Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. 2025/11/25 21:40:08 parsed 1 programs [ 86.946084][ T44] cfg80211: failed to load regulatory.db [ 89.325865][ T5805] cgroup: Unknown subsys name 'net' [ 89.567598][ T5805] cgroup: Unknown subsys name 'cpuset' [ 89.632426][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.462567][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.243599][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 97.633994][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.634997][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.635143][ T5847] bridge_slave_0: entered allmulticast mode [ 97.636790][ T5847] bridge_slave_0: entered promiscuous mode [ 97.642187][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.642400][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.642596][ T5847] bridge_slave_1: entered allmulticast mode [ 97.645248][ T5847] bridge_slave_1: entered promiscuous mode [ 97.895183][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.915245][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.156037][ T5847] team0: Port device team_slave_0 added [ 98.159774][ T5847] team0: Port device team_slave_1 added [ 98.334847][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.334859][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.334872][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.338312][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.338332][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.338356][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.518835][ T5847] hsr_slave_0: entered promiscuous mode [ 98.519925][ T5847] hsr_slave_1: entered promiscuous mode [ 98.884334][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.919630][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.937573][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.113053][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.234278][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.258814][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.271339][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.276748][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.290065][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.290282][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.529189][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.587257][ T5847] veth0_vlan: entered promiscuous mode [ 99.596856][ T5847] veth1_vlan: entered promiscuous mode [ 99.630716][ T5847] veth0_macvtap: entered promiscuous mode [ 99.639235][ T5847] veth1_macvtap: entered promiscuous mode [ 99.660858][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.673105][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.688527][ T4563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.690534][ T4563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.690584][ T4563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.690617][ T4563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.406086][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.603663][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.827882][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.026267][ T4563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.026296][ T4563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.084309][ T1845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.084339][ T1845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.646923][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.904105][ T43] bridge_slave_1: left allmulticast mode [ 102.904638][ T43] bridge_slave_1: left promiscuous mode [ 102.905679][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.983644][ T43] bridge_slave_0: left allmulticast mode [ 102.983674][ T43] bridge_slave_0: left promiscuous mode [ 102.983965][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.732257][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.793730][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.833880][ T43] bond0 (unregistering): Released all slaves [ 105.199449][ T43] hsr_slave_0: left promiscuous mode [ 105.241984][ T43] hsr_slave_1: left promiscuous mode [ 105.243202][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.243286][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.301285][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.307022][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.307956][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.309147][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.309395][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.309415][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.310755][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.464067][ T43] veth1_macvtap: left promiscuous mode [ 105.464308][ T43] veth0_macvtap: left promiscuous mode [ 105.464603][ T43] veth1_vlan: left promiscuous