Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. 2025/12/12 07:19:01 parsed 1 programs [ 84.866250][ T5770] cgroup: Unknown subsys name 'net' [ 85.032088][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.818115][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.876249][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.951643][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.959932][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.968174][ T5782] bridge_slave_0: entered allmulticast mode [ 88.976886][ T5782] bridge_slave_0: entered promiscuous mode [ 88.986669][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.994545][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.001960][ T5782] bridge_slave_1: entered allmulticast mode [ 89.009944][ T5782] bridge_slave_1: entered promiscuous mode [ 89.043587][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.056745][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.092000][ T5782] team0: Port device team_slave_0 added [ 89.102490][ T5782] team0: Port device team_slave_1 added [ 89.134427][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.143080][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.170627][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.184569][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.191643][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.219021][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.266756][ T5782] hsr_slave_0: entered promiscuous mode [ 89.274432][ T5782] hsr_slave_1: entered promiscuous mode [ 89.429828][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.443321][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.454113][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.464763][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.502375][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.510127][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.518368][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.525756][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.590853][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.611858][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.622015][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.642301][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.658267][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665609][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.682888][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.691077][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.918660][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.975816][ T5782] veth0_vlan: entered promiscuous mode [ 89.990471][ T5782] veth1_vlan: entered promiscuous mode [ 90.027591][ T5782] veth0_macvtap: entered promiscuous mode [ 90.038264][ T5782] veth1_macvtap: entered promiscuous mode [ 90.062876][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.079932][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.093210][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104303][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115262][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.126405][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.350121][ T5782] syz-executor (5782) used greatest stack depth: 20808 bytes left [ 90.381979][ T380] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.956980][ T27] cfg80211: failed to load regulatory.db [ 92.574140][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.583892][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.592209][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.602656][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.612045][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.621486][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.657972][ T380] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.949691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.958857][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.991627][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.999808][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/12 07:19:14 executed programs: 0 [ 94.617831][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.629932][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.638433][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.649279][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.658889][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.667656][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.847443][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 94.925990][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.933553][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.940813][ T5878] bridge_slave_0: entered allmulticast mode [ 94.949141][ T5878] bridge_slave_0: entered promiscuous mode [ 