Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 91.871413][ T991] cfg80211: failed to load regulatory.db 2025/10/13 23:57:38 parsed 1 programs [ 95.904365][ T5804] cgroup: Unknown subsys name 'net' [ 96.155641][ T5804] cgroup: Unknown subsys name 'cpuset' [ 96.229788][ T5804] cgroup: Unknown subsys name 'rlimit' [ 98.254443][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.320416][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.323598][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.324404][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.326208][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.327016][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.859895][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.859919][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.960981][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.961000][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.877725][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 107.241844][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.243830][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.243996][ T5861] bridge_slave_0: entered allmulticast mode [ 107.246005][ T5861] bridge_slave_0: entered promiscuous mode [ 107.255900][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.256152][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.256740][ T5861] bridge_slave_1: entered allmulticast mode [ 107.260632][ T5861] bridge_slave_1: entered promiscuous mode [ 107.594082][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.615799][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.831700][ T5861] team0: Port device team_slave_0 added [ 107.834494][ T5861] team0: Port device team_slave_1 added [ 108.022699][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.022715][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.022735][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.025998][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.026011][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.026029][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.258409][ T5861] hsr_slave_0: entered promiscuous mode [ 108.260765][ T5861] hsr_slave_1: entered promiscuous mode [ 108.817742][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.857408][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.873144][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.913398][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.052308][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.077746][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.092276][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.092549][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.126232][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.126362][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.383621][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.438253][ T5861] veth0_vlan: entered promiscuous mode [ 109.450667][ T5861] veth1_vlan: entered promiscuous mode [ 109.487768][ T5861] veth0_macvtap: entered promiscuous mode [ 109.495885][ T5861] veth1_macvtap: entered promiscuous mode [ 109.518850][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.538004][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.560872][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.562443][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.562830][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.562873][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.344589][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.583914][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.825691][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.094918][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.741085][ T43] bridge_slave_1: left allmulticast mode [ 112.741186][ T43] bridge_slave_1: left promiscuous mode [ 112.742815][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.821891][ T43] bridge_slave_0: left allmulticast mode [ 112.821921][ T43] bridge_slave_0: left promiscuous mode [ 112.822201][ T43] bridge0: port 1(bridge_slave_0) entered disabled state 2025/10/13 23:58:00 executed programs: 0 [ 113.646852][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.648134][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.662520][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.663913][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.665107][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.812831][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.870110][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.891954][ T43] bond0 (unregistering): Released all slaves [ 115.269277][ T43] hsr_slave_0: left promiscuous mode [ 115.309274][ T43] hsr_slave_1: left promiscuous mode [ 