Warning: Permanently added '10.128.1.245' (ED25519) to the list of known hosts. 2025/11/13 06:57:32 parsed 1 programs [ 88.234176][ T5799] cgroup: Unknown subsys name 'net' [ 88.340610][ T5799] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.106304][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.227772][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.236251][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.257138][ T787] cfg80211: failed to load regulatory.db [ 92.283224][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.291839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.586465][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.595141][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.603168][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.611529][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.620371][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.627796][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.817847][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 93.894343][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.902202][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.909539][ T5850] bridge_slave_0: entered allmulticast mode [ 93.916992][ T5850] bridge_slave_0: entered promiscuous mode [ 93.926820][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.934330][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.941530][ T5850] bridge_slave_1: entered allmulticast mode [ 93.948808][ T5850] bridge_slave_1: entered promiscuous mode [ 93.986726][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.004376][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.068962][ T5850] team0: Port device team_slave_0 added [ 94.077132][ T5850] team0: Port device team_slave_1 added [ 94.106559][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.113829][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.139926][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.152987][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.159959][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.185916][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.230256][ T5850] hsr_slave_0: entered promiscuous mode [ 94.237145][ T5850] hsr_slave_1: entered promiscuous mode [ 94.432971][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.448332][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.470557][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.481322][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.525581][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.532902][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.540992][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.548226][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.574850][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.587779][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.647976][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.694623][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.719784][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.727004][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.740709][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.747952][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.028925][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.075744][ T5850] veth0_vlan: entered promiscuous mode [ 95.088195][ T5850] veth1_vlan: entered promiscuous mode [ 95.120940][ T5850] veth0_macvtap: entered promiscuous mode [ 95.130841][ T5850] veth1_macvtap: entered promiscuous mode [ 95.151185][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.167040][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.181035][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.190266][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201021][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.209959][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388777][ T1125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.860214][ T1125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/13 06:57:44 executed programs: 0 [ 