Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. 2025/12/16 21:52:38 parsed 1 programs [ 64.392747][ T5763] cgroup: Unknown subsys name 'net' [ 64.560900][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.935392][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.751058][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.760665][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.789407][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.797630][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.676994][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.730460][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.738138][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.745378][ T5820] bridge_slave_0: entered allmulticast mode [ 69.752086][ T5820] bridge_slave_0: entered promiscuous mode [ 69.761091][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.768374][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.776072][ T5820] bridge_slave_1: entered allmulticast mode [ 69.783094][ T5820] bridge_slave_1: entered promiscuous mode [ 69.816420][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.828724][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.855739][ T5820] team0: Port device team_slave_0 added [ 69.873553][ T5820] team0: Port device team_slave_1 added [ 69.898080][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.905097][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.931726][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.946481][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.953445][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.979372][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.026636][ T5820] hsr_slave_0: entered promiscuous mode [ 70.032987][ T5820] hsr_slave_1: entered promiscuous mode [ 70.180893][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.192148][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.202347][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.213870][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.304263][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.328063][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.341292][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.348859][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.373467][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.380612][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.596709][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.629229][ T5820] veth0_vlan: entered promiscuous mode [ 70.639683][ T5820] veth1_vlan: entered promiscuous mode [ 70.662936][ T5820] veth0_macvtap: entered promiscuous mode [ 70.673517][ T5820] veth1_macvtap: entered promiscuous mode [ 70.691012][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.706292][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.719269][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.728319][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.737541][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.746615][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.886666][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.025927][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.033893][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.044714][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.052980][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.061628][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.069099][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.600593][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.608973][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/16 21:52:47 executed programs: 0 [ 72.425891][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.433645][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.441566][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.452262][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.460286][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.467975][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.590933][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 72.646733][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.653863][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.661667][ T5874] bridge_slave_0: entered allmulticast mode [ 72.669150][ T5874] bridge_slave_0: entered promiscuous mode [ 72.677188][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.684436][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.691554][ T5874] bridge_slave_1: entered allmulticast mode [ 72.698377][ T5874] bridge_slave_1: entered promiscuous mode [ 72.725702][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.737988][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.765873][ T5874] team0: Port device team_slave_0 added [ 72.773554][ T5874] team0: Port device team_slave_1 added [ 72.796930][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.803949][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.830582][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.843400][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.850551][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.876824][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.910808][ T5874] hsr_slave_0: entered promiscuous mode [ 72.917050][ T5874] hsr_slave_1: entered promiscuous mode [ 72.923055][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.931742][ T5874] Cannot create hsr debugfs directory [ 73.544243][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.554887][ T51] Bluetooth: hci0: command tx timeout [ 76.095895][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.146224][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.635293][ T51] Bluetooth: hci0: command tx timeout [ 77.116195][ T49] hsr_slave_0: left promiscuous mode [ 77.154746][ T49] hsr_slave_1: left promiscuous mode [ 77.194386][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.201840][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.210763][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.220499][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.230879][ T49] bridge_slave_1: left allmulticast mode [ 77.237008][ T49] bridge_slave_1: left promiscuous mode [ 77.243524][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.260442][ T49] bridge_slave_0: left allmulticast mode [ 77.266552][ T49] bridge_slave_0: left promiscuous mode [ 77.272278][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.294498][ T49] veth1_macvtap: left promiscuous mode [ 77.300262][ T49] veth0_macvtap: left promiscuous mode [ 77.306485][ T49] veth1_vlan: left promiscuous mode [ 77.311863][ T49] veth0_vlan: left promiscuous mode [ 77.640132][ T49] team0 (unregistering): Port device team_slave_1 removed [ 77.669432][ T49] team0 (unregistering): Port device team_slave_0 removed [ 77.698790][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.730888][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.998763][ T49] bond0 (unregistering): Released all slaves [ 78.097040][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.108560][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.120311][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.130953][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.219306][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.250756][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.263394][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.270577][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.286147][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.293300][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.461611][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.519429][ T5874] veth0_vlan: entered promiscuous mode [ 78.549733][ T5874] veth1_vlan: entered promiscuous mode [ 78.601837][ T5874] veth0_macvtap: entered promiscuous mode [ 78.610144][ T5874] veth1_macvtap: entered promiscuous mode [ 78.626555][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.640156][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.652098][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.662154][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.670948][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679670][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.724811][ T51] Bluetooth: hci0: command tx timeout [ 78.734599][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.742414][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.766854][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.775158][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.821890][ T5924] syz.0.17[5924]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.838368][ T5924] loop0: detected capacity change from 0 to 512 [ 78.888749][ T5924] [ 78.891108][ T5924] ====================================================== [ 78.898121][ T5924] WARNING: possible circular locking dependency detected [ 78.905126][ T5924] syzkaller #0 Not tainted [ 78.909519][ T5924] ------------------------------------------------------ [ 78.916519][ T5924] syz.0.17/5924 is trying to acquire lock: [ 78.922303][ T5924] ffff88807bef2bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 78.932300][ T5924] [ 78.932300][ T5924] but task is already holding lock: [ 78.939654][ T5924] ffff888073b264c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 78.949548][ T5924] [ 78.949548][ T5924] which lock already depends on the new lock. [ 78.949548][ T5924] [ 78.959932][ T5924] [ 