Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. 2025/11/27 13:17:46 parsed 1 programs [ 110.936968][ T5805] cgroup: Unknown subsys name 'net' [ 111.099915][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 112.828362][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.434392][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.443158][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.481945][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.489999][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.794487][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 116.882018][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.890050][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.897371][ T5849] bridge_slave_0: entered allmulticast mode [ 116.908654][ T5849] bridge_slave_0: entered promiscuous mode [ 116.919277][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.926573][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.933799][ T5849] bridge_slave_1: entered allmulticast mode [ 116.941566][ T5849] bridge_slave_1: entered promiscuous mode [ 116.980842][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.993343][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.027674][ T5849] team0: Port device team_slave_0 added [ 117.039293][ T5849] team0: Port device team_slave_1 added [ 117.075078][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.082756][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.108969][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.137399][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.145588][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.171690][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.228644][ T5849] hsr_slave_0: entered promiscuous mode [ 117.235285][ T5849] hsr_slave_1: entered promiscuous mode [ 117.418697][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.431314][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.443918][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.456488][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.500609][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.507965][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.516225][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.523509][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.537776][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.548825][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.628603][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.656429][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.672378][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.679788][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.695932][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.703156][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.933727][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.983009][ T5849] veth0_vlan: entered promiscuous mode [ 117.998320][ T5849] veth1_vlan: entered promiscuous mode [ 118.034009][ T5849] veth0_macvtap: entered promiscuous mode [ 118.044839][ T5849] veth1_macvtap: entered promiscuous mode [ 118.065456][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.089078][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.105217][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.114539][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.123441][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.132537][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.659053][ T2963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.243776][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.255474][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.263852][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.272421][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.280525][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.287934][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/27 13:17:57 executed programs: 0 [ 