Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2025/12/27 04:09:10 parsed 1 programs [ 88.479559][ T5772] cgroup: Unknown subsys name 'net' [ 88.642367][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.362828][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.150249][ T8] cfg80211: failed to load regulatory.db [ 93.335085][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.344916][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.352791][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.361804][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.372845][ T5812] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.382102][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.695795][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.704140][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.735022][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.742927][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.130101][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 96.218199][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.226508][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.233850][ T5856] bridge_slave_0: entered allmulticast mode [ 96.241491][ T5856] bridge_slave_0: entered promiscuous mode [ 96.265883][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.273083][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.280624][ T5856] bridge_slave_1: entered allmulticast mode [ 96.288449][ T5856] bridge_slave_1: entered promiscuous mode [ 96.334911][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.347830][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.394404][ T5856] team0: Port device team_slave_0 added [ 96.402673][ T5856] team0: Port device team_slave_1 added [ 96.445651][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.452648][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.478645][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.491609][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.500417][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.527445][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.584740][ T5856] hsr_slave_0: entered promiscuous mode [ 96.591832][ T5856] hsr_slave_1: entered promiscuous mode [ 96.780046][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.792865][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.804931][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.817015][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.892738][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.900075][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.908242][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.915423][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.976985][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.996364][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.006226][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.033741][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.050033][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.057226][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.072465][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.079678][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.137212][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.329014][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.382647][ T5856] veth0_vlan: entered promiscuous mode [ 97.397355][ T5856] veth1_vlan: entered promiscuous mode [ 97.440594][ T5856] veth0_macvtap: entered promiscuous mode [ 97.451392][ T5856] veth1_macvtap: entered promiscuous mode [ 97.471791][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.495480][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.511570][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520708][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.530553][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540974][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.683092][ T5856] syz-executor (5856) used greatest stack depth: 20176 bytes left [ 97.889611][ T1076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/27 04:09:22 executed programs: 0 [ 