Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 86.871447][ T995] cfg80211: failed to load regulatory.db 2025/12/01 13:48:42 parsed 1 programs [ 91.012207][ T5806] cgroup: Unknown subsys name 'net' [ 91.252351][ T5806] cgroup: Unknown subsys name 'cpuset' [ 91.328121][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.199165][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.050321][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.050350][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.100884][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.100903][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.318589][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 98.711760][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.711850][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.712054][ T5835] bridge_slave_0: entered allmulticast mode [ 98.713993][ T5835] bridge_slave_0: entered promiscuous mode [ 98.739325][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.739464][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.739694][ T5835] bridge_slave_1: entered allmulticast mode [ 98.744079][ T5835] bridge_slave_1: entered promiscuous mode [ 98.906757][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.911568][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.061678][ T5835] team0: Port device team_slave_0 added [ 99.065670][ T5835] team0: Port device team_slave_1 added [ 99.490208][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.490219][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.490232][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.588108][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.588122][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.588143][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.801591][ T5835] hsr_slave_0: entered promiscuous mode [ 99.802892][ T5835] hsr_slave_1: entered promiscuous mode [ 100.199240][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.239205][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.282499][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.322180][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.530815][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.563224][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.582400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.583031][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.603695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.603782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.849670][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.911339][ T5835] veth0_vlan: entered promiscuous mode [ 100.925219][ T5835] veth1_vlan: entered promiscuous mode [ 100.969335][ T5835] veth0_macvtap: entered promiscuous mode [ 100.974300][ T5835] veth1_macvtap: entered promiscuous mode [ 100.996131][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.014477][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.031908][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033796][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033840][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033873][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.872403][ T1427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.089621][ T1427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.331943][ T1427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.641683][ T1427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.190139][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.193721][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.195374][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.201344][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.202216][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.267608][ T1427] bridge_slave_1: left allmulticast mode [ 104.267833][ T1427] bridge_slave_1: left promiscuous mode [ 104.270371][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.354185][ T1427] bridge_slave_0: left allmulticast mode [ 104.354215][ T1427] bridge_slave_0: left promiscuous mode [ 104.354454][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.088942][ T1427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.179875][ T1427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.223130][ T1427] bond0 (unregistering): Released all slaves [ 106.687561][ T1427] hsr_slave_0: left promiscuous mode [ 106.727353][ T1427] hsr_slave_1: left promiscuous mode [ 106.728341][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.728402][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.753967][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.753997][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.854909][ T1427] veth1_macvtap: left promiscuous mode [ 106.855071][ T1427] veth0_macvtap: left promiscuous mode [ 106.855236][ T1427] veth1_vlan: left promiscuous mode [ 106.855422][ T1427] veth0_vlan: left promiscuous mode [ 108.878009][ T1427] team0 (unregistering): Port device team_slave_1 removed [ 109.067830][ T1427] team0 (unregistering): Port device team_slave_0 removed 2025/12/01 13:49:08 executed programs: 0 [ 114.491312][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.493131][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.494064][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.495286][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.496440][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.028660][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 115.500466][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.500681][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.500876][ T5975] bridge_slave_0: entered allmulticast mode [ 115.503472][ T5975] bridge_slave_0: entered promiscuous mode [ 115.515764][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.516411][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.516608][ T5975] bridge_slave_1: entered allmulticast mode [ 115.525176][ T5975] bridge_slave_1: entered promiscuous mode [ 115.710887][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.714342][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.981530][ T5975] team0: Port device team_slave_0 added [ 115.983783][ T5975] team0: Port device team_slave_1 added [ 116.252943][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.252957][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.252978][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.302460][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.302476][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.302492][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.549437][ T5873] Bluetooth: hci0: command tx timeout [ 116.598920][ T5975] hsr_slave_0: entered promiscuous mode [ 116.599767][ T5975] hsr_slave_1: entered promiscuous mode [ 118.253051][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.290673][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.333041][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.373384][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.550756][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.581690][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.595183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.595790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.615127][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.616087][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.629795][ T5873] Bluetooth: hci0: command tx timeout [ 118.936140][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.014727][ T5975] veth0_vlan: entered promiscuous mode [ 119.033918][ T5975] veth1_vlan: entered promiscuous mode [ 119.079147][ T5975] veth0_macvtap: entered promiscuous mode [ 119.086218][ T5975] veth1_macvtap: entered promiscuous mode [ 119.129212][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.150049][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.169366][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.172150][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.173971][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.174035][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.399698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.399717][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.473910][ T1427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.473929][ T1427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/01 13:49:13 executed programs: 2 [ 119.630792][ T6065] loop0: detected capacity change from 0 to 512 [ 119.751484][ T6065] [ 119.751496][ T6065] ====================================================== [ 119.751502][ T6065] WARNING: possible circular locking dependency detected [ 119.751517][ T6065] syzkaller #0 Not tainted [ 119.751527][ T6065] ------------------------------------------------------ [ 119.751534][ T6065] syz.0.17/6065 is trying to acquire lock: [ 119.751544][ T6065] ffff888039db8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 119.751595][ T6065] [ 119.751595][ T6065] but task is already holding lock: [ 119.751600][ T6065] ffff888040d12440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 119.751642][ T6065] [ 119.751642][ T6065] which lock already depends on the new lock. [ 119.751642][ T6065] [ 119.751648][ T6065] [ 119.751648][ T6065] the existing dependency chain (in reverse order) is: [ 119.751654][ T6065] [ 119.751654][ T6065] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 119.751675][ T6065] lock_acquire+0x120/0x360 [ 119.751695][ T6065] down_write+0x3a/0x50 [ 119.751709][ T6065] ext4_xattr_set_handle+0x165/0x1590 [ 119.751729][ T6065] ext4_initxattrs+0x9f/0x110 [ 119.751746][ T6065] security_inode_init_security+0x2a0/0x3f0 [ 119.751766][ T6065] __ext4_new_inode+0x3314/0x3cb0 [ 119.751786][ T6065] ext4_create+0x22d/0x460 [ 119.751803][ T6065] path_openat+0x1500/0x3840 [ 119.751818][ T6065] do_filp_open+0x1fa/0x410 [ 119.751833][ T6065] do_sys_openat2+0x121/0x1c0 [ 119.751846][ T6065] __x64_sys_openat+0x138/0x170 [ 119.751858][ T6065] do_syscall_64+0xfa/0xfa0 [ 119.751876][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.751889][ T6065] [ 119.751889][ T6065] -> #1 (jbd2_handle){++++}-{0:0}: [ 119.751910][ T6065] lock_acquire+0x120/0x360 [ 119.751926][ T6065] start_this_handle+0x1fa7/0x21c0 [ 119.751944][ T6065] jbd2__journal_start+0x2c1/0x5b0 [ 119.751962][ T6065] __ext4_journal_start_sb+0x227/0x5c0 [ 119.751982][ T6065] ext4_do_writepages+0xf6f/0x4600 [ 119.752000][ T6065] ext4_writepages+0x205/0x350 [ 119.752015][ T6065] do_writepages+0x32e/0x550 [ 119.752029][ T6065] __writeback_single_inode+0x145/0x1000 [ 119.752056][ T6065] writeback_sb_inodes+0x6b7/0xf60 [ 119.752072][ T6065] __writeback_inodes_wb+0x111/0x240 [ 119.752087][ T6065] wb_writeback+0x44f/0xaf0 [ 119.752102][ T6065] wb_workfn+0xaf4/0xf00 [ 119.752114][ T6065] process_scheduled_works+0xae1/0x17b0 [ 119.752132][ T6065] worker_thread+0x8a0/0xda0 [ 119.752148][ T6065] kthread+0x711/0x8a0 [ 119.752165][ T6065] ret_from_fork+0x4bc/0x870 [ 119.752181][ T6065] ret_from_fork_asm+0x1a/0x30 [ 119.752195][ T6065] [ 119.752195][ T6065] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 119.752218][ T6065] validate_chain+0xb9b/0x2140 [ 119.752231][ T6065] __lock_acquire+0xab9/0xd20 [ 119.752249][ T6065] lock_acquire+0x120/0x360 [ 119.752266][ T6065] percpu_down_read_internal+0x48/0x1d0 [ 119.752278][ T6065] ext4_writepages+0x1cc/0x350 [ 119.752291][ T6065] do_writepages+0x32e/0x550 [ 119.752305][ T6065] __writeback_single_inode+0x145/0x1000 [ 119.752322][ T6065] writeback_single_inode+0x1db/0x640 [ 119.752337][ T6065] write_inode_now+0x160/0x1d0 [ 119.752351][ T6065] iput+0x830/0xc50 [ 119.752369][ T6065] ext4_xattr_block_set+0x1fce/0x2ac0 [ 119.752390][ T6065] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 119.752411][ T6065] __ext4_expand_extra_isize+0x30d/0x400 [ 119.752425][ T6065] __ext4_mark_inode_dirty+0x46c/0x700 [ 119.752443][ T6065] ext4_evict_inode+0x80d/0xee0 [ 119.752458][ T6065] evict+0x504/0x9c0 [ 119.752473][ T6065] ext4_orphan_cleanup+0xc20/0x1460 [ 119.752488][ T6065] ext4_fill_super+0x593b/0x61f0 [ 119.752501][ T6065] get_tree_bdev_flags+0x40e/0x4d0 [ 119.752520][ T6065] vfs_get_tree+0x92/0x2b0 [ 119.752537][ T6065] do_new_mount+0x302/0xa10 [ 119.752556][ T6065] __se_sys_mount+0x313/0x410 [ 119.752575][ T6065] do_syscall_64+0xfa/0xfa0 [ 119.752595][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.752610][ T6065] [ 119.752610][ T6065] other