Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
[ 81.676565][ T44] cfg80211: failed to load regulatory.db
2025/11/28 18:34:19 parsed 1 programs
[ 85.986939][ T5807] cgroup: Unknown subsys name 'net'
[ 86.228028][ T5807] cgroup: Unknown subsys name 'cpuset'
[ 86.283875][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 87.997979][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 93.395220][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.395244][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.450739][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.450759][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.242297][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.255110][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.256145][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.257318][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.258071][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.994775][ T5872] chnl_net:caif_netlink_parms(): no params data found
[ 96.433686][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.435559][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.435705][ T5872] bridge_slave_0: entered allmulticast mode
[ 96.437516][ T5872] bridge_slave_0: entered promiscuous mode
[ 96.461016][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.461256][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.461475][ T5872] bridge_slave_1: entered allmulticast mode
[ 96.465117][ T5872] bridge_slave_1: entered promiscuous mode
[ 96.650519][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.654378][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.806566][ T5872] team0: Port device team_slave_0 added
[ 96.810006][ T5872] team0: Port device team_slave_1 added
[ 97.250594][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.250606][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.250620][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.353817][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.353856][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.353869][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.562162][ T5872] hsr_slave_0: entered promiscuous mode
[ 97.564236][ T5872] hsr_slave_1: entered promiscuous mode
[ 97.931039][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.949438][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.988356][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.026300][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.126635][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.212382][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.222880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.225712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.240336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.240415][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.450846][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.495517][ T5872] veth0_vlan: entered promiscuous mode
[ 98.501084][ T5872] veth1_vlan: entered promiscuous mode
[ 98.532903][ T5872] veth0_macvtap: entered promiscuous mode
[ 98.545390][ T5872] veth1_macvtap: entered promiscuous mode
[ 98.562990][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.571442][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.597015][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.598639][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.599095][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.599133][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.408048][ T2036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.637169][ T2036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.906334][ T2036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.537354][ T2036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/28 18:34:37 executed programs: 0
[ 101.053620][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.058760][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.059461][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.060650][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.061338][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.275169][ T5915] chnl_net:caif_netlink_parms(): no params data found
[ 101.554867][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.555859][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.555983][ T5915] bridge_slave_0: entered allmulticast mode
[ 101.557523][ T5915] bridge_slave_0: entered promiscuous mode
[ 101.559942][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.560022][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.560125][ T5915] bridge_slave_1: entered allmulticast mode
[ 101.561736][ T5915] bridge_slave_1: entered promiscuous mode
[ 101.758886][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.789273][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.947701][ T5915] team0: Port device team_slave_0 added
