[ 91.840143][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. executing program [ 93.622965][ T5793] loop0: detected capacity change from 0 to 32768 [ 93.663313][ T5793] (syz-executor234,5793,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.664633][ T5793] (syz-executor234,5793,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.737554][ T5793] JBD2: Ignoring recovery information on journal [ 93.818038][ T5793] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.888814][ T5793] [ 93.888824][ T5793] ====================================================== [ 93.888829][ T5793] WARNING: possible circular locking dependency detected [ 93.888844][ T5793] syzkaller #0 Not tainted [ 93.888852][ T5793] ------------------------------------------------------ [ 93.888857][ T5793] syz-executor234/5793 is trying to acquire lock: [ 93.888865][ T5793] ffff888039a8c770 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0x9a4/0x1bb0 [ 93.888929][ T5793] [ 93.888929][ T5793] but task is already holding lock: [ 93.888934][ T5793] ffff88803d491890 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0x995/0x1bb0 [ 93.888973][ T5793] [ 93.888973][ T5793] which lock already depends on the new lock. [ 93.888973][ T5793] [ 93.888978][ T5793] [ 93.888978][ T5793] the existing dependency chain (in reverse order) is: [ 93.888983][ T5793] [ 93.888983][ T5793] -> #3 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 93.889002][ T5793] down_write+0x3a/0x50 [ 93.889021][ T5793] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 93.889038][ T5793] ocfs2_xattr_set+0x595/0x11f0 [ 93.889056][ T5793] ocfs2_set_acl+0x701/0x7b0 [ 93.889071][ T5793] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 93.889086][ T5793] vfs_remove_acl+0x48e/0x700 [ 93.889099][ T5793] ovl_workdir_create+0x57d/0x900 [ 93.889120][ T5793] ovl_fill_super+0x188f/0x5a90 [ 93.889138][ T5793] get_tree_nodev+0xbb/0x150 [ 93.889158][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.889177][ T5793] do_new_mount+0x302/0xa10 [ 93.889190][ T5793] __se_sys_mount+0x313/0x410 [ 93.889204][ T5793] do_syscall_64+0xec/0xf80 [ 93.889217][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.889231][ T5793] [ 93.889231][ T5793] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}: [ 93.889250][ T5793] down_read+0x97/0x1f0 [ 93.889264][ T5793] ocfs2_init_acl+0x1a5/0x7b0 [ 93.889279][ T5793] ocfs2_mknod+0x12ff/0x2030 [ 93.889292][ T5793] ocfs2_mkdir+0x181/0x420 [ 93.889304][ T5793] vfs_mkdir+0x52d/0x5d0 [ 93.889324][ T5793] do_mkdirat+0x27a/0x4b0 [ 93.889343][ T5793] __x64_sys_mkdir+0x6c/0x80 [ 93.889363][ T5793] do_syscall_64+0xec/0xf80 [ 93.889376][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.889389][ T5793] [ 93.889389][ T5793] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 93.889409][ T5793] down_read+0x97/0x1f0 [ 93.889422][ T5793] ocfs2_start_trans+0x36b/0x6d0 [ 93.889438][ T5793] ocfs2_modify_bh+0xe8/0x470 [ 93.889452][ T5793] ocfs2_local_read_info+0x1465/0x17e0 [ 93.889467][ T5793] dquot_load_quota_sb+0x791/0xbd0 [ 93.889488][ T5793] dquot_load_quota_inode+0x2e1/0x5d0 [ 93.889509][ T5793] ocfs2_enable_quotas+0x1c6/0x450 [ 93.889530][ T5793] ocfs2_fill_super+0x5155/0x65b0 [ 93.889550][ T5793] get_tree_bdev_flags+0x40e/0x4d0 [ 93.889571][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.889590][ T5793] do_new_mount+0x302/0xa10 [ 93.889602][ T5793] __se_sys_mount+0x313/0x410 [ 93.889616][ T5793] do_syscall_64+0xec/0xf80 [ 93.889628][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.889642][ T5793] [ 93.889642][ T5793] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 93.889664][ T5793] __lock_acquire+0x15a6/0x2cf0 [ 93.889683][ T5793] lock_acquire+0x107/0x340 [ 93.889701][ T5793] ocfs2_start_trans+0x26b/0x6d0 [ 93.889717][ T5793] ocfs2_setattr+0x9a4/0x1bb0 [ 93.889745][ T5793] notify_change+0xc18/0xf60 [ 93.889765][ T5793] ovl_workdir_create+0x717/0x900 [ 93.889785][ T5793] ovl_fill_super+0x188f/0x5a90 [ 93.889803][ T5793] get_tree_nodev+0xbb/0x150 [ 93.889822][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.889841][ T5793] do_new_mount+0x302/0xa10 [ 93.889853][ T5793] __se_sys_mount+0x313/0x410 [ 93.889867][ T5793] do_syscall_64+0xec/0xf80 [ 93.889879][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.889893][ T5793] [ 93.889893][ T5793] other info that might help us debug this: [ 93.889893][ T5793] [ 93.889897][ T5793] Chain exists of: [ 93.889897][ T5793] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 93.889897][ T5793] [ 93.889924][ T5793] Possible unsafe locking scenario: [ 93.889924][ T5793] [ 93.889928][ T5793] CPU0 CPU1 [ 93.889932][ T5793] ---- ---- [ 93.889936][ T5793] lock(&oi->ip_alloc_sem); [ 93.889946][ T5793] lock(&oi->ip_xattr_sem); [ 93.889956][ T5793] lock(&oi->ip_alloc_sem); [ 93.889967][ T5793] rlock(sb_internal#2); [ 93.889979][ T5793] [ 93.889979][ T5793] *** DEADLOCK *** [ 93.889979][ T5793] [ 93.889984][ T5793] 4 locks held by syz-executor234/5793: [ 93.889992][ T5793] #0: ffff88803a7320d0 (&type->s_umount_key#44/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 [ 93.890037][ T5793] #1: ffff888039a8c480 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 93.890079][ T5793] #2: ffff88803d491c40 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: ovl_workdir_create+0x6a1/0x900 [ 93.890123][ T5793] #3: ffff88803d491890 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0x995/0x1bb0 [ 93.890165][ T5793] [ 93.890165][ T5793] stack backtrace: [ 93.890182][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz-executor234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.890199][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.890214][ T5793] Call Trace: [ 93.890222][ T5793] [ 93.890228][ T5793] dump_stack_lvl+0xe8/0x150 [ 93.890253][ T5793] print_circular_bug+0x2e2/0x300 [ 93.890279][ T5793] check_noncircular+0x12e/0x150 [ 93.890305][ T5793] __lock_acquire+0x15a6/0x2cf0 [ 93.890330][ T5793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.890345][ T5793] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.890359][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.890375][ T5793] ? ocfs2_setattr+0x9a4/0x1bb0 [ 93.890397][ T5793] lock_acquire+0x107/0x340 [ 93.890416][ T5793] ? ocfs2_setattr+0x9a4/0x1bb0 [ 93.890444][ T5793] ocfs2_start_trans+0x26b/0x6d0 [ 93.890461][ T5793] ? ocfs2_setattr+0x9a4/0x1bb0 [ 93.890483][ T5793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.890500][ T5793] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 93.890521][ T5793] ocfs2_setattr+0x9a4/0x1bb0 [ 93.890548][ T5793] ? __pfx_ocfs2_setattr+0x10/0x10 [ 93.890570][ T5793] ? smk_access+0x14c/0x4e0 [ 93.890595][ T5793] ? smack_inode_setattr+0x17b/0x200 [ 93.890612][ T5793] ? __pfx_smack_inode_setattr+0x10/0x10 [ 93.890633][ T5793] ? current_time+0x222/0x360 [ 93.890650][ T5793] ? evm_inode_setattr+0x1bd/0x7d0 [ 93.890674][ T5793] ? __pfx_current_time+0x10/0x10 [ 93.890694][ T5793] ? try_break_deleg+0x7c/0x130 [ 93.890715][ T5793] ? __pfx_ocfs2_setattr+0x10/0x10 [ 93.890747][ T5793] notify_change+0xc18/0xf60 [ 93.890772][ T5793] ovl_workdir_create+0x717/0x900 [ 93.890803][ T5793] ? __pfx_ovl_workdir_create+0x10/0x10 [ 93.890828][ T5793] ? mnt_get_write_access+0x262/0x2d0 [ 93.890851][ T5793] ovl_fill_super+0x188f/0x5a90 [ 93.890877][ T5793] ? __pfx_stack_trace_save+0x10/0x10 [ 93.890898][ T5793] ? check_path+0x21/0x40 [ 