[ 92.195380][ T115] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. 2025/10/07 21:42:29 parsed 1 programs [ 98.526821][ T5804] cgroup: Unknown subsys name 'net' [ 98.788064][ T5804] cgroup: Unknown subsys name 'cpuset' [ 98.842852][ T5804] cgroup: Unknown subsys name 'rlimit' [ 100.843850][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.819872][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.819895][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.973924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.973947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.299781][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 109.763277][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.763404][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.763615][ T5863] bridge_slave_0: entered allmulticast mode [ 109.765715][ T5863] bridge_slave_0: entered promiscuous mode [ 109.784655][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.784834][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.785057][ T5863] bridge_slave_1: entered allmulticast mode [ 109.788330][ T5863] bridge_slave_1: entered promiscuous mode [ 109.950288][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.965702][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.146315][ T5863] team0: Port device team_slave_0 added [ 110.151120][ T5863] team0: Port device team_slave_1 added [ 110.326474][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.326494][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.326521][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.330983][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.331001][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.331027][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.810577][ T5863] hsr_slave_0: entered promiscuous mode [ 110.811743][ T5863] hsr_slave_1: entered promiscuous mode [ 111.217652][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.239990][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.276696][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.316212][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.461958][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.505837][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.516146][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.516941][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.537407][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.537571][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.789219][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.840351][ T5863] veth0_vlan: entered promiscuous mode [ 111.850714][ T5863] veth1_vlan: entered promiscuous mode [ 111.887475][ T5863] veth0_macvtap: entered promiscuous mode [ 111.891680][ T5863] veth1_macvtap: entered promiscuous mode [ 111.917056][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.935664][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.948795][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953100][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953684][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953731][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.268239][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.269806][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.270771][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.272025][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.275231][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.718812][ T3604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.947402][ T3604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.175158][ T3604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.366956][ T3604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/07 21:42:49 executed programs: 0 [ 114.890570][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.900379][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.906541][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.908155][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.909242][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.164811][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 115.454509][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.454834][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.455034][ T5910] bridge_slave_0: entered allmulticast mode [ 115.457789][ T5910] bridge_slave_0: entered promiscuous mode [ 115.463914][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.465280][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.465559][ T5910] bridge_slave_1: entered allmulticast mode [ 115.468678][ T5910] bridge_slave_1: entered promiscuous mode [ 115.648271][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.658429][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.876458][ T5910] team0: Port device team_slave_0 added [ 