115.310561][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.310648][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.361760][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.361790][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.465587][ T43] veth1_macvtap: left promiscuous mode [ 115.465820][ T43] veth0_macvtap: left promiscuous mode [ 115.466127][ T43] veth1_vlan: left promiscuous mode [ 115.466424][ T43] veth0_vlan: left promiscuous mode [ 115.700987][ T5818] Bluetooth: hci0: command tx timeout [ 117.689910][ T43] team0 (unregistering): Port device team_slave_1 removed [ 117.780220][ T5818] Bluetooth: hci0: command tx timeout [ 117.909991][ T43] team0 (unregistering): Port device team_slave_0 removed [ 119.859329][ T5818] Bluetooth: hci0: command tx timeout [ 120.151058][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 120.501916][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.502192][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.502398][ T5928] bridge_slave_0: entered allmulticast mode [ 120.505319][ T5928] bridge_slave_0: entered promiscuous mode [ 120.512924][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.513080][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.513335][ T5928] bridge_slave_1: entered allmulticast mode [ 120.516623][ T5928] bridge_slave_1: entered promiscuous mode [ 120.743399][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.748240][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.961952][ T5928] team0: Port device team_slave_0 added [ 120.965919][ T5928] team0: Port device team_slave_1 added [ 121.263079][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.263094][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.263115][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.266343][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.266361][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.266389][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.511394][ T5928] hsr_slave_0: entered promiscuous mode [ 121.512914][ T5928] hsr_slave_1: entered promiscuous mode [ 121.939212][ T5818] Bluetooth: hci0: command tx timeout [ 124.043474][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.095413][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.132582][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.166902][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.343539][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.377951][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.401313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.401463][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.438097][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.438247][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.786257][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.857555][ T5928] veth0_vlan: entered promiscuous mode [ 124.871966][ T5928] veth1_vlan: entered promiscuous mode [ 124.924148][ T5928] veth0_macvtap: entered promiscuous mode [ 124.930988][ T5928] veth1_macvtap: entered promiscuous mode [ 124.961903][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.982116][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.001705][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.004400][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.004448][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.004485][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.260735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.260772][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.343509][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.343531][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/13 23:58:11 executed programs: 2 [ 125.523629][ T6053] loop0: detected capacity change from 0 to 512 [ 125.651713][ T6053] [ 125.651727][ T6053] ====================================================== [ 125.651736][ T6053] WARNING: possible circular locking dependency detected [ 125.651753][ T6053] syzkaller #0 Not tainted [ 125.651764][ T6053] ------------------------------------------------------ [ 125.651772][ T6053] syz.0.17/6053 is trying to acquire lock: [ 125.651784][ T6053] ffff88803478cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 125.651855][ T6053] [ 125.651855][ T6053] but task is already holding lock: [ 125.651862][ T6053] ffff88805754df78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 125.651919][ T6053] [ 125.651919][ T6053] which lock already depends on the new lock. [ 125.651919][ T6053] [ 125.651927][ T6053] [ 125.651927][ T6053] the existing dependency chain (in reverse order) is: [ 125.651934][ T6053] [ 125.651934][ T6053] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 125.651962][ T6053] lock_acquire+0x120/0x360 [ 125.651982][ T6053] down_write+0x3a/0x50 [ 125.652001][ T6053] ext4_xattr_set_handle+0x165/0x1590 [ 125.652022][ T6053] ext4_initxattrs+0x9f/0x110 [ 125.652051][ T6053] security_inode_init_security+0x2a0/0x3f0 [ 125.652071][ T6053] __ext4_new_inode+0x3314/0x3cb0 [ 125.652092][ T6053] ext4_create+0x22d/0x460 [ 125.652121][ T6053] path_openat+0x1500/0x3840 [ 125.652149][ T6053] do_filp_open+0x1fa/0x410 [ 125.652177][ T6053] do_sys_openat2+0x121/0x1c0 [ 125.652202][ T6053] __x64_sys_openat+0x138/0x170 [ 125.652236][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.652268][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.652287][ T6053] [ 125.652287][ T6053] -> #1 (jbd2_handle){++++}-{0:0}: [ 125.652315][ T6053] lock_acquire+0x120/0x360 [ 125.652334][ T6053] start_this_handle+0x1fa7/0x21c0 [ 125.652352][ T6053] jbd2__journal_start+0x2c1/0x5b0 [ 125.652370][ T6053] __ext4_journal_start_sb+0x227/0x5c0 [ 125.652392][ T6053] ext4_do_writepages+0xf6f/0x4600 [ 125.652411][ T6053] ext4_writepages+0x205/0x350 [ 125.652436][ T6053] do_writepages+0x32e/0x550 [ 125.652462][ T6053] file_write_and_wait_range+0x244/0x340 [ 125.652493][ T6053] ext4_sync_file+0x2b4/0xb20 [ 125.652514][ T6053] __x64_sys_fsync+0x194/0x1f0 [ 125.652537][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.652567][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.652586][ T6053] [ 125.652586][ T6053] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 125.652614][ T6053] validate_chain+0xb9b/0x2140 [ 125.652638][ T6053] __lock_acquire+0xab9/0xd20 [ 125.652657][ T6053] lock_acquire+0x120/0x360 [ 125.652675][ T6053] percpu_down_read_internal+0x48/0x1d0 [ 125.652699][ T6053] ext4_writepages+0x1cc/0x350 [ 125.652723][ T6053] do_writepages+0x32e/0x550 [ 125.652749][ T6053] __writeback_single_inode+0x145/0x1000 [ 125.652779][ T6053] writeback_single_inode+0x1db/0x640 [ 125.652806][ T6053] write_inode_now+0x160/0x1d0 [ 125.652831][ T6053] iput+0x830/0xc50 [ 125.652850][ T6053] ext4_xattr_block_set+0x1fce/0x2ac0 [ 125.652872][ T6053] ext4[ 125.652872][ T6053] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 125.652895][ T6053] __ext4_expand_extra_isize+0x30d/0x400 [ 125.652919][ T6053] __ext4_mark_inode_dirty+0x46c/0x700 [ 125.652948][ T6053] ext4_evict_inode+0x80d/0xee0 [ 125.652976][ T6053] evict+0x504/0x9c0 [ 125.652999][ T6053] ext4_orphan_cleanup+0xc20/0x1460 [ 125.653026][ T6053] ext4_fill_super+0x593b/0x61f0 [ 125.653051][ T6053] get_tree_bdev_flags+0x40e/0x4d0 [ 125.653068][ T6053] vfs_get_tree+0x92/0x2b0 [ 125.653085][ T6053] do_new_mount+0x302/0xa10 [ 125.653103][ T6053] __se_sys_mount+0x313/0x410 [ 125.653121][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.653151][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.653169][ T6053] [ 125.653169][ T6053] other info that might help us debug this: [ 125.653169][ T6053] [ 125.653176][ T6053] Chain exists of: [ 125.653176][ T6053] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 125.653176][ T6053] [ 125.653211][ T6053] Possible unsafe locking scenario: [ 125.653211][ T6053] [ 125.653217][ T6053] CPU0 CPU1 [ 125.653223][ T6053] ---- ---- [ 125.653236][ T6053] lock(&ei->xattr_sem); [ 125.653251][ T6053] lock(jbd2_handle); [ 125.653267][ T6053] lock(&ei->xattr_sem); [ 125.653281][ T6053] rlock(&sbi->s_writepages_rwsem); [ 125.653296][ T6053] [ 125.653296][ T6053] *** DEADLOCK *** [ 125.653296][ T6053] [ 125.653301][ T6053] 3 locks held by syz.0.17/6053: [ 125.653313][ T6053] #0: ffff8880347880d0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 125.653380][ T6053] #1: ffff888034788770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 125.653438][ T6053] #2: ffff88805754df78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 125.653494][ T6053] [ 125.653494][ T6053] stack backtrace: [ 125.653516][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.653540][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.653562][ T6053] Call Trace: [ 125.653574][ T6053] [ 125.653582][ T6053] dump_stack_lvl+0x189/0x250 [ 125.653610][ T6053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.653635][ T6053] ? __pfx__printk+0x10/0x10 [ 125.653661][ T6053] ? print_lock_name+0xde/0x100 [ 125.653688][ T6053] print_circular_bug+0x2ee/0x310 [ 125.653716][ T6053] check_noncircular+0x134/0x160 [ 125.653747][ T6053] validate_chain+0xb9b/0x2140 [ 125.653777][ T6053] ? look_up_lock_class+0x74/0x170 [ 125.653812][ T6053] ? register_lock_class+0x51/0x320 [ 125.653835][ T6053] __lock_acquire+0xab9/0xd20 [ 125.653860][ T6053] ? ext4_writepages+0x1cc/0x350 [ 125.653888][ T6053] lock_acquire+0x120/0x360 [ 125.653909][ T6053] ? ext4_writepages+0x1cc/0x350 [ 125.653937][ T6053] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 125.653972][ T6053] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.654008][ T6053] percpu_down_read_internal+0x48/0x1d0 [ 125.654036][ T6053] ? ext4_writepages+0x1cc/0x350 [ 125.654066][ T6053] ext4_writepages+0x1cc/0x350 [ 125.654095][ T6053] ? __pfx_ext4_writepages+0x10/0x10 [ 125.654123][ T6053] ? rt_mutex_slowunlock+0x493/0x8a0 [ 125.654154][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.654182][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.654207][ T6053] ? __pfx_ext4_writepages+0x10/0x10 [ 125.654244][ T6053] do_writepages+0x32e/0x550 [ 125.654274][ T6053] ? reacquire_held_locks+0x127/0x1d0 [ 125.654301][ T6053] ? rt_spin_lock+0x1c1/0x3e0 [ 125.654328][ T6053] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 125.654359][ T6053] __writeback_single_inode+0x145/0x1000 [ 125.654397][ T6053] writeback_single_inode+0x1db/0x640 [ 125.654430][ T6053] write_inode_now+0x160/0x1d0 [ 125.654459][ T6053] ? __pfx_write_inode_now+0x10/0x10 [ 125.654506][ T6053] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 125.654534][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.654562][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.654590][ T6053] iput+0x830/0xc50 [ 125.654616][ T6053] ext4_xattr_block_set+0x1fce/0x2ac0 [ 125.654659][ T6053] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 125.654685][ T6053] ? ext4_xattr_block_find+0x2d4/0x350 [ 125.654711][ T6053] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 125.654754][ T6053] __ext4_expand_extra_isize+0x30d/0x400 [ 125.654785][ T6053] __ext4_mark_inode_dirty+0x46c/0x700 [ 125.654824][ T6053] ext4_evict_inode+0x80d/0xee0 [ 125.654862][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.654892][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.654920][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.654948][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.654979][ T6053] evict+0x504/0x9c0 [ 125.655012][ T6053] ? __pfx_evict+0x10/0x10 [ 125.655040][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.655067][ T6053] ? iput+0x946/0xc50 [ 125.655091][ T6053] ext4_orphan_cleanup+0xc20/0x1460 [ 125.655129][ T6053] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.655162][ T6053] ? ext4_register_li_request+0x640/0x720 [ 125.655193][ T6053] ? errseq_check_and_advance+0x66/0x120 [ 125.655220][ T6053] ext4_fill_super+0x593b/0x61f0 [ 125.655265][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.655290][ T6053] ? snprintf+0xda/0x120 [ 125.655314][ T6053] ? rt_spin_lock+0x1c1/0x3e0 [ 125.655342][ T6053] ? __pfx_snprintf+0x10/0x10 [ 125.655366][ T6053] ? set_blocksize+0x219/0x450 [ 125.655388][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.655416][ T6053] ? sb_set_blocksize+0x104/0x180 [ 125.655439][ T6053] ? setup_bdev_super+0x4c1/0x5b0 [ 125.655460][ T6053] get_tree_bdev_flags+0x40e/0x4d0 [ 125.655479][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.655506][ T6053] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.655525][ T6053] ? cap_capable+0x11f/0x460 [ 125.655550][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.655582][ T6053] vfs_get_tree+0x92/0x2b0 [ 125.655602][ T6053] do_new_mount+0x302/0xa10 [ 125.655623][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.655651][ T6053] ? __pfx_do_new_mount+0x10/0x10 [ 125.655673][ T6053] ? ns_capable+0x8a/0xf0 [ 125.655715][ T6053] __se_sys_mount+0x313/0x410 [ 125.655741][ T6053] ? __pfx___se_sys_mount+0x10/0x10 [ 125.655766][ T6053] ? do_syscall_64+0xbe/0xfa0 [ 125.655797][ T6053] ? __x64_sys_mount+0x20/0xc0 [ 125.655820][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.655853][ T6053] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.655885][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.655908][ T6053] ? clear_bhb_loop+0x60/0xb0 [ 125.655933][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.655954][ T6053] RIP: 0033:0x7f1921ed066a [ 125.655981][ T6053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.655999][ T6053] RSP: 002b:00007ffd209d4178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.656021][ T6053] RAX: ffffffffffffffda RBX: 00007ffd209d4200 RCX: 00007f1921ed066a [ 125.656036][ T6053] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd209d41c0 [ 125.656051][ T6053] RBP: 0000200000000180 R08: 00007ffd209d4200 R09: 0000000000800718 [ 125.656066][ T6053] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 125.656080][ T6053] R13: 00007ffd209d41c0 R14: 0000000000000473 R15: 0000200000000680 [ 125.656103][ T6053] [ 125.979391][ T6053] ------------[ cut here ]------------ [ 125.979405][ T6053] EA inode 11 i_nlink=2 [ 125.979780][ T6053] WARNING: CPU: 0 PID: 6053 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.979826][ T6053] Modules linked in: [ 125.979846][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.979870][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.979883][ T6053] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.979912][ T6053] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 99 ff 8a 4c 89 e6 e8 67 aa 