[ 101.485400][ T44] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. 2025/11/24 01:29:12 parsed 1 programs [ 110.641176][ T5834] cgroup: Unknown subsys name 'net' [ 110.838139][ T5834] cgroup: Unknown subsys name 'cpuset' [ 110.848102][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 112.612895][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.957537][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.966148][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.973887][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.982339][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.990946][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.116882][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.257803][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 116.357512][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.364820][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.372070][ T5861] bridge_slave_0: entered allmulticast mode [ 116.380272][ T5861] bridge_slave_0: entered promiscuous mode [ 116.389406][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.396652][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.403951][ T5861] bridge_slave_1: entered allmulticast mode [ 116.411494][ T5861] bridge_slave_1: entered promiscuous mode [ 116.448904][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.461193][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.500135][ T5861] team0: Port device team_slave_0 added [ 116.508632][ T5861] team0: Port device team_slave_1 added [ 116.545796][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.552781][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.582865][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.596091][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.603928][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.630306][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.684367][ T5861] hsr_slave_0: entered promiscuous mode [ 116.691004][ T5861] hsr_slave_1: entered promiscuous mode [ 116.871276][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.884732][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.895711][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.907525][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.944824][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.952402][ T5861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.960299][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.967437][ T5861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.038360][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.058617][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.067478][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.086949][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.102699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.109889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.124188][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.131434][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.369151][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.415127][ T5861] veth0_vlan: entered promiscuous mode [ 117.429397][ T5861] veth1_vlan: entered promiscuous mode [ 117.461991][ T5861] veth0_macvtap: entered promiscuous mode [ 117.472327][ T5861] veth1_macvtap: entered promiscuous mode [ 117.498676][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.513874][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.530719][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.540355][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.551297][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.560075][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.733628][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.827516][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.982514][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.054064][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.158328][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.172014][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.205485][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.213805][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.491425][ T12] bridge_slave_1: left allmulticast mode [ 120.497950][ T12] bridge_slave_1: left promiscuous mode [ 120.505508][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.517731][ T12] bridge_slave_0: left allmulticast mode [ 120.524402][ T12] bridge_slave_0: left promiscuous mode [ 120.530219][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.132703][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.145304][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.156035][ T12] bond0 (unregistering): Released all slaves [ 121.286039][ T12] hsr_slave_0: left promiscuous mode [ 121.292400][ T12] hsr_slave_1: left promiscuous mode [ 121.299148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.308211][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.317428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.329634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.360961][ T12] veth1_macvtap: left promiscuous mode [ 121.367117][ T12] veth0_macvtap: left promiscuous mode [ 121.372840][ T12] veth1_vlan: left promiscuous mode [ 121.383186][ T12] veth0_vlan: left promiscuous mode [ 121.847576][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.890631][ T12] team0 (unregistering): Port device team_slave_0 removed 2025/11/24 01:29:29 executed programs: 0 [ 123.117001][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.128087][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.139340][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.148717][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.159103][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.884550][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 124.096514][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.109417][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.121336][ T5967] bridge_slave_0: entered allmulticast mode [ 124.129841][ T5967] bridge_slave_0: entered promiscuous mode [ 124.139195][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.146740][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.156100][ T5967] bridge_slave_1: entered allmulticast mode [ 124.164950][ T5967] bridge_slave_1: entered promiscuous mode [ 124.213949][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.229462][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.274102][ T5967] team0: Port device team_slave_0 added [ 124.282887][ T5967] team0: Port device team_slave_1 added [ 124.320486][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.328152][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.354669][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.368601][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.376240][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.403000][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.484064][ T5967] hsr_slave_0: entered promiscuous mode [ 124.490794][ T5967] hsr_slave_1: entered promiscuous mode [ 125.244541][ T52] Bluetooth: hci0: command tx timeout [ 125.255180][ T5967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.267618][ T5967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.279253][ T5967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.291276][ T5967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.404171][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.431868][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.452711][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.459928][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.481945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.489126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.818157][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.885768][ T5967] veth0_vlan: entered promiscuous mode [ 125.907116][ T5967] veth1_vlan: entered promiscuous mode [ 125.956237][ T5967] veth0_macvtap: entered promiscuous mode [ 125.968499][ T5967] veth1_macvtap: entered promiscuous mode [ 125.994829][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.015499][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.037785][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.057358][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.077192][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.103832][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.182551][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.206829][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.251800][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.262092][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.356928][ T6038] loop0: detected capacity change from 0 to 512 [ 126.410078][ T6038] [ 126.412449][ T6038] ====================================================== [ 126.419473][ T6038] WARNING: possible circular locking dependency detected [ 126.426504][ T6038] syzkaller #0 Not tainted [ 126.430925][ T6038] ------------------------------------------------------ [ 126.437950][ T6038] syz.0.17/6038 is trying to acquire lock: [ 126.443767][ T6038] ffff888032248b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 126.453663][ T6038] [ 126.453663][ T6038] but task is already holding lock: [ 126.461036][ T6038] ffff888075ad7388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 126.470956][ T6038] [ 126.470956][ T6038] which lock already depends on the new lock. [ 126.470956][ T6038] [ 126.481371][ T6038] [ 126.481371][ T6038] the existing dependency chain (in reverse order) is: [ 126.490397][ T6038] [ 126.490397][ T6038] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 126.498005][ T6038] down_read+0x9b/0x480 [ 126.502721][ T6038] ext4_setattr+0x875/0x2ae0 [ 126.507868][ T6038] notify_change+0x6d2/0x12a0 [ 126.513101][ T6038] chown_common+0x54e/0x680 [ 126.518148][ T6038] do_fchownat+0x1a7/0x200 [ 126.523103][ T6038] __x64_sys_chown+0x7b/0xc0 [ 126.528242][ T6038] do_syscall_64+0xcd/0xfa0 [ 126.533308][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.539749][ T6038] [ 126.539749][ T6038] -> #1 (jbd2_handle){++++}-{0:0}: [ 126.547083][ T6038] start_this_handle+0x5ea/0x1410 [ 126.552670][ T6038] jbd2__journal_start+0x394/0x6a0 [ 126.558342][ T6038] __ext4_journal_start_sb+0x195/0x690 [ 126.564353][ T6038] ext4_do_writepages+0xc23/0x3cf0 [ 126.570018][ T6038] ext4_writepages+0x37a/0x7d0 [ 126.575329][ T6038] do_writepages+0x27a/0x600 [ 126.580456][ T6038] __writeback_single_inode+0x160/0xfb0 [ 126.586550][ T6038] writeback_sb_inodes+0x60d/0xfa0 [ 126.592226][ T6038] __writeback_inodes_wb+0xf8/0x2d0 [ 126.597979][ T6038] wb_writeback+0x7f3/0xb70 [ 126.603026][ T6038] wb_workfn+0x8ca/0xbe0 [ 126.607817][ T6038] process_one_work+0x9cf/0x1b70 [ 126.613295][ T6038] worker_thread+0x6c8/0xf10 [ 126.618429][ T6038] kthread+0x3c5/0x780 [ 126.623047][ T6038] ret_from_fork+0x675/0x7d0 [ 126.628187][ T6038] ret_from_fork_asm+0x1a/0x30 [ 126.633526][ T6038] [ 126.633526][ T6038] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.642000][ T6038] __lock_acquire+0x126f/0x1c90 [ 126.647422][ T6038] lock_acquire+0x179/0x350 [ 126.652460][ T6038] ext4_writepages+0x224/0x7d0 [ 126.657774][ T6038] do_writepages+0x27a/0x600 [ 126.662900][ T6038] __writeback_single_inode+0x160/0xfb0 [ 126.668998][ T6038] writeback_single_inode+0x2bc/0x550 [ 126.674930][ T6038] write_inode_now+0x170/0x1e0 [ 126.680266][ T6038] iput.part.0+0x487/0xb00 [ 126.685229][ T6038] iput+0x35/0x40 [ 126.689411][ T6038] ext4_xattr_block_set+0x67c/0x3650 [ 126.695244][ T6038] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.701689][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 126.707889][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 126.713902][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 126.719393][ T6038] evict+0x3e6/0x920 [ 126.723836][ T6038] iput.part.0+0x6a9/0xb00 [ 126.728800][ T6038] iput+0x35/0x40 [ 126.732974][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 126.738724][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 126.744231][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 126.749922][ T6038] vfs_get_tree+0x8e/0x340 [ 126.754886][ T6038] path_mount+0x7b9/0x23a0 [ 126.760019][ T6038] __x64_sys_mount+0x293/0x310 [ 126.765329][ T6038] do_syscall_64+0xcd/0xfa0 [ 126.770383][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.776815][ T6038] [ 126.776815][ T6038] other info that might help us debug this: [ 126.776815][ T6038] [ 126.787088][ T6038] Chain exists of: [ 126.787088][ T6038] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.787088][ T6038] [ 126.800519][ T6038] Possible unsafe locking scenario: [ 126.800519][ T6038] [ 126.807971][ T6038] CPU0 CPU1 [ 126.813341][ T6038] ---- ---- [ 126.818704][ T6038] lock(&ei->xattr_sem); [ 126.823053][ T6038] lock(jbd2_handle); [ 126.829659][ T6038] lock(&ei->xattr_sem); [ 126.836530][ T6038] rlock(&sbi->s_writepages_rwsem); [ 126.841832][ T6038] [ 126.841832][ T6038] *** DEADLOCK *** [ 126.841832][ T6038] [ 126.849972][ T6038] 3 locks held by syz.0.17/6038: [ 126.854924][ T6038] #0: ffff88814b6ce0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 126.865151][ T6038] #1: ffff88814b6ce610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 126.873661][ T6038] #2: ffff888075ad7388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 126.884014][ T6038] [ 126.884014][ T6038] stack backtrace: [ 126.889918][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.889965][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.889994][ T6038] Call Trace: [ 126.890005][ T6038] [ 126.890018][ T6038] dump_stack_lvl+0x116/0x1f0 [ 126.890069][ T6038] print_circular_bug+0x275/0x350 [ 126.890131][ T6038] check_noncircular+0x14c/0x170 [ 126.890196][ T6038] __lock_acquire+0x126f/0x1c90 [ 126.890259][ T6038] ? __lock_acquire+0x622/0x1c90 [ 126.890321][ T6038] lock_acquire+0x179/0x350 [ 126.890353][ T6038] ? do_writepages+0x27a/0x600 [ 126.890391][ T6038] ? __pfx___might_resched+0x10/0x10 [ 126.890443][ T6038] ext4_writepages+0x224/0x7d0 [ 126.890490][ T6038] ? do_writepages+0x27a/0x600 [ 126.890526][ T6038] ? __pfx_ext4_writepages+0x10/0x10 [ 126.890572][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.890616][ T6038] ? __lock_acquire+0xb8a/0x1c90 [ 126.890681][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.890728][ T6038] ? __pfx_ext4_writepages+0x10/0x10 [ 126.890775][ T6038] do_writepages+0x27a/0x600 [ 126.890813][ T6038] ? __pfx_do_writepages+0x10/0x10 [ 126.890854][ T6038] __writeback_single_inode+0x160/0xfb0 [ 126.890905][ T6038] ? __pfx___writeback_single_inode+0x10/0x10 [ 126.890953][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891008][ T6038] ? do_raw_spin_unlock+0x172/0x230 [ 126.891050][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891097][ T6038] writeback_single_inode+0x2bc/0x550 [ 126.891146][ T6038] write_inode_now+0x170/0x1e0 [ 126.891193][ T6038] ? __pfx_write_inode_now+0x10/0x10 [ 126.891265][ T6038] ? find_held_lock+0x2b/0x80 [ 126.891312][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891358][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891405][ T6038] iput.part.0+0x487/0xb00 [ 126.891450][ T6038] iput+0x35/0x40 [ 126.891486][ T6038] ext4_xattr_block_set+0x67c/0x3650 [ 126.891532][ T6038] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 126.891570][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891614][ T6038] ? xattr_find_entry+0x289/0x330 [ 126.891675][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891719][ T6038] ? ext4_xattr_block_find+0x59/0x430 [ 126.891782][ T6038] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.891836][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 