93.890945][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.890965][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.890988][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.891010][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.891031][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.891052][ T5793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.891067][ T5793] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.891080][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.891095][ T5793] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 93.891117][ T5793] ? __raw_spin_lock_init+0x45/0x100 [ 93.891138][ T5793] ? sget_fc+0x962/0xa40 [ 93.891157][ T5793] ? __pfx_set_anon_super_fc+0x10/0x10 [ 93.891177][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.891197][ T5793] get_tree_nodev+0xbb/0x150 [ 93.891218][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.891240][ T5793] do_new_mount+0x302/0xa10 [ 93.891254][ T5793] ? safesetid_security_capable+0xa9/0x1a0 [ 93.891278][ T5793] ? __pfx_do_new_mount+0x10/0x10 [ 93.891292][ T5793] ? ns_capable+0x8a/0xf0 [ 93.891309][ T5793] ? path_mount+0x628/0xff0 [ 93.891326][ T5793] __se_sys_mount+0x313/0x410 [ 93.891343][ T5793] ? __pfx___se_sys_mount+0x10/0x10 [ 93.891360][ T5793] ? __x64_sys_mount+0x20/0xc0 [ 93.891376][ T5793] do_syscall_64+0xec/0xf80 [ 93.891390][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.891404][ T5793] ? trace_irq_disable+0x37/0x100 [ 93.891420][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 93.891437][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.891452][ T5793] RIP: 0033:0x7fa676dc5c59 [ 93.891469][ T5793] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.891482][ T5793] RSP: 002b:00007ffd5c580098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.891497][ T5793] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fa676dc5c59 [ 93.891508][ T5793] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 93.891519][ T5793] RBP: 00007fa676e3d5f0 R08: 0000200000000a00 R09: 00005555907144c0 [ 93.891529][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c5800c0 [ 93.891539][ T5793] R13: 00007ffd5c5802e8 R14: 00002000000000c4 R15: 00007fa676e0e03b [ 93.891556][ T5793] [ 93.892036][ T5793] overlayfs: upper fs does not support tmpfile. [ 93.892954][ T5793] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.893812][ T5793] ------------[ cut here ]------------ [ 93.893818][ T5793] UBSAN: array-index-out-of-bounds in fs/ocfs2/xattr.c:1985:3 [ 93.893830][ T5793] index 2 is out of range for type 'struct ocfs2_xattr_entry[] __counted_by(xh_count)' (aka 'struct ocfs2_xattr_entry[]') [ 93.893845][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz-executor234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.893861][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.893870][ T5793] Call Trace: [ 93.893875][ T5793] [ 93.893881][ T5793] dump_stack_lvl+0xe8/0x150 [ 93.893904][ T5793] ubsan_epilogue+0xa/0x40 [ 93.893918][ T5793] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 93.893947][ T5793] ocfs2_xa_remove_entry+0x36d/0x3e0 [ 93.893974][ T5793] ocfs2_xa_set+0xaf4/0x2a70 [ 93.893996][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894014][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894028][ T5793] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 93.894049][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.894064][ T5793] ? rt_mutex_slowunlock+0x493/0x8a0 [ 93.894087][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894100][ T5793] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 93.894120][ T5793] ? lock_release+0x4b/0x3b0 [ 93.894141][ T5793] ? try_to_take_rt_mutex+0x840/0xb00 [ 93.894165][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894179][ T5793] ? rtlock_slowlock_locked+0xd8/0x4010 [ 