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 93 a5 46 08 44 89 f9 [ 125.979940][ T6053] RSP: 0018:ffffc90003c27100 EFLAGS: 00010246 [ 125.979959][ T6053] RAX: 60156bbcfd8d3a00 RBX: 0000000000000001 RCX: ffff88802b7e0000 [ 125.979975][ T6053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.979988][ T6053] RBP: ffffc90003c271f8 R08: 0000000000000000 R09: 0000000000000000 [ 125.980002][ T6053] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 125.980017][ T6053] R13: ffff8880574b9c00 R14: 1ffff1100ae97366 R15: ffff8880574b9b30 [ 125.980034][ T6053] FS: 0000555576a58500(0000) GS:ffff888126bc9000(0000) knlGS:0000000000000000 [ 125.980052][ T6053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.980067][ T6053] CR2: 00007f7783dad000 CR3: 0000000041a10000 CR4: 00000000003526f0 [ 125.980086][ T6053] Call Trace: [ 125.980094][ T6053] [ 125.980103][ T6053] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 125.980137][ T6053] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 125.980167][ T6053] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 125.980197][ T6053] ext4_xattr_set_entry+0xabb/0x1e20 [ 125.980232][ T6053] ext4_xattr_ibody_set+0x254/0x6a0 [ 125.980261][ T6053] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 125.980306][ T6053] __ext4_expand_extra_isize+0x30d/0x400 [ 125.980339][ T6053] __ext4_mark_inode_dirty+0x46c/0x700 [ 125.980380][ T6053] ext4_evict_inode+0x80d/0xee0 [ 125.980419][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.980450][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.980480][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.980506][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.980539][ T6053] evict+0x504/0x9c0 [ 125.980572][ T6053] ? __pfx_evict+0x10/0x10 [ 125.980598][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.980625][ T6053] ? iput+0x946/0xc50 [ 125.980649][ T6053] ext4_orphan_cleanup+0xc20/0x1460 [ 125.980686][ T6053] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.980721][ T6053] ? ext4_register_li_request+0x640/0x720 [ 125.980752][ T6053] ? errseq_check_and_advance+0x66/0x120 [ 125.980778][ T6053] ext4_fill_super+0x593b/0x61f0 [ 125.980818][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.980844][ T6053] ? snprintf+0xda/0x120 [ 125.980868][ T6053] ? rt_spin_lock+0x1c1/0x3e0 [ 125.980897][ T6053] ? __pfx_snprintf+0x10/0x10 [ 125.980929][ T6053] ? set_blocksize+0x219/0x450 [ 125.980952][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.980982][ T6053] ? sb_set_blocksize+0x104/0x180 [ 125.981005][ T6053] ? setup_bdev_super+0x4c1/0x5b0 [ 125.981026][ T6053] get_tree_bdev_flags+0x40e/0x4d0 [ 125.981045][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.981073][ T6053] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.981092][ T6053] ? cap_capable+0x11f/0x460 [ 125.981118][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.981149][ T6053] vfs_get_tree+0x92/0x2b0 [ 125.981170][ T6053] do_new_mount+0x302/0xa10 [ 125.981192][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.981221][ T6053] ? __pfx_do_new_mount+0x10/0x10 [ 125.981254][ T6053] ? ns_capable+0x8a/0xf0 [ 125.981297][ T6053] __se_sys_mount+0x313/0x410 [ 125.981322][ T6053] ? __pfx___se_sys_mount+0x10/0x10 [ 125.981347][ T6053] ? do_syscall_64+0xbe/0xfa0 [ 125.981380][ T6053] ? __x64_sys_mount+0x20/0xc0 [ 125.981403][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.981435][ T6053] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.981469][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.981491][ T6053] ? clear_bhb_loop+0x60/0xb0 [ 125.981515][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.981536][ T6053] RIP: 0033:0x7f1921ed066a [ 125.981555][ T6053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.981572][ T6053] RSP: 002b:00007ffd209d4178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.981595][ T6053] RAX: ffffffffffffffda RBX: 00007ffd209d4200 RCX: 00007f1921ed066a [ 125.981611][ T6053] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd209d41c0 [ 125.981626][ T6053] RBP: 0000200000000180 R08: 00007ffd209d4200 R09: 0000000000800718 [ 125.981641][ T6053] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 125.981655][ T6053] R13: 00007ffd209d41c0 R14: 0000000000000473 R15: 0000200000000680 [ 125.981679][ T6053] [ 125.981690][ T6053] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.981707][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.981730][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.981742][ T6053] Call Trace: [ 125.981750][ T6053] [ 125.981758][ T6053] dump_stack_lvl+0x99/0x250 [ 125.981786][ T6053] ? __asan_memcpy+0x40/0x70 [ 125.981816][ T6053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.981842][ T6053] ? __pfx__printk+0x10/0x10 [ 125.981874][ T6053] vpanic+0x237/0x6d0 [ 125.981895][ T6053] ? __pfx_vpanic+0x10/0x10 [ 