[ 92.043598][ T992] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. 2025/11/28 17:54:55 parsed 1 programs [ 98.353266][ T5806] cgroup: Unknown subsys name 'net' [ 98.613874][ T5806] cgroup: Unknown subsys name 'cpuset' [ 98.688975][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.721614][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.569105][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.569131][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.797899][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.797922][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.334817][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 109.773067][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.773228][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.773449][ T5869] bridge_slave_0: entered allmulticast mode [ 109.808252][ T5869] bridge_slave_0: entered promiscuous mode [ 109.828632][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.829291][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.829508][ T5869] bridge_slave_1: entered allmulticast mode [ 109.835783][ T5869] bridge_slave_1: entered promiscuous mode [ 110.163262][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.166427][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.411129][ T5869] team0: Port device team_slave_0 added [ 110.470954][ T5869] team0: Port device team_slave_1 added [ 110.641639][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.641653][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.641677][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.645559][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.645576][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.645604][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.887335][ T5869] hsr_slave_0: entered promiscuous mode [ 110.889308][ T5869] hsr_slave_1: entered promiscuous mode [ 111.300716][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.326860][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.362531][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.470557][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.614485][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.642599][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.652442][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.653259][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.675379][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.675629][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.912759][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.972568][ T5869] veth0_vlan: entered promiscuous mode [ 111.981373][ T5869] veth1_vlan: entered promiscuous mode [ 112.017623][ T5869] veth0_macvtap: entered promiscuous mode [ 112.025853][ T5869] veth1_macvtap: entered promiscuous mode [ 112.045290][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.058497][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.076458][ T3557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.082665][ T3557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.084356][ T3557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.091127][ T3557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.883945][ T3612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.131503][ T3612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.900651][ T3612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.122919][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.126977][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.127909][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.130612][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.131651][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.824809][ T3612] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/28 17:55:15 executed programs: 0 [ 115.096208][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.106735][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.107631][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.111347][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.112453][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.371193][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 