Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts.
2025/12/02 06:52:40 parsed 1 programs
[ 114.320278][ T5804] cgroup: Unknown subsys name 'net'
[ 114.551764][ T5804] cgroup: Unknown subsys name 'cpuset'
[ 114.616130][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 117.040082][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 122.769868][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.769891][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.872644][ T1511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.872670][ T1511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.120760][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 123.124450][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 123.131802][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 123.134044][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 123.136668][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 125.860933][ T5859] chnl_net:caif_netlink_parms(): no params data found
[ 126.325591][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.328018][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[ 126.328352][ T5859] bridge_slave_0: entered allmulticast mode
[ 126.331074][ T5859] bridge_slave_0: entered promiscuous mode
[ 126.345488][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.345759][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[ 126.346102][ T5859] bridge_slave_1: entered allmulticast mode
[ 126.349698][ T5859] bridge_slave_1: entered promiscuous mode
[ 126.542356][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 126.608359][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 126.838316][ T5859] team0: Port device team_slave_0 added
[ 126.842029][ T5859] team0: Port device team_slave_1 added
[ 127.008407][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 127.008427][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 127.008454][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 127.015953][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 127.015984][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 127.016017][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 127.354097][ T5859] hsr_slave_0: entered promiscuous mode
[ 127.356404][ T5859] hsr_slave_1: entered promiscuous mode
[ 127.775998][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 127.818253][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 127.839132][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 127.881025][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 128.063122][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.182508][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.201849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.202812][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.224558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.225102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.512567][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.583187][ T5859] veth0_vlan: entered promiscuous mode
[ 128.594284][ T5859] veth1_vlan: entered promiscuous mode
[ 128.637962][ T5859] veth0_macvtap: entered promiscuous mode
[ 128.642956][ T5859] veth1_macvtap: entered promiscuous mode
[ 128.673954][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.688732][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.707392][ T1511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.710556][ T1511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.710610][ T1511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.710647][ T1511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.593234][ T1511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 129.819124][ T1511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.088530][ T1511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 131.022918][ T1511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 131.704389][ T1511] bridge_slave_1: left allmulticast mode
[ 131.708277][ T1511] bridge_slave_1: left promiscuous mode
[ 131.711909][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.856638][ T1511] bridge_slave_0: left allmulticast mode
[ 131.856673][ T1511] bridge_slave_0: left promiscuous mode
[ 131.856959][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state
[ 133.666145][ T1511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 133.748157][ T1511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 133.787790][ T1511] bond0 (unregistering): Released all slaves
[ 134.124810][ T1511] hsr_slave_0: left promiscuous mode
[ 134.174823][ T1511] hsr_slave_1: left promiscuous mode
[ 134.176350][ T1511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 134.176484][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 134.227740][ T1511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 134.227775][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 134.319581][ T1511] veth1_macvtap: left promiscuous mode