[ 101.969979][ T5915] team0: Port device team_slave_1 added
[ 102.146745][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.146756][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.146769][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.148803][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.148813][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.148826][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.234954][ T2036] bridge_slave_1: left allmulticast mode
[ 102.235153][ T2036] bridge_slave_1: left promiscuous mode
[ 102.236931][ T2036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.284092][ T2036] bridge_slave_0: left allmulticast mode
[ 102.284111][ T2036] bridge_slave_0: left promiscuous mode
[ 102.284259][ T2036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.104996][ T5120] Bluetooth: hci0: command tx timeout
[ 104.044135][ T2036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.103737][ T2036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.146496][ T2036] bond0 (unregistering): Released all slaves
[ 104.494871][ T5915] hsr_slave_0: entered promiscuous mode
[ 104.495683][ T5915] hsr_slave_1: entered promiscuous mode
[ 104.496402][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[ 104.496476][ T5915] Cannot create hsr debugfs directory
[ 104.624037][ T2036] hsr_slave_0: left promiscuous mode
[ 104.673221][ T2036] hsr_slave_1: left promiscuous mode
[ 104.674065][ T2036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 104.674123][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 104.705821][ T2036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 104.705848][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 104.769348][ T2036] veth1_macvtap: left promiscuous mode
[ 104.769506][ T2036] veth0_macvtap: left promiscuous mode
[ 104.769666][ T2036] veth1_vlan: left promiscuous mode
[ 104.770644][ T2036] veth0_vlan: left promiscuous mode
[ 105.183216][ T5120] Bluetooth: hci0: command tx timeout
[ 106.714112][ T2036] team0 (unregistering): Port device team_slave_1 removed
[ 106.923962][ T2036] team0 (unregistering): Port device team_slave_0 removed
[ 107.263191][ T5120] Bluetooth: hci0: command tx timeout
[ 109.343459][ T5120] Bluetooth: hci0: command tx timeout
[ 110.714711][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.769538][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.810379][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.848717][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.063767][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.096890][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.114271][ T150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.114470][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.122320][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.122567][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.672368][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.730722][ T5915] veth0_vlan: entered promiscuous mode
[ 111.740227][ T5915] veth1_vlan: entered promiscuous mode
[ 111.785389][ T5915] veth0_macvtap: entered promiscuous mode
[ 111.791424][ T5915] veth1_macvtap: entered promiscuous mode
[ 111.824379][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.832650][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.843524][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.843983][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.844172][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.844420][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.038486][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.038504][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.078630][ T2036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.078649][ T2036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/28 18:34:48 executed programs: 2
[ 112.206705][ T6004] loop0: detected capacity change from 0 to 512
[ 112.260533][ T6004]
[ 112.260544][ T6004] =========================================[ 112.260544][ T6004] ======================================================
[ 112.260551][ T6004] WARNING: possible circular locking dependency detected
[ 112.260566][ T6004] syzkaller #0 Not tainted
[ 112.260575][ T6004] ------------------------------------------------------
[ 112.260581][ T6004] syz.0.17/6004 is trying to acquire lock:
[ 112.260591][ T6004] ffff888032ea6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 112.260641][ T6004]
[ 112.260641][ T6004] but task is already holding lock:
[ 112.260647][ T6004] ffff888047501868 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 112.260684][ T6004]
[ 112.260684][ T6004] which lock already depends on the new lock.
[ 112.260684][ T6004]
[ 112.260691][ T6004]
[ 112.260691][ T6004] the existing dependency chain (in reverse order) is:
[ 112.260696][ T6004]
[ 112.260696][ T6004] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 112.260719][ T6004] lock_acquire+0x120/0x360
