Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 92.106337][ T44] cfg80211: failed to load regulatory.db 2025/11/24 02:43:44 parsed 1 programs [ 96.004951][ T5803] cgroup: Unknown subsys name 'net' [ 96.246734][ T5803] cgroup: Unknown subsys name 'cpuset' [ 96.281587][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.351296][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.193080][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 102.721547][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.721717][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.721964][ T5822] bridge_slave_0: entered allmulticast mode [ 102.724619][ T5822] bridge_slave_0: entered promiscuous mode [ 102.730519][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.733488][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.733728][ T5822] bridge_slave_1: entered allmulticast mode [ 102.737671][ T5822] bridge_slave_1: entered promiscuous mode [ 102.907944][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.912270][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.045653][ T5822] team0: Port device team_slave_0 added [ 103.048442][ T5822] team0: Port device team_slave_1 added [ 103.363803][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.363817][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.363836][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.366558][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.366575][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.366603][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.529145][ T5822] hsr_slave_0: entered promiscuous mode [ 103.530291][ T5822] hsr_slave_1: entered promiscuous mode [ 103.937736][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.959017][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.994789][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.036648][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.180401][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.263049][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.278245][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.278455][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.298481][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.298713][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.546633][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.617486][ T5822] veth0_vlan: entered promiscuous mode [ 104.628521][ T5822] veth1_vlan: entered promiscuous mode [ 104.666568][ T5822] veth0_macvtap: entered promiscuous mode [ 104.675024][ T5822] veth1_macvtap: entered promiscuous mode [ 104.695122][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.709779][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.726580][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.728108][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.728158][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.728197][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.636996][ T1456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.865294][ T1456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.084870][ T1456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.417807][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.419471][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.420234][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.425967][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.426978][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.015626][ T1456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.877683][ T1456] bridge_slave_1: left allmulticast mode [ 107.877870][ T1456] bridge_slave_1: left promiscuous mode [ 107.879826][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.963373][ T1456] bridge_slave_0: left allmulticast mode [ 107.963401][ T1456] bridge_slave_0: left promiscuous mode [ 107.963635][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.702829][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.761377][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.803371][ T1456] bond0 (unregistering): Released all slaves [ 110.131021][ T1456] hsr_slave_0: left promiscuous mode [ 110.172095][ T1456] hsr_slave_1: left promiscuous mode [ 110.173334][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.173398][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.223140][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.223171][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.313809][ T1456] veth1_macvtap: left promiscuous mode [ 110.314035][ T1456] veth0_macvtap: left promiscuous mode [ 110.314335][ T1456] veth1_vlan: left promiscuous mode [ 110.314646][ T1456] veth0_vlan: left promiscuous mode [ 112.341482][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 112.541646][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 