[ 134.319837][ T1511] veth0_macvtap: left promiscuous mode
[ 134.320156][ T1511] veth1_vlan: left promiscuous mode
[ 134.320471][ T1511] veth0_vlan: left promiscuous mode
[ 136.468208][ T1511] team0 (unregistering): Port device team_slave_1 removed
[ 136.675755][ T1511] team0 (unregistering): Port device team_slave_0 removed
2025/12/02 06:53:10 executed programs: 0
[ 140.209002][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 140.212625][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 140.216944][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 140.223332][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 140.224132][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 140.952751][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 140.952877][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 141.158505][ T5969] chnl_net:caif_netlink_parms(): no params data found
[ 141.521437][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.521613][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.521781][ T5969] bridge_slave_0: entered allmulticast mode
[ 141.523742][ T5969] bridge_slave_0: entered promiscuous mode
[ 141.531647][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.531964][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.532193][ T5969] bridge_slave_1: entered allmulticast mode
[ 141.551844][ T5969] bridge_slave_1: entered promiscuous mode
[ 141.750860][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 141.859611][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 142.038857][ T5969] team0: Port device team_slave_0 added
[ 142.077185][ T5969] team0: Port device team_slave_1 added
[ 142.307416][ T5840] Bluetooth: hci0: command tx timeout
[ 142.536092][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 142.536113][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 142.536144][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 142.595947][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 142.595982][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 142.596010][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 142.836329][ T5969] hsr_slave_0: entered promiscuous mode
[ 142.837372][ T5969] hsr_slave_1: entered promiscuous mode
[ 144.384835][ T5840] Bluetooth: hci0: command tx timeout
[ 144.647182][ T5969] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 144.690996][ T5969] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 144.730817][ T5969] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 144.770541][ T5969] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 144.960327][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0
[ 145.007854][ T5969] 8021q: adding VLAN 0 to HW filter on device team0
[ 145.029501][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 145.029726][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 145.062644][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 145.062796][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 145.437071][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 145.544857][ T5969] veth0_vlan: entered promiscuous mode
[ 145.563994][ T5969] veth1_vlan: entered promiscuous mode
[ 145.618300][ T5969] veth0_macvtap: entered promiscuous mode
[ 145.640126][ T5969] veth1_macvtap: entered promiscuous mode
[ 145.672231][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 145.696361][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 145.722781][ T2230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.724108][ T2230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.724162][ T2230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.724204][ T2230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.999025][ T2230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.999051][ T2230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.073406][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 146.073429][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/02 06:53:16 executed programs: 2
[ 146.287867][ T6067] loop0: detected capacity change from 0 to 512
[ 146.403186][ T6067]
[ 146.403204][ T6067] ======================================================
[ 146.403216][ T6067] WARNING: possible circular locking dependency detected
[ 146.403234][ T6067] syzkaller #0 Not tainted
[ 146.403248][ T6067] ------------------------------------------------------
[ 146.403248][ T6067] ------------------------------------------------------
[ 146.403263][ T6067] syz.0.17/6067 is trying to acquire lock:
[ 146.403275][ T6067] ffff8880354f0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 146.403353][ T6067]
[ 146.403353][ T6067] but task is already holding lock:
[ 146.403360][ T6067] ffff888048db00b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 146.403413][ T6067]