[ 112.260738][ T6004] down_write+0x3a/0x50
[ 112.260752][ T6004] ext4_xattr_set_handle+0x165/0x1590
[ 112.260773][ T6004] ext4_initxattrs+0x9f/0x110
[ 112.260790][ T6004] security_inode_init_security+0x2a0/0x3f0
[ 112.260810][ T6004] __ext4_new_inode+0x3314/0x3cb0
[ 112.260832][ T6004] ext4_create+0x22d/0x460
[ 112.260849][ T6004] path_openat+0x1500/0x3840
[ 112.260869][ T6004] do_filp_open+0x1fa/0x410
[ 112.260884][ T6004] do_sys_openat2+0x121/0x1c0
[ 112.260899][ T6004] __x64_sys_openat+0x138/0x170
[ 112.260914][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.260933][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.260949][ T6004]
[ 112.260949][ T6004] -> #1 (jbd2_handle){++++}-{0:0}:
[ 112.260976][ T6004] lock_acquire+0x120/0x360
[ 112.260994][ T6004] start_this_handle+0x1fa7/0x21c0
[ 112.261012][ T6004] jbd2__journal_start+0x2c1/0x5b0
[ 112.261030][ T6004] __ext4_journal_start_sb+0x227/0x5c0
[ 112.261052][ T6004] ext4_do_writepages+0xf6f/0x4600
[ 112.261071][ T6004] ext4_writepages+0x205/0x350
[ 112.261085][ T6004] do_writepages+0x32e/0x550
[ 112.261099][ T6004] file_write_and_wait_range+0x244/0x340
[ 112.261116][ T6004] ext4_sync_file+0x2b4/0xb20
[ 112.261135][ T6004] __x64_sys_fsync+0x194/0x1f0
[ 112.261149][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.261169][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.261184][ T6004]
[ 112.261184][ T6004] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 112.261207][ T6004] validate_chain+0xb9b/0x2140
[ 112.261220][ T6004] __lock_acquire+0xab9/0xd20
[ 112.261239][ T6004] lock_acquire+0x120/0x360
[ 112.261256][ T6004] percpu_down_read_internal+0x48/0x1d0
[ 112.261270][ T6004] ext4_writepages+0x1cc/0x350
[ 112.261292][ T6004] do_writepages+0x32e/0x550
[ 112.261306][ T6004] __writeback_single_inode+0x145/0x1000
[ 112.261324][ T6004] writeback_single_inode+0x1db/0x640
[ 112.261340][ T6004] write_inode_now+0x160/0x1d0
[ 112.261355][ T6004] iput+0x830/0xc50
[ 112.261373][ T6004] ext4_xattr_block_set+0x1fce/0x2ac0
[ 112.261394][ T6004] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 112.261415][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 112.261430][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 112.261447][ T6004] ext4_evict_inode+0x80d/0xee0
[ 112.261463][ T6004] evict+0x504/0x9c0
[ 112.261478][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 112.261495][ T6004] ext4_fill_super+0x593b/0x61f0
[ 112.261509][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 112.261528][ T6004] vfs_get_tree+0x92/0x2b0
[ 112.261545][ T6004] do_new_mount+0x302/0xa10
[ 112.261563][ T6004] __se_sys_mount+0x313/0x410
[ 112.261582][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.261602][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.261617][ T6004]
[ 112.261617][ T6004] other info that might help us debug this:
[ 112.261617][ T6004]
[ 112.261623][ T6004] Chain exists of:
[ 112.261623][ T6004] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 112.261623][ T6004]
[ 112.261651][ T6004] Possible unsafe locking scenario:
[ 112.261651][ T6004]
[ 112.261656][ T6004] CPU0 CPU1
[ 112.261661][ T6004] ---- ----
[ 112.261666][ T6004] lock(&ei->xattr_sem);
[ 112.261677][ T6004] lock(jbd2_handle);
[ 112.261690][ T6004] lock(&ei->xattr_sem);
[ 112.261703][ T6004] rlock(&sbi->s_writepages_rwsem);
[ 112.261714][ T6004]
[ 112.261714][ T6004] *** DEADLOCK ***
[ 112.261714][ T6004]
[ 112.261719][ T6004] 3 locks held by syz.0.17/6004:
[ 112.261729][ T6004] #0: ffff888032ea40d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0
[ 112.261778][ T6004] #1: ffff888032ea4770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[ 112.261819][ T6004] #2: ffff888047501868 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 112.261861][ T6004]
[ 112.261861][ T6004] stack backtrace:
[ 112.261884][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 112.261903][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 112.261921][ T6004] Call Trace:
[ 112.261930][ T6004]
[ 112.261938][ T6004] dump_stack_lvl+0x189/0x250
[ 112.261963][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10
[ 112.261985][ T6004] ? __pfx__printk+0x10/0x10
[ 112.262005][ T6004] ? print_lock_name+0xde/0x100
[ 112.262025][ T6004] print_circular_bug+0x2ee/0x310
[ 112.262043][ T6004] check_noncircular+0x134/0x160
[ 112.262061][ T6004] validate_chain+0xb9b/0x2140
[ 112.262081][ T6004] ? look_up_lock_class+0x74/0x170
[ 112.262104][ T6004] ? register_lock_class+0x51/0x320
[ 112.262127][ T6004] __lock_acquire+0xab9/0xd20
[ 112.262150][ T6004] ? ext4_writepages+0x1cc/0x350
[ 112.262166][ T6004] lock_acquire+0x120/0x360
[ 112.262186][ T6004] ? ext4_writepages+0x1cc/0x350
[ 112.262208][ T6004] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 112.262231][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.262255][ T6004] percpu_down_read_internal+0x48/0x1d0
