[ 86.673585][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. 2025/09/15 22:58:50 parsed 1 programs [ 93.066620][ T5843] cgroup: Unknown subsys name 'net' [ 93.314767][ T5843] cgroup: Unknown subsys name 'cpuset' [ 93.389942][ T5843] cgroup: Unknown subsys name 'rlimit' [ 95.296979][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.726743][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 99.031771][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.033157][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.033571][ T5862] bridge_slave_0: entered allmulticast mode [ 99.035335][ T5862] bridge_slave_0: entered promiscuous mode [ 99.038684][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.038822][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.038925][ T5862] bridge_slave_1: entered allmulticast mode [ 99.043007][ T5862] bridge_slave_1: entered promiscuous mode [ 99.173968][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.176926][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.303292][ T5862] team0: Port device team_slave_0 added [ 99.306052][ T5862] team0: Port device team_slave_1 added [ 99.472880][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.472902][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.472929][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.476616][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.476631][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.476651][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.818581][ T5862] hsr_slave_0: entered promiscuous mode [ 99.820203][ T5862] hsr_slave_1: entered promiscuous mode [ 100.202647][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.248590][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.265342][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.304064][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.446479][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.473063][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.481633][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.482449][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.503714][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.503918][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.753268][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.805873][ T5862] veth0_vlan: entered promiscuous mode [ 100.815209][ T5862] veth1_vlan: entered promiscuous mode [ 100.851376][ T5862] veth0_macvtap: entered promiscuous mode [ 100.855634][ T5862] veth1_macvtap: entered promiscuous mode [ 100.882157][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.891459][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.906405][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.907965][ T3573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.908001][ T3573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.908027][ T3573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.686273][ T1113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.934021][ T1113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.242891][ T1113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.496423][ T1113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.332147][ T1113] bridge_slave_1: left allmulticast mode [ 104.332237][ T1113] bridge_slave_1: left promiscuous mode [ 104.333370][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.433922][ T1113] bridge_slave_0: left allmulticast mode [ 104.433955][ T1113] bridge_slave_0: left promiscuous mode [ 104.434239][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.181061][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.239949][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.282609][ T1113] bond0 (unregistering): Released all slaves [ 106.639425][ T1113] hsr_slave_0: left promiscuous mode [ 106.679566][ T1113] hsr_slave_1: left promiscuous mode [ 106.685239][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.685330][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.741563][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.741593][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.859574][ T1113] veth1_macvtap: left promiscuous mode [ 106.860298][ T1113] veth0_macvtap: left promiscuous mode [ 106.860647][ T1113] veth1_vlan: left promiscuous mode [ 106.860967][ T1113] veth0_vlan: left promiscuous mode [ 108.790810][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 108.989963][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 111.030124][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.030150][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.126146][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.126168][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.868285][ T5971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.878561][ T5971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.880041][ T5971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.892196][ T5971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.893290][ T5971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/09/15 22:59:16 executed programs: 0 [ 115.508297][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.513219][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.514209][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.515749][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.516610][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.895587][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 116.491628][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.491848][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.492007][ T6014] bridge_slave_0: entered allmulticast mode [ 116.493849][ T6014] bridge_slave_0: entered promiscuous mode [ 116.498359][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.498489][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.498592][ T6014] bridge_slave_1: entered allmulticast mode [ 116.501460][ T6014] bridge_slave_1: entered promiscuous mode [ 116.688366][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.693474][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.904127][ T6014] team0: Port device team_slave_0 added [ 116.985071][ T6014] team0: Port device team_slave_1 added [ 117.150749][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.150767][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.150796][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.203884][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.203901][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.203919][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.494477][ T6014] hsr_slave_0: entered promiscuous mode [ 117.495731][ T6014] hsr_slave_1: entered promiscuous mode [ 117.561118][ T5971] Bluetooth: hci0: command tx timeout [ 119.254556][ T6014] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.285292][ T6014] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.324608][ T6014] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.374128][ T6014] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.558371][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.599901][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.609700][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.609878][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.630693][ T5971] Bluetooth: hci0: command tx timeout [ 119.638570][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.639360][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.042648][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.114497][ T6014] veth0_vlan: entered promiscuous mode [ 120.138207][ T6014] veth1_vlan: entered promiscuous mode [ 120.187877][ T6014] veth0_macvtap: entered promiscuous mode [ 120.205460][ T6014] veth1_macvtap: entered promiscuous mode [ 120.238367][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.266254][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.286986][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.287223][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.287692][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.287906][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.573411][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.573433][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.647278][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.647299][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/15 22:59:21 executed programs: 2 [ 120.807967][ T6092] loop0: detected capacity change from 0 to 512 [ 120.874306][ T6092] [ 120.874317][ T6092] ====================================================== [ 120.874325][ T6092] WARNING: possible circular locking dependency detected [ 120.874347][ T6092] syzkaller #0 Not tainted [ 120.874357][ T6092] ------------------------------------------------------ [ 120.874363][ T6092] syz.0.17/[ 120.874363][ T6092] syz.0.17/6092 is trying to acquire lock: [ 120.874373][ T6092] ffff888034c2cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 120.874434][ T6092] [ 120.874434][ T6092] but task is already holding lock: [ 120.874439][ T6092] ffff888053092440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 120.874479][ T6092] [ 120.874479][ T6092] which lock already depends on the new lock. [ 120.874479][ T6092] [ 120.874485][ T6092] [ 