mode [ 105.464894][ T43] veth0_vlan: left promiscuous mode [ 107.435508][ T61] Bluetooth: hci0: command tx timeout [ 107.542339][ T43] team0 (unregistering): Port device team_slave_1 removed [ 107.732425][ T43] team0 (unregistering): Port device team_slave_0 removed [ 109.501808][ T61] Bluetooth: hci0: command tx timeout 2025/11/25 21:40:32 executed programs: 0 [ 111.302611][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.308330][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.309190][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.311141][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.316320][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.998417][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 112.304304][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.304494][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.304728][ T5971] bridge_slave_0: entered allmulticast mode [ 112.307317][ T5971] bridge_slave_0: entered promiscuous mode [ 112.340322][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.340455][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.340562][ T5971] bridge_slave_1: entered allmulticast mode [ 112.342712][ T5971] bridge_slave_1: entered promiscuous mode [ 112.515599][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.519202][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.005381][ T5971] team0: Port device team_slave_0 added [ 113.084110][ T5971] team0: Port device team_slave_1 added [ 113.341748][ T5118] Bluetooth: hci0: command tx timeout [ 113.579789][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.579800][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.579813][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.702686][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.702701][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.702724][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.890158][ T5971] hsr_slave_0: entered promiscuous mode [ 113.890958][ T5971] hsr_slave_1: entered promiscuous mode [ 115.421689][ T5118] Bluetooth: hci0: command tx timeout [ 115.947872][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.977793][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.018680][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.056587][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.226785][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.250694][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.259399][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.260420][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.279927][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.280127][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.599375][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.666652][ T5971] veth0_vlan: entered promiscuous mode [ 116.688533][ T5971] veth1_vlan: entered promiscuous mode [ 116.732595][ T5971] veth0_macvtap: entered promiscuous mode [ 116.739566][ T5971] veth1_macvtap: entered promiscuous mode [ 116.777047][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.790530][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.811618][ T4563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.812740][ T4563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.813165][ T4563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.813197][ T4563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.088548][ T4563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.088575][ T4563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.138522][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.138542][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/25 21:40:38 executed programs: 2 [ 117.267181][ T6068] loop0: detected capacity change from 0 to 512 [ 117.376304][ T6068] [ 117.376315][ T6068] ====================================================== [ 117.376322][ T6068] WARNING: possible circular locking dependency detected [ 117.376322][ T6068] WARNING: possible circular locking dependency detected [ 117.376337][ T6068] syzkaller #0 Not tainted [ 117.376346][ T6068] ------------------------------------------------------ [ 117.376353][ T6068] syz.0.17/6068 is trying to acquire lock: [ 117.376362][ T6068] ffff88803cc32c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 117.376414][ T6068] [ 117.376414][ T6068] but task is already holding lock: [ 117.376420][ T6068] ffff888041cf47c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 117.376459][ T6068] [ 117.376459][ T6068] which lock already depends on the new lock. [ 117.376459][ T6068] [ 117.376465][ T6068] [ 117.376465][ T6068] the existing dependency chain (in reverse order) is: [ 117.376471][ T6068] [ 117.376471][ T6068] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 117.376494][ T6068] lock_acquire+0x120/0x360 [ 117.376513][ T6068] down_write+0x3a/0x50 [ 117.376527][ T6068] ext4_xattr_set_handle+0x165/0x1590 [ 117.376548][ T6068] ext4_initxattrs+0x9f/0x110 [ 117.376564][ T6068] security_inode_init_security+0x2a0/0x3f0 [ 117.376585][ T6068] __ext4_new_inode+0x3314/0x3cb0 [ 117.376605][ T6068] ext4_create+0x22d/0x460 [ 117.376634][ T6068] path_openat+0x1500/0x3840 [ 117.376649][ T6068] do_filp_open+0x1fa/0x410 [ 117.376662][ T6068] do_sys_openat2+0x121/0x1c0 [ 117.376675][ T6068] __x64_sys_openat+0x138/0x170 [ 117.376689][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.376709][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.376723][ T6068] [ 117.376723][ T6068] -> #1 (jbd2_handle){++++}-{0:0}: [ 117.376745][ T6068] lock_acquire+0x120/0x360 [ 117.376764][ T6068] start_this_handle+0x1fa7/0x21c0 [ 117.376790][ T6068] jbd2__journal_start+0x2c1/0x5b0 [ 117.376808][ T6068] __ext4_journal_start_sb+0x227/0x5c0 [ 117.376830][ T6068] ext4_do_writepages+0xf6f/0x4600 [ 117.376849][ T6068] ext4_writepages+0x205/0x350 [ 117.376862][ T6068] do_writepages+0x32e/0x550 [ 117.376878][ T6068] file_write_and_wait_range+0x244/0x340 [ 117.376895][ T6068] ext4_sync_file+0x2b4/0xb20 [ 117.376918][ T6068] __x64_sys_fsync+0x194/0x1f0 [ 117.376932][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.376950][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.376965][ T6068] [ 117.376965][ T6068] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 117.376987][ T6068] validate_chain+0xb9b/0x2140 [ 117.377000][ T6068] __lock_acquire+0xab9/0xd20 [ 117.377017][ T6068] lock_acquire+0x120/0x360 [ 117.377035][ T6068] percpu_down_read_internal+0x48/0x1d0 [ 117.377047][ T6068] ext4_writepages+0x1cc/0x350 [ 117.377061][ T6068] do_writepages+0x32e/0x550 [ 117.377074][ T6068] __writeback_single_inode+0x145/0x1000 [ 117.377093][ T6068] writeback_single_inode+0x1db/0x640 [ 117.377106][ T6068] write_inode_now+0x160/0x1d0 [ 117.377117][ T6068] iput+0x830/0xc50 [ 117.377135][ T6068] ext4_xattr_block_set+0x1fce/0x2ac0 [ 117.377154][ T6068] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 117.377174][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 117.377187][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.377210][ T6068] ext4_evict_inode+0x80d/0xee0 [ 117.377225][ T6068] evict+0x504/0x9c0 [ 117.377236][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 117.377249][ T6068] ext4_fill_super+0x593b/0x61f0 [ 117.377261][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 117.377276][ T6068] vfs_get_tree+0x92/0x2b0 [ 117.377291][ T6068] do_new_mount+0x302/0xa10 [ 117.377308][ T6068] __se_sys_mount+0x313/0x410 [ 117.377325][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.377344][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.377356][ T6068] [ 117.377356][ T6068] other info that might help us debug this: [ 117.377356][ T6068] [ 117.377361][ T6068] Chain exists of: [ 117.377361][ T6068] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 117.377361][ T6068] [ 117.377387][ T6068] Possible unsafe locking scenario: [ 117.377387][ T6068] [ 117.377392][ T6068] CPU0 CPU1 [ 117.377396][ T6068] ---- ---- [ 117.377401][ T6068] lock(&ei->xattr_sem); [ 117.377411][ T6068] lock(jbd2_handle); [ 117.377422][ T6068] lock(&ei->xattr_sem); [ 117.377433][ T6068] rlock(&sbi->s_writepages_rwsem); [ 117.377444][ T6068] [ 117.377444][ T6068] *** DEADLOCK *** [ 117.377444][ T6068] [ 117.377449][ T6068] 3 locks held by syz.0.17/6068: [ 117.377458][ T6068] #0: ffff88803cc300d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 117.377507][ T6068] #1: ffff88803cc30770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 117.377544][ T6068] #2: ffff888041cf47c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 117.377584][ T6068] [ 117.377584][ T6068] stack backtrace: [ 117.377615][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.377635][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.377651][ T6068] Call Trace: [ 117.377661][ T6068] [ 117.377668][ T6068] dump_stack_lvl+0x189/0x250 [ 117.377693][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.377715][ T6068] ? __pfx__printk+0x10/0x10 [ 117.377733][ T6068] ? print_lock_name+0xde/0x100 [ 117.377752][ T6068] print_circular_bug+0x2ee/0x310 [ 117.377769][ T6068] check_noncircular+0x134/0x160 [ 117.377788][ T6068] validate_chain+0xb9b/0x2140 [ 117.377808][ T6068] ? look_up_lock_class+0x74/0x170 [ 117.377830][ T6068] ? register_lock_class+0x51/0x320 [ 117.377852][ T6068] __lock_acquire+0xab9/0xd20 [ 117.377873][ T6068] ? ext4_writepages+0x1cc/0x350 [ 117.377889][ T6068] lock_acquire+0x120/0x360 [ 117.377909][ T6068] ? ext4_writepages+0x1cc/0x350 [ 117.377925][ T6068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 117.377946][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.377969][ T6068] percpu_down_read_internal+0x48/0x1d0 [ 117.377983][ T6068] ? ext4_writepages+0x1cc/0x350 [ 117.377999][ T6068] ext4_writepages+0x1cc/0x350 [ 117.378016][ T6068] ? __pfx_ext4_writepages+0x10/0x10 [ 117.378031][ T6068] ? rt_mutex_slowunlock+0x493/0x8a0 [ 117.378053][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.378073][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.378091][ T6068] ? __pfx_ext4_writepages+0x10/0x10 [ 117.378108][ T6068] do_writepages+0x32e/0x550 [ 117.378126][ T6068] ? reacquire_held_locks+0x127/0x1d0 [ 117.378161][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 117.378180][ T6068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.378201][ T6068] __writeback_single_inode+0x145/0x1000 [ 117.378225][ T6068] writeback_single_inode+0x1db/0x640 [ 117.378243][ T6068] write_inode_now+0x160/0x1d0 [ 117.378259][ T6068] ? __pfx_write_inode_now+0x10/0x10 [ 117.378288][ T6068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.378306][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.378325][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.378342][ T6068] iput+0x830/0xc50 [ 117.378363][ T6068] ext4_xattr_block_set+0x1fce/0x2ac0 [ 117.378399][ T6068] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 117.378422][ T6068] ? ext4_xattr_block_find+0x2d4/0x350 [ 117.378446][ T6068] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 117.378481][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 117.378500][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.378524][ T6068] ext4_evict_inode+0x80d/0xee0 [ 117.378546][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.378564][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.378584][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.378601][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.378628][ T6068] evict+0x504/0x9c0 [ 117.378647][ T6068] ? __pfx_evict+0x10/0x10 [ 117.378664][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.378683][ T6068] ? iput+0x946/0xc50 [ 117.378707][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 117.378731][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.378751][ T6068] ? ext4_register_li_request+0x640/0x720 [ 117.378770][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 117.378789][ T6068] ext4_fill_super+0x593b/0x61f0 [ 117.378813][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.378829][ T6068] ? snprintf+0xda/0x120 [ 117.378846][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 117.378862][ T6068] ? __pfx_snprintf+0x10/0x10 [ 117.378879][ T6068] ? set_blocksize+0x219/0x450 [ 117.378900][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.378920][ T6068] ? sb_set_blocksize+0x104/0x180 [ 117.378943][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 117.378964][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 117.378988][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.379003][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.379023][ T6068] ? cap_capable+0x11f/0x460 [ 117.379039][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.379056][ T6068] vfs_get_tree+0x92/0x2b0 [ 117.379077][ T6068] do_new_mount+0x302/0xa10 [ 117.379098][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.379115][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 117.379137][ T6068] ? ns_capable+0x8a/0xf0 [ 117.379159][ T6068] __se_sys_mount+0x313/0x410 [ 117.379183][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 117.379205][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 117.379225][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 117.379248][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.379269][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.379290][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.379307][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 117.379325][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.379341][ T6068] RIP: 0033:0x7f082b240eea [ 117.379363][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.379376][ T6068] RSP: 002b:00007fff2d2fa578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.379394][ T6068] RAX: ffffffffffffffda RBX: 00007fff2d2fa600 RCX: 00007f082b240eea [ 117.379407][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2d2fa5c0 [ 117.379418][ T6068] RBP: 0000200000000180 R08: 00007fff2d2fa600 R09: 0000000000800700 [ 117.379430][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.379441][ T6068] R13: 00007fff2d2fa5c0 R14: 000000000000046f R15: 000000000000002c [ 117.379459][ T6068] [ 117.394703][ T6068] ------------[ cut here ]------------ [ 117.394714][ T6068] EA inode 11 i_nlink=2 [ 117.394893][ T6068] WARNING: CPU: 1 PID: 6068 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.394923][ T6068] Modules linked in: [ 117.394939][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.394958][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.394969][ T6068] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.394986][ T6068] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 57 92 