[ 8.978681][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.009145][ T1610] gvnic 0000:00:00.0 enp0s0: Device link is up. OK [ 9.015560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs 1970/01/01 00:00:32 serving rpc on tcp://40065 syzkaller login: [ 33.274664][ T4339] cgroup: Unknown subsys name 'net' [ 33.557673][ T4339] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.872176][ T4339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.014161][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.015453][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.017965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.026537][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.027882][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.030191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.321175][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 38.337642][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.338717][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.340140][ T4391] device bridge_slave_0 entered promiscuous mode [ 38.342382][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.343450][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.344772][ T4391] device bridge_slave_1 entered promiscuous mode [ 38.352035][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.354624][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.361397][ T4391] team0: Port device team_slave_0 added [ 38.363272][ T4391] team0: Port device team_slave_1 added [ 38.368241][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.369317][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.372943][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.375489][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.376508][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.380021][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.426262][ T4391] device hsr_slave_0 entered promiscuous mode [ 38.455590][ T4391] device hsr_slave_1 entered promiscuous mode [ 38.538179][ T4391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.556856][ T4391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.604595][ T4391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.654369][ T4391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.711003][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.712165][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.713575][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.714665][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.731691][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.735853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.737997][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.739659][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.743782][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.759571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.761326][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.762367][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.764829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.767110][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.768210][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.774456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.776493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.779410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.782122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.786276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.788848][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.847579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.848848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.852566][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.858800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.864182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.867106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.868393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.872713][ T4391] device veth0_vlan entered promiscuous mode [ 38.884398][ T4391] device veth1_vlan entered promiscuous mode [ 38.892218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.893765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.896010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.898539][ T4391] device veth0_macvtap entered promiscuous mode [ 38.900741][ T4391] device veth1_macvtap entered promiscuous mode [ 38.906446][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.907581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.909496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.919607][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.920878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.923316][ T4391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.924694][ T4391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.926610][ T4391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927914][ T4391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.080084][ T4434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.081571][ T4434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.082936][ T4434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.084328][ T4434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.085868][ T4434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.087031][ T4434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:40 executed programs: 0 [ 40.352886][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.354463][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.357790][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.359216][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.360476][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.361656][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.697992][ T1610] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.733913][ T4451] chnl_net:caif_netlink_parms(): no params data found [ 40.748261][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.749377][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.750653][ T4451] device bridge_slave_0 entered promiscuous mode [ 40.752459][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.753606][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.754916][ T4451] device bridge_slave_1 