965344][ T5924] ? do_raw_spin_lock+0x121/0x2c0 [ 77.970360][ T5924] ? get_tree_bdev+0x3e4/0x510 [ 77.975106][ T5924] __writeback_single_inode+0x153/0xee0 [ 77.980647][ T5924] writeback_single_inode+0x211/0x720 [ 77.986006][ T5924] ? write_inode_now+0x1e0/0x1e0 [ 77.990934][ T5924] write_inode_now+0x161/0x1e0 [ 77.995702][ T5924] ? bdi_split_work_to_wbs+0x890/0x890 [ 78.001149][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 78.006333][ T5924] iput+0x5b2/0x920 [ 78.010127][ T5924] ext4_xattr_block_set+0x273a/0x32a0 [ 78.015488][ T5924] ? __might_sleep+0xe0/0xe0 [ 78.020078][ T5924] ? xattr_find_entry+0x12b/0x2f0 [ 78.025089][ T5924] ? ext4_xattr_block_find+0x350/0x350 [ 78.030532][ T5924] ? ext4_xattr_block_find+0x2d4/0x350 [ 78.036022][ T5924] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 78.041935][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 78.047561][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 78.053034][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 78.057868][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 78.062710][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 78.068585][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 78.073769][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 78.079645][ T5924] evict+0x486/0x870 [ 78.083523][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 78.088535][ T5924] ? proc_nr_inodes+0x230/0x230 [ 78.093367][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 78.098549][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 78.103383][ T5924] ? iput+0x70a/0x920 [ 78.107346][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 78.112535][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 78.117460][ T5924] ? ext4_register_li_request+0x183/0x940 [ 78.123164][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 78.128783][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 78.133713][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 78.139936][ T5924] ? __might_sleep+0xe0/0xe0 [ 78.144511][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 78.149866][ T5924] ? snprintf+0xdb/0x120 [ 78.154097][ T5924] ? vscnprintf+0x80/0x80 [ 78.158439][ T5924] ? down_write+0x162/0x1f0 [ 78.162924][ T5924] ? down_read_killable+0x340/0x340 [ 78.168106][ T5924] ? setup_bdev_super+0x56b/0x660 [ 78.173111][ T5924] get_tree_bdev+0x3e4/0x510 [ 78.177689][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 78.182960][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 78.189183][ T5924] ? setup_bdev_super+0x660/0x660 [ 78.194191][ T5924] ? apparmor_capable+0x137/0x1a0 [ 78.199197][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 78.203867][ T5924] ? security_capable+0x89/0xb0 [ 78.208708][ T5924] vfs_get_tree+0x8c/0x280 [ 78.213107][ T5924] do_new_mount+0x24b/0xa40 [ 78.217593][ T5924] __se_sys_mount+0x2da/0x3c0 [ 78.222253][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 78.227025][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 78.232206][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 78.236971][ T5924] do_syscall_64+0x55/0xb0 [ 78.241373][ T5924] ? clear_bhb_loop+0x40/0x90 [ 78.246037][ T5924] ? clear_bhb_loop+0x40/0x90 [ 78.250698][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.256575][ T5924] RIP: 0033:0x7f1b70f90eea [ 78.260988][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.280575][ T5924] RSP: 002b:00007fff6c64eb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.288971][ T5924] RAX: ffffffffffffffda RBX: 00007fff6c64eb90 RCX: 00007f1b70f90eea [ 78.296926][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff6c64eb50 [ 78.304881][ T5924] RBP: 0000200000000180 R08: 00007fff6c64eb90 R09: 0000000000800718 [ 78.312837][ T5924] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 78.320788][ T5924] R13: 00007fff6c64eb50 R14: 000000000000046f R15: 0000200000000200 [ 78.328747][ T5924] [ 78.334654][ T5086] Bluetooth: hci0: command tx timeout [ 78.352427][ T5924] ------------[ cut here ]------------ [ 78.358464][ T5924] EA inode 11 i_nlink=2 [ 78.361813][ T5924] WARNING: CPU: 1 PID: 5924 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.376413][ T5924] Modules linked in: [ 78.380675][ T5924] CPU: 1 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.388064][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.398361][ T5924] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.404968][ T5924] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 78.424843][ T5924] RSP: 0018:ffffc900046571c0 EFLAGS: 00010246 [ 78.431132][ T5924] RAX: 821a7f2be1d57c00 RBX: 0000000000000002 