94.958107][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.966341][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.974160][ T5878] bridge_slave_1: entered allmulticast mode [ 94.981541][ T5878] bridge_slave_1: entered promiscuous mode [ 95.018826][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.031618][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.071010][ T5878] team0: Port device team_slave_0 added [ 95.080532][ T5878] team0: Port device team_slave_1 added [ 95.125211][ T380] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.142130][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.150509][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.178158][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.193014][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.200119][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.227651][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.252090][ T380] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.306463][ T5878] hsr_slave_0: entered promiscuous mode [ 95.315271][ T5878] hsr_slave_1: entered promiscuous mode [ 95.322251][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.331097][ T5878] Cannot create hsr debugfs directory [ 96.280590][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.295441][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.328931][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.340625][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.509768][ T380] hsr_slave_0: left promiscuous mode [ 96.519253][ T380] hsr_slave_1: left promiscuous mode [ 96.529413][ T380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.537440][ T380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.553514][ T380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.561003][ T380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.573269][ T380] bridge_slave_1: left allmulticast mode [ 96.579015][ T380] bridge_slave_1: left promiscuous mode [ 96.588955][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.608646][ T380] bridge_slave_0: left allmulticast mode [ 96.614728][ T380] bridge_slave_0: left promiscuous mode [ 96.620677][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.660251][ T380] veth1_macvtap: left promiscuous mode [ 96.669968][ T380] veth0_macvtap: left promiscuous mode [ 96.677541][ T380] veth1_vlan: left promiscuous mode [ 96.685255][ T380] veth0_vlan: left promiscuous mode [ 96.748710][ T51] Bluetooth: hci0: command tx timeout [ 97.285732][ T380] team0 (unregistering): Port device team_slave_1 removed [ 97.329724][ T380] team0 (unregistering): Port device team_slave_0 removed [ 97.373913][ T380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.418383][ T380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.829434][ T380] bond0 (unregistering): Released all slaves [ 97.916609][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.941501][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.957475][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.965093][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.990511][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.999017][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.283073][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.349751][ T5878] veth0_vlan: entered promiscuous mode [ 98.367009][ T5878] veth1_vlan: entered promiscuous mode [ 98.412367][ T5878] veth0_macvtap: entered promiscuous mode [ 98.437649][ T5878] veth1_macvtap: entered promiscuous mode [ 98.474357][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.512031][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.547098][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.557515][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.568006][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.578126][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.758810][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.771252][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.827190][ T51] Bluetooth: hci0: command tx timeout [ 98.856110][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.868239][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.984947][ T5927] syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.001983][ T5927] loop0: detected capacity change from 0 to 512 [ 99.049341][ T5927] [ 99.051968][ T5927] ====================================================== [ 99.060436][ T5927] WARNING: possible circular locking dependency detected [ 99.069109][ T5927] syzkaller #0 Not tainted [ 99.075309][ T5927] ------------------------------------------------------ [ 99.084224][ T5927] syz.0.17/5927 is trying to acquire lock: [ 99.091478][ T5927] ffff88802b196bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 99.102893][ T5927] [ 99.102893][ T5927] but task is already holding