Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2025/12/31 23:48:36 parsed 1 programs [ 66.786199][ T5764] cgroup: Unknown subsys name 'net' [ 66.919900][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.354464][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.072139][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 70.132649][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.140375][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.148123][ T5781] bridge_slave_0: entered allmulticast mode [ 70.155971][ T5781] bridge_slave_0: entered promiscuous mode [ 70.165056][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.172201][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.179814][ T5781] bridge_slave_1: entered allmulticast mode [ 70.187106][ T5781] bridge_slave_1: entered promiscuous mode [ 70.217293][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.228854][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.255969][ T5781] team0: Port device team_slave_0 added [ 70.267463][ T5781] team0: Port device team_slave_1 added [ 70.290595][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.297611][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.323576][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.336170][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.343153][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.369079][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.407338][ T5781] hsr_slave_0: entered promiscuous mode [ 70.414458][ T5781] hsr_slave_1: entered promiscuous mode [ 70.539372][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.550463][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.559866][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.570061][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.601017][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.608415][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.616224][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.623339][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.674648][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.691089][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.701069][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.718918][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.735282][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.742422][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.757118][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.764306][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.920274][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.956228][ T5781] veth0_vlan: entered promiscuous mode [ 70.967041][ T5781] veth1_vlan: entered promiscuous mode [ 70.993588][ T5781] veth0_macvtap: entered promiscuous mode [ 71.002057][ T5781] veth1_macvtap: entered promiscuous mode [ 71.021584][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.036216][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.047743][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.056685][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.066346][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075769][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.219129][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.297569][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.306767][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.335394][ T2107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.343336][ T2107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.486871][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495856][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.532225][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.541046][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.549110][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.557622][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.565475][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.572733][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.010984][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/31 