126.891882][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891925][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.891969][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 126.892022][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 126.892087][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 126.892139][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 126.892189][ T6038] ? __pfx___might_resched+0x10/0x10 [ 126.892241][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 126.892287][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.892330][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 126.892374][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 126.892425][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 126.892477][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.892527][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.892575][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.892624][ T6038] evict+0x3e6/0x920 [ 126.892663][ T6038] ? __pfx_evict+0x10/0x10 [ 126.892701][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.892750][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.892799][ T6038] iput.part.0+0x6a9/0xb00 [ 126.892838][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 126.892879][ T6038] iput+0x35/0x40 [ 126.892916][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 126.892972][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.893032][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893074][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 126.893129][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 126.893196][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.893249][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.893289][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893333][ T6038] ? find_held_lock+0x2b/0x80 [ 126.893382][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893428][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 126.893462][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893506][ T6038] ? setup_bdev_super+0x369/0x730 [ 126.893558][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 126.893612][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.893666][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.893723][ T6038] ? apparmor_capable+0x114/0x1d0 [ 126.893781][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893825][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.893869][ T6038] ? security_capable+0x7e/0x260 [ 126.893922][ T6038] vfs_get_tree+0x8e/0x340 [ 126.893967][ T6038] path_mount+0x7b9/0x23a0 [ 126.894015][ T6038] ? __pfx_path_mount+0x10/0x10 [ 126.894053][ T6038] ? putname+0x154/0x1a0 [ 126.894092][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.894136][ T6038] ? putname+0x154/0x1a0 [ 126.894175][ T6038] ? __x64_sys_mount+0x293/0x310 [ 126.894210][ T6038] __x64_sys_mount+0x293/0x310 [ 126.894247][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.894282][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.894335][ T6038] do_syscall_64+0xcd/0xfa0 [ 126.894384][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.894420][ T6038] RIP: 0033:0x7f23a4390eea [ 126.894447][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.894483][ T6038] RSP: 002b:00007fff9c8f22a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.894517][ T6038] RAX: ffffffffffffffda RBX: 00007fff9c8f2330 RCX: 00007f23a4390eea [ 126.894543][ T6038] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff9c8f22f0 [ 126.894567][ T6038] RBP: 0000200000000180 R08: 00007fff9c8f2330 R09: 0000000000800700 [ 126.894590][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.894613][ T6038] R13: 00007fff9c8f22f0 R14: 000000000000046f R15: 000000000000002c [ 126.894648][ T6038] [ 127.473427][ T52] Bluetooth: hci0: command tx timeout [ 127.508508][ T6038] ------------[ cut here ]------------ [ 127.514041][ T6038] EA inode 11 i_nlink=2 [ 127.514528][ T6038] WARNING: CPU: 1 PID: 6038 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.529174][ T6038] Modules linked in: [ 127.533834][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.542961][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.553107][ T6038] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.559749][ T6038] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 15 d8 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 46 a4 2e ff 44 0f b6 2d 87 8d dc 0d [ 127.579432][ T6038] RSP: 0018:ffffc90003037178 EFLAGS: 00010282 [ 127.585589][ T6038] RAX: 0000000000000000 RBX: ffff888075b615b8 RCX: ffffffff817b1cd8 [ 127.593602][ T6038] RDX: ffff8880345f5ac0 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 127.601588][ T6038] RBP: ffffc90003037240 R08: 0000000000000001 R09: 0000000000000000 [ 127.609598][ T6038] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 127.617633][ T6038] R13: 0000000000000000 R14: 1ffff92000606e32 R15: ffff888075b617a8 [ 127.625661][ T6038] FS: 000055555d57e500(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 127.634635][ T6038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.641238][ T6038] CR2: 00007f29beb7e000 CR3: 0000000077005000 CR4: 0000000000350ef0 [ 127.649301][ T6038] Call Trace: [ 127.652582][ T6038] [ 127.655596][ T6038] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 127.661979][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.667678][ T6038] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 127.673210][ T6038] ext4_xattr_set_entry+0x158f/0x1f00 [ 127.678619][ T6038] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 127.684385][ T6038] ? xattr_find_entry+0x289/0x330 [ 127.689546][ T6038] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 127.694839][ T6038] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 127.700785][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 127.707130][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.712797][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.718594][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 127.724273][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 127.729961][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 127.735483][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 127.741493][ T6038] ? __pfx___might_resched+0x10/0x10 [ 127.746843][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 127.752601][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.758327][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 127.764082][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 127.769246][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 127.774280][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.779688][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.785407][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.790813][ T6038] evict+0x3e6/0x920 [ 127.794766][ T6038] ? __pfx_evict+0x10/0x10 [ 127.799203][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.804951][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.810628][ T6038] iput.part.0+0x6a9/0xb00 [ 127.815105][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 127.820421][ T6038] iput+0x35/0x40 [ 127.824181][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 127.829432][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 127.835164][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.840825][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 127.846543][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 127.851535][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.856908][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.861958][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.867784][ T6038] ? find_held_lock+0x2b/0x80 [ 127.872498][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.878211][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 127.883292][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.888952][ T6038] ? setup_bdev_super+0x369/0x730 [ 127.894056][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 127.899209][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.904558][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.910325][ T6038] ? apparmor_capable+0x114/0x1d0 [ 127.915419][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.921076][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926770][ T6038] ? security_capable+0x7e/0x260 [ 127.931741][ T6038] vfs_get_tree+0x8e/0x340 [ 127.936219][ T6038] path_mount+0x7b9/0x23a0 [ 127.940654][ T6038] ? __pfx_path_mount+0x10/0x10 [ 127.945561][ T6038] ? putname+0x154/0x1a0 [ 127.949825][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.955512][ T6038] ? putname+0x154/0x1a0 [ 127.959774][ T6038] ? __x64_sys_mount+0x293/0x310 [ 127.964788][ T6038] __x64_sys_mount+0x293/0x310 [ 127.969578][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.974959][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.980654][ T6038] do_syscall_64+0xcd/0xfa0 [ 127.985292][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.991210][ T6038] RIP: 0033:0x7f23a4390eea [ 127.995678][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.015366][ T6038] RSP: 002b:00007fff9c8f22a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.023847][ T6038] RAX: ffffffffffffffda RBX: 00007fff9c8f2330 RCX: 00007f23a4390eea [ 128.031838][ T6038] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff9c8f22f0 [ 128.039861][ T6038] RBP: 0000200000000180 R08: 00007fff9c8f2330 R09: 0000000000800700 [ 128.048088][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.056162][ T6038] R13: 00007fff9c8f22f0 R14: 000000000000046f R15: 000000000000002c [ 128.064182][ T6038] [ 128.067211][ T6038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.074493][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.083609][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.093659][ T6038] Call Trace: [ 128.096932][ T6038] [ 128.099859][ T6038] dump_stack_lvl+0x3d/0x1f0 [ 128.104468][ T6038] vpanic+0x640/0x6f0 [ 128.108475][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.114499][ T6038] panic+0xca/0xd0 [ 128.118334][ T6038] ? __pfx_panic+0x10/0x10 [ 128.122776][ T6038] ? check_panic_on_warn+0x1f/0xb0 [ 128.127914][ T6038] check_panic_on_warn+0xab/0xb0 [ 128.132881][ T6038] __warn+0xf6/0x3c0 [ 128.136776][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.142785][ T6038] report_bug+0x3c3/0x580 [ 128.147124][ T6038] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.153137][ T6038] handle_bug+0x184/0x210 [ 128.157488][ T6038] exc_invalid_op+0x17/0x50 [ 128.162013][ T6038] asm_exc_invalid_op+0x1a/0x20 [ 128.166880][ T6038] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.173521][ T6038] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 15 d8 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 46 a4 2e ff 44 0f b6 2d 87 8d dc 0d [ 128.193230][ T6038] RSP: 0018:ffffc90003037178 EFLAGS: 00010282 [ 128.199310][ T6038] RAX: 0000000000000000 RBX: ffff888075b615b8 RCX: ffffffff817b1cd8 [ 128.207281][ T6038] RDX: ffff8880345f5ac0 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 128.215255][ T6038] RBP: ffffc90003037240 R08: 0000000000000001 R09: 0000000000000000 [ 128.223230][ T6038] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 128.231201][ T6038] R13: 0000000000000000 R14: 1ffff92000606e32 R15: ffff888075b617a8 [ 128.239178][ T6038] ? __warn_printk+0x198/0x350 [ 128.243975][ T6038] ? __warn_printk+0x1a5/0x350 [ 128.248771][ T6038] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 128.254781][ T6038] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.261140][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.266784][ T6038] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 128.272276][ T6038] ext4_xattr_set_entry+0x158f/0x1f00 [ 128.277659][ T6038] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 128.283382][ T6038] ? xattr_find_entry+0x289/0x330 [ 128.288435][ T6038] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 128.293640][ T6038] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 128.299556][ T6038] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 128.305809][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.311452][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.317095][ T6038] ? dquot_initialize_needed+0x183/0x2a0 [ 128.322740][ T6038] __ext4_expand_extra_isize+0x346/0x480 [ 128.328492][ T6038] __ext4_mark_inode_dirty+0x544/0x870 [ 128.333975][ T6038] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 128.339983][ T6038] ? __pfx___might_resched+0x10/0x10 [ 128.345296][ T6038] ? ext4_journal_check_start+0x22b/0x340 [ 128.351032][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.356677][ T6038] ? __ext4_journal_start_sb+0x19e/0x690 [ 128.362322][ T6038] ? ext4_evict_inode+0x5cf/0x18e0 [ 128.367456][ T6038] ext4_evict_inode+0x74e/0x18e0 [ 128.372412][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.377800][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.383450][ T6038] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.388839][ T6038] evict+0x3e6/0x920 [ 128.392741][ T6038] ? __pfx_evict+0x10/0x10 [ 128.397166][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.402816][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.408468][ T6038] iput.part.0+0x6a9/0xb00 [ 128.412894][ T6038] ? __pfx_ext4_drop_inode+0x10/0x10 [ 128.418191][ T6038] iput+0x35/0x40 [ 128.421831][ T6038] ext4_orphan_cleanup+0x731/0x11e0 [ 128.427051][ T6038] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.432702][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.438343][ T6038] ? ext4_register_li_request+0xec/0x9b0 [ 128.444005][ T6038] ext4_fill_super+0x8db7/0xaf70 [ 128.448982][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.454285][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.459405][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.465047][ T6038] ? find_held_lock+0x2b/0x80 [ 128.469745][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.475391][ T6038] ? sb_set_blocksize+0x176/0x1d0 [ 128.480425][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.486065][ T6038] ? setup_bdev_super+0x369/0x730 [ 128.491110][ T6038] get_tree_bdev_flags+0x38c/0x620 [ 128.496416][ T6038] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.501726][ T6038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.507380][ T6038] ? apparmor_capable+0x114/0x1d0 [ 128.512433][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.518082][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.523728][ T6038] ? security_capable+0x7e/0x260 [ 128.528685][ T6038] vfs_get_tree+0x8e/0x340 [ 128.533116][ T6038] path_mount+0x7b9/0x23a0 [ 128.537540][ T6038] ? __pfx_path_mount+0x10/0x10 [ 128.542397][ T6038] ? putname+0x154/0x1a0 [ 128.546650][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.552293][ T6038] ? putname+0x154/0x1a0 [ 128.556544][ T6038] ? __x64_sys_mount+0x293/0x310 [ 128.561488][ T6038] __x64_sys_mount+0x293/0x310 [ 128.566279][ T6038] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.571566][ T6038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.577214][ T6038] do_syscall_64+0xcd/0xfa0 [ 128.581735][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.587635][ T6038] RIP: 0033:0x7f23a4390eea [ 128.592050][ T6038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.611668][ T6038] RSP: 002b:00007fff9c8f22a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.620092][ T6038] RAX: ffffffffffffffda RBX: 00007fff9c8f2330 RCX: 00007f23a4390eea [ 128.628062][ T6038] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff9c8f22f0 [ 128.636031][ T6038] RBP: 0000200000000180 R08: 00007fff9c8f2330 R09: 0000000000800700 [ 128.643997][ T6038] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.651965][ T6038] R13: 00007fff9c8f22f0 R14: 000000000000046f R15: 000000000000002c [ 128.660039][ T6038] [ 128.663336][ T6038] Kernel Offset: disabled [ 128.667654][ T6038] Rebooting in 86400 seconds..