119.834748][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.842800][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.851632][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.859813][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.869070][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.876751][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.049015][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 120.121708][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.128954][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.136550][ T5912] bridge_slave_0: entered allmulticast mode [ 120.144433][ T5912] bridge_slave_0: entered promiscuous mode [ 120.153395][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.160719][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.167927][ T5912] bridge_slave_1: entered allmulticast mode [ 120.175257][ T5912] bridge_slave_1: entered promiscuous mode [ 120.207422][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.219599][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.255630][ T5912] team0: Port device team_slave_0 added [ 120.264273][ T5912] team0: Port device team_slave_1 added [ 120.296254][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.303693][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.330143][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.342900][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.349868][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.376517][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.422186][ T5912] hsr_slave_0: entered promiscuous mode [ 120.428727][ T5912] hsr_slave_1: entered promiscuous mode [ 120.435096][ T5912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.443902][ T5912] Cannot create hsr debugfs directory [ 120.735132][ T2963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.971394][ T51] Bluetooth: hci0: command tx timeout [ 122.974918][ T2963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.056183][ T2963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.958224][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.971587][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.013074][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.026570][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.050694][ T51] Bluetooth: hci0: command tx timeout [ 124.069295][ T2963] hsr_slave_0: left promiscuous mode [ 124.076247][ T2963] hsr_slave_1: left promiscuous mode [ 124.083927][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.092995][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.104922][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.113725][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.123626][ T2963] bridge_slave_1: left allmulticast mode [ 124.129321][ T2963] bridge_slave_1: left promiscuous mode [ 124.139164][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.153470][ T2963] bridge_slave_0: left allmulticast mode [ 124.159176][ T2963] bridge_slave_0: left promiscuous mode [ 124.168381][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.204487][ T2963] veth1_macvtap: left promiscuous mode [ 124.213288][ T2963] veth0_macvtap: left promiscuous mode [ 124.219094][ T2963] veth1_vlan: left promiscuous mode [ 124.226492][ T2963] veth0_vlan: left promiscuous mode [ 124.655772][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 124.689942][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 124.729433][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.763367][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.078348][ T2963] bond0 (unregistering): Released all slaves [ 125.235717][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.266365][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.290647][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.297820][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.313778][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.320959][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.569653][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.617899][ T5912] veth0_vlan: entered promiscuous mode [ 125.635243][ T5912] veth1_vlan: entered promiscuous mode [ 125.696165][ T5912] veth0_macvtap: entered promiscuous mode [ 125.712820][ T5912] veth1_macvtap: entered promiscuous mode [ 