23:48:45 executed programs: 0 [ 74.393454][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.401323][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.409492][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.417512][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.426787][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.434916][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.558460][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 74.612604][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.619823][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.627342][ T5873] bridge_slave_0: entered allmulticast mode [ 74.635021][ T5873] bridge_slave_0: entered promiscuous mode [ 74.644393][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.651510][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.659234][ T5873] bridge_slave_1: entered allmulticast mode [ 74.666659][ T5873] bridge_slave_1: entered promiscuous mode [ 74.691611][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.704263][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.732065][ T5873] team0: Port device team_slave_0 added [ 74.739987][ T5873] team0: Port device team_slave_1 added [ 74.761061][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.768468][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.794430][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.807096][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.814097][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.840013][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.876109][ T5873] hsr_slave_0: entered promiscuous mode [ 74.882298][ T5873] hsr_slave_1: entered promiscuous mode [ 74.890201][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.898481][ T5873] Cannot create hsr debugfs directory [ 76.231953][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.276202][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.525446][ T5833] Bluetooth: hci0: command tx timeout [ 77.189759][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.200152][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.229394][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.240463][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.291681][ T11] hsr_slave_0: left promiscuous mode [ 77.299178][ T11] hsr_slave_1: left promiscuous mode [ 77.307183][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.316376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.325414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.332842][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.341337][ T11] bridge_slave_1: left allmulticast mode [ 77.347415][ T11] bridge_slave_1: left promiscuous mode [ 77.354423][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.367619][ T11] bridge_slave_0: left allmulticast mode [ 77.374799][ T11] bridge_slave_0: left promiscuous mode [ 77.380549][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.409352][ T11] veth1_macvtap: left promiscuous mode [ 77.415393][ T11] veth0_macvtap: left promiscuous mode [ 77.421598][ T11] veth1_vlan: left promiscuous mode [ 77.429149][ T11] veth0_vlan: left promiscuous mode [ 77.787918][ T11] team0 (unregistering): Port device team_slave_1 removed [ 77.820232][ T11] team0 (unregistering): Port device team_slave_0 removed [ 77.849505][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.880955][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.160588][ T11] bond0 (unregistering): Released all slaves [ 78.269716][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.299283][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.312072][ T2107] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.319275][ T2107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.338734][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.345976][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.536869][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.586506][ T5873] veth0_vlan: entered promiscuous mode [ 78.604837][ T5833] Bluetooth: hci0: command