entered promiscuous mode [ 40.761624][ T4451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.763692][ T4451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.769731][ T4451] team0: Port device team_slave_0 added [ 40.771302][ T4451] team0: Port device team_slave_1 added [ 40.776810][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.777847][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.781676][ T4451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.783839][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.784846][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.789251][ T4451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.836423][ T4451] device hsr_slave_0 entered promiscuous mode [ 40.875401][ T4451] device hsr_slave_1 entered promiscuous mode [ 40.915225][ T4451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.916510][ T4451] Cannot create hsr debugfs directory [ 42.405869][ T4434] Bluetooth: hci0: command 0x0409 tx timeout [ 43.426314][ T1610] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.296352][ T1610] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.377171][ T1610] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495298][ T4434] Bluetooth: hci0: command 0x041b tx timeout [ 45.270611][ T4451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.368047][ T4451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.416738][ T4451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.546871][ T4451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.666335][ T4451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.669550][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.670955][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.673130][ T4451] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.675527][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.676910][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.678239][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.679291][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.681058][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.683216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.684658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.686171][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.687198][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.748335][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.751236][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.753941][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.756658][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.758249][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.760596][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.762079][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.764480][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.766567][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.769020][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.770405][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.772711][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.855968][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.857219][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.860361][ T4451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.865003][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.867730][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.874459][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.876490][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.877909][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.879217][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.917953][ T4451] device veth0_vlan entered promiscuous mode [ 45.921084][ T4451] device veth1_vlan entered promiscuous mode [ 45.927339][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.928703][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.930049][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.931490][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.933655][ T4451] device veth0_macvtap entered promiscuous mode [ 45.936373][ T4451] device veth1_macvtap entered promiscuous mode [ 45.940317][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.941822][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.943703][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.944762][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.946323][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.948530][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.949918][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.951937][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.953387][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.955119][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.956363][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.957824][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.960065][ T4451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.961278][ T4451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.962430][ T4451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.963638][ T4451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.021307][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.023163][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.025017][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.030410][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.031464][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.032776][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.068312][ T1610] device hsr_slave_0 left promiscuous mode [ 46.079701][ T4519] loop0: detected capacity change from 0 to 512 [ 46.084083][ T4519] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.087226][ T4519] ------------[ cut here ]------------ [ 46.088117][ T4519] WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1865 ext4_xattr_block_set+0x20bc/0x28b4 [ 46.089541][ T4519] Modules linked in: [ 46.090054][ T4519] CPU: 0 PID: 4519 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.091003][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.092339][ T4519] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.093554][ T4519] pc : ext4_xattr_block_set+0x20bc/0x28b4 [ 46.094415][ T4519] lr : ext4_xattr_block_set+0x20bc/0x28b4 [ 46.095219][ T4519] sp : ffff800021656f40 [ 46.095774][ T4519] x29: ffff8000216570d0 x28: ffff0000d52d9400 x27: ffff0000d6a14000 [ 46.096874][ T4519] x26: ffff800021657220 x25: dfff800000000000 x24: ffff0000d52d9400 [ 46.097977][ T4519] x23: 1ffff000042cae46 x22: ffff800021657230 x21: 1ffff000042cae45 [ 46.099253][ T4519] x20: ffff800021657228 x19: 0000000000000000 x18: 1fffe00033e7277e [ 46.100378][ T4519] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 46.101440][ T4519] x14: 0000000000000005 x13: 00000000ffffffc3 x12: ffff0000ebd62020 [ 46.102658][ T4519] x11: ff00800008e7f040 x10: 0000000000000000 x9 : ffff800008e7f040 [ 46.103708][ T4519] x8 : ffff0000d5f53800 x7 : ffff0000ebd62000 x6 : ffff0000ebd62020 [ 46.104853][ T4519] x5 : ffff800021657060 x4 : ffff0000d52d9428 x3 : ffff800008e7d044 [ 46.105890][ T4519] x2 : 0000000000000028 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.107046][ T4519] Call trace: [ 46.107496][ T4519] ext4_xattr_block_set+0x20bc/0x28b4 [ 46.108341][ T4519] ext4_expand_extra_isize_ea+0xea4/0x1818 [ 46.109204][ T4519] __ext4_expand_extra_isize+0x2a0/0x364 [ 46.110002][ T4519] __ext4_mark_inode_dirty+0x3d4/0x7b4 [ 46.110732][ T4519] ext4_evict_inode+0xb50/0x1264 [ 46.111494][ T4519] evict+0x3d8/0x824 [ 46.111998][ T4519] iput+0x728/0x7e8 [ 46.112563][ T4519] ext4_process_orphan+0x24c/0x2c0 [ 46.113238][ T4519] ext4_orphan_cleanup+0x964/0x1090 [ 46.113987][ T4519] ext4_fill_super+0x5af8/0x63bc [ 46.114686][ T4519] get_tree_bdev+0x35c/0x54c [ 46.115312][ T4519] ext4_get_tree+0x28/0x38 [ 46.115898][ T4519] vfs_get_tree+0x90/0x278 [ 46.116495][ T4519] do_new_mount+0x228/0x804 [ 46.117111][ T4519] path_mount+0x5ac/0xe6c [ 46.117690][ T4519] __arm64_sys_mount+0x4a0/0x5a0 [ 46.118387][ T4519] invoke_syscall+0x98/0x290 [ 46.118987][ T4519] el0_svc_common+0x13c/0x258 [ 46.119634][ T4519] do_el0_svc+0x5c/0x134 [ 46.120268][ T4519] el0_svc+0x58/0x128 [ 46.120830][ T4519] el0t_64_sync_handler+0x84/0xf0 [ 46.121502][ T4519] el0t_64_sync+0x18c/0x190 [ 46.122163][ T4519] irq event stamp: 4232 [ 46.122819][ T4519] hardirqs last enabled at (4231): [] __find_get_block+0x1c4/0xde4 [ 46.124210][ T4519] hardirqs last disabled at (4232): [] el1_dbg+0x24/0x80 [ 46.125490][ T4519] softirqs last enabled at (1342): [] local_bh_enable+0x10/0x34 [ 46.126804][ T4519] softirqs last disabled at (1340): [] local_bh_disable+0x10/0x34 [ 46.128101][ T4519] ---[ end trace 0000000000000000 ]--- [ 46.130736][ T4519] ------------[ cut here ]------------ [ 46.131627][ T4519] EA inode 11 i_nlink=2 [ 46.131697][ T4519] WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x454/0x498 [ 46.133634][ T4519] Modules linked in: [ 46.134223][ T4519] CPU: 0 PID: 4519 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 46.135369][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.136945][ T4519] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.138050][ T4519] pc : ext4_xattr_inode_update_ref+0x454/0x498 [ 46.138956][ T4519] lr : ext4_xattr_inode_update_ref+0x454/0x498 [ 46.139835][ T4519] sp : ffff800021656ea0 [ 46.140424][ T4519] x29: ffff800021656f50 x28: 0000000000000000 x27: 1fffe0001e311317 [ 46.141568][ T4519] x26: ffff0000f1889700 x25: dfff800000000000 x24: ffff800021656ec0 [ 46.142620][ T4519] x23: ffff7000042cadd8 x22: ffff800017d5e000 x21: 0000000000000002 [ 46.143712][ T4519] x20: 0000000000000001 x19: ffff0000f18896c0 x18: 1fffe00033e7277e [ 46.144912][ T4519] x17: 0000000000000000 x16: ffff800011b8ee98 x15: 0000000000000000 [ 46.146078][ T4519] x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000 [ 46.147257][ T4519] x11: ff00800008195f70 x10: 0000000000000000 x9 : c654642aee6e2800 [ 46.148394][ T4519] x8 : c654642aee6e2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 46.149539][ T4519] x5 : ffff800021656938 x4 : ffff800015464e60 x3 : ffff800008540378 [ 46.150734][ T4519] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.151899][ T4519] Call trace: [ 46.152316][ T4519] ext4_xattr_inode_update_ref+0x454/0x498 [ 46.153169][ T4519] ext4_xattr_set_entry+0x934/0x15f4 [ 46.153912][ T4519] ext4_xattr_ibody_set+0x208/0x604 [ 46.154664][ T4519] ext4_expand_extra_isize_ea+0xeec/0x1818 [ 46.155520][ T4519] __ext4_expand_extra_isize+0x2a0/0x364 [ 46.156299][ T4519] __ext4_mark_inode_dirty+0x3d4/0x7b4 [ 46.157087][ T4519] ext4_evict_inode+0xb50/0x1264 [ 46.157773][ T4519] evict+0x3d8/0x824 [ 46.158330][ T4519] iput+0x728/0x7e8 [ 46.158826][ T4519] ext4_process_orphan+0x24c/0x2c0 [ 46.159543][ T4519] ext4_orphan_cleanup+0x964/0x1090 [ 46.160269][ T4519] ext4_fill_super+0x5af8/0x63bc [ 46.160935][ T4519] get_tree_bdev+0x35c/0x54c [ 46.161611][ T4519] ext4_get_tree+0x28/0x38 [ 46.162274][ T4519] vfs_get_tree+0x90/0x278 [ 46.162863][ T4519] do_new_mount+0x228/0x804 [ 46.163462][ T4519] path_mount+0x5ac/0xe6c [ 46.164047][ T4519] __arm64_sys_mount+0x4a0/0x5a0 [ 46.164703][ T4519] invoke_syscall+0x98/0x290 [ 46.165382][ T4519] el0_svc_common+0x13c/0x258 [ 46.166067][ T4519] do_el0_svc+0x5c/0x134 [ 46.166656][ T4519] el0_svc+0x58/0x128 [ 46.167201][ T4519] el0t_64_sync_handler+0x84/0xf0 [ 46.167946][ T4519] el0t_64_sync+0x18c/0x190 [ 46.168654][ T4519] irq event stamp: 4518 [ 46.169228][ T4519] hardirqs last enabled at (4517): [] __up_console_sem+0xb4/0xfc [ 46.170666][ T4519] hardirqs last disabled at (4518): [] el1_dbg+0x24/0x80 [ 46.171862][ T4519] softirqs last enabled at (4400): [] handle_softirqs+0xb1c/0xc90 [ 46.173242][ T4519] softirqs last disabled at (4235): [] __do_softirq+0x14/0x20 [ 46.174450][ T4519] ---[ end trace 0000000000000000 ]--- [ 46.175522][ T1610] device hsr_slave_1 left promiscuous mode [ 46.176363][ T4519] EXT4-fs (loop0): 1 orphan inode deleted [ 46.177259][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.190248][ T4451] EXT4-fs (loop0): unmounting filesystem. [ 46.245834][ T1610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.247006][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.248786][ T1610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.249801][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.251087][ T1610] device bridge_slave_1 left promiscuous mode [ 46.252495][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.287620][ T1610] device bridge_slave_0 left promiscuous mode [ 46.288614][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state