78.959932][ T5924] the existing dependency chain (in reverse order) is: [ 78.968923][ T5924] [ 78.968923][ T5924] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 78.976463][ T5924] down_read+0x46/0x2e0 [ 78.981122][ T5924] ext4_setattr+0x86b/0x1c90 [ 78.986224][ T5924] notify_change+0xb0d/0xe10 [ 78.991317][ T5924] chown_common+0x3f9/0x5a0 [ 78.996321][ T5924] do_fchownat+0x168/0x270 [ 79.001239][ T5924] __x64_sys_chown+0x82/0x90 [ 79.006334][ T5924] do_syscall_64+0x55/0xb0 [ 79.011251][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.017655][ T5924] [ 79.017655][ T5924] -> #1 (jbd2_handle){++++}-{0:0}: [ 79.024932][ T5924] start_this_handle+0x1e9d/0x20c0 [ 79.030543][ T5924] jbd2__journal_start+0x2bb/0x5b0 [ 79.036153][ T5924] __ext4_journal_start_sb+0x203/0x570 [ 79.042116][ T5924] ext4_do_writepages+0xf92/0x38d0 [ 79.047731][ T5924] ext4_writepages+0x1a8/0x2f0 [ 79.052996][ T5924] do_writepages+0x3a2/0x600 [ 79.058091][ T5924] filemap_fdatawrite_wbc+0x122/0x180 [ 79.063969][ T5924] file_write_and_wait_range+0x171/0x240 [ 79.070118][ T5924] ext4_sync_file+0x281/0xc10 [ 79.075297][ T5924] __x64_sys_fsync+0x195/0x1d0 [ 79.080566][ T5924] do_syscall_64+0x55/0xb0 [ 79.085482][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.091882][ T5924] [ 79.091882][ T5924] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 79.100288][ T5924] __lock_acquire+0x2ddb/0x7c80 [ 79.105642][ T5924] lock_acquire+0x197/0x410 [ 79.110736][ T5924] percpu_down_read+0x44/0x1a0 [ 79.116008][ T5924] ext4_writepages+0x170/0x2f0 [ 79.121282][ T5924] do_writepages+0x3a2/0x600 [ 79.126378][ T5924] __writeback_single_inode+0x153/0xee0 [ 79.132429][ T5924] writeback_single_inode+0x211/0x720 [ 79.138306][ T5924] write_inode_now+0x161/0x1e0 [ 79.143593][ T5924] iput+0x5b2/0x920 [ 79.147907][ T5924] ext4_xattr_block_set+0x273a/0x32a0 [ 79.153781][ T5924] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 79.160177][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 79.166317][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 79.172282][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 79.177634][ T5924] evict+0x486/0x870 [ 79.182032][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 79.187738][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 79.193195][ T5924] get_tree_bdev+0x3e4/0x510 [ 79.198288][ T5924] vfs_get_tree+0x8c/0x280 [ 79.203206][ T5924] do_new_mount+0x24b/0xa40 [ 79.208207][ T5924] __se_sys_mount+0x2da/0x3c0 [ 79.213385][ T5924] do_syscall_64+0x55/0xb0 [ 79.218301][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.224697][ T5924] [ 79.224697][ T5924] other info that might help us debug this: [ 79.224697][ T5924] [ 79.234904][ T5924] Chain exists of: [ 79.234904][ T5924] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 79.234904][ T5924] [ 79.248279][ T5924] Possible unsafe locking scenario: [ 79.248279][ T5924] [ 79.255717][ T5924] CPU0 CPU1 [ 79.261066][ T5924] ---- ---- [ 79.266421][ T5924] lock(&ei->xattr_sem); [ 79.270738][ T5924] lock(jbd2_handle); [ 79.277312][ T5924] lock(&ei->xattr_sem); [ 79.284153][ T5924] rlock(&sbi->s_writepages_rwsem); [ 79.289427][ T5924] [ 79.289427][ T5924] *** DEADLOCK *** [ 79.289427][ T5924] [ 79.297669][ T5924] 3 locks held by syz.0.17/5924: [ 79.302600][ T5924] #0: ffff88807bef00e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 79.312701][ T5924] #1: ffff88807bef0608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 79.322091][ T5924] #2: ffff888073b264c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 79.332350][ T5924] [ 79.332350][ T5924] stack backtrace: [ 79.338240][ T5924] CPU: 1 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.345420][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.355469][ T5924] Call Trace: [ 79.358736][ T5924] [ 79.361665][ T5924] dump_stack_lvl+0x16c/0x230 [ 79.366338][ T5924] ? load_image+0x3b0/0x3b0 [ 79.370833][ T5924] ? show_regs_print_info+0x20/0x20 [ 79.376028][ T5924] ? print_circular_bug+0x12b/0x1a0 [ 79.381224][ T5924] check_noncircular+0x2bd/0x3c0 [ 79.386148][ T5924] ? look_up_lock_class+0x75/0x140 [ 79.391246][ T5924] ? print_deadlock_bug+0x5d0/0x5d0 [ 79.396434][ T5924] ? lockdep_lock+0xe0/0x220 [ 79.401020][ T5924] ? _find_first_zero_bit+0xd3/0x100 [ 79.406295][ T5924] __lock_acquire+0x2ddb/0x7c80 [ 79.411141][ T5924] ? mark_lock+0x94/0x320 [ 79.415457][ T5924] ? verify_lock_unused+0x140/0x140 [ 79.420639][ T5924] ? __lock_acquire+0x1334/0x7c80 [ 79.425647][ T5924] ? verify_lock_unused+0x140/0x140 [ 79.430835][ T5924] lock_acquire+0x197/0x410 [ 79.435325][ T5924] ? ext4_writepages+0x170/0x2f0 [ 79.440254][ T5924] ? __might_sleep+0xe0/0xe0 [ 79.444829][ T5924] ? mark_lock+0x94/0x320 [ 79.449142][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 79.454498][ T5924] ? __lock_acquire+0x1334/0x7c80 [ 79.459506][ T5924] percpu_down_read+0x44/0x1a0 [ 79.464256][ T5924] ? ext4_writepages+0x170/0x2f0 [ 79.469179][ T5924] ext4_writepages+0x170/0x2f0 [ 79.473935][ T5924] ? ext4_read_folio+0x2f0/0x2f0 [ 79.478861][ T5924] ? __rwlock_init+0x150/0x150 [ 79.483608][ T5924] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 79.489486][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.494669][ T5924] ? ext4_read_folio+0x2f0/0x2f0 [ 79.499593][ T5924] do_writepages+0x3a2/0x600 [ 79.504187][ T5924] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 79.509892][ T5924] ? writeback_single_inode+0x206/0x720 [ 79.515425][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 79.520434][ T5924] ? do_raw_spin_lock+0x121/0x2c0 [ 79.525444][ T5924] ? get_tree_bdev+0x3e4/0x510 [ 79.530196][ T5924] __writeback_single_inode+0x153/0xee0 [ 79.535739][ T5924] writeback_single_inode+0x211/0x720 [ 79.541098][ T5924] ? write_inode_now+0x1e0/0x1e0 [ 79.546026][ T5924] write_inode_now+0x161/0x1e0 [ 79.550798][ T5924] ? bdi_split_work_to_wbs+0x890/0x890 [ 79.556247][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.561432][ T5924] iput+0x5b2/0x920 [ 79.565224][ T5924] ext4_xattr_block_set+0x273a/0x32a0 [ 79.570586][ T5924] ? __might_sleep+0xe0/0xe0 [ 79.575168][ T5924] ? xattr_find_entry+0x12b/0x2f0 [ 79.580192][ T5924] ? ext4_xattr_block_find+0x350/0x350 [ 79.585638][ T5924] ? ext4_xattr_block_find+0x2d4/0x350 [ 79.591087][ T5924] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 79.596977][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 79.602598][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 79.608048][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 79.612881][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 79.617721][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.623599][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.628793][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 79.634671][ T5924] evict+0x486/0x870 [ 79.638551][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 79.643561][ T5924] ? proc_nr_inodes+0x230/0x230 [ 79.648744][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 79.653927][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 79.658764][ T5924] ? iput+0x70a/0x920 [ 79.662728][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 79.667919][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 79.672847][ T5924] ? ext4_register_li_request+0x183/0x940 [ 79.678559][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 79.684194][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 79.689154][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.695412][ T5924] ? __might_sleep+0xe0/0xe0 [ 79.699989][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 79.705343][ T5924] ? snprintf+0xdb/0x120 [ 79.709595][ T5924] ? vscnprintf+0x80/0x80 [ 79.713933][ T5924] ? down_write+0x162/0x1f0 [ 79.718436][ T5924] ? down_read_killable+0x340/0x340 [ 79.723625][ T5924] ? setup_bdev_super+0x56b/0x660 [ 79.728637][ T5924] get_tree_bdev+0x3e4/0x510 [ 79.733220][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 79.738511][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 79.744752][ T5924] ? setup_bdev_super+0x660/0x660 [ 79.749767][ T5924] ? apparmor_capable+0x137/0x1a0 [ 79.754782][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 79.759452][ T5924] ? security_capable+0x89/0xb0 [ 79.764292][ T5924] vfs_get_tree+0x8c/0x280 [ 79.768706][ T5924] do_new_mount+0x24b/0xa40 [ 79.773207][ T5924] __se_sys_mount+0x2da/0x3c0 [ 79.777873][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 79.782621][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 79.787807][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 79.792570][ T5924] do_syscall_64+0x55/0xb0 [ 79.797099][ T5924] ? clear_bhb_loop+0x40/0x90 [ 79.801772][ T5924] ? clear_bhb_loop+0x40/0x90 [ 79.806445][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.812330][ T5924] RIP: 0033:0x7f6640b90eea [ 79.816744][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.836337][ T5924] RSP: 002b:00007ffea961a068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.844733][ T5924] RAX: ffffffffffffffda RBX: 00007ffea961a0f0 RCX: 00007f6640b90eea [ 79.852689][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffea961a0b0 [ 79.860645][ T5924] RBP: 0000200000000180 R08: 00007ffea961a0f0 R09: 0000000000800700 [ 79.868602][ T5924] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 79.876557][ T5924] R13: 00007ffea961a0b0 R14: 000000000000046f R15: 000000000000002c [ 79.884520][ T5924] [ 79.914529][ T5924] ------------[ cut here ]------------ [ 79.920021][ T5924] EA inode 11 i_nlink=2 [ 79.920220][ T5924] WARNING: CPU: 0 PID: 5924 