125.749204][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.778163][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.796617][ T5912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.805414][ T5912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.814936][ T5912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.823722][ T5912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.883175][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.896869][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.924537][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.933347][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.996708][ T5958] syz.0.17[5958]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 126.018483][ T5958] loop0: detected capacity change from 0 to 512 [ 126.065166][ T5958] [ 126.067577][ T5958] ====================================================== [ 126.074616][ T5958] WARNING: possible circular locking dependency detected [ 126.081670][ T5958] syzkaller #0 Not tainted [ 126.086118][ T5958] ------------------------------------------------------ [ 126.093156][ T5958] syz.0.17/5958 is trying to acquire lock: [ 126.098988][ T5958] ffff88805b338bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 126.109067][ T5958] [ 126.109067][ T5958] but task is already holding lock: [ 126.116451][ T5958] ffff8880733bb2c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 126.126299][ T5958] [ 126.126299][ T5958] which lock already depends on the new lock. [ 126.126299][ T5958] [ 126.136713][ T5958] [ 126.136713][ T5958] the existing dependency chain (in reverse order) is: [ 126.145723][ T5958] [ 126.145723][ T5958] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 126.153459][ T5958] down_read+0x46/0x2e0 [ 126.158156][ T5958] ext4_setattr+0x86b/0x1c90 [ 126.163273][ T5958] notify_change+0xb0d/0xe10 [ 126.168382][ T5958] chown_common+0x3f9/0x5a0 [ 126.173551][ T5958] do_fchownat+0x168/0x270 [ 126.178587][ T5958] __x64_sys_chown+0x82/0x90 [ 126.183705][ T5958] do_syscall_64+0x55/0xb0 [ 126.188647][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.195098][ T5958] [ 126.195098][ T5958] -> #1 (jbd2_handle){++++}-{0:0}: [ 126.202397][ T5958] start_this_handle+0x1e9d/0x20c0 [ 126.208028][ T5958] jbd2__journal_start+0x2bb/0x5b0 [ 126.213659][ T5958] __ext4_journal_start_sb+0x203/0x570 [ 126.219642][ T5958] ext4_do_writepages+0xf92/0x38d0 [ 126.225287][ T5958] ext4_writepages+0x1a8/0x2f0 [ 126.230594][ T5958] do_writepages+0x3a2/0x600 [ 126.235708][ T5958] __writeback_single_inode+0x153/0xee0 [ 126.241780][ T5958] writeback_sb_inodes+0x77c/0xef0 [ 126.247414][ T5958] __writeback_inodes_wb+0x111/0x240 [ 126.253223][ T5958] wb_writeback+0x464/0xba0 [ 126.258267][ T5958] wb_workfn+0xabc/0xe20 [ 126.263143][ T5958] process_scheduled_works+0xa45/0x15b0 [ 126.269213][ T5958] worker_thread+0xa55/0xfc0 [ 126.274329][ T5958] kthread+0x2fa/0x390 [ 126.278922][ T5958] ret_from_fork+0x48/0x80 [ 126.283869][ T5958] ret_from_fork_asm+0x11/0x20 [ 126.289162][ T5958] [ 126.289162][ T5958] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.297588][ T5958] __lock_acquire+0x2ddb/0x7c80 [ 126.302979][ T5958] lock_acquire+0x197/0x410 [ 126.308001][ T5958] percpu_down_read+0x44/0x1a0 [ 126.313285][ T5958] ext4_writepages+0x170/0x2f0 [ 126.318579][ T5958] do_writepages+0x3a2/0x600 [ 126.323728][ T5958] __writeback_single_inode+0x153/0xee0 [ 126.329807][ T5958] writeback_single_inode+0x211/0x720 [ 126.335728][ T5958] write_inode_now+0x161/0x1e0 [ 126.341023][ T5958] iput+0x5b2/0x920 [ 126.345348][ T5958] ext4_xattr_block_set+0x273a/0x32a0 [ 126.351252][ T5958] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 126.357673][ T5958] __ext4_expand_extra_isize+0x306/0x400 [ 126.363871][ T5958] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 126.369885][ T5958] ext4_evict_inode+0x7ed/0xea0 [ 126.375277][ T5958] evict+0x486/0x870 [ 126.379788][ T5958] ext4_orphan_cleanup+0xbd4/0x1400 [ 126.385528][ T5958] ext4_fill_super+0x5de4/0x66c0 [ 126.391173][ T5958] get_tree_bdev+0x3e4/0x510 [ 126.396295][ T5958] vfs_get_tree+0x8c/0x280 [ 126.401243][ T5958] do_new_mount+0x24b/0xa40 [ 126.406275][ T5958] __se_sys_mount+0x2da/0x3c0 [ 