98.325569][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.334935][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.342817][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.352780][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.361628][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.369284][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.532888][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 98.616620][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.625716][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.632976][ T5881] bridge_slave_0: entered allmulticast mode [ 98.640324][ T5881] bridge_slave_0: entered promiscuous mode [ 98.650034][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.657685][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.665677][ T5881] bridge_slave_1: entered allmulticast mode [ 98.672715][ T5881] bridge_slave_1: entered promiscuous mode [ 98.705936][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.718836][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.759656][ T5881] team0: Port device team_slave_0 added [ 98.768363][ T5881] team0: Port device team_slave_1 added [ 98.801990][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.809245][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.836067][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.851124][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.858337][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.884526][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.935455][ T5881] hsr_slave_0: entered promiscuous mode [ 98.942628][ T5881] hsr_slave_1: entered promiscuous mode [ 98.949936][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.958769][ T5881] Cannot create hsr debugfs directory [ 99.988609][ T1076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.466300][ T5812] Bluetooth: hci0: command tx timeout [ 102.466970][ T1076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.539196][ T1076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.549944][ T5812] Bluetooth: hci0: command tx timeout [ 103.412652][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.447052][ T1076] hsr_slave_0: left promiscuous mode [ 103.453479][ T1076] hsr_slave_1: left promiscuous mode [ 103.460449][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.470598][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.480376][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.491189][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.499871][ T1076] bridge_slave_1: left allmulticast mode [ 103.508203][ T1076] bridge_slave_1: left promiscuous mode [ 103.515431][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.532158][ T1076] bridge_slave_0: left allmulticast mode [ 103.540216][ T1076] bridge_slave_0: left promiscuous mode [ 103.548866][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.589268][ T1076] veth1_macvtap: left promiscuous mode [ 103.595476][ T1076] veth0_macvtap: left promiscuous mode [ 103.601229][ T1076] veth1_vlan: left promiscuous mode [ 103.609759][ T1076] veth0_vlan: left promiscuous mode [ 104.064834][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 104.097536][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 104.140984][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.178294][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.517180][ T1076] bond0 (unregistering): Released all slaves [ 104.617065][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.627678][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.634269][ T5812] Bluetooth: hci0: command tx timeout [ 104.644172][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.743322][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.779071][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.791778][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.798991][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.815638][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.822773][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.064962][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.120393][ T5881] veth0_vlan: entered promiscuous mode [ 105.132449][ T5881] veth1_vlan: entered