114.731131][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.731161][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.830681][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.830703][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/24 02:44:11 executed programs: 0 [ 119.382301][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.389452][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.391556][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.397746][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.398651][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.036286][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 120.393405][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.393511][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.393644][ T5973] bridge_slave_0: entered allmulticast mode [ 120.395559][ T5973] bridge_slave_0: entered promiscuous mode [ 120.398250][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.398336][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.398466][ T5973] bridge_slave_1: entered allmulticast mode [ 120.400316][ T5973] bridge_slave_1: entered promiscuous mode [ 120.664310][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.667520][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.882726][ T5973] team0: Port device team_slave_0 added [ 120.922620][ T5973] team0: Port device team_slave_1 added [ 121.123653][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.123672][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.123700][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.126318][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.126333][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.126361][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.340884][ T5973] hsr_slave_0: entered promiscuous mode [ 121.341885][ T5973] hsr_slave_1: entered promiscuous mode [ 121.462792][ T61] Bluetooth: hci0: command tx timeout [ 123.163789][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.189391][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.239469][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.275991][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.439898][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.473709][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.485496][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.486505][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.500419][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.504786][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.540754][ T61] Bluetooth: hci0: command tx timeout [ 123.859232][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.927832][ T5973] veth0_vlan: entered promiscuous mode [ 123.947797][ T5973] veth1_vlan: entered promiscuous mode [ 123.989690][ T5973] veth0_macvtap: entered promiscuous mode [ 124.008448][ T5973] veth1_macvtap: entered promiscuous mode [ 124.045108][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.059162][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.089155][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.089390][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.090292][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.119348][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.348637][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.348661][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.418933][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.418955][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/24 02:44:16 executed programs: 2 [ 124.605098][ T6058] loop0: detected capacity change from 0 to 512 [ 124.716725][ T6058] [ 124.716738][ T6058] ====================================================== [ 124.716747][ T6058] WARNING: possible circular locking dependency detected [ 124.716764][ T6058] syzkaller #0 Not tainted [ 124.716775][ T6058] ------------------------------------------------------ [ 124.716784][ T6058] syz.0.17/6058 is trying to acquire lock: [ 124.716796][ T6058] ffff8880353f2c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 124.716864][ T6058] [ 124.716864][ T6058] but task is already holding lock: [ 124.716871][ T6058] ffff888056c8c7c8 (&ei->xa[ 124.716871][ T6058] ffff888056c8c7c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 124.716922][ T6058] [ 124.716922][ T6058] which lock already depends on the new lock. [ 124.716922][ T6058] [ 124.716929][ T6058] [ 124.716929][ T6058] the existing dependency chain (in reverse order) is: [ 124.716937][ T6058] [ 124.716937][ T6058] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 124.716965][ T6058] lock_acquire+0x120/0x360 [ 124.716992][ T6058] down_write+0x3a/0x50 [ 124.717010][ T6058] ext4_xattr_set_handle+0x165/0x1590 [ 124.717040][ T6058] ext4_initxattrs+0x9f/0x110 [ 124.717061][ T6058] security_inode_init_security+0x2a0/0x3f0 [ 124.717090][ T6058] __ext4_new_inode+0x3314/0x3cb0 [ 124.717121][ T6058] ext4_create+0x22d/0x460 [ 124.717143][ T6058] path_openat+0x1500/0x3840 [ 124.717164][ T6058] do_filp_open+0x1fa/0x410 [ 124.717185][ T6058] do_sys_openat2+0x121/0x1c0 [ 124.717203][ T6058] __x64_sys_openat+0x138/0x170 [ 124.717221][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.717250][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.717269][ T6058] [ 124.717269][ T6058] -> #1 (jbd2_handle){++++}-{0:0}: [ 124.717297][ T6058] lock_acquire+0x120/0x360 [ 124.717328][ T6058] start_this_handle+0x1fa7/0x21c0 [ 124.717353][ T6058] jbd2__journal_start+0x2c1/0x5b0 [ 124.717377][ T6058] __ext4_journal_start_sb+0x227/0x5c0 [ 124.717406][ T6058] ext4_do_writepages+0xf6f/0x4600 [ 124.717430][ T6058] ext4_writepages+0x205/0x350 [ 124.717448][ T6058] do_writepages+0x32e/0x550 [ 124.717467][ T6058] file_write_and_wait_range+0x244/0x340 [ 124.717490][ T6058] ext4_sync_file+0x2b4/0xb20 [ 124.717515][ T6058] __x64_sys_fsync+0x194/0x1f0 [ 124.717532][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.717558][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.717577][ T6058] [ 124.717577][ T6058] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 124.717605][ T6058] validate_chain+0xb9b/0x2140 [ 124.717622][ T6058] __lock_acquire+0xab9/0xd20 [ 124.717648][ T6058] lock_acquire+0x120/0x360 [ 124.717672][ T6058] percpu_down_read_internal+0x48/0x1d0 [ 124.717691][ T6058] ext4_writepages+0x1cc/0x350 [ 124.717709][ T6058] do_writepages+0x32e/0x550 [ 124.717727][ T6058] __writeback_single_inode+0x145/0x1000 [ 124.717751][ T6058] writeback_single_inode+0x1db/0x640 [ 124.717770][ T6058] write_inode_now+0x160/0x1d0 [ 124.717788][ T6058] iput+0x830/0xc50 [ 124.717813][ T6058] ext4_xattr_block_set+0x1fce/0x2ac0 [ 124.717840][ T6058] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 124.717869][ T6058] __ext4_expand_extra_isize+0x30d/0x400 [ 124.717886][ T6058] __ext4_mark_inode_dirty+0x46c/0x700 [ 124.717907][ T6058] ext4_evict_inode+0x80d/0xee0 [ 124.717928][ T6058] evict+0x504/0x9c0 [ 124.717946][ T6058] ext4_orphan_cleanup+0xc20/0x1460 [ 124.717966][ T6058] ext4_fill_super+0x593b/0x61f0 [ 124.717982][ T6058] get_tree_bdev_flags+0x40e/0x4d0 [ 124.718005][ T6058] vfs_get_tree+0x92/0x2b0 [ 124.718025][ T6058] do_new_mount+0x302/0xa10 [ 124.718049][ T6058] __se_sys_mount+0x313/0x410 [ 124.718075][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.718103][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.718122][ T6058] [ 124.718122][ T6058] other info that might help us debug this: [ 124.718122][ T6058] [ 124.718129][ T6058] Chain exists of: [ 124.718129][ T6058] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 124.718129][ T6058] [ 124.718163][ T6058] Possible unsafe locking scenario: [ 124.718163][ T6058] [ 124.718169][ T6058] CPU0 CPU1 [ 124.718175][ T6058] ---- ---- [ 124.718182][ T6058] lock(&ei->xattr_sem); [ 124.718196][ T6058] lock(jbd2_handle); [ 124.718211][ T6058] lock(&ei->xattr_sem); [ 124.718226][ T6058] rlock(&sbi->s_writepages_rwsem); [ 124.718240][ T6058] [ 124.718240][ T6058] *** DEADLOCK *** [ 124.718240][ T6058] [ 124.718246][ T6058] 3 locks held by syz.0.17/6058: [ 124.718258][ T6058] #0: ffff8880348c40d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 124.718324][ T6058] #1: ffff8880348c4770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 124.718377][ T6058] #2: ffff888056c8c7c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 124.718426][ T6058] [ 124.718426][ T6058] stack backtrace: [ 124.718450][ T6058] CPU: 0 UID: 0 PID: 6058 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.718475][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.718494][ T6058] Call Trace: [ 124.718506][ T6058] [ 124.718514][ T6058] dump_stack_lvl+0x189/0x250 [ 124.718546][ T6058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.718576][ T6058] ? __pfx__printk+0x10/0x10 [ 124.718601][ T6058] ? print_lock_name+0xde/0x100 [ 124.718624][ T6058] print_circular_bug+0x2ee/0x310 [ 124.718645][ T6058] check_noncircular+0x134/0x160 [ 124.718667][ T6058] validate_chain+0xb9b/0x2140 [ 124.718690][ T6058] ? look_up_lock_class+0x74/0x170 [ 124.718721][ T6058] ? register_lock_class+0x51/0x320 [ 124.718751][ T6058] __lock_acquire+0xab9/0xd20 [ 124.718782][ T6058] ? ext4_writepages+0x1cc/0x350 [ 124.718802][ T6058] lock_acquire+0x120/0x360 [ 124.718826][ T6058] ? ext4_writepages+0x1cc/0x350 [ 124.718848][ T6058] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 124.718880][ T6058] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.718913][ T6058] percpu_down_read_internal+0x48/0x1d0 [ 124.718933][ T6058] ? ext4_writepages+0x1cc/0x350 [ 124.718955][ T6058] ext4_writepages+0x1cc/0x350 [ 124.718978][ T6058] ? __pfx_ext4_writepages+0x10/0x10 [ 124.718999][ T6058] ? rt_mutex_slowunlock+0x493/0x8a0 [ 124.719028][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.719054][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.719079][ T6058] ? __pfx_ext4_writepages+0x10/0x10 [ 124.719101][ T6058] do_writepages+0x32e/0x550 [ 124.719123][ T6058] ? reacquire_held_locks+0x127/0x1d0 [ 124.719155][ T6058] ? rt_spin_lock+0x1c1/0x3e0 [ 124.719181][ T6058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.719210][ T6058] __writeback_single_inode+0x145/0x1000 [ 124.719241][ T6058] writeback_single_inode+0x1db/0x640 [ 124.719267][ T6058] write_inode_now+0x160/0x1d0 [ 124.719289][ T6058] ? __pfx_write_inode_now+0x10/0x10 [ 124.719336][ T6058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.719363][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.719390][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.719416][ T6058] iput+0x830/0xc50 [ 124.719449][ T6058] ext4_xattr_block_set+0x1fce/0x2ac0 [ 124.719498][ T6058] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 124.719531][ T6058] ? ext4_xattr_block_find+0x2d4/0x350 [ 124.719564][ T6058] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 124.719616][ T6058] __ext4_expand_extra_isize+0x30d/0x400 [ 124.719649][ T6058] __ext4_mark_inode_dirty+0x46c/0x700 [ 124.719681][ T6058] ext4_evict_inode+0x80d/0xee0 [ 124.719712][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.719736][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.719763][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.719788][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.719810][ T6058] evict+0x504/0x9c0 [ 124.719834][ T6058] ? __pfx_evict+0x10/0x10 [ 124.719856][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.719880][ T6058] ? iput+0x946/0xc50 [ 124.719910][ T6058] ext4_orphan_cleanup+0xc20/0x1460 [ 124.719939][ T6058] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 124.719963][ T6058] ? ext4_register_li_request+0x640/0x720 [ 124.719986][ T6058] ? errseq_check_and_advance+0x66/0x120 [ 124.720012][ T6058] ext4_fill_super+0x593b/0x61f0 [ 124.720042][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.720060][ T6058] ? snprintf+0xda/0x120 [ 124.720082][ T6058] ? rt_spin_lock+0x1c1/0x3e0 [ 124.720108][ T6058] ? __pfx_snprintf+0x10/0x10 [ 124.720128][ T6058] ? set_blocksize+0x219/0x450 [ 124.720158][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.720184][ T6058] ? sb_set_blocksize+0x104/0x180 [ 124.720216][ T6058] ? setup_bdev_super+0x4c1/0x5b0 [ 124.720244][ T6058] get_tree_bdev_flags+0x40e/0x4d0 [ 124.720271][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.720291][ T6058] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.720359][ T6058] ? cap_capable+0x11f/0x460 [ 124.720378][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.720402][ T6058] vfs_get_tree+0x92/0x2b0 [ 124.720429][ T6058] do_new_mount+0x302/0xa10 [ 124.720456][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.720480][ T6058] ? __pfx_do_new_mount+0x10/0x10 [ 124.720508][ T6058] ? ns_capable+0x8a/0xf0 [ 124.720543][ T6058] __se_sys_mount+0x313/0x410 [ 124.720572][ T6058] ? __pfx___se_sys_mount+0x10/0x10 [ 124.720600][ T6058] ? do_syscall_64+0xbe/0xfa0 [ 124.720628][ T6058] ? __x64_sys_mount+0x20/0xc0 [ 124.720657][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.720685][ T6058] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.720713][ T6058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.720734][ T6058] ? clear_bhb_loop+0x60/0xb0 [ 124.720757][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.720778][ T6058] RIP: 0033:0x7f28358c0eea [ 124.720805][ T6058] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.720824][ T6058] RSP: 002b:00007fff33f5c2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.720845][ T6058] RAX: ffffffffffffffda RBX: 00007fff33f5c340 RCX: 00007f28358c0eea [ 124.720860][ T6058] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff33f5c300 [ 124.720874][ T6058] RBP: 0000200000000180 R08: 00007fff33f5c340 R09: 0000000000800700 [ 124.720889][ T6058] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 124.720903][ T6058] R13: 00007fff33f5c300 R14: 000000000000046f R15: 000000000000002c [ 124.720926][ T6058] [ 124.770855][ T6058] ------------[ cut here ]------------ [ 124.770872][ T6058] EA inode 11 i_nlink=2 [ 124.771245][ T6058] WARNING: CPU: 1 PID: 6058 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.771286][ T6058] Modules linked in: [ 124.771308][ T6058] CPU: 1 UID: 0 PID: 6058 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.771346][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.771359][ T6058] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.771385][ T6058] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 57 92 