Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts.
2026/01/09 10:01:56 parsed 1 programs
[ 87.484913][ T5774] cgroup: Unknown subsys name 'net'
[ 87.625403][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.364227][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.235964][ T787] cfg80211: failed to load regulatory.db
[ 92.328097][ T5806] chnl_net:caif_netlink_parms(): no params data found
[ 92.421859][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.430105][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.439975][ T5806] bridge_slave_0: entered allmulticast mode
[ 92.447472][ T5806] bridge_slave_0: entered promiscuous mode
[ 92.468428][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.475623][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.483180][ T5806] bridge_slave_1: entered allmulticast mode
[ 92.490436][ T5806] bridge_slave_1: entered promiscuous mode
[ 92.534159][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.547461][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.588012][ T5806] team0: Port device team_slave_0 added
[ 92.604538][ T5806] team0: Port device team_slave_1 added
[ 92.633551][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.640634][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.667224][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.691153][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.698781][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.724764][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.771613][ T5806] hsr_slave_0: entered promiscuous mode
[ 92.778320][ T5806] hsr_slave_1: entered promiscuous mode
[ 92.957979][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.971976][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.995035][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.005660][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.044832][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.052294][ T5806] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.060769][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.068049][ T5806] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.156123][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.176071][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.188486][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.205859][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.221445][ T34] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.228688][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.244337][ T34] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.251647][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.451181][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.497551][ T5806] veth0_vlan: entered promiscuous mode
[ 93.511379][ T5806] veth1_vlan: entered promiscuous mode
[ 93.541814][ T5806] veth0_macvtap: entered promiscuous mode
[ 93.551863][ T5806] veth1_macvtap: entered promiscuous mode
[ 93.575530][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.592931][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.605793][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.615200][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.624866][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.633861][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.778431][ T5806] syz-executor (5806) used greatest stack depth: 20936 bytes left
[ 93.812685][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.152688][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.164629][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.195326][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.203710][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.161892][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.172071][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.180242][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.188563][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.196550][ T5875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 96.203947][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.678604][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/09 10:02:08 executed programs: 0
