[ 101.455310][ T43] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. 2025/11/25 11:10:27 parsed 1 programs [ 110.831282][ T5837] cgroup: Unknown subsys name 'net' [ 110.968953][ T5837] cgroup: Unknown subsys name 'cpuset' [ 110.979716][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 112.826760][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.713511][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.315784][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 118.493532][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.500681][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.508414][ T5885] bridge_slave_0: entered allmulticast mode [ 118.516256][ T5885] bridge_slave_0: entered promiscuous mode [ 118.526169][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.533535][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.540723][ T5885] bridge_slave_1: entered allmulticast mode [ 118.551194][ T5885] bridge_slave_1: entered promiscuous mode [ 118.596469][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.613457][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.658713][ T5885] team0: Port device team_slave_0 added [ 118.667329][ T5885] team0: Port device team_slave_1 added [ 118.704358][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.711324][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.737340][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.751130][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.758276][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.784242][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.840240][ T5885] hsr_slave_0: entered promiscuous mode [ 118.847201][ T5885] hsr_slave_1: entered promiscuous mode [ 119.027853][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.041471][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.054223][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.066420][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.104293][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.111538][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.119885][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.127054][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.140068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.148898][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.217073][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.240877][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.255869][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.263056][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.278073][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.285287][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.549561][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.598887][ T5885] veth0_vlan: entered promiscuous mode [ 119.613674][ T5885] veth1_vlan: entered promiscuous mode [ 119.650842][ T5885] veth0_macvtap: entered promiscuous mode [ 119.661640][ T5885] veth1_macvtap: entered promiscuous mode [ 119.683413][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.700272][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.718770][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.728858][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.744684][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.763876][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.917768][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.989881][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.061607][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.166684][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.198019][ T5912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.210204][ T5912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.219407][ T5912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.229290][ T5912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.237368][ T5912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.558678][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.567205][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.604441][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.612956][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.335737][ T12] bridge_slave_1: left allmulticast mode [ 122.350571][ T12] bridge_slave_1: left promiscuous mode [ 122.360294][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.375750][ T12] bridge_slave_0: left allmulticast mode [ 122.393423][ T12] bridge_slave_0: left promiscuous mode [ 122.399195][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 2025/11/25 11:10:44 executed programs: 0 [ 122.819896][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.825379][ T5912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.838563][ T5912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.846251][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.846690][ T5912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.865003][ T5912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.865820][ T12] bond0 (unregistering): Released all slaves [ 122.872958][ T5912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.002068][ T12] hsr_slave_0: left promiscuous mode [ 123.008747][ T12] hsr_slave_1: left promiscuous mode [ 123.015273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.025663][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.037011][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.044646][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.071374][ T12] veth1_macvtap: left promiscuous mode [ 123.077295][ T12] veth0_macvtap: left promiscuous mode [ 123.083975][ T12] veth1_vlan: left promiscuous mode [ 123.089578][ T12] veth0_vlan: left promiscuous mode [ 123.600210][ T12] team0 (unregistering): Port device team_slave_1 removed [ 123.634062][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.073610][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 124.343081][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.350328][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.361208][ T5941] bridge_slave_0: entered allmulticast mode [ 124.371638][ T5941] bridge_slave_0: entered promiscuous mode [ 124.381217][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.388588][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.404315][ T5941] bridge_slave_1: entered allmulticast mode [ 124.412923][ T5941] bridge_slave_1: entered promiscuous mode [ 124.469676][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.485217][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.852956][ T5941] team0: Port device team_slave_0 added [ 124.862268][ T5941] team0: Port device team_slave_1 added [ 124.901721][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.902792][ T5144] Bluetooth: hci0: command tx timeout [ 124.910017][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.940962][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.958079][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.967465][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.996920][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.120966][ T5941] hsr_slave_0: entered promiscuous mode [ 125.127943][ T5941] hsr_slave_1: entered promiscuous mode [ 125.890590][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.907185][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.928297][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.941500][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.066053][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.096573][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.111442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.118671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.144354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.151555][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.523542][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.595595][ T5941] veth0_vlan: entered promiscuous mode [ 126.610491][ T5941] veth1_vlan: entered promiscuous mode [ 126.656284][ T5941] veth0_macvtap: entered promiscuous mode [ 126.670500][ T5941] veth1_macvtap: entered promiscuous mode [ 126.696011][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.714099][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.734487][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.746706][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.759410][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.768937][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.873197][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.881068][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.925483][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.934992][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.972993][ T5144] Bluetooth: hci0: command tx timeout [ 127.030396][ T6023] loop0: detected capacity change from 0 to 512 [ 127.095586][ T6023] [ 127.097961][ T6023] ====================================================== [ 127.104981][ T6023] WARNING: possible