[ 101.465700][ T1205] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. 2025/12/01 06:29:08 parsed 1 programs [ 110.352495][ T5830] cgroup: Unknown subsys name 'net' [ 110.521557][ T5830] cgroup: Unknown subsys name 'cpuset' [ 110.531475][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 112.287417][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.190966][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.119608][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.134991][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.167836][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.177166][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.134306][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.142570][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.150400][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.159503][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.168009][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.802092][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 117.926699][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.934038][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.941264][ T5887] bridge_slave_0: entered allmulticast mode [ 117.949918][ T5887] bridge_slave_0: entered promiscuous mode [ 117.959915][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.967842][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.975119][ T5887] bridge_slave_1: entered allmulticast mode [ 117.983136][ T5887] bridge_slave_1: entered promiscuous mode [ 118.027514][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.042530][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.086212][ T5887] team0: Port device team_slave_0 added [ 118.099066][ T5887] team0: Port device team_slave_1 added [ 118.138406][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.145468][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.172458][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.186369][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.193463][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.219410][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.275127][ T5887] hsr_slave_0: entered promiscuous mode [ 118.281846][ T5887] hsr_slave_1: entered promiscuous mode [ 118.461762][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.475473][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.486862][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.497444][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.534945][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.542180][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.550401][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.557599][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.625295][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.646219][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.655824][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.674660][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.690077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.697282][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.711379][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.718638][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.961817][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.010708][ T5887] veth0_vlan: entered promiscuous mode [ 119.024172][ T5887] veth1_vlan: entered promiscuous mode [ 119.057924][ T5887] veth0_macvtap: entered promiscuous mode [ 119.068951][ T5887] veth1_macvtap: entered promiscuous mode [ 119.089538][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.104953][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.120958][ T1093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.131950][ T3452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.144026][ T3452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.154541][ T3452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.311145][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.381277][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.462268][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.580105][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/01 06:29:24 executed programs: 0 [ 121.810508][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.819256][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.828925][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.838805][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.846896][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.912381][ T13] bridge_slave_1: left allmulticast mode [ 121.921458][ T13] bridge_slave_1: left promiscuous mode [ 121.929219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.950174][ T13] bridge_slave_0: left allmulticast mode [ 121.956293][ T13] bridge_slave_0: left promiscuous mode [ 121.962106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.227828][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.240126][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.250414][ T13] bond0 (unregistering): Released all slaves [ 122.372822][ T13] hsr_slave_0: left promiscuous mode [ 122.379398][ T13] hsr_slave_1: left promiscuous mode [ 122.386734][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.394486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.403419][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.410837][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.437574][ T13] veth1_macvtap: left promiscuous mode [ 122.443421][ T13] veth0_macvtap: left promiscuous mode [ 122.449205][ T13] veth1_vlan: left promiscuous mode [ 122.456573][ T13] veth0_vlan: left promiscuous mode [ 122.920282][ T13] team0 (unregistering): Port device team_slave_1 removed [ 122.957759][ T13] team0 (unregistering): Port device team_slave_0 removed [ 123.348690][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 123.493623][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.500895][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.515701][ T5939] bridge_slave_0: entered allmulticast mode [ 123.524325][ T5939] bridge_slave_0: entered promiscuous mode [ 123.537852][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.547229][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.554554][ T5939] bridge_slave_1: entered allmulticast mode [ 123.563564][ T5939] bridge_slave_1: entered promiscuous mode [ 123.631428][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.646120][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.707080][ T5939] team0: Port device team_slave_0 added [ 123.719515][ T5939] team0: Port device team_slave_1 added [ 123.948516][ T52] Bluetooth: hci0: command tx timeout [ 124.174654][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.181650][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.208007][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.223172][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.230251][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.256892][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.420329][ T5939] hsr_slave_0: entered promiscuous mode [ 124.426972][ T5939] hsr_slave_1: entered promiscuous mode [ 125.098850][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.111829][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.128239][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.139907][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.257355][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.287687][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.304502][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.311658][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.336941][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.344149][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.679580][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.752142][ T5939] veth0_vlan: entered promiscuous mode [ 125.771918][ T5939] veth1_vlan: entered promiscuous mode [ 125.819771][ T5939] veth0_macvtap: entered promiscuous mode [ 125.831070][ T5939] veth1_macvtap: entered promiscuous mode [ 125.857680][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.874524][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.898752][ T1093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.908219][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.937719][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.959641][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.022918][ T52] Bluetooth: hci0: command tx timeout [ 126.036984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.060018][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.101245][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.113994][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.202321][ T6022] loop0: detected capacity change from 0 to 512 [ 126.237617][ T6022] [ 126.239994][ T6022] ====================================================== [ 126.247015][ T6022] WARNING: possible circular locking