[ 101.381525][ T1206] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. 2025/11/27 13:26:08 parsed 1 programs [ 109.309098][ T5834] cgroup: Unknown subsys name 'net' [ 109.443773][ T5834] cgroup: Unknown subsys name 'cpuset' [ 109.453324][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 111.191945][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.569395][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.678868][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 115.774625][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.782000][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.789963][ T5871] bridge_slave_0: entered allmulticast mode [ 115.797594][ T5871] bridge_slave_0: entered promiscuous mode [ 115.841567][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.848652][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.855890][ T5871] bridge_slave_1: entered allmulticast mode [ 115.863868][ T5871] bridge_slave_1: entered promiscuous mode [ 115.906623][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.918667][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.960888][ T5871] team0: Port device team_slave_0 added [ 115.969093][ T5871] team0: Port device team_slave_1 added [ 116.003990][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.011332][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.037433][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.051050][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.058005][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.084313][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.140688][ T5871] hsr_slave_0: entered promiscuous mode [ 116.147197][ T5871] hsr_slave_1: entered promiscuous mode [ 116.317117][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.329418][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.340643][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.351373][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.387396][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.394591][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.402459][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.409609][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.474264][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.494889][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.504536][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.520815][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.533479][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.540621][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.554747][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.561887][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.796702][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.843596][ T5871] veth0_vlan: entered promiscuous mode [ 116.856362][ T5871] veth1_vlan: entered promiscuous mode [ 116.887942][ T5871] veth0_macvtap: entered promiscuous mode [ 116.897785][ T5871] veth1_macvtap: entered promiscuous mode [ 116.917314][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.933509][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.952832][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.962555][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.972515][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.981716][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.148591][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.212120][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.290927][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.380870][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.756509][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.764686][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.772618][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.781646][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.789600][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.105321][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.113505][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.146571][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.156562][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.444711][ T13] bridge_slave_1: left allmulticast mode [ 119.455425][ T13] bridge_slave_1: left promiscuous mode [ 119.469744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.484017][ T13] bridge_slave_0: left allmulticast mode [ 119.489819][ T13] bridge_slave_0: left promiscuous mode [ 119.495584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.778156][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.795678][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.806398][ T13] bond0 (unregistering): Released all slaves [ 119.944104][ T13] hsr_slave_0: left promiscuous mode [ 119.952482][ T13] hsr_slave_1: left promiscuous mode [ 119.958726][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.966651][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.977941][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.985620][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.008142][ T13] veth1_macvtap: left promiscuous mode [ 120.014073][ T13] veth0_macvtap: left promiscuous mode [ 120.020798][ T13] veth1_vlan: left promiscuous mode [ 120.026211][ T13] veth0_vlan: left