125.981928][ T6053] panic+0xb9/0xc0 [ 125.981947][ T6053] ? __pfx_panic+0x10/0x10 [ 125.981974][ T6053] __warn+0x31b/0x4b0 [ 125.981993][ T6053] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.982021][ T6053] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.982049][ T6053] report_bug+0x2be/0x4f0 [ 125.982082][ T6053] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.982109][ T6053] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.982136][ T6053] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 125.982164][ T6053] handle_bug+0x84/0x160 [ 125.982187][ T6053] exc_invalid_op+0x1a/0x50 [ 125.982208][ T6053] asm_exc_invalid_op+0x1a/0x20 [ 125.982228][ T6053] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 125.982257][ T6053] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 99 ff 8a 4c 89 e6 e8 67 aa 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 93 a5 46 08 44 89 f9 [ 125.982274][ T6053] RSP: 0018:ffffc90003c27100 EFLAGS: 00010246 [ 125.982293][ T6053] RAX: 60156bbcfd8d3a00 RBX: 0000000000000001 RCX: ffff88802b7e0000 [ 125.982308][ T6053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.982321][ T6053] RBP: ffffc90003c271f8 R08: 0000000000000000 R09: 0000000000000000 [ 125.982334][ T6053] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 125.982348][ T6053] R13: ffff8880574b9c00 R14: 1ffff1100ae97366 R15: ffff8880574b9b30 [ 125.982374][ T6053] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 125.982407][ T6053] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 125.982436][ T6053] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 125.982466][ T6053] ext4_xattr_set_entry+0xabb/0x1e20 [ 125.982501][ T6053] ext4_xattr_ibody_set+0x254/0x6a0 [ 125.982530][ T6053] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 125.982574][ T6053] __ext4_expand_extra_isize+0x30d/0x400 [ 125.982606][ T6053] __ext4_mark_inode_dirty+0x46c/0x700 [ 125.982647][ T6053] ext4_evict_inode+0x80d/0xee0 [ 125.982686][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.982717][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.982747][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.982774][ T6053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.982806][ T6053] evict+0x504/0x9c0 [ 125.982841][ T6053] ? __pfx_evict+0x10/0x10 [ 125.982869][ T6053] ? rt_spin_unlock+0x161/0x200 [ 125.982896][ T6053] ? iput+0x946/0xc50 [ 125.982930][ T6053] ext4_orphan_cleanup+0xc20/0x1460 [ 125.982969][ T6053] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.983003][ T6053] ? ext4_register_li_request+0x640/0x720 [ 125.983034][ T6053] ? errseq_check_and_advance+0x66/0x120 [ 125.983060][ T6053] ext4_fill_super+0x593b/0x61f0 [ 125.983100][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.983127][ T6053] ? snprintf+0xda/0x120 [ 125.983151][ T6053] ? rt_spin_lock+0x1c1/0x3e0 [ 125.983180][ T6053] ? __pfx_snprintf+0x10/0x10 [ 125.983203][ T6053] ? set_blocksize+0x219/0x450 [ 125.983225][ T6053] ? rt_spin_unlock+0x150/0x200 [ 125.983255][ T6053] ? sb_set_blocksize+0x104/0x180 [ 125.983278][ T6053] ? setup_bdev_super+0x4c1/0x5b0 [ 125.983299][ T6053] get_tree_bdev_flags+0x40e/0x4d0 [ 125.983319][ T6053] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.983346][ T6053] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.983365][ T6053] ? cap_capable+0x11f/0x460 [ 125.983390][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.983419][ T6053] vfs_get_tree+0x92/0x2b0 [ 125.983440][ T6053] do_new_mount+0x302/0xa10 [ 125.983460][ T6053] ? safesetid_security_capable+0xa9/0x1a0 [ 125.983488][ T6053] ? __pfx_do_new_mount+0x10/0x10 [ 125.983509][ T6053] ? ns_capable+0x8a/0xf0 [ 125.983551][ T6053] __se_sys_mount+0x313/0x410 [ 125.983576][ T6053] ? __pfx___se_sys_mount+0x10/0x10 [ 125.983601][ T6053] ? do_syscall_64+0xbe/0xfa0 [ 125.983631][ T6053] ? __x64_sys_mount+0x20/0xc0 [ 125.983654][ T6053] do_syscall_64+0xfa/0xfa0 [ 125.983687][ T6053] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.983721][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.983743][ T6053] ? clear_bhb_loop+0x60/0xb0 [ 125.983767][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.983788][ T6053] RIP: 0033:0x7f1921ed066a [ 125.983806][ T6053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.983823][ T6053] RSP: 002b:00007ffd209d4178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.983845][ T6053] RAX: ffffffffffffffda RBX: 00007ffd209d4200 RCX: 00007f1921ed066a [ 125.983861][ T6053] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd209d41c0 [ 125.983877][ T6053] RBP: 0000200000000180 R08: 00007ffd209d4200 R09: 0000000000800718 [ 125.983891][ T6053] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 125.983905][ T6053] R13: 00007ffd209d41c0 R14: 0000000000000473 R15: 0000200000000680 [ 125.983937][ T6053] [ 125.984222][ T6053] Kernel Offset: disabled