97.971478][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.981381][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.989506][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.998440][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.007533][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.015710][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.178788][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 98.254200][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.261410][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.269373][ T5907] bridge_slave_0: entered allmulticast mode [ 98.276696][ T5907] bridge_slave_0: entered promiscuous mode [ 98.285573][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.292953][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.300116][ T5907] bridge_slave_1: entered allmulticast mode [ 98.308038][ T5907] bridge_slave_1: entered promiscuous mode [ 98.341720][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.354152][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.389160][ T5907] team0: Port device team_slave_0 added [ 98.398112][ T5907] team0: Port device team_slave_1 added [ 98.430755][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.438136][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.464228][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.480761][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.488828][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.515733][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.560033][ T5907] hsr_slave_0: entered promiscuous mode [ 98.566718][ T5907] hsr_slave_1: entered promiscuous mode [ 98.573732][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.581747][ T5907] Cannot create hsr debugfs directory [ 100.095362][ T5106] Bluetooth: hci0: command tx timeout [ 100.194090][ T1125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.276884][ T1125] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.271650][ T1125] hsr_slave_0: left promiscuous mode [ 101.330621][ T1125] hsr_slave_1: left promiscuous mode [ 101.337359][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.351841][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.405544][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.424018][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.445356][ T1125] bridge_slave_1: left allmulticast mode [ 101.451937][ T1125] bridge_slave_1: left promiscuous mode [ 101.458947][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.495750][ T1125] bridge_slave_0: left allmulticast mode [ 101.501474][ T1125] bridge_slave_0: left promiscuous mode [ 101.510317][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.547839][ T1125] veth1_macvtap: left promiscuous mode [ 101.555550][ T1125] veth0_macvtap: left promiscuous mode [ 101.561185][ T1125] veth1_vlan: left promiscuous mode [ 101.566914][ T1125] veth0_vlan: left promiscuous mode [ 101.972269][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 102.010327][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 102.044076][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.078113][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.172071][ T5106] Bluetooth: hci0: command tx timeout [ 102.392680][ T1125] bond0 (unregistering): Released all slaves [ 102.498191][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.508830][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.523188][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.534998][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.644613][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.680068][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.696558][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.703780][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.726414][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.733668][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.009828][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.086778][ T5907] veth0_vlan: entered promiscuous mode [ 103.099334][ T5907] veth1_vlan: entered promiscuous mode [ 103.128287][ T5907] veth0_macvtap: entered promiscuous mode [ 103.137739][ T5907] veth1_macvtap: entered promiscuous mode [ 103.158489][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.174297][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.187219][ T5907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.197152][ T5907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.206678][ T5907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.216392][ T5907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.285244][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.294462][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.360179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.368393][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.424795][ T5953] syz.0.17[5953]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.450486][ T5953] loop0: detected capacity change from 0 to 512 [ 103.492843][ T5953] [ 103.495246][ T5953] ====================================================== [ 103.502293][ T5953] WARNING: possible circular locking dependency detected [ 103.509349][ T5953] syzkaller #0 Not tainted [ 103.513795][ T5953] ------------------------------------------------------ [ 103.520827][ T5953] syz.0.17/5953 is trying to acquire lock: [ 103.526653][ T5953] ffff8880798e0bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 103.536746][ T5953] [ 103.536746][ T5953] but task is already holding lock: [ 103.544143][ T5953] ffff88807339e4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 103.554074][ T5953] [ 103.554074][ T5953] which lock already depends on the new lock. [ 103.554074][ T5953] [ 103.564500][ T5953] [ 103.564500][ T5953] the existing dependency chain (in reverse order) is: [ 103.573523][ T5953] [ 103.573523][ T5953] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 103.581093][ T5953] down_read+0x46/0x2e0 [ 103.585786][ T5953] ext4_setattr+0x86b/0x1c90 [ 103.590907][ T5953] notify_change+0xb0d/0xe10 [ 103.596030][ T5953] chown_common+0x3f9/0x5a0 [ 103.601060][ T5953] do_fchownat+0x168/0x270 [ 103.606000][ T5953] __x64_sys_chown+0x82/0x90 [ 103.611123][ T5953] do_syscall_64+0x55/0xb0 [ 103.616083][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.622539][ T5953] [ 103.622539][ T5953] -> #1 (jbd2_handle){++++}-{0:0}: [ 103.629850][ T5953] start_this_handle+0x1e9d/0x20c0 [ 103.635505][ T5953] jbd2__journal_start+0x2bb/0x5b0 [ 103.641143][ T5953] __ext4_journal_start_sb+0x203/0x570 [ 103.647137][ T5953] ext4_do_writepages+0xf92/0x38d0 [ 103.652790][ T5953] ext4_writepages+0x1a8/0x2f0 [ 103.658120][ T5953] do_writepages+0x3a2/0x600 [ 103.663263][ T5953] filemap_fdatawrite_wbc+0x122/0x180 [ 103.669180][ T5953] file_write_and_wait_range+0x171/0x240 [ 103.675358][ T5953] ext4_sync_file+0x281/0xc10 [ 103.680572][ T5953] __x64_sys_fsync+0x195/0x1d0 [ 103.685880][ T5953] do_syscall_64+0x55/0xb0 [ 103.690826][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.697290][ T5953] [ 103.697290][ T5953] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 103.705731][ T5953] __lock_acquire+0x2ddb/0x7c80 [ 103.711115][ T5953] lock_acquire+0x197/0x410 [ 103.716154][ T5953] percpu_down_read+0x44/0x1a0 [ 103.721453][ T5953] ext4_writepages+0x170/0x2f0 [ 103.726751][ T5953] do_writepages+0x3a2/0x600 [ 103.731888][ T5953] __writeback_single_inode+0x153/0xee0 [ 103.737971][ T5953] writeback_single_inode+0x211/0x720 [ 103.743885][ T5953] write_inode_now+0x161/0x1e0 [ 103.749179][ T5953] iput+0x5b2/0x920 [ 103.753518][ T5953] ext4_xattr_block_set+0x273a/0x32a0 [ 103.759439][ T5953] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 103.765895][ T5953] __ext4_expand_extra_isize+0x306/0x400 [ 103.772091][ T5953] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 103.778106][ T5953] ext4_evict_inode+0x7ed/0xea0 [ 103.783506][ T5953] evict+0x486/0x870 [ 103.787943][ T5953] ext4_orphan_cleanup+0xbd4/0x1400 [ 103.793687][ T5953] ext4_fill_super+0x5de4/0x66c0 [ 103.799165][ T5953] get_tree_bdev+0x3e4/0x510 [ 103.804326][ T5953] vfs_get_tree+0x8c/0x280 [ 103.809287][ T5953] do_new_mount+0x24b/0xa40 [ 103.814375][ T5953] __se_sys_mount+0x2da/0x3c0 [ 103.819935][ T5953] do_syscall_64+0x55/0xb0 [ 103.824932][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.831383][ T5953] [ 103.831383][ T5953] other info that might help us debug this: [ 103.831383][ T5953] [ 103.841673][ T5953] Chain exists of: [ 103.841673][ T5953] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 103.841673][ T5953] [ 103.855099][ T5953] Possible unsafe locking scenario: [ 103.855099][ T5953] [ 103.862579][ T5953] CPU0 CPU1 [ 103.867960][ T5953] ---- ---- [ 103.873330][ T5953] lock(&ei->xattr_sem); [ 103.877674][ T5953] lock(jbd2_handle); [ 103.884278][ T5953] lock(&ei->xattr_sem); [ 103.891142][ T5953] rlock(&sbi->s_writepages_rwsem); [ 103.896436][ T5953] [ 103.896436][ T5953] *** DEADLOCK *** [ 103.896436][ T5953] [ 103.904586][ T5953] 3 locks held by syz.0.17/5953: [ 103.909529][ T5953] #0: ffff88807c0bc0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 103.919676][ T5953] #1: ffff88807c0bc608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 103.929109][ T5953] #2: ffff88807339e4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 103.939405][ T5953] [ 103.939405][ T5953] stack backtrace: [ 103.945335][ T5953] CPU: 0 PID: 5953 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.952555][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.962647][ T5953] Call Trace: [ 103.965944][ T5953] [ 103.968890][ T5953] dump_stack_lvl+0x16c/0x230 [ 103.973595][ T5953] ? load_image+0x3b0/0x3b0 [ 103.978123][ T5953] ? show_regs_print_info+0x20/0x20 [ 103.983390][ T5953] ? print_circular_bug+0x12b/0x1a0 [ 103.988607][ T5953] check_noncircular+0x2bd/0x3c0 [ 103.993557][ T5953] ? look_up_lock_class+0x75/0x140 [ 103.998692][ T5953] ? print_deadlock_bug+0x5d0/0x5d0 [ 104.003912][ T5953] ? lockdep_lock+0xe0/0x220 [ 104.008516][ T5953] ? _find_first_zero_bit+0xd3/0x100 [ 104.013826][ T5953] __lock_acquire+0x2ddb/0x7c80 [ 104.018711][ T5953] ? mark_lock+0x94/0x320 [ 104.023067][ T5953] ? verify_lock_unused+0x140/0x140 [ 104.028296][ T5953] ? __lock_acquire+0x1334/0x7c80 [ 104.033339][ T5953] ? verify_lock_unused+0x140/0x140 [ 104.038564][ T5953] lock_acquire+0x197/0x410 [ 104.043086][ T5953] ? ext4_writepages+0x170/0x2f0 [ 104.048065][ T5953] ? __might_sleep+0xe0/0xe0 [ 104.052667][ T5953] ? mark_lock+0x94/0x320 [ 104.057044][ T5953] ? read_lock_is_recursive+0x20/0x20 [ 104.062434][ T5953] ? __lock_acquire+0x1334/0x7c80 [ 104.067473][ T5953] percpu_down_read+0x44/0x1a0 [ 104.072253][ T5953] ? ext4_writepages+0x170/0x2f0 [ 104.077205][ T5953] ext4_writepages+0x170/0x2f0 [ 104.081987][ T5953] ? ext4_read_folio+0x2f0/0x2f0 [ 104.086951][ T5953] ? __rwlock_init+0x150/0x150 [ 104.091728][ T5953] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 104.097635][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.102854][ T5953] ? ext4_read_folio+0x2f0/0x2f0 [ 104.107809][ T5953] do_writepages+0x3a2/0x600 [ 104.112420][ T5953] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 104.118197][ T5953] ? writeback_single_inode+0x206/0x720 [ 104.123764][ T5953] ? __lock_acquire+0x7c80/0x7c80 [ 104.128803][ T5953] ? do_raw_spin_lock+0x121/0x2c0 [ 104.133839][ T5953] ? get_tree_bdev+0x3e4/0x510 [ 104.138619][ T5953] __writeback_single_inode+0x153/0xee0 [ 104.144185][ T5953] writeback_single_inode+0x211/0x720 [ 104.149579][ T5953] ? write_inode_now+0x1e0/0x1e0 [ 104.154544][ T5953] write_inode_now+0x161/0x1e0 [ 104.159319][ T5953] ? bdi_split_work_to_wbs+0x890/0x890 [ 104.164822][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.170038][ T5953] iput+0x5b2/0x920 [ 104.173860][ T5953] ext4_xattr_block_set+0x273a/0x32a0 [ 104.179251][ T5953] ? __might_sleep+0xe0/0xe0 [ 104.183861][ T5953] ? xattr_find_entry+0x12b/0x2f0 [ 104.188939][ T5953] ? ext4_xattr_block_find+0x350/0x350 [ 104.194413][ T5953] ? ext4_xattr_block_find+0x2d4/0x350 [ 104.199917][ T5953] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 104.205844][ T5953] __ext4_expand_extra_isize+0x306/0x400 [ 104.211497][ T5953] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 104.216976][ T5953] ext4_evict_inode+0x7ed/0xea0 [ 104.221842][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 104.226726][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 