[ 87.305038][ T1231] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 2025/11/27 17:28:51 parsed 1 programs [ 95.025812][ T5808] cgroup: Unknown subsys name 'net' [ 95.276509][ T5808] cgroup: Unknown subsys name 'cpuset' [ 95.322396][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.231319][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.604745][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.604770][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.748546][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.748566][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.653245][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 104.242247][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.243651][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.243792][ T5852] bridge_slave_0: entered allmulticast mode [ 104.245499][ T5852] bridge_slave_0: entered promiscuous mode [ 104.251152][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.251283][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.251397][ T5852] bridge_slave_1: entered allmulticast mode [ 104.257275][ T5852] bridge_slave_1: entered promiscuous mode [ 104.435395][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.474998][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.616066][ T5852] team0: Port device team_slave_0 added [ 104.619475][ T5852] team0: Port device team_slave_1 added [ 104.794435][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.794447][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.794460][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.797891][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.797906][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.797929][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.048974][ T5852] hsr_slave_0: entered promiscuous mode [ 105.050071][ T5852] hsr_slave_1: entered promiscuous mode [ 105.670426][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.719778][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.736269][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.775928][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.909281][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.935536][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.943690][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.944335][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.964441][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.964593][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.190552][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.244355][ T5852] veth0_vlan: entered promiscuous mode [ 106.250220][ T5852] veth1_vlan: entered promiscuous mode [ 106.293218][ T5852] veth0_macvtap: entered promiscuous mode [ 106.296753][ T5852] veth1_macvtap: entered promiscuous mode [ 106.318474][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.334877][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.354766][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.356714][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.407706][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.410165][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.036255][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.295647][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.544069][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.389035][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.625642][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.627726][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.628603][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.629983][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.630959][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.675285][ T13] bridge_slave_1: left allmulticast mode [ 109.675439][ T13] bridge_slave_1: left promiscuous mode [ 109.677133][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.762625][ T13] bridge_slave_0: left allmulticast mode [ 109.762646][ T13] bridge_slave_0: left promiscuous mode [ 109.762805][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.452257][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.512477][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.533833][ T13] bond0 (unregistering): Released all slaves [ 111.911709][ T13] hsr_slave_0: left promiscuous mode [ 111.954771][ T13] hsr_slave_1: left promiscuous mode [ 111.957056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.957147][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.013612][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.013638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.109257][ T13] veth1_macvtap: left promiscuous mode [ 112.109513][ T13] veth0_macvtap: left promiscuous mode [ 112.109812][ T13] veth1_vlan: left promiscuous mode [ 112.110108][ T13] veth0_vlan: left promiscuous mode [ 114.092232][ T13] team0 (unregistering): Port device team_slave_1 removed [ 114.282488][ T13] team0 (unregistering): Port device team_slave_0 removed 2025/11/27 17:29:16 executed programs: 0 [ 117.188430][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.197948][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.198979][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.200283][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.201311][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.060810][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 118.426846][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.427007][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.427120][ T5948] bridge_slave_0: entered allmulticast mode [ 118.428631][ T5948] bridge_slave_0: entered promiscuous mode [ 118.431230][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.434877][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.435075][ T5948] bridge_slave_1: entered allmulticast mode [ 118.437767][ T5948] bridge_slave_1: entered promiscuous mode [ 118.638625][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.654287][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.875725][ T5948] team0: Port device team_slave_0 added [ 118.881409][ T5948] team0: Port device team_slave_1 added [ 119.084561][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.084577][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.084597][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.086896][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.086909][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.086930][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.229538][ T61] Bluetooth: hci0: command tx timeout [ 119.383436][ T5948] hsr_slave_0: entered promiscuous mode [ 119.384873][ T5948] hsr_slave_1: entered promiscuous mode [ 121.303361][ T61] Bluetooth: hci0: command tx timeout [ 121.493300][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.548851][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.599051][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.635948][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.799735][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.832831][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.839861][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.840172][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.875157][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.875372][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.210460][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.299566][ T5948] veth0_vlan: entered promiscuous mode [ 122.314232][ T5948] veth1_vlan: entered promiscuous mode [ 122.364937][ T5948] veth0_macvtap: entered promiscuous mode [ 122.385609][ T5948] veth1_macvtap: entered promiscuous mode [ 122.412261][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.427250][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.451486][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.453994][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.456016][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.459944][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.681944][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.681961][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.731409][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.731569][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/27 17:29:22 executed programs: 2 [ 122.910931][ T6061] loop0: detected capacity change from 0 to 512 [ 123.036659][ T6061] [ 123.036671][ T6061] ====================================================== [ 123.036677][ T6061] WARNING: possible circular locking dependency detected [ 123.036692][ T6061] syzkaller #0 Not tainted [ 123.036699][ T6061] ------------------------------------------------------ [ 123.036706][ T6061] syz.0.17/6061 is trying to acquire lock: [ 123.036716][ T6061] ffff88803555cc58 (&sbi->s_writepages_rwsem){++[ 123.036716][ T6061] ffff88803555cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 123.036767][ T6061] [ 123.036767][ T6061] but task is already holding lock: [ 123.036772][ T6061] ffff8880484fdf78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 123.036810][ T6061] [ 123.036810][ T6061] which lock already depends on the new lock. [ 123.036810][ T6061] [ 123.036816][ T6061] [ 123.036816][ T6061] the existing dependency chain (in reverse order) is: [ 123.036821][ T6061] [ 123.036821][ T6061] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 123.036843][ T6061] lock_acquire+0x120/0x360 [ 123.036862][ T6061] down_write+0x3a/0x50 [ 123.036877][ T6061] ext4_xattr_set_handle+0x165/0x1590 [ 123.036897][ T6061] ext4_initxattrs+0x9f/0x110 [ 123.036914][ T6061] security_inode_init_security+0x2a0/0x3f0 [ 123.036935][ T6061] __ext4_new_inode+0x3314/0x3cb0 [ 123.036957][ T6061] ext4_create+0x22d/0x460 [ 123.036974][ T6061] path_openat+0x1500/0x3840 [ 123.036991][ T6061] do_filp_open+0x1fa/0x410 [ 123.037006][ T6061] do_sys_openat2+0x121/0x1c0 [ 123.037021][ T6061] __x64_sys_openat+0x138/0x170 [ 123.037035][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.037055][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.037070][ T6061] [ 123.037070][ T6061] -> #1 (jbd2_handle){++++}-{0:0}: [ 123.037093][ T6061] lock_acquire+0x120/0x360 [ 123.037111][ T6061] start_this_handle+0x1fa7/0x21c0 [ 123.037129][ T6061] jbd2__journal_start+0x2c1/0x5b0 [ 123.037148][ T6061] __ext4_journal_start_sb+0x227/0x5c0 [ 123.037170][ T6061] ext4_do_writepages+0xf6f/0x4600 [ 123.037189][ T6061] ext4_writepages+0x205/0x350 [ 123.037204][ T6061] do_writepages+0x32e/0x550 [ 123.037219][ T6061] file_write_and_wait_range+0x244/0x340 [ 123.037237][ T6061] ext4_sync_file+0x2b4/0xb20 [ 123.037258][ T6061] __x64_sys_fsync+0x194/0x1f0 [ 123.037272][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.037292][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.037307][ T6061] [ 123.037307][ T6061] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 123.037329][ T6061] validate_chain+0xb9b/0x2140 [ 123.037343][ T6061] __lock_acquire+0xab9/0xd20 [ 123.037361][ T6061] lock_acquire+0x120/0x360 [ 123.037379][ T6061] percpu_down_read_internal+0x48/0x1d0 [ 123.037393][ T6061] ext4_writepages+0x1cc/0x350 [ 123.037408][ T6061] do_writepages+0x32e/0x550 [ 123.037423][ T6061] __writeback_single_inode+0x145/0x1000 [ 123.037442][ T6061] writeback_single_inode+0x1db/0x640 [ 123.037458][ T6061] write_inode_now+0x160/0x1d0 [ 123.037472][ T6061] iput+0x830/0xc50 [ 123.037492][ T6061] ext4_xattr_block_set+0x1fce/0x2ac0 [ 123.037513][ T6061] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 123.037536][ T6061] __ext4_expand_extra_isize+0x30d/0x400 [ 123.037550][ T6061] __ext4_mark_inode_dirty+0x46c/0x700 [ 123.037573][ T6061] ext4_evict_inode+0x80d/0xee0 [ 123.037590][ T6061] evict+0x504/0x9c0 [ 123.037605][ T6061] ext4_orphan_cleanup+0xc20/0x1460 [ 123.037622][ T6061] ext4_fill_super+0x593b/0x61f0 [ 123.037636][ T6061] get_tree_bdev_flags+0x40e/0x4d0 [ 123.037655][ T6061] vfs_get_tree+0x92/0x2b0 [ 123.037672][ T6061] do_new_mount+0x302/0xa10 [ 123.037691][ T6061] __se_sys_mount+0x313/0x410 [ 123.037711][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.037730][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.037746][ T6061] [ 123.037746][ T6061] other info that might help us debug this: [ 123.037746][ T6061] [ 123.037752][ T6061] Chain exists of: [ 123.037752][ T6061] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 123.037752][ T6061] [ 123.037779][ T6061] Possible unsafe locking scenario: [ 123.037779][ T6061] [ 123.037785][ T6061] CPU0 CPU1 [ 123.037790][ T6061] ---- ---- [ 123.037795][ T6061] lock(&ei->xattr_sem); [ 123.037807][ T6061] lock(jbd2_handle); [ 123.037819][ T6061] lock(&ei->xattr_sem); [ 123.037832][ T6061] rlock(&sbi->s_writepages_rwsem); [ 123.037843][ T6061] [ 123.037843][ T6061] *** DEADLOCK *** [ 123.037843][ T6061] [ 123.037848][ T6061] 3 locks held by syz.0.17/6061: [ 123.037858][ T6061] #0: ffff88803555a0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 123.037907][ T6061] #1: ffff88803555a770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 123.037948][ T6061] #2: ffff8880484fdf78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 123.037990][ T6061] [ 123.037990][ T6061] stack backtrace: [ 123.038011][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.038030][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.038047][ T6061] Call Trace: [ 123.038057][ T6061] [ 123.038064][ T6061] dump_stack_lvl+0x189/0x250 [ 123.038095][ T6061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.038119][ T6061] ? __pfx__printk+0x10/0x10 [ 123.038139][ T6061] ? print_lock_name+0xde/0x100 [ 123.038159][ T6061] print_circular_bug+0x2ee/0x310 [ 123.038177][ T6061] check_noncircular+0x134/0x160 [ 123.038196][ T6061] validate_chain+0xb9b/0x2140 [ 123.038215][ T6061] ? look_up_lock_class+0x74/0x170 [ 123.038238][ T6061] ? register_lock_class+0x51/0x320 [ 123.038261][ T6061] __lock_acquire+0xab9/0xd20 [ 123.038284][ T6061] ? ext4_writepages+0x1cc/0x350 [ 123.038300][ T6061] lock_acquire+0x120/0x360 [ 123.038318][ T6061] ? ext4_writepages+0x1cc/0x350 [ 123.038336][ T6061] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 123.038361][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.038384][ T6061] percpu_down_read_internal+0x48/0x1d0 [ 123.038400][ T6061] ? ext4_writepages+0x1cc/0x350 [ 