126.411478][ T5958] do_syscall_64+0x55/0xb0 [ 126.416424][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.422845][ T5958] [ 126.422845][ T5958] other info that might help us debug this: [ 126.422845][ T5958] [ 126.433079][ T5958] Chain exists of: [ 126.433079][ T5958] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.433079][ T5958] [ 126.446475][ T5958] Possible unsafe locking scenario: [ 126.446475][ T5958] [ 126.453955][ T5958] CPU0 CPU1 [ 126.459322][ T5958] ---- ---- [ 126.464717][ T5958] lock(&ei->xattr_sem); [ 126.469052][ T5958] lock(jbd2_handle); [ 126.475655][ T5958] lock(&ei->xattr_sem); [ 126.482531][ T5958] rlock(&sbi->s_writepages_rwsem); [ 126.487859][ T5958] [ 126.487859][ T5958] *** DEADLOCK *** [ 126.487859][ T5958] [ 126.496104][ T5958] 3 locks held by syz.0.17/5958: [ 126.501040][ T5958] #0: ffff88807b1a80e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 126.511153][ T5958] #1: ffff88807b1a8608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 126.520564][ T5958] #2: ffff8880733bb2c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 126.530840][ T5958] [ 126.530840][ T5958] stack backtrace: [ 126.536741][ T5958] CPU: 1 PID: 5958 Comm: syz.0.17 Not tainted syzkaller #0 [ 126.543933][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.553994][ T5958] Call Trace: [ 126.557271][ T5958] [ 126.560205][ T5958] dump_stack_lvl+0x16c/0x230 [ 126.564916][ T5958] ? load_image+0x3b0/0x3b0 [ 126.569421][ T5958] ? show_regs_print_info+0x20/0x20 [ 126.574634][ T5958] ? print_circular_bug+0x12b/0x1a0 [ 126.579849][ T5958] check_noncircular+0x2bd/0x3c0 [ 126.584843][ T5958] ? look_up_lock_class+0x75/0x140 [ 126.590249][ T5958] ? print_deadlock_bug+0x5d0/0x5d0 [ 126.595481][ T5958] ? lockdep_lock+0xe0/0x220 [ 126.600097][ T5958] ? _find_first_zero_bit+0xd3/0x100 [ 126.605396][ T5958] __lock_acquire+0x2ddb/0x7c80 [ 126.610271][ T5958] ? mark_lock+0x94/0x320 [ 126.614701][ T5958] ? verify_lock_unused+0x140/0x140 [ 126.619918][ T5958] ? __lock_acquire+0x1334/0x7c80 [ 126.624968][ T5958] ? verify_lock_unused+0x140/0x140 [ 126.630293][ T5958] lock_acquire+0x197/0x410 [ 126.634844][ T5958] ? ext4_writepages+0x170/0x2f0 [ 126.639843][ T5958] ? __might_sleep+0xe0/0xe0 [ 126.644466][ T5958] ? mark_lock+0x94/0x320 [ 126.648818][ T5958] ? read_lock_is_recursive+0x20/0x20 [ 126.654195][ T5958] ? __lock_acquire+0x1334/0x7c80 [ 126.659223][ T5958] percpu_down_read+0x44/0x1a0 [ 126.663997][ T5958] ? ext4_writepages+0x170/0x2f0 [ 126.668949][ T5958] ext4_writepages+0x170/0x2f0 [ 126.673814][ T5958] ? ext4_read_folio+0x2f0/0x2f0 [ 126.678760][ T5958] ? __rwlock_init+0x150/0x150 [ 126.683525][ T5958] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 126.689420][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 126.694631][ T5958] ? ext4_read_folio+0x2f0/0x2f0 [ 126.699572][ T5958] do_writepages+0x3a2/0x600 [ 126.704176][ T5958] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 126.709904][ T5958] ? writeback_single_inode+0x206/0x720 [ 126.715471][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 126.720501][ T5958] ? do_raw_spin_lock+0x121/0x2c0 [ 126.725544][ T5958] ? get_tree_bdev+0x3e4/0x510 [ 126.730323][ T5958] __writeback_single_inode+0x153/0xee0 [ 126.735870][ T5958] writeback_single_inode+0x211/0x720 [ 126.741267][ T5958] ? write_inode_now+0x1e0/0x1e0 [ 126.746232][ T5958] write_inode_now+0x161/0x1e0 [ 126.751000][ T5958] ? bdi_split_work_to_wbs+0x890/0x890 [ 126.756467][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 126.761668][ T5958] iput+0x5b2/0x920 [ 126.765479][ T5958] ext4_xattr_block_set+0x273a/0x32a0 [ 126.770859][ T5958] ? __might_sleep+0xe0/0xe0 [ 126.775466][ T5958] ? xattr_find_entry+0x12b/0x2f0 [ 126.780508][ T5958] ? ext4_xattr_block_find+0x350/0x350 [ 126.785972][ T5958] ? ext4_xattr_block_find+0x2d4/0x350 [ 126.791435][ T5958] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 126.797342][ T5958] __ext4_expand_extra_isize+0x306/0x400 [ 126.803006][ T5958] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 126.808468][ T5958] ext4_evict_inode+0x7ed/0xea0 [ 126.813325][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 