104.232637][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.237860][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 104.243768][ T5953] evict+0x486/0x870 [ 104.247675][ T5953] ? __lock_acquire+0x7c80/0x7c80 [ 104.252715][ T5953] ? proc_nr_inodes+0x230/0x230 [ 104.257578][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.262789][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 104.267647][ T5953] ? iput+0x70a/0x920 [ 104.271640][ T5953] ext4_orphan_cleanup+0xbd4/0x1400 [ 104.276866][ T5953] ? ext4_orphan_del+0xba0/0xba0 [ 104.281845][ T5953] ? ext4_register_li_request+0x183/0x940 [ 104.287580][ T5953] ? errseq_check_and_advance+0x66/0x120 [ 104.293226][ T5953] ext4_fill_super+0x5de4/0x66c0 [ 104.298181][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 104.304447][ T5953] ? __might_sleep+0xe0/0xe0 [ 104.309055][ T5953] ? read_lock_is_recursive+0x20/0x20 [ 104.314438][ T5953] ? snprintf+0xdb/0x120 [ 104.318695][ T5953] ? vscnprintf+0x80/0x80 [ 104.323033][ T5953] ? down_write+0x162/0x1f0 [ 104.327557][ T5953] ? down_read_killable+0x340/0x340 [ 104.332777][ T5953] ? setup_bdev_super+0x56b/0x660 [ 104.337812][ T5953] get_tree_bdev+0x3e4/0x510 [ 104.342417][ T5953] ? vfs_parse_fs_string+0x160/0x160 [ 104.347713][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 104.353971][ T5953] ? setup_bdev_super+0x660/0x660 [ 104.359000][ T5953] ? apparmor_capable+0x137/0x1a0 [ 104.364035][ T5953] ? bpf_lsm_capable+0x9/0x10 [ 104.368725][ T5953] ? security_capable+0x89/0xb0 [ 104.373601][ T5953] vfs_get_tree+0x8c/0x280 [ 104.378051][ T5953] do_new_mount+0x24b/0xa40 [ 104.382618][ T5953] __se_sys_mount+0x2da/0x3c0 [ 104.387440][ T5953] ? __x64_sys_mount+0xc0/0xc0 [ 104.392224][ T5953] ? lockdep_hardirqs_on+0x98/0x150 [ 104.397436][ T5953] ? __x64_sys_mount+0x20/0xc0 [ 104.402211][ T5953] do_syscall_64+0x55/0xb0 [ 104.406644][ T5953] ? clear_bhb_loop+0x40/0x90 [ 104.411337][ T5953] ? clear_bhb_loop+0x40/0x90 [ 104.416036][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.421949][ T5953] RIP: 0033:0x7f95f7590e6a [ 104.426388][ T5953] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.446010][ T5953] RSP: 002b:00007fff7a50a848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.454449][ T5953] RAX: ffffffffffffffda RBX: 00007fff7a50a8d0 RCX: 00007f95f7590e6a [ 104.462443][ T5953] RDX: 00002000000000c0 RSI: 00002000000001c0 RDI: 00007fff7a50a890 [ 104.470518][ T5953] RBP: 00002000000000c0 R08: 00007fff7a50a8d0 R09: 0000000000000012 [ 104.478501][ T5953] R10: 0000000000000012 R11: 0000000000000246 R12: 00002000000001c0 [ 104.486484][ T5953] R13: 00007fff7a50a890 R14: 000000000000046f R15: 0000200000000300 [ 104.494481][ T5953] [ 104.508240][ T5106] Bluetooth: hci0: command tx timeout [ 104.533292][ T5953] ------------[ cut here ]------------ [ 104.539025][ T5953] EA inode 11 i_nlink=2 [ 104.539315][ T5953] WARNING: CPU: 1 PID: 5953 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 104.553783][ T5953] Modules linked in: [ 104.557712][ T5953] CPU: 1 PID: 5953 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.565329][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.575961][ T5953] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 104.583072][ T5953] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 104.603155][ T5953] RSP: 0018:ffffc90002e571c0 EFLAGS: 00010246 [ 104.609258][ T5953] RAX: 89e216d9e0917e00 RBX: 0000000000000002 RCX: ffff8880781fbc00 [ 104.617565][ T5953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 104.625907][ T5953] RBP: ffffc90002e572b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 104.634597][ T5953] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 104.643027][ T5953] R13: ffff8880731ad4a8 R14: ffff8880731ad2b0 R15: ffff8880731ad300 [ 104.651036][ T5953] FS: 0000555562af5500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 104.660473][ T5953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.667427][ T5953] CR2: 00007fa663574000 CR3: 0000000027bde000 CR4: 00000000003506e0 [ 104.675816][ T5953] Call Trace: [ 104.679108][ T5953] [ 104.682407][ T5953] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 104.688060][ T5953] ? ext4_xattr_inode_iget+0x3df/0x600 [ 104.693970][ T5953] ext4_xattr_set_entry+0xcda/0x1e90 [ 104.699283][ T5953] ext4_xattr_ibody_set+0x254/0x6a0 [ 104.704911][ T5953] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 104.710836][ T5953] __ext4_expand_extra_isize+0x306/0x400 [ 104.716834][ T5953] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 104.722645][ T5953] ext4_evict_inode+0x7ed/0xea0 [ 104.727521][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 104.733076][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 104.739723][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.745662][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 104.752247][ T5953] evict+0x486/0x870 [ 104.756157][ T5953] ? __lock_acquire+0x7c80/0x7c80 [ 104.761189][ T5953] ? proc_nr_inodes+0x230/0x230 [ 104.766653][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 104.772399][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 104.777272][ T5953] ? iput+0x70a/0x920 [ 104.781282][ T5953] ext4_orphan_cleanup+0xbd4/0x1400 [ 104.787190][ T5953] ? ext4_orphan_del+0xba0/0xba0 [ 104.792707][ T5953] ? ext4_register_li_request+0x183/0x940 [ 104.798448][ T5953] ? errseq_check_and_advance+0x66/0x120 [ 104.804669][ T5953] ext4_fill_super+0x5de4/0x66c0 [ 104.809628][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 104.816484][ T5953] ? __might_sleep+0xe0/0xe0 [ 104.821098][ T5953] ? read_lock_is_recursive+0x20/0x20 [ 104.826863][ T5953] ? snprintf+0xdb/0x120 [ 104.831140][ T5953] ? vscnprintf+0x80/0x80 [ 104.835534][ T5953] ? down_write+0x162/0x1f0 [ 104.840377][ T5953] ? down_read_killable+0x340/0x340 [ 104.845848][ T5953] ? setup_bdev_super+0x56b/0x660 [ 104.850906][ T5953] get_tree_bdev+0x3e4/0x510 [ 104.855544][ T5953] ? vfs_parse_fs_string+0x160/0x160 [ 104.860853][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 104.867183][ T5953] ? setup_bdev_super+0x660/0x660 [ 104.872260][ T5953] ? apparmor_capable+0x137/0x1a0 [ 104.877295][ T5953] ? bpf_lsm_capable+0x9/0x10 [ 104.882031][ T5953] ? security_capable+0x89/0xb0 [ 104.886913][ T5953] vfs_get_tree+0x8c/0x280 [ 104.891335][ T5953] do_new_mount+0x24b/0xa40 [ 104.895942][ T5953] __se_sys_mount+0x2da/0x3c0 [ 104.900647][ T5953] ? __x64_sys_mount+0xc0/0xc0 [ 104.905534][ T5953] ? lockdep_hardirqs_on+0x98/0x150 [ 104.910785][ T5953] ? __x64_sys_mount+0x20/0xc0 [ 104.915614][ T5953] do_syscall_64+0x55/0xb0 [ 104.920060][ T5953] ? clear_bhb_loop+0x40/0x90 [ 104.924784][ T5953] ? clear_bhb_loop+0x40/0x90 [ 104.929491][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.935435][ T5953] RIP: 0033:0x7f95f7590e6a [ 104.939872][ T5953] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.959969][ T5953] RSP: 002b:00007fff7a50a848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.968520][ T5953] RAX: ffffffffffffffda RBX: 00007fff7a50a8d0 RCX: 00007f95f7590e6a [ 104.976544][ T5953] RDX: 00002000000000c0 RSI: 00002000000001c0 RDI: 00007fff7a50a890 [ 104.984564][ T5953] RBP: 00002000000000c0 R08: 00007fff7a50a8d0 R09: 0000000000000012 [ 104.992679][ T5953] R10: 0000000000000012 R11: 0000000000000246 R12: 00002000000001c0 [ 105.000666][ T5953] R13: 00007fff7a50a890 R14: 000000000000046f R15: 0000200000000300 [ 105.008794][ T5953] [ 105.011871][ T5953] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.019245][ T5953] CPU: 1 PID: 5953 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.026452][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.036538][ T5953] Call Trace: [ 105.039823][ T5953] [ 105.042770][ T5953] dump_stack_lvl+0x16c/0x230 [ 105.047476][ T5953] ? show_regs_print_info+0x20/0x20 [ 105.052693][ T5953] ? load_image+0x3b0/0x3b0 [ 105.057215][ T5953] panic+0x2c0/0x710 [ 105.061122][ T5953] ? bpf_jit_dump+0xd0/0xd0 [ 105.065643][ T5953] __warn+0x2e0/0x470 [ 105.069629][ T5953] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 105.075635][ T5953] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 105.081651][ T5953] report_bug+0x2be/0x4f0 [ 105.086032][ T5953] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 105.092031][ T5953] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 105.098026][ T5953] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 105.104046][ T5953] handle_bug+0xcf/0x120 [ 105.108303][ T5953] exc_invalid_op+0x1a/0x50 [ 105.112813][ T5953] asm_exc_invalid_op+0x1a/0x20 [ 105.117671][ T5953] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 105.124272][ T5953] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 105.143888][ T5953] RSP: 0018:ffffc90002e571c0 EFLAGS: 00010246 [ 105.149963][ T5953] RAX: 89e216d9e0917e00 RBX: 0000000000000002 RCX: ffff8880781fbc00 [ 105.157940][ T5953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 105.165916][ T5953] RBP: ffffc90002e572b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 105.173892][ T5953] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 105.181870][ T5953] R13: ffff8880731ad4a8 R14: ffff8880731ad2b0 R15: ffff8880731ad300 [ 105.189907][ T5953] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 105.195568][ T5953] ? ext4_xattr_inode_iget+0x3df/0x600 [ 105.201101][ T5953] ext4_xattr_set_entry+0xcda/0x1e90 [ 105.206504][ T5953] ext4_xattr_ibody_set+0x254/0x6a0 [ 105.211728][ T5953] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 105.217668][ T5953] __ext4_expand_extra_isize+0x306/0x400 [ 105.223354][ T5953] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 105.228836][ T5953] ext4_evict_inode+0x7ed/0xea0 [ 105.233698][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 105.238567][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 105.244474][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 105.249696][ T5953] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 105.255610][ T5953] evict+0x486/0x870 [ 105.259530][ T5953] ? __lock_acquire+0x7c80/0x7c80 [ 105.264569][ T5953] ? proc_nr_inodes+0x230/0x230 [ 105.269429][ T5953] ? do_raw_spin_unlock+0x121/0x230 [ 105.274639][ T5953] ? _raw_spin_unlock+0x28/0x40 [ 105.279498][ T5953] ? iput+0x70a/0x920 [ 105.283489][ T5953] ext4_orphan_cleanup+0xbd4/0x1400 [ 105.288715][ T5953] ? ext4_orphan_del+0xba0/0xba0 [ 105.293680][ T5953] ? ext4_register_li_request+0x183/0x940 [ 105.299409][ T5953] ? errseq_check_and_advance+0x66/0x120 [ 105.305052][ T5953] ext4_fill_super+0x5de4/0x66c0 [ 105.310008][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 105.316249][ T5953] ? __might_sleep+0xe0/0xe0 [ 105.320844][ T5953] ? read_lock_is_recursive+0x20/0x20 [ 105.326228][ T5953] ? snprintf+0xdb/0x120 [ 105.330485][ T5953] ? vscnprintf+0x80/0x80 [ 105.334821][ T5953] ? down_write+0x162/0x1f0 [ 105.339370][ T5953] ? down_read_killable+0x340/0x340 [ 105.344606][ T5953] ? setup_bdev_super+0x56b/0x660 [ 105.349638][ T5953] get_tree_bdev+0x3e4/0x510 [ 105.354237][ T5953] ? vfs_parse_fs_string+0x160/0x160 [ 105.359527][ T5953] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 105.365836][ T5953] ? setup_bdev_super+0x660/0x660 [ 105.370884][ T5953] ? apparmor_capable+0x137/0x1a0 [ 105.375981][ T5953] ? bpf_lsm_capable+0x9/0x10 [ 105.380688][ T5953] ? security_capable+0x89/0xb0 [ 105.385548][ T5953] vfs_get_tree+0x8c/0x280 [ 105.389973][ T5953] do_new_mount+0x24b/0xa40 [ 105.394486][ T5953] __se_sys_mount+0x2da/0x3c0 [ 105.399177][ T5953] ? __x64_sys_mount+0xc0/0xc0 [ 105.403947][ T5953] ? lockdep_hardirqs_on+0x98/0x150 [ 105.409153][ T5953] ? __x64_sys_mount+0x20/0xc0 [ 105.413926][ T5953] do_syscall_64+0x55/0xb0 [ 105.418350][ T5953] ? clear_bhb_loop+0x40/0x90 [ 105.423030][ T5953] ? clear_bhb_loop+0x40/0x90 [ 105.427712][ T5953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.433607][ T5953] RIP: 0033:0x7f95f7590e6a [ 105.438035][ T5953] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.457743][ T5953] RSP: 002b:00007fff7a50a848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.466182][ T5953] RAX: ffffffffffffffda RBX: 00007fff7a50a8d0 RCX: 00007f95f7590e6a [ 105.474174][ T5953] RDX: 00002000000000c0 RSI: 00002000000001c0 RDI: 00007fff7a50a890 [ 105.482152][ T5953] RBP: 00002000000000c0 R08: 00007fff7a50a8d0 R09: 0000000000000012 [ 105.490126][ T5953] R10: 0000000000000012 R11: 0000000000000246 R12: 00002000000001c0 [ 105.498101][ T5953] R13: 00007fff7a50a890 R14: 000000000000046f R15: 0000200000000300 [ 105.506114][ T5953] [ 105.509427][ T5953] Kernel Offset: disabled [ 105.513891][ T5953] Rebooting in 86400 seconds..