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 3e 41 08 44 89 f9 [ 117.394999][ T6068] RSP: 0018:ffffc90003be7100 EFLAGS: 00010246 [ 117.395013][ T6068] RAX: 484a2b98a8592100 RBX: 0000000000000001 RCX: ffff888055f25a00 [ 117.395025][ T6068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.395035][ T6068] RBP: ffffc90003be71f8 R08: 0000000000000000 R09: 0000000000000000 [ 117.395045][ T6068] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 117.395057][ T6068] R13: ffff888057a49028 R14: 1ffff1100af491eb R15: ffff888057a48f58 [ 117.395070][ T6068] FS: 00005555937d4500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 117.395084][ T6068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.395096][ T6068] CR2: 0000564a7f1f1950 CR3: 000000002768e000 CR4: 00000000003526f0 [ 117.395111][ T6068] Call Trace: [ 117.395117][ T6068] [ 117.395125][ T6068] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 117.395145][ T6068] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 117.395163][ T6068] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 117.395189][ T6068] ext4_xattr_set_entry+0xabb/0x1e20 [ 117.395219][ T6068] ext4_xattr_ibody_set+0x254/0x6a0 [ 117.395243][ T6068] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 117.395280][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 117.395299][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.395324][ T6068] ext4_evict_inode+0x80d/0xee0 [ 117.395346][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.395375][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.395396][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.395414][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.395432][ T6068] evict+0x504/0x9c0 [ 117.395451][ T6068] ? __pfx_evict+0x10/0x10 [ 117.395467][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.395486][ T6068] ? iput+0x946/0xc50 [ 117.395509][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 117.395533][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.395551][ T6068] ? ext4_register_li_request+0x640/0x720 [ 117.395570][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 117.395590][ T6068] ext4_fill_super+0x593b/0x61f0 [ 117.395620][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.395635][ T6068] ? snprintf+0xda/0x120 [ 117.395651][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 117.395671][ T6068] ? __pfx_snprintf+0x10/0x10 [ 117.395687][ T6068] ? set_blocksize+0x219/0x450 [ 117.395709][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.395729][ T6068] ? sb_set_blocksize+0x104/0x180 [ 117.395751][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 117.395772][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 117.395792][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.395807][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.395826][ T6068] ? cap_capable+0x11f/0x460 [ 117.395842][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.395860][ T6068] vfs_get_tree+0x92/0x2b0 [ 117.395880][ T6068] do_new_mount+0x302/0xa10 [ 117.395901][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.395918][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 117.395938][ T6068] ? ns_capable+0x8a/0xf0 [ 117.395962][ T6068] __se_sys_mount+0x313/0x410 [ 117.395985][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 117.396008][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 117.396029][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 117.396050][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.396070][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.396091][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.396108][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 117.396125][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.396141][ T6068] RIP: 0033:0x7f082b240eea [ 117.396155][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.396168][ T6068] RSP: 002b:00007fff2d2fa578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.396185][ T6068] RAX: ffffffffffffffda RBX: 00007fff2d2fa600 RCX: 00007f082b240eea [ 117.396197][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2d2fa5c0 [ 117.396208][ T6068] RBP: 0000200000000180 R08: 00007fff2d2fa600 R09: 0000000000800700 [ 117.396220][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.396231][ T6068] R13: 00007fff2d2fa5c0 R14: 000000000000046f R15: 000000000000002c [ 117.396246][ T6068] [ 117.396254][ T6068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.396266][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.396285][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.396294][ T6068] Call Trace: [ 117.396300][ T6068] [ 117.396306][ T6068] dump_stack_lvl+0x99/0x250 [ 117.396330][ T6068] ? __asan_memcpy+0x40/0x70 [ 117.396348][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.396370][ T6068] ? __pfx__printk+0x10/0x10 [ 117.396394][ T6068] vpanic+0x237/0x6d0 [ 117.396409][ T6068] ? __pfx_vpanic+0x10/0x10 [ 117.396428][ T6068] panic+0xb9/0xc0 [ 117.396442][ T6068] ? __pfx_panic+0x10/0x10 [ 117.396463][ T6068] __warn+0x31b/0x4b0 [ 117.396477][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.396494][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.396509][ T6068] report_bug+0x2be/0x4f0 [ 117.396531][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.396546][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.396562][ T6068] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 117.396577][ T6068] handle_bug+0x84/0x160 [ 117.396593][ T6068] exc_invalid_op+0x1a/0x50 [ 117.396614][ T6068] asm_exc_invalid_op+0x1a/0x20 [ 117.396630][ T6068] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 117.396646][ T6068] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 57 92 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 d3 3e 41 08 44 89 f9 [ 117.396659][ T6068] RSP: 0018:ffffc90003be7100 EFLAGS: 00010246 [ 117.396673][ T6068] RAX: 484a2b98a8592100 RBX: 0000000000000001 RCX: ffff888055f25a00 [ 117.396684][ T6068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.396694][ T6068] RBP: ffffc90003be71f8 R08: 0000000000000000 R09: 0000000000000000 [ 117.396705][ T6068] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 117.396717][ T6068] R13: ffff888057a49028 R14: 1ffff1100af491eb R15: ffff888057a48f58 [ 117.396737][ T6068] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 117.396756][ T6068] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 117.396772][ T6068] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 117.396798][ T6068] ext4_xattr_set_entry+0xabb/0x1e20 [ 117.396828][ T6068] ext4_xattr_ibody_set+0x254/0x6a0 [ 117.396853][ T6068] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 117.396889][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 117.396907][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.396931][ T6068] ext4_evict_inode+0x80d/0xee0 [ 117.396954][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.396972][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.396992][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.397010][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.397027][ T6068] evict+0x504/0x9c0 [ 117.397047][ T6068] ? __pfx_evict+0x10/0x10 [ 117.397063][ T6068] ? rt_spin_unlock+0x161/0x200 [ 117.397083][ T6068] ? iput+0x946/0xc50 [ 117.397106][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 117.397129][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.397148][ T6068] ? ext4_register_li_request+0x640/0x720 [ 117.397166][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 117.397186][ T6068] ext4_fill_super+0x593b/0x61f0 [ 117.397209][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.397224][ T6068] ? snprintf+0xda/0x120 [ 117.397240][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 117.397260][ T6068] ? __pfx_snprintf+0x10/0x10 [ 117.397276][ T6068] ? set_blocksize+0x219/0x450 [ 117.397297][ T6068] ? rt_spin_unlock+0x150/0x200 [ 117.397316][ T6068] ? sb_set_blocksize+0x104/0x180 [ 117.397339][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 117.397360][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 117.397379][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.397395][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.397414][ T6068] ? cap_capable+0x11f/0x460 [ 117.397429][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.397448][ T6068] vfs_get_tree+0x92/0x2b0 [ 117.397468][ T6068] do_new_mount+0x302/0xa10 [ 117.397488][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 117.397506][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 117.397526][ T6068] ? ns_capable+0x8a/0xf0 [ 117.397550][ T6068] __se_sys_mount+0x313/0x410 [ 117.397573][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 117.397596][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 117.397622][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 117.397643][ T6068] do_syscall_64+0xfa/0xfa0 [ 117.397664][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.397685][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.397701][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 117.397725][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.397740][ T6068] RIP: 0033:0x7f082b240eea [ 117.397753][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.397766][ T6068] RSP: 002b:00007fff2d2fa578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.397782][ T6068] RAX: ffffffffffffffda RBX: 00007fff2d2fa600 RCX: 00007f082b240eea [ 117.397794][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff2d2fa5c0 [ 117.397806][ T6068] RBP: 0000200000000180 R08: 00007fff2d2fa600 R09: 0000000000800700 [ 117.397818][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.397829][ T6068] R13: 00007fff2d2fa5c0 R14: 000000000000046f R15: 000000000000002c [ 117.397846][ T6068] [ 117.397984][ T6068] Kernel Offset: disabled