[ 96.907630][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.915893][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.924704][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.935057][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.943909][ T5875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 96.951604][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.121091][ T5885] chnl_net:caif_netlink_parms(): no params data found
[ 97.195193][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.202790][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.210074][ T5885] bridge_slave_0: entered allmulticast mode
[ 97.217277][ T5885] bridge_slave_0: entered promiscuous mode
[ 97.225657][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.233191][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.241632][ T5885] bridge_slave_1: entered allmulticast mode
[ 97.249292][ T5885] bridge_slave_1: entered promiscuous mode
[ 97.282962][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.295689][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.333860][ T5885] team0: Port device team_slave_0 added
[ 97.342275][ T5885] team0: Port device team_slave_1 added
[ 97.374820][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.382680][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.408827][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.421406][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.428730][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.455044][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.500563][ T5885] hsr_slave_0: entered promiscuous mode
[ 97.508481][ T5885] hsr_slave_1: entered promiscuous mode
[ 97.514791][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 97.523603][ T5885] Cannot create hsr debugfs directory
[ 98.869324][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.954368][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.028119][ T5875] Bluetooth: hci0: command tx timeout
[ 99.864721][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.894264][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.905759][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.919249][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.957954][ T34] hsr_slave_0: left promiscuous mode
[ 99.964443][ T34] hsr_slave_1: left promiscuous mode
[ 99.973071][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.982440][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.998047][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.005516][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.013763][ T34] bridge_slave_1: left allmulticast mode
[ 100.019542][ T34] bridge_slave_1: left promiscuous mode
[ 100.026245][ T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.039843][ T34] bridge_slave_0: left allmulticast mode
[ 100.045645][ T34] bridge_slave_0: left promiscuous mode
[ 100.051865][ T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.082419][ T34] veth1_macvtap: left promiscuous mode
[ 100.091189][ T34] veth0_macvtap: left promiscuous mode
[ 100.097303][ T34] veth1_vlan: left promiscuous mode
[ 100.102899][ T34] veth0_vlan: left promiscuous mode
[ 100.570823][ T34] team0 (unregistering): Port device team_slave_1 removed
[ 100.605322][ T34] team0 (unregistering): Port device team_slave_0 removed
[ 100.641224][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.678931][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.013727][ T34] bond0 (unregistering): Released all slaves
[ 101.106539][ T5875] Bluetooth: hci0: command tx timeout
[ 101.187624][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.208432][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.224444][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.231758][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.262022][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.269244][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.510438][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.571114][ T5885] veth0_vlan: entered promiscuous mode
[ 101.590417][ T5885] veth1_vlan: entered promiscuous mode