[ 146.403413][ T6067] which lock already depends on the new lock.
[ 146.403413][ T6067]
[ 146.403420][ T6067]
[ 146.403420][ T6067] the existing dependency chain (in reverse order) is:
[ 146.403427][ T6067]
[ 146.403427][ T6067] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 146.403460][ T6067] lock_acquire+0x120/0x360
[ 146.403496][ T6067] down_write+0x3a/0x50
[ 146.403524][ T6067] ext4_xattr_set_handle+0x165/0x1590
[ 146.403552][ T6067] ext4_initxattrs+0x9f/0x110
[ 146.403580][ T6067] security_inode_init_security+0x2a0/0x3f0
[ 146.403603][ T6067] __ext4_new_inode+0x3314/0x3cb0
[ 146.403625][ T6067] ext4_create+0x22d/0x460
[ 146.403655][ T6067] path_openat+0x189b/0x3b90
[ 146.403687][ T6067] do_filp_open+0x1fa/0x410
[ 146.403710][ T6067] do_sys_openat2+0x121/0x1c0
[ 146.403731][ T6067] __x64_sys_openat+0x138/0x170
[ 146.403753][ T6067] do_syscall_64+0xfa/0xfa0
[ 146.403778][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.403798][ T6067]
[ 146.403798][ T6067] -> #1 (jbd2_handle){++++}-{0:0}:
[ 146.403827][ T6067] lock_acquire+0x120/0x360
[ 146.403861][ T6067] start_this_handle+0x1fa7/0x21c0
[ 146.403879][ T6067] jbd2__journal_start+0x2c1/0x5b0
[ 146.403897][ T6067] __ext4_journal_start_sb+0x227/0x5c0
[ 146.403920][ T6067] ext4_do_writepages+0xf6f/0x4600
[ 146.403938][ T6067] ext4_writepages+0x205/0x350
[ 146.403963][ T6067] do_writepages+0x32e/0x550
[ 146.403987][ T6067] __writeback_single_inode+0x143/0x12e0
[ 146.404026][ T6067] writeback_sb_inodes+0x8c8/0x1860
[ 146.404054][ T6067] __writeback_inodes_wb+0x111/0x240
[ 146.404082][ T6067] wb_writeback+0x44f/0xaf0
[ 146.404109][ T6067] wb_workfn+0xaf4/0xf00
[ 146.404131][ T6067] process_scheduled_works+0xae1/0x17b0
[ 146.404156][ T6067] worker_thread+0x8a0/0xda0
[ 146.404180][ T6067] kthread+0x711/0x8a0
[ 146.404208][ T6067] ret_from_fork+0x4bc/0x870
[ 146.404240][ T6067] ret_from_fork_asm+0x1a/0x30
[ 146.404261][ T6067]
[ 146.404261][ T6067] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 146.404289][ T6067] validate_chain+0xb9b/0x2140
[ 146.404307][ T6067] __lock_acquire+0xab9/0xd20
[ 146.404334][ T6067] lock_acquire+0x120/0x360
[ 146.404360][ T6067] percpu_down_read_internal+0x48/0x1d0
[ 146.404384][ T6067] ext4_writepages+0x1cc/0x350
[ 146.404409][ T6067] do_writepages+0x32e/0x550
[ 146.404432][ T6067] __writeback_single_inode+0x143/0x12e0
[ 146.404461][ T6067] writeback_single_inode+0x488/0xd60
[ 146.404485][ T6067] write_inode_now+0x160/0x1d0
[ 146.404509][ T6067] iput+0xa98/0x1050
[ 146.404527][ T6067] ext4_xattr_block_set+0x1fce/0x2ac0
[ 146.404548][ T6067] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 146.404574][ T6067] __ext4_expand_extra_isize+0x30d/0x400
[ 146.404595][ T6067] __ext4_mark_inode_dirty+0x46c/0x700
[ 146.404622][ T6067] ext4_evict_inode+0x7ac/0xe80
[ 146.404655][ T6067] evict+0x5f4/0xae0
[ 146.404677][ T6067] ext4_orphan_cleanup+0xc20/0x1460
[ 146.404709][ T6067] ext4_fill_super+0x593b/0x61f0
[ 146.404735][ T6067] get_tree_bdev_flags+0x40e/0x4d0
[ 146.404767][ T6067] vfs_get_tree+0x92/0x2b0
[ 146.404794][ T6067] do_new_mount+0x302/0xa10
[ 146.404811][ T6067] __se_sys_mount+0x313/0x410
[ 146.404829][ T6067] do_syscall_64+0xfa/0xfa0
[ 146.404860][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.404879][ T6067]
[ 146.404879][ T6067] other info that might help us debug this:
[ 146.404879][ T6067]
[ 146.404886][ T6067] Chain exists of:
[ 146.404886][ T6067] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 146.404886][ T6067]
[ 146.404935][ T6067] Possible unsafe locking scenario:
[ 146.404935][ T6067]
[ 146.404946][ T6067] CPU0 CPU1
[ 146.404957][ T6067] ---- ----
[ 146.404967][ T6067] lock(&ei->xattr_sem);
[ 146.404981][ T6067] lock(jbd2_handle);
[ 146.404996][ T6067] lock(&ei->xattr_sem);
[ 146.405012][ T6067] rlock(&sbi->s_writepages_rwsem);
[ 146.405026][ T6067]
[ 146.405026][ T6067] *** DEADLOCK ***
[ 146.405026][ T6067]
[ 146.405035][ T6067] 3 locks held by syz.0.17/6067:
[ 146.405048][ T6067] #0: ffff88803408e0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0
[ 146.405123][ T6067] #1: ffff88803408e770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x27f/0xe80
[ 146.405181][ T6067] #2: ffff888048db00b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 146.405237][ T6067]
[ 146.405237][ T6067] stack backtrace:
[ 146.405264][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 146.405288][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 146.405309][ T6067] Call Trace:
[ 146.405328][ T6067]
[ 146.405342][ T6067] dump_stack_lvl+0x189/0x250
[ 146.405384][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10
[ 146.405424][ T6067] ? __pfx__printk+0x10/0x10
[ 146.405450][ T6067] ? print_lock_name+0xde/0x100
[ 146.405476][ T6067] print_circular_bug+0x2ee/0x310
[ 146.405501][ T6067] check_noncircular+0x134/0x160
[ 146.405527][ T6067] validate_chain+0xb9b/0x2140
