[ 101.493070][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. 2025/10/07 15:03:20 parsed 1 programs [ 108.464575][ T5850] cgroup: Unknown subsys name 'net' [ 108.566197][ T5850] cgroup: Unknown subsys name 'cpuset' [ 108.575915][ T5850] cgroup: Unknown subsys name 'rlimit' [ 110.292433][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.965105][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.970718][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.978824][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.044258][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.052709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.550760][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 116.699152][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.707165][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.714587][ T5918] bridge_slave_0: entered allmulticast mode [ 116.722629][ T5918] bridge_slave_0: entered promiscuous mode [ 116.737435][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.744698][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.752015][ T5918] bridge_slave_1: entered allmulticast mode [ 116.759716][ T5918] bridge_slave_1: entered promiscuous mode [ 116.801715][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.814401][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.857686][ T5918] team0: Port device team_slave_0 added [ 116.867207][ T5918] team0: Port device team_slave_1 added [ 116.901966][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.908930][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.935000][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.948078][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.955153][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.981238][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.042745][ T5918] hsr_slave_0: entered promiscuous mode [ 117.049346][ T5918] hsr_slave_1: entered promiscuous mode [ 117.229930][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.242834][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.254293][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.266229][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.365672][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.390803][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.405943][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.413359][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.432858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.440027][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.683114][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.736386][ T5918] veth0_vlan: entered promiscuous mode [ 117.749342][ T5918] veth1_vlan: entered promiscuous mode [ 117.784113][ T5918] veth0_macvtap: entered promiscuous mode [ 117.796575][ T5918] veth1_macvtap: entered promiscuous mode [ 117.818544][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.834805][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.855342][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.865310][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.878936][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.889479][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.026042][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.026750][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.034616][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.052471][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.062900][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.070742][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.103000][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.174874][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.260065][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/07 15:03:35 executed programs: 0 [ 118.805945][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.815874][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.824425][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.832950][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.840749][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.058273][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 119.165157][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.172626][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.179793][ T5950] bridge_slave_0: entered allmulticast mode [ 119.187632][ T5950] bridge_slave_0: entered promiscuous