[ 101.661721][ T5885] veth0_macvtap: entered promiscuous mode
[ 101.679771][ T5885] veth1_macvtap: entered promiscuous mode
[ 101.713117][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.727836][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.753999][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.762979][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.773750][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.786065][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.918372][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.927625][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.964449][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.972732][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.024952][ T5932] syz.0.17[5932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 102.044344][ T5932] loop0: detected capacity change from 0 to 512
[ 102.080776][ T5932]
[ 102.083183][ T5932] ======================================================
[ 102.090228][ T5932] WARNING: possible circular locking dependency detected
[ 102.097288][ T5932] syzkaller #0 Not tainted
[ 102.101737][ T5932] ------------------------------------------------------
[ 102.108781][ T5932] syz.0.17/5932 is trying to acquire lock:
[ 102.114614][ T5932] ffff88807f7cabd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0
[ 102.124699][ T5932]
[ 102.124699][ T5932] but task is already holding lock:
[ 102.132099][ T5932] ffff8880610cc6c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[ 102.141998][ T5932]
[ 102.141998][ T5932] which lock already depends on the new lock.
[ 102.141998][ T5932]
[ 102.152426][ T5932]
[ 102.152426][ T5932] the existing dependency chain (in reverse order) is:
[ 102.161473][ T5932]
[ 102.161473][ T5932] -> #2 (&ei->xattr_sem){++++}-{3:3}:
[ 102.169058][ T5932] down_read+0x46/0x2e0
[ 102.173758][ T5932] ext4_setattr+0x86b/0x1c90
[ 102.178893][ T5932] notify_change+0xb0d/0xe10
[ 102.184026][ T5932] chown_common+0x3f9/0x5a0
[ 102.189064][ T5932] do_fchownat+0x168/0x270
[ 102.194027][ T5932] __x64_sys_chown+0x82/0x90
[ 102.199158][ T5932] do_syscall_64+0x55/0xb0
[ 102.204113][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.210549][ T5932]
[ 102.210549][ T5932] -> #1 (jbd2_handle){++++}-{0:0}:
[ 102.217867][ T5932] start_this_handle+0x1e9d/0x20c0
[ 102.223518][ T5932] jbd2__journal_start+0x2bb/0x5b0
[ 102.229170][ T5932] __ext4_journal_start_sb+0x203/0x570
[ 102.235177][ T5932] ext4_do_writepages+0xf92/0x38d0
[ 102.240836][ T5932] ext4_writepages+0x1a8/0x2f0
[ 102.246144][ T5932] do_writepages+0x3a2/0x600
[ 102.251283][ T5932] filemap_fdatawrite_wbc+0x122/0x180
[ 102.257199][ T5932] file_write_and_wait_range+0x171/0x240
[ 102.263388][ T5932] ext4_sync_file+0x281/0xc10
[ 102.268635][ T5932] __x64_sys_fsync+0x195/0x1d0
[ 102.273982][ T5932] do_syscall_64+0x55/0xb0
[ 102.278941][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.285377][ T5932]
[ 102.285377][ T5932] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 102.293831][ T5932] __lock_acquire+0x2ddb/0x7c80
[ 102.299222][ T5932] lock_acquire+0x197/0x410
[ 102.304278][ T5932] percpu_down_read+0x44/0x1a0
[ 102.309586][ T5932] ext4_writepages+0x170/0x2f0
[ 102.314893][ T5932] do_writepages+0x3a2/0x600
[ 102.320036][ T5932] __writeback_single_inode+0x153/0xee0
[ 102.326158][ T5932] writeback_single_inode+0x211/0x720
[ 102.332078][ T5932] write_inode_now+0x161/0x1e0
[ 102.337387][ T5932] iput+0x5b2/0x920
[ 102.341735][ T5932] ext4_xattr_block_set+0x273a/0x32a0
[ 102.347648][ T5932] ext4_expand_extra_isize_ea+0x10ea/0x19e0
[ 102.354087][ T5932] __ext4_expand_extra_isize+0x306/0x400
[ 102.360266][ T5932] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 102.366265][ T5932] ext4_evict_inode+0x7ed/0xea0
[ 102.371663][ T5932] evict+0x486/0x870
[ 102.376094][ T5932] ext4_orphan_cleanup+0xbd4/0x1400
[ 102.381868][ T5932] ext4_fill_super+0x5de4/0x66c0
[ 102.387348][ T5932] get_tree_bdev+0x3e4/0x510
[ 102.392471][ T5932] vfs_get_tree+0x8c/0x280
[ 102.397426][ T5932] do_new_mount+0x24b/0xa40
[ 102.402473][ T5932] __se_sys_mount+0x2da/0x3c0
[ 102.407691][ T5932] do_syscall_64+0x55/0xb0