115.967562][ T5910] team0: Port device team_slave_1 added [ 116.156730][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.156750][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.156776][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.160718][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.160734][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.160761][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.315076][ T3604] bridge_slave_1: left allmulticast mode [ 116.315147][ T3604] bridge_slave_1: left promiscuous mode [ 116.316290][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.373734][ T3604] bridge_slave_0: left allmulticast mode [ 116.373757][ T3604] bridge_slave_0: left promiscuous mode [ 116.373941][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.994222][ T61] Bluetooth: hci0: command tx timeout [ 117.983374][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.043026][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.084964][ T3604] bond0 (unregistering): Released all slaves [ 118.223879][ T5910] hsr_slave_0: entered promiscuous mode [ 118.224857][ T5910] hsr_slave_1: entered promiscuous mode [ 118.225789][ T5910] debugfs: 'hsr0' already exists in 'hsr' [ 118.225874][ T5910] Cannot create hsr debugfs directory [ 118.472391][ T3604] hsr_slave_0: left promiscuous mode [ 118.512521][ T3604] hsr_slave_1: left promiscuous mode [ 118.513769][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.513851][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.554441][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.554472][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.667182][ T3604] veth1_macvtap: left promiscuous mode [ 118.667427][ T3604] veth0_macvtap: left promiscuous mode [ 118.667721][ T3604] veth1_vlan: left promiscuous mode [ 118.668023][ T3604] veth0_vlan: left promiscuous mode [ 119.082374][ T61] Bluetooth: hci0: command tx timeout [ 120.663068][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 120.863229][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 121.152284][ T61] Bluetooth: hci0: command tx timeout [ 123.242731][ T61] Bluetooth: hci0: command tx timeout [ 124.655429][ T5910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.697206][ T5910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.738043][ T5910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.779780][ T5910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.988571][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.026944][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.054391][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.054607][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.066012][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.066648][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.611047][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.730582][ T5910] veth0_vlan: entered promiscuous mode [ 125.740966][ T5910] veth1_vlan: entered promiscuous mode [ 125.801023][ T5910] veth0_macvtap: entered promiscuous mode [ 125.809154][ T5910] veth1_macvtap: entered promiscuous mode [ 125.843892][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.864878][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.886024][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.887733][ T1180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.888576][ T1180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.889149][ T1180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.070148][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.070183][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.135057][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.135078][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/07 21:43:01 executed programs: 2 [ 126.286287][ T5999] loop0: detected capacity change from 0 to 512 [ 126.351759][ T5999] [ 126.351772][ T5999] ====================================================== [ 126.351788][ T5999] WARNING: possible circular locking dependency detected [ 126.351805][ T5999] syzkaller #0 Not tainted [ 126.351815][ T5999] ------------------------------------------------------ [ 126.351822][ T5999] syz.0.17/5999 is trying to acquire lock: [ 126.351833][ T5999] ffff888031b6ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 126.351897][ T5999] [ 126.351897][ T5999] but task is already holding lock: [ 126.351904][ T5999] ffff888058192440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 126.351950][ T5999] [ 126.351950][ T5999] which lock already depends on the new lock. [ 126.351950][ T5999] [ 126.351957][ T5999] [ 126.351957][ T5999] the existing dependency chain (in reverse order) is: [ 126.351964][ T5999] [ 126.351964][ T5999] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 126.351989][ T5999] lock_acquire+0x120/0x360 [ 126.352016][ T5999] down_write+0x3a/0x50 [ 126.352037][ T5999] ext4_xattr_set_handle+0x165/0x1590 [ 126.352064][ T5999] ext4_initxattrs+0x9f/0x110 [ 126.352084][ T5999] security_inode_init_security+0x29d/0x3f0 [ 126.352130][ T5999] __ext4_new_inode+0x3314/0x3cb0 [ 126.352158][ T5999] ext4_create+0x22d/0x460 [ 126.352178][ T5999] path_openat+0x14fd/0x3840 [ 126.352196][ T5999] do_filp_open+0x1fa/0x410 [ 126.352214][ T5999] do_sys_openat2+0x121/0x1c0 [ 126.352229][ T5999] __x64_sys_openat+0x138/0x170 [ 126.352245][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.352264][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.352283][ T5999] [ 126.352283][ T5999] -> #1 (jbd2_handle){++++}-{0:0}: [ 126.352310][ T5999] lock_acquire+0x120/0x360 [ 126.352336][ T5999] start_this_handle+0x1fa7/0x21c0 [ 126.352360][ T5999] jbd2__journal_start+0x2c1/0x5b0 [ 126.352384][ T5999] __ext4_journal_start_sb+0x227/0x5c0 [ 126.352412][ T5999] ext4_do_writepages+0xf6f/0x4600 [ 126.352437][ T5999] ext4_writepages+0x205/0x350 [ 126.352453][ T5999] do_writepages+0x32e/0x550 [ 126.352471][ T5999] file_write_and_wait_range+0x244/0x340 [ 126.352495][ T5999] ext4_sync_file+0x2b4/0xb20 [ 126.352521][ T5999] __x64_sys_fsync+0x191/0x1f0 [ 126.352550][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.352569][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.352587][ T5999] [ 126.352587][ T5999] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.352615][ T5999] validate_chain+0xb9b/0x2140 [ 126.352644][ T5999] __lock_acquire+0xab9/0xd20 [ 126.352668][ T5999] lock_acquire+0x120/0x360 [ 126.352691][ T5999] percpu_down_read_internal+0x48/0x1d0 [ 126.352721][ T5999] ext4_writepages+0x1cc/0x350 [ 126.352737][ T5999] do_writepages+0x32e/0x550 [ 126.352754][ T5999] __writeback_single_inode+0x145/0x1000 [ 126.352785][ T5999] writeback_single_inode+0x1db/0x640 [ 126.352805][ T5999] write_inode_now+0x160/0x1d0 [ 126.352822][ T5999] iput+0x830/0xc50 [ 126.352848][ T5999] ext4_xattr_block_set+0x1fce/0x2ac0 [ 126.352876][ T5999] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 126.352906][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 126.352935][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.352957][ T5999] ext4_evict_inode+0x80d/0xee0 [ 126.352977][ T5999] evict+0x501/0x9c0 [ 126.352995][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 126.353015][ T5999] ext4_fill_super+0x593b/0x61f0 [ 126.353032][ T5999] get_tree_bdev_flags+0x40e/0x4d0 [ 126.353055][ T5999] vfs_get_tree+0x92/0x2b0 [ 126.353077][ T5999] do_new_mount+0x302/0xa10 [ 126.353101][ T5999] __se_sys_mount+0x313/0x410 [ 126.353126][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.353144][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.353163][ T5999] [ 126.353163][ T5999] other info that might help us debug this: [ 126.353163][ T5999] [ 126.353170][ T5999] Chain exists of: [ 126.353170][ T5999] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.353170][ T5999] [ 126.353202][ T5999] Possible unsafe locking scenario: [ 126.353202][ T5999] [ 126.353208][ T5999] CPU0 CPU1 [ 126.353214][ T5999] ---- ---- [ 126.353221][ T5999] lock(&ei->xattr_sem); [ 126.353235][ T5999] lock(jbd2_handle); [ 126.353249][ T5999] lock(&ei->xattr_sem); [ 126.353264][ T5999] rlock(&sbi->s_writepages_rwsem); [ 126.353278][ T5999] [ 126.353278][ T5999] *** DEADLOCK *** [ 126.353278][ T5999] [ 126.353283][ T5999] 3 locks held by syz.0.17/5999: [ 126.353306][ T5999] #0: ffff888031b6c0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 126.353362][ T5999] #1: ffff888031b6c770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 126.353410][ T5999] #2: ffff888058192440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 126.353460][ T5999] [ 126.353460][ T5999] stack backtrace: [ 126.353482][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.353504][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.353525][ T5999] Call Trace: [ 126.353537][ T5999] [ 126.353545][ T5999] dump_stack_lvl+0x189/0x250 [ 126.353573][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.353598][ T5999] ? __pfx__printk+0x10/0x10 [ 126.353624][ T5999] ? print_lock_name+0xde/0x100 [ 126.353651][ T5999] print_circular_bug+0x2ee/0x310 [ 126.353672][ T5999] check_noncircular+0x134/0x160 [ 126.353694][ T5999] validate_chain+0xb9b/0x2140 [ 126.353730][ T5999] ? look_up_lock_class+0x74/0x170 [ 126.353753][ T5999] ? register_lock_class+0x51/0x320 [ 126.353798][ T5999] __lock_acquire+0xab9/0xd20 [ 126.353829][ T5999] ? ext4_writepages+0x1cc/0x350 [ 126.353846][ T5999] lock_acquire+0x120/0x360 [ 126.353872][ T5999] ? ext4_writepages+0x1cc/0x350 [ 126.353891][ T5999] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.353912][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.353936][ T5999] percpu_down_read_internal+0x48/0x1d0 [ 126.353970][ T5999] ? ext4_writepages+0x1cc/0x350 [ 126.353990][ T5999] ext4_writepages+0x1cc/0x350 [ 126.354010][ T5999] ? __pfx_ext4_writepages+0x10/0x10 [ 126.354029][ T5999] ? rt_mutex_slowunlock+0x493/0x8a0 [ 126.354064][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.354095][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.354123][ T5999] ? __pfx_ext4_writepages+0x10/0x10 [ 126.354143][ T5999] do_writepages+0x32e/0x550 [ 126.354165][ T5999] ? reacquire_held_locks+0x127/0x1d0 [ 126.354198][ T5999] ? rt_spin_lock+0x1c1/0x3e0 [ 126.354229][ T5999] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.354264][ T5999] __writeback_single_inode+0x145/0x1000 [ 126.354292][ T5999] writeback_single_inode+0x1db/0x640 [ 126.354316][ T5999] write_inode_now+0x160/0x1d0 [ 126.354336][ T5999] ? __pfx_write_inode_now+0x10/0x10 [ 126.354371][ T5999] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.354402][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.354434][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.354464][ T5999] iput+0x830/0xc50 [ 126.354496][ T5999] ext4_xattr_block_set+0x1fce/0x2ac0 [ 126.354561][ T5999] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 126.354594][ T5999] ? ext4_xattr_block_find+0x2d4/0x350 [ 126.354626][ T5999] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 126.354678][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 126.354716][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.354746][ T5999] ext4_evict_inode+0x80d/0xee0 [ 126.354784][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.354807][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.354838][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.354870][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.354894][ T5999] evict+0x501/0x9c0 [ 126.354919][ T5999] ? __pfx_evict+0x10/0x10 [ 126.354939][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.354970][ T5999] ? iput+0x946/0xc50 [ 126.355004][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 126.355032][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.355056][ T5999] ? ext4_register_li_request+0x640/0x720 [ 126.355077][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 126.355107][ T5999] ext4_fill_super+0x593b/0x61f0 [ 126.355137][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.355155][ T5999] ? snprintf+0xda/0x120 [ 126.355184][ T5999] ? rt_spin_lock+0x1c1/0x3e0 [ 126.355217][ T5999] ? __pfx_snprintf+0x10/0x10 [ 126.355244][ T5999] ? set_blocksize+0x219/0x450 [ 126.355271][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.355305][ T5999] ? sb_set_blocksize+0x104/0x180 [ 126.355333][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 126.355361][ T5999] get_tree_bdev_flags+0x40e/0x4d0 [ 126.355387][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.355406][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.355432][ T5999] ? cap_capable+0x11f/0x460 [ 126.355462][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.355498][ T5999] vfs_get_tree+0x92/0x2b0 [ 126.355523][ T5999] do_new_mount+0x302/0xa10 [ 126.355552][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.355585][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 126.355614][ T5999] ? ns_capable+0x8a/0xf0 [ 126.355647][ T5999] __se_sys_mount+0x313/0x410 [ 126.355678][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 126.355722][ T5999] ? do_syscall_64+0xbe/0xfa0 [ 126.355742][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 126.355770][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.355797][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.355818][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.355837][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 126.355861][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.355882][ T5999] RIP: 0033:0x7f885034066a [ 126.355906][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.355924][ T5999] RSP: 002b:00007ffeaf888a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.355945][ T5999] RAX: ffffffffffffffda RBX: 00007ffeaf888aa0 RCX: 00007f885034066a [ 126.355960][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffeaf888a60 [ 126.355974][ T5999] RBP: 0000200000000180 R08: 00007ffeaf888aa0 R09: 0000000000800700 [ 126.355988][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.356001][ T5999] R13: 00007ffeaf888a60 R14: 0000000000000473 R15: 0000200000000680 [ 126.356023][ T5999] [ 126.382895][ T5999] ------------[ cut here ]------------ [ 126.382912][ T5999] EA inode 11 i_nlink=2 [ 126.383291][ T5999] WARNING: CPU: 1 PID: 5999 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.383345][ T5999] Modules linked in: [ 126.383364][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.383389][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.383404][ T5999] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.383445][ T5999] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 98 ff 8a 4c 89 e6 e8 e7 b8 