mode [ 119.197128][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.204559][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.211879][ T5950] bridge_slave_1: entered allmulticast mode [ 119.219511][ T5950] bridge_slave_1: entered promiscuous mode [ 119.265648][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.278863][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.323902][ T5950] team0: Port device team_slave_0 added [ 119.334959][ T5950] team0: Port device team_slave_1 added [ 119.375394][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.383154][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.410083][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.425361][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.432850][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.459302][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.516496][ T5950] hsr_slave_0: entered promiscuous mode [ 119.523109][ T5950] hsr_slave_1: entered promiscuous mode [ 119.529401][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 119.535396][ T5950] Cannot create hsr debugfs directory [ 120.932355][ T52] Bluetooth: hci0: command tx timeout [ 121.192239][ T13] bridge_slave_1: left allmulticast mode [ 121.198145][ T13] bridge_slave_1: left promiscuous mode [ 121.205471][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.218111][ T13] bridge_slave_0: left allmulticast mode [ 121.224958][ T13] bridge_slave_0: left promiscuous mode [ 121.230755][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.467666][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.479006][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.489449][ T13] bond0 (unregistering): Released all slaves [ 121.625173][ T13] hsr_slave_0: left promiscuous mode [ 121.634116][ T13] hsr_slave_1: left promiscuous mode [ 121.641316][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.649012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.663956][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.676938][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.704450][ T13] veth1_macvtap: left promiscuous mode [ 121.710235][ T13] veth0_macvtap: left promiscuous mode [ 121.716535][ T13] veth1_vlan: left promiscuous mode [ 121.722442][ T13] veth0_vlan: left promiscuous mode [ 122.213835][ T13] team0 (unregistering): Port device team_slave_1 removed [ 122.239853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 122.637191][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.652951][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.672483][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.688593][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.853865][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.885887][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.914276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.921488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.937010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.944218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.011161][ T52] Bluetooth: hci0: command tx timeout [ 123.364549][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.413275][ T5950] veth0_vlan: entered promiscuous mode [ 123.426647][ T5950] veth1_vlan: entered promiscuous mode [ 123.459873][ T5950] veth0_macvtap: entered promiscuous mode [ 123.469899][ T5950] veth1_macvtap: entered promiscuous mode [ 123.490476][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.506505][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.522530][ T3019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.531882][ T3019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.540634][ T3019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.551930][ T3019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.621461][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.629309][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.663759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.672326][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.718797][ T5995] loop0: detected capacity change from 0 to 512 [ 123.745463][ T5995] [ 123.747837][ T5995] ====================================================== [ 123.754850][ T5995] WARNING: possible circular locking dependency detected [ 123.761885][ T5995] syzkaller #0 Not tainted [ 123.766297][ T5995] ------------------------------------------------------ [ 123.773293][ T5995] syz.0.17/5995 is