123.038417][ T6061] ext4_writepages+0x1cc/0x350 [ 123.038435][ T6061] ? __pfx_ext4_writepages+0x10/0x10 [ 123.038450][ T6061] ? rt_mutex_slowunlock+0x493/0x8a0 [ 123.038473][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.038494][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.038512][ T6061] ? __pfx_ext4_writepages+0x10/0x10 [ 123.038529][ T6061] do_writepages+0x32e/0x550 [ 123.038546][ T6061] ? reacquire_held_locks+0x127/0x1d0 [ 123.038575][ T6061] ? rt_spin_lock+0x1c1/0x3e0 [ 123.038594][ T6061] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 123.038616][ T6061] __writeback_single_inode+0x145/0x1000 [ 123.038639][ T6061] writeback_single_inode+0x1db/0x640 [ 123.038671][ T6061] write_inode_now+0x160/0x1d0 [ 123.038688][ T6061] ? __pfx_write_inode_now+0x10/0x10 [ 123.038718][ T6061] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 123.038738][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.038758][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.038778][ T6061] iput+0x830/0xc50 [ 123.038803][ T6061] ext4_xattr_block_set+0x1fce/0x2ac0 [ 123.038840][ T6061] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 123.038865][ T6061] ? ext4_xattr_block_find+0x2d4/0x350 [ 123.038888][ T6061] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 123.038926][ T6061] __ext4_expand_extra_isize+0x30d/0x400 [ 123.038943][ T6061] __ext4_mark_inode_dirty+0x46c/0x700 [ 123.038964][ T6061] ext4_evict_inode+0x80d/0xee0 [ 123.038983][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.038999][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.039014][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.039029][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.039044][ T6061] evict+0x504/0x9c0 [ 123.039062][ T6061] ? __pfx_evict+0x10/0x10 [ 123.039076][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.039092][ T6061] ? iput+0x946/0xc50 [ 123.039114][ T6061] ext4_orphan_cleanup+0xc20/0x1460 [ 123.039138][ T6061] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 123.039156][ T6061] ? ext4_register_li_request+0x640/0x720 [ 123.039174][ T6061] ? errseq_check_and_advance+0x66/0x120 [ 123.039194][ T6061] ext4_fill_super+0x593b/0x61f0 [ 123.039219][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.039235][ T6061] ? snprintf+0xda/0x120 [ 123.039250][ T6061] ? rt_spin_lock+0x1c1/0x3e0 [ 123.039269][ T6061] ? __pfx_snprintf+0x10/0x10 [ 123.039286][ T6061] ? set_blocksize+0x219/0x450 [ 123.039308][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.039327][ T6061] ? sb_set_blocksize+0x104/0x180 [ 123.039348][ T6061] ? setup_bdev_super+0x4c1/0x5b0 [ 123.039368][ T6061] get_tree_bdev_flags+0x40e/0x4d0 [ 123.039388][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.039403][ T6061] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 123.039423][ T6061] ? cap_capable+0x11f/0x460 [ 123.039439][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.039459][ T6061] vfs_get_tree+0x92/0x2b0 [ 123.039480][ T6061] do_new_mount+0x302/0xa10 [ 123.039499][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.039516][ T6061] ? __pfx_do_new_mount+0x10/0x10 [ 123.039537][ T6061] ? ns_capable+0x8a/0xf0 [ 123.039570][ T6061] __se_sys_mount+0x313/0x410 [ 123.039593][ T6061] ? __pfx___se_sys_mount+0x10/0x10 [ 123.039615][ T6061] ? do_syscall_64+0xbe/0xfa0 [ 123.039636][ T6061] ? __x64_sys_mount+0x20/0xc0 [ 123.039659][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.039679][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.039700][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.039716][ T6061] ? clear_bhb_loop+0x60/0xb0 [ 123.039733][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.039750][ T6061] RIP: 0033:0x7f8ead8d0eea [ 123.039773][ T6061] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.039787][ T6061] RSP: 002b:00007fffd8c8bff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.039804][ T6061] RAX: ffffffffffffffda RBX: 00007fffd8c8c080 RCX: 00007f8ead8d0eea [ 123.039816][ T6061] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007fffd8c8c040 [ 123.039828][ T6061] RBP: 0000200000000140 R08: 00007fffd8c8c080 R09: 0000000000800700 [ 123.039839][ T6061] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 123.039850][ T6061] R13: 00007fffd8c8c040 R14: 000000000000046f R15: 00002000000004c0 [ 123.039869][ T6061] [ 123.078740][ T6061] ------------[ cut here ]------------ [ 123.078753][ T6061] EA inode 11 i_nlink=2 [ 123.078969][ T6061] WARNING: CPU: 1 PID: 6061 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.079000][ T6061] Modules linked in: [ 123.079017][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.079037][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.079047][ T6061] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.079064][ T6061] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 3a 41 08 44 89 f9 [ 123.079078][ T6061] RSP: 0018:ffffc90004207100 EFLAGS: 00010246 [ 123.079092][ T6061] RAX: e86031a48624d700 RBX: 0000000000000001 RCX: ffff8880327e8000 [ 123.079104][ T6061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.079114][ T6061] RBP: ffffc900042071f8 R08: 0000000000000000 R09: 0000000000000000 [ 123.079125][ T6061] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 123.079136][ T6061] R13: ffff888048711028 R14: 1ffff110090e21eb R15: ffff888048710f58 [ 123.079149][ T6061] FS: 0000555556e12500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 123.079163][ T6061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.079175][ T6061] CR2: 00007f55fdbdf000 CR3: 000000003f272000 CR4: 00000000003526f0 [ 123.079190][ T6061] Call Trace: [ 123.079197][ T6061] [ 123.079204][ T6061] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 123.079225][ T6061] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 123.079242][ T6061] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 123.079268][ T6061] ext4_xattr_set_entry+0xabb/0x1e20 [ 123.079298][ T6061] ext4_xattr_ibody_set+0x254/0x6a0 [ 123.079332][ T6061] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 123.079369][ T6061] __ext4_expand_extra_isize+0x30d/0x400 [ 123.079388][ T6061] __ext4_mark_inode_dirty+0x46c/0x700 [ 123.079413][ T6061] ext4_evict_inode+0x80d/0xee0 [ 123.079436][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.079453][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.079474][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.079493][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.079510][ T6061] evict+0x504/0x9c0 [ 123.079530][ T6061] ? __pfx_evict+0x10/0x10 [ 123.079545][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.079564][ T6061] ? iput+0x946/0xc50 [ 123.079595][ T6061] ext4_orphan_cleanup+0xc20/0x1460 [ 123.079618][ T6061] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 123.079637][ T6061] ? ext4_register_li_request+0x640/0x720 [ 123.079656][ T6061] ? errseq_check_and_advance+0x66/0x120 [ 123.079676][ T6061] ext4_fill_super+0x593b/0x61f0 [ 123.079700][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.079716][ T6061] ? snprintf+0xda/0x120 [ 123.079731][ T6061] ? rt_spin_lock+0x1c1/0x3e0 [ 123.079751][ T6061] ? __pfx_snprintf+0x10/0x10 [ 123.079767][ T6061] ? set_blocksize+0x219/0x450 [ 123.079789][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.079809][ T6061] ? sb_set_blocksize+0x104/0x180 [ 123.079831][ T6061] ? setup_bdev_super+0x4c1/0x5b0 [ 123.079852][ T6061] get_tree_bdev_flags+0x40e/0x4d0 [ 123.079872][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.079888][ T6061] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 123.079907][ T6061] ? cap_capable+0x11f/0x460 [ 123.079923][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.079942][ T6061] vfs_get_tree+0x92/0x2b0 [ 123.079962][ T6061] do_new_mount+0x302/0xa10 [ 123.079982][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.080000][ T6061] ? __pfx_do_new_mount+0x10/0x10 [ 123.080020][ T6061] ? ns_capable+0x8a/0xf0 [ 123.080045][ T6061] __se_sys_mount+0x313/0x410 [ 123.080068][ T6061] ? __pfx___se_sys_mount+0x10/0x10 [ 123.080091][ T6061] ? do_syscall_64+0xbe/0xfa0 [ 123.080112][ T6061] ? __x64_sys_mount+0x20/0xc0 [ 123.080133][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.080153][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.080174][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.080191][ T6061] ? clear_bhb_loop+0x60/0xb0 [ 123.080208][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.080224][ T6061] RIP: 0033:0x7f8ead8d0eea [ 123.080239][ T6061] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.080252][ T6061] RSP: 002b:00007fffd8c8bff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.080268][ T6061] RAX: ffffffffffffffda RBX: 00007fffd8c8c080 RCX: 00007f8ead8d0eea [ 123.080280][ T6061] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007fffd8c8c040 [ 123.080292][ T6061] RBP: 0000200000000140 R08: 00007fffd8c8c080 R09: 0000000000800700 [ 123.080304][ T6061] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 123.080320][ T6061] R13: 00007fffd8c8c040 R14: 000000000000046f R15: 00002000000004c0 [ 123.080339][ T6061] [ 123.080348][ T6061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.080359][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.080378][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.080387][ T6061] Call Trace: [ 123.080393][ T6061] [ 123.080400][ T6061] dump_stack_lvl+0x99/0x250 [ 123.080424][ T6061] ? __asan_memcpy+0x40/0x70 [ 123.080442][ T6061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.080464][ T6061] ? __pfx__printk+0x10/0x10 [ 123.080487][ T6061] vpanic+0x237/0x6d0 [ 123.080502][ T6061] ? __pfx_vpanic+0x10/0x10 [ 123.080521][ T6061] panic+0xb9/0xc0 [ 123.080536][ T6061] ? __pfx_panic+0x10/0x10 [ 123.080556][ T6061] __warn+0x31b/0x4b0 [ 123.080577][ T6061] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.080595][ T6061] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.080611][ T6061] report_bug+0x2be/0x4f0 [ 123.080632][ T6061] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.080648][ T6061] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.080663][ T6061] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 123.080679][ T6061] handle_bug+0x84/0x160 [ 123.080695][ T6061] exc_invalid_op+0x1a/0x50 [ 123.080711][ T6061] asm_exc_invalid_op+0x1a/0x20 [ 123.080726][ T6061] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 123.080744][ T6061] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 3a 41 08 44 89 f9 [ 123.080756][ T6061] RSP: 0018:ffffc90004207100 EFLAGS: 00010246 [ 123.080770][ T6061] RAX: e86031a48624d700 RBX: 0000000000000001 RCX: ffff8880327e8000 [ 123.080782][ T6061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.080792][ T6061] RBP: ffffc900042071f8 R08: 0000000000000000 R09: 0000000000000000 [ 123.080803][ T6061] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 123.080815][ T6061] R13: ffff888048711028 R14: 1ffff110090e21eb R15: ffff888048710f58 [ 123.080835][ T6061] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 123.080854][ T6061] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 123.080871][ T6061] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 123.080897][ T6061] ext4_xattr_set_entry+0xabb/0x1e20 [ 123.080928][ T6061] ext4_xattr_ibody_set+0x254/0x6a0 [ 123.080953][ T6061] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 123.080991][ T6061] __ext4_expand_extra_isize+0x30d/0x400 [ 123.081010][ T6061] __ext4_mark_inode_dirty+0x46c/0x700 [ 123.081035][ T6061] ext4_evict_inode+0x80d/0xee0 [ 123.081058][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.081075][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.081095][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.081113][ T6061] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.081132][ T6061] evict+0x504/0x9c0 [ 123.081151][ T6061] ? __pfx_evict+0x10/0x10 [ 123.081167][ T6061] ? rt_spin_unlock+0x161/0x200 [ 123.081185][ T6061] ? iput+0x946/0xc50 [ 123.081209][ T6061] ext4_orphan_cleanup+0xc20/0x1460 [ 123.081233][ T6061] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 123.081252][ T6061] ? ext4_register_li_request+0x640/0x720 [ 123.081270][ T6061] ? errseq_check_and_advance+0x66/0x120 [ 123.081289][ T6061] ext4_fill_super+0x593b/0x61f0 [ 123.081314][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.081335][ T6061] ? snprintf+0xda/0x120 [ 123.081351][ T6061] ? rt_spin_lock+0x1c1/0x3e0 [ 123.081371][ T6061] ? __pfx_snprintf+0x10/0x10 [ 123.081387][ T6061] ? set_blocksize+0x219/0x450 [ 123.081409][ T6061] ? rt_spin_unlock+0x150/0x200 [ 123.081431][ T6061] ? sb_set_blocksize+0x104/0x180 [ 123.081450][ T6061] ? setup_bdev_super+0x4c1/0x5b0 [ 123.081467][ T6061] get_tree_bdev_flags+0x40e/0x4d0 [ 123.081484][ T6061] ? __pfx_ext4_fill_super+0x10/0x10 [ 123.081498][ T6061] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 123.081516][ T6061] ? cap_capable+0x11f/0x460 [ 123.081530][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.081548][ T6061] vfs_get_tree+0x92/0x2b0 [ 123.081574][ T6061] do_new_mount+0x302/0xa10 [ 123.081594][ T6061] ? safesetid_security_capable+0xa9/0x1a0 [ 123.081612][ T6061] ? __pfx_do_new_mount+0x10/0x10 [ 123.081632][ T6061] ? ns_capable+0x8a/0xf0 [ 123.081657][ T6061] __se_sys_mount+0x313/0x410 [ 123.081681][ T6061] ? __pfx___se_sys_mount+0x10/0x10 [ 123.081703][ T6061] ? do_syscall_64+0xbe/0xfa0 [ 123.081724][ T6061] ? __x64_sys_mount+0x20/0xc0 [ 123.081746][ T6061] do_syscall_64+0xfa/0xfa0 [ 123.081767][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.081788][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.081803][ T6061] ? clear_bhb_loop+0x60/0xb0 [ 123.081821][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.081837][ T6061] RIP: 0033:0x7f8ead8d0eea [ 123.081850][ T6061] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.081863][ T6061] RSP: 002b:00007fffd8c8bff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.081880][ T6061] RAX: ffffffffffffffda RBX: 00007fffd8c8c080 RCX: 00007f8ead8d0eea [ 123.081892][ T6061] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007fffd8c8c040 [ 123.081904][ T6061] RBP: 0000200000000140 R08: 00007fffd8c8c080 R09: 0000000000800700 [ 123.081916][ T6061] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 123.081928][ T6061] R13: 00007fffd8c8c040 R14: 000000000000046f R15: 00002000000004c0 [ 123.081946][ T6061] [ 123.082384][ T6061] Kernel Offset: disabled