promiscuous mode [ 120.407466][ T13] team0 (unregistering): Port device team_slave_1 removed [ 120.429531][ T13] team0 (unregistering): Port device team_slave_0 removed 2025/11/27 13:26:26 executed programs: 0 [ 121.615082][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.630621][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.638220][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.647017][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.657407][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.298232][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 122.504181][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.512471][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.520306][ T5965] bridge_slave_0: entered allmulticast mode [ 122.528298][ T5965] bridge_slave_0: entered promiscuous mode [ 122.549552][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.557785][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.573630][ T5965] bridge_slave_1: entered allmulticast mode [ 122.586944][ T5965] bridge_slave_1: entered promiscuous mode [ 122.636541][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.653092][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.716719][ T5965] team0: Port device team_slave_0 added [ 122.727918][ T5965] team0: Port device team_slave_1 added [ 122.791210][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.798160][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.824818][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.842391][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.850663][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.882389][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.017007][ T5965] hsr_slave_0: entered promiscuous mode [ 123.029253][ T5965] hsr_slave_1: entered promiscuous mode [ 123.536115][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.551756][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.565126][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.578175][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.693373][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.701022][ T5142] Bluetooth: hci0: command tx timeout [ 123.726961][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.744018][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.751271][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.778539][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.785698][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.095179][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.158491][ T5965] veth0_vlan: entered promiscuous mode [ 124.174664][ T5965] veth1_vlan: entered promiscuous mode [ 124.217402][ T5965] veth0_macvtap: entered promiscuous mode [ 124.230019][ T5965] veth1_macvtap: entered promiscuous mode [ 124.257007][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.271672][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.291632][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.307213][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.324513][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.334911][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.415992][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.437929][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.475513][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.484831][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.583042][ T6038] loop0: detected capacity change from 0 to 512 [ 124.631685][ T6038] [ 124.634026][ T6038] ====================================================== [ 124.641036][ T6038] WARNING: possible circular locking dependency detected [ 124.648044][ T6038] syzkaller #0 Not tainted [ 124.652450][ T6038] ------------------------------------------------------ [ 124.659460][ T6038] syz.0.17/6038 is trying to acquire lock: [ 124.665251][ T6038] ffff888033f54b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 124.675108][ T6038] [ 124.675108][ T6038] but task is already holding lock: [ 124.682456][ T6038] ffff88804d8413e8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 124.692321][ T6038] [ 124.692321][ T6038] which lock already depends on the new lock. [ 124.692321][ T6038] [ 124.702712][ T6038] [ 124.702712][ T6038] the existing dependency chain (in reverse order) is: [ 124.711714][ T6038] [ 124.711714][ T6038] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 124.719284][ T6038] down_read+0x9b/0x480 [ 124.723975][ T6038] ext4_setattr+0x875/0x2ae0 [ 124.729096][ T6038] notify_change+0x6d2/0x12a0 [ 124.734308][ T6038] chown_common+0x54e/0x680 [ 124.739333][ T6038] do_fchownat+0x1a7/0x200 [ 124.744270][ T6038] __x64_sys_chown+0x7b/0xc0 [ 124.749378][ T6038] do_syscall_64+0xcd/0xfa0 [ 124.754412][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.760823][ T6038] [ 124.760823][ T6038] -> #1 (jbd2_handle){++++}-{0:0}: [ 124.768131][ T6038] start_this_handle+0x5ea/0x1410 [ 124.773692][ T6038] jbd2__journal_start+0x394/0x6a0 [ 124.779345][ T6038] __ext4_journal_start_sb+0x195/0x690 [ 124.785332][ T6038] ext4_do_writepages+0xc23/0x3cf0 [ 124.790971][ T6038] ext4_writepages+0x37a/0x7d0 [ 124.796263][ T6038] do_writepages+0x27a/0x600 [ 124.801370][ T6038] __writeback_single_inode+0x160/0xfb0 [ 124.807446][ T6038] writeback_sb_inodes+0x60d/0xfa0 [ 124.813083][ T6038] __writeback_inodes_wb+0xf8/0x2d0 [ 124.818809][ T6038] wb_writeback+0x7f3/0xb70 [ 124.823842][ T6038] wb_workfn+0x8ca/0xbe0 [ 124.828615][ T6038] process_one_work+0x9cf/0x1b70 [ 124.834073][ T6038] worker_thread+0x6c8/0xf10 [ 124.839186][ T6038] kthread+0x3c5/0x780 [ 124.843772][ T6038] ret_from_fork+0x675/0x7d0 [ 124.848876][ T6038] ret_from_fork_asm+0x1a/0x30 [ 124.854173][ T6038] [ 124.854173][ T6038] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 124.862612][ T6038] __lock_acquire+0x126f/0x1c90 [ 124.868002][ T6038] lock_acquire+0x179/0x350 [ 124.873022][ T6038] ext4_writepages+0x224/0x7d0 [ 124.878313][ T6038] do_writepages+0x27a/0x600 [ 124.883423][ T6038] __writeback_single_inode+0x160/0xfb0 [ 124.889506][ T6038] writeback_single_inode+0x2bc/0x550 [ 124.895413][ T6038] write_inode_now+0x170/0x1e0 [ 124.900722][ T6038] iput.part.0+0x487/0xb00 [ 124.905663][ T6038] iput+0x35/0x40 [ 124.909820][ T6038] ext4_xattr_block_set+0x67c/0x3650 [ 124.915622][ T6038] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 124.922038][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 124.928211][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 124.934196][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 124.939665][ T6038] evict+0x3e6/0x920 [ 124.944089][ T6038] iput.part.0+0x6a9/0xb00 [ 124.949029][ T6038] iput+0x35/0x40 [ 124.953187][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 124.958913][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 124.964384][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 124.970032][ T6038] vfs_get_tree+0x8e/0x340 [ 124.974975][ T6038] path_mount+0x7b9/0x23a0 [ 124.979909][ T6038] __x64_sys_mount+0x293/0x310 [ 124.985191][ T6038] do_syscall_64+0xcd/0xfa0 [ 124.990225][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.996637][ T6038] [ 124.996637][ T6038] other info that might help us debug this: [ 124.996637][ T6038] [ 125.006848][ T6038] Chain exists of: [ 125.006848][ T6038] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 125.006848][ T6038] [ 125.020253][ T6038] Possible unsafe locking scenario: [ 125.020253][ T6038] [ 125.027690][ T6038] CPU0 CPU1 [ 125.033044][ T6038] ---- ---- [ 125.038393][ T6038] lock(&ei->xattr_sem); [ 125.042722][ T6038] lock(jbd2_handle); [ 125.049307][ T6038] lock(&ei->xattr_sem); [ 125.056153][ T6038] rlock(&sbi->s_writepages_rwsem); [ 125.061435][ T6038] [ 125.061435][ T6038] *** DEADLOCK *** [ 125.061435][ T6038] [ 125.069561][ T6038] 3 locks held by syz.0.17/6038: [ 125.074485][ T6038] #0: ffff88807b6960e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 125.084647][ T6038] #1: ffff88807b696610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 125.093128][ T6038] #2: ffff88804d8413e8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 125.103437][ T6038] [ 125.103437][ T6038] stack backtrace: [ 125.109313][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 125.109350][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.109369][ T6038] Call Trace: [ 125.109379][ T6038] [ 125.109390][ T6038] dump_stack_lvl+0x116/0x1f0 [ 125.109431][ T6038] print_circular_bug+0x275/0x350 [ 125.109484][ T6038] check_noncircular+0x14c/0x170 [ 125.109540][ T6038] __lock_acquire+0x126f/0x1c90 [ 125.109596][ T6038] ? __lock_acquire+0x622/0x1c90 [ 125.109650][ T6038] lock_acquire+0x179/0x350 [ 125.109677][ T6038] ? do_writepages+0x27a/0x600 [ 125.109714][ T6038] ? __pfx___might_resched+0x10/0x10 [ 125.109760][ T6038] ext4_writepages+0x224/0x7d0 [ 125.109799][ T6038] ? do_writepages+0x27a/0x600 [ 125.109831][ T6038] ? __pfx_ext4_writepages+0x10/0x10 [ 125.109872][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.109910][ T6038] ? __lock_acquire+0xb8a/0x1c90 [ 125.109968][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110009][ T6038] ? __pfx_ext4_writepages+0x10/0x10 [ 125.110052][ T6038] do_writepages+0x27a/0x600 [ 125.110086][ T6038] ? __pfx_do_writepages+0x10/0x10 [ 125.110122][ T6038] __writeback_single_inode+0x160/0xfb0 [ 125.110165][ T6038] ? __pfx___writeback_single_inode+0x10/0x10 [ 125.110207][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110245][ T6038] ? do_raw_spin_unlock+0x172/0x230 [ 125.110282][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110323][ T6038] writeback_single_inode+0x2bc/0x550 [ 125.110369][ T6038] write_inode_now+0x170/0x1e0 [ 125.110411][ T6038] ? __pfx_write_inode_now+0x10/0x10 [ 125.110475][ T6038] ? find_held_lock+0x2b/0x80 [ 125.110515][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110556][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110597][ T6038] iput.part.0+0x487/0xb00 [ 125.110635][ T6038] iput+0x35/0x40 [ 125.110667][ T6038] ext4_xattr_block_set+0x67c/0x3650 [ 125.110712][ T6038] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 125.110747][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110785][ T6038] ? xattr_find_entry+0x289/0x330 [ 125.110839][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.110877][ T6038] ? ext4_xattr_block_find+0x59/0x430 [ 125.110933][ T6038] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 125.110981][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 125.111023][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111061][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111100][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 