promiscuous mode [ 105.168814][ T5881] veth0_macvtap: entered promiscuous mode [ 105.186171][ T5881] veth1_macvtap: entered promiscuous mode [ 105.205106][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.226670][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.238973][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.249559][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.258488][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.267857][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.338632][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.347015][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.384924][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.392813][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.443641][ T5930] syz.0.17[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 105.467393][ T5930] loop0: detected capacity change from 0 to 512 [ 105.503311][ T5930] [ 105.505724][ T5930] ====================================================== [ 105.512768][ T5930] WARNING: possible circular locking dependency detected [ 105.519825][ T5930] syzkaller #0 Not tainted [ 105.524264][ T5930] ------------------------------------------------------ [ 105.531302][ T5930] syz.0.17/5930 is trying to acquire lock: [ 105.537124][ T5930] ffff88802ed48bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 105.547170][ T5930] [ 105.547170][ T5930] but task is already holding lock: [ 105.554549][ T5930] ffff88805f4da8c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 105.564407][ T5930] [ 105.564407][ T5930] which lock already depends on the new lock. [ 105.564407][ T5930] [ 105.574820][ T5930] [ 105.574820][ T5930] the existing dependency chain (in reverse order) is: [ 105.583852][ T5930] [ 105.583852][ T5930] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 105.591435][ T5930] down_read+0x46/0x2e0 [ 105.596136][ T5930] ext4_setattr+0x86b/0x1c90 [ 105.601270][ T5930] notify_change+0xb0d/0xe10 [ 105.606410][ T5930] chown_common+0x3f9/0x5a0 [ 105.611450][ T5930] do_fchownat+0x168/0x270 [ 105.616403][ T5930] __x64_sys_chown+0x82/0x90 [ 105.621537][ T5930] do_syscall_64+0x55/0xb0 [ 105.626495][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.632932][ T5930] [ 105.632932][ T5930] -> #1 (jbd2_handle){++++}-{0:0}: [ 105.640251][ T5930] start_this_handle+0x1e9d/0x20c0 [ 105.645902][ T5930] jbd2__journal_start+0x2bb/0x5b0 [ 105.651588][ T5930] __ext4_journal_start_sb+0x203/0x570 [ 105.657594][ T5930] ext4_do_writepages+0xf92/0x38d0 [ 105.663288][ T5930] ext4_writepages+0x1a8/0x2f0 [ 105.668603][ T5930] do_writepages+0x3a2/0x600 [ 105.673762][ T5930] __writeback_single_inode+0x153/0xee0 [ 105.679864][ T5930] writeback_sb_inodes+0x77c/0xef0 [ 105.685519][ T5930] __writeback_inodes_wb+0x111/0x240 [ 105.691345][ T5930] wb_writeback+0x464/0xba0 [ 105.696421][ T5930] wb_workfn+0xabc/0xe20 [ 105.701204][ T5930] process_scheduled_works+0xa45/0x15b0 [ 105.707304][ T5930] worker_thread+0xa55/0xfc0 [ 105.712445][ T5930] kthread+0x2fa/0x390 [ 105.717050][ T5930] ret_from_fork+0x48/0x80 [ 105.722011][ T5930] ret_from_fork_asm+0x11/0x20 [ 105.727337][ T5930] [ 105.727337][ T5930] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 105.735781][ T5930] __lock_acquire+0x2ddb/0x7c80 [ 105.741194][ T5930] lock_acquire+0x197/0x410 [ 105.746235][ T5930] percpu_down_read+0x44/0x1a0 [ 105.751542][ T5930] ext4_writepages+0x170/0x2f0 [ 105.756849][ T5930] do_writepages+0x3a2/0x600 [ 105.761986][ T5930] __writeback_single_inode+0x153/0xee0 [ 105.768080][ T5930] writeback_single_inode+0x211/0x720 [ 105.773989][ T5930] write_inode_now+0x161/0x1e0 [ 105.779318][ T5930] iput+0x5b2/0x920 [ 105.783693][ T5930] ext4_xattr_block_set+0x273a/0x32a0 [ 105.789636][ T5930] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 105.796087][ T5930] __ext4_expand_extra_isize+0x306/0x400 [ 105.802270][ T5930] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 105.808368][ T5930] ext4_evict_inode+0x7ed/0xea0 [ 105.813766][ T5930] evict+0x486/0x870 [ 105.818234][ T5930] ext4_orphan_cleanup+0xbd4/0x1400 [ 105.823997][ T5930] ext4_fill_super+0x5de4/0x66c0 [ 105.829479][ T5930] get_tree_bdev+0x3e4/0x510 [ 105.834607][ T5930] vfs_get_tree+0x8c/0x280 [ 105.839568][ T5930] do_new_mount+0x24b/0xa40 [ 105.844612][ T5930] __se_sys_mount+0x2da/0x3c0 [ 105.849830][ T5930] do_syscall_64+0x55/0xb0 [ 105.854784][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.861218][ T5930] [ 105.861218][ T5930] other info that might help us debug this: [ 105.861218][ T5930] [ 105.871462][ T5930] Chain exists of: [ 105.871462][ T5930] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 105.871462][ T5930] [ 105.884872][ T5930] Possible unsafe locking scenario: [ 105.884872][ T5930] [ 105.892337][ T5930] CPU0 CPU1 [ 105.897717][ T5930] ---- ---- [ 105.903096][ T5930] lock(&ei->xattr_sem); [ 105.907489][ T5930] lock(jbd2_handle); [ 105.914125][ T5930] lock(&ei->xattr_sem); [ 105.921003][ T5930] rlock(&sbi->s_writepages_rwsem); [ 105.926313][ T5930] [ 105.926313][ T5930] *** DEADLOCK *** [ 105.926313][ T5930] [ 105.934467][ T5930] 3 locks held by syz.0.17/5930: [ 105.939416][ T5930] #0: ffff88802ed4a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 105.949535][ T5930] #1: ffff88802ed4a608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 105.958952][ T5930] #2: ffff88805f4da8c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 105.969245][ T5930] [ 105.969245][ T5930] stack backtrace: [ 105.975157][ T5930] CPU: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.982367][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.992451][ T5930] Call Trace: [ 105.995744][ T5930] [ 105.998693][ T5930] dump_stack_lvl+0x16c/0x230 [ 106.003399][ T5930] ? load_image+0x3b0/0x3b0 [ 106.007923][ T5930] ? show_regs_print_info+0x20/0x20 [ 106.013151][ T5930] ? print_circular_bug+0x12b/0x1a0 [ 106.018385][ T5930] check_noncircular+0x2bd/0x3c0 [ 106.023339][ T5930] ? look_up_lock_class+0x75/0x140 [ 106.028472][ T5930] ? print_deadlock_bug+0x5d0/0x5d0 [ 106.033690][ T5930] ? lockdep_lock+0xe0/0x220 [ 106.038303][ T5930] ? _find_first_zero_bit+0xd3/0x100 [ 106.043612][ T5930] __lock_acquire+0x2ddb/0x7c80 [ 106.048493][ T5930] ? mark_lock+0x94/0x320 [ 106.052853][ T5930] ? verify_lock_unused+0x140/0x140 [ 106.058068][ T5930] ? __lock_acquire+0x1334/0x7c80 [ 106.063123][ T5930] ? verify_lock_unused+0x140/0x140 [ 106.068350][ T5930] lock_acquire+0x197/0x410 [ 106.072868][ T5930] ? ext4_writepages+0x170/0x2f0 [ 106.077829][ T5930] ? __might_sleep+0xe0/0xe0 [ 106.082437][ T5930] ? mark_lock+0x94/0x320 [ 106.086801][ T5930] ? read_lock_is_recursive+0x20/0x20 [ 106.092226][ T5930] ? __lock_acquire+0x1334/0x7c80 [ 106.097294][ T5930] percpu_down_read+0x44/0x1a0 [ 106.102084][ T5930] ? ext4_writepages+0x170/0x2f0 [ 106.107043][ T5930] ext4_writepages+0x170/0x2f0 [ 106.111831][ T5930] ? ext4_read_folio+0x2f0/0x2f0 [ 106.116792][ T5930] ? __rwlock_init+0x150/0x150 [ 106.121578][ T5930] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 106.127494][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.132716][ T5930] ? ext4_read_folio+0x2f0/0x2f0 [ 106.137676][ T5930] do_writepages+0x3a2/0x600 [ 106.142299][ T5930] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 106.148043][ T5930] ? writeback_single_inode+0x206/0x720 [ 106.153622][ T5930] ? __lock_acquire+0x7c80/0x7c80 [ 106.158661][ T5930] ? do_raw_spin_lock+0x121/0x2c0 [ 106.163713][ T5930] ? get_tree_bdev+0x3e4/0x510 [ 106.168500][ T5930] __writeback_single_inode+0x153/0xee0 [ 106.174081][ T5930] writeback_single_inode+0x211/0x720 [ 106.179481][ T5930] ? write_inode_now+0x1e0/0x1e0 [ 106.184449][ T5930] write_inode_now+0x161/0x1e0 [ 106.189231][ T5930] ? bdi_split_work_to_wbs+0x890/0x890 [ 106.194731][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.199949][ T5930] iput+0x5b2/0x920 [ 106.203782][ T5930] ext4_xattr_block_set+0x273a/0x32a0 [ 106.209186][ T5930] ? __might_sleep+0xe0/0xe0 [ 106.213803][ T5930] ? xattr_find_entry+0x12b/0x2f0 [ 106.218854][ T5930] ? ext4_xattr_block_find+0x350/0x350 [ 106.224340][ T5930] ? ext4_xattr_block_find+0x2d4/0x350 [ 106.229826][ T5930] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 106.235760][ T5930] __ext4_expand_extra_isize+0x306/0x400 [ 106.241427][ T5930] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 106.246920][ T5930] ext4_evict_inode+0x7ed/0xea0 [ 