115.751268][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.751554][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.752082][ T5914] bridge_slave_0: entered allmulticast mode [ 115.755396][ T5914] bridge_slave_0: entered promiscuous mode [ 115.768641][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.768794][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.769051][ T5914] bridge_slave_1: entered allmulticast mode [ 115.772328][ T5914] bridge_slave_1: entered promiscuous mode [ 115.869492][ T3612] bridge_slave_1: left allmulticast mode [ 115.869693][ T3612] bridge_slave_1: left promiscuous mode [ 115.871199][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.939832][ T3612] bridge_slave_0: left allmulticast mode [ 115.939856][ T3612] bridge_slave_0: left promiscuous mode [ 115.940072][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.167424][ T61] Bluetooth: hci0: command tx timeout [ 117.599243][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.679072][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.700834][ T3612] bond0 (unregistering): Released all slaves [ 117.816164][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.822061][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.993264][ T5914] team0: Port device team_slave_0 added [ 118.118489][ T3612] hsr_slave_0: left promiscuous mode [ 118.158459][ T3612] hsr_slave_1: left promiscuous mode [ 118.159515][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.159577][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.200000][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.200029][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.306109][ T3612] veth1_macvtap: left promiscuous mode [ 118.306290][ T3612] veth0_macvtap: left promiscuous mode [ 118.307287][ T3612] veth1_vlan: left promiscuous mode [ 118.307519][ T3612] veth0_vlan: left promiscuous mode [ 119.238355][ T61] Bluetooth: hci0: command tx timeout [ 120.249011][ T3612] team0 (unregistering): Port device team_slave_1 removed [ 120.449183][ T3612] team0 (unregistering): Port device team_slave_0 removed [ 121.328331][ T61] Bluetooth: hci0: command tx timeout [ 122.371392][ T5914] team0: Port device team_slave_1 added [ 122.621178][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.621197][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.621215][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.623478][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.623495][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.623514][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.816889][ T5914] hsr_slave_0: entered promiscuous mode [ 122.817919][ T5914] hsr_slave_1: entered promiscuous mode [ 123.398689][ T61] Bluetooth: hci0: command tx timeout [ 124.539397][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.574435][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.615956][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.667553][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.850711][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.875594][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.901857][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.902008][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.912782][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.914027][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.506421][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.601076][ T5914] veth0_vlan: entered promiscuous mode [ 125.625886][ T5914] veth1_vlan: entered promiscuous mode [ 125.711856][ T5914] veth0_macvtap: entered promiscuous mode [ 125.717666][ T5914] veth1_macvtap: entered promiscuous mode [ 125.769436][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.785878][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.804790][ T3612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.805369][ T3612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.805833][ T3612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.806266][ T3612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.028654][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.028677][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.095959][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.095982][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/28 17:55:26 executed programs: 2 [ 126.261927][ T6000] loop0: detected capacity change from 0 to 512 [ 126.375956][ T6000] [ 126.375969][ T6000] ====================================================== [ 126.375977][ T6000] WARNING: possible circular locking dependency detected [ 126.375994][ T6000] syzkaller #0 Not tainted [ 126.376005][ T6000] ------------------------------------------------------ [ 126.376013][ T6000] syz.0.17/6000 is trying to acquire lock: [ 126.376025][ T6000] ffff888032abac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 126.376093][ T6000] [ 126.376093][ T6000] but task is already holding lock: [ 126.376099][ T6000] ffff8880506700b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 126.376149][ T6000] [ 126.376149][ T6000] which lock already depends on the new lock. [ 126.376149][ T6000] [ 126.376156][ T6000] [ 126.376156][ T6000] the existing dependency chain (in reverse order) is: [ 126.376163][ T6000] [ 126.376163][ T6000] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 126.376190][ T6000] lock_acquire+0x120/0x360 [ 126.376217][ T6000] down_write+0x3a/0x50 [ 126.376234][ T6000] ext4_xattr_set_handle+0x165/0x1590 [ 126.376264][ T6000] ext4_initxattrs+0x9f/0x110 [ 126.376286][ T6000] security_inode_init_security+0x2a0/0x3f0 [ 126.376325][ T6000] __ext4_new_inode+0x3314/0x3cb0 [ 126.376355][ T6000] ext4_create+0x22d/0x460 [ 126.376377][ T6000] path_openat+0x1500/0x3840 [ 126.376399][ T6000] do_filp_open+0x1fa/0x410 [ 126.376419][ T6000] do_sys_openat2+0x121/0x1c0 [ 126.376437][ T6000] __x64_sys_openat+0x138/0x170 [ 126.376455][ T6000] do_syscall_64+0xfa/0xfa0 [ 126.376483][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.376503][ T6000] [ 126.376503][ T6000] -> #1 (jbd2_handle){++++}-{0:0}: [ 126.376530][ T6000] lock_acquire+0x120/0x360 [ 126.376554][ T6000] start_this_handle+0x1fa7/0x21c0 [ 126.376579][ T6000] jbd2__journal_start+0x2c1/0x5b0 [ 126.376604][ T6000] __ext4_journal_start_sb+0x227/0x5c0 [ 126.376644][ T6000] ext4_do_writepages+0xf6f/0x4600 [ 126.376670][ T6000] ext4_writepages+0x205/0x350 [ 126.376688][ T6000] do_writepages+0x32e/0x550 [ 126.376708][ T6000] __writeback_single_inode+0x145/0x1000 [ 126.376732][ T6000] writeback_sb_inodes+0x6b7/0xf60 [ 126.376754][ T6000] __writeback_inodes_wb+0x111/0x240 [ 126.376777][ T6000] wb_writeback+0x44f/0xaf0 [ 126.376797][ T6000] wb_workfn+0xaf4/0xf00 [ 126.376813][ T6000] process_scheduled_works+0xae1/0x17b0 [ 126.376835][ T6000] worker_thread+0x8a0/0xda0 [ 126.376857][ T6000] kthread+0x711/0x8a0 [ 126.376882][ T6000] ret_from_fork+0x4bc/0x870 [ 126.376903][ T6000] ret_from_fork_asm+0x1a/0x30 [ 126.376921][ T6000] [ 126.376921][ T6000] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.376950][ T6000] validate_chain+0xb9b/0x2140 [ 126.376966][ T6000] __lock_acquire+0xab9/0xd20 [ 126.376989][ T6000] lock_acquire+0x120/0x360 [ 126.377012][ T6000] percpu_down_read_internal+0x48/0x1d0 [ 126.377029][ T6000] ext4_writepages+0x1cc/0x350 [ 126.377047][ T6000] do_writepages+0x32e/0x550 [ 126.377064][ T6000] __writeback_single_inode+0x145/0x1000 [ 126.377087][ T6000] writeback_single_inode+0x1db/0x640 [ 126.377106][ T6000] write_inode_now+0x160/0x1d0 [ 126.377124][ T6000] iput+0x830/0xc50 [ 126.377148][ T6000] ext4_xattr_block_set+0x1fce/0x2ac0 [ 126.377175][ T6000] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 126.377204][ T6000] __ext4_expand_extra_isize+0x30d/0x400 [ 126.377220][ T6000] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.377242][ T6000] ext4_evict_inode+0x80d/0xee0 [ 126.377263][ T6000] evict+0x504/0x9c0 [ 126.377280][ T6000] ext4_orphan_cleanup+0xc20/0x1460 [ 126.377312][ T6000] ext4_fill_super+0x593b/0x61f0 [ 126.377330][ T6000] get_tree_bdev_flags+0x40e/0x4d0 [ 126.377356][ T6000] vfs_get_tree+0x92/0x2b0 [ 126.377379][ T6000] do_new_mount+0x302/0xa10 [ 126.377404][ T6000] __se_sys_mount+0x313/0x410 [ 126.377431][ T6000] do_syscall_64+0xfa/0xfa0 [ 126.377459][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.377478][ T6000] [ 126.377478][ T6000] other info that might help us debug this: [ 126.377478][ T6000] [ 126.377485][ T6000] Chain exists of: [ 126.377485][ T6000] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.377485][ T6000] [ 126.377519][ T6000] Possible unsafe locking scenario: [ 126.377519][ T6000] [ 126.377525][ T6000] CPU0 CPU1 [ 126.377531][ T6000] ---- ---- [ 126.377537][ T6000] lock(&ei->xattr_sem); [ 126.377550][ T6000] lock(jbd2_handle); [ 126.377565][ T6000] lock(&ei->xattr_sem); [ 126.377580][ T6000] rlock(&sbi->s_writepages_rwsem); [ 126.377594][ T6000] [ 126.377594][ T6000] *** DEADLOCK *** [ 126.377594][ T6000] [ 126.377599][ T6000] 3 locks held by syz.0.17/6000: [ 126.377612][ T6000] #0: ffff888032ab80d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 126.377670][ T6000] #1: ffff888032ab8770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 126.377721][ T6000] #2: ffff8880506700b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 126.377774][ T6000] [ 126.377774][ T6000] stack backtrace: [ 126.377800][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.377824][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.377844][ T6000] Call Trace: [ 126.377856][ T6000] [ 126.377865][ T6000] dump_stack_lvl+0x189/0x250 [ 126.377899][ T6000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.377930][ T6000] ? __pfx__printk+0x10/0x10 [ 126.377956][ T6000] ? print_lock_name+0xde/0x100 [ 126.377981][ T6000] print_circular_bug+0x2ee/0x310 [ 126.378003][ T6000] check_noncircular+0x134/0x160 [ 126.378026][ T6000] validate_chain+0xb9b/0x2140 [ 126.378050][ T6000] ? look_up_lock_class+0x74/0x170 [ 126.378084][ T6000] ? register_lock_class+0x51/0x320 [ 126.378110][ T6000] __lock_acquire+0xab9/0xd20 [ 126.378139][ T6000] ? ext4_writepages+0x1cc/0x350 [ 126.378157][ T6000] lock_acquire+0x120/0x360 [ 126.378182][ T6000] ? ext4_writepages+0x1cc/0x350 [ 126.378202][ T6000] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.378233][ T6000] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.378276][ T6000] percpu_down_read_internal+0x48/0x1d0 [ 126.378302][ T6000] ? ext4_writepages+0x1cc/0x350 [ 126.378320][ T6000] ext4_writepages+0x1cc/0x350 [ 126.378341][ T6000] ? __pfx_ext4_writepages+0x10/0x10 [ 126.378360][ T6000] ? rt_mutex_slowunlock+0x493/0x8a0 [ 126.378386][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.378410][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.378432][ T6000] ? __pfx_ext4_writepages+0x10/0x10 [ 126.378452][ T6000] do_writepages+0x32e/0x550 [ 126.378473][ T6000] ? reacquire_held_locks+0x127/0x1d0 [ 126.378501][ T6000] ? rt_spin_lock+0x1c1/0x3e0 [ 126.378525][ T6000] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.378551][ T6000] __writeback_single_inode+0x145/0x1000 [ 126.378579][ T6000] writeback_single_inode+0x1db/0x640 [ 126.378602][ T6000] write_inode_now+0x160/0x1d0 [ 126.378622][ T6000] ? __pfx_write_inode_now+0x10/0x10 [ 126.378657][ T6000] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.378681][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.378705][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.378729][ T6000] iput+0x830/0xc50 [ 126.378759][ T6000] ext4_xattr_block_set+0x1fce/0x2ac0 [ 126.378803][ T6000] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 126.378833][ T6000] ? ext4_xattr_block_find+0x2d4/0x350 [ 126.378863][ T6000] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 126.378910][ T6000] __ext4_expand_extra_isize+0x30d/0x400 [ 126.378933][ T6000] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.378962][ T6000] ext4_evict_inode+0x80d/0xee0 [ 126.378990][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.379021][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.379045][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.379068][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.379090][ T6000] evict+0x504/0x9c0 [ 126.379115][ T6000] ? __pfx_evict+0x10/0x10 [ 126.379152][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.379176][ T6000] ? iput+0x946/0xc50 [ 126.379208][ T6000] ext4_orphan_cleanup+0xc20/0x1460 [ 126.379239][ T6000] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.379265][ T6000] ? ext4_register_li_request+0x640/0x720 [ 126.379289][ T6000] ? errseq_check_and_advance+0x66/0x120 [ 126.379325][ T6000] ext4_fill_super+0x593b/0x61f0 [ 126.379357][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.379377][ T6000] ? snprintf+0xda/0x120 [ 126.379398][ T6000] ? rt_spin_lock+0x1c1/0x3e0 [ 126.379424][ T6000] ? __pfx_snprintf+0x10/0x10 [ 126.379446][ T6000] ? set_blocksize+0x219/0x450 [ 126.379476][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.379503][ T6000] ? sb_set_blocksize+0x104/0x180 [ 126.379535][ T6000] ? setup_bdev_super+0x4c1/0x5b0 [ 126.379563][ T6000] get_tree_bdev_flags+0x40e/0x4d0 [ 126.379590][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.379611][ T6000] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.379637][ T6000] ? cap_capable+0x11f/0x460 [ 126.379656][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.379680][ T6000] vfs_get_tree+0x92/0x2b0 [ 126.379707][ T6000] do_new_mount+0x302/0xa10 [ 126.379736][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.379759][ T6000] ? __pfx_do_new_mount+0x10/0x10 [ 126.379788][ T6000] ? ns_capable+0x8a/0xf0 [ 126.379822][ T6000] __se_sys_mount+0x313/0x410 [ 126.379855][ T6000] ? __pfx___se_sys_mount+0x10/0x10 [ 126.379887][ T6000] ? do_syscall_64+0xbe/0xfa0 [ 126.379916][ T6000] ? __x64_sys_mount+0x20/0xc0 [ 126.379947][ T6000] do_syscall_64+0xfa/0xfa0 [ 126.379977][ T6000] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.380006][ T6000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.380027][ T6000] ? clear_bhb_loop+0x60/0xb0 [ 126.380051][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.380073][ T6000] RIP: 0033:0x7f29bc920eea [ 126.380098][ T6000] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.380117][ T6000] RSP: 002b:00007ffc42db4ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.380139][ T6000] RAX: ffffffffffffffda RBX: 00007ffc42db4d30 RCX: 00007f29bc920eea [ 126.380155][ T6000] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc42db4cf0 [ 126.380171][ T6000] RBP: 0000200000000180 R08: 00007ffc42db4d30 R09: 0000000000000000 [ 126.380185][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 126.380199][ T6000] R13: 00007ffc42db4cf0 R14: 000000000000046f R15: 0000200000000200 [ 126.380223][ T6000] [ 126.409483][ T6000] ------------[ cut here ]------------ [ 126.409497][ T6000] EA inode 11 i_nlink=2 [ 126.409861][ T6000] WARNING: CPU: 0 PID: 6000 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.409904][ T6000] Modules linked in: [ 126.409925][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.409953][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.409982][ T6000] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.410008][ T6000] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 4a 41 08 44 89 f9 [ 126.410028][ T6000] RSP: 0018:ffffc9000450f100 EFLAGS: 00010246 [ 126.410049][ T6000] RAX: c217345dae31c800 RBX: 0000000000000001 RCX: ffff8880324a3c00 [ 126.410067][ T6000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.410080][ T6000] RBP: ffffc9000450f1f8 R08: 0000000000000000 R09: 0000000000000000 [ 126.410096][ T6000] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 126.410111][ T6000] R13: ffff8880506727d8 R14: 1ffff1100a0ce4e1 R15: ffff888050672708 [ 126.410129][ T6000] FS: 000055558babc500(0000) GS:ffff888126df4000(0000) knlGS:0000000000000000 [ 126.410149][ T6000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.410166][ T6000] CR2: 00007f8b2c6569c0 CR3: 000000003f314000 CR4: 00000000003526f0 [ 126.410186][ T6000] Call Trace: [ 126.410195][ T6000] [ 126.410205][ T6000] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 126.410235][ T6000] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 126.410259][ T6000] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 126.410312][ T6000] ext4_xattr_set_entry+0xabb/0x1e20 [ 126.410359][ T6000] ext4_xattr_ibody_set+0x254/0x6a0 [ 126.410397][ T6000] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 126.410454][ T6000] __ext4_expand_extra_isize+0x30d/0x400 [ 126.410483][ T6000] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.410519][ T6000] ext4_evict_inode+0x80d/0xee0 [ 126.410552][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.410579][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.410610][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.410637][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.410664][ T6000] evict+0x504/0x9c0 [ 126.410693][ T6000] ? __pfx_evict+0x10/0x10 [ 126.410716][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.410746][ T6000] ? iput+0x946/0xc50 [ 126.410783][ T6000] ext4_orphan_cleanup+0xc20/0x1460 [ 126.410816][ T6000] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.410845][ T6000] ? ext4_register_li_request+0x640/0x720 [ 126.410871][ T6000] ? errseq_check_and_advance+0x66/0x120 [ 126.410903][ T6000] ext4_fill_super+0x593b/0x61f0 [ 126.410936][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.410959][ T6000] ? snprintf+0xda/0x120 [ 126.410982][ T6000] ? rt_spin_lock+0x1c1/0x3e0 [ 126.411013][ T6000] ? __pfx_snprintf+0x10/0x10 [ 126.411036][ T6000] ? set_blocksize+0x219/0x450 [ 126.411071][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.411101][ T6000] ? sb_set_blocksize+0x104/0x180 [ 126.411135][ T6000] ? setup_bdev_super+0x4c1/0x5b0 [ 126.411168][ T6000] get_tree_bdev_flags+0x40e/0x4d0 [ 126.411199][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.411222][ T6000] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.411252][ T6000] ? cap_capable+0x11f/0x460 [ 126.411273][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.411308][ T6000] vfs_get_tree+0x92/0x2b0 [ 126.411338][ T6000] do_new_mount+0x302/0xa10 [ 126.411368][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.411394][ T6000] ? __pfx_do_new_mount+0x10/0x10 [ 126.411426][ T6000] ? ns_capable+0x8a/0xf0 [ 126.411463][ T6000] __se_sys_mount+0x313/0x410 [ 126.411498][ T6000] ? __pfx___se_sys_mount+0x10/0x10 [ 126.411532][ T6000] ? do_syscall_64+0xbe/0xfa0 [ 126.411565][ T6000] ? __x64_sys_mount+0x20/0xc0 [ 126.411598][ T6000] do_syscall_64+0xfa/0xfa0 [ 126.411629][ T6000] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.411663][ T6000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.411686][ T6000] ? clear_bhb_loop+0x60/0xb0 [ 126.411713][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.411736][ T6000] RIP: 0033:0x7f29bc920eea [ 126.411756][ T6000] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.411775][ T6000] RSP: 002b:00007ffc42db4ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.411799][ T6000] RAX: ffffffffffffffda RBX: 00007ffc42db4d30 RCX: 00007f29bc920eea [ 126.411815][ T6000] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc42db4cf0 [ 126.411832][ T6000] RBP: 0000200000000180 R08: 00007ffc42db4d30 R09: 0000000000000000 [ 126.411848][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 126.411864][ T6000] R13: 00007ffc42db4cf0 R14: 000000000000046f R15: 0000200000000200 [ 126.411890][ T6000] [ 126.411902][ T6000] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.411919][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.411946][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.411958][ T6000] Call Trace: [ 126.411967][ T6000] [ 126.411976][ T6000] dump_stack_lvl+0x99/0x250 [ 126.412012][ T6000] ? __asan_memcpy+0x40/0x70 [ 126.412039][ T6000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.412072][ T6000] ? __pfx__printk+0x10/0x10 [ 126.412106][ T6000] vpanic+0x237/0x6d0 [ 126.412127][ T6000] ? __pfx_vpanic+0x10/0x10 [ 126.412154][ T6000] panic+0xb9/0xc0 [ 126.412175][ T6000] ? __pfx_panic+0x10/0x10 [ 126.412205][ T6000] __warn+0x31b/0x4b0 [ 126.412226][ T6000] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.412249][ T6000] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.412273][ T6000] report_bug+0x2be/0x4f0 [ 126.412313][ T6000] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.412338][ T6000] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.412360][ T6000] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 126.412383][ T6000] handle_bug+0x84/0x160 [ 126.412405][ T6000] exc_invalid_op+0x1a/0x50 [ 126.412429][ T6000] asm_exc_invalid_op+0x1a/0x20 [ 126.412452][ T6000] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 126.412477][ T6000] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 37 8e 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 4a 41 08 44 89 f9 [ 126.412496][ T6000] RSP: 0018:ffffc9000450f100 EFLAGS: 00010246 [ 126.412517][ T6000] RAX: c217345dae31c800 RBX: 0000000000000001 RCX: ffff8880324a3c00 [ 126.412534][ T6000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.412559][ T6000] RBP: ffffc9000450f1f8 R08: 0000000000000000 R09: 0000000000000000 [ 126.412573][ T6000] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 126.412590][ T6000] R13: ffff8880506727d8 R14: 1ffff1100a0ce4e1 R15: ffff888050672708 [ 126.412618][ T6000] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 126.412646][ T6000] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 126.412672][ T6000] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 126.412711][ T6000] ext4_xattr_set_entry+0xabb/0x1e20 [ 126.412757][ T6000] ext4_xattr_ibody_set+0x254/0x6a0 [ 126.412795][ T6000] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 126.412853][ T6000] __ext4_expand_extra_isize+0x30d/0x400 [ 126.412881][ T6000] __ext4_mark_inode_dirty+0x46c/0x700 [ 126.412917][ T6000] ext4_evict_inode+0x80d/0xee0 [ 126.412951][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.412978][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.413008][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.413036][ T6000] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.413066][ T6000] evict+0x504/0x9c0 [ 126.413096][ T6000] ? __pfx_evict+0x10/0x10 [ 126.413119][ T6000] ? rt_spin_unlock+0x161/0x200 [ 126.413148][ T6000] ? iput+0x946/0xc50 [ 126.413184][ T6000] ext4_orphan_cleanup+0xc20/0x1460 [ 126.413219][ T6000] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.413248][ T6000] ? ext4_register_li_request+0x640/0x720 [ 126.413274][ T6000] ? errseq_check_and_advance+0x66/0x120 [ 126.413329][ T6000] ext4_fill_super+0x593b/0x61f0 [ 126.413364][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.413385][ T6000] ? snprintf+0xda/0x120 [ 126.413410][ T6000] ? rt_spin_lock+0x1c1/0x3e0 [ 126.413439][ T6000] ? __pfx_snprintf+0x10/0x10 [ 126.413464][ T6000] ? set_blocksize+0x219/0x450 [ 126.413496][ T6000] ? rt_spin_unlock+0x150/0x200 [ 126.413532][ T6000] ? sb_set_blocksize+0x104/0x180 [ 126.413566][ T6000] ? setup_bdev_super+0x4c1/0x5b0 [ 126.413598][ T6000] get_tree_bdev_flags+0x40e/0x4d0 [ 126.413627][ T6000] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.413651][ T6000] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.413680][ T6000] ? cap_capable+0x11f/0x460 [ 126.413702][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.413729][ T6000] vfs_get_tree+0x92/0x2b0 [ 126.413759][ T6000] do_new_mount+0x302/0xa10 [ 126.413791][ T6000] ? safesetid_security_capable+0xa9/0x1a0 [ 126.413817][ T6000] ? __pfx_do_new_mount+0x10/0x10 [ 126.413849][ T6000] ? ns_capable+0x8a/0xf0 [ 126.413885][ T6000] __se_sys_mount+0x313/0x410 [ 126.413921][ T6000] ? __pfx___se_sys_mount+0x10/0x10 [ 126.413957][ T6000] ? do_syscall_64+0xbe/0xfa0 [ 126.413988][ T6000] ? __x64_sys_mount+0x20/0xc0 [ 126.414018][ T6000] do_syscall_64+0xfa/0xfa0 [ 126.414045][ T6000] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.414072][ T6000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.414091][ T6000] ? clear_bhb_loop+0x60/0xb0 [ 126.414112][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.414131][ T6000] RIP: 0033:0x7f29bc920eea [ 126.414147][ T6000] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.414163][ T6000] RSP: 002b:00007ffc42db4ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.414182][ T6000] RAX: ffffffffffffffda RBX: 00007ffc42db4d30 RCX: 00007f29bc920eea [ 126.414197][ T6000] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc42db4cf0 [ 126.414212][ T6000] RBP: 0000200000000180 R08: 00007ffc42db4d30 R09: 0000000000000000 [ 126.414226][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 126.414240][ T6000] R13: 00007ffc42db4cf0 R14: 000000000000046f R15: 0000200000000200 [ 126.414262][ T6000] [ 126.414542][ T6000] Kernel Offset: disabled