tx timeout [ 78.605801][ T5873] veth1_vlan: entered promiscuous mode [ 78.637341][ T5873] veth0_macvtap: entered promiscuous mode [ 78.646328][ T5873] veth1_macvtap: entered promiscuous mode [ 78.661845][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.677570][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.689879][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.700087][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.708927][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.717683][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.798407][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.808213][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.871976][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.880148][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.000541][ T5921] syz.0.17[5921]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.026981][ T5921] loop0: detected capacity change from 0 to 512 [ 79.117340][ T5921] [ 79.119717][ T5921] ====================================================== [ 79.126735][ T5921] WARNING: possible circular locking dependency detected [ 79.133748][ T5921] syzkaller #0 Not tainted [ 79.138142][ T5921] ------------------------------------------------------ [ 79.145138][ T5921] syz.0.17/5921 is trying to acquire lock: [ 79.150927][ T5921] ffff88807b53ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 79.160930][ T5921] [ 79.160930][ T5921] but task is already holding lock: [ 79.168273][ T5921] ffff88807839bcc8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 79.178116][ T5921] [ 79.178116][ T5921] which lock already depends on the new lock. [ 79.178116][ T5921] [ 79.188516][ T5921] [ 79.188516][ T5921] the existing dependency chain (in reverse order) is: [ 79.197516][ T5921] [ 79.197516][ T5921] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 79.205062][ T5921] down_read+0x46/0x2e0 [ 79.209727][ T5921] ext4_setattr+0x86b/0x1c90 [ 79.214848][ T5921] notify_change+0xb0d/0xe10 [ 79.219948][ T5921] chown_common+0x3f9/0x5a0 [ 79.224991][ T5921] do_fchownat+0x168/0x270 [ 79.229912][ T5921] __x64_sys_chown+0x82/0x90 [ 79.235007][ T5921] do_syscall_64+0x55/0xb0 [ 79.239945][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.246379][ T5921] [ 79.246379][ T5921] -> #1 (jbd2_handle){++++}-{0:0}: [ 79.253671][ T5921] start_this_handle+0x1e9d/0x20c0 [ 79.259291][ T5921] jbd2__journal_start+0x2bb/0x5b0 [ 79.264910][ T5921] __ext4_journal_start_sb+0x203/0x570 [ 79.270886][ T5921] ext4_do_writepages+0xf92/0x38d0 [ 79.276505][ T5921] ext4_writepages+0x1a8/0x2f0 [ 79.281775][ T5921] do_writepages+0x3a2/0x600 [ 79.286909][ T5921] filemap_fdatawrite_wbc+0x122/0x180 [ 79.292789][ T5921] file_write_and_wait_range+0x171/0x240 [ 79.298929][ T5921] ext4_sync_file+0x281/0xc10 [ 79.304112][ T5921] __x64_sys_fsync+0x195/0x1d0 [ 79.309644][ T5921] do_syscall_64+0x55/0xb0 [ 79.314563][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.321135][ T5921] [ 79.321135][ T5921] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 79.329546][ T5921] __lock_acquire+0x2ddb/0x7c80 [ 79.334903][ T5921] lock_acquire+0x197/0x410 [ 79.339910][ T5921] percpu_down_read+0x44/0x1a0 [ 79.345179][ T5921] ext4_writepages+0x170/0x2f0 [ 79.350448][ T5921] do_writepages+0x3a2/0x600 [ 79.355546][ T5921] __writeback_single_inode+0x153/0xee0 [ 79.361606][ T5921] writeback_single_inode+0x211/0x720 [ 79.367502][ T5921] write_inode_now+0x161/0x1e0 [ 79.372788][ T5921] iput+0x5b2/0x920 [ 79.377116][ T5921] ext4_xattr_block_set+0x273a/0x32a0 [ 79.383008][ T5921] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 79.389430][ T5921] __ext4_expand_extra_isize+0x306/0x400 [ 79.395593][ T5921] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 79.401586][ T5921] ext4_evict_inode+0x7ed/0xea0 [ 79.406964][ T5921] evict+0x486/0x870 [ 79.411370][ T5921] ext4_orphan_cleanup+0xbd4/0x1400 [ 79.417081][ T5921] ext4_fill_super+0x5de4/0x66c0 [ 79.422527][ T5921] get_tree_bdev+0x3e4/0x510 [ 79.427626][ T5921] vfs_get_tree+0x8c/0x280 [ 79.432561][ T5921] do_new_mount+0x24b/0xa40 [ 79.437596][ T5921] __se_sys_mount+0x2da/0x3c0 [ 79.442784][ T5921] do_syscall_64+0x55/0xb0 [ 79.447705][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.454105][ T5921] [ 79.454105][ T5921] other info that might help us debug this: [ 79.454105][ T5921] [ 79.464408][ T5921] Chain exists of: [ 79.464408][ T5921] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 79.464408][ T5921] [ 79.477777][ T5921] Possible unsafe locking scenario: [ 79.477777][ T5921] [ 79.485206][ T5921] CPU0 CPU1 [ 79.490550][ T5921] ---- ---- [ 79.495897][ T5921] lock(&ei->xattr_sem); [ 79.500219][ T5921] lock(jbd2_handle); [ 79.506789][ T5921] lock(&ei->xattr_sem); [ 79.513619][ T5921] rlock(&sbi->s_writepages_rwsem); [ 79.518887][ T5921] [ 79.518887][ T5921] *** DEADLOCK *** [ 79.518887][ T5921] [ 79.527026][ T5921] 3 locks held by syz.0.17/5921: [ 79.531956][ T5921] #0: ffff88807b57e0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 79.542054][ T5921] #1: ffff88807b57e608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 79.551438][ T5921] #2: ffff88807839bcc8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 79.561687][ T5921] [ 79.561687][ T5921] stack backtrace: [ 79.567578][ T5921] CPU: 1 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.574759][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.584805][ T5921] Call Trace: [ 79.588069][ T5921] [ 79.590992][ T5921] dump_stack_lvl+0x16c/0x230 [ 79.595661][ T5921] ? load_image+0x3b0/0x3b0 [ 79.600150][ T5921] ? show_regs_print_info+0x20/0x20 [ 79.605338][ T5921] ? print_circular_bug+0x12b/0x1a0 [ 79.610522][ T5921] check_noncircular+0x2bd/0x3c0 [ 79.615453][ T5921] ? look_up_lock_class+0x75/0x140 [ 79.620563][ T5921] ? print_deadlock_bug+0x5d0/0x5d0 [ 79.625812][ T5921] ? lockdep_lock+0xe0/0x220 [ 79.630385][ T5921] ? _find_first_zero_bit+0xd3/0x100 [ 79.635661][ T5921] __lock_acquire+0x2ddb/0x7c80 [ 79.640503][ T5921] ? mark_lock+0x94/0x320 [ 79.644818][ T5921] ? verify_lock_unused+0x140/0x140 [ 79.650002][ T5921] ? __lock_acquire+0x1334/0x7c80 [ 79.655008][ T5921] ? verify_lock_unused+0x140/0x140 [ 79.660196][ T5921] lock_acquire+0x197/0x410 [ 79.664684][ T5921] ? ext4_writepages+0x170/0x2f0 [ 79.669616][ T5921] ? __might_sleep+0xe0/0xe0 [ 79.674187][ T5921] ? mark_lock+0x94/0x320 [ 79.678500][ T5921] ? read_lock_is_recursive+0x20/0x20 [ 79.683855][ T5921] ? __lock_acquire+0x1334/0x7c80 [ 79.688872][ T5921] percpu_down_read+0x44/0x1a0 [ 79.693620][ T5921] ? ext4_writepages+0x170/0x2f0 [ 79.698542][ T5921] ext4_writepages+0x170/0x2f0 [ 79.703296][ T5921] ? ext4_read_folio+0x2f0/0x2f0 [ 79.708220][ T5921] ? __rwlock_init+0x150/0x150 [ 79.712964][ T5921] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 79.718846][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 79.724027][ T5921] ? ext4_read_folio+0x2f0/0x2f0 [ 79.728950][ T5921] do_writepages+0x3a2/0x600 [ 79.733533][ T5921] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 79.739242][ T5921] ? writeback_single_inode+0x206/0x720 [ 79.744771][ T5921] ? __lock_acquire+0x7c80/0x7c80 [ 79.749775][ T5921] ? do_raw_spin_lock+0x121/0x2c0 [ 79.754786][ T5921] ? get_tree_bdev+0x3e4/0x510 [ 79.759531][ T5921] __writeback_single_inode+0x153/0xee0 [ 79.765068][ T5921] writeback_single_inode+0x211/0x720 [ 79.770429][ T5921] ? write_inode_now+0x1e0/0x1e0 [ 79.775360][ T5921] write_inode_now+0x161/0x1e0 [ 79.780110][ T5921] ? bdi_split_work_to_wbs+0x890/0x890 [ 79.785558][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 79.790740][ T5921] iput+0x5b2/0x920 [ 79.794532][ T5921] ext4_xattr_block_set+0x273a/0x32a0 [ 79.799899][ T5921] ? __might_sleep+0xe0/0xe0 [ 79.804481][ T5921] ? xattr_find_entry+0x12b/0x2f0 [ 79.809503][ T5921] ? ext4_xattr_block_find+0x350/0x350 [ 79.814948][ T5921] ? ext4_xattr_block_find+0x2d4/0x350 [ 79.820392][ T5921] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 79.826279][ T5921] __ext4_expand_extra_isize+0x306/0x400 [ 79.831900][ T5921] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 79.837348][ T5921] ext4_evict_inode+0x7ed/0xea0 [ 79.842182][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 