93.894202][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.894218][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894232][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894246][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.894266][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894279][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.894299][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894312][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.894331][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894345][ T5793] ? is_bpf_text_address+0x26/0x2b0 [ 93.894364][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894378][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894392][ T5793] ? lock_release+0x4b/0x3b0 [ 93.894411][ T5793] ? lock_release+0x4b/0x3b0 [ 93.894432][ T5793] ? is_bpf_text_address+0x292/0x2b0 [ 93.894452][ T5793] ? rt_read_lock+0x203/0x490 [ 93.894471][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894485][ T5793] ? lock_acquire+0x5f/0x340 [ 93.894506][ T5793] ocfs2_xattr_block_set+0x3ca/0x31b0 [ 93.894532][ T5793] ? lock_acquire+0x5f/0x340 [ 93.894555][ T5793] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 93.894577][ T5793] ? start_this_handle+0x2068/0x21c0 [ 93.894605][ T5793] ? __pfx_start_this_handle+0x10/0x10 [ 93.894631][ T5793] ? jbd2__journal_start+0x146/0x5b0 [ 93.894647][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894662][ T5793] __ocfs2_xattr_set_handle+0x27e/0xf20 [ 93.894684][ T5793] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 93.894718][ T5793] ? jbd2_journal_start+0x2a/0x40 [ 93.894780][ T5793] ? ocfs2_start_trans+0x497/0x6d0 [ 93.894799][ T5793] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 93.894820][ T5793] ocfs2_xattr_set+0xde8/0x11f0 [ 93.894846][ T5793] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 93.894868][ T5793] ? smack_log+0xef/0x3f0 [ 93.894884][ T5793] ? __pfx_smack_log+0x10/0x10 [ 93.894898][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.894913][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894927][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.894941][ T5793] ? smk_tskacc+0x2fc/0x370 [ 93.894959][ T5793] ? posix_xattr_acl+0x93/0xc0 [ 93.894974][ T5793] ? evm_protect_xattr+0x4d4/0xa90 [ 93.894989][ T5793] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 93.895009][ T5793] __vfs_removexattr+0x431/0x470 [ 93.895029][ T5793] __vfs_removexattr_locked+0x1ee/0x230 [ 93.895046][ T5793] vfs_removexattr+0x80/0x1b0 [ 93.895062][ T5793] ovl_fill_super+0x487b/0x5a90 [ 93.895088][ T5793] ? __pfx_stack_trace_save+0x10/0x10 [ 93.895107][ T5793] ? check_path+0x21/0x40 [ 93.895131][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.895151][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.895173][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.895194][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.895214][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.895234][ T5793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.895249][ T5793] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.895262][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.895276][ T5793] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 93.895297][ T5793] ? __raw_spin_lock_init+0x45/0x100 [ 93.895318][ T5793] ? sget_fc+0x962/0xa40 [ 93.895336][ T5793] ? __pfx_set_anon_super_fc+0x10/0x10 [ 93.895355][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.895375][ T5793] get_tree_nodev+0xbb/0x150 [ 93.895395][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.895416][ T5793] do_new_mount+0x302/0xa10 [ 93.895430][ T5793] ? safesetid_security_capable+0xa9/0x1a0 [ 93.895453][ T5793] ? __pfx_do_new_mount+0x10/0x10 [ 93.895466][ T5793] ? ns_capable+0x8a/0xf0 [ 93.895482][ T5793] ? path_mount+0x628/0xff0 [ 93.895499][ T5793] __se_sys_mount+0x313/0x410 [ 93.895516][ T5793] ? __pfx___se_sys_mount+0x10/0x10 [ 93.895532][ T5793] ? __x64_sys_mount+0x20/0xc0 [ 93.895547][ T5793] do_syscall_64+0xec/0xf80 [ 93.895561][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.895575][ T5793] ? trace_irq_disable+0x37/0x100 [ 93.895590][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 93.895606][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.895621][ T5793] RIP: 0033:0x7fa676dc5c59 [ 93.895633][ T5793] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.895645][ T5793] RSP: 002b:00007ffd5c580098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.895660][ T5793] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fa676dc5c59 [ 93.895671][ T5793] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 93.895680][ T5793] RBP: 00007fa676e3d5f0 R08: 0000200000000a00 R09: 00005555907144c0 [ 93.895691][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c5800c0 [ 93.895723][ T5793] R13: 00007ffd5c5802e8 R14: 00002000000000c4 R15: 00007fa676e0e03b [ 93.895753][ T5793] [ 93.895758][ T5793] ---[ end trace ]--- [ 93.895765][ T5793] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 93.895778][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz-executor234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.895795][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.895804][ T5793] Call Trace: [ 93.895809][ T5793] [ 93.895814][ T5793] vpanic+0x1e0/0x670 [ 93.895837][ T5793] panic+0xb9/0xc0 [ 93.895871][ T5793] ? __pfx_panic+0x10/0x10 [ 93.895911][ T5793] ? __pfx__printk+0x10/0x10 [ 93.895927][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.895942][ T5793] check_panic_on_warn+0x89/0xb0 [ 93.895966][ T5793] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 93.895997][ T5793] ocfs2_xa_remove_entry+0x36d/0x3e0 [ 93.896025][ T5793] ocfs2_xa_set+0xaf4/0x2a70 [ 93.896047][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896064][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896079][ T5793] ? __pfx_ocfs2_xa_set+0x10/0x10 [ 93.896101][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.896115][ T5793] ? rt_mutex_slowunlock+0x493/0x8a0 [ 93.896138][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896151][ T5793] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 93.896172][ T5793] ? lock_release+0x4b/0x3b0 [ 93.896193][ T5793] ? try_to_take_rt_mutex+0x840/0xb00 [ 93.896216][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896231][ T5793] ? rtlock_slowlock_locked+0xd8/0x4010 [ 93.896253][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.896269][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896284][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896298][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.896317][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896331][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.896351][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896364][ T5793] ? unwind_next_frame+0xa5/0x23d0 [ 93.896395][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896409][ T5793] ? is_bpf_text_address+0x26/0x2b0 [ 93.896427][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896440][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896489][ T5793] ? lock_release+0x4b/0x3b0 [ 93.896514][ T5793] ? lock_release+0x4b/0x3b0 [ 93.896543][ T5793] ? is_bpf_text_address+0x292/0x2b0 [ 93.896569][ T5793] ? rt_read_lock+0x203/0x490 [ 93.896615][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896637][ T5793] ? lock_acquire+0x5f/0x340 [ 93.896659][ T5793] ocfs2_xattr_block_set+0x3ca/0x31b0 [ 93.896685][ T5793] ? lock_acquire+0x5f/0x340 [ 93.896724][ T5793] ? __pfx_ocfs2_xattr_block_set+0x10/0x10 [ 93.896752][ T5793] ? start_this_handle+0x2068/0x21c0 [ 93.896779][ T5793] ? __pfx_start_this_handle+0x10/0x10 [ 93.896805][ T5793] ? jbd2__journal_start+0x146/0x5b0 [ 93.896822][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.896837][ T5793] __ocfs2_xattr_set_handle+0x27e/0xf20 [ 93.896860][ T5793] ? __pfx___ocfs2_xattr_set_handle+0x10/0x10 [ 93.896881][ T5793] ? jbd2_journal_start+0x2a/0x40 [ 93.896899][ T5793] ? ocfs2_start_trans+0x497/0x6d0 [ 93.896919][ T5793] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 93.896942][ T5793] ocfs2_xattr_set+0xde8/0x11f0 [ 93.896968][ T5793] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 93.896994][ T5793] ? smack_log+0xef/0x3f0 [ 93.897011][ T5793] ? __pfx_smack_log+0x10/0x10 [ 93.897025][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.897042][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.897056][ T5793] ? rcu_is_watching+0x15/0xb0 [ 93.897071][ T5793] ? smk_tskacc+0x2fc/0x370 [ 93.897090][ T5793] ? posix_xattr_acl+0x93/0xc0 [ 93.897105][ T5793] ? evm_protect_xattr+0x4d4/0xa90 [ 93.897121][ T5793] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 93.897143][ T5793] __vfs_removexattr+0x431/0x470 [ 93.897163][ T5793] __vfs_removexattr_locked+0x1ee/0x230 [ 93.897181][ T5793] vfs_removexattr+0x80/0x1b0 [ 93.897198][ T5793] ovl_fill_super+0x487b/0x5a90 [ 93.897225][ T5793] ? __pfx_stack_trace_save+0x10/0x10 [ 93.897245][ T5793] ? check_path+0x21/0x40 [ 93.897270][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.897290][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.897314][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.897337][ T5793] ? __lock_acquire+0x6b6/0x2cf0 [ 93.897358][ T5793] ? do_raw_spin_lock+0x121/0x290 [ 93.897379][ T5793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.897394][ T5793] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.897408][ T5793] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.897423][ T5793] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 93.897445][ T5793] ? __raw_spin_lock_init+0x45/0x100 [ 93.897467][ T5793] ? sget_fc+0x962/0xa40 [ 93.897486][ T5793] ? __pfx_set_anon_super_fc+0x10/0x10 [ 93.897506][ T5793] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.897526][ T5793] get_tree_nodev+0xbb/0x150 [ 93.897548][ T5793] vfs_get_tree+0x92/0x2a0 [ 93.897570][ T5793] do_new_mount+0x302/0xa10 [ 93.897584][ T5793] ? safesetid_security_capable+0xa9/0x1a0 [ 93.897609][ T5793] ? __pfx_do_new_mount+0x10/0x10 [ 93.897623][ T5793] ? ns_capable+0x8a/0xf0 [ 93.897640][ T5793] ? path_mount+0x628/0xff0 [ 93.897657][ T5793] __se_sys_mount+0x313/0x410 [ 93.897675][ T5793] ? __pfx___se_sys_mount+0x10/0x10 [ 93.897693][ T5793] ? __x64_sys_mount+0x20/0xc0 [ 93.897709][ T5793] do_syscall_64+0xec/0xf80 [ 93.897723][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.897743][ T5793] ? trace_irq_disable+0x37/0x100 [ 93.897759][ T5793] ? clear_bhb_loop+0x60/0xb0 [ 93.897776][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.897791][ T5793] RIP: 0033:0x7fa676dc5c59 [ 93.897803][ T5793] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.897816][ T5793] RSP: 002b:00007ffd5c580098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.897831][ T5793] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fa676dc5c59 [ 93.897843][ T5793] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 93.897853][ T5793] RBP: 00007fa676e3d5f0 R08: 0000200000000a00 R09: 00005555907144c0 [ 93.897864][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c5800c0 [ 93.897874][ T5793] R13: 00007ffd5c5802e8 R14: 00002000000000c4 R15: 00007fa676e0e03b [ 93.897891][ T5793] [ 93.898494][ T5793] Kernel Offset: disabled