120.874485][ T6092] the existing dependency chain (in reverse order) is: [ 120.874492][ T6092] [ 120.874492][ T6092] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 120.874533][ T6092] lock_acquire+0x120/0x360 [ 120.874558][ T6092] down_write+0x3a/0x50 [ 120.874574][ T6092] ext4_xattr_set_handle+0x165/0x1590 [ 120.874599][ T6092] ext4_initxattrs+0x9f/0x110 [ 120.874618][ T6092] security_inode_init_security+0x2a0/0x3f0 [ 120.874636][ T6092] __ext4_new_inode+0x3314/0x3cb0 [ 120.874661][ T6092] ext4_create+0x22d/0x460 [ 120.874679][ T6092] path_openat+0x14fd/0x3840 [ 120.874698][ T6092] do_filp_open+0x1fa/0x410 [ 120.874717][ T6092] do_sys_openat2+0x121/0x1c0 [ 120.874732][ T6092] __x64_sys_openat+0x138/0x170 [ 120.874749][ T6092] do_syscall_64+0xfa/0x3b0 [ 120.874764][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.874781][ T6092] [ 120.874781][ T6092] -> #1 (jbd2_handle){++++}-{0:0}: [ 120.874807][ T6092] lock_acquire+0x120/0x360 [ 120.874829][ T6092] start_this_handle+0x1fa7/0x21c0 [ 120.874850][ T6092] jbd2__journal_start+0x2c1/0x5b0 [ 120.874871][ T6092] __ext4_journal_start_sb+0x227/0x5c0 [ 120.874896][ T6092] ext4_do_writepages+0xf6f/0x4600 [ 120.874918][ T6092] ext4_writepages+0x205/0x350 [ 120.874933][ T6092] do_writepages+0x32b/0x550 [ 120.874954][ T6092] __writeback_single_inode+0x145/0x1000 [ 120.874976][ T6092] writeback_sb_inodes+0x6b7/0xf60 [ 120.874996][ T6092] __writeback_inodes_wb+0x111/0x240 [ 120.875014][ T6092] wb_writeback+0x44f/0xaf0 [ 120.875032][ T6092] wb_workfn+0xaf4/0xf00 [ 120.875046][ T6092] process_scheduled_works+0xade/0x17b0 [ 120.875066][ T6092] worker_thread+0x8a0/0xda0 [ 120.875087][ T6092] kthread+0x70e/0x8a0 [ 120.875112][ T6092] ret_from_fork+0x439/0x7d0 [ 120.875134][ T6092] ret_from_fork_asm+0x1a/0x30 [ 120.875152][ T6092] [ 120.875152][ T6092] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 120.875178][ T6092] validate_chain+0xb9b/0x2140 [ 120.875205][ T6092] __lock_acquire+0xab9/0xd20 [ 120.875226][ T6092] lock_acquire+0x120/0x360 [ 120.875247][ T6092] percpu_down_read_internal+0x48/0x1d0 [ 120.875274][ T6092] ext4_writepages+0x1cc/0x350 [ 120.875290][ T6092] do_writepages+0x32b/0x550 [ 120.875309][ T6092] __writeback_single_inode+0x145/0x1000 [ 120.875331][ T6092] writeback_single_inode+0x1d5/0x640 [ 120.875354][ T6092] write_inode_now+0x160/0x1d0 [ 120.875371][ T6092] iput+0x5b9/0x9d0 [ 120.875395][ T6092] ext4_xattr_block_set+0x1fce/0x2ac0 [ 120.875419][ T6092] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 120.875444][ T6092] __ext4_expand_extra_isize+0x30d/0x400 [ 120.875471][ T6092] __ext4_mark_inode_dirty+0x46c/0x700 [ 120.875491][ T6092] ext4_evict_inode+0x80d/0xee0 [ 120.875510][ T6092] evict+0x504/0x9c0 [ 120.875527][ T6092] ext4_orphan_cleanup+0xc20/0x1460 [ 120.875546][ T6092] ext4_fill_super+0x57fa/0x60b0 [ 120.875572][ T6092] get_tree_bdev_flags+0x40e/0x4d0 [ 120.875595][ T6092] vfs_get_tree+0x8f/0x2b0 [ 120.875617][ T6092] do_new_mount+0x2a2/0x9e0 [ 120.875641][ T6092] __se_sys_mount+0x317/0x410 [ 120.875666][ T6092] do_syscall_64+0xfa/0x3b0 [ 120.875681][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.875699][ T6092] [ 120.875699][ T6092] other info that might help us debug this: [ 120.875699][ T6092] [ 120.875705][ T6092] Chain exists of: [ 120.875705][ T6092] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 120.875705][ T6092] [ 120.875735][ T6092] Possible unsafe locking scenario: [ 120.875735][ T6092] [ 120.875741][ T6092] CPU0 CPU1 [ 120.875747][ T6092] ---- ---- [ 120.875753][ T6092] lock(&ei->xattr_sem); [ 120.875765][ T6092] lock(jbd2_handle); [ 120.875778][ T6092] lock(&ei->xattr_sem); [ 120.875792][ T6092] rlock(&sbi->s_writepages_rwsem); [ 120.875804][ T6092] [ 120.875804][ T6092] *** DEADLOCK *** [ 120.875804][ T6092] [ 120.875809][ T6092] 3 locks held by syz.0.17/6092: [ 120.875820][ T6092] #0: ffff888034c2a0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 120.875874][ T6092] #1: ffff888034c2a778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 120.875920][ T6092] #2: ffff888053092440 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 120.875965][ T6092] [ 120.875965][ T6092] stack backtrace: [ 120.875991][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.876012][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.876030][ T6092] Call Trace: [ 120.876037][ T6092] [ 120.876044][ T6092] dump_stack_lvl+0x189/0x250 [ 120.876073][ T6092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.876101][ T6092] ? __pfx__printk+0x10/0x10 [ 120.876122][ T6092] ? print_lock_name+0xde/0x100 [ 120.876142][ T6092] print_circular_bug+0x2ee/0x310 [ 120.876162][ T6092] check_noncircular+0x134/0x160 [ 120.876195][ T6092] validate_chain+0xb9b/0x2140 [ 120.876228][ T6092] ? look_up_lock_class+0x74/0x170 [ 120.876257][ T6092] ? register_lock_class+0x51/0x320 [ 120.876283][ T6092] __lock_acquire+0xab9/0xd20 [ 120.876309][ T6092] ? ext4_writepages+0x1cc/0x350 [ 120.876325][ T6092] lock_acquire+0x120/0x360 [ 120.876356][ T6092] ? ext4_writepages+0x1cc/0x350 [ 120.876375][ T6092] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 120.876403][ T6092] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.876431][ T6092] percpu_down_read_internal+0x48/0x1d0 [ 120.876459][ T6092] ? ext4_writepages+0x1cc/0x350 [ 120.876476][ T6092] ext4_writepages+0x1cc/0x350 [ 120.876495][ T6092] ? __pfx_ext4_writepages+0x10/0x10 [ 120.876511][ T6092] ? rt_mutex_slowunlock+0x493/0x8a0 [ 120.876543][ T6092] ? __pfx_ext4_writepages+0x10/0x10 [ 120.876561][ T6092] do_writepages+0x32b/0x550 [ 120.876585][ T6092] ? reacquire_held_locks+0x127/0x1d0 [ 120.876613][ T6092] ? rt_spin_lock+0x1bb/0x2c0 [ 120.876635][ T6092] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.876661][ T6092] __writeback_single_inode+0x145/0x1000 [ 120.876688][ T6092] writeback_single_inode+0x1d5/0x640 [ 120.876711][ T6092] write_inode_now+0x160/0x1d0 [ 120.876728][ T6092] ? __pfx_write_inode_now+0x10/0x10 [ 120.876761][ T6092] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.876787][ T6092] ? rt_spin_unlock+0x65/0x80 [ 120.876811][ T6092] iput+0x5b9/0x9d0 [ 120.876842][ T6092] ext4_xattr_block_set+0x1fce/0x2ac0 [ 120.876889][ T6092] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 120.876917][ T6092] ? ext4_xattr_block_find+0x2d4/0x350 [ 120.876964][ T6092] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 120.877013][ T6092] __ext4_expand_extra_isize+0x30d/0x400 [ 120.877049][ T6092] __ext4_mark_inode_dirty+0x46c/0x700 [ 120.877079][ T6092] ext4_evict_inode+0x80d/0xee0 [ 120.877109][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.877136][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.877159][ T6092] evict+0x504/0x9c0 [ 120.877185][ T6092] ? __pfx_evict+0x10/0x10 [ 120.877209][ T6092] ? iput+0x6d8/0x9d0 [ 120.877242][ T6092] ext4_orphan_cleanup+0xc20/0x1460 [ 120.877271][ T6092] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 120.877295][ T6092] ? ext4_register_li_request+0x640/0x720 [ 120.877316][ T6092] ? errseq_check_and_advance+0x66/0x120 [ 120.877356][ T6092] ext4_fill_super+0x57fa/0x60b0 [ 120.877399][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.877430][ T6092] ? set_blocksize+0x219/0x450 [ 120.877454][ T6092] ? sb_set_blocksize+0x104/0x180 [ 120.877492][ T6092] ? setup_bdev_super+0x4c1/0x5b0 [ 120.877529][ T6092] get_tree_bdev_flags+0x40e/0x4d0 [ 120.877556][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.877588][ T6092] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.877615][ T6092] ? cap_capable+0x11f/0x460 [ 120.877640][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 120.877669][ T6092] vfs_get_tree+0x8f/0x2b0 [ 120.877697][ T6092] do_new_mount+0x2a2/0x9e0 [ 120.877728][ T6092] ? ns_capable+0x8a/0xf0 [ 120.877754][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 120.877783][ T6092] ? path_mount+0x61c/0xfe0 [ 120.877816][ T6092] __se_sys_mount+0x317/0x410 [ 120.877849][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 120.877882][ T6092] ? do_syscall_64+0xbe/0x3b0 [ 120.877900][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 120.877931][ T6092] do_syscall_64+0xfa/0x3b0 [ 120.877950][ T6092] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.877980][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.878002][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 120.878026][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.878046][ T6092] RIP: 0033:0x7fc8cbfd034a [ 120.878070][ T6092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.878087][ T6092] RSP: 002b:00007fff2b5d3858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.878112][ T6092] RAX: ffffffffffffffda RBX: 00007fff2b5d38e0 RCX: 00007fc8cbfd034a [ 120.878129][ T6092] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2b5d38a0 [ 120.878144][ T6092] RBP: 0000200000000180 R08: 00007fff2b5d38e0 R09: 0000000000800700 [ 120.878159][ T6092] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 120.878174][ T6092] R13: 00007fff2b5d38a0 R14: 000000000000046f R15: 0000200000000680 [ 120.878197][ T6092] [ 120.905182][ T6092] ------------[ cut here ]------------ [ 120.905199][ T6092] EA inode 11 i_nlink=2 [ 120.905561][ T6092] WARNING: CPU: 1 PID: 6092 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.905614][ T6092] Modules linked in: [ 