RCX: ffff888029741e00 [ 78.439430][ T5924] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 78.447697][ T5924] RBP: ffffc900046572b8 R08: ffffc90004656dc7 R09: 1ffff920008cadb8 [ 78.455852][ T5924] R10: dffffc0000000000 R11: fffff520008cadb9 R12: dffffc0000000000 [ 78.464085][ T5924] R13: ffff88805802b6a8 R14: ffff88805802b4b0 R15: ffff88805802b500 [ 78.472377][ T5924] FS: 00005555779b2500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 78.481597][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.488460][ T5924] CR2: 00007fd70f600000 CR3: 000000006074e000 CR4: 00000000003506e0 [ 78.496441][ T5924] Call Trace: [ 78.499959][ T5924] [ 78.502877][ T5924] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 78.508790][ T5924] ? ext4_xattr_inode_iget+0x3df/0x600 [ 78.514237][ T5924] ext4_xattr_set_entry+0xcda/0x1e90 [ 78.519779][ T5924] ext4_xattr_ibody_set+0x254/0x6a0 [ 78.524970][ T5924] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 78.531095][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 78.536719][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 78.542417][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 78.547531][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 78.552385][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 78.558542][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 78.563760][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 78.570168][ T5924] evict+0x486/0x870 [ 78.574052][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 78.579614][ T5924] ? proc_nr_inodes+0x230/0x230 [ 78.584774][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 78.590392][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 78.595230][ T5924] ? iput+0x70a/0x920 [ 78.599595][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 78.604793][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 78.609754][ T5924] ? ext4_register_li_request+0x183/0x940 [ 78.615475][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 78.621117][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 78.626056][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 78.632303][ T5924] ? __might_sleep+0xe0/0xe0 [ 78.636926][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 78.642304][ T5924] ? snprintf+0xdb/0x120 [ 78.646546][ T5924] ? vscnprintf+0x80/0x80 [ 78.650889][ T5924] ? down_write+0x162/0x1f0 [ 78.655386][ T5924] ? down_read_killable+0x340/0x340 [ 78.660602][ T5924] ? setup_bdev_super+0x56b/0x660 [ 78.665727][ T5924] get_tree_bdev+0x3e4/0x510 [ 78.670353][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 78.675638][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 78.681898][ T5924] ? setup_bdev_super+0x660/0x660 [ 78.686922][ T5924] ? apparmor_capable+0x137/0x1a0 [ 78.691981][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 78.696664][ T5924] ? security_capable+0x89/0xb0 [ 78.701532][ T5924] vfs_get_tree+0x8c/0x280 [ 78.705945][ T5924] do_new_mount+0x24b/0xa40 [ 78.710463][ T5924] __se_sys_mount+0x2da/0x3c0 [ 78.715141][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 78.719916][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 78.725120][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 78.729915][ T5924] do_syscall_64+0x55/0xb0 [ 78.734327][ T5924] ? clear_bhb_loop+0x40/0x90 [ 78.739040][ T5924] ? clear_bhb_loop+0x40/0x90 [ 78.743716][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.749614][ T5924] RIP: 0033:0x7f1b70f90eea [ 78.754024][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.773815][ T5924] RSP: 002b:00007fff6c64eb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.782291][ T5924] RAX: ffffffffffffffda RBX: 00007fff6c64eb90 RCX: 00007f1b70f90eea [ 78.790287][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff6c64eb50 [ 78.798292][ T5924] RBP: 0000200000000180 R08: 00007fff6c64eb90 R09: 0000000000800718 [ 78.806287][ T5924] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 78.814279][ T5924] R13: 00007fff6c64eb50 R14: 000000000000046f R15: 0000200000000200 [ 78.822283][ T5924] [ 78.825297][ T5924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.832555][ T5924] CPU: 1 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.839734][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.849767][ T5924] Call Trace: [ 78.853028][ T5924] [ 78.855940][ T5924] dump_stack_lvl+0x16c/0x230 [ 78.860602][ T5924] ? show_regs_print_info+0x20/0x20 [ 78.865793][ T5924] ? load_image+0x3b0/0x3b0 [ 78.870301][ T5924] panic+0x2c0/0x710 [ 78.874189][ T5924] ? bpf_jit_dump+0xd0/0xd0 [ 78.878676][ T5924] __warn+0x2e0/0x470 [ 