Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. 2025/12/18 13:56:09 parsed 1 programs [ 79.217541][ T5774] cgroup: Unknown subsys name 'net' [ 79.356731][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.103792][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.815854][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.825526][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.834333][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.843295][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.851366][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.858712][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.541972][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.635864][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.644475][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.651868][ T5832] bridge_slave_0: entered allmulticast mode [ 85.658904][ T5832] bridge_slave_0: entered promiscuous mode [ 85.668243][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.675525][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.682891][ T5832] bridge_slave_1: entered allmulticast mode [ 85.690732][ T5832] bridge_slave_1: entered promiscuous mode [ 85.725879][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.738066][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.781523][ T5832] team0: Port device team_slave_0 added [ 85.789229][ T5832] team0: Port device team_slave_1 added [ 85.834320][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.841643][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.867716][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.880906][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.887988][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.914309][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.968629][ T5832] hsr_slave_0: entered promiscuous mode [ 85.976258][ T5832] hsr_slave_1: entered promiscuous mode [ 86.147809][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.159168][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.172401][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.183613][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.226818][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.234243][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.242519][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.250217][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.344548][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.368009][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.377471][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.399050][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.412735][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.419974][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.435400][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.442825][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.621884][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.666319][ T5832] veth0_vlan: entered promiscuous mode [ 86.678549][ T5832] veth1_vlan: entered promiscuous mode [ 86.707955][ T5832] veth0_macvtap: entered promiscuous mode [ 86.718086][ T5832] veth1_macvtap: entered promiscuous mode [ 86.737069][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.753369][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.765387][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.775906][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.784944][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.794977][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947862][ T1078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.174717][ T8] cfg80211: failed to load regulatory.db [ 87.793089][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.808233][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.837960][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.846041][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/18 13:56:20 executed programs: 0 [ 