dependency detected [ 126.254038][ T6022] syzkaller #0 Not tainted [ 126.258626][ T6022] ------------------------------------------------------ [ 126.265645][ T6022] syz.0.17/6022 is trying to acquire lock: [ 126.271451][ T6022] ffff888031760b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 126.281343][ T6022] [ 126.281343][ T6022] but task is already holding lock: [ 126.288711][ T6022] ffff8880763d9d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 126.298597][ T6022] [ 126.298597][ T6022] which lock already depends on the new lock. [ 126.298597][ T6022] [ 126.308992][ T6022] [ 126.308992][ T6022] the existing dependency chain (in reverse order) is: [ 126.318000][ T6022] [ 126.318000][ T6022] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 126.325583][ T6022] down_read+0x9b/0x480 [ 126.330290][ T6022] ext4_setattr+0x875/0x2ae0 [ 126.335422][ T6022] notify_change+0x6d2/0x12a0 [ 126.340643][ T6022] chown_common+0x54e/0x680 [ 126.345689][ T6022] do_fchownat+0x1a7/0x200 [ 126.350642][ T6022] __x64_sys_chown+0x7b/0xc0 [ 126.355765][ T6022] do_syscall_64+0xcd/0xfa0 [ 126.360815][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.367254][ T6022] [ 126.367254][ T6022] -> #1 (jbd2_handle){++++}-{0:0}: [ 126.374570][ T6022] start_this_handle+0x5ea/0x1410 [ 126.380139][ T6022] jbd2__journal_start+0x394/0x6a0 [ 126.385793][ T6022] __ext4_journal_start_sb+0x195/0x690 [ 126.391786][ T6022] ext4_do_writepages+0xc23/0x3cf0 [ 126.397435][ T6022] ext4_writepages+0x37a/0x7d0 [ 126.402741][ T6022] do_writepages+0x27a/0x600 [ 126.407857][ T6022] __writeback_single_inode+0x160/0xfb0 [ 126.413939][ T6022] writeback_sb_inodes+0x60d/0xfa0 [ 126.419588][ T6022] __writeback_inodes_wb+0xf8/0x2d0 [ 126.425374][ T6022] wb_writeback+0x7f3/0xb70 [ 126.430414][ T6022] wb_workfn+0x8ca/0xbe0 [ 126.435187][ T6022] process_one_work+0x9cf/0x1b70 [ 126.440650][ T6022] worker_thread+0x6c8/0xf10 [ 126.445764][ T6022] kthread+0x3c5/0x780 [ 126.450356][ T6022] ret_from_fork+0x675/0x7d0 [ 126.455480][ T6022] ret_from_fork_asm+0x1a/0x30 [ 126.460787][ T6022] [ 126.460787][ T6022] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.469328][ T6022] __lock_acquire+0x126f/0x1c90 [ 126.474739][ T6022] lock_acquire+0x179/0x350 [ 126.479851][ T6022] ext4_writepages+0x224/0x7d0 [ 126.485150][ T6022] do_writepages+0x27a/0x600 [ 126.490266][ T6022] __writeback_single_inode+0x160/0xfb0 [ 126.496343][ T6022] writeback_single_inode+0x2bc/0x550 [ 126.502254][ T6022] write_inode_now+0x170/0x1e0 [ 126.507564][ T6022] iput.part.0+0x487/0xb00 [ 126.512510][ T6022] iput+0x35/0x40 [ 126.516675][ T6022] ext4_xattr_block_set+0x67c/0x3650 [ 126.522486][ T6022] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.528906][ T6022] __ext4_expand_extra_isize+0x346/0x480 [ 126.535090][ T6022] __ext4_mark_inode_dirty+0x544/0x870 [ 126.541091][ T6022] ext4_evict_inode+0x74e/0x18e0 [ 126.546563][ T6022] evict+0x3e6/0x920 [ 126.550983][ T6022] iput.part.0+0x6a9/0xb00 [ 126.555929][ T6022] iput+0x35/0x40 [ 126.560099][ T6022] ext4_orphan_cleanup+0x731/0x11e0 [ 126.565833][ T6022] ext4_fill_super+0x8db7/0xaf70 [ 126.571307][ T6022] get_tree_bdev_flags+0x38c/0x620 [ 126.576958][ T6022] vfs_get_tree+0x8e/0x340 [ 126.581906][ T6022] path_mount+0x7b9/0x23a0 [ 126.586930][ T6022] __x64_sys_mount+0x293/0x310 [ 126.592229][ T6022] do_syscall_64+0xcd/0xfa0 [ 126.597277][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.603700][ T6022] [ 126.603700][ T6022] other info that might help us debug this: [ 126.603700][ T6022] [ 126.613921][ T6022] Chain exists of: [ 126.613921][ T6022] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.613921][ T6022] [ 126.627338][ T6022] Possible unsafe locking scenario: [ 126.627338][ T6022] [ 126.634786][ T6022] CPU0 CPU1 [ 126.640153][ T6022] ---- ---- [ 126.645513][ T6022] lock(&ei->xattr_sem); [ 126.649851][ T6022] lock(jbd2_handle); [ 126.656448][ T6022] lock(&ei->xattr_sem); [ 126.663313][ T6022] rlock(&sbi->s_writepages_rwsem); [ 126.668606][ T6022] [ 126.668606][ T6022] *** DEADLOCK *** [ 126.668606][ T6022] [ 126.676739][ T6022] 3 locks held by syz.0.17/6022: [ 126.681669][ T6022] #0: ffff8880317060e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 126.691868][ T6022] #1: ffff888031706610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 126.700355][ T6022] #2: ffff8880763d9d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 126.710699][ T6022] [ 126.710699][ T6022] stack backtrace: [ 