78.882640][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.888603][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.894565][ T5924] report_bug+0x2be/0x4f0 [ 78.898872][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.904831][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.910790][ T5924] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 78.916749][ T5924] handle_bug+0xcf/0x120 [ 78.920980][ T5924] exc_invalid_op+0x1a/0x50 [ 78.925459][ T5924] asm_exc_invalid_op+0x1a/0x20 [ 78.930292][ T5924] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 78.936873][ T5924] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 78.956461][ T5924] RSP: 0018:ffffc900046571c0 EFLAGS: 00010246 [ 78.962520][ T5924] RAX: 821a7f2be1d57c00 RBX: 0000000000000002 RCX: ffff888029741e00 [ 78.970501][ T5924] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 78.978455][ T5924] RBP: ffffc900046572b8 R08: ffffc90004656dc7 R09: 1ffff920008cadb8 [ 78.986410][ T5924] R10: dffffc0000000000 R11: fffff520008cadb9 R12: dffffc0000000000 [ 78.994378][ T5924] R13: ffff88805802b6a8 R14: ffff88805802b4b0 R15: ffff88805802b500 [ 79.002343][ T5924] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 79.007968][ T5924] ? ext4_xattr_inode_iget+0x3df/0x600 [ 79.013423][ T5924] ext4_xattr_set_entry+0xcda/0x1e90 [ 79.018725][ T5924] ext4_xattr_ibody_set+0x254/0x6a0 [ 79.023914][ T5924] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 79.029810][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 79.035432][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 79.040877][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 79.045712][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 79.050550][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.056427][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.061613][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.067488][ T5924] evict+0x486/0x870 [ 79.071369][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 79.076388][ T5924] ? proc_nr_inodes+0x230/0x230 [ 79.081226][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.086409][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 79.091243][ T5924] ? iput+0x70a/0x920 [ 79.095216][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 79.100410][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 79.105333][ T5924] ? ext4_register_li_request+0x183/0x940 [ 79.111039][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 79.116657][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 79.121583][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.127843][ T5924] ? __might_sleep+0xe0/0xe0 [ 79.132418][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 79.137793][ T5924] ? snprintf+0xdb/0x120 [ 79.142023][ T5924] ? vscnprintf+0x80/0x80 [ 79.146346][ T5924] ? down_write+0x162/0x1f0 [ 79.150830][ T5924] ? down_read_killable+0x340/0x340 [ 79.156035][ T5924] ? setup_bdev_super+0x56b/0x660 [ 79.161050][ T5924] get_tree_bdev+0x3e4/0x510 [ 79.165622][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 79.170890][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.177123][ T5924] ? setup_bdev_super+0x660/0x660 [ 79.182132][ T5924] ? apparmor_capable+0x137/0x1a0 [ 79.187167][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 79.191831][ T5924] ? security_capable+0x89/0xb0 [ 79.196925][ T5924] vfs_get_tree+0x8c/0x280 [ 79.201368][ T5924] do_new_mount+0x24b/0xa40 [ 79.205854][ T5924] __se_sys_mount+0x2da/0x3c0 [ 79.210513][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 79.215259][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 79.220443][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 79.225187][ T5924] do_syscall_64+0x55/0xb0 [ 79.229604][ T5924] ? clear_bhb_loop+0x40/0x90 [ 79.234264][ T5924] ? clear_bhb_loop+0x40/0x90 [ 79.238925][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.244801][ T5924] RIP: 0033:0x7f1b70f90eea [ 79.249201][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.268788][ T5924] RSP: 002b:00007fff6c64eb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.277187][ T5924] RAX: ffffffffffffffda RBX: 00007fff6c64eb90 RCX: 00007f1b70f90eea [ 79.285148][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff6c64eb50 [ 79.293103][ T5924] RBP: 0000200000000180 R08: 00007fff6c64eb90 R09: 0000000000800718 [ 79.301058][ T5924] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 79.309013][ T5924] R13: 00007fff6c64eb50 R14: 000000000000046f R15: 0000200000000200 [ 79.316970][ T5924] [ 79.320301][ T5924] Kernel Offset: disabled [ 79.324607][ T5924] Rebooting in 86400 seconds..