120.905633][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.905659][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.905673][ T6092] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.905710][ T6092] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 cd 95 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 54 47 [ 120.905729][ T6092] RSP: 0018:ffffc9000464f1a0 EFLAGS: 00010246 [ 120.905748][ T6092] RAX: b0d51a638fcdae00 RBX: dffffc0000000000 RCX: ffff8880349e0000 [ 120.905766][ T6092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.905780][ T6092] RBP: ffffc9000464f298 R08: 0000000000000000 R09: 0000000000000000 [ 120.905795][ T6092] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888053094a90 [ 120.905812][ T6092] R13: 1ffff1100a612952 R14: 00000000ffffffff R15: 000000000000000b [ 120.905829][ T6092] FS: 000055557a746500(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 120.905849][ T6092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.905866][ T6092] CR2: 00007f31970099c0 CR3: 0000000040150000 CR4: 00000000003526f0 [ 120.905887][ T6092] Call Trace: [ 120.905896][ T6092] [ 120.905905][ T6092] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 120.905934][ T6092] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 120.905970][ T6092] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 120.906006][ T6092] ext4_xattr_set_entry+0xabb/0x1e20 [ 120.906066][ T6092] ext4_xattr_ibody_set+0x254/0x6a0 [ 120.906110][ T6092] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 120.906164][ T6092] __ext4_expand_extra_isize+0x30d/0x400 [ 120.906205][ T6092] __ext4_mark_inode_dirty+0x46c/0x700 [ 120.906238][ T6092] ext4_evict_inode+0x80d/0xee0 [ 120.906270][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.906300][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.906325][ T6092] evict+0x504/0x9c0 [ 120.906362][ T6092] ? __pfx_evict+0x10/0x10 [ 120.906388][ T6092] ? iput+0x6d8/0x9d0 [ 120.906424][ T6092] ext4_orphan_cleanup+0xc20/0x1460 [ 120.906462][ T6092] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 120.906489][ T6092] ? ext4_register_li_request+0x640/0x720 [ 120.906514][ T6092] ? errseq_check_and_advance+0x66/0x120 [ 120.906546][ T6092] ext4_fill_super+0x57fa/0x60b0 [ 120.906592][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.906627][ T6092] ? set_blocksize+0x219/0x450 [ 120.906654][ T6092] ? sb_set_blocksize+0x104/0x180 [ 120.906679][ T6092] ? setup_bdev_super+0x4c1/0x5b0 [ 120.906710][ T6092] get_tree_bdev_flags+0x40e/0x4d0 [ 120.906740][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.906775][ T6092] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.906804][ T6092] ? cap_capable+0x11f/0x460 [ 120.906831][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 120.906869][ T6092] vfs_get_tree+0x8f/0x2b0 [ 120.906899][ T6092] do_new_mount+0x2a2/0x9e0 [ 120.906934][ T6092] ? ns_capable+0x8a/0xf0 [ 120.906962][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 120.906994][ T6092] ? path_mount+0x61c/0xfe0 [ 120.907030][ T6092] __se_sys_mount+0x317/0x410 [ 120.907065][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 120.907100][ T6092] ? do_syscall_64+0xbe/0x3b0 [ 120.907120][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 120.907154][ T6092] do_syscall_64+0xfa/0x3b0 [ 120.907173][ T6092] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.907212][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.907236][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 120.907263][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.907286][ T6092] RIP: 0033:0x7fc8cbfd034a [ 120.907305][ T6092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.907325][ T6092] RSP: 002b:00007fff2b5d3858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.907359][ T6092] RAX: ffffffffffffffda RBX: 00007fff2b5d38e0 RCX: 00007fc8cbfd034a [ 120.907377][ T6092] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2b5d38a0 [ 120.907392][ T6092] RBP: 0000200000000180 R08: 00007fff2b5d38e0 R09: 0000000000800700 [ 120.907409][ T6092] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 120.907425][ T6092] R13: 00007fff2b5d38a0 R14: 000000000000046f R15: 0000200000000680 [ 120.907451][ T6092] [ 120.907463][ T6092] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.907480][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.907504][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.907518][ T6092] Call Trace: [ 120.907527][ T6092] [ 120.907535][ T6092] dump_stack_lvl+0x99/0x250 [ 120.907571][ T6092] ? __asan_memcpy+0x40/0x70 [ 120.907595][ T6092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.907629][ T6092] ? __pfx__printk+0x10/0x10 [ 120.907660][ T6092] vpanic+0x281/0x750 [ 120.907694][ T6092] ? __pfx__printk+0x10/0x10 [ 120.907718][ T6092] ? __pfx_vpanic+0x10/0x10 [ 120.907750][ T6092] ? is_bpf_text_address+0x26/0x2b0 [ 120.907790][ T6092] panic+0xb9/0xc0 [ 120.907821][ T6092] ? __pfx_panic+0x10/0x10 [ 120.907863][ T6092] __warn+0x31b/0x4b0 [ 120.907893][ T6092] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.907929][ T6092] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.907964][ T6092] report_bug+0x2be/0x4f0 [ 120.907996][ T6092] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.908031][ T6092] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.908077][ T6092] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 120.908111][ T6092] handle_bug+0x84/0x160 [ 120.908133][ T6092] exc_invalid_op+0x1a/0x50 [ 120.908156][ T6092] asm_exc_invalid_op+0x1a/0x20 [ 120.908176][ T6092] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 120.908211][ T6092] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 cd 95 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 54 47 [ 120.908229][ T6092] RSP: 0018:ffffc9000464f1a0 EFLAGS: 00010246 [ 120.908247][ T6092] RAX: b0d51a638fcdae00 RBX: dffffc0000000000 RCX: ffff8880349e0000 [ 120.908265][ T6092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.908288][ T6092] RBP: ffffc9000464f298 R08: 0000000000000000 R09: 0000000000000000 [ 120.908302][ T6092] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888053094a90 [ 120.908319][ T6092] R13: 1ffff1100a612952 R14: 00000000ffffffff R15: 000000000000000b [ 120.908350][ T6092] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 120.908379][ T6092] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 120.908414][ T6092] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 120.908450][ T6092] ext4_xattr_set_entry+0xabb/0x1e20 [ 120.908493][ T6092] ext4_xattr_ibody_set+0x254/0x6a0 [ 120.908528][ T6092] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 120.908580][ T6092] __ext4_expand_extra_isize+0x30d/0x400 [ 120.908618][ T6092] __ext4_mark_inode_dirty+0x46c/0x700 [ 120.908650][ T6092] ext4_evict_inode+0x80d/0xee0 [ 120.908682][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.908714][ T6092] ? __pfx_ext4_evict_inode+0x10/0x10 [ 120.908738][ T6092] evict+0x504/0x9c0 [ 120.908765][ T6092] ? __pfx_evict+0x10/0x10 [ 120.908791][ T6092] ? iput+0x6d8/0x9d0 [ 120.908826][ T6092] ext4_orphan_cleanup+0xc20/0x1460 [ 120.908856][ T6092] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 120.908881][ T6092] ? ext4_register_li_request+0x640/0x720 [ 120.908905][ T6092] ? errseq_check_and_advance+0x66/0x120 [ 120.908935][ T6092] ext4_fill_super+0x57fa/0x60b0 [ 120.909000][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.909033][ T6092] ? set_blocksize+0x219/0x450 [ 120.909064][ T6092] ? sb_set_blocksize+0x104/0x180 [ 120.909086][ T6092] ? setup_bdev_super+0x4c1/0x5b0 [ 120.909117][ T6092] get_tree_bdev_flags+0x40e/0x4d0 [ 120.909145][ T6092] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.909180][ T6092] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.909205][ T6092] ? cap_capable+0x11f/0x460 [ 120.909229][ T6092] ? safesetid_security_capable+0xa9/0x1a0 [ 120.909259][ T6092] vfs_get_tree+0x8f/0x2b0 [ 120.909289][ T6092] do_new_mount+0x2a2/0x9e0 [ 120.909321][ T6092] ? ns_capable+0x8a/0xf0 [ 120.909360][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 120.909389][ T6092] ? path_mount+0x61c/0xfe0 [ 120.909424][ T6092] __se_sys_mount+0x317/0x410 [ 120.909459][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 120.909493][ T6092] ? do_syscall_64+0xbe/0x3b0 [ 120.909513][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 120.909546][ T6092] do_syscall_64+0xfa/0x3b0 [ 120.909565][ T6092] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.909598][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.909619][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 120.909645][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.909667][ T6092] RIP: 0033:0x7fc8cbfd034a [ 120.909685][ T6092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.909703][ T6092] RSP: 002b:00007fff2b5d3858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.909734][ T6092] RAX: ffffffffffffffda RBX: 00007fff2b5d38e0 RCX: 00007fc8cbfd034a [ 120.909769][ T6092] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2b5d38a0 [ 120.909786][ T6092] RBP: 0000200000000180 R08: 00007fff2b5d38e0 R09: 0000000000800700 [ 120.909808][ T6092] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 120.909823][ T6092] R13: 00007fff2b5d38a0 R14: 000000000000046f R15: 0000200000000680 [ 120.909848][ T6092] [ 120.910150][ T6092] Kernel Offset: disabled