88.634914][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.645665][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.653610][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.662568][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.671386][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.679253][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.832794][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 88.895559][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.903236][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.910996][ T5885] bridge_slave_0: entered allmulticast mode [ 88.918321][ T5885] bridge_slave_0: entered promiscuous mode [ 88.928197][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.936374][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.946940][ T5885] bridge_slave_1: entered allmulticast mode [ 88.955086][ T5885] bridge_slave_1: entered promiscuous mode [ 88.986539][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.998835][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.033160][ T5885] team0: Port device team_slave_0 added [ 89.041936][ T5885] team0: Port device team_slave_1 added [ 89.068360][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.075523][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.102187][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.115670][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.123410][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.149923][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.192054][ T5885] hsr_slave_0: entered promiscuous mode [ 89.198704][ T5885] hsr_slave_1: entered promiscuous mode [ 89.205894][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.214175][ T5885] Cannot create hsr debugfs directory [ 89.503770][ T1078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.770325][ T5802] Bluetooth: hci0: command tx timeout [ 91.830977][ T1078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.894179][ T1078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.798702][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.814604][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.841180][ T1078] hsr_slave_0: left promiscuous mode [ 92.847695][ T1078] hsr_slave_1: left promiscuous mode [ 92.857523][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.865217][ T5802] Bluetooth: hci0: command tx timeout [ 92.874204][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.884446][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.895250][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.903909][ T1078] bridge_slave_1: left allmulticast mode [ 92.913261][ T1078] bridge_slave_1: left promiscuous mode [ 92.920126][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.937241][ T1078] bridge_slave_0: left allmulticast mode [ 92.944263][ T1078] bridge_slave_0: left promiscuous mode [ 92.953207][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.986536][ T1078] veth1_macvtap: left promiscuous mode [ 92.995136][ T1078] veth0_macvtap: left promiscuous mode [ 93.003898][ T1078] veth1_vlan: left promiscuous mode [ 93.009420][ T1078] veth0_vlan: left promiscuous mode [ 93.425819][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 93.460274][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 93.495212][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.532801][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.876075][ T1078] bond0 (unregistering): Released all slaves [ 93.961577][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.971654][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.098629][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.137330][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.150588][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.157775][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.175008][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.182411][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.459050][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.531756][ T5885] veth0_vlan: entered promiscuous mode [ 94.547606][ T5885] veth1_vlan: entered promiscuous mode [ 94.575251][ T5885] veth0_macvtap: entered promiscuous mode [ 94.585295][ T5885] veth1_macvtap: entered promiscuous mode [ 94.601337][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.616905][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.630693][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.641716][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.650787][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.660140][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.748024][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.761328][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.787724][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797149][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.868994][ T5934] syz.0.17[5934]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.887456][ T5934] loop0: detected capacity change from 0 to 512 [ 94.929860][ T5802] Bluetooth: hci0: command tx timeout [ 94.946908][ T5934] [ 94.949308][ T5934] ====================================================== [ 94.956352][ T5934] WARNING: possible circular locking dependency detected [ 94.963488][ T5934] syzkaller #0 Not tainted [ 94.967919][ T5934] ------------------------------------------------------ [ 94.974957][ T5934] syz.0.17/5934 is trying to acquire lock: [ 94.980771][ T5934] ffff888023c3ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 94.990868][ T5934] [ 94.990868][ T5934] but task is already holding lock: [ 94.998238][ T5934] ffff888072b51ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 95.008073][ T5934] [ 95.008073][ T5934] which lock already depends on the new lock. [ 95.008073][ T5934] [ 95.018491][ T5934] [ 95.018491][ T5934] the existing dependency chain (in reverse order) is: [ 95.027500][ T5934] [ 95.027500][ T5934] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 95.035053][ T5934] down_read+0x46/0x2e0 [ 95.039733][ T5934] ext4_setattr+0x86b/0x1c90 [ 95.044948][ T5934] notify_change+0xb0d/0xe10 [ 95.050178][ T5934] chown_common+0x3f9/0x5a0 [ 95.055209][ T5934] do_fchownat+0x168/0x270 [ 95.060149][ T5934] __x64_sys_chown+0x82/0x90 [ 95.065286][ T5934] do_syscall_64+0x55/0xb0 [ 95.070321][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.076930][ T5934] [ 95.076930][ T5934] -> #1 (jbd2_handle){++++}-{0:0}: [ 95.084326][ T5934] start_this_handle+0x1e9d/0x20c0 [ 95.090146][ T5934] jbd2__journal_start+0x2bb/0x5b0 [ 95.095797][ T5934] __ext4_journal_start_sb+0x203/0x570 [ 95.101780][ T5934] ext4_do_writepages+0xf92/0x38d0 [ 95.107493][ T5934] ext4_writepages+0x1a8/0x2f0 [ 95.112784][ T5934] do_writepages+0x3a2/0x600 [ 95.117905][ T5934] filemap_fdatawrite_wbc+0x122/0x180 [ 95.123827][ T5934] file_write_and_wait_range+0x171/0x240 [ 95.130015][ T5934] ext4_sync_file+0x281/0xc10 [ 95.135224][ T5934] __x64_sys_fsync+0x195/0x1d0 [ 95.140531][ T5934] do_syscall_64+0x55/0xb0 [ 95.145501][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.152141][ T5934] [ 95.152141][ T5934] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 95.160600][ T5934] __lock_acquire+0x2ddb/0x7c80 [ 95.166083][ T5934] lock_acquire+0x197/0x410 [ 95.171195][ T5934] percpu_down_read+0x44/0x1a0 [ 95.176567][ T5934] ext4_writepages+0x170/0x2f0 [ 95.181870][ T5934] do_writepages+0x3a2/0x600 [ 95.187259][ T5934] __writeback_single_inode+0x153/0xee0 [ 95.193328][ T5934] writeback_single_inode+0x211/0x720 [ 95.199219][ T5934] write_inode_now+0x161/0x1e0 [ 95.204671][ T5934] iput+0x5b2/0x920 [ 95.208996][ T5934] ext4_xattr_block_set+0x273a/0x32a0 [ 95.214898][ T5934] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 95.221578][ T5934] __ext4_expand_extra_isize+0x306/0x400 [ 95.227747][ T5934] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 95.233814][ T5934] ext4_evict_inode+0x7ed/0xea0 [ 95.239287][ T5934] evict+0x486/0x870 [ 95.243703][ T5934] ext4_orphan_cleanup+0xbd4/0x1400 [ 95.249598][ T5934] ext4_fill_super+0x5de4/0x66c0 [ 95.255197][ T5934] get_tree_bdev+0x3e4/0x510 [ 95.260311][ T5934] vfs_get_tree+0x8c/0x280 [ 