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 a3 93 46 08 44 89 f9 [ 126.383464][ T5999] RSP: 0018:ffffc90003f97100 EFLAGS: 00010246 [ 126.383483][ T5999] RAX: 1e3176f8d5199600 RBX: 0000000000000001 RCX: ffff88803318bc00 [ 126.383501][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.383515][ T5999] RBP: ffffc90003f971f8 R08: 0000000000000000 R09: 0000000000000000 [ 126.383537][ T5999] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 126.383553][ T5999] R13: ffff8880581933b0 R14: 1ffff1100b03265c R15: ffff8880581932e0 [ 126.383572][ T5999] FS: 0000555563fc0500(0000) GS:ffff888126ccd000(0000) knlGS:0000000000000000 [ 126.383591][ T5999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.383608][ T5999] CR2: 0000559256709f08 CR3: 0000000029520000 CR4: 00000000003526f0 [ 126.383627][ T5999] Call Trace: [ 126.383636][ T5999] [ 126.383645][ T5999] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 126.383674][ T5999] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 126.383714][ T5999] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 126.383752][ T5999] ext4_xattr_set_entry+0xabb/0x1e20 [ 126.383798][ T5999] ext4_xattr_ibody_set+0x254/0x6a0 [ 126.383835][ T5999] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 126.383889][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 126.383932][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.383966][ T5999] ext4_evict_inode+0x80d/0xee0 [ 126.383999][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.384023][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.384061][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.384096][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.384120][ T5999] evict+0x501/0x9c0 [ 126.384148][ T5999] ? __pfx_evict+0x10/0x10 [ 126.384169][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.384206][ T5999] ? iput+0x946/0xc50 [ 126.384243][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 126.384302][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.384330][ T5999] ? ext4_register_li_request+0x640/0x720 [ 126.384355][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 126.384391][ T5999] ext4_fill_super+0x593b/0x61f0 [ 126.384424][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.384443][ T5999] ? snprintf+0xda/0x120 [ 126.384531][ T5999] ? rt_spin_lock+0x1c1/0x3e0 [ 126.384568][ T5999] ? __pfx_snprintf+0x10/0x10 [ 126.384599][ T5999] ? set_blocksize+0x219/0x450 [ 126.384632][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.384669][ T5999] ? sb_set_blocksize+0x104/0x180 [ 126.384702][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 126.384733][ T5999] get_tree_bdev_flags+0x40e/0x4d0 [ 126.384763][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.384782][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.384813][ T5999] ? cap_capable+0x11f/0x460 [ 126.384847][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.384889][ T5999] vfs_get_tree+0x92/0x2b0 [ 126.384919][ T5999] do_new_mount+0x302/0xa10 [ 126.384951][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.384989][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 126.385020][ T5999] ? ns_capable+0x8a/0xf0 [ 126.385059][ T5999] __se_sys_mount+0x313/0x410 [ 126.385092][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 126.385127][ T5999] ? do_syscall_64+0xbe/0xfa0 [ 126.385152][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 126.385184][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.385209][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.385235][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.385260][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 126.385285][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.385309][ T5999] RIP: 0033:0x7f885034066a [ 126.385329][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.385348][ T5999] RSP: 002b:00007ffeaf888a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.385373][ T5999] RAX: ffffffffffffffda RBX: 00007ffeaf888aa0 RCX: 00007f885034066a [ 126.385391][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffeaf888a60 [ 126.385409][ T5999] RBP: 0000200000000180 R08: 00007ffeaf888aa0 R09: 0000000000800700 [ 126.385425][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.385442][ T5999] R13: 00007ffeaf888a60 R14: 0000000000000473 R15: 0000200000000680 [ 126.385468][ T5999] [ 126.385480][ T5999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.385498][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.385529][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.385542][ T5999] Call Trace: [ 126.385550][ T5999] [ 126.385559][ T5999] dump_stack_lvl+0x99/0x250 [ 126.385587][ T5999] ? __asan_memcpy+0x40/0x70 [ 126.385610][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.385634][ T5999] ? __pfx__printk+0x10/0x10 [ 126.385662][ T5999] vpanic+0x237/0x6d0 [ 126.385679][ T5999] ? __pfx_vpanic+0x10/0x10 [ 126.385701][ T5999] panic+0xb9/0xc0 [ 126.385734][ T5999] ? __pfx_panic+0x10/0x10 [ 126.385758][ T5999] __warn+0x31b/0x4b0 [ 126.385777][ T5999] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.385810][ T5999] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.385842][ T5999] report_bug+0x2be/0x4f0 [ 126.385861][ T5999] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.385893][ T5999] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.385924][ T5999] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 126.385955][ T5999] handle_bug+0x84/0x160 [ 126.385980][ T5999] exc_invalid_op+0x1a/0x50 [ 126.386004][ T5999] asm_exc_invalid_op+0x1a/0x20 [ 126.386023][ T5999] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.386056][ T5999] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 98 ff 8a 4c 89 e6 e8 e7 b8 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 a3 93 46 08 44 89 f9 [ 126.386073][ T5999] RSP: 0018:ffffc90003f97100 EFLAGS: 00010246 [ 126.386090][ T5999] RAX: 1e3176f8d5199600 RBX: 0000000000000001 RCX: ffff88803318bc00 [ 126.386105][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.386117][ T5999] RBP: ffffc90003f971f8 R08: 0000000000000000 R09: 0000000000000000 [ 126.386130][ T5999] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 126.386144][ T5999] R13: ffff8880581933b0 R14: 1ffff1100b03265c R15: ffff8880581932e0 [ 126.386169][ T5999] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 126.386192][ T5999] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 126.386226][ T5999] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 126.386261][ T5999] ext4_xattr_set_entry+0xabb/0x1e20 [ 126.386299][ T5999] ext4_xattr_ibody_set+0x254/0x6a0 [ 126.386329][ T5999] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 126.386377][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 126.386414][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.386444][ T5999] ext4_evict_inode+0x80d/0xee0 [ 126.386471][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.386493][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.386540][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.386571][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.386591][ T5999] evict+0x501/0x9c0 [ 126.386614][ T5999] ? __pfx_evict+0x10/0x10 [ 126.386633][ T5999] ? rt_spin_unlock+0x161/0x200 [ 126.386662][ T5999] ? iput+0x946/0xc50 [ 126.386690][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 126.386716][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.386738][ T5999] ? ext4_register_li_request+0x640/0x720 [ 126.386758][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 126.386788][ T5999] ext4_fill_super+0x593b/0x61f0 [ 126.386835][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.386853][ T5999] ? snprintf+0xda/0x120 [ 126.386878][ T5999] ? rt_spin_lock+0x1c1/0x3e0 [ 126.386910][ T5999] ? __pfx_snprintf+0x10/0x10 [ 126.386937][ T5999] ? set_blocksize+0x219/0x450 [ 126.386964][ T5999] ? rt_spin_unlock+0x150/0x200 [ 126.386995][ T5999] ? sb_set_blocksize+0x104/0x180 [ 126.387022][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 126.387049][ T5999] get_tree_bdev_flags+0x40e/0x4d0 [ 126.387074][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.387093][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.387120][ T5999] ? cap_capable+0x11f/0x460 [ 126.387150][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.387184][ T5999] vfs_get_tree+0x92/0x2b0 [ 126.387211][ T5999] do_new_mount+0x302/0xa10 [ 126.387239][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 126.387273][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 126.387302][ T5999] ? ns_capable+0x8a/0xf0 [ 126.387336][ T5999] __se_sys_mount+0x313/0x410 [ 126.387368][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 126.387399][ T5999] ? do_syscall_64+0xbe/0xfa0 [ 126.387420][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 126.387449][ T5999] do_syscall_64+0xfa/0xfa0 [ 126.387470][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.387491][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.387511][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 126.387544][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.387564][ T5999] RIP: 0033:0x7f885034066a [ 126.387582][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.387600][ T5999] RSP: 002b:00007ffeaf888a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.387621][ T5999] RAX: ffffffffffffffda RBX: 00007ffeaf888aa0 RCX: 00007f885034066a [ 126.387637][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffeaf888a60 [ 126.387652][ T5999] RBP: 0000200000000180 R08: 00007ffeaf888aa0 R09: 0000000000800700 [ 126.387667][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.387681][ T5999] R13: 00007ffeaf888a60 R14: 0000000000000473 R15: 0000200000000680 [ 126.387704][ T5999] [ 126.388064][ T5999] Kernel Offset: disabled