trying to acquire lock: [ 123.779163][ T5995] ffff888028b80b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 123.789101][ T5995] [ 123.789101][ T5995] but task is already holding lock: [ 123.796487][ T5995] ffff88805e8a80c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 123.806358][ T5995] [ 123.806358][ T5995] which lock already depends on the new lock. [ 123.806358][ T5995] [ 123.816752][ T5995] [ 123.816752][ T5995] the existing dependency chain (in reverse order) is: [ 123.825754][ T5995] [ 123.825754][ T5995] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 123.833409][ T5995] down_read+0x9b/0x480 [ 123.838098][ T5995] ext4_setattr+0x875/0x2ae0 [ 123.843213][ T5995] notify_change+0x6d2/0x12a0 [ 123.848437][ T5995] chown_common+0x54e/0x680 [ 123.853471][ T5995] do_fchownat+0x1a7/0x200 [ 123.858421][ T5995] __x64_sys_chown+0x7b/0xc0 [ 123.863548][ T5995] do_syscall_64+0xcd/0x4e0 [ 123.868592][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.875013][ T5995] [ 123.875013][ T5995] -> #1 (jbd2_handle){++++}-{0:0}: [ 123.882327][ T5995] start_this_handle+0x5ea/0x1410 [ 123.887876][ T5995] jbd2__journal_start+0x394/0x6a0 [ 123.893512][ T5995] __ext4_journal_start_sb+0x195/0x690 [ 123.899506][ T5995] ext4_do_writepages+0xc23/0x3cf0 [ 123.905264][ T5995] ext4_writepages+0x37a/0x7d0 [ 123.910586][ T5995] do_writepages+0x27a/0x600 [ 123.915719][ T5995] __writeback_single_inode+0x160/0xfb0 [ 123.921812][ T5995] writeback_sb_inodes+0x60d/0xfa0 [ 123.927463][ T5995] __writeback_inodes_wb+0xf8/0x2d0 [ 123.933303][ T5995] wb_writeback+0x7f3/0xb70 [ 123.938361][ T5995] wb_workfn+0x8ca/0xbe0 [ 123.943147][ T5995] process_one_work+0x9cf/0x1b70 [ 123.948625][ T5995] worker_thread+0x6c8/0xf10 [ 123.953809][ T5995] kthread+0x3c5/0x780 [ 123.958417][ T5995] ret_from_fork+0x56d/0x730 [ 123.963541][ T5995] ret_from_fork_asm+0x1a/0x30 [ 123.968936][ T5995] [ 123.968936][ T5995] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 123.977380][ T5995] __lock_acquire+0x12a6/0x1ce0 [ 123.982765][ T5995] lock_acquire+0x179/0x350 [ 123.987805][ T5995] ext4_writepages+0x224/0x7d0 [ 123.993132][ T5995] do_writepages+0x27a/0x600 [ 123.998275][ T5995] __writeback_single_inode+0x160/0xfb0 [ 124.004368][ T5995] writeback_single_inode+0x2bc/0x550 [ 124.010382][ T5995] write_inode_now+0x170/0x1e0 [ 124.015687][ T5995] iput.part.0+0x487/0xb00 [ 124.020634][ T5995] iput+0x35/0x40 [ 124.024884][ T5995] ext4_xattr_block_set+0x67c/0x3650 [ 124.030696][ T5995] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 124.037123][ T5995] __ext4_expand_extra_isize+0x346/0x480 [ 124.043277][ T5995] __ext4_mark_inode_dirty+0x544/0x870 [ 124.049271][ T5995] ext4_evict_inode+0x74e/0x18e0 [ 124.054752][ T5995] evict+0x3e6/0x920 [ 124.059174][ T5995] iput.part.0+0x6a9/0xb00 [ 124.064208][ T5995] iput+0x35/0x40 [ 124.068370][ T5995] ext4_orphan_cleanup+0x731/0x11e0 [ 124.074103][ T5995] ext4_fill_super+0x8db7/0xaf70 [ 124.079558][ T5995] get_tree_bdev_flags+0x38c/0x620 [ 124.085187][ T5995] vfs_get_tree+0x8e/0x340 [ 124.090139][ T5995] path_mount+0x7b9/0x23a0 [ 124.095078][ T5995] __x64_sys_mount+0x293/0x310 [ 124.100369][ T5995] do_syscall_64+0xcd/0x4e0 [ 124.105411][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.111832][ T5995] [ 124.111832][ T5995] other info that might help us debug this: [ 124.111832][ T5995] [ 124.122047][ T5995] Chain exists of: [ 124.122047][ T5995] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 124.122047][ T5995] [ 124.135454][ T5995] Possible unsafe locking scenario: [ 124.135454][ T5995] [ 124.142890][ T5995] CPU0 CPU1 [ 124.148244][ T5995] ---- ---- [ 124.153595][ T5995] lock(&ei->xattr_sem); [ 124.157934][ T5995] lock(jbd2_handle); [ 124.164525][ T5995] lock(&ei->xattr_sem); [ 124.171373][ T5995] rlock(&sbi->s_writepages_rwsem); [ 124.176664][ T5995] [ 124.176664][ T5995] *** DEADLOCK *** [ 124.176664][ T5995] [ 124.184805][ T5995] 3 locks held by syz.0.17/5995: [ 124.189738][ T5995] #0: ffff88802de1e0e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 124.199912][ T5995] #1: ffff88802de1e610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 124.208404][ T5995] #2: ffff88805e8a80c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 124.218814][ T5995] [ 124.218814][ T5995] stack backtrace: [ 124.224693][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 124.224731][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.224750][ T5995] Call Trace: [ 124.224761][ T5995] [ 