126.818199][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.824112][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 126.829329][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.835233][ T5958] evict+0x486/0x870 [ 126.839156][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 126.844195][ T5958] ? proc_nr_inodes+0x230/0x230 [ 126.849049][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 126.854256][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 126.859112][ T5958] ? iput+0x70a/0x920 [ 126.863100][ T5958] ext4_orphan_cleanup+0xbd4/0x1400 [ 126.868330][ T5958] ? ext4_orphan_del+0xba0/0xba0 [ 126.873285][ T5958] ? ext4_register_li_request+0x183/0x940 [ 126.879023][ T5958] ? errseq_check_and_advance+0x66/0x120 [ 126.884661][ T5958] ext4_fill_super+0x5de4/0x66c0 [ 126.889609][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.895869][ T5958] ? __might_sleep+0xe0/0xe0 [ 126.900464][ T5958] ? read_lock_is_recursive+0x20/0x20 [ 126.905833][ T5958] ? snprintf+0xdb/0x120 [ 126.910096][ T5958] ? vscnprintf+0x80/0x80 [ 126.914451][ T5958] ? down_write+0x162/0x1f0 [ 126.918950][ T5958] ? down_read_killable+0x340/0x340 [ 126.924152][ T5958] ? setup_bdev_super+0x56b/0x660 [ 126.929177][ T5958] get_tree_bdev+0x3e4/0x510 [ 126.933764][ T5958] ? vfs_parse_fs_string+0x160/0x160 [ 126.939059][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.945316][ T5958] ? setup_bdev_super+0x660/0x660 [ 126.950337][ T5958] ? apparmor_capable+0x137/0x1a0 [ 126.955353][ T5958] ? bpf_lsm_capable+0x9/0x10 [ 126.960028][ T5958] ? security_capable+0x89/0xb0 [ 126.964885][ T5958] vfs_get_tree+0x8c/0x280 [ 126.969304][ T5958] do_new_mount+0x24b/0xa40 [ 126.973811][ T5958] __se_sys_mount+0x2da/0x3c0 [ 126.978488][ T5958] ? __x64_sys_mount+0xc0/0xc0 [ 126.983270][ T5958] ? lockdep_hardirqs_on+0x98/0x150 [ 126.988467][ T5958] ? __x64_sys_mount+0x20/0xc0 [ 126.993243][ T5958] do_syscall_64+0x55/0xb0 [ 126.997661][ T5958] ? clear_bhb_loop+0x40/0x90 [ 127.002347][ T5958] ? clear_bhb_loop+0x40/0x90 [ 127.007025][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.013005][ T5958] RIP: 0033:0x7f6b5ef90eea [ 127.017432][ T5958] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.037056][ T5958] RSP: 002b:00007ffebcd587f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.045474][ T5958] RAX: ffffffffffffffda RBX: 00007ffebcd58880 RCX: 00007f6b5ef90eea [ 127.053546][ T5958] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffebcd58840 [ 127.061529][ T5958] RBP: 0000200000000180 R08: 00007ffebcd58880 R09: 0000000000800700 [ 127.069507][ T5958] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 127.077488][ T5958] R13: 00007ffebcd58840 R14: 000000000000046f R15: 000000000000002c [ 127.085481][ T5958] [ 127.094263][ T51] Bluetooth: hci0: command tx timeout [ 127.111526][ T5958] ------------[ cut here ]------------ [ 127.117036][ T5958] EA inode 11 i_nlink=2 [ 127.117323][ T5958] WARNING: CPU: 0 PID: 5958 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.132300][ T5958] Modules linked in: [ 127.136222][ T5958] CPU: 0 PID: 5958 Comm: syz.0.17 Not tainted syzkaller #0 [ 127.143992][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.154337][ T5958] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.161012][ T5958] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 127.180985][ T5958] RSP: 0018:ffffc900034d71c0 EFLAGS: 00010246 [ 127.187097][ T5958] RAX: 146385fd53eccd00 RBX: 0000000000000002 RCX: ffff888078491e00 [ 127.195261][ T5958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 127.203309][ T5958] RBP: ffffc900034d72b8 R08: ffffc900034d6dc7 R09: 1ffff9200069adb8 [ 127.211327][ T5958] R10: dffffc0000000000 R11: fffff5200069adb9 R12: dffffc0000000000 [ 127.219318][ T5958] R13: ffff888061c68ea8 R14: ffff888061c68cb0 R15: ffff888061c68d00 [ 127.227338][ T5958] FS: 0000555580964500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 127.236695][ T5958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.243731][ T5958] CR2: 00007f59151d9000 CR3: 0000000076822000 CR4: 00000000003506f0 [ 127.252296][ T5958] Call Trace: [ 127.255604][ T5958] [ 127.258570][ T5958] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 