lock: [ 99.112316][ T5927] ffff88805f48c6c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 99.124537][ T5927] [ 99.124537][ T5927] which lock already depends on the new lock. [ 99.124537][ T5927] [ 99.136442][ T5927] [ 99.136442][ T5927] the existing dependency chain (in reverse order) is: [ 99.147393][ T5927] [ 99.147393][ T5927] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 99.157516][ T5927] down_read+0x46/0x2e0 [ 99.168554][ T5927] ext4_setattr+0x86b/0x1c90 [ 99.174859][ T5927] notify_change+0xb0d/0xe10 [ 99.184959][ T5927] chown_common+0x3f9/0x5a0 [ 99.190650][ T5927] do_fchownat+0x168/0x270 [ 99.197606][ T5927] __x64_sys_chown+0x82/0x90 [ 99.204778][ T5927] do_syscall_64+0x55/0xb0 [ 99.211039][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.218216][ T5927] [ 99.218216][ T5927] -> #1 (jbd2_handle){++++}-{0:0}: [ 99.227751][ T5927] start_this_handle+0x1e9d/0x20c0 [ 99.234389][ T5927] jbd2__journal_start+0x2bb/0x5b0 [ 99.240406][ T5927] __ext4_journal_start_sb+0x203/0x570 [ 99.246881][ T5927] ext4_do_writepages+0xf92/0x38d0 [ 99.253360][ T5927] ext4_writepages+0x1a8/0x2f0 [ 99.259112][ T5927] do_writepages+0x3a2/0x600 [ 99.266636][ T5927] filemap_fdatawrite_wbc+0x122/0x180 [ 99.273607][ T5927] file_write_and_wait_range+0x171/0x240 [ 99.281156][ T5927] ext4_sync_file+0x281/0xc10 [ 99.288234][ T5927] __x64_sys_fsync+0x195/0x1d0 [ 99.294883][ T5927] do_syscall_64+0x55/0xb0 [ 99.301637][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.308187][ T5927] [ 99.308187][ T5927] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 99.318615][ T5927] __lock_acquire+0x2ddb/0x7c80 [ 99.324393][ T5927] lock_acquire+0x197/0x410 [ 99.330173][ T5927] percpu_down_read+0x44/0x1a0 [ 99.336738][ T5927] ext4_writepages+0x170/0x2f0 [ 99.343061][ T5927] do_writepages+0x3a2/0x600 [ 99.348848][ T5927] __writeback_single_inode+0x153/0xee0 [ 99.356608][ T5927] writeback_single_inode+0x211/0x720 [ 99.363255][ T5927] write_inode_now+0x161/0x1e0 [ 99.370348][ T5927] iput+0x5b2/0x920 [ 99.375389][ T5927] ext4_xattr_block_set+0x273a/0x32a0 [ 99.383035][ T5927] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 99.392494][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 99.399489][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 99.406749][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 99.414802][ T5927] evict+0x486/0x870 [ 99.419625][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 99.426008][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 99.433357][ T5927] get_tree_bdev+0x3e4/0x510 [ 99.439042][ T5927] vfs_get_tree+0x8c/0x280 [ 99.444654][ T5927] do_new_mount+0x24b/0xa40 [ 99.449936][ T5927] __se_sys_mount+0x2da/0x3c0 [ 99.455692][ T5927] do_syscall_64+0x55/0xb0 [ 99.460896][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.468310][ T5927] [ 99.468310][ T5927] other info that might help us debug this: [ 99.468310][ T5927] [ 99.479559][ T5927] Chain exists of: [ 99.479559][ T5927] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 99.479559][ T5927] [ 99.494787][ T5927] Possible unsafe locking scenario: [ 99.494787][ T5927] [ 99.504465][ T5927] CPU0 CPU1 [ 99.510209][ T5927] ---- ---- [ 99.518124][ T5927] lock(&ei->xattr_sem); [ 99.523427][ T5927] lock(jbd2_handle); [ 99.532043][ T5927] lock(&ei->xattr_sem); [ 99.540270][ T5927] rlock(&sbi->s_writepages_rwsem); [ 99.545857][ T5927] [ 99.545857][ T5927] *** DEADLOCK *** [ 99.545857][ T5927] [ 99.554384][ T5927] 3 locks held by syz.0.17/5927: [ 99.559737][ T5927] #0: ffff88802c5d20e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 99.572669][ T5927] #1: ffff88802c5d2608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 99.583887][ T5927] #2: ffff88805f48c6c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 99.594952][ T5927] [ 99.594952][ T5927] stack backtrace: [ 99.601330][ T5927] CPU: 1 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 99.609443][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.620732][ T5927] Call Trace: [ 99.625371][ T5927] [ 99.629163][ T5927] dump_stack_lvl+0x16c/0x230 [ 99.634248][ T5927] ? load_image+0x3b0/0x3b0 [ 99.639158][ T5927] ? show_regs_print_info+0x20/0x20 [ 99.645029][ T5927] ? print_circular_bug+0x12b/0x1a0 [ 99.650693][ T5927] check_noncircular+0x2bd/0x3c0 [ 99.657088][ T5927] ? look_up_lock_class+0x75/0x140 [ 99.663249][ T5927] ? print_deadlock_bug+0x5d0/0x5d0 [ 99.668692][ T5927] ? lockdep_lock+0x17a/0x220 [ 99.674375][ T5927] ? _find_first_zero_bit+0xd3/0x100 [ 99.680419][ T5927] __lock_acquire+0x2ddb/0x7c80 [ 99.685576][ T5927] ? mark_lock+0x94/0x320 [ 99.690652][ T5927] ? verify_lock_unused+0x140/0x140 [ 99.696255][ T5927] ? __lock_acquire+0x1334/0x7c80 [ 99.702829][ T5927] ? verify_lock_unused+0x140/0x140 [ 99.708733][ T5927] lock_acquire+0x197/0x410 [ 99.714355][ T5927] ? ext4_writepages+0x170/0x2f0 [ 99.722067][ T5927] ? __might_sleep+0xe0/0xe0 [ 99.727808][ T5927] ? mark_lock+0x94/0x320 [ 99.732532][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 99.738827][ T5927] ? __lock_acquire+0x1334/0x7c80 [ 99.745134][ T5927] percpu_down_read+0x44/0x1a0 [ 99.751404][ T5927] ? ext4_writepages+0x170/0x2f0 [ 99.756673][ T5927] ext4_writepages+0x170/0x2f0 [ 99.761799][ T5927] ? ext4_read_folio+0x2f0/0x2f0 [ 99.767244][ T5927] ? __rwlock_init+0x150/0x150 [ 99.773801][ T5927] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 99.780564][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 99.786818][ T5927] ? ext4_read_folio+0x2f0/0x2f0 [ 99.792775][ T5927] do_writepages+0x3a2/0x600 [ 99.797894][ T5927] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 99.804845][ T5927] ? writeback_single_inode+0x206/0x720 [ 99.811494][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 99.817603][ T5927] ? do_raw_spin_lock+0x121/0x2c0 [ 99.823619][ T5927] ? get_tree_bdev+0x3e4/0x510 [ 99.830175][ T5927] __writeback_single_inode+0x153/0xee0 [ 99.836767][ T5927] writeback_single_inode+0x211/0x720 [ 99.842931][ T5927] ? write_inode_now+0x1e0/0x1e0 [ 99.848284][ T5927] write_inode_now+0x161/0x1e0 [ 99.854999][ T5927] ? bdi_split_work_to_wbs+0x890/0x890 [ 99.861839][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 99.868229][ T5927] iput+0x5b2/0x920 [ 99.873193][ T5927] ext4_xattr_block_set+0x273a/0x32a0 [ 99.880393][ T5927] ? __might_sleep+0xe0/0xe0 [ 99.886371][ T5927] ? xattr_find_entry+0x12b/0x2f0 [ 99.892875][ T5927] ? ext4_xattr_block_find+0x350/0x350 [ 99.899447][ T5927] ? ext4_xattr_block_find+0x2d4/0x350 [ 99.905753][ T5927] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 99.912876][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 99.919629][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 99.925951][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 99.931038][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 99.936292][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 99.942879][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 99.949438][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 99.957053][ T5927] evict+0x486/0x870 [ 99.961704][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 99.968254][ T5927] ? proc_nr_inodes+0x230/0x230 [ 99.973842][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 99.981175][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 99.987559][ T5927] ? iput+0x70a/0x920 [ 99.992649][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 99.999093][ T5927] ? ext4_orphan_del+0xba0/0xba0 [ 100.006124][ T5927] ? ext4_register_li_request+0x183/0x940 [ 100.013769][ T5927] ? errseq_check_and_advance+0x66/0x120 [ 100.022113][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 100.028359][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.034969][ T5927] ? __might_sleep+0xe0/0xe0 [ 100.040885][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 100.048727][ T5927] ? snprintf+0xdb/0x120 [ 100.053976][ T5927] ? vscnprintf+0x80/0x80 [ 100.058675][ T5927] ? down_write+0x162/0x1f0 [ 100.064112][ T5927] ? down_read_killable+0x340/0x340 [ 100.072632][ T5927] ? setup_bdev_super+0x56b/0x660 [ 100.078326][ T5927] get_tree_bdev+0x3e4/0x510 [ 100.086098][ T5927] ? vfs_parse_fs_string+0x160/0x160 [ 100.095722][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.103333][ T5927] ? setup_bdev_super+0x660/0x660 [ 100.108932][ T5927] ? apparmor_capable+0x137/0x1a0 [ 100.115205][ T5927] ? bpf_lsm_capable+0x9/0x10 [ 100.120402][ T5927] ? security_capable+0x89/0xb0 [ 100.128231][ T5927] vfs_get_tree+0x8c/0x280 [ 100.134981][ T5927] do_new_mount+0x24b/0xa40 [ 100.141653][ T5927] __se_sys_mount+0x2da/0x3c0 [ 100.147870][ T5927] ? __x64_sys_mount+0xc0/0xc0 [ 100.153058][ T5927] ? lockdep_hardirqs_on+0x98/0x150 [ 100.158555][ T5927] ? __x64_sys_mount+0x20/0xc0 [ 100.164570][ T5927] do_syscall_64+0x55/0xb0 [ 100.170877][ T5927] ? clear_bhb_loop+0x40/0x90 [ 100.176446][ T5927] ? clear_bhb_loop+0x40/0x90 [ 100.183104][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.190852][ T5927] RIP: 0033:0x7fd9f7790eea [ 100.195783][ T5927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.218082][ T5927] RSP: 002b:00007ffd41bfd718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.228373][ T5927] RAX: ffffffffffffffda RBX: 00007ffd41bfd7a0 RCX: 00007fd9f7790eea [ 100.237256][ T5927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd41bfd760 [ 100.246493][ T5927] RBP: 0000200000000180 R08: 00007ffd41bfd7a0 R09: 0000000000800700 [ 100.255729][ T5927] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 100.265590][ T5927] R13: 00007ffd41bfd760 R14: 000000000000046f R15: 000000000000002c [ 100.274339][ T5927] [ 100.287963][ T5927] ------------[ cut here ]------------ [ 100.294141][ T5927] EA inode 11 i_nlink=2 [ 100.294429][ T5927] WARNING: CPU: 0 PID: 5927 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.312206][ T5927] Modules linked in: [ 100.317416][ T5927] CPU: 0 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.326470][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.339769][ T5927] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.347345][ T5927] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 100.369912][ T5927] RSP: 0018:ffffc900034271c0 EFLAGS: 00010246 [ 100.376858][ T5927] RAX: 89007e24782a5f00 RBX: 0000000000000002 RCX: ffff88802ab43c00 [ 100.385563][ T5927] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 100.395189][ T5927] RBP: ffffc900034272b8 R08: ffffc90003426dc7 R09: 1ffff92000684db8 [ 100.404171][ T5927] R10: dffffc0000000000 R11: fffff52000684db9 R12: dffffc0000000000 [ 100.414748][ T5927] R13: ffff88805f48d4a8 R14: ffff88805f48d2b0 R15: ffff88805f48d300 [ 100.424007][ T5927] FS: 0000555567505500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.435278][ T5927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.442250][ T5927] CR2: 00007f7a5abd6000 CR3: 0000000077ecc000 CR4: 00000000003506f0 [ 100.450917][ T5927] Call Trace: [ 100.455158][ T5927] [ 100.459091][ T5927] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 100.465149][ T5927] ? ext4_xattr_inode_iget+0x3df/0x600 [ 100.471431][ T5927] ext4_xattr_set_entry+0xcda/0x1e90 [ 100.477186][ T5927] ext4_xattr_ibody_set+0x254/0x6a0 [ 100.483754][ T5927] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 100.489745][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 100.496093][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 100.501862][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 100.507447][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 100.513247][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 100.519381][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 100.525131][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 100.531704][ T5927] evict+0x486/0x870 [ 100.536007][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 100.541271][ T5927] ? proc_nr_inodes+0x230/0x230 [ 100.546341][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 100.551810][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 100.556842][ T5927] ? iput+0x70a/0x920 [ 100.560888][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 100.566202][ T5927] ? ext4_orphan_del+0xba0/0xba0 [ 100.571213][ T5927] ? ext4_register_li_request+0x183/0x940 [ 100.577037][ T5927] ? errseq_check_and_advance+0x66/0x120 [ 100.583334][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 100.588329][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.594754][ T5927] ? __might_sleep+0xe0/0xe0 [ 100.599508][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 100.605032][ T5927] ? snprintf+0xdb/0x120 [ 100.609320][ T5927] ? vscnprintf+0x80/0x80 [ 100.613773][ T5927] ? down_write+0x162/0x1f0 [ 100.618497][ T5927] ? down_read_killable+0x340/0x340 [ 100.623860][ T5927] ? setup_bdev_super+0x56b/0x660 [ 100.629094][ T5927] get_tree_bdev+0x3e4/0x510 [ 100.634228][ T5927] ? vfs_parse_fs_string+0x160/0x160 [ 100.639878][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.646428][ T5927] ? setup_bdev_super+0x660/0x660 [ 100.651506][ T5927] ? apparmor_capable+0x137/0x1a0 [ 100.656974][ T5927] ? bpf_lsm_capable+0x9/0x10 [ 100.661975][ T5927] ? security_capable+0x89/0xb0 [ 100.667171][ T5927] vfs_get_tree+0x8c/0x280 [ 100.671651][ T5927] do_new_mount+0x24b/0xa40 [ 100.676480][ T5927] __se_sys_mount+0x2da/0x3c0 [ 100.681389][ T5927] ? __x64_sys_mount+0xc0/0xc0 [ 100.686936][ T5927] ? lockdep_hardirqs_on+0x98/0x150 [ 100.692186][ T5927] ? __x64_sys_mount+0x20/0xc0 [ 100.697288][ T5927] do_syscall_64+0x55/0xb0 [ 100.701828][ T5927] ? clear_bhb_loop+0x40/0x90 [ 100.707185][ T5927] ? clear_bhb_loop+0x40/0x90 [ 100.712014][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.718538][ T5927] RIP: 0033:0x7fd9f7790eea [ 100.723140][ T5927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.744203][ T5927] RSP: 002b:00007ffd41bfd718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.753379][ T5927] RAX: ffffffffffffffda RBX: 00007ffd41bfd7a0 RCX: 00007fd9f7790eea [ 100.762834][ T5927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd41bfd760 [ 100.771129][ T5927] RBP: 0000200000000180 R08: 00007ffd41bfd7a0 R09: 0000000000800700 [ 100.780708][ T5927] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 100.789021][ T5927] R13: 00007ffd41bfd760 R14: 000000000000046f R15: 000000000000002c [ 100.797617][ T5927] [ 100.801201][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.808880][ T5927] CPU: 0 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.816740][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.827351][ T5927] Call Trace: [ 100.831260][ T5927] [ 100.834315][ T5927] dump_stack_lvl+0x16c/0x230 [ 