95.265329][ T5934] do_new_mount+0x24b/0xa40 [ 95.270354][ T5934] __se_sys_mount+0x2da/0x3c0 [ 95.275578][ T5934] do_syscall_64+0x55/0xb0 [ 95.280509][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.286921][ T5934] [ 95.286921][ T5934] other info that might help us debug this: [ 95.286921][ T5934] [ 95.297496][ T5934] Chain exists of: [ 95.297496][ T5934] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 95.297496][ T5934] [ 95.310974][ T5934] Possible unsafe locking scenario: [ 95.310974][ T5934] [ 95.318419][ T5934] CPU0 CPU1 [ 95.323783][ T5934] ---- ---- [ 95.329222][ T5934] lock(&ei->xattr_sem); [ 95.333560][ T5934] lock(jbd2_handle); [ 95.340244][ T5934] lock(&ei->xattr_sem); [ 95.347229][ T5934] rlock(&sbi->s_writepages_rwsem); [ 95.352530][ T5934] [ 95.352530][ T5934] *** DEADLOCK *** [ 95.352530][ T5934] [ 95.360692][ T5934] 3 locks held by syz.0.17/5934: [ 95.365665][ T5934] #0: ffff888023c3c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 95.376032][ T5934] #1: ffff888023c3c608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 95.385435][ T5934] #2: ffff888072b51ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 95.395902][ T5934] [ 95.395902][ T5934] stack backtrace: [ 95.401876][ T5934] CPU: 0 PID: 5934 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.409150][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.419202][ T5934] Call Trace: [ 95.422565][ T5934] [ 95.425492][ T5934] dump_stack_lvl+0x16c/0x230 [ 95.430171][ T5934] ? load_image+0x3b0/0x3b0 [ 95.434684][ T5934] ? show_regs_print_info+0x20/0x20 [ 95.439900][ T5934] ? print_circular_bug+0x12b/0x1a0 [ 95.445097][ T5934] check_noncircular+0x2bd/0x3c0 [ 95.450040][ T5934] ? look_up_lock_class+0x75/0x140 [ 95.455326][ T5934] ? print_deadlock_bug+0x5d0/0x5d0 [ 95.460693][ T5934] ? lockdep_lock+0xe0/0x220 [ 95.465278][ T5934] ? _find_first_zero_bit+0xd3/0x100 [ 95.470562][ T5934] __lock_acquire+0x2ddb/0x7c80 [ 95.475682][ T5934] ? mark_lock+0x94/0x320 [ 95.480007][ T5934] ? verify_lock_unused+0x140/0x140 [ 95.485281][ T5934] ? __lock_acquire+0x1334/0x7c80 [ 95.490324][ T5934] lock_acquire+0x197/0x410 [ 95.494853][ T5934] ? ext4_writepages+0x170/0x2f0 [ 95.499791][ T5934] ? __might_sleep+0xe0/0xe0 [ 95.504373][ T5934] ? mark_lock+0x94/0x320 [ 95.508691][ T5934] ? read_lock_is_recursive+0x20/0x20 [ 95.514053][ T5934] ? __lock_acquire+0x1334/0x7c80 [ 95.519070][ T5934] percpu_down_read+0x44/0x1a0 [ 95.523845][ T5934] ? ext4_writepages+0x170/0x2f0 [ 95.528790][ T5934] ext4_writepages+0x170/0x2f0 [ 95.533556][ T5934] ? ext4_read_folio+0x2f0/0x2f0 [ 95.538496][ T5934] ? __rwlock_init+0x150/0x150 [ 95.543255][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 95.548454][ T5934] ? ext4_read_folio+0x2f0/0x2f0 [ 95.553405][ T5934] do_writepages+0x3a2/0x600 [ 95.558001][ T5934] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 95.563725][ T5934] ? writeback_single_inode+0x206/0x720 [ 95.569320][ T5934] ? __lock_acquire+0x7c80/0x7c80 [ 95.574391][ T5934] ? do_raw_spin_lock+0x121/0x2c0 [ 95.579411][ T5934] __writeback_single_inode+0x153/0xee0 [ 95.584960][ T5934] writeback_single_inode+0x211/0x720 [ 95.590333][ T5934] ? write_inode_now+0x1e0/0x1e0 [ 95.595268][ T5934] write_inode_now+0x161/0x1e0 [ 95.600054][ T5934] ? bdi_split_work_to_wbs+0x890/0x890 [ 95.605511][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 95.610706][ T5934] iput+0x5b2/0x920 [ 95.614520][ T5934] ext4_xattr_block_set+0x273a/0x32a0 [ 95.619907][ T5934] ? __might_sleep+0xe0/0xe0 [ 95.624520][ T5934] ? xattr_find_entry+0x12b/0x2f0 [ 95.629639][ T5934] ? ext4_xattr_block_find+0x350/0x350 [ 95.635143][ T5934] ? ext4_xattr_block_find+0x2d4/0x350 [ 95.640600][ T5934] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 95.646499][ T5934] __ext4_expand_extra_isize+0x306/0x400 [ 95.652138][ T5934] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 95.657599][ T5934] ext4_evict_inode+0x7ed/0xea0 [ 95.662454][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 95.667305][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 