[ 102.412644][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.419079][ T5932]
[ 102.419079][ T5932] other info that might help us debug this:
[ 102.419079][ T5932]
[ 102.429320][ T5932] Chain exists of:
[ 102.429320][ T5932] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 102.429320][ T5932]
[ 102.442727][ T5932] Possible unsafe locking scenario:
[ 102.442727][ T5932]
[ 102.450189][ T5932] CPU0 CPU1
[ 102.455569][ T5932] ---- ----
[ 102.460994][ T5932] lock(&ei->xattr_sem);
[ 102.465351][ T5932] lock(jbd2_handle);
[ 102.471956][ T5932] lock(&ei->xattr_sem);
[ 102.478825][ T5932] rlock(&sbi->s_writepages_rwsem);
[ 102.484131][ T5932]
[ 102.484131][ T5932] *** DEADLOCK ***
[ 102.484131][ T5932]
[ 102.492286][ T5932] 3 locks held by syz.0.17/5932:
[ 102.497238][ T5932] #0: ffff88807f7c80e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510
[ 102.507361][ T5932] #1: ffff88807f7c8608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0
[ 102.516789][ T5932] #2: ffff8880610cc6c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[ 102.527189][ T5932]
[ 102.527189][ T5932] stack backtrace:
[ 102.533114][ T5932] CPU: 1 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0
[ 102.540342][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 102.550445][ T5932] Call Trace:
[ 102.553747][ T5932]
[ 102.556702][ T5932] dump_stack_lvl+0x16c/0x230
[ 102.561453][ T5932] ? load_image+0x3b0/0x3b0
[ 102.566000][ T5932] ? show_regs_print_info+0x20/0x20
[ 102.571250][ T5932] ? print_circular_bug+0x12b/0x1a0
[ 102.576481][ T5932] check_noncircular+0x2bd/0x3c0
[ 102.581447][ T5932] ? look_up_lock_class+0x75/0x140
[ 102.586586][ T5932] ? print_deadlock_bug+0x5d0/0x5d0
[ 102.591822][ T5932] ? lockdep_lock+0xe0/0x220
[ 102.596440][ T5932] ? _find_first_zero_bit+0xd3/0x100
[ 102.601761][ T5932] __lock_acquire+0x2ddb/0x7c80
[ 102.606646][ T5932] ? mark_lock+0x94/0x320
[ 102.611022][ T5932] ? verify_lock_unused+0x140/0x140
[ 102.616332][ T5932] ? __lock_acquire+0x1334/0x7c80
[ 102.621407][ T5932] ? verify_lock_unused+0x140/0x140
[ 102.626718][ T5932] lock_acquire+0x197/0x410
[ 102.631243][ T5932] ? ext4_writepages+0x170/0x2f0
[ 102.636206][ T5932] ? __might_sleep+0xe0/0xe0
[ 102.640819][ T5932] ? mark_lock+0x94/0x320
[ 102.645166][ T5932] ? read_lock_is_recursive+0x20/0x20
[ 102.650560][ T5932] ? __lock_acquire+0x1334/0x7c80
[ 102.655607][ T5932] percpu_down_read+0x44/0x1a0
[ 102.660410][ T5932] ? ext4_writepages+0x170/0x2f0
[ 102.665378][ T5932] ext4_writepages+0x170/0x2f0
[ 102.670167][ T5932] ? ext4_read_folio+0x2f0/0x2f0
[ 102.675138][ T5932] ? __rwlock_init+0x150/0x150
[ 102.679927][ T5932] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 102.685845][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 102.691068][ T5932] ? ext4_read_folio+0x2f0/0x2f0
[ 102.696031][ T5932] do_writepages+0x3a2/0x600
[ 102.700656][ T5932] ? folio_clear_dirty_for_io+0xc30/0xc30
[ 102.706409][ T5932] ? writeback_single_inode+0x206/0x720
[ 102.711996][ T5932] ? __lock_acquire+0x7c80/0x7c80
[ 102.717039][ T5932] ? do_raw_spin_lock+0x121/0x2c0
[ 102.722087][ T5932] ? get_tree_bdev+0x3e4/0x510
[ 102.726874][ T5932] __writeback_single_inode+0x153/0xee0
[ 102.732456][ T5932] writeback_single_inode+0x211/0x720
[ 102.737864][ T5932] ? write_inode_now+0x1e0/0x1e0
[ 102.742830][ T5932] write_inode_now+0x161/0x1e0
[ 102.747617][ T5932] ? bdi_split_work_to_wbs+0x890/0x890
[ 102.753196][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 102.758423][ T5932] iput+0x5b2/0x920
[ 102.762250][ T5932] ext4_xattr_block_set+0x273a/0x32a0
[ 102.767647][ T5932] ? __might_sleep+0xe0/0xe0
[ 102.772269][ T5932] ? xattr_find_entry+0x12b/0x2f0
[ 102.777411][ T5932] ? ext4_xattr_block_find+0x350/0x350
[ 102.782898][ T5932] ? ext4_xattr_block_find+0x2d4/0x350
[ 102.788396][ T5932] ext4_expand_extra_isize_ea+0x10ea/0x19e0
[ 102.794324][ T5932] __ext4_expand_extra_isize+0x306/0x400
[ 102.800008][ T5932] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 102.805673][ T5932] ext4_evict_inode+0x7ed/0xea0