127.264643][ T5958] ? ext4_xattr_inode_iget+0x3df/0x600 [ 127.270150][ T5958] ext4_xattr_set_entry+0xcda/0x1e90 [ 127.275914][ T5958] ext4_xattr_ibody_set+0x254/0x6a0 [ 127.281841][ T5958] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 127.288220][ T5958] __ext4_expand_extra_isize+0x306/0x400 [ 127.294521][ T5958] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 127.300018][ T5958] ext4_evict_inode+0x7ed/0xea0 [ 127.305263][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 127.310138][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.316376][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 127.321914][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.327855][ T5958] evict+0x486/0x870 [ 127.332173][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 127.337207][ T5958] ? proc_nr_inodes+0x230/0x230 [ 127.342362][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 127.347607][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 127.352874][ T5958] ? iput+0x70a/0x920 [ 127.356890][ T5958] ext4_orphan_cleanup+0xbd4/0x1400 [ 127.362454][ T5958] ? ext4_orphan_del+0xba0/0xba0 [ 127.367413][ T5958] ? ext4_register_li_request+0x183/0x940 [ 127.373614][ T5958] ? errseq_check_and_advance+0x66/0x120 [ 127.379266][ T5958] ext4_fill_super+0x5de4/0x66c0 [ 127.384717][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.391419][ T5958] ? __might_sleep+0xe0/0xe0 [ 127.396023][ T5958] ? read_lock_is_recursive+0x20/0x20 [ 127.401744][ T5958] ? snprintf+0xdb/0x120 [ 127.406049][ T5958] ? vscnprintf+0x80/0x80 [ 127.410862][ T5958] ? down_write+0x162/0x1f0 [ 127.415402][ T5958] ? down_read_killable+0x340/0x340 [ 127.420956][ T5958] ? setup_bdev_super+0x56b/0x660 [ 127.426018][ T5958] get_tree_bdev+0x3e4/0x510 [ 127.430996][ T5958] ? vfs_parse_fs_string+0x160/0x160 [ 127.436309][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.442860][ T5958] ? setup_bdev_super+0x660/0x660 [ 127.447917][ T5958] ? apparmor_capable+0x137/0x1a0 [ 127.453324][ T5958] ? bpf_lsm_capable+0x9/0x10 [ 127.458015][ T5958] ? security_capable+0x89/0xb0 [ 127.463491][ T5958] vfs_get_tree+0x8c/0x280 [ 127.467933][ T5958] do_new_mount+0x24b/0xa40 [ 127.472902][ T5958] __se_sys_mount+0x2da/0x3c0 [ 127.477620][ T5958] ? __x64_sys_mount+0xc0/0xc0 [ 127.482704][ T5958] ? lockdep_hardirqs_on+0x98/0x150 [ 127.488293][ T5958] ? __x64_sys_mount+0x20/0xc0 [ 127.493423][ T5958] do_syscall_64+0x55/0xb0 [ 127.497873][ T5958] ? clear_bhb_loop+0x40/0x90 [ 127.502847][ T5958] ? clear_bhb_loop+0x40/0x90 [ 127.507539][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.513751][ T5958] RIP: 0033:0x7f6b5ef90eea [ 127.518192][ T5958] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.538166][ T5958] RSP: 002b:00007ffebcd587f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.546914][ T5958] RAX: ffffffffffffffda RBX: 00007ffebcd58880 RCX: 00007f6b5ef90eea [ 127.555225][ T5958] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffebcd58840 [ 127.563604][ T5958] RBP: 0000200000000180 R08: 00007ffebcd58880 R09: 0000000000800700 [ 127.571904][ T5958] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 127.579923][ T5958] R13: 00007ffebcd58840 R14: 000000000000046f R15: 000000000000002c [ 127.588390][ T5958] [ 127.591783][ T5958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.599169][ T5958] CPU: 0 PID: 5958 Comm: syz.0.17 Not tainted syzkaller #0 [ 127.606377][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.616432][ T5958] Call Trace: [ 127.619711][ T5958] [ 127.622643][ T5958] dump_stack_lvl+0x16c/0x230 [ 127.627328][ T5958] ? show_regs_print_info+0x20/0x20 [ 127.632542][ T5958] ? load_image+0x3b0/0x3b0 [ 127.637090][ T5958] panic+0x2c0/0x710 [ 127.641025][ T5958] ? bpf_jit_dump+0xd0/0xd0 [ 127.645537][ T5958] __warn+0x2e0/0x470 [ 127.649545][ T5958] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.655547][ T5958] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.661585][ T5958] report_bug+0x2be/0x4f0 [ 127.665928][ T5958] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.671914][ T5958] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.677899][ T5958] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 