info that might help us debug this: [ 119.752610][ T6065] [ 119.752616][ T6065] Chain exists of: [ 119.752616][ T6065] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 119.752616][ T6065] [ 119.752643][ T6065] Possible unsafe locking scenario: [ 119.752643][ T6065] [ 119.752649][ T6065] CPU0 CPU1 [ 119.752654][ T6065] ---- ---- [ 119.752660][ T6065] lock(&ei->xattr_sem); [ 119.752671][ T6065] lock(jbd2_handle); [ 119.752683][ T6065] lock(&ei->xattr_sem); [ 119.752695][ T6065] rlock(&sbi->s_writepages_rwsem); [ 119.752706][ T6065] [ 119.752706][ T6065] *** DEADLOCK *** [ 119.752706][ T6065] [ 119.752711][ T6065] 3 locks held by syz.0.17/6065: [ 119.752720][ T6065] #0: ffff8880349780d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 119.752769][ T6065] #1: ffff888034978770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 119.752811][ T6065] #2: ffff888040d12440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 119.752853][ T6065] [ 119.752853][ T6065] stack backtrace: [ 119.752878][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.752897][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.752914][ T6065] Call Trace: [ 119.752924][ T6065] [ 119.752932][ T6065] dump_stack_lvl+0x189/0x250 [ 119.752958][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.752981][ T6065] ? __pfx__printk+0x10/0x10 [ 119.753000][ T6065] ? print_lock_name+0xde/0x100 [ 119.753020][ T6065] print_circular_bug+0x2ee/0x310 [ 119.753044][ T6065] check_noncircular+0x134/0x160 [ 119.753064][ T6065] validate_chain+0xb9b/0x2140 [ 119.753083][ T6065] ? look_up_lock_class+0x74/0x170 [ 119.753107][ T6065] ? register_lock_class+0x51/0x320 [ 119.753130][ T6065] __lock_acquire+0xab9/0xd20 [ 119.753153][ T6065] ? ext4_writepages+0x1cc/0x350 [ 119.753169][ T6065] lock_acquire+0x120/0x360 [ 119.753189][ T6065] ? ext4_writepages+0x1cc/0x350 [ 119.753207][ T6065] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 119.753229][ T6065] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.753252][ T6065] percpu_down_read_internal+0x48/0x1d0 [ 119.753268][ T6065] ? ext4_writepages+0x1cc/0x350 [ 119.753285][ T6065] ext4_writepages+0x1cc/0x350 [ 119.753302][ T6065] ? __pfx_ext4_writepages+0x10/0x10 [ 119.753318][ T6065] ? rt_mutex_slowunlock+0x493/0x8a0 [ 119.753340][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.753361][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.753379][ T6065] ? __pfx_ext4_writepages+0x10/0x10 [ 119.753396][ T6065] do_writepages+0x32e/0x550 [ 119.753414][ T6065] ? reacquire_held_locks+0x127/0x1d0 [ 119.753437][ T6065] ? rt_spin_lock+0x1c1/0x3e0 [ 119.753457][ T6065] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 119.753479][ T6065] __writeback_single_inode+0x145/0x1000 [ 119.753502][ T6065] writeback_single_inode+0x1db/0x640 [ 119.753523][ T6065] write_inode_now+0x160/0x1d0 [ 119.753540][ T6065] ? __pfx_write_inode_now+0x10/0x10 [ 119.753571][ T6065] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 119.753591][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.753611][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.753631][ T6065] iput+0x830/0xc50 [ 119.753656][ T6065] ext4_xattr_block_set+0x1fce/0x2ac0 [ 119.753693][ T6065] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 119.753717][ T6065] ? ext4_xattr_block_find+0x2d4/0x350 [ 119.753741][ T6065] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 119.753779][ T6065] __ext4_expand_extra_isize+0x30d/0x400 [ 119.753800][ T6065] __ext4_mark_inode_dirty+0x46c/0x700 [ 119.753825][ T6065] ext4_evict_inode+0x80d/0xee0 [ 119.753849][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.753867][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.753887][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.753906][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.753924][ T6065] evict+0x504/0x9c0 [ 119.753945][ T6065] ? __pfx_evict+0x10/0x10 [ 119.753962][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.753982][ T6065] ? iput+0x946/0xc50 [ 119.754006][ T6065] ext4_orphan_cleanup+0xc20/0x1460 [ 119.754030][ T6065] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 119.754058][ T6065] ? ext4_register_li_request+0x640/0x720 [ 119.754077][ T6065] ? errseq_check_and_advance+0x66/0x120 [ 119.754097][ T6065] ext4_fill_super+0x593b/0x61f0 [ 119.754122][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.754138][ T6065] ? snprintf+0xda/0x120 [ 119.754154][ T6065] ? rt_spin_lock+0x1c1/0x3e0 [ 119.754174][ T6065] ? __pfx_snprintf+0x10/0x10 [ 119.754190][ T6065] ? set_blocksize+0x219/0x450 [ 119.754213][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.754233][ T6065] ? sb_set_blocksize+0x104/0x180 [ 119.754256][ T6065] ? setup_bdev_super+0x4c1/0x5b0 [ 119.754277][ T6065] get_tree_bdev_flags+0x40e/0x4d0 [ 119.754296][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.754313][ T6065] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 119.754333][ T6065] ? cap_capable+0x11f/0x460 [ 119.754349][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.754368][ T6065] vfs_get_tree+0x92/0x2b0 [ 119.754389][ T6065] do_new_mount+0x302/0xa10 [ 119.754409][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.754427][ T6065] ? __pfx_do_new_mount+0x10/0x10 [ 119.754448][ T6065] ? ns_capable+0x8a/0xf0 [ 119.754471][ T6065] __se_sys_mount+0x313/0x410 [ 119.754492][ T6065] ? __pfx___se_sys_mount+0x10/0x10 [ 119.754512][ T6065] ? do_syscall_64+0xbe/0xfa0 [ 119.754530][ T6065] ? __x64_sys_mount+0x20/0xc0 [ 119.754548][ T6065] do_syscall_64+0xfa/0xfa0 [ 119.754568][ T6065] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.754586][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.754600][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 119.754618][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.754635][ T6065] RIP: 0033:0x7f4d6f110eea [ 119.754657][ T6065] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.754670][ T6065] RSP: 002b:00007fff8e033298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.754688][ T6065] RAX: ffffffffffffffda RBX: 00007fff8e033320 RCX: 00007f4d6f110eea [ 119.754701][ T6065] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff8e0332e0 [ 119.754713][ T6065] RBP: 0000200000000180 R08: 00007fff8e033320 R09: 0000000000800718 [ 119.754725][ T6065] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 119.754735][ T6065] R13: 00007fff8e0332e0 R14: 0000000000000470 R15: 0000200000000200 [ 119.754753][ T6065] [ 119.755155][ T6065] ------------[ cut here ]------------ [ 119.755163][ T6065] EA inode 11 i_nlink=2 [ 119.755368][ T6065] WARNING: CPU: 1 PID: 6065 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.755397][ T6065] Modules linked in: [ 119.755410][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.755430][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.755440][ T6065] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.755457][ T6065] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 07 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 83 4a 41 08 44 89 f9 [ 119.755470][ T6065] RSP: 0018:ffffc90003f47100 EFLAGS: 00010246 [ 119.755483][ T6065] RAX: fd9a1a84cfb5e900 RBX: 0000000000000001 RCX: ffff888054703c00 [ 119.755496][ T6065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.755506][ T6065] RBP: ffffc90003f471f8 R08: 0000000000000000 R09: 0000000000000000 [ 119.755517][ T6065] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 119.755528][ T6065] R13: ffff888040d14b60 R14: 1ffff110081a2952 R15: ffff888040d14a90 [ 119.755540][ T6065] FS: 0000555568a10500(0000) GS:ffff888126ef4000(0000) knlGS:0000000000000000 [ 119.755554][ T6065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.755566][ T6065] CR2: 00007f9ee16789c0 CR3: 000000003ea0c000 CR4: 00000000003526f0 [ 119.755580][ T6065] Call Trace: [ 119.755586][ T6065] [ 119.755593][ T6065] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 119.755613][ T6065] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 119.755631][ T6065] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 119.755658][ T6065] ext4_xattr_set_entry+0xabb/0x1e20 [ 119.755689][ T6065] ext4_xattr_ibody_set+0x254/0x6a0 [ 119.755714][ T6065] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 119.755746][ T6065] __ext4_expand_extra_isize+0x30d/0x400 [ 119.755765][ T6065] __ext4_mark_inode_dirty+0x46c/0x700 [ 119.755788][ T6065] ext4_evict_inode+0x80d/0xee0 [ 119.755812][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.755830][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.755850][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.755869][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.755887][ T6065] evict+0x504/0x9c0 [ 119.755907][ T6065] ? __pfx_evict+0x10/0x10 [ 119.755922][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.755941][ T6065] ? iput+0x946/0xc50 [ 119.755966][ T6065] ext4_orphan_cleanup+0xc20/0x1460 [ 119.755989][ T6065] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 119.756008][ T6065] ? ext4_register_li_request+0x640/0x720 [ 119.756026][ T6065] ? errseq_check_and_advance+0x66/0x120 [ 119.756053][ T6065] ext4_fill_super+0x593b/0x61f0 [ 119.756077][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.756090][ T6065] ? snprintf+0xda/0x120 [ 119.756105][ T6065] ? rt_spin_lock+0x1c1/0x3e0 [ 119.756125][ T6065] ? __pfx_snprintf+0x10/0x10 [ 119.756141][ T6065] ? set_blocksize+0x219/0x450 [ 119.756162][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.756182][ T6065] ? sb_set_blocksize+0x104/0x180 [ 119.756205][ T6065] ? setup_bdev_super+0x4c1/0x5b0 [ 119.756227][ T6065] get_tree_bdev_flags+0x40e/0x4d0 [ 119.756246][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.756263][ T6065] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 119.756281][ T6065] ? cap_capable+0x11f/0x460 [ 119.756296][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.756314][ T6065] vfs_get_tree+0x92/0x2b0 [ 119.756334][ T6065] do_new_mount+0x302/0xa10 [ 119.756355][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.756372][ T6065] ? __pfx_do_new_mount+0x10/0x10 [ 119.756393][ T6065] ? ns_capable+0x8a/0xf0 [ 119.756418][ T6065] __se_sys_mount+0x313/0x410 [ 119.756441][ T6065] ? __pfx___se_sys_mount+0x10/0x10 [ 119.756463][ T6065] ? do_syscall_64+0xbe/0xfa0 [ 119.756484][ T6065] ? __x64_sys_mount+0x20/0xc0 [ 119.756505][ T6065] do_syscall_64+0xfa/0xfa0 [ 119.756525][ T6065] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.756546][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.756562][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 119.756578][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.756594][ T6065] RIP: 0033:0x7f4d6f110eea [ 119.756609][ T6065] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.756622][ T6065] RSP: 002b:00007fff8e033298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.756638][ T6065] RAX: ffffffffffffffda RBX: 00007fff8e033320 RCX: 00007f4d6f110eea [ 119.756648][ T6065] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff8e0332e0 [ 119.756660][ T6065] RBP: 0000200000000180 R08: 00007fff8e033320 R09: 0000000000800718 [ 119.756671][ T6065] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 119.756681][ T6065] R13: 00007fff8e0332e0 R14: 0000000000000470 R15: 0000200000000200 [ 119.756698][ T6065] [ 119.756708][ T6065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.756720][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.756739][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.756748][ T6065] Call Trace: [ 119.756753][ T6065] [ 119.756760][ T6065] dump_stack_lvl+0x99/0x250 [ 119.756782][ T6065] ? __asan_memcpy+0x40/0x70 [ 119.756800][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.756824][ T6065] ? __pfx__printk+0x10/0x10 [ 119.756848][ T6065] vpanic+0x237/0x6d0 [ 119.756864][ T6065] ? __pfx_vpanic+0x10/0x10 [ 119.756884][ T6065] panic+0xb9/0xc0 [ 119.756899][ T6065] ? __pfx_panic+0x10/0x10 [ 119.756919][ T6065] __warn+0x31b/0x4b0 [ 119.756934][ T6065] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.756952][ T6065] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.756968][ T6065] report_bug+0x2be/0x4f0 [ 119.756989][ T6065] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.757006][ T6065] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.757021][ T6065] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 119.757045][ T6065] handle_bug+0x84/0x160 [ 119.757063][ T6065] exc_invalid_op+0x1a/0x50 [ 119.757078][ T6065] asm_exc_invalid_op+0x1a/0x20 [ 119.757097][ T6065] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 119.757112][ T6065] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 07 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 83 4a 41 08 44 89 f9 [ 119.757123][ T6065] RSP: 0018:ffffc90003f47100 EFLAGS: 00010246 [ 119.757136][ T6065] RAX: fd9a1a84cfb5e900 RBX: 0000000000000001 RCX: ffff888054703c00 [ 119.757147][ T6065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.757157][ T6065] RBP: ffffc90003f471f8 R08: 0000000000000000 R09: 0000000000000000 [ 119.757168][ T6065] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 119.757179][ T6065] R13: ffff888040d14b60 R14: 1ffff110081a2952 R15: ffff888040d14a90 [ 119.757197][ T6065] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 119.757216][ T6065] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 119.757233][ T6065] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 119.757258][ T6065] ext4_xattr_set_entry+0xabb/0x1e20 [ 119.757286][ T6065] ext4_xattr_ibody_set+0x254/0x6a0 [ 119.757310][ T6065] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 119.757349][ T6065] __ext4_expand_extra_isize+0x30d/0x400 [ 119.757370][ T6065] __ext4_mark_inode_dirty+0x46c/0x700 [ 119.757395][ T6065] ext4_evict_inode+0x80d/0xee0 [ 119.757419][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.757438][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.757459][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.757478][ T6065] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.757497][ T6065] evict+0x504/0x9c0 [ 119.757518][ T6065] ? __pfx_evict+0x10/0x10 [ 119.757535][ T6065] ? rt_spin_unlock+0x161/0x200 [ 119.757554][ T6065] ? iput+0x946/0xc50 [ 119.757579][ T6065] ext4_orphan_cleanup+0xc20/0x1460 [ 119.757603][ T6065] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 119.757621][ T6065] ? ext4_register_li_request+0x640/0x720 [ 119.757640][ T6065] ? errseq_check_and_advance+0x66/0x120 [ 119.757660][ T6065] ext4_fill_super+0x593b/0x61f0 [ 119.757686][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.757701][ T6065] ? snprintf+0xda/0x120 [ 119.757718][ T6065] ? rt_spin_lock+0x1c1/0x3e0 [ 119.757739][ T6065] ? __pfx_snprintf+0x10/0x10 [ 119.757755][ T6065] ? set_blocksize+0x219/0x450 [ 119.757778][ T6065] ? rt_spin_unlock+0x150/0x200 [ 119.757798][ T6065] ? sb_set_blocksize+0x104/0x180 [ 119.757821][ T6065] ? setup_bdev_super+0x4c1/0x5b0 [ 119.757843][ T6065] get_tree_bdev_flags+0x40e/0x4d0 [ 119.757863][ T6065] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.757880][ T6065] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 119.757900][ T6065] ? cap_capable+0x11f/0x460 [ 119.757916][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.757935][ T6065] vfs_get_tree+0x92/0x2b0 [ 119.757956][ T6065] do_new_mount+0x302/0xa10 [ 119.757977][ T6065] ? safesetid_security_capable+0xa9/0x1a0 [ 119.757996][ T6065] ? __pfx_do_new_mount+0x10/0x10 [ 119.758017][ T6065] ? ns_capable+0x8a/0xf0 [ 119.758050][ T6065] __se_sys_mount+0x313/0x410 [ 119.758074][ T6065] ? __pfx___se_sys_mount+0x10/0x10 [ 119.758098][ T6065] ? do_syscall_64+0xbe/0xfa0 [ 119.758119][ T6065] ? __x64_sys_mount+0x20/0xc0 [ 119.758141][ T6065] do_syscall_64+0xfa/0xfa0 [ 119.758163][ T6065] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.758186][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.758203][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 119.758222][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.758238][ T6065] RIP: 0033:0x7f4d6f110eea [ 119.758253][ T6065] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.758266][ T6065] RSP: 002b:00007fff8e033298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.758283][ T6065] RAX: ffffffffffffffda RBX: 00007fff8e033320 RCX: 00007f4d6f110eea [ 119.758295][ T6065] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff8e0332e0 [ 119.758306][ T6065] RBP: 0000200000000180 R08: 00007fff8e033320 R09: 0000000000800718 [ 119.758318][ T6065] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 119.758329][ T6065] R13: 00007fff8e0332e0 R14: 0000000000000470 R15: 0000200000000200 [ 119.758349][ T6065] [ 119.758727][ T6065] Kernel Offset: disabled