[ 102.810555][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 102.815432][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 102.821357][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 102.826578][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 102.832491][ T5932] evict+0x486/0x870
[ 102.836415][ T5932] ? __lock_acquire+0x7c80/0x7c80
[ 102.841554][ T5932] ? proc_nr_inodes+0x230/0x230
[ 102.846436][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 102.851665][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 102.856532][ T5932] ? iput+0x70a/0x920
[ 102.860534][ T5932] ext4_orphan_cleanup+0xbd4/0x1400
[ 102.865766][ T5932] ? ext4_orphan_del+0xba0/0xba0
[ 102.870732][ T5932] ? ext4_register_li_request+0x183/0x940
[ 102.876474][ T5932] ? errseq_check_and_advance+0x66/0x120
[ 102.882122][ T5932] ext4_fill_super+0x5de4/0x66c0
[ 102.887093][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 102.893370][ T5932] ? __might_sleep+0xe0/0xe0
[ 102.897995][ T5932] ? read_lock_is_recursive+0x20/0x20
[ 102.903393][ T5932] ? snprintf+0xdb/0x120
[ 102.907674][ T5932] ? vscnprintf+0x80/0x80
[ 102.912032][ T5932] ? down_write+0x162/0x1f0
[ 102.916557][ T5932] ? down_read_killable+0x340/0x340
[ 102.921789][ T5932] ? setup_bdev_super+0x56b/0x660
[ 102.926833][ T5932] get_tree_bdev+0x3e4/0x510
[ 102.931440][ T5932] ? vfs_parse_fs_string+0x160/0x160
[ 102.936747][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 102.943012][ T5932] ? setup_bdev_super+0x660/0x660
[ 102.948051][ T5932] ? apparmor_capable+0x137/0x1a0
[ 102.953092][ T5932] ? bpf_lsm_capable+0x9/0x10
[ 102.957795][ T5932] ? security_capable+0x89/0xb0
[ 102.962671][ T5932] vfs_get_tree+0x8c/0x280
[ 102.967107][ T5932] do_new_mount+0x24b/0xa40
[ 102.971634][ T5932] __se_sys_mount+0x2da/0x3c0
[ 102.976335][ T5932] ? __x64_sys_mount+0xc0/0xc0
[ 102.981119][ T5932] ? lockdep_hardirqs_on+0x98/0x150
[ 102.986340][ T5932] ? __x64_sys_mount+0x20/0xc0
[ 102.991133][ T5932] do_syscall_64+0x55/0xb0
[ 102.995566][ T5932] ? clear_bhb_loop+0x40/0x90
[ 103.000267][ T5932] ? clear_bhb_loop+0x40/0x90
[ 103.004966][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.010895][ T5932] RIP: 0033:0x7f6331b90eea
[ 103.015341][ T5932] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 103.034971][ T5932] RSP: 002b:00007ffdaf0088d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 103.043404][ T5932] RAX: ffffffffffffffda RBX: 00007ffdaf008960 RCX: 00007f6331b90eea
[ 103.051400][ T5932] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdaf008920
[ 103.059396][ T5932] RBP: 0000200000000180 R08: 00007ffdaf008960 R09: 0000000000800700
[ 103.067389][ T5932] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 103.075380][ T5932] R13: 00007ffdaf008920 R14: 000000000000046f R15: 000000000000002c
[ 103.083371][ T5932]
[ 103.104483][ T5932] ------------[ cut here ]------------
[ 103.110754][ T5932] EA inode 11 i_nlink=2
[ 103.113896][ T5932] WARNING: CPU: 0 PID: 5932 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.129552][ T5932] Modules linked in:
[ 103.133491][ T5932] CPU: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0
[ 103.141162][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 103.151667][ T5932] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.158355][ T5932] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08
[ 103.178431][ T5932] RSP: 0018:ffffc900045bf1c0 EFLAGS: 00010246
[ 103.184557][ T5932] RAX: 2a4b1e132d843d00 RBX: 0000000000000002 RCX: ffff888027eeda00
[ 103.186594][ T5875] Bluetooth: hci0: command tx timeout
[ 103.193773][ T5932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 103.206262][ T5932] RBP: ffffc900045bf2b8 R08: ffffc900045bedc7 R09: 1ffff920008b7db8
[ 103.214388][ T5932] R10: dffffc0000000000 R11: fffff520008b7db9 R12: dffffc0000000000
[ 103.222938][ T5932] R13: ffff888075bff2a8 R14: ffff888075bff0b0 R15: ffff888075bff100
[ 103.231074][ T5932] FS: 0000555568ac5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 103.240174][ T5932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.246862][ T5932] CR2: 00007f369d21e000 CR3: 000000006dd74000 CR4: 00000000003506f0
[ 103.254893][ T5932] Call Trace:
[ 103.258256][ T5932]
[ 103.261216][ T5932] ? ext4_xattr_list_entries+0x3d0/0x3d0
[ 103.267036][ T5932] ? ext4_xattr_inode_iget+0x3df/0x600