124.224773][ T5995] dump_stack_lvl+0x116/0x1f0 [ 124.224822][ T5995] print_circular_bug+0x275/0x350 [ 124.224861][ T5995] check_noncircular+0x14c/0x170 [ 124.224903][ T5995] __lock_acquire+0x12a6/0x1ce0 [ 124.224948][ T5995] lock_acquire+0x179/0x350 [ 124.224988][ T5995] ? do_writepages+0x27a/0x600 [ 124.225028][ T5995] ? __pfx___might_resched+0x10/0x10 [ 124.225083][ T5995] ext4_writepages+0x224/0x7d0 [ 124.225128][ T5995] ? do_writepages+0x27a/0x600 [ 124.225166][ T5995] ? __pfx_ext4_writepages+0x10/0x10 [ 124.225211][ T5995] ? __lock_acquire+0xb97/0x1ce0 [ 124.225254][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.225296][ T5995] ? __pfx_ext4_writepages+0x10/0x10 [ 124.225343][ T5995] do_writepages+0x27a/0x600 [ 124.225382][ T5995] ? __pfx_do_writepages+0x10/0x10 [ 124.225424][ T5995] __writeback_single_inode+0x160/0xfb0 [ 124.225473][ T5995] ? __pfx___writeback_single_inode+0x10/0x10 [ 124.225519][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.225557][ T5995] ? do_raw_spin_unlock+0x172/0x230 [ 124.225603][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.225643][ T5995] writeback_single_inode+0x2bc/0x550 [ 124.225694][ T5995] write_inode_now+0x170/0x1e0 [ 124.225741][ T5995] ? __pfx_write_inode_now+0x10/0x10 [ 124.225810][ T5995] ? find_held_lock+0x2b/0x80 [ 124.225859][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.225899][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.225940][ T5995] iput.part.0+0x487/0xb00 [ 124.225989][ T5995] iput+0x35/0x40 [ 124.226026][ T5995] ext4_xattr_block_set+0x67c/0x3650 [ 124.226072][ T5995] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 124.226111][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226149][ T5995] ? xattr_find_entry+0x289/0x330 [ 124.226184][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226222][ T5995] ? ext4_xattr_block_find+0x59/0x430 [ 124.226258][ T5995] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 124.226311][ T5995] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 124.226358][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226396][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226434][ T5995] ? dquot_initialize_needed+0x183/0x2a0 [ 124.226478][ T5995] __ext4_expand_extra_isize+0x346/0x480 [ 124.226515][ T5995] __ext4_mark_inode_dirty+0x544/0x870 [ 124.226565][ T5995] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 124.226614][ T5995] ? __pfx___might_resched+0x10/0x10 [ 124.226668][ T5995] ? ext4_journal_check_start+0x22b/0x340 [ 124.226713][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226751][ T5995] ? __ext4_journal_start_sb+0x19e/0x690 [ 124.226793][ T5995] ? ext4_evict_inode+0x5cf/0x18e0 [ 124.226843][ T5995] ext4_evict_inode+0x74e/0x18e0 [ 124.226893][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.226941][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.226983][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.227034][ T5995] evict+0x3e6/0x920 [ 124.227074][ T5995] ? __pfx_evict+0x10/0x10 [ 124.227111][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227154][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227197][ T5995] iput.part.0+0x6a9/0xb00 [ 124.227236][ T5995] ? __pfx_ext4_drop_inode+0x10/0x10 [ 124.227277][ T5995] iput+0x35/0x40 [ 124.227314][ T5995] ext4_orphan_cleanup+0x731/0x11e0 [ 124.227368][ T5995] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 124.227419][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227457][ T5995] ? ext4_register_li_request+0xec/0x9b0 [ 124.227512][ T5995] ext4_fill_super+0x8db7/0xaf70 [ 124.227555][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.227583][ T5995] ? do_raw_spin_lock+0x12c/0x2b0 [ 124.227626][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227664][ T5995] ? find_held_lock+0x2b/0x80 [ 124.227716][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227754][ T5995] ? sb_set_blocksize+0x176/0x1d0 [ 124.227787][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.227825][ T5995] ? setup_bdev_super+0x369/0x730 [ 124.227875][ T5995] get_tree_bdev_flags+0x38c/0x620 [ 124.227904][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.227934][ T5995] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.227965][ T5995] ? apparmor_capable+0x114/0x1d0 [ 124.228023][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.228061][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.228099][ T5995] ? security_capable+0x7e/0x260 [ 124.228147][ T5995] vfs_get_tree+0x8e/0x340 [ 124.228192][ T5995] path_mount+0x7b9/0x23a0 [ 124.228232][ T5995] ? __pfx_path_mount+0x10/0x10 [ 124.228270][ T5995] ? putname+0x154/0x1a0 [ 124.228311][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.228349][ T5995] ? putname+0x154/0x1a0 [ 124.228388][ T5995] ? __x64_sys_mount+0x293/0x310 [ 124.228423][ T5995] __x64_sys_mount+0x293/0x310 [ 124.228460][ T5995] ? __pfx___x64_sys_mount+0x10/0x10 [ 124.228497][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.228542][ T5995] do_syscall_64+0xcd/0x4e0 [ 124.228591][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.228623][ T5995] RIP: 0033:0x7fbd7c79066a [ 124.228647][ T5995] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.228678][ T5995] RSP: 002b:00007ffe129adb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.228707][ T5995] RAX: ffffffffffffffda RBX: 00007ffe129adb90 RCX: 00007fbd7c79066a [ 124.228728][ T5995] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe129adb50 [ 124.228749][ T5995] RBP: 0000200000000180 R08: 00007ffe129adb90 R09: 0000000000800700 [ 124.228769][ T5995] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 124.228789][ T5995] R13: 00007ffe129adb50 R14: 0000000000000473 R15: 0000200000000680 [ 124.228819][ T5995] [ 124.804099][ T5995] ------------[ cut here ]------------ [ 124.809587][ T5995] EA inode 11 i_nlink=2 [ 124.810141][ T5995] WARNING: CPU: 0 PID: 5995 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 124.824896][ T5995] Modules linked in: [ 124.828808][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 124.838055][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.848146][ T5995] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 124.854818][ T5995] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 48 88 8b e8 75 65 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 29 b3 bb 0d [ 124.874563][ T5995] RSP: 0018:ffffc9000390f188 EFLAGS: 00010286 [ 124.880646][ T5995] RAX: 0000000000000000 RBX: ffff88805e8a9f48 RCX: ffffffff817a4b88 [ 124.888668][ T5995] RDX: ffff88802c153c80 RSI: ffffffff817a4b95 RDI: 0000000000000001 [ 124.896714][ T5995] RBP: ffffc9000390f250 R08: 0000000000000001 R09: 0000000000000000 [ 124.904820][ T5995] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 124.913099][ T5995] R13: 0000000000000000 R14: 1ffff92000721e34 R15: ffff88805e8aa138 [ 124.921292][ T5995] FS: 00005555586c5500(0000) GS:ffff888124e62000(0000) knlGS:0000000000000000 [ 124.930480][ T5995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.937117][ T5995] CR2: 00007fbd7c771880 CR3: 0000000078361000 CR4: 0000000000350ef0 [ 124.945137][ T5995] Call Trace: [ 124.948411][ T5995] [ 124.951364][ T5995] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 124.957718][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.963405][ T5995] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 124.968912][ T5995] ext4_xattr_set_entry+0x158f/0x1f00 [ 124.974343][ T5995] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 124.980080][ T5995] ? xattr_find_entry+0x289/0x330 [ 124.985148][ T5995] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 124.990500][ T5995] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 124.996450][ T5995] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 125.002761][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.008399][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.014093][ T5995] ? dquot_initialize_needed+0x183/0x2a0 [ 125.020086][ T5995] __ext4_expand_extra_isize+0x346/0x480 [ 125.025948][ T5995] __ext4_mark_inode_dirty+0x544/0x870 [ 125.031483][ T5995] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 125.037495][ T5995] ? __pfx___might_resched+0x10/0x10 [ 125.042870][ T5995] ? ext4_journal_check_start+0x22b/0x340 [ 125.048636][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.054334][ T5995] ? __ext4_journal_start_sb+0x19e/0x690 [ 125.059998][ T5995] ? ext4_evict_inode+0x5cf/0x18e0 [ 125.065265][ T5995] ext4_evict_inode+0x74e/0x18e0 [ 125.070240][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.075672][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.081358][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.086747][ T5995] evict+0x3e6/0x920 [ 125.090646][ T5995] ? __pfx_evict+0x10/0x10 [ 125.095106][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.100766][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.101064][ T52] Bluetooth: hci0: command tx timeout [ 125.106445][ T5995] iput.part.0+0x6a9/0xb00 [ 125.116234][ T5995] ? __pfx_ext4_drop_inode+0x10/0x10 [ 125.121743][ T5995] iput+0x35/0x40 [ 125.125387][ T5995] ext4_orphan_cleanup+0x731/0x11e0 [ 125.130618][ T5995] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.136502][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.142186][ T5995] ? ext4_register_li_request+0xec/0x9b0 [ 125.147841][ T5995] ext4_fill_super+0x8db7/0xaf70 [ 125.152835][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.158130][ T5995] ? do_raw_spin_lock+0x12c/0x2b0 [ 125.163195][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.168857][ T5995] ? find_held_lock+0x2b/0x80 [ 125.173591][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.179252][ T5995] ? sb_set_blocksize+0x176/0x1d0 [ 125.184431][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.190094][ T5995] ? setup_bdev_super+0x369/0x730 [ 125.195192][ T5995] get_tree_bdev_flags+0x38c/0x620 [ 125.200403][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.205725][ T5995] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.211406][ T5995] ? apparmor_capable+0x114/0x1d0 [ 125.216480][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.222163][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.227941][ T5995] ? security_capable+0x7e/0x260 [ 125.233083][ T5995] vfs_get_tree+0x8e/0x340 [ 125.237533][ T5995] path_mount+0x7b9/0x23a0 [ 125.242029][ T5995] ? __pfx_path_mount+0x10/0x10 [ 125.246947][ T5995] ? putname+0x154/0x1a0 [ 125.251241][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.256987][ T5995] ? putname+0x154/0x1a0 [ 125.261274][ T5995] ? __x64_sys_mount+0x293/0x310 [ 125.266235][ T5995] __x64_sys_mount+0x293/0x310 [ 125.271061][ T5995] ? __pfx___x64_sys_mount+0x10/0x10 [ 125.276367][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.282042][ T5995] do_syscall_64+0xcd/0x4e0 [ 125.286579][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.292499][ T5995] RIP: 0033:0x7fbd7c79066a [ 125.296920][ T5995] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.316593][ T5995] RSP: 002b:00007ffe129adb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.325213][ T5995] RAX: ffffffffffffffda RBX: 00007ffe129adb90 RCX: 00007fbd7c79066a [ 125.333383][ T5995] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe129adb50 [ 125.341415][ T5995] RBP: 0000200000000180 R08: 00007ffe129adb90 R09: 0000000000800700 [ 125.349413][ T5995] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 125.357442][ T5995] R13: 00007ffe129adb50 R14: 0000000000000473 R15: 0000200000000680 [ 125.365454][ T5995] [ 125.368463][ T5995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.375733][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 125.384843][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.394887][ T5995] Call Trace: [ 125.398153][ T5995] [ 125.401068][ T5995] dump_stack_lvl+0x3d/0x1f0 [ 125.405668][ T5995] vpanic+0x640/0x6f0 [ 125.409648][ T5995] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.415633][ T5995] panic+0xca/0xd0 [ 125.419362][ T5995] ? __pfx_panic+0x10/0x10 [ 125.423787][ T5995] ? check_panic_on_warn+0x1f/0xb0 [ 125.428910][ T5995] check_panic_on_warn+0xab/0xb0 [ 125.433848][ T5995] __warn+0xf6/0x3c0 [ 125.437738][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.443373][ T5995] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.449363][ T5995] report_bug+0x3c3/0x580 [ 125.453698][ T5995] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.459674][ T5995] handle_bug+0x184/0x210 [ 125.464014][ T5995] exc_invalid_op+0x17/0x50 [ 125.468524][ T5995] asm_exc_invalid_op+0x1a/0x20 [ 125.473366][ T5995] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 125.479965][ T5995] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 48 88 8b e8 75 65 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 56 de 2e ff 44 0f b6 2d 29 b3 bb 0d [ 125.499576][ T5995] RSP: 0018:ffffc9000390f188 EFLAGS: 00010286 [ 125.505651][ T5995] RAX: 0000000000000000 RBX: ffff88805e8a9f48 RCX: ffffffff817a4b88 [ 125.513616][ T5995] RDX: ffff88802c153c80 RSI: ffffffff817a4b95 RDI: 0000000000000001 [ 125.521585][ T5995] RBP: ffffc9000390f250 R08: 0000000000000001 R09: 0000000000000000 [ 125.529566][ T5995] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 125.537532][ T5995] R13: 0000000000000000 R14: 1ffff92000721e34 R15: ffff88805e8aa138 [ 125.545504][ T5995] ? __warn_printk+0x198/0x350 [ 125.550274][ T5995] ? __warn_printk+0x1a5/0x350 [ 125.555045][ T5995] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 125.561033][ T5995] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 125.567367][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.573008][ T5995] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 125.578477][ T5995] ext4_xattr_set_entry+0x158f/0x1f00 [ 125.583870][ T5995] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 125.589597][ T5995] ? xattr_find_entry+0x289/0x330 [ 125.594631][ T5995] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 125.599847][ T5995] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 125.605816][ T5995] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 125.612077][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.617720][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.623361][ T5995] ? dquot_initialize_needed+0x183/0x2a0 [ 125.629008][ T5995] __ext4_expand_extra_isize+0x346/0x480 [ 125.634648][ T5995] __ext4_mark_inode_dirty+0x544/0x870 [ 125.640125][ T5995] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 125.646123][ T5995] ? __pfx___might_resched+0x10/0x10 [ 125.651434][ T5995] ? ext4_journal_check_start+0x22b/0x340 [ 125.657164][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.662805][ T5995] ? __ext4_journal_start_sb+0x19e/0x690 [ 125.668450][ T5995] ? ext4_evict_inode+0x5cf/0x18e0 [ 125.673577][ T5995] ext4_evict_inode+0x74e/0x18e0 [ 125.678533][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.683924][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.689567][ T5995] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.694957][ T5995] evict+0x3e6/0x920 [ 125.698863][ T5995] ? __pfx_evict+0x10/0x10 [ 125.703287][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.708936][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.714584][ T5995] iput.part.0+0x6a9/0xb00 [ 125.719012][ T5995] ? __pfx_ext4_drop_inode+0x10/0x10 [ 125.724306][ T5995] iput+0x35/0x40 [ 125.727948][ T5995] ext4_orphan_cleanup+0x731/0x11e0 [ 125.733166][ T5995] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 125.738818][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.744461][ T5995] ? ext4_register_li_request+0xec/0x9b0 [ 125.750158][ T5995] ext4_fill_super+0x8db7/0xaf70 [ 125.755107][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.760388][ T5995] ? do_raw_spin_lock+0x12c/0x2b0 [ 125.765427][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.771071][ T5995] ? find_held_lock+0x2b/0x80 [ 125.775775][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.781414][ T5995] ? sb_set_blocksize+0x176/0x1d0 [ 125.786459][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.792120][ T5995] ? setup_bdev_super+0x369/0x730 [ 125.797174][ T5995] get_tree_bdev_flags+0x38c/0x620 [ 125.802302][ T5995] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.807587][ T5995] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.813223][ T5995] ? apparmor_capable+0x114/0x1d0 [ 125.818283][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.823933][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.829579][ T5995] ? security_capable+0x7e/0x260 [ 125.834538][ T5995] vfs_get_tree+0x8e/0x340 [ 125.838974][ T5995] path_mount+0x7b9/0x23a0 [ 125.843405][ T5995] ? __pfx_path_mount+0x10/0x10 [ 125.848280][ T5995] ? putname+0x154/0x1a0 [ 125.852544][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.858187][ T5995] ? putname+0x154/0x1a0 [ 125.862451][ T5995] ? __x64_sys_mount+0x293/0x310 [ 125.867394][ T5995] __x64_sys_mount+0x293/0x310 [ 125.872166][ T5995] ? __pfx___x64_sys_mount+0x10/0x10 [ 125.877460][ T5995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.883108][ T5995] do_syscall_64+0xcd/0x4e0 [ 125.887634][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.893529][ T5995] RIP: 0033:0x7fbd7c79066a [ 125.897942][ T5995] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.917641][ T5995] RSP: 002b:00007ffe129adb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.926064][ T5995] RAX: ffffffffffffffda RBX: 00007ffe129adb90 RCX: 00007fbd7c79066a [ 125.934037][ T5995] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe129adb50 [ 125.942008][ T5995] RBP: 0000200000000180 R08: 00007ffe129adb90 R09: 0000000000800700 [ 125.950049][ T5995] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 125.958019][ T5995] R13: 00007ffe129adb50 R14: 0000000000000473 R15: 0000200000000680 [ 125.966006][ T5995] [ 125.969263][ T5995] Kernel Offset: disabled [ 125.973580][ T5995] Rebooting in 86400 seconds..