79.847017][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.852896][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 79.858077][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.863952][ T5921] evict+0x486/0x870 [ 79.867835][ T5921] ? __lock_acquire+0x7c80/0x7c80 [ 79.872845][ T5921] ? proc_nr_inodes+0x230/0x230 [ 79.877679][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 79.882862][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 79.887696][ T5921] ? iput+0x70a/0x920 [ 79.891663][ T5921] ext4_orphan_cleanup+0xbd4/0x1400 [ 79.896852][ T5921] ? ext4_orphan_del+0xba0/0xba0 [ 79.901775][ T5921] ? ext4_register_li_request+0x183/0x940 [ 79.907482][ T5921] ? errseq_check_and_advance+0x66/0x120 [ 79.913105][ T5921] ext4_fill_super+0x5de4/0x66c0 [ 79.918040][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.924262][ T5921] ? __might_sleep+0xe0/0xe0 [ 79.928836][ T5921] ? read_lock_is_recursive+0x20/0x20 [ 79.934188][ T5921] ? snprintf+0xdb/0x120 [ 79.938419][ T5921] ? vscnprintf+0x80/0x80 [ 79.942733][ T5921] ? down_write+0x162/0x1f0 [ 79.947216][ T5921] ? down_read_killable+0x340/0x340 [ 79.952399][ T5921] ? setup_bdev_super+0x56b/0x660 [ 79.957406][ T5921] get_tree_bdev+0x3e4/0x510 [ 79.961979][ T5921] ? vfs_parse_fs_string+0x160/0x160 [ 79.967249][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.973476][ T5921] ? setup_bdev_super+0x660/0x660 [ 79.978484][ T5921] ? apparmor_capable+0x137/0x1a0 [ 79.983491][ T5921] ? bpf_lsm_capable+0x9/0x10 [ 79.988157][ T5921] ? security_capable+0x89/0xb0 [ 79.992997][ T5921] vfs_get_tree+0x8c/0x280 [ 79.997398][ T5921] do_new_mount+0x24b/0xa40 [ 80.001883][ T5921] __se_sys_mount+0x2da/0x3c0 [ 80.006545][ T5921] ? __x64_sys_mount+0xc0/0xc0 [ 80.011288][ T5921] ? lockdep_hardirqs_on+0x98/0x150 [ 80.016470][ T5921] ? __x64_sys_mount+0x20/0xc0 [ 80.021221][ T5921] do_syscall_64+0x55/0xb0 [ 80.025627][ T5921] ? clear_bhb_loop+0x40/0x90 [ 80.030636][ T5921] ? clear_bhb_loop+0x40/0x90 [ 80.035297][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.041173][ T5921] RIP: 0033:0x7fd897590eea [ 80.045580][ T5921] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.065166][ T5921] RSP: 002b:00007ffdf5191cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.073564][ T5921] RAX: ffffffffffffffda RBX: 00007ffdf5191d60 RCX: 00007fd897590eea [ 80.081607][ T5921] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdf5191d20 [ 80.089598][ T5921] RBP: 0000200000000180 R08: 00007ffdf5191d60 R09: 0000000000800700 [ 80.097554][ T5921] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 80.105508][ T5921] R13: 00007ffdf5191d20 R14: 000000000000046f R15: 000000000000002c [ 80.113471][ T5921] [ 80.134922][ T5921] ------------[ cut here ]------------ [ 80.140442][ T5921] EA inode 11 i_nlink=2 [ 80.140624][ T5921] WARNING: CPU: 0 PID: 5921 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.154992][ T5921] Modules linked in: [ 80.158897][ T5921] CPU: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 [ 80.166126][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.177304][ T5921] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.184422][ T5921] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 80.204608][ T5921] RSP: 0018:ffffc900032b71c0 EFLAGS: 00010246 [ 80.210669][ T5921] RAX: bbacf4dfd7743f00 RBX: 0000000000000002 RCX: ffff888023b05a00 [ 80.218810][ T5921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 80.226908][ T5921] RBP: ffffc900032b72b8 R08: ffffc900032b6dc7 R09: 1ffff92000656db8 [ 80.235259][ T5921] R10: dffffc0000000000 R11: fffff52000656db9 R12: dffffc0000000000 [ 80.243288][ T5921] R13: ffff888073b50ea8 R14: ffff888073b50cb0 R15: ffff888073b50d00 [ 80.251272][ T5921] FS: 000055555b32e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 80.260281][ T5921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.266925][ T5921] CR2: 00007f9912b8e000 CR3: 00000000771f6000 CR4: 00000000003506f0 [ 80.275454][ T5921] Call Trace: [ 80.278727][ T5921] [ 80.281649][ T5921] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 80.287530][ T5921] ? ext4_xattr_inode_iget+0x3df/0x600 [ 80.293042][ T5921] ext4_xattr_set_entry+0xcda/0x1e90 [ 80.298345][ T5921] ext4_xattr_ibody_set+0x254/0x6a0 [ 80.303584][ T5921] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 80.309492][ T5921] __ext4_expand_extra_isize+0x306/0x400 [ 80.315146][ T5921] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 80.320609][ T5921] ext4_evict_inode+0x7ed/0xea0 [ 80.325484][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 80.330338][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.336263][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 80.341464][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.347386][ T5921] evict+0x486/0x870 [ 80.351281][ T5921] ? __lock_acquire+0x7c80/0x7c80 [ 80.356334][ T5921] ? proc_nr_inodes+0x230/0x230 [ 80.361180][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 80.366404][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 80.371265][ T5921] ? iput+0x70a/0x920 [ 80.375288][ T5921] ext4_orphan_cleanup+0xbd4/0x1400 [ 80.380515][ T5921] ? ext4_orphan_del+0xba0/0xba0 [ 80.386021][ T5921] ? ext4_register_li_request+0x183/0x940 [ 80.391740][ T5921] ? errseq_check_and_advance+0x66/0x120 [ 80.397508][ T5921] ext4_fill_super+0x5de4/0x66c0 [ 80.402467][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.408910][ T5921] ? __might_sleep+0xe0/0xe0 [ 80.413522][ T5921] ? read_lock_is_recursive+0x20/0x20 [ 80.418872][ T5921] ? snprintf+0xdb/0x120 [ 80.423142][ T5921] ? vscnprintf+0x80/0x80 [ 80.427473][ T5921] ? down_write+0x162/0x1f0 [ 80.431960][ T5921] ? down_read_killable+0x340/0x340 [ 80.437193][ T5921] ? setup_bdev_super+0x56b/0x660 [ 80.442216][ T5921] get_tree_bdev+0x3e4/0x510 [ 80.446840][ T5921] ? vfs_parse_fs_string+0x160/0x160 [ 80.452156][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.458426][ T5921] ? setup_bdev_super+0x660/0x660 [ 80.463465][ T5921] ? apparmor_capable+0x137/0x1a0 [ 80.468471][ T5921] ? bpf_lsm_capable+0x9/0x10 [ 80.473172][ T5921] ? security_capable+0x89/0xb0 [ 80.478019][ T5921] vfs_get_tree+0x8c/0x280 [ 80.482832][ T5921] do_new_mount+0x24b/0xa40 [ 80.487439][ T5921] __se_sys_mount+0x2da/0x3c0 [ 80.492122][ T5921] ? __x64_sys_mount+0xc0/0xc0 [ 80.496928][ T5921] ? lockdep_hardirqs_on+0x98/0x150 [ 80.502128][ T5921] ? __x64_sys_mount+0x20/0xc0 [ 80.506920][ T5921] do_syscall_64+0x55/0xb0 [ 80.511330][ T5921] ? clear_bhb_loop+0x40/0x90 [ 80.516029][ T5921] ? clear_bhb_loop+0x40/0x90 [ 80.520704][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.526783][ T5921] RIP: 0033:0x7fd897590eea [ 80.531370][ T5921] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.551009][ T5921] RSP: 002b:00007ffdf5191cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.559436][ T5921] RAX: ffffffffffffffda RBX: 00007ffdf5191d60 RCX: 00007fd897590eea [ 80.567432][ T5921] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdf5191d20 [ 80.575417][ T5921] RBP: 0000200000000180 R08: 00007ffdf5191d60 R09: 0000000000800700 [ 80.583943][ T5921] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 80.591905][ T5921] R13: 00007ffdf5191d20 R14: 000000000000046f R15: 000000000000002c [ 80.599985][ T5921] [ 80.603035][ T5921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.610308][ T5921] CPU: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 [ 80.617483][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.627519][ T5921] Call Trace: [ 80.630783][ T5921] [ 80.633699][ T5921] dump_stack_lvl+0x16c/0x230 [ 80.638368][ T5921] ? show_regs_print_info+0x20/0x20 [ 80.643556][ T5921] ? load_image+0x3b0/0x3b0 [ 80.648059][ T5921] panic+0x2c0/0x710 [ 80.651942][ T5921] ? bpf_jit_dump+0xd0/0xd0 [ 80.656435][ T5921] __warn+0x2e0/0x470 [ 80.660401][ T5921] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.666370][ T5921] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.672334][ T5921] report_bug+0x2be/0x4f0 [ 80.676648][ T5921] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.682610][ T5921] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.688575][ T5921] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 