circular locking dependency detected [ 127.112016][ T6023] syzkaller #0 Not tainted [ 127.116441][ T6023] ------------------------------------------------------ [ 127.123557][ T6023] syz.0.17/6023 is trying to acquire lock: [ 127.129374][ T6023] ffff888079952b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 127.139287][ T6023] [ 127.139287][ T6023] but task is already holding lock: [ 127.146674][ T6023] ffff888075f73098 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 127.156573][ T6023] [ 127.156573][ T6023] which lock already depends on the new lock. [ 127.156573][ T6023] [ 127.166973][ T6023] [ 127.166973][ T6023] the existing dependency chain (in reverse order) is: [ 127.175980][ T6023] [ 127.175980][ T6023] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 127.183569][ T6023] down_read+0x9b/0x480 [ 127.188278][ T6023] ext4_setattr+0x875/0x2ae0 [ 127.193585][ T6023] notify_change+0x6d2/0x12a0 [ 127.198802][ T6023] chown_common+0x54e/0x680 [ 127.203834][ T6023] do_fchownat+0x1a7/0x200 [ 127.208780][ T6023] __x64_sys_chown+0x7b/0xc0 [ 127.213900][ T6023] do_syscall_64+0xcd/0xfa0 [ 127.218944][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.225369][ T6023] [ 127.225369][ T6023] -> #1 (jbd2_handle){++++}-{0:0}: [ 127.232694][ T6023] start_this_handle+0x5ea/0x1410 [ 127.238272][ T6023] jbd2__journal_start+0x394/0x6a0 [ 127.243923][ T6023] __ext4_journal_start_sb+0x195/0x690 [ 127.249917][ T6023] ext4_do_writepages+0xc23/0x3cf0 [ 127.255567][ T6023] ext4_writepages+0x37a/0x7d0 [ 127.260861][ T6023] do_writepages+0x27a/0x600 [ 127.265978][ T6023] __writeback_single_inode+0x160/0xfb0 [ 127.272067][ T6023] writeback_sb_inodes+0x60d/0xfa0 [ 127.277716][ T6023] __writeback_inodes_wb+0xf8/0x2d0 [ 127.283453][ T6023] wb_writeback+0x7f3/0xb70 [ 127.288500][ T6023] wb_workfn+0x8ca/0xbe0 [ 127.293305][ T6023] process_one_work+0x9cf/0x1b70 [ 127.298778][ T6023] worker_thread+0x6c8/0xf10 [ 127.303900][ T6023] kthread+0x3c5/0x780 [ 127.308491][ T6023] ret_from_fork+0x675/0x7d0 [ 127.313605][ T6023] ret_from_fork_asm+0x1a/0x30 [ 127.318914][ T6023] [ 127.318914][ T6023] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 127.327360][ T6023] __lock_acquire+0x126f/0x1c90 [ 127.332769][ T6023] lock_acquire+0x179/0x350 [ 127.337792][ T6023] ext4_writepages+0x224/0x7d0 [ 127.343089][ T6023] do_writepages+0x27a/0x600 [ 127.348212][ T6023] __writeback_single_inode+0x160/0xfb0 [ 127.354303][ T6023] writeback_single_inode+0x2bc/0x550 [ 127.360220][ T6023] write_inode_now+0x170/0x1e0 [ 127.365523][ T6023] iput.part.0+0x487/0xb00 [ 127.370473][ T6023] iput+0x35/0x40 [ 127.374631][ T6023] ext4_xattr_block_set+0x67c/0x3650 [ 127.380440][ T6023] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 127.386865][ T6023] __ext4_expand_extra_isize+0x346/0x480 [ 127.393053][ T6023] __ext4_mark_inode_dirty+0x544/0x870 [ 127.399046][ T6023] ext4_evict_inode+0x74e/0x18e0 [ 127.404534][ T6023] evict+0x3e6/0x920 [ 127.408993][ T6023] iput.part.0+0x6a9/0xb00 [ 127.413982][ T6023] iput+0x35/0x40 [ 127.418175][ T6023] ext4_orphan_cleanup+0x731/0x11e0 [ 127.423920][ T6023] ext4_fill_super+0x8db7/0xaf70 [ 127.429408][ T6023] get_tree_bdev_flags+0x38c/0x620 [ 127.435070][ T6023] vfs_get_tree+0x8e/0x340 [ 127.440023][ T6023] path_mount+0x7b9/0x23a0 [ 127.444967][ T6023] __x64_sys_mount+0x293/0x310 [ 127.450265][ T6023] do_syscall_64+0xcd/0xfa0 [ 127.455312][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.461736][ T6023] [ 127.461736][ T6023] other info that might help us debug this: [ 127.461736][ T6023] [ 127.471953][ T6023] Chain exists of: [ 127.471953][ T6023] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 127.471953][ T6023] [ 127.485383][ T6023] Possible unsafe locking scenario: [ 127.485383][ T6023] [ 127.492828][ T6023] CPU0 CPU1 [ 127.498182][ T6023] ---- ---- [ 127.503531][ T6023] lock(&ei->xattr_sem); [ 127.507867][ T6023] lock(jbd2_handle); [ 127.514459][ T6023] lock(&ei->xattr_sem); [ 127.521316][ T6023] rlock(&sbi->s_writepages_rwsem); [ 127.526605][ T6023] [ 127.526605][ T6023] *** DEADLOCK *** [ 127.526605][ T6023] [ 127.534739][ T6023] 3 locks held by syz.0.17/6023: [ 127.539673][ T6023] #0: ffff8880799500e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 127.549866][ T6023] #1: ffff888079950610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 127.558376][ T6023] #2: ffff888075f73098 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 127.568709][ T6023] [ 127.568709][ T6023] stack backtrace: [ 