100.840005][ T5927] ? show_regs_print_info+0x20/0x20 [ 100.845592][ T5927] ? load_image+0x3b0/0x3b0 [ 100.851569][ T5927] panic+0x2c0/0x710 [ 100.856082][ T5927] ? bpf_jit_dump+0xd0/0xd0 [ 100.860820][ T5927] __warn+0x2e0/0x470 [ 100.865280][ T5927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.871664][ T5927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.878746][ T5927] report_bug+0x2be/0x4f0 [ 100.883305][ T5927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.890657][ T5927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.897302][ T5927] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 100.904320][ T5927] handle_bug+0xcf/0x120 [ 100.909134][ T5927] exc_invalid_op+0x1a/0x50 [ 100.914175][ T5927] asm_exc_invalid_op+0x1a/0x20 [ 100.919172][ T5927] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.926081][ T5927] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 100.947111][ T5927] RSP: 0018:ffffc900034271c0 EFLAGS: 00010246 [ 100.953549][ T5927] RAX: 89007e24782a5f00 RBX: 0000000000000002 RCX: ffff88802ab43c00 [ 100.961830][ T5927] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 100.970233][ T5927] RBP: ffffc900034272b8 R08: ffffc90003426dc7 R09: 1ffff92000684db8 [ 100.978544][ T5927] R10: dffffc0000000000 R11: fffff52000684db9 R12: dffffc0000000000 [ 100.986768][ T5927] R13: ffff88805f48d4a8 R14: ffff88805f48d2b0 R15: ffff88805f48d300 [ 100.995240][ T5927] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 101.000921][ T5927] ? ext4_xattr_inode_iget+0x3df/0x600 [ 101.007231][ T5927] ext4_xattr_set_entry+0xcda/0x1e90 [ 101.012763][ T5927] ext4_xattr_ibody_set+0x254/0x6a0 [ 101.018023][ T5927] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 101.024255][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 101.030209][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 101.035964][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 101.040877][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 101.045940][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 101.051971][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 101.057740][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 101.064390][ T5927] evict+0x486/0x870 [ 101.068415][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 101.073758][ T5927] ? proc_nr_inodes+0x230/0x230 [ 101.078754][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 101.084162][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 101.089382][ T5927] ? iput+0x70a/0x920 [ 101.093398][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 101.098847][ T5927] ? ext4_orphan_del+0xba0/0xba0 [ 101.103870][ T5927] ? ext4_register_li_request+0x183/0x940 [ 101.110231][ T5927] ? errseq_check_and_advance+0x66/0x120 [ 101.116266][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 101.121418][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.128023][ T5927] ? __might_sleep+0xe0/0xe0 [ 101.132732][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 101.138789][ T5927] ? snprintf+0xdb/0x120 [ 101.143145][ T5927] ? vscnprintf+0x80/0x80 [ 101.148279][ T5927] ? down_write+0x162/0x1f0 [ 101.152910][ T5927] ? down_read_killable+0x340/0x340 [ 101.158304][ T5927] ? setup_bdev_super+0x56b/0x660 [ 101.163373][ T5927] get_tree_bdev+0x3e4/0x510 [ 101.168275][ T5927] ? vfs_parse_fs_string+0x160/0x160 [ 101.174454][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.181300][ T5927] ? setup_bdev_super+0x660/0x660 [ 101.186368][ T5927] ? apparmor_capable+0x137/0x1a0 [ 101.191458][ T5927] ? bpf_lsm_capable+0x9/0x10 [ 101.196159][ T5927] ? security_capable+0x89/0xb0 [ 101.201111][ T5927] vfs_get_tree+0x8c/0x280 [ 101.205543][ T5927] do_new_mount+0x24b/0xa40 [ 101.210064][ T5927] __se_sys_mount+0x2da/0x3c0 [ 101.214851][ T5927] ? __x64_sys_mount+0xc0/0xc0 [ 101.219828][ T5927] ? lockdep_hardirqs_on+0x98/0x150 [ 101.225147][ T5927] ? __x64_sys_mount+0x20/0xc0 [ 101.230012][ T5927] do_syscall_64+0x55/0xb0 [ 101.234721][ T5927] ? clear_bhb_loop+0x40/0x90 [ 101.239468][ T5927] ? clear_bhb_loop+0x40/0x90 [ 101.244634][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.251184][ T5927] RIP: 0033:0x7fd9f7790eea [ 101.255831][ T5927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.276349][ T5927] RSP: 002b:00007ffd41bfd718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.284847][ T5927] RAX: ffffffffffffffda RBX: 00007ffd41bfd7a0 RCX: 00007fd9f7790eea [ 101.293264][ T5927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd41bfd760 [ 101.301795][ T5927] RBP: 0000200000000180 R08: 00007ffd41bfd7a0 R09: 0000000000800700 [ 101.309977][ T5927] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 101.318164][ T5927] R13: 00007ffd41bfd760 R14: 000000000000046f R15: 000000000000002c [ 101.326878][ T5927] [ 101.330169][ T5927] Kernel Offset: disabled [ 101.334615][ T5927] Rebooting in 86400 seconds..