[ 112.262271][ T6004] ? ext4_writepages+0x1cc/0x350
[ 112.262294][ T6004] ext4_writepages+0x1cc/0x350
[ 112.262313][ T6004] ? __pfx_ext4_writepages+0x10/0x10
[ 112.262329][ T6004] ? rt_mutex_slowunlock+0x493/0x8a0
[ 112.262351][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.262371][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.262388][ T6004] ? __pfx_ext4_writepages+0x10/0x10
[ 112.262403][ T6004] do_writepages+0x32e/0x550
[ 112.262421][ T6004] ? reacquire_held_locks+0x127/0x1d0
[ 112.262444][ T6004] ? rt_spin_lock+0x1c1/0x3e0
[ 112.262464][ T6004] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 112.262485][ T6004] __writeback_single_inode+0x145/0x1000
[ 112.262507][ T6004] writeback_single_inode+0x1db/0x640
[ 112.262527][ T6004] write_inode_now+0x160/0x1d0
[ 112.262543][ T6004] ? __pfx_write_inode_now+0x10/0x10
[ 112.262573][ T6004] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 112.262593][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.262623][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.262643][ T6004] iput+0x830/0xc50
[ 112.262668][ T6004] ext4_xattr_block_set+0x1fce/0x2ac0
[ 112.262703][ T6004] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 112.262727][ T6004] ? ext4_xattr_block_find+0x2d4/0x350
[ 112.262751][ T6004] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 112.262784][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 112.262803][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 112.262828][ T6004] ext4_evict_inode+0x80d/0xee0
[ 112.262849][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.262865][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.262883][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.262899][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.262916][ T6004] evict+0x504/0x9c0
[ 112.262936][ T6004] ? __pfx_evict+0x10/0x10
[ 112.262952][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.262971][ T6004] ? iput+0x946/0xc50
[ 112.262998][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 112.263018][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 112.263034][ T6004] ? ext4_register_li_request+0x640/0x720
[ 112.263050][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 112.263067][ T6004] ext4_fill_super+0x593b/0x61f0
[ 112.263090][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.263102][ T6004] ? snprintf+0xda/0x120
[ 112.263118][ T6004] ? rt_spin_lock+0x1c1/0x3e0
[ 112.263136][ T6004] ? __pfx_snprintf+0x10/0x10
[ 112.263151][ T6004] ? set_blocksize+0x219/0x450
[ 112.263173][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.263192][ T6004] ? sb_set_blocksize+0x104/0x180
[ 112.263214][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 112.263235][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 112.263255][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.263271][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 112.263297][ T6004] ? cap_capable+0x11f/0x460
[ 112.263312][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.263330][ T6004] vfs_get_tree+0x92/0x2b0
[ 112.263349][ T6004] do_new_mount+0x302/0xa10
[ 112.263370][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.263386][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 112.263406][ T6004] ? ns_capable+0x8a/0xf0
[ 112.263430][ T6004] __se_sys_mount+0x313/0x410
[ 112.263453][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 112.263476][ T6004] ? do_syscall_64+0xbe/0xfa0
[ 112.263494][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 112.263515][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.263535][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.263555][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.263571][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 112.263588][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.263603][ T6004] RIP: 0033:0x7f5905410eea
[ 112.263626][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 112.263639][ T6004] RSP: 002b:00007ffef32a1468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 112.263657][ T6004] RAX: ffffffffffffffda RBX: 00007ffef32a14f0 RCX: 00007f5905410eea
[ 112.263670][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffef32a14b0
[ 112.263682][ T6004] RBP: 0000200000000180 R08: 00007ffef32a14f0 R09: 0000000000000000
[ 112.263692][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0
[ 112.263703][ T6004] R13: 00007ffef32a14b0 R14: 000000000000046f R15: 0000200000000200
[ 112.263722][ T6004]
[ 112.269659][ T6004] ------------[ cut here ]------------
[ 112.269671][ T6004] EA inode 11 i_nlink=2
[ 112.269880][ T6004] WARNING: CPU: 0 PID: 6004 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.269910][ T6004] Modules linked in:
[ 112.269924][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 112.269943][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 112.269953][ T6004] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.269970][ T6004] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 4a 41 08 44 89 f9