95.673213][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 95.678524][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 95.684419][ T5934] evict+0x486/0x870 [ 95.688333][ T5934] ? __lock_acquire+0x7c80/0x7c80 [ 95.693443][ T5934] ? proc_nr_inodes+0x230/0x230 [ 95.698304][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 95.703496][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 95.708427][ T5934] ? iput+0x70a/0x920 [ 95.712671][ T5934] ext4_orphan_cleanup+0xbd4/0x1400 [ 95.717873][ T5934] ? ext4_orphan_del+0xba0/0xba0 [ 95.722827][ T5934] ? ext4_register_li_request+0x183/0x940 [ 95.728541][ T5934] ? errseq_check_and_advance+0x66/0x120 [ 95.734187][ T5934] ext4_fill_super+0x5de4/0x66c0 [ 95.739181][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 95.745545][ T5934] ? __might_sleep+0xe0/0xe0 [ 95.750346][ T5934] ? read_lock_is_recursive+0x20/0x20 [ 95.755779][ T5934] ? snprintf+0xdb/0x120 [ 95.760121][ T5934] ? vscnprintf+0x80/0x80 [ 95.764571][ T5934] ? down_write+0x162/0x1f0 [ 95.769071][ T5934] ? down_read_killable+0x340/0x340 [ 95.774265][ T5934] ? setup_bdev_super+0x56b/0x660 [ 95.779327][ T5934] get_tree_bdev+0x3e4/0x510 [ 95.783919][ T5934] ? vfs_parse_fs_string+0x160/0x160 [ 95.789199][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 95.795538][ T5934] ? setup_bdev_super+0x660/0x660 [ 95.800752][ T5934] ? apparmor_capable+0x137/0x1a0 [ 95.805922][ T5934] ? bpf_lsm_capable+0x9/0x10 [ 95.810787][ T5934] ? security_capable+0x89/0xb0 [ 95.815991][ T5934] vfs_get_tree+0x8c/0x280 [ 95.820494][ T5934] do_new_mount+0x24b/0xa40 [ 95.825286][ T5934] __se_sys_mount+0x2da/0x3c0 [ 95.830175][ T5934] ? __x64_sys_mount+0xc0/0xc0 [ 95.835331][ T5934] ? lockdep_hardirqs_on+0x98/0x150 [ 95.841495][ T5934] ? __x64_sys_mount+0x20/0xc0 [ 95.846259][ T5934] do_syscall_64+0x55/0xb0 [ 95.850768][ T5934] ? clear_bhb_loop+0x40/0x90 [ 95.855531][ T5934] ? clear_bhb_loop+0x40/0x90 [ 95.860206][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.866099][ T5934] RIP: 0033:0x7f0a2af90eea [ 95.870673][ T5934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.890677][ T5934] RSP: 002b:00007fffce424448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.899186][ T5934] RAX: ffffffffffffffda RBX: 00007fffce4244d0 RCX: 00007f0a2af90eea [ 95.907259][ T5934] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffce424490 [ 95.915488][ T5934] RBP: 0000200000000180 R08: 00007fffce4244d0 R09: 0000000001800700 [ 95.923461][ T5934] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 95.931452][ T5934] R13: 00007fffce424490 R14: 000000000000047c R15: 00002000000004c0 [ 95.939807][ T5934] [ 95.987251][ T5934] ------------[ cut here ]------------ [ 95.992938][ T5934] EA inode 11 i_nlink=2 [ 95.993574][ T5934] WARNING: CPU: 0 PID: 5934 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.008130][ T5934] Modules linked in: [ 96.012623][ T5934] CPU: 0 PID: 5934 Comm: syz.0.17 Not tainted syzkaller #0 [ 96.020319][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.030866][ T5934] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.037526][ T5934] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 96.058045][ T5934] RSP: 0018:ffffc900033771c0 EFLAGS: 00010246 [ 96.064927][ T5934] RAX: fc7645e26ad30800 RBX: 0000000000000002 RCX: ffff8880288b1e00 [ 96.073640][ T5934] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 96.082826][ T5934] RBP: ffffc900033772b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 96.091737][ T5934] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 96.100096][ T5934] R13: ffff888072b540a8 R14: ffff888072b53eb0 R15: ffff888072b53f00 [ 96.108214][ T5934] FS: 0000555567b04500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 96.117305][ T5934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.124044][ T5934] CR2: 000055a502211050 CR3: 000000007726e000 CR4: 00000000003506f0 [ 96.132113][ T5934] Call Trace: [ 96.135400][ T5934] [ 96.138506][ T5934] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 96.144186][ T5934] ? ext4_xattr_inode_iget+0x3df/0x600 [ 96.149937][ T5934] ext4_xattr_set_entry+0xcda/0x1e90 [ 96.155260][ T5934] ext4_xattr_ibody_set+0x254/0x6a0 [ 96.160713][ T5934] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 96.166853][ T5934] __ext4_expand_extra_isize+0x306/0x400 [ 96.173066][ T5934] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 96.178668][ T5934] ext4_evict_inode+0x7ed/0xea0 [ 96.183971][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 96.188950][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 96.195191][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 96.200574][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 96.206720][ T5934] evict+0x486/0x870 [ 96.210695][ T5934] ? __lock_acquire+0x7c80/0x7c80 [ 96.215760][ T5934] ? proc_nr_inodes+0x230/0x230 [ 96.220683][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 96.226090][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 96.231046][ T5934] ? iput+0x70a/0x920 [ 96.235151][ T5934] ext4_orphan_cleanup+0xbd4/0x1400 [ 96.240426][ T5934] ? ext4_orphan_del+0xba0/0xba0 [ 96.245574][ T5934] ? ext4_register_li_request+0x183/0x940 [ 96.251396][ T5934] ? errseq_check_and_advance+0x66/0x120 [ 96.257071][ T5934] ext4_fill_super+0x5de4/0x66c0 [ 96.262214][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 96.268852][ T5934] ? __might_sleep+0xe0/0xe0 [ 96.273538][ T5934] ? read_lock_is_recursive+0x20/0x20 [ 96.279444][ T5934] ? snprintf+0xdb/0x120 [ 96.283847][ T5934] ? vscnprintf+0x80/0x80 [ 96.288296][ T5934] ? down_write+0x162/0x1f0 [ 96.293038][ T5934] ? down_read_killable+0x340/0x340 [ 96.298274][ T5934] ? setup_bdev_super+0x56b/0x660 [ 96.303574][ T5934] get_tree_bdev+0x3e4/0x510 [ 96.308375][ T5934] ? vfs_parse_fs_string+0x160/0x160 [ 96.313947][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 96.320256][ T5934] ? setup_bdev_super+0x660/0x660 [ 96.325404][ T5934] ? apparmor_capable+0x137/0x1a0 [ 96.330503][ T5934] ? bpf_lsm_capable+0x9/0x10 [ 96.335202][ T5934] ? security_capable+0x89/0xb0 [ 96.340204][ T5934] vfs_get_tree+0x8c/0x280 [ 96.344744][ T5934] do_new_mount+0x24b/0xa40 [ 96.349524][ T5934] __se_sys_mount+0x2da/0x3c0 [ 96.354360][ T5934] ? __x64_sys_mount+0xc0/0xc0 [ 96.359250][ T5934] ? lockdep_hardirqs_on+0x98/0x150 [ 96.364515][ T5934] ? __x64_sys_mount+0x20/0xc0 [ 96.369309][ T5934] do_syscall_64+0x55/0xb0 [ 96.373810][ T5934] ? clear_bhb_loop+0x40/0x90 [ 96.378948][ T5934] ? clear_bhb_loop+0x40/0x90 [ 96.383791][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.389939][ T5934] RIP: 0033:0x7f0a2af90eea [ 96.394386][ T5934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.414305][ T5934] RSP: 002b:00007fffce424448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.423188][ T5934] RAX: ffffffffffffffda RBX: 00007fffce4244d0 RCX: 00007f0a2af90eea [ 96.431304][ T5934] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffce424490 [ 96.439299][ T5934] RBP: 0000200000000180 R08: 00007fffce4244d0 R09: 0000000001800700 [ 96.447397][ T5934] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 96.455530][ T5934] R13: 00007fffce424490 R14: 000000000000047c R15: 00002000000004c0 [ 96.463597][ T5934] [ 96.466735][ T5934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.474366][ T5934] CPU: 0 PID: 5934 Comm: syz.0.17 Not tainted syzkaller #0 [ 96.481658][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.492170][ T5934] Call Trace: [ 96.495557][ T5934] [ 96.498787][ T5934] dump_stack_lvl+0x16c/0x230 [ 96.503580][ T5934] ? show_regs_print_info+0x20/0x20 [ 96.508884][ T5934] ? load_image+0x3b0/0x3b0 [ 96.513405][ T5934] panic+0x2c0/0x710 [ 96.517394][ T5934] ? bpf_jit_dump+0xd0/0xd0 [ 96.521922][ T5934] __warn+0x2e0/0x470 [ 96.525917][ T5934] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.531994][ T5934] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.538165][ T5934] report_bug+0x2be/0x4f0 [ 96.542498][ T5934] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.548581][ T5934] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.554681][ T5934] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 96.560843][ T5934] handle_bug+0xcf/0x120 [ 96.565094][ T5934] exc_invalid_op+0x1a/0x50 [ 96.569603][ T5934] asm_exc_invalid_op+0x1a/0x20 [ 96.574460][ T5934] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 96.581063][ T5934] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 96.600682][ T5934] RSP: 0018:ffffc900033771c0 EFLAGS: 00010246 [ 96.606758][ T5934] RAX: fc7645e26ad30800 RBX: 0000000000000002 RCX: ffff8880288b1e00 [ 96.614741][ T5934] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 96.622724][ T5934] RBP: ffffc900033772b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 96.630873][ T5934] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 96.638855][ T5934] R13: ffff888072b540a8 R14: ffff888072b53eb0 R15: ffff888072b53f00 [ 96.646841][ T5934] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 96.652485][ T5934] ? ext4_xattr_inode_iget+0x3df/0x600 [ 96.658128][ T5934] ext4_xattr_set_entry+0xcda/0x1e90 [ 96.663522][ T5934] ext4_xattr_ibody_set+0x254/0x6a0 [ 96.668730][ T5934] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 96.674638][ T5934] __ext4_expand_extra_isize+0x306/0x400 [ 96.680282][ T5934] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 96.685754][ T5934] ext4_evict_inode+0x7ed/0xea0 [ 96.690610][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 96.695466][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 96.701468][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 96.706676][ T5934] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 96.712583][ T5934] evict+0x486/0x870 [ 96.716487][ T5934] ? __lock_acquire+0x7c80/0x7c80 [ 96.721799][ T5934] ? proc_nr_inodes+0x230/0x230 [ 96.727090][ T5934] ? do_raw_spin_unlock+0x121/0x230 [ 96.732308][ T5934] ? _raw_spin_unlock+0x28/0x40 [ 96.737342][ T5934] ? iput+0x70a/0x920 [ 96.741595][ T5934] ext4_orphan_cleanup+0xbd4/0x1400 [ 96.746809][ T5934] ? ext4_orphan_del+0xba0/0xba0 [ 96.751759][ T5934] ? ext4_register_li_request+0x183/0x940 [ 96.757494][ T5934] ? errseq_check_and_advance+0x66/0x120 [ 96.763142][ T5934] ext4_fill_super+0x5de4/0x66c0 [ 96.768187][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 96.774444][ T5934] ? __might_sleep+0xe0/0xe0 [ 96.779128][ T5934] ? read_lock_is_recursive+0x20/0x20 [ 96.784529][ T5934] ? snprintf+0xdb/0x120 [ 96.788795][ T5934] ? vscnprintf+0x80/0x80 [ 96.793223][ T5934] ? down_write+0x162/0x1f0 [ 96.797796][ T5934] ? down_read_killable+0x340/0x340 [ 96.803003][ T5934] ? setup_bdev_super+0x56b/0x660 [ 96.808056][ T5934] get_tree_bdev+0x3e4/0x510 [ 96.812725][ T5934] ? vfs_parse_fs_string+0x160/0x160 [ 96.818016][ T5934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 96.824272][ T5934] ? setup_bdev_super+0x660/0x660 [ 96.829400][ T5934] ? apparmor_capable+0x137/0x1a0 [ 96.834561][ T5934] ? bpf_lsm_capable+0x9/0x10 [ 96.839256][ T5934] ? security_capable+0x89/0xb0 [ 96.844117][ T5934] vfs_get_tree+0x8c/0x280 [ 96.848629][ T5934] do_new_mount+0x24b/0xa40 [ 96.853234][ T5934] __se_sys_mount+0x2da/0x3c0 [ 96.858000][ T5934] ? __x64_sys_mount+0xc0/0xc0 [ 96.862774][ T5934] ? lockdep_hardirqs_on+0x98/0x150 [ 96.868068][ T5934] ? __x64_sys_mount+0x20/0xc0 [ 96.872836][ T5934] do_syscall_64+0x55/0xb0 [ 96.877257][ T5934] ? clear_bhb_loop+0x40/0x90 [ 96.881939][ T5934] ? clear_bhb_loop+0x40/0x90 [ 96.886709][ T5934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.892609][ T5934] RIP: 0033:0x7f0a2af90eea [ 96.897039][ T5934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.916736][ T5934] RSP: 002b:00007fffce424448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.925437][ T5934] RAX: ffffffffffffffda RBX: 00007fffce4244d0 RCX: 00007f0a2af90eea [ 96.933433][ T5934] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffce424490 [ 96.941503][ T5934] RBP: 0000200000000180 R08: 00007fffce4244d0 R09: 0000000001800700 [ 96.949483][ T5934] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 96.957459][ T5934] R13: 00007fffce424490 R14: 000000000000047c R15: 00002000000004c0 [ 96.965439][ T5934] [ 96.968838][ T5934] Kernel Offset: disabled [ 96.973174][ T5934] Rebooting in 86400 seconds..