126.716581][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.716626][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.716648][ T6022] Call Trace: [ 126.716659][ T6022] [ 126.716672][ T6022] dump_stack_lvl+0x116/0x1f0 [ 126.716722][ T6022] print_circular_bug+0x275/0x350 [ 126.716785][ T6022] check_noncircular+0x14c/0x170 [ 126.716856][ T6022] __lock_acquire+0x126f/0x1c90 [ 126.716922][ T6022] ? __lock_acquire+0x622/0x1c90 [ 126.716987][ T6022] lock_acquire+0x179/0x350 [ 126.717020][ T6022] ? do_writepages+0x27a/0x600 [ 126.717060][ T6022] ? __pfx___might_resched+0x10/0x10 [ 126.717114][ T6022] ext4_writepages+0x224/0x7d0 [ 126.717162][ T6022] ? do_writepages+0x27a/0x600 [ 126.717200][ T6022] ? __pfx_ext4_writepages+0x10/0x10 [ 126.717248][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.717295][ T6022] ? __lock_acquire+0xb8a/0x1c90 [ 126.717365][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.717414][ T6022] ? __pfx_ext4_writepages+0x10/0x10 [ 126.717465][ T6022] do_writepages+0x27a/0x600 [ 126.717505][ T6022] ? __pfx_do_writepages+0x10/0x10 [ 126.717548][ T6022] __writeback_single_inode+0x160/0xfb0 [ 126.717600][ T6022] ? __pfx___writeback_single_inode+0x10/0x10 [ 126.717650][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.717696][ T6022] ? do_raw_spin_unlock+0x172/0x230 [ 126.717739][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.717788][ T6022] writeback_single_inode+0x2bc/0x550 [ 126.717848][ T6022] write_inode_now+0x170/0x1e0 [ 126.717899][ T6022] ? __pfx_write_inode_now+0x10/0x10 [ 126.717976][ T6022] ? find_held_lock+0x2b/0x80 [ 126.718024][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718072][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718121][ T6022] iput.part.0+0x487/0xb00 [ 126.718167][ T6022] iput+0x35/0x40 [ 126.718206][ T6022] ext4_xattr_block_set+0x67c/0x3650 [ 126.718255][ T6022] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 126.718295][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718341][ T6022] ? xattr_find_entry+0x289/0x330 [ 126.718405][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718451][ T6022] ? ext4_xattr_block_find+0x59/0x430 [ 126.718517][ T6022] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.718576][ T6022] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 126.718626][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718672][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.718718][ T6022] ? dquot_initialize_needed+0x183/0x2a0 [ 126.718763][ T6022] __ext4_expand_extra_isize+0x346/0x480 [ 126.718837][ T6022] __ext4_mark_inode_dirty+0x544/0x870 [ 126.718891][ T6022] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 126.718943][ T6022] ? __pfx___might_resched+0x10/0x10 [ 126.718997][ T6022] ? ext4_journal_check_start+0x22b/0x340 [ 126.719044][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.719089][ T6022] ? __ext4_journal_start_sb+0x19e/0x690 [ 126.719134][ T6022] ? ext4_evict_inode+0x5cf/0x18e0 [ 126.719188][ T6022] ext4_evict_inode+0x74e/0x18e0 [ 126.719242][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.719294][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.719344][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.719395][ T6022] evict+0x3e6/0x920 [ 126.719435][ T6022] ? __pfx_evict+0x10/0x10 [ 126.719474][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.719525][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.719577][ T6022] iput.part.0+0x6a9/0xb00 [ 126.719617][ T6022] ? __pfx_ext4_drop_inode+0x10/0x10 [ 126.719659][ T6022] iput+0x35/0x40 [ 126.719697][ T6022] ext4_orphan_cleanup+0x731/0x11e0 [ 126.719755][ T6022] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.719811][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.719861][ T6022] ? ext4_register_li_request+0xec/0x9b0 [ 126.719922][ T6022] ext4_fill_super+0x8db7/0xaf70 [ 126.719994][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.720050][ T6022] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.720091][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.720137][ T6022] ? find_held_lock+0x2b/0x80 [ 126.720188][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.720234][ T6022] ? sb_set_blocksize+0x176/0x1d0 [ 126.720299][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.720344][ T6022] ? setup_bdev_super+0x369/0x730 [ 126.720398][ T6022] get_tree_bdev_flags+0x38c/0x620 [ 126.720454][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.720512][ T6022] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.720569][ T6022] ? security_capable+0x10c/0x260 [ 126.720621][ T6022] ? security_capable+0x60/0x260 [ 126.720675][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.720721][ T6022] ? security_capable+0x7e/0x260 [ 126.720775][ T6022] vfs_get_tree+0x8e/0x340 [ 126.720828][ T6022] path_mount+0x7b9/0x23a0 [ 126.720869][ T6022] ? __pfx_path_mount+0x10/0x10 [ 126.720908][ T6022] ? putname+0x154/0x1a0 [ 126.720950][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.720996][ T6022] ? putname+0x154/0x1a0 [ 126.721036][ T6022] ? __x64_sys_mount+0x293/0x310 [ 126.721072][ T6022] __x64_sys_mount+0x293/0x310 [ 126.721110][ T6022] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.721148][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.721202][ T6022] do_syscall_64+0xcd/0xfa0 [ 126.721252][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.721291][ T6022] RIP: 0033:0x7f95d4b90eea [ 126.721319][ T6022] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.721355][ T6022] RSP: 002b:00007ffec72218a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.721389][ T6022] RAX: ffffffffffffffda RBX: 00007ffec7221930 RCX: 00007f95d4b90eea [ 126.721414][ T6022] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffec72218f0 [ 126.721439][ T6022] RBP: 0000200000000180 R08: 00007ffec7221930 R09: 0000000000800718 [ 126.721463][ T6022] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 126.721487][ T6022] R13: 00007ffec72218f0 R14: 0000000000000470 R15: 0000200000000200 [ 126.721525][ T6022] [ 127.335434][ T6022] ------------[ cut here ]------------ [ 127.341173][ T6022] EA inode 11 i_nlink=2 [ 127.341750][ T6022] WARNING: CPU: 1 PID: 6022 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.357394][ T6022] Modules linked in: [ 127.361303][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.370784][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.380987][ T6022] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.387706][ T6022] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 75 d4 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 b6 a0 2e ff 44 0f b6 2d ab 90 dc 0d [ 127.407437][ T6022] RSP: 0018:ffffc90003187178 EFLAGS: 00010282 [ 127.413558][ T6022] RAX: 0000000000000000 RBX: ffff8880763dbbf8 RCX: ffffffff817b1cd8 [ 127.421972][ T6022] RDX: ffff888021b88000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 127.430017][ T6022] RBP: ffffc90003187240 R08: 0000000000000001 R09: 0000000000000000 [ 127.438367][ T6022] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 127.446524][ T6022] R13: 0000000000000000 R14: 1ffff92000630e32 R15: ffff8880763dbde8 [ 127.454902][ T6022] FS: 0000555577587500(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 127.464162][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.470761][ T6022] CR2: 00007f965348d000 CR3: 00000000770bf000 CR4: 0000000000350ef0 [ 127.478798][ T6022] Call Trace: [ 127.482092][ T6022] [ 127.485089][ T6022] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 127.491478][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.497174][ T6022] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 127.502684][ T6022] ext4_xattr_set_entry+0x158f/0x1f00 [ 127.508130][ T6022] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 127.513913][ T6022] ? xattr_find_entry+0x289/0x330 [ 127.518985][ T6022] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 127.524263][ T6022] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 127.530205][ T6022] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 127.536687][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.542506][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.548301][ T6022] ? dquot_initialize_needed+0x183/0x2a0 [ 127.554004][ T6022] __ext4_expand_extra_isize+0x346/0x480 [ 127.559686][ T6022] __ext4_mark_inode_dirty+0x544/0x870 [ 127.565230][ T6022] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 127.571242][ T6022] ? __pfx___might_resched+0x10/0x10 [ 127.576596][ T6022] ? ext4_journal_check_start+0x22b/0x340 [ 127.582343][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.588054][ T6022] ? __ext4_journal_start_sb+0x19e/0x690 [ 127.593740][ T6022] ? ext4_evict_inode+0x5cf/0x18e0 [ 127.598903][ T6022] ext4_evict_inode+0x74e/0x18e0 [ 127.603921][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.609414][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.615139][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.620549][ T6022] evict+0x3e6/0x920 [ 127.624529][ T6022] ? __pfx_evict+0x10/0x10 [ 127.628968][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.634671][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.640500][ T6022] iput.part.0+0x6a9/0xb00 [ 127.645160][ T6022] ? __pfx_ext4_drop_inode+0x10/0x10 [ 127.650495][ T6022] iput+0x35/0x40 [ 127.654183][ T6022] ext4_orphan_cleanup+0x731/0x11e0 [ 127.659422][ T6022] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 127.665141][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.670809][ T6022] ? ext4_register_li_request+0xec/0x9b0 [ 127.676546][ T6022] ext4_fill_super+0x8db7/0xaf70 [ 127.681588][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.686963][ T6022] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.692017][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.697718][ T6022] ? find_held_lock+0x2b/0x80 [ 127.702435][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.708164][ T6022] ? sb_set_blocksize+0x176/0x1d0 [ 127.713261][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.718928][ T6022] ? setup_bdev_super+0x369/0x730 [ 127.724139][ T6022] get_tree_bdev_flags+0x38c/0x620 [ 127.729377][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.734734][ T6022] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.740592][ T6022] ? security_capable+0x10c/0x260 [ 127.745871][ T6022] ? security_capable+0x60/0x260 [ 127.750852][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.756559][ T6022] ? security_capable+0x7e/0x260 [ 127.761543][ T6022] vfs_get_tree+0x8e/0x340 [ 127.766036][ T6022] path_mount+0x7b9/0x23a0 [ 127.770484][ T6022] ? __pfx_path_mount+0x10/0x10 [ 127.775413][ T6022] ? putname+0x154/0x1a0 [ 127.779684][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.785388][ T6022] ? putname+0x154/0x1a0 [ 127.789678][ T6022] ? __x64_sys_mount+0x293/0x310 [ 127.794677][ T6022] __x64_sys_mount+0x293/0x310 [ 127.799462][ T6022] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.804817][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.810505][ T6022] do_syscall_64+0xcd/0xfa0 [ 127.815092][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.821014][ T6022] RIP: 0033:0x7f95d4b90eea [ 127.825493][ T6022] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.845337][ T6022] RSP: 002b:00007ffec72218a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.853962][ T6022] RAX: ffffffffffffffda RBX: 00007ffec7221930 RCX: 00007f95d4b90eea [ 127.861957][ T6022] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffec72218f0 [ 127.870022][ T6022] RBP: 0000200000000180 R08: 00007ffec7221930 R09: 0000000000800718 [ 127.878183][ T6022] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 127.886238][ T6022] R13: 00007ffec72218f0 R14: 0000000000000470 R15: 0000200000000200 [ 127.894319][ T6022] [ 127.897349][ T6022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.904634][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.913749][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.923806][ T6022] Call Trace: [ 127.927081][ T6022] [ 127.930003][ T6022] dump_stack_lvl+0x3d/0x1f0 [ 127.934616][ T6022] vpanic+0x640/0x6f0 [ 127.938633][ T6022] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.944647][ T6022] panic+0xca/0xd0 [ 127.948391][ T6022] ? __pfx_panic+0x10/0x10 [ 127.952842][ T6022] ? check_panic_on_warn+0x1f/0xb0 [ 127.957982][ T6022] check_panic_on_warn+0xab/0xb0 [ 127.962948][ T6022] __warn+0xf6/0x3c0 [ 127.966846][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.972492][ T6022] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.978503][ T6022] report_bug+0x3c3/0x580 [ 127.982843][ T6022] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 127.988851][ T6022] handle_bug+0x184/0x210 [ 127.993207][ T6022] exc_invalid_op+0x17/0x50 [ 127.997731][ T6022] asm_exc_invalid_op+0x1a/0x20 [ 128.002585][ T6022] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.009202][ T6022] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 75 d4 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 b6 a0 2e ff 44 0f b6 2d ab 90 dc 0d [ 128.028823][ T6022] RSP: 0018:ffffc90003187178 EFLAGS: 00010282 [ 128.034902][ T6022] RAX: 0000000000000000 RBX: ffff8880763dbbf8 RCX: ffffffff817b1cd8 [ 128.042874][ T6022] RDX: ffff888021b88000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 128.050845][ T6022] RBP: ffffc90003187240 R08: 0000000000000001 R09: 0000000000000000 [ 128.058816][ T6022] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 128.066785][ T6022] R13: 0000000000000000 R14: 1ffff92000630e32 R15: ffff8880763dbde8 [ 128.074771][ T6022] ? __warn_printk+0x198/0x350 [ 128.079560][ T6022] ? __warn_printk+0x1a5/0x350 [ 128.084346][ T6022] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 128.090370][ T6022] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.096737][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.102384][ T6022] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 128.107871][ T6022] ext4_xattr_set_entry+0x158f/0x1f00 [ 128.113255][ T6022] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 128.119067][ T6022] ? xattr_find_entry+0x289/0x330 [ 128.124124][ T6022] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 128.129376][ T6022] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 128.135291][ T6022] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 128.141548][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.147198][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.152849][ T6022] ? dquot_initialize_needed+0x183/0x2a0 [ 128.158497][ T6022] __ext4_expand_extra_isize+0x346/0x480 [ 128.164158][ T6022] __ext4_mark_inode_dirty+0x544/0x870 [ 128.169633][ T6022] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 128.175629][ T6022] ? __pfx___might_resched+0x10/0x10 [ 128.180939][ T6022] ? ext4_journal_check_start+0x22b/0x340 [ 128.186670][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.192314][ T6022] ? __ext4_journal_start_sb+0x19e/0x690 [ 128.197962][ T6022] ? ext4_evict_inode+0x5cf/0x18e0 [ 128.203091][ T6022] ext4_evict_inode+0x74e/0x18e0 [ 128.208047][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.213440][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.219090][ T6022] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.224477][ T6022] evict+0x3e6/0x920 [ 128.228382][ T6022] ? __pfx_evict+0x10/0x10 [ 128.232803][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.238456][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.244103][ T6022] iput.part.0+0x6a9/0xb00 [ 128.248529][ T6022] ? __pfx_ext4_drop_inode+0x10/0x10 [ 128.253822][ T6022] iput+0x35/0x40 [ 128.257478][ T6022] ext4_orphan_cleanup+0x731/0x11e0 [ 128.262697][ T6022] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.268362][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.274006][ T6022] ? ext4_register_li_request+0xec/0x9b0 [ 128.279673][ T6022] ext4_fill_super+0x8db7/0xaf70 [ 128.284644][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.289948][ T6022] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.294986][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.300629][ T6022] ? find_held_lock+0x2b/0x80 [ 128.305322][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.310966][ T6022] ? sb_set_blocksize+0x176/0x1d0 [ 128.316019][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.321667][ T6022] ? setup_bdev_super+0x369/0x730 [ 128.326715][ T6022] get_tree_bdev_flags+0x38c/0x620 [ 128.331853][ T6022] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.337161][ T6022] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.342819][ T6022] ? security_capable+0x10c/0x260 [ 128.347873][ T6022] ? security_capable+0x60/0x260 [ 128.352852][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.358499][ T6022] ? security_capable+0x7e/0x260 [ 128.363457][ T6022] vfs_get_tree+0x8e/0x340 [ 128.367892][ T6022] path_mount+0x7b9/0x23a0 [ 128.372318][ T6022] ? __pfx_path_mount+0x10/0x10 [ 128.377173][ T6022] ? putname+0x154/0x1a0 [ 128.381425][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.387072][ T6022] ? putname+0x154/0x1a0 [ 128.391323][ T6022] ? __x64_sys_mount+0x293/0x310 [ 128.396269][ T6022] __x64_sys_mount+0x293/0x310 [ 128.401046][ T6022] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.406342][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.411993][ T6022] do_syscall_64+0xcd/0xfa0 [ 128.416515][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.422414][ T6022] RIP: 0033:0x7f95d4b90eea [ 128.426830][ T6022] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.446447][ T6022] RSP: 002b:00007ffec72218a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.454880][ T6022] RAX: ffffffffffffffda RBX: 00007ffec7221930 RCX: 00007f95d4b90eea [ 128.462858][ T6022] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffec72218f0 [ 128.470834][ T6022] RBP: 0000200000000180 R08: 00007ffec7221930 R09: 0000000000800718 [ 128.478893][ T6022] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 128.486871][ T6022] R13: 00007ffec72218f0 R14: 0000000000000470 R15: 0000200000000200 [ 128.494856][ T6022] [ 128.498111][ T6022] Kernel Offset: disabled [ 128.502428][ T6022] Rebooting in 86400 seconds..