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 79.934556][ T5924] Modules linked in: [ 79.938463][ T5924] CPU: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.945725][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.955817][ T5924] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 79.962402][ T5924] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 79.982280][ T5924] RSP: 0018:ffffc90002e671c0 EFLAGS: 00010246 [ 79.988430][ T5924] RAX: 9df8cbe6eb509500 RBX: 0000000000000002 RCX: ffff88807bd4bc00 [ 79.996446][ T5924] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 80.004463][ T5924] RBP: ffffc90002e672b8 R08: ffffc90002e66dc7 R09: 1ffff920005ccdb8 [ 80.012432][ T5924] R10: dffffc0000000000 R11: fffff520005ccdb9 R12: dffffc0000000000 [ 80.020437][ T5924] R13: ffff888073a1e8a8 R14: ffff888073a1e6b0 R15: ffff888073a1e700 [ 80.028447][ T5924] FS: 000055558c44f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 80.037426][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.044011][ T5924] CR2: 00007f528220d000 CR3: 000000007d7f6000 CR4: 00000000003506f0 [ 80.052013][ T5924] Call Trace: [ 80.055327][ T5924] [ 80.058259][ T5924] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 80.063883][ T5924] ? ext4_xattr_inode_iget+0x3df/0x600 [ 80.069377][ T5924] ext4_xattr_set_entry+0xcda/0x1e90 [ 80.074709][ T5924] ext4_xattr_ibody_set+0x254/0x6a0 [ 80.079897][ T5924] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 80.086002][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 80.091736][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 80.097248][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 80.102103][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 80.106978][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.112871][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 80.118100][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.123995][ T5924] evict+0x486/0x870 [ 80.127961][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 80.132992][ T5924] ? proc_nr_inodes+0x230/0x230 [ 80.137878][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 80.143077][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 80.147959][ T5924] ? iput+0x70a/0x920 [ 80.151937][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 80.157178][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 80.162118][ T5924] ? ext4_register_li_request+0x183/0x940 [ 80.167873][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 80.173514][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 80.178537][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.184809][ T5924] ? __might_sleep+0xe0/0xe0 [ 80.189506][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 80.194942][ T5924] ? snprintf+0xdb/0x120 [ 80.199193][ T5924] ? vscnprintf+0x80/0x80 [ 80.203521][ T5924] ? down_write+0x162/0x1f0 [ 80.208047][ T5924] ? down_read_killable+0x340/0x340 [ 80.213248][ T5924] ? setup_bdev_super+0x56b/0x660 [ 80.218317][ T5924] get_tree_bdev+0x3e4/0x510 [ 80.222910][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 80.228231][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.234532][ T5924] ? setup_bdev_super+0x660/0x660 [ 80.239566][ T5924] ? apparmor_capable+0x137/0x1a0 [ 80.244614][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 80.249292][ T5924] ? security_capable+0x89/0xb0 [ 80.254176][ T5924] vfs_get_tree+0x8c/0x280 [ 80.258680][ T5924] do_new_mount+0x24b/0xa40 [ 80.263171][ T5924] __se_sys_mount+0x2da/0x3c0 [ 80.267909][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 80.272689][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 80.277930][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 80.282692][ T5924] do_syscall_64+0x55/0xb0 [ 80.287129][ T5924] ? clear_bhb_loop+0x40/0x90 [ 80.291928][ T5924] ? clear_bhb_loop+0x40/0x90 [ 80.296684][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.302590][ T5924] RIP: 0033:0x7f6640b90eea [ 80.307039][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.326709][ T5924] RSP: 002b:00007ffea961a068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.335167][ T5924] RAX: ffffffffffffffda RBX: 00007ffea961a0f0 RCX: 00007f6640b90eea [ 80.343156][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffea961a0b0 [ 80.351181][ T5924] RBP: 0000200000000180 R08: 00007ffea961a0f0 R09: 0000000000800700 [ 80.359172][ T5924] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 80.367187][ T5924] R13: 00007ffea961a0b0 R14: 000000000000046f R15: 000000000000002c [ 80.375183][ T5924] [ 80.378189][ T5924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.385458][ T5924] CPU: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 [ 80.392749][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.402787][ T5924] Call Trace: [ 80.406058][ T5924] [ 80.408971][ T5924] dump_stack_lvl+0x16c/0x230 [ 80.413645][ T5924] ? show_regs_print_info+0x20/0x20 [ 80.418826][ T5924] ? load_image+0x3b0/0x3b0 [ 80.423312][ T5924] panic+0x2c0/0x710 [ 80.427187][ T5924] ? bpf_jit_dump+0xd0/0xd0 [ 80.431672][ T5924] __warn+0x2e0/0x470 [ 80.435638][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.441610][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.447582][ T5924] report_bug+0x2be/0x4f0 [ 80.451893][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.457862][ T5924] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.463827][ T5924] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 80.469793][ T5924] handle_bug+0xcf/0x120 [ 80.474019][ T5924] exc_invalid_op+0x1a/0x50 [ 80.478506][ T5924] asm_exc_invalid_op+0x1a/0x20 [ 80.483340][ T5924] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 80.489918][ T5924] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 80.509521][ T5924] RSP: 0018:ffffc90002e671c0 EFLAGS: 00010246 [ 80.515665][ T5924] RAX: 9df8cbe6eb509500 RBX: 0000000000000002 RCX: ffff88807bd4bc00 [ 80.523622][ T5924] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 80.531579][ T5924] RBP: ffffc90002e672b8 R08: ffffc90002e66dc7 R09: 1ffff920005ccdb8 [ 80.539538][ T5924] R10: dffffc0000000000 R11: fffff520005ccdb9 R12: dffffc0000000000 [ 80.547494][ T5924] R13: ffff888073a1e8a8 R14: ffff888073a1e6b0 R15: ffff888073a1e700 [ 80.555460][ T5924] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 80.561089][ T5924] ? ext4_xattr_inode_iget+0x3df/0x600 [ 80.566633][ T5924] ext4_xattr_set_entry+0xcda/0x1e90 [ 80.571909][ T5924] ext4_xattr_ibody_set+0x254/0x6a0 [ 80.577096][ T5924] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 80.582984][ T5924] __ext4_expand_extra_isize+0x306/0x400 [ 80.588605][ T5924] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 80.594053][ T5924] ext4_evict_inode+0x7ed/0xea0 [ 80.598897][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 80.603736][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.609620][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 80.614811][ T5924] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 80.620694][ T5924] evict+0x486/0x870 [ 80.624573][ T5924] ? __lock_acquire+0x7c80/0x7c80 [ 80.629579][ T5924] ? proc_nr_inodes+0x230/0x230 [ 80.634409][ T5924] ? do_raw_spin_unlock+0x121/0x230 [ 80.639590][ T5924] ? _raw_spin_unlock+0x28/0x40 [ 80.644422][ T5924] ? iput+0x70a/0x920 [ 80.648390][ T5924] ext4_orphan_cleanup+0xbd4/0x1400 [ 80.653579][ T5924] ? ext4_orphan_del+0xba0/0xba0 [ 80.658502][ T5924] ? ext4_register_li_request+0x183/0x940 [ 80.664211][ T5924] ? errseq_check_and_advance+0x66/0x120 [ 80.669828][ T5924] ext4_fill_super+0x5de4/0x66c0 [ 80.674757][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.680981][ T5924] ? __might_sleep+0xe0/0xe0 [ 80.685554][ T5924] ? read_lock_is_recursive+0x20/0x20 [ 80.690906][ T5924] ? snprintf+0xdb/0x120 [ 80.695136][ T5924] ? vscnprintf+0x80/0x80 [ 80.699452][ T5924] ? down_write+0x162/0x1f0 [ 80.703935][ T5924] ? down_read_killable+0x340/0x340 [ 80.709116][ T5924] ? setup_bdev_super+0x56b/0x660 [ 80.714212][ T5924] get_tree_bdev+0x3e4/0x510 [ 80.718787][ T5924] ? vfs_parse_fs_string+0x160/0x160 [ 80.724071][ T5924] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 80.730298][ T5924] ? setup_bdev_super+0x660/0x660 [ 80.735311][ T5924] ? apparmor_capable+0x137/0x1a0 [ 80.740320][ T5924] ? bpf_lsm_capable+0x9/0x10 [ 80.744983][ T5924] ? security_capable+0x89/0xb0 [ 80.749934][ T5924] vfs_get_tree+0x8c/0x280 [ 80.754331][ T5924] do_new_mount+0x24b/0xa40 [ 80.758818][ T5924] __se_sys_mount+0x2da/0x3c0 [ 80.763476][ T5924] ? __x64_sys_mount+0xc0/0xc0 [ 80.768219][ T5924] ? lockdep_hardirqs_on+0x98/0x150 [ 80.773408][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 80.778154][ T5924] do_syscall_64+0x55/0xb0 [ 80.782553][ T5924] ? clear_bhb_loop+0x40/0x90 [ 80.787214][ T5924] ? clear_bhb_loop+0x40/0x90 [ 80.791876][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.797751][ T5924] RIP: 0033:0x7f6640b90eea [ 80.802150][ T5924] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.821740][ T5924] RSP: 002b:00007ffea961a068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.830135][ T5924] RAX: ffffffffffffffda RBX: 00007ffea961a0f0 RCX: 00007f6640b90eea [ 80.838115][ T5924] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffea961a0b0 [ 80.846071][ T5924] RBP: 0000200000000180 R08: 00007ffea961a0f0 R09: 0000000000800700 [ 80.854024][ T5924] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 80.861994][ T5924] R13: 00007ffea961a0b0 R14: 000000000000046f R15: 000000000000002c [ 80.869959][ T5924] [ 80.873299][ T5924] Kernel Offset: disabled [ 80.877603][ T5924] Rebooting in 86400 seconds..