[ 103.272588][ T5932] ext4_xattr_set_entry+0xcda/0x1e90
[ 103.277973][ T5932] ext4_xattr_ibody_set+0x254/0x6a0
[ 103.283217][ T5932] ext4_expand_extra_isize_ea+0x113a/0x19e0
[ 103.289200][ T5932] __ext4_expand_extra_isize+0x306/0x400
[ 103.294875][ T5932] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 103.300451][ T5932] ext4_evict_inode+0x7ed/0xea0
[ 103.305347][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 103.310269][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 103.316201][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 103.321842][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 103.327875][ T5932] evict+0x486/0x870
[ 103.331813][ T5932] ? __lock_acquire+0x7c80/0x7c80
[ 103.336911][ T5932] ? proc_nr_inodes+0x230/0x230
[ 103.341801][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 103.347065][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 103.351961][ T5932] ? iput+0x70a/0x920
[ 103.355951][ T5932] ext4_orphan_cleanup+0xbd4/0x1400
[ 103.361294][ T5932] ? ext4_orphan_del+0xba0/0xba0
[ 103.366279][ T5932] ? ext4_register_li_request+0x183/0x940
[ 103.372122][ T5932] ? errseq_check_and_advance+0x66/0x120
[ 103.377842][ T5932] ext4_fill_super+0x5de4/0x66c0
[ 103.382827][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 103.389148][ T5932] ? __might_sleep+0xe0/0xe0
[ 103.393777][ T5932] ? read_lock_is_recursive+0x20/0x20
[ 103.399214][ T5932] ? snprintf+0xdb/0x120
[ 103.403493][ T5932] ? vscnprintf+0x80/0x80
[ 103.407914][ T5932] ? down_write+0x162/0x1f0
[ 103.412446][ T5932] ? down_read_killable+0x340/0x340
[ 103.417708][ T5932] ? setup_bdev_super+0x56b/0x660
[ 103.423140][ T5932] get_tree_bdev+0x3e4/0x510
[ 103.427864][ T5932] ? vfs_parse_fs_string+0x160/0x160
[ 103.433194][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 103.439555][ T5932] ? setup_bdev_super+0x660/0x660
[ 103.444606][ T5932] ? apparmor_capable+0x137/0x1a0
[ 103.449708][ T5932] ? bpf_lsm_capable+0x9/0x10
[ 103.454424][ T5932] ? security_capable+0x89/0xb0
[ 103.459341][ T5932] vfs_get_tree+0x8c/0x280
[ 103.463785][ T5932] do_new_mount+0x24b/0xa40
[ 103.468364][ T5932] __se_sys_mount+0x2da/0x3c0
[ 103.473176][ T5932] ? __x64_sys_mount+0xc0/0xc0
[ 103.478020][ T5932] ? lockdep_hardirqs_on+0x98/0x150
[ 103.483245][ T5932] ? __x64_sys_mount+0x20/0xc0
[ 103.488167][ T5932] do_syscall_64+0x55/0xb0
[ 103.492624][ T5932] ? clear_bhb_loop+0x40/0x90
[ 103.497351][ T5932] ? clear_bhb_loop+0x40/0x90
[ 103.502034][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.508171][ T5932] RIP: 0033:0x7f6331b90eea
[ 103.512617][ T5932] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 103.532669][ T5932] RSP: 002b:00007ffdaf0088d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 103.541215][ T5932] RAX: ffffffffffffffda RBX: 00007ffdaf008960 RCX: 00007f6331b90eea
[ 103.549343][ T5932] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdaf008920
[ 103.557460][ T5932] RBP: 0000200000000180 R08: 00007ffdaf008960 R09: 0000000000800700
[ 103.565454][ T5932] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 103.573703][ T5932] R13: 00007ffdaf008920 R14: 000000000000046f R15: 000000000000002c
[ 103.581763][ T5932]
[ 103.584900][ T5932] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.592284][ T5932] CPU: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0
[ 103.599500][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 103.609581][ T5932] Call Trace:
[ 103.612894][ T5932]
[ 103.615841][ T5932] dump_stack_lvl+0x16c/0x230
[ 103.620552][ T5932] ? show_regs_print_info+0x20/0x20
[ 103.625821][ T5932] ? load_image+0x3b0/0x3b0
[ 103.630360][ T5932] panic+0x2c0/0x710
[ 103.634296][ T5932] ? bpf_jit_dump+0xd0/0xd0
[ 103.638851][ T5932] __warn+0x2e0/0x470
[ 103.642956][ T5932] ? ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.648974][ T5932] ? ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.654986][ T5932] report_bug+0x2be/0x4f0
[ 103.659351][ T5932] ? ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.665355][ T5932] ? ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.671365][ T5932] ? ext4_xattr_inode_update_ref+0x4fd/0x550