80.694538][ T5921] handle_bug+0xcf/0x120 [ 80.698760][ T5921] exc_invalid_op+0x1a/0x50 [ 80.703244][ T5921] asm_exc_invalid_op+0x1a/0x20 [ 80.708082][ T5921] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.714656][ T5921] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 80.734242][ T5921] RSP: 0018:ffffc900032b71c0 EFLAGS: 00010246 [ 80.740293][ T5921] RAX: bbacf4dfd7743f00 RBX: 0000000000000002 RCX: ffff888023b05a00 [ 80.748247][ T5921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 80.756206][ T5921] RBP: ffffc900032b72b8 R08: ffffc900032b6dc7 R09: 1ffff92000656db8 [ 80.764159][ T5921] R10: dffffc0000000000 R11: fffff52000656db9 R12: dffffc0000000000 [ 80.772114][ T5921] R13: ffff888073b50ea8 R14: ffff888073b50cb0 R15: ffff888073b50d00 [ 80.780076][ T5921] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 80.785695][ T5921] ? ext4_xattr_inode_iget+0x3df/0x600 [ 80.791143][ T5921] ext4_xattr_set_entry+0xcda/0x1e90 [ 80.796418][ T5921] ext4_xattr_ibody_set+0x254/0x6a0 [ 80.801604][ T5921] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 80.807493][ T5921] __ext4_expand_extra_isize+0x306/0x400 [ 80.813121][ T5921] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 80.818569][ T5921] ext4_evict_inode+0x7ed/0xea0 [ 80.823404][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 80.828240][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.834121][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 80.839304][ T5921] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.845181][ T5921] evict+0x486/0x870 [ 80.849059][ T5921] ? __lock_acquire+0x7c80/0x7c80 [ 80.854072][ T5921] ? proc_nr_inodes+0x230/0x230 [ 80.858904][ T5921] ? do_raw_spin_unlock+0x121/0x230 [ 80.864085][ T5921] ? _raw_spin_unlock+0x28/0x40 [ 80.868919][ T5921] ? iput+0x70a/0x920 [ 80.872880][ T5921] ext4_orphan_cleanup+0xbd4/0x1400 [ 80.878069][ T5921] ? ext4_orphan_del+0xba0/0xba0 [ 80.882997][ T5921] ? ext4_register_li_request+0x183/0x940 [ 80.888708][ T5921] ? errseq_check_and_advance+0x66/0x120 [ 80.894325][ T5921] ext4_fill_super+0x5de4/0x66c0 [ 80.899258][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.905482][ T5921] ? __might_sleep+0xe0/0xe0 [ 80.910056][ T5921] ? read_lock_is_recursive+0x20/0x20 [ 80.915408][ T5921] ? snprintf+0xdb/0x120 [ 80.919641][ T5921] ? vscnprintf+0x80/0x80 [ 80.923967][ T5921] ? down_write+0x162/0x1f0 [ 80.928453][ T5921] ? down_read_killable+0x340/0x340 [ 80.933634][ T5921] ? setup_bdev_super+0x56b/0x660 [ 80.938661][ T5921] get_tree_bdev+0x3e4/0x510 [ 80.943260][ T5921] ? vfs_parse_fs_string+0x160/0x160 [ 80.948542][ T5921] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.954773][ T5921] ? setup_bdev_super+0x660/0x660 [ 80.959781][ T5921] ? apparmor_capable+0x137/0x1a0 [ 80.964789][ T5921] ? bpf_lsm_capable+0x9/0x10 [ 80.969453][ T5921] ? security_capable+0x89/0xb0 [ 80.974289][ T5921] vfs_get_tree+0x8c/0x280 [ 80.978687][ T5921] do_new_mount+0x24b/0xa40 [ 80.983175][ T5921] __se_sys_mount+0x2da/0x3c0 [ 80.987832][ T5921] ? __x64_sys_mount+0xc0/0xc0 [ 80.992576][ T5921] ? lockdep_hardirqs_on+0x98/0x150 [ 80.997757][ T5921] ? __x64_sys_mount+0x20/0xc0 [ 81.002506][ T5921] do_syscall_64+0x55/0xb0 [ 81.006908][ T5921] ? clear_bhb_loop+0x40/0x90 [ 81.011568][ T5921] ? clear_bhb_loop+0x40/0x90 [ 81.016229][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.022104][ T5921] RIP: 0033:0x7fd897590eea [ 81.026501][ T5921] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.046090][ T5921] RSP: 002b:00007ffdf5191cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.054489][ T5921] RAX: ffffffffffffffda RBX: 00007ffdf5191d60 RCX: 00007fd897590eea [ 81.062444][ T5921] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdf5191d20 [ 81.070403][ T5921] RBP: 0000200000000180 R08: 00007ffdf5191d60 R09: 0000000000800700 [ 81.078357][ T5921] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 81.086310][ T5921] R13: 00007ffdf5191d20 R14: 000000000000046f R15: 000000000000002c [ 81.094270][ T5921] [ 81.097592][ T5921] Kernel Offset: disabled [ 81.101901][ T5921] Rebooting in 86400 seconds..