127.574599][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.574644][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.574666][ T6023] Call Trace: [ 127.574679][ T6023] [ 127.574692][ T6023] dump_stack_lvl+0x116/0x1f0 [ 127.574743][ T6023] print_circular_bug+0x275/0x350 [ 127.574807][ T6023] check_noncircular+0x14c/0x170 [ 127.574874][ T6023] __lock_acquire+0x126f/0x1c90 [ 127.574939][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.574990][ T6023] lock_acquire+0x179/0x350 [ 127.575022][ T6023] ? do_writepages+0x27a/0x600 [ 127.575062][ T6023] ? __pfx___might_resched+0x10/0x10 [ 127.575116][ T6023] ext4_writepages+0x224/0x7d0 [ 127.575165][ T6023] ? do_writepages+0x27a/0x600 [ 127.575202][ T6023] ? __pfx_ext4_writepages+0x10/0x10 [ 127.575250][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.575296][ T6023] ? __rcu_read_unlock+0x2bc/0x550 [ 127.575344][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.575392][ T6023] ? __pfx_ext4_writepages+0x10/0x10 [ 127.575447][ T6023] do_writepages+0x27a/0x600 [ 127.575486][ T6023] ? __pfx_do_writepages+0x10/0x10 [ 127.575529][ T6023] __writeback_single_inode+0x160/0xfb0 [ 127.575582][ T6023] ? __pfx___writeback_single_inode+0x10/0x10 [ 127.575631][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.575677][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 127.575720][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.575769][ T6023] writeback_single_inode+0x2bc/0x550 [ 127.575823][ T6023] write_inode_now+0x170/0x1e0 [ 127.575874][ T6023] ? __pfx_write_inode_now+0x10/0x10 [ 127.575950][ T6023] ? find_held_lock+0x2b/0x80 [ 127.575998][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576046][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576095][ T6023] iput.part.0+0x487/0xb00 [ 127.576141][ T6023] iput+0x35/0x40 [ 127.576179][ T6023] ext4_xattr_block_set+0x67c/0x3650 [ 127.576227][ T6023] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 127.576267][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576313][ T6023] ? xattr_find_entry+0x289/0x330 [ 127.576377][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576427][ T6023] ? ext4_xattr_block_find+0x59/0x430 [ 127.576493][ T6023] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 127.576551][ T6023] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 127.576601][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576647][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.576692][ T6023] ? dquot_initialize_needed+0x183/0x2a0 [ 127.576738][ T6023] __ext4_expand_extra_isize+0x346/0x480 [ 127.576805][ T6023] __ext4_mark_inode_dirty+0x544/0x870 [ 127.576859][ T6023] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 127.576911][ T6023] ? __pfx___might_resched+0x10/0x10 [ 127.576965][ T6023] ? ext4_journal_check_start+0x22b/0x340 [ 127.577012][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.577057][ T6023] ? __ext4_journal_start_sb+0x19e/0x690 [ 127.577102][ T6023] ? ext4_evict_inode+0x5cf/0x18e0 [ 127.577155][ T6023] ext4_evict_inode+0x74e/0x18e0 [ 127.577210][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.577261][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.577311][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.577362][ T6023] evict+0x3e6/0x920 [ 127.577403][ T6023] ? __pfx_evict+0x10/0x10 [ 127.577445][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.577497][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.577548][ T6023] iput.part.0+0x6a9/0xb00 [ 127.577589][ T6023] ? __pfx_ext4_drop_inode+0x10/0x10 [ 127.577630][ T6023] iput+0x35/0x40 [ 127.577668][ T6023] ext4_orphan_cleanup+0x731/0x11e0 [ 127.577726][ T6023] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 127.577781][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.577826][ T6023] ? ext4_register_li_request+0xec/0x9b0 [ 127.577887][ T6023] ext4_fill_super+0x8db7/0xaf70 [ 127.577959][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.578015][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.578056][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578102][ T6023] ? find_held_lock+0x2b/0x80 [ 127.578153][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578202][ T6023] ? sb_set_blocksize+0x176/0x1d0 [ 127.578238][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578283][ T6023] ? setup_bdev_super+0x369/0x730 [ 127.578336][ T6023] get_tree_bdev_flags+0x38c/0x620 [ 127.578393][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.578455][ T6023] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.578514][ T6023] ? apparmor_capable+0x114/0x1d0 [ 127.578573][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578619][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578665][ T6023] ? security_capable+0x7e/0x260 [ 127.578719][ T6023] vfs_get_tree+0x8e/0x340 [ 127.578766][ T6023] path_mount+0x7b9/0x23a0 [ 127.578806][ T6023] ? __pfx_path_mount+0x10/0x10 [ 127.578845][ T6023] ? putname+0x154/0x1a0 [ 127.578887][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.578932][ T6023] ? putname+0x154/0x1a0 [ 127.578972][ T6023] ? __x64_sys_mount+0x293/0x310 [ 127.579009][ T6023] __x64_sys_mount+0x293/0x310 [ 127.579047][ T6023] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.579084][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.579138][ T6023] do_syscall_64+0xcd/0xfa0 [ 127.579188][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.579226][ T6023] RIP: 0033:0x7fda94790eea [ 127.579254][ T6023] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.579290][ T6023] RSP: 002b:00007ffd74e4bc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.579324][ T6023] RAX: ffffffffffffffda RBX: 00007ffd74e4bcb0 RCX: 00007fda94790eea [ 127.579349][ T6023] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd74e4bc70 [ 127.579374][ T6023] RBP: 0000200000000180 R08: 00007ffd74e4bcb0 R09: 0000000000800718 [ 127.579398][ T6023] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 127.579427][ T6023] R13: 00007ffd74e4bc70 R14: 000000000000046f R15: 0000200000000480 [ 127.579462][ T6023] [ 128.203793][ T6023] ------------[ cut here ]------------ [ 128.209322][ T6023] EA inode 11 i_nlink=2 [ 128.210239][ T6023] WARNING: CPU: 0 PID: 6023 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.224801][ T6023] Modules linked in: [ 128.228724][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.237953][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.248253][ T6023] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.254956][ T6023] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 35 d8 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 76 a4 2e ff 44 0f b6 2d a7 8d dc 0d [ 128.274707][ T6023] RSP: 0018:ffffc900031d7178 EFLAGS: 00010282 [ 128.280804][ T6023] RAX: 0000000000000000 RBX: ffff888075f74f18 RCX: ffffffff817b1cd8 [ 128.289195][ T6023] RDX: ffff88807b9c3c80 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 128.297556][ T6023] RBP: ffffc900031d7240 R08: 0000000000000001 R09: 0000000000000000 [ 128.305667][ T6023] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 128.313762][ T6023] R13: 0000000000000000 R14: 1ffff9200063ae32 R15: ffff888075f75108 [ 128.321770][ T6023] FS: 0000555574ed9500(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 128.330849][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.337549][ T6023] CR2: 0000557897675950 CR3: 00000000740b6000 CR4: 0000000000350ef0 [ 128.345575][ T6023] Call Trace: [ 128.348857][ T6023] [ 128.351791][ T6023] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.358278][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.364011][ T6023] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 128.369528][ T6023] ext4_xattr_set_entry+0x158f/0x1f00 [ 128.375023][ T6023] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 128.380760][ T6023] ? xattr_find_entry+0x289/0x330 [ 128.386208][ T6023] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 128.391451][ T6023] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 128.397795][ T6023] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 128.404131][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.409794][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.415523][ T6023] ? dquot_initialize_needed+0x183/0x2a0 [ 128.421179][ T6023] __ext4_expand_extra_isize+0x346/0x480 [ 128.426928][ T6023] __ext4_mark_inode_dirty+0x544/0x870 [ 128.432491][ T6023] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 128.438524][ T6023] ? __pfx___might_resched+0x10/0x10 [ 128.443970][ T6023] ? ext4_journal_check_start+0x22b/0x340 [ 128.449733][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.455483][ T6023] ? __ext4_journal_start_sb+0x19e/0x690 [ 128.461149][ T6023] ? ext4_evict_inode+0x5cf/0x18e0 [ 128.466399][ T6023] ext4_evict_inode+0x74e/0x18e0 [ 128.471376][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.476839][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.482553][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.488271][ T6023] evict+0x3e6/0x920 [ 128.492538][ T6023] ? __pfx_evict+0x10/0x10 [ 