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 3e 41 08 44 89 f9 [ 124.771405][ T6058] RSP: 0018:ffffc90003ed7100 EFLAGS: 00010246 [ 124.771425][ T6058] RAX: b502ea7ad5018100 RBX: 0000000000000001 RCX: ffff888026e78000 [ 124.771442][ T6058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.771457][ T6058] RBP: ffffc90003ed71f8 R08: 0000000000000000 R09: 0000000000000000 [ 124.771471][ T6058] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 124.771488][ T6058] R13: ffff888056c1b3b0 R14: 1ffff1100ad8365c R15: ffff888056c1b2e0 [ 124.771506][ T6058] FS: 00005555889c1500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 124.771526][ T6058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.771549][ T6058] CR2: 00007f23e6731e9c CR3: 0000000041e1a000 CR4: 00000000003526f0 [ 124.771569][ T6058] Call Trace: [ 124.771578][ T6058] [ 124.771588][ T6058] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 124.771618][ T6058] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 124.771644][ T6058] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 124.771684][ T6058] ext4_xattr_set_entry+0xabb/0x1e20 [ 124.771730][ T6058] ext4_xattr_ibody_set+0x254/0x6a0 [ 124.771769][ T6058] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 124.771824][ T6058] __ext4_expand_extra_isize+0x30d/0x400 [ 124.771854][ T6058] __ext4_mark_inode_dirty+0x46c/0x700 [ 124.771888][ T6058] ext4_evict_inode+0x80d/0xee0 [ 124.771923][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.771958][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.771990][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.772018][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.772044][ T6058] evict+0x504/0x9c0 [ 124.772073][ T6058] ? __pfx_evict+0x10/0x10 [ 124.772096][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.772126][ T6058] ? iput+0x946/0xc50 [ 124.772162][ T6058] ext4_orphan_cleanup+0xc20/0x1460 [ 124.772195][ T6058] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 124.772249][ T6058] ? ext4_register_li_request+0x640/0x720 [ 124.772275][ T6058] ? errseq_check_and_advance+0x66/0x120 [ 124.772305][ T6058] ext4_fill_super+0x593b/0x61f0 [ 124.772352][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.772373][ T6058] ? snprintf+0xda/0x120 [ 124.772396][ T6058] ? rt_spin_lock+0x1c1/0x3e0 [ 124.772426][ T6058] ? __pfx_snprintf+0x10/0x10 [ 124.772449][ T6058] ? set_blocksize+0x219/0x450 [ 124.772484][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.772513][ T6058] ? sb_set_blocksize+0x104/0x180 [ 124.772548][ T6058] ? setup_bdev_super+0x4c1/0x5b0 [ 124.772579][ T6058] get_tree_bdev_flags+0x40e/0x4d0 [ 124.772609][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.772632][ T6058] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.772662][ T6058] ? cap_capable+0x11f/0x460 [ 124.772682][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.772705][ T6058] vfs_get_tree+0x92/0x2b0 [ 124.772736][ T6058] do_new_mount+0x302/0xa10 [ 124.772768][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.772795][ T6058] ? __pfx_do_new_mount+0x10/0x10 [ 124.772827][ T6058] ? ns_capable+0x8a/0xf0 [ 124.772864][ T6058] __se_sys_mount+0x313/0x410 [ 124.772902][ T6058] ? __pfx___se_sys_mount+0x10/0x10 [ 124.772935][ T6058] ? do_syscall_64+0xbe/0xfa0 [ 124.772968][ T6058] ? __x64_sys_mount+0x20/0xc0 [ 124.773002][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.773057][ T6058] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.773092][ T6058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.773115][ T6058] ? clear_bhb_loop+0x60/0xb0 [ 124.773142][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.773173][ T6058] RIP: 0033:0x7f28358c0eea [ 124.773193][ T6058] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.773212][ T6058] RSP: 002b:00007fff33f5c2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.773237][ T6058] RAX: ffffffffffffffda RBX: 00007fff33f5c340 RCX: 00007f28358c0eea [ 124.773253][ T6058] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff33f5c300 [ 124.773270][ T6058] RBP: 0000200000000180 R08: 00007fff33f5c340 R09: 0000000000800700 [ 124.773287][ T6058] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 124.773303][ T6058] R13: 00007fff33f5c300 R14: 000000000000046f R15: 000000000000002c [ 124.773334][ T6058] [ 124.773346][ T6058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.773364][ T6058] CPU: 1 UID: 0 PID: 6058 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.773391][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.773405][ T6058] Call Trace: [ 124.773414][ T6058] [ 124.773423][ T6058] dump_stack_lvl+0x99/0x250 [ 124.773459][ T6058] ? __asan_memcpy+0x40/0x70 [ 124.773486][ T6058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.773519][ T6058] ? __pfx__printk+0x10/0x10 [ 124.773554][ T6058] vpanic+0x237/0x6d0 [ 124.773577][ T6058] ? __pfx_vpanic+0x10/0x10 [ 124.773604][ T6058] panic+0xb9/0xc0 [ 124.773625][ T6058] ? __pfx_panic+0x10/0x10 [ 124.773654][ T6058] __warn+0x31b/0x4b0 [ 124.773675][ T6058] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.773700][ T6058] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.773722][ T6058] report_bug+0x2be/0x4f0 [ 124.773754][ T6058] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.773777][ T6058] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.773800][ T6058] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 124.773822][ T6058] handle_bug+0x84/0x160 [ 124.773846][ T6058] exc_invalid_op+0x1a/0x50 [ 124.773869][ T6058] asm_exc_invalid_op+0x1a/0x20 [ 124.773891][ T6058] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 124.773916][ T6058] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 57 92 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 3e 41 08 44 89 f9 [ 124.773935][ T6058] RSP: 0018:ffffc90003ed7100 EFLAGS: 00010246 [ 124.773954][ T6058] RAX: b502ea7ad5018100 RBX: 0000000000000001 RCX: ffff888026e78000 [ 124.773971][ T6058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.773985][ T6058] RBP: ffffc90003ed71f8 R08: 0000000000000000 R09: 0000000000000000 [ 124.774000][ T6058] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 124.774017][ T6058] R13: ffff888056c1b3b0 R14: 1ffff1100ad8365c R15: ffff888056c1b2e0 [ 124.774046][ T6058] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 124.774072][ T6058] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 124.774098][ T6058] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 124.774137][ T6058] ext4_xattr_set_entry+0xabb/0x1e20 [ 124.774185][ T6058] ext4_xattr_ibody_set+0x254/0x6a0 [ 124.774226][ T6058] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 124.774284][ T6058] __ext4_expand_extra_isize+0x30d/0x400 [ 124.774312][ T6058] __ext4_mark_inode_dirty+0x46c/0x700 [ 124.774361][ T6058] ext4_evict_inode+0x80d/0xee0 [ 124.774396][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.774423][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.774452][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.774480][ T6058] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.774507][ T6058] evict+0x504/0x9c0 [ 124.774536][ T6058] ? __pfx_evict+0x10/0x10 [ 124.774561][ T6058] ? rt_spin_unlock+0x161/0x200 [ 124.774589][ T6058] ? iput+0x946/0xc50 [ 124.774625][ T6058] ext4_orphan_cleanup+0xc20/0x1460 [ 124.774660][ T6058] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 124.774689][ T6058] ? ext4_register_li_request+0x640/0x720 [ 124.774715][ T6058] ? errseq_check_and_advance+0x66/0x120 [ 124.774744][ T6058] ext4_fill_super+0x593b/0x61f0 [ 124.774779][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.774801][ T6058] ? snprintf+0xda/0x120 [ 124.774825][ T6058] ? rt_spin_lock+0x1c1/0x3e0 [ 124.774854][ T6058] ? __pfx_snprintf+0x10/0x10 [ 124.774879][ T6058] ? set_blocksize+0x219/0x450 [ 124.774911][ T6058] ? rt_spin_unlock+0x150/0x200 [ 124.774942][ T6058] ? sb_set_blocksize+0x104/0x180 [ 124.774976][ T6058] ? setup_bdev_super+0x4c1/0x5b0 [ 124.775007][ T6058] get_tree_bdev_flags+0x40e/0x4d0 [ 124.775037][ T6058] ? __pfx_ext4_fill_super+0x10/0x10 [ 124.775061][ T6058] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.775088][ T6058] ? cap_capable+0x11f/0x460 [ 124.775111][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.775138][ T6058] vfs_get_tree+0x92/0x2b0 [ 124.775168][ T6058] do_new_mount+0x302/0xa10 [ 124.775199][ T6058] ? safesetid_security_capable+0xa9/0x1a0 [ 124.775225][ T6058] ? __pfx_do_new_mount+0x10/0x10 [ 124.775257][ T6058] ? ns_capable+0x8a/0xf0 [ 124.775294][ T6058] __se_sys_mount+0x313/0x410 [ 124.775374][ T6058] ? __pfx___se_sys_mount+0x10/0x10 [ 124.775409][ T6058] ? do_syscall_64+0xbe/0xfa0 [ 124.775442][ T6058] ? __x64_sys_mount+0x20/0xc0 [ 124.775475][ T6058] do_syscall_64+0xfa/0xfa0 [ 124.775507][ T6058] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.775541][ T6058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.775565][ T6058] ? clear_bhb_loop+0x60/0xb0 [ 124.775593][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.775617][ T6058] RIP: 0033:0x7f28358c0eea [ 124.775635][ T6058] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.775656][ T6058] RSP: 002b:00007fff33f5c2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.775678][ T6058] RAX: ffffffffffffffda RBX: 00007fff33f5c340 RCX: 00007f28358c0eea [ 124.775696][ T6058] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff33f5c300 [ 124.775713][ T6058] RBP: 0000200000000180 R08: 00007fff33f5c340 R09: 0000000000800700 [ 124.775730][ T6058] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 124.775745][ T6058] R13: 00007fff33f5c300 R14: 000000000000046f R15: 000000000000002c [ 124.775770][ T6058] [ 124.775928][ T6058] Kernel Offset: disabled