125.111139][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 125.111195][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 125.111240][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 125.111284][ T6038] ? __pfx___might_resched+0x10/0x10 [ 125.111329][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 125.111369][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111407][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 125.111445][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 125.111490][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 125.111535][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.111579][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111621][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.111664][ T6038] evict+0x3e6/0x920 [ 125.111698][ T6038] ? __pfx_evict+0x10/0x10 [ 125.111734][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111777][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.111821][ T6038] iput.part.0+0x6a9/0xb00 [ 125.111855][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 125.111890][ T6038] iput+0x35/0x40 [ 125.111923][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 125.111971][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.112018][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112056][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 125.112107][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 125.112168][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.112215][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 125.112249][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112287][ T6038] ? find_held_lock+0x2b/0x80 [ 125.112330][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112369][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 125.112399][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112437][ T6038] ? setup_bdev_super+0x369/0x730 [ 125.112482][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 125.112530][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.112578][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.112628][ T6038] ? apparmor_capable+0x114/0x1d0 [ 125.112678][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112720][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112759][ T6038] ? security_capable+0x7e/0x260 [ 125.112805][ T6038] vfs_get_tree+0x8e/0x340 [ 125.112845][ T6038] path_mount+0x7b9/0x23a0 [ 125.112879][ T6038] ? __pfx_path_mount+0x10/0x10 [ 125.112912][ T6038] ? putname+0x154/0x1a0 [ 125.112947][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.112986][ T6038] ? putname+0x154/0x1a0 [ 125.113020][ T6038] ? __x64_sys_mount+0x293/0x310 [ 125.113051][ T6038] __x64_sys_mount+0x293/0x310 [ 125.113083][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 125.113115][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.113160][ T6038] do_syscall_64+0xcd/0xfa0 [ 125.113201][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.113234][ T6038] RIP: 0033:0x7f7386d90eea [ 125.113257][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.113288][ T6038] RSP: 002b:00007ffec55d5318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.113317][ T6038] RAX: ffffffffffffffda RBX: 00007ffec55d53a0 RCX: 00007f7386d90eea [ 125.113339][ T6038] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007ffec55d5360 [ 125.113360][ T6038] RBP: 0000200000000140 R08: 00007ffec55d53a0 R09: 0000000000800700 [ 125.113380][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 125.113401][ T6038] R13: 00007ffec55d5360 R14: 000000000000046f R15: 00002000000004c0 [ 125.113432][ T6038] [ 125.730992][ T6038] ------------[ cut here ]------------ [ 125.736452][ T6038] EA inode 11 i_nlink=2 [ 125.736924][ T6038] WARNING: CPU: 0 PID: 6038 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.751754][ T6038] Modules linked in: [ 125.755679][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 125.764971][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.775059][ T6038] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.781762][ T6038] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 b5 d5 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 f6 a1 2e ff 44 0f b6 2d e7 89 dc 0d [ 125.801472][ T6038] RSP: 0018:ffffc90003f6f178 EFLAGS: 00010282 [ 125.807831][ T6038] RAX: 0000000000000000 RBX: ffff88804d843268 RCX: ffffffff817b1cd8 [ 125.816093][ T6038] RDX: ffff888031771e40 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 125.824334][ T6038] RBP: ffffc90003f6f240 R08: 0000000000000001 R09: 0000000000000000 [ 125.832335][ T6038] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 125.840356][ T6038] R13: 0000000000000000 R14: 1ffff920007ede32 R15: ffff88804d843458 [ 125.848342][ T6038] FS: 000055556bacd500(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 125.857313][ T6038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.863269][ T5142] Bluetooth: hci0: command tx timeout [ 125.863929][ T6038] CR2: 00007f1c9a2b8286 CR3: 0000000031c12000 CR4: 0000000000350ef0 [ 125.877236][ T6038] Call Trace: [ 125.880537][ T6038] [ 125.883470][ T6038] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 125.889870][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.895529][ T6038] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 125.901065][ T6038] ext4_xattr_set_entry+0x158f/0x1f00 [ 125.906459][ T6038] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 125.912473][ T6038] ? xattr_find_entry+0x289/0x330 [ 125.917544][ T6038] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 125.923023][ T6038] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 125.928950][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 125.935246][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.940936][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.946593][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 125.952280][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 125.957954][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 125.963474][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 125.969514][ T6038] ? __pfx___might_resched+0x10/0x10 [ 125.974831][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 125.980605][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.986264][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 125.991949][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 125.997092][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 126.002101][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.007507][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.013486][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.019178][ T6038] evict+0x3e6/0x920 [ 126.023092][ T6038] ? __pfx_evict+0x10/0x10 [ 126.027523][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.033223][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.038888][ T6038] iput.part.0+0x6a9/0xb00 [ 126.043349][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 126.048655][ T6038] iput+0x35/0x40 [ 126.052348][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 126.057580][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.063272][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.068928][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 126.074626][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 126.079653][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.084979][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.090048][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.095704][ T6038] ? find_held_lock+0x2b/0x80 [ 126.100441][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.106099][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 126.111163][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.117074][ T6038] ? setup_bdev_super+0x369/0x730 [ 126.122438][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 126.127584][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.132945][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.138617][ T6038] ? apparmor_capable+0x114/0x1d0 [ 126.143722][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.149630][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.155284][ T6038] ? security_capable+0x7e/0x260 [ 126.160283][ T6038] vfs_get_tree+0x8e/0x340 [ 126.164727][ T6038] path_mount+0x7b9/0x23a0 [ 126.169188][ T6038] ? __pfx_path_mount+0x10/0x10 [ 126.174058][ T6038] ? putname+0x154/0x1a0 [ 126.178320][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.184013][ T6038] ? putname+0x154/0x1a0 [ 126.188277][ T6038] ? __x64_sys_mount+0x293/0x310 [ 126.193262][ T6038] __x64_sys_mount+0x293/0x310 [ 126.198042][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.203668][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.209361][ T6038] do_syscall_64+0xcd/0xfa0 [ 126.213892][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.220082][ T6038] RIP: 0033:0x7f7386d90eea [ 126.224508][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.244415][ T6038] RSP: 002b:00007ffec55d5318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.252883][ T6038] RAX: ffffffffffffffda RBX: 00007ffec55d53a0 RCX: 00007f7386d90eea [ 126.260895][ T6038] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007ffec55d5360 [ 126.268882][ T6038] RBP: 0000200000000140 R08: 00007ffec55d53a0 R09: 0000000000800700 [ 126.276896][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.284901][ T6038] R13: 00007ffec55d5360 R14: 000000000000046f R15: 00002000000004c0 [ 126.292927][ T6038] [ 126.295950][ T6038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.303230][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.312355][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.322417][ T6038] Call Trace: [ 126.325692][ T6038] [ 126.328622][ T6038] dump_stack_lvl+0x3d/0x1f0 [ 126.333234][ T6038] vpanic+0x640/0x6f0 [ 126.337252][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 126.343269][ T6038] panic+0xca/0xd0 [ 126.347020][ T6038] ? __pfx_panic+0x10/0x10 [ 126.351485][ T6038] ? check_panic_on_warn+0x1f/0xb0 [ 126.356638][ T6038] check_panic_on_warn+0xab/0xb0 [ 126.361614][ T6038] __warn+0xf6/0x3c0 [ 126.365520][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 126.371541][ T6038] report_bug+0x3c3/0x580 [ 126.375885][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 126.381901][ T6038] handle_bug+0x184/0x210 [ 126.386262][ T6038] exc_invalid_op+0x17/0x50 [ 126.390797][ T6038] asm_exc_invalid_op+0x1a/0x20 [ 126.395660][ T6038] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 126.402284][ T6038] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 b5 d5 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 f6 a1 2e ff 44 0f b6 2d e7 89 dc 0d [ 126.421899][ T6038] RSP: 0018:ffffc90003f6f178 EFLAGS: 00010282 [ 126.427966][ T6038] RAX: 0000000000000000 RBX: ffff88804d843268 RCX: ffffffff817b1cd8 [ 126.435932][ T6038] RDX: ffff888031771e40 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 126.443902][ T6038] RBP: ffffc90003f6f240 R08: 0000000000000001 R09: 0000000000000000 [ 126.451869][ T6038] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 126.459835][ T6038] R13: 0000000000000000 R14: 1ffff920007ede32 R15: ffff88804d843458 [ 126.467808][ T6038] ? __warn_printk+0x198/0x350 [ 126.472588][ T6038] ? __warn_printk+0x1a5/0x350 [ 126.477371][ T6038] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 126.483374][ T6038] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 126.489730][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.495372][ T6038] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 126.500857][ T6038] ext4_xattr_set_entry+0x158f/0x1f00 [ 126.506235][ T6038] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 126.511953][ T6038] ? xattr_find_entry+0x289/0x330 [ 126.517008][ T6038] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 126.522212][ T6038] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 126.528121][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 126.534372][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.540026][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.545669][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 126.551311][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 126.556971][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 126.562442][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 126.568440][ T6038] ? __pfx___might_resched+0x10/0x10 [ 126.573747][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 126.579484][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.585124][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 126.590761][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 126.595888][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 126.600842][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.606229][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.611874][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.617260][ T6038] evict+0x3e6/0x920 [ 126.621160][ T6038] ? __pfx_evict+0x10/0x10 [ 126.625577][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.631221][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.636866][ T6038] iput.part.0+0x6a9/0xb00 [ 126.641288][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 126.646580][ T6038] iput+0x35/0x40 [ 126.650222][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 126.655437][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.661088][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.666731][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 126.672390][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 126.677365][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.682666][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.687695][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.693333][ T6038] ? find_held_lock+0x2b/0x80 [ 126.698025][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.703667][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 126.708691][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.714329][ T6038] ? setup_bdev_super+0x369/0x730 [ 126.719379][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 126.724509][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.729810][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.735470][ T6038] ? apparmor_capable+0x114/0x1d0 [ 126.740514][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.746155][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.751797][ T6038] ? security_capable+0x7e/0x260 [ 126.756754][ T6038] vfs_get_tree+0x8e/0x340 [ 126.761179][ T6038] path_mount+0x7b9/0x23a0 [ 126.765599][ T6038] ? __pfx_path_mount+0x10/0x10 [ 126.770453][ T6038] ? putname+0x154/0x1a0 [ 126.774705][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.780344][ T6038] ? putname+0x154/0x1a0 [ 126.784590][ T6038] ? __x64_sys_mount+0x293/0x310 [ 126.789528][ T6038] __x64_sys_mount+0x293/0x310 [ 126.794294][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.799583][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.805233][ T6038] do_syscall_64+0xcd/0xfa0 [ 126.809754][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.815650][ T6038] RIP: 0033:0x7f7386d90eea [ 126.820059][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.839674][ T6038] RSP: 002b:00007ffec55d5318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.848088][ T6038] RAX: ffffffffffffffda RBX: 00007ffec55d53a0 RCX: 00007f7386d90eea [ 126.856052][ T6038] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007ffec55d5360 [ 126.864020][ T6038] RBP: 0000200000000140 R08: 00007ffec55d53a0 R09: 0000000000800700 [ 126.871991][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.879956][ T6038] R13: 00007ffec55d5360 R14: 000000000000046f R15: 00002000000004c0 [ 126.887934][ T6038] [ 126.891208][ T6038] Kernel Offset: disabled [ 126.895519][ T6038] Rebooting in 86400 seconds..