[ 103.677374][ T5932] handle_bug+0xcf/0x120
[ 103.681635][ T5932] exc_invalid_op+0x1a/0x50
[ 103.686157][ T5932] asm_exc_invalid_op+0x1a/0x20
[ 103.691112][ T5932] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550
[ 103.697734][ T5932] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08
[ 103.717361][ T5932] RSP: 0018:ffffc900045bf1c0 EFLAGS: 00010246
[ 103.723443][ T5932] RAX: 2a4b1e132d843d00 RBX: 0000000000000002 RCX: ffff888027eeda00
[ 103.731431][ T5932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 103.739514][ T5932] RBP: ffffc900045bf2b8 R08: ffffc900045bedc7 R09: 1ffff920008b7db8
[ 103.747521][ T5932] R10: dffffc0000000000 R11: fffff520008b7db9 R12: dffffc0000000000
[ 103.755526][ T5932] R13: ffff888075bff2a8 R14: ffff888075bff0b0 R15: ffff888075bff100
[ 103.763618][ T5932] ? ext4_xattr_list_entries+0x3d0/0x3d0
[ 103.769283][ T5932] ? ext4_xattr_inode_iget+0x3df/0x600
[ 103.774770][ T5932] ext4_xattr_set_entry+0xcda/0x1e90
[ 103.780103][ T5932] ext4_xattr_ibody_set+0x254/0x6a0
[ 103.785343][ T5932] ext4_expand_extra_isize_ea+0x113a/0x19e0
[ 103.791365][ T5932] __ext4_expand_extra_isize+0x306/0x400
[ 103.797033][ T5932] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 103.802533][ T5932] ext4_evict_inode+0x7ed/0xea0
[ 103.807414][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 103.812298][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 103.818217][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 103.823459][ T5932] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 103.829376][ T5932] evict+0x486/0x870
[ 103.833383][ T5932] ? __lock_acquire+0x7c80/0x7c80
[ 103.838434][ T5932] ? proc_nr_inodes+0x230/0x230
[ 103.843315][ T5932] ? do_raw_spin_unlock+0x121/0x230
[ 103.848542][ T5932] ? _raw_spin_unlock+0x28/0x40
[ 103.853414][ T5932] ? iput+0x70a/0x920
[ 103.857416][ T5932] ext4_orphan_cleanup+0xbd4/0x1400
[ 103.862686][ T5932] ? ext4_orphan_del+0xba0/0xba0
[ 103.867672][ T5932] ? ext4_register_li_request+0x183/0x940
[ 103.873421][ T5932] ? errseq_check_and_advance+0x66/0x120
[ 103.879079][ T5932] ext4_fill_super+0x5de4/0x66c0
[ 103.884052][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 103.890332][ T5932] ? __might_sleep+0xe0/0xe0
[ 103.894952][ T5932] ? read_lock_is_recursive+0x20/0x20
[ 103.900359][ T5932] ? snprintf+0xdb/0x120
[ 103.904637][ T5932] ? vscnprintf+0x80/0x80
[ 103.909002][ T5932] ? down_write+0x162/0x1f0
[ 103.913527][ T5932] ? down_read_killable+0x340/0x340
[ 103.918752][ T5932] ? setup_bdev_super+0x56b/0x660
[ 103.923798][ T5932] get_tree_bdev+0x3e4/0x510
[ 103.928436][ T5932] ? vfs_parse_fs_string+0x160/0x160
[ 103.933753][ T5932] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 103.940287][ T5932] ? setup_bdev_super+0x660/0x660
[ 103.945326][ T5932] ? apparmor_capable+0x137/0x1a0
[ 103.950374][ T5932] ? bpf_lsm_capable+0x9/0x10
[ 103.955078][ T5932] ? security_capable+0x89/0xb0
[ 103.959957][ T5932] vfs_get_tree+0x8c/0x280
[ 103.964422][ T5932] do_new_mount+0x24b/0xa40
[ 103.968947][ T5932] __se_sys_mount+0x2da/0x3c0
[ 103.973644][ T5932] ? __x64_sys_mount+0xc0/0xc0
[ 103.978428][ T5932] ? lockdep_hardirqs_on+0x98/0x150
[ 103.983648][ T5932] ? __x64_sys_mount+0x20/0xc0
[ 103.988431][ T5932] do_syscall_64+0x55/0xb0
[ 103.992870][ T5932] ? clear_bhb_loop+0x40/0x90
[ 103.997578][ T5932] ? clear_bhb_loop+0x40/0x90
[ 104.002277][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 104.008191][ T5932] RIP: 0033:0x7f6331b90eea
[ 104.012632][ T5932] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.032253][ T5932] RSP: 002b:00007ffdaf0088d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 104.040684][ T5932] RAX: ffffffffffffffda RBX: 00007ffdaf008960 RCX: 00007f6331b90eea
[ 104.048699][ T5932] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdaf008920
[ 104.056710][ T5932] RBP: 0000200000000180 R08: 00007ffdaf008960 R09: 0000000000800700
[ 104.064701][ T5932] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 104.072691][ T5932] R13: 00007ffdaf008920 R14: 000000000000046f R15: 000000000000002c
[ 104.080691][ T5932]
[ 104.084294][ T5932] Kernel Offset: disabled
[ 104.088628][ T5932] Rebooting in 86400 seconds..