106.251793][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 106.256668][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 106.262576][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.267793][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 106.273724][ T5930] evict+0x486/0x870 [ 106.277639][ T5930] ? __lock_acquire+0x7c80/0x7c80 [ 106.282681][ T5930] ? proc_nr_inodes+0x230/0x230 [ 106.287548][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.292779][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 106.297671][ T5930] ? iput+0x70a/0x920 [ 106.301696][ T5930] ext4_orphan_cleanup+0xbd4/0x1400 [ 106.306930][ T5930] ? ext4_orphan_del+0xba0/0xba0 [ 106.311896][ T5930] ? ext4_register_li_request+0x183/0x940 [ 106.317647][ T5930] ? errseq_check_and_advance+0x66/0x120 [ 106.323307][ T5930] ext4_fill_super+0x5de4/0x66c0 [ 106.328339][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 106.334616][ T5930] ? __might_sleep+0xe0/0xe0 [ 106.339237][ T5930] ? read_lock_is_recursive+0x20/0x20 [ 106.344720][ T5930] ? snprintf+0xdb/0x120 [ 106.348999][ T5930] ? vscnprintf+0x80/0x80 [ 106.353392][ T5930] ? down_write+0x162/0x1f0 [ 106.357913][ T5930] ? down_read_killable+0x340/0x340 [ 106.363130][ T5930] ? setup_bdev_super+0x56b/0x660 [ 106.368175][ T5930] get_tree_bdev+0x3e4/0x510 [ 106.372802][ T5930] ? vfs_parse_fs_string+0x160/0x160 [ 106.378111][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 106.384379][ T5930] ? setup_bdev_super+0x660/0x660 [ 106.389443][ T5930] ? apparmor_capable+0x137/0x1a0 [ 106.394584][ T5930] ? bpf_lsm_capable+0x9/0x10 [ 106.399392][ T5930] ? security_capable+0x89/0xb0 [ 106.404267][ T5930] vfs_get_tree+0x8c/0x280 [ 106.408707][ T5930] do_new_mount+0x24b/0xa40 [ 106.413230][ T5930] __se_sys_mount+0x2da/0x3c0 [ 106.417954][ T5930] ? __x64_sys_mount+0xc0/0xc0 [ 106.422738][ T5930] ? lockdep_hardirqs_on+0x98/0x150 [ 106.427959][ T5930] ? __x64_sys_mount+0x20/0xc0 [ 106.432747][ T5930] do_syscall_64+0x55/0xb0 [ 106.437186][ T5930] ? clear_bhb_loop+0x40/0x90 [ 106.441883][ T5930] ? clear_bhb_loop+0x40/0x90 [ 106.446580][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.452507][ T5930] RIP: 0033:0x7f45bc990eea [ 106.456948][ T5930] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.476578][ T5930] RSP: 002b:00007ffe7f7e8518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.485012][ T5930] RAX: ffffffffffffffda RBX: 00007ffe7f7e85a0 RCX: 00007f45bc990eea [ 106.492999][ T5930] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f7e8560 [ 106.500992][ T5930] RBP: 0000200000000180 R08: 00007ffe7f7e85a0 R09: 0000000000800700 [ 106.508987][ T5930] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 106.516980][ T5930] R13: 00007ffe7f7e8560 R14: 000000000000046f R15: 000000000000002c [ 106.525004][ T5930] [ 106.566056][ T5930] ------------[ cut here ]------------ [ 106.571591][ T5930] EA inode 11 i_nlink=2 [ 106.571890][ T5930] WARNING: CPU: 1 PID: 5930 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 106.587026][ T5930] Modules linked in: [ 106.590962][ T5930] CPU: 1 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 106.598612][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.609130][ T5930] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 106.616244][ T5930] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 106.636411][ T5930] RSP: 0018:ffffc900032e71c0 EFLAGS: 00010246 [ 106.643362][ T5930] RAX: bca134e1951a3600 RBX: 0000000000000002 RCX: ffff888025ab9e00 [ 106.651798][ T5930] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 106.660182][ T5930] RBP: ffffc900032e72b8 R08: ffffc900032e6dc7 R09: 1ffff9200065cdb8 [ 106.668565][ T5930] R10: dffffc0000000000 R11: fffff5200065cdb9 R12: dffffc0000000000 [ 106.677038][ T5930] R13: ffff888073fd2ca8 R14: ffff888073fd2ab0 R15: ffff888073fd2b00 [ 106.685657][ T5930] FS: 00005555693d4500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 106.695169][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.701784][ T5930] CR2: 00007f86ac405000 CR3: 000000001bb46000 CR4: 00000000003506e0 [ 106.710160][ T5930] Call Trace: [ 106.713457][ T5930] [ 106.714451][ T5812] Bluetooth: hci0: command tx timeout [ 106.717370][ T5930] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 106.727765][ T5930] ? ext4_xattr_inode_iget+0x3df/0x600 [ 106.733254][ T5930] ext4_xattr_set_entry+0xcda/0x1e90 [ 106.739006][ T5930] ext4_xattr_ibody_set+0x254/0x6a0 [ 106.745021][ T5930] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 106.750948][ T5930] __ext4_expand_extra_isize+0x306/0x400 [ 106.757146][ T5930] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 106.762667][ T5930] ext4_evict_inode+0x7ed/0xea0 [ 106.767938][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 106.772817][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 106.779166][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.784768][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 106.790683][ T5930] evict+0x486/0x870 [ 106.794936][ T5930] ? __lock_acquire+0x7c80/0x7c80 [ 106.800123][ T5930] ? proc_nr_inodes+0x230/0x230 [ 106.805360][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 106.810622][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 106.815547][ T5930] ? iput+0x70a/0x920 [ 106.819556][ T5930] ext4_orphan_cleanup+0xbd4/0x1400 [ 106.824829][ T5930] ? ext4_orphan_del+0xba0/0xba0 [ 106.829806][ T5930] ? ext4_register_li_request+0x183/0x940 [ 106.835633][ T5930] ? errseq_check_and_advance+0x66/0x120 [ 106.841301][ T5930] ext4_fill_super+0x5de4/0x66c0 [ 106.846694][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 106.852964][ T5930] ? __might_sleep+0xe0/0xe0 [ 106.857749][ T5930] ? read_lock_is_recursive+0x20/0x20 [ 106.863240][ T5930] ? snprintf+0xdb/0x120 [ 106.867726][ T5930] ? vscnprintf+0x80/0x80 [ 106.872123][ T5930] ? down_write+0x162/0x1f0 [ 106.876769][ T5930] ? down_read_killable+0x340/0x340 [ 106.882011][ T5930] ? setup_bdev_super+0x56b/0x660 [ 106.887152][ T5930] get_tree_bdev+0x3e4/0x510 [ 106.891779][ T5930] ? vfs_parse_fs_string+0x160/0x160 [ 106.897195][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 106.903491][ T5930] ? setup_bdev_super+0x660/0x660 [ 106.908633][ T5930] ? apparmor_capable+0x137/0x1a0 [ 106.913745][ T5930] ? bpf_lsm_capable+0x9/0x10 [ 106.918482][ T5930] ? security_capable+0x89/0xb0 [ 106.923391][ T5930] vfs_get_tree+0x8c/0x280 [ 106.927901][ T5930] do_new_mount+0x24b/0xa40 [ 106.932454][ T5930] __se_sys_mount+0x2da/0x3c0 [ 106.937232][ T5930] ? __x64_sys_mount+0xc0/0xc0 [ 106.942029][ T5930] ? lockdep_hardirqs_on+0x98/0x150 [ 106.947338][ T5930] ? __x64_sys_mount+0x20/0xc0 [ 106.952450][ T5930] do_syscall_64+0x55/0xb0 [ 106.957040][ T5930] ? clear_bhb_loop+0x40/0x90 [ 106.961762][ T5930] ? clear_bhb_loop+0x40/0x90 [ 106.966533][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.972466][ T5930] RIP: 0033:0x7f45bc990eea [ 106.976955][ T5930] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.996621][ T5930] RSP: 002b:00007ffe7f7e8518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.005147][ T5930] RAX: ffffffffffffffda RBX: 00007ffe7f7e85a0 RCX: 00007f45bc990eea [ 107.013195][ T5930] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f7e8560 [ 107.021272][ T5930] RBP: 0000200000000180 R08: 00007ffe7f7e85a0 R09: 0000000000800700 [ 107.029316][ T5930] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 107.037420][ T5930] R13: 00007ffe7f7e8560 R14: 000000000000046f R15: 000000000000002c [ 107.045483][ T5930] [ 107.048538][ T5930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.055890][ T5930] CPU: 1 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 107.063113][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.073187][ T5930] Call Trace: [ 107.076491][ T5930] [ 107.079443][ T5930] dump_stack_lvl+0x16c/0x230 [ 107.084163][ T5930] ? show_regs_print_info+0x20/0x20 [ 107.089392][ T5930] ? load_image+0x3b0/0x3b0 [ 107.093924][ T5930] panic+0x2c0/0x710 [ 107.097853][ T5930] ? bpf_jit_dump+0xd0/0xd0 [ 107.102394][ T5930] __warn+0x2e0/0x470 [ 107.106422][ T5930] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.112462][ T5930] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.118481][ T5930] report_bug+0x2be/0x4f0 [ 107.122830][ T5930] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.128841][ T5930] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.134849][ T5930] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 107.140903][ T5930] handle_bug+0xcf/0x120 [ 107.145173][ T5930] exc_invalid_op+0x1a/0x50 [ 107.149694][ T5930] asm_exc_invalid_op+0x1a/0x20 [ 107.154570][ T5930] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.161192][ T5930] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 107.180841][ T5930] RSP: 0018:ffffc900032e71c0 EFLAGS: 00010246 [ 107.186987][ T5930] RAX: bca134e1951a3600 RBX: 0000000000000002 RCX: ffff888025ab9e00 [ 107.195004][ T5930] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 107.203012][ T5930] RBP: ffffc900032e72b8 R08: ffffc900032e6dc7 R09: 1ffff9200065cdb8 [ 107.211027][ T5930] R10: dffffc0000000000 R11: fffff5200065cdb9 R12: dffffc0000000000 [ 107.219103][ T5930] R13: ffff888073fd2ca8 R14: ffff888073fd2ab0 R15: ffff888073fd2b00 [ 107.227153][ T5930] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 107.232818][ T5930] ? ext4_xattr_inode_iget+0x3df/0x600 [ 107.238310][ T5930] ext4_xattr_set_entry+0xcda/0x1e90 [ 107.243631][ T5930] ext4_xattr_ibody_set+0x254/0x6a0 [ 107.248856][ T5930] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 107.254786][ T5930] __ext4_expand_extra_isize+0x306/0x400 [ 107.260446][ T5930] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 107.265934][ T5930] ext4_evict_inode+0x7ed/0xea0 [ 107.270809][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 107.275685][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.281598][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 107.286827][ T5930] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.292741][ T5930] evict+0x486/0x870 [ 107.296673][ T5930] ? __lock_acquire+0x7c80/0x7c80 [ 107.301723][ T5930] ? proc_nr_inodes+0x230/0x230 [ 107.306598][ T5930] ? do_raw_spin_unlock+0x121/0x230 [ 107.311832][ T5930] ? _raw_spin_unlock+0x28/0x40 [ 107.316711][ T5930] ? iput+0x70a/0x920 [ 107.320714][ T5930] ext4_orphan_cleanup+0xbd4/0x1400 [ 107.325958][ T5930] ? ext4_orphan_del+0xba0/0xba0 [ 107.330933][ T5930] ? ext4_register_li_request+0x183/0x940 [ 107.336709][ T5930] ? errseq_check_and_advance+0x66/0x120 [ 107.342373][ T5930] ext4_fill_super+0x5de4/0x66c0 [ 107.347336][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 107.353600][ T5930] ? __might_sleep+0xe0/0xe0 [ 107.358209][ T5930] ? read_lock_is_recursive+0x20/0x20 [ 107.363603][ T5930] ? snprintf+0xdb/0x120 [ 107.367882][ T5930] ? vscnprintf+0x80/0x80 [ 107.372281][ T5930] ? down_write+0x162/0x1f0 [ 107.376807][ T5930] ? down_read_killable+0x340/0x340 [ 107.382024][ T5930] ? setup_bdev_super+0x56b/0x660 [ 107.387075][ T5930] get_tree_bdev+0x3e4/0x510 [ 107.391704][ T5930] ? vfs_parse_fs_string+0x160/0x160 [ 107.397012][ T5930] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 107.403274][ T5930] ? setup_bdev_super+0x660/0x660 [ 107.408320][ T5930] ? apparmor_capable+0x137/0x1a0 [ 107.413381][ T5930] ? bpf_lsm_capable+0x9/0x10 [ 107.418113][ T5930] ? security_capable+0x89/0xb0 [ 107.422993][ T5930] vfs_get_tree+0x8c/0x280 [ 107.427431][ T5930] do_new_mount+0x24b/0xa40 [ 107.432003][ T5930] __se_sys_mount+0x2da/0x3c0 [ 107.436703][ T5930] ? __x64_sys_mount+0xc0/0xc0 [ 107.441487][ T5930] ? lockdep_hardirqs_on+0x98/0x150 [ 107.446729][ T5930] ? __x64_sys_mount+0x20/0xc0 [ 107.451509][ T5930] do_syscall_64+0x55/0xb0 [ 107.455952][ T5930] ? clear_bhb_loop+0x40/0x90 [ 107.460655][ T5930] ? clear_bhb_loop+0x40/0x90 [ 107.465362][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.471320][ T5930] RIP: 0033:0x7f45bc990eea [ 107.475753][ T5930] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.495381][ T5930] RSP: 002b:00007ffe7f7e8518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.503839][ T5930] RAX: ffffffffffffffda RBX: 00007ffe7f7e85a0 RCX: 00007f45bc990eea [ 107.511844][ T5930] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f7e8560 [ 107.519861][ T5930] RBP: 0000200000000180 R08: 00007ffe7f7e85a0 R09: 0000000000800700 [ 107.527853][ T5930] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 107.535875][ T5930] R13: 00007ffe7f7e8560 R14: 000000000000046f R15: 000000000000002c [ 107.543961][ T5930] [ 107.547557][ T5930] Kernel Offset: disabled [ 107.551931][ T5930] Rebooting in 86400 seconds..