[ 112.269984][ T6004] RSP: 0018:ffffc90003f37100 EFLAGS: 00010246
[ 112.269998][ T6004] RAX: eef54bce2507ad00 RBX: 0000000000000001 RCX: ffff8880328c3c00
[ 112.270010][ T6004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 112.270029][ T6004] RBP: ffffc90003f371f8 R08: 0000000000000000 R09: 0000000000000000
[ 112.270039][ T6004] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b
[ 112.270050][ T6004] R13: ffff888047503f88 R14: 1ffff11008ea07d7 R15: ffff888047503eb8
[ 112.270063][ T6004] FS: 00005555796eb500(0000) GS:ffff888126df4000(0000) knlGS:0000000000000000
[ 112.270078][ T6004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 112.270089][ T6004] CR2: 00007fe6b18f6000 CR3: 00000000405d8000 CR4: 00000000003526f0
[ 112.270104][ T6004] Call Trace:
[ 112.270110][ T6004]
[ 112.270118][ T6004] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 112.270138][ T6004] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 112.270155][ T6004] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 112.270181][ T6004] ext4_xattr_set_entry+0xabb/0x1e20
[ 112.270212][ T6004] ext4_xattr_ibody_set+0x254/0x6a0
[ 112.270236][ T6004] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 112.270273][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 112.270302][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 112.270325][ T6004] ext4_evict_inode+0x80d/0xee0
[ 112.270348][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.270366][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.270387][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.270406][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.270424][ T6004] evict+0x504/0x9c0
[ 112.270443][ T6004] ? __pfx_evict+0x10/0x10
[ 112.270459][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.270478][ T6004] ? iput+0x946/0xc50
[ 112.270501][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 112.270525][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 112.270543][ T6004] ? ext4_register_li_request+0x640/0x720
[ 112.270561][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 112.270581][ T6004] ext4_fill_super+0x593b/0x61f0
[ 112.270605][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.270620][ T6004] ? snprintf+0xda/0x120
[ 112.270637][ T6004] ? rt_spin_lock+0x1c1/0x3e0
[ 112.270656][ T6004] ? __pfx_snprintf+0x10/0x10
[ 112.270673][ T6004] ? set_blocksize+0x219/0x450
[ 112.270695][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.270714][ T6004] ? sb_set_blocksize+0x104/0x180
[ 112.270736][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 112.270757][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 112.270777][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.270792][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 112.270812][ T6004] ? cap_capable+0x11f/0x460
[ 112.270827][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.270846][ T6004] vfs_get_tree+0x92/0x2b0
[ 112.270866][ T6004] do_new_mount+0x302/0xa10
[ 112.270886][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.270904][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 112.270925][ T6004] ? ns_capable+0x8a/0xf0
[ 112.270949][ T6004] __se_sys_mount+0x313/0x410
[ 112.270972][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 112.270994][ T6004] ? do_syscall_64+0xbe/0xfa0
[ 112.271015][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 112.271036][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.271056][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.271078][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.271094][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 112.271111][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.271127][ T6004] RIP: 0033:0x7f5905410eea
[ 112.271141][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 112.271153][ T6004] RSP: 002b:00007ffef32a1468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 112.271169][ T6004] RAX: ffffffffffffffda RBX: 00007ffef32a14f0 RCX: 00007f5905410eea
[ 112.271182][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffef32a14b0
[ 112.271193][ T6004] RBP: 0000200000000180 R08: 00007ffef32a14f0 R09: 0000000000000000
[ 112.271205][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0
[ 112.271215][ T6004] R13: 00007ffef32a14b0 R14: 000000000000046f R15: 0000200000000200
[ 112.271234][ T6004]
[ 112.271243][ T6004] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 112.271254][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 112.271272][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 112.271281][ T6004] Call Trace:
[ 112.271293][ T6004]
[ 112.271299][ T6004] dump_stack_lvl+0x99/0x250
[ 112.271323][ T6004] ? __asan_memcpy+0x40/0x70
[ 112.271341][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10
[ 112.271362][ T6004] ? __pfx__printk+0x10/0x10