128.497065][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.502841][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508515][ T6023] iput.part.0+0x6a9/0xb00 [ 128.513131][ T6023] ? __pfx_ext4_drop_inode+0x10/0x10 [ 128.518447][ T6023] iput+0x35/0x40 [ 128.522167][ T6023] ext4_orphan_cleanup+0x731/0x11e0 [ 128.527407][ T6023] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.533133][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.538799][ T6023] ? ext4_register_li_request+0xec/0x9b0 [ 128.544562][ T6023] ext4_fill_super+0x8db7/0xaf70 [ 128.549554][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.554978][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.560031][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.565775][ T6023] ? find_held_lock+0x2b/0x80 [ 128.570495][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.576234][ T6023] ? sb_set_blocksize+0x176/0x1d0 [ 128.581280][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.587019][ T6023] ? setup_bdev_super+0x369/0x730 [ 128.592430][ T6023] get_tree_bdev_flags+0x38c/0x620 [ 128.597591][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.603302][ T6023] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.608981][ T6023] ? apparmor_capable+0x114/0x1d0 [ 128.614171][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.619846][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.625594][ T6023] ? security_capable+0x7e/0x260 [ 128.630576][ T6023] vfs_get_tree+0x8e/0x340 [ 128.635122][ T6023] path_mount+0x7b9/0x23a0 [ 128.639574][ T6023] ? __pfx_path_mount+0x10/0x10 [ 128.644562][ T6023] ? putname+0x154/0x1a0 [ 128.648830][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.654542][ T6023] ? putname+0x154/0x1a0 [ 128.658804][ T6023] ? __x64_sys_mount+0x293/0x310 [ 128.663848][ T6023] __x64_sys_mount+0x293/0x310 [ 128.668641][ T6023] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.674046][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.679724][ T6023] do_syscall_64+0xcd/0xfa0 [ 128.684346][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.690266][ T6023] RIP: 0033:0x7fda94790eea [ 128.695042][ T6023] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.715282][ T6023] RSP: 002b:00007ffd74e4bc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.723814][ T6023] RAX: ffffffffffffffda RBX: 00007ffd74e4bcb0 RCX: 00007fda94790eea [ 128.731806][ T6023] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd74e4bc70 [ 128.740015][ T6023] RBP: 0000200000000180 R08: 00007ffd74e4bcb0 R09: 0000000000800718 [ 128.748163][ T6023] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 128.756227][ T6023] R13: 00007ffd74e4bc70 R14: 000000000000046f R15: 0000200000000480 [ 128.764291][ T6023] [ 128.767341][ T6023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.774628][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.783743][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.793800][ T6023] Call Trace: [ 128.797075][ T6023] [ 128.800002][ T6023] dump_stack_lvl+0x3d/0x1f0 [ 128.804613][ T6023] vpanic+0x640/0x6f0 [ 128.808622][ T6023] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.814630][ T6023] panic+0xca/0xd0 [ 128.818382][ T6023] ? __pfx_panic+0x10/0x10 [ 128.822838][ T6023] ? check_panic_on_warn+0x1f/0xb0 [ 128.828007][ T6023] check_panic_on_warn+0xab/0xb0 [ 128.832993][ T6023] __warn+0xf6/0x3c0 [ 128.836896][ T6023] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.842918][ T6023] report_bug+0x3c3/0x580 [ 128.847264][ T6023] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.853282][ T6023] handle_bug+0x184/0x210 [ 128.857730][ T6023] exc_invalid_op+0x17/0x50 [ 128.862266][ T6023] asm_exc_invalid_op+0x1a/0x20 [ 128.867128][ T6023] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 128.873746][ T6023] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 35 d8 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 76 a4 2e ff 44 0f b6 2d a7 8d dc 0d [ 128.893374][ T6023] RSP: 0018:ffffc900031d7178 EFLAGS: 00010282 [ 128.899456][ T6023] RAX: 0000000000000000 RBX: ffff888075f74f18 RCX: ffffffff817b1cd8 [ 128.907425][ T6023] RDX: ffff88807b9c3c80 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 128.915401][ T6023] RBP: ffffc900031d7240 R08: 0000000000000001 R09: 0000000000000000 [ 128.923469][ T6023] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 128.931446][ T6023] R13: 0000000000000000 R14: 1ffff9200063ae32 R15: ffff888075f75108 [ 128.939429][ T6023] ? __warn_printk+0x198/0x350 [ 128.944254][ T6023] ? __warn_printk+0x1a5/0x350 [ 128.949109][ T6023] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 128.955133][ T6023] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.961497][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.967152][ T6023] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 128.972654][ T6023] ext4_xattr_set_entry+0x158f/0x1f00 [ 128.978046][ T6023] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 128.983773][ T6023] ? xattr_find_entry+0x289/0x330 [ 128.988839][ T6023] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 128.994055][ T6023] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 128.999979][ T6023] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 129.006246][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.011902][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.017556][ T6023] ? dquot_initialize_needed+0x183/0x2a0 [ 129.023305][ T6023] __ext4_expand_extra_isize+0x346/0x480 [ 129.029012][ T6023] __ext4_mark_inode_dirty+0x544/0x870 [ 129.034502][ T6023] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 129.040507][ T6023] ? __pfx___might_resched+0x10/0x10 [ 129.045808][ T6023] ? ext4_journal_check_start+0x22b/0x340 [ 129.051539][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.057184][ T6023] ? __ext4_journal_start_sb+0x19e/0x690 [ 129.062839][ T6023] ? ext4_evict_inode+0x5cf/0x18e0 [ 129.067970][ T6023] ext4_evict_inode+0x74e/0x18e0 [ 129.072927][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.078329][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.083990][ T6023] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.089393][ T6023] evict+0x3e6/0x920 [ 129.093307][ T6023] ? __pfx_evict+0x10/0x10 [ 129.097735][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.103396][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.109060][ T6023] iput.part.0+0x6a9/0xb00 [ 129.113492][ T6023] ? __pfx_ext4_drop_inode+0x10/0x10 [ 129.118794][ T6023] iput+0x35/0x40 [ 129.122444][ T6023] ext4_orphan_cleanup+0x731/0x11e0 [ 129.127676][ T6023] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.133336][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.138990][ T6023] ? ext4_register_li_request+0xec/0x9b0 [ 129.144658][ T6023] ext4_fill_super+0x8db7/0xaf70 [ 129.149640][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.154955][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 129.160006][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.165657][ T6023] ? find_held_lock+0x2b/0x80 [ 129.170362][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.176020][ T6023] ? sb_set_blocksize+0x176/0x1d0 [ 129.181073][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.186729][ T6023] ? setup_bdev_super+0x369/0x730 [ 129.191774][ T6023] get_tree_bdev_flags+0x38c/0x620 [ 129.196907][ T6023] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.202235][ T6023] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.207890][ T6023] ? apparmor_capable+0x114/0x1d0 [ 129.212939][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.218597][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.224249][ T6023] ? security_capable+0x7e/0x260 [ 129.229215][ T6023] vfs_get_tree+0x8e/0x340 [ 129.233652][ T6023] path_mount+0x7b9/0x23a0 [ 129.238085][ T6023] ? __pfx_path_mount+0x10/0x10 [ 129.242951][ T6023] ? putname+0x154/0x1a0 [ 129.247211][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.252853][ T6023] ? putname+0x154/0x1a0 [ 129.257107][ T6023] ? __x64_sys_mount+0x293/0x310 [ 129.263838][ T6023] __x64_sys_mount+0x293/0x310 [ 129.269553][ T6023] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.274904][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.280593][ T6023] do_syscall_64+0xcd/0xfa0 [ 129.285139][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.291055][ T6023] RIP: 0033:0x7fda94790eea [ 129.295477][ T6023] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.315099][ T6023] RSP: 002b:00007ffd74e4bc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.323533][ T6023] RAX: ffffffffffffffda RBX: 00007ffd74e4bcb0 RCX: 00007fda94790eea [ 129.331506][ T6023] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd74e4bc70 [ 129.339477][ T6023] RBP: 0000200000000180 R08: 00007ffd74e4bcb0 R09: 0000000000800718 [ 129.347451][ T6023] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 129.355423][ T6023] R13: 00007ffd74e4bc70 R14: 000000000000046f R15: 0000200000000480 [ 129.363413][ T6023] [ 129.366640][ T6023] Kernel Offset: disabled [ 129.370959][ T6023] Rebooting in 86400 seconds..