127.683900][ T5958] handle_bug+0xcf/0x120 [ 127.688161][ T5958] exc_invalid_op+0x1a/0x50 [ 127.692684][ T5958] asm_exc_invalid_op+0x1a/0x20 [ 127.697550][ T5958] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 127.704156][ T5958] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 127.723768][ T5958] RSP: 0018:ffffc900034d71c0 EFLAGS: 00010246 [ 127.729849][ T5958] RAX: 146385fd53eccd00 RBX: 0000000000000002 RCX: ffff888078491e00 [ 127.737837][ T5958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 127.745816][ T5958] RBP: ffffc900034d72b8 R08: ffffc900034d6dc7 R09: 1ffff9200069adb8 [ 127.753794][ T5958] R10: dffffc0000000000 R11: fffff5200069adb9 R12: dffffc0000000000 [ 127.761776][ T5958] R13: ffff888061c68ea8 R14: ffff888061c68cb0 R15: ffff888061c68d00 [ 127.769768][ T5958] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 127.775417][ T5958] ? ext4_xattr_inode_iget+0x3df/0x600 [ 127.780894][ T5958] ext4_xattr_set_entry+0xcda/0x1e90 [ 127.786209][ T5958] ext4_xattr_ibody_set+0x254/0x6a0 [ 127.791424][ T5958] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 127.797528][ T5958] __ext4_expand_extra_isize+0x306/0x400 [ 127.803181][ T5958] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 127.808656][ T5958] ext4_evict_inode+0x7ed/0xea0 [ 127.813519][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 127.818382][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.824288][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 127.829507][ T5958] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.835413][ T5958] evict+0x486/0x870 [ 127.839339][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 127.844392][ T5958] ? proc_nr_inodes+0x230/0x230 [ 127.849251][ T5958] ? do_raw_spin_unlock+0x121/0x230 [ 127.854461][ T5958] ? _raw_spin_unlock+0x28/0x40 [ 127.859322][ T5958] ? iput+0x70a/0x920 [ 127.863316][ T5958] ext4_orphan_cleanup+0xbd4/0x1400 [ 127.868534][ T5958] ? ext4_orphan_del+0xba0/0xba0 [ 127.873490][ T5958] ? ext4_register_li_request+0x183/0x940 [ 127.879222][ T5958] ? errseq_check_and_advance+0x66/0x120 [ 127.884877][ T5958] ext4_fill_super+0x5de4/0x66c0 [ 127.889844][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.896098][ T5958] ? __might_sleep+0xe0/0xe0 [ 127.900704][ T5958] ? read_lock_is_recursive+0x20/0x20 [ 127.906080][ T5958] ? snprintf+0xdb/0x120 [ 127.910344][ T5958] ? vscnprintf+0x80/0x80 [ 127.914681][ T5958] ? down_write+0x162/0x1f0 [ 127.919192][ T5958] ? down_read_killable+0x340/0x340 [ 127.924401][ T5958] ? setup_bdev_super+0x56b/0x660 [ 127.929436][ T5958] get_tree_bdev+0x3e4/0x510 [ 127.934036][ T5958] ? vfs_parse_fs_string+0x160/0x160 [ 127.939330][ T5958] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 127.945582][ T5958] ? setup_bdev_super+0x660/0x660 [ 127.950611][ T5958] ? apparmor_capable+0x137/0x1a0 [ 127.955657][ T5958] ? bpf_lsm_capable+0x9/0x10 [ 127.960341][ T5958] ? security_capable+0x89/0xb0 [ 127.965205][ T5958] vfs_get_tree+0x8c/0x280 [ 127.969626][ T5958] do_new_mount+0x24b/0xa40 [ 127.974145][ T5958] __se_sys_mount+0x2da/0x3c0 [ 127.978831][ T5958] ? __x64_sys_mount+0xc0/0xc0 [ 127.983604][ T5958] ? lockdep_hardirqs_on+0x98/0x150 [ 127.988805][ T5958] ? __x64_sys_mount+0x20/0xc0 [ 127.993581][ T5958] do_syscall_64+0x55/0xb0 [ 127.998011][ T5958] ? clear_bhb_loop+0x40/0x90 [ 128.002708][ T5958] ? clear_bhb_loop+0x40/0x90 [ 128.007398][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.013298][ T5958] RIP: 0033:0x7f6b5ef90eea [ 128.017725][ T5958] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.037336][ T5958] RSP: 002b:00007ffebcd587f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.045771][ T5958] RAX: ffffffffffffffda RBX: 00007ffebcd58880 RCX: 00007f6b5ef90eea [ 128.053750][ T5958] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffebcd58840 [ 128.061726][ T5958] RBP: 0000200000000180 R08: 00007ffebcd58880 R09: 0000000000800700 [ 128.069707][ T5958] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.077718][ T5958] R13: 00007ffebcd58840 R14: 000000000000046f R15: 000000000000002c [ 128.085700][ T5958] [ 128.089044][ T5958] Kernel Offset: disabled [ 128.093371][ T5958] Rebooting in 86400 seconds..