[ 112.271385][ T6004] vpanic+0x237/0x6d0
[ 112.271400][ T6004] ? __pfx_vpanic+0x10/0x10
[ 112.271419][ T6004] panic+0xb9/0xc0
[ 112.271434][ T6004] ? __pfx_panic+0x10/0x10
[ 112.271454][ T6004] __warn+0x31b/0x4b0
[ 112.271468][ T6004] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.271485][ T6004] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.271501][ T6004] report_bug+0x2be/0x4f0
[ 112.271522][ T6004] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.271538][ T6004] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.271554][ T6004] ? ext4_xattr_inode_update_ref+0x51c/0x5b0
[ 112.271569][ T6004] handle_bug+0x84/0x160
[ 112.271585][ T6004] exc_invalid_op+0x1a/0x50
[ 112.271601][ T6004] asm_exc_invalid_op+0x1a/0x20
[ 112.271616][ T6004] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 112.271633][ T6004] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 4a 41 08 44 89 f9
[ 112.271646][ T6004] RSP: 0018:ffffc90003f37100 EFLAGS: 00010246
[ 112.271659][ T6004] RAX: eef54bce2507ad00 RBX: 0000000000000001 RCX: ffff8880328c3c00
[ 112.271671][ T6004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 112.271680][ T6004] RBP: ffffc90003f371f8 R08: 0000000000000000 R09: 0000000000000000
[ 112.271691][ T6004] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b
[ 112.271703][ T6004] R13: ffff888047503f88 R14: 1ffff11008ea07d7 R15: ffff888047503eb8
[ 112.271723][ T6004] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 112.271742][ T6004] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 112.271759][ T6004] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 112.271785][ T6004] ext4_xattr_set_entry+0xabb/0x1e20
[ 112.271816][ T6004] ext4_xattr_ibody_set+0x254/0x6a0
[ 112.271841][ T6004] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 112.271878][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 112.271897][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 112.271921][ T6004] ext4_evict_inode+0x80d/0xee0
[ 112.271945][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.271962][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.271982][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.272001][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 112.272019][ T6004] evict+0x504/0x9c0
[ 112.272039][ T6004] ? __pfx_evict+0x10/0x10
[ 112.272055][ T6004] ? rt_spin_unlock+0x161/0x200
[ 112.272074][ T6004] ? iput+0x946/0xc50
[ 112.272098][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 112.272121][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 112.272141][ T6004] ? ext4_register_li_request+0x640/0x720
[ 112.272158][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 112.272178][ T6004] ext4_fill_super+0x593b/0x61f0
[ 112.272202][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.272217][ T6004] ? snprintf+0xda/0x120
[ 112.272233][ T6004] ? rt_spin_lock+0x1c1/0x3e0
[ 112.272253][ T6004] ? __pfx_snprintf+0x10/0x10
[ 112.272294][ T6004] ? set_blocksize+0x219/0x450
[ 112.272316][ T6004] ? rt_spin_unlock+0x150/0x200
[ 112.272335][ T6004] ? sb_set_blocksize+0x104/0x180
[ 112.272358][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 112.272378][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 112.272398][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 112.272414][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 112.272433][ T6004] ? cap_capable+0x11f/0x460
[ 112.272448][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.272467][ T6004] vfs_get_tree+0x92/0x2b0
[ 112.272487][ T6004] do_new_mount+0x302/0xa10
[ 112.272507][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 112.272525][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 112.272545][ T6004] ? ns_capable+0x8a/0xf0
[ 112.272570][ T6004] __se_sys_mount+0x313/0x410
[ 112.272592][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 112.272615][ T6004] ? do_syscall_64+0xbe/0xfa0
[ 112.272636][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 112.272658][ T6004] do_syscall_64+0xfa/0xfa0
[ 112.272679][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.272700][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.272716][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 112.272734][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.272750][ T6004] RIP: 0033:0x7f5905410eea
[ 112.272762][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 112.272775][ T6004] RSP: 002b:00007ffef32a1468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 112.272791][ T6004] RAX: ffffffffffffffda RBX: 00007ffef32a14f0 RCX: 00007f5905410eea
[ 112.272803][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffef32a14b0
[ 112.272815][ T6004] RBP: 0000200000000180 R08: 00007ffef32a14f0 R09: 0000000000000000
[ 112.272826][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0
[ 112.272837][ T6004] R13: 00007ffef32a14b0 R14: 000000000000046f R15: 0000200000000200
[ 112.272856][ T6004]
[ 112.273205][ T6004] Kernel Offset: disabled