[ 146.405554][ T6067] ? look_up_lock_class+0x74/0x170
[ 146.405581][ T6067] ? register_lock_class+0x51/0x320
[ 146.405612][ T6067] __lock_acquire+0xab9/0xd20
[ 146.405645][ T6067] ? ext4_writepages+0x1cc/0x350
[ 146.405696][ T6067] lock_acquire+0x120/0x360
[ 146.405726][ T6067] ? ext4_writepages+0x1cc/0x350
[ 146.405754][ T6067] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 146.405781][ T6067] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.405809][ T6067] percpu_down_read_internal+0x48/0x1d0
[ 146.405842][ T6067] ? ext4_writepages+0x1cc/0x350
[ 146.405877][ T6067] ext4_writepages+0x1cc/0x350
[ 146.405905][ T6067] ? __pfx_ext4_writepages+0x10/0x10
[ 146.405931][ T6067] ? rt_mutex_slowunlock+0x493/0x8a0
[ 146.405957][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.405985][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.406005][ T6067] ? __pfx_ext4_writepages+0x10/0x10
[ 146.406033][ T6067] do_writepages+0x32e/0x550
[ 146.406061][ T6067] ? rt_mutex_slowunlock+0x493/0x8a0
[ 146.406088][ T6067] __writeback_single_inode+0x143/0x12e0
[ 146.406129][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.406150][ T6067] writeback_single_inode+0x488/0xd60
[ 146.406181][ T6067] write_inode_now+0x160/0x1d0
[ 146.406208][ T6067] ? __pfx_write_inode_now+0x10/0x10
[ 146.406251][ T6067] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 146.406276][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.406317][ T6067] iput+0xa98/0x1050
[ 146.406344][ T6067] ext4_xattr_block_set+0x1fce/0x2ac0
[ 146.406384][ T6067] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 146.406414][ T6067] ? ext4_xattr_block_find+0x2d4/0x350
[ 146.406440][ T6067] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 146.406483][ T6067] __ext4_expand_extra_isize+0x30d/0x400
[ 146.406514][ T6067] __ext4_mark_inode_dirty+0x46c/0x700
[ 146.406552][ T6067] ext4_evict_inode+0x7ac/0xe80
[ 146.406589][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.406617][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.406638][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.406656][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.406694][ T6067] evict+0x5f4/0xae0
[ 146.406725][ T6067] ? __pfx_evict+0x10/0x10
[ 146.406751][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.406771][ T6067] ? iput+0xce7/0x1050
[ 146.406795][ T6067] ext4_orphan_cleanup+0xc20/0x1460
[ 146.406831][ T6067] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 146.406875][ T6067] ? ext4_register_li_request+0x640/0x720
[ 146.406904][ T6067] ? errseq_check_and_advance+0x66/0x120
[ 146.406948][ T6067] ext4_fill_super+0x593b/0x61f0
[ 146.406986][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.407011][ T6067] ? snprintf+0xda/0x120
[ 146.407028][ T6067] ? rt_spin_lock+0x1c1/0x3e0
[ 146.407055][ T6067] ? __pfx_snprintf+0x10/0x10
[ 146.407072][ T6067] ? set_blocksize+0x219/0x450
[ 146.407095][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.407117][ T6067] ? sb_set_blocksize+0x11b/0x210
[ 146.407142][ T6067] ? setup_bdev_super+0x4c1/0x5b0
[ 146.407174][ T6067] get_tree_bdev_flags+0x40e/0x4d0
[ 146.407206][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.407232][ T6067] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 146.407262][ T6067] ? cap_capable+0x11f/0x460
[ 146.407289][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.407321][ T6067] vfs_get_tree+0x92/0x2b0
[ 146.407358][ T6067] do_new_mount+0x302/0xa10
[ 146.407378][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.407408][ T6067] ? __pfx_do_new_mount+0x10/0x10
[ 146.407428][ T6067] ? ns_capable+0x8a/0xf0
[ 146.407461][ T6067] __se_sys_mount+0x313/0x410
[ 146.407486][ T6067] ? __pfx___se_sys_mount+0x10/0x10
[ 146.407508][ T6067] ? do_syscall_64+0xbe/0xfa0
[ 146.407533][ T6067] ? __x64_sys_mount+0x20/0xc0
[ 146.407554][ T6067] do_syscall_64+0xfa/0xfa0
[ 146.407579][ T6067] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.407604][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.407626][ T6067] ? clear_bhb_loop+0x60/0xb0
[ 146.407650][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.407671][ T6067] RIP: 0033:0x7feae1910eea
[ 146.407701][ T6067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 146.407729][ T6067] RSP: 002b:00007ffdb7ab6a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 146.407760][ T6067] RAX: ffffffffffffffda RBX: 00007ffdb7ab6b10 RCX: 00007feae1910eea
[ 146.407776][ T6067] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb7ab6ad0
[ 146.407792][ T6067] RBP: 0000200000000180 R08: 00007ffdb7ab6b10 R09: 0000000000800700
[ 146.407807][ T6067] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 146.407821][ T6067] R13: 00007ffdb7ab6ad0 R14: 000000000000046f R15: 000000000000002c
[ 146.407845][ T6067]
[ 146.430024][ T6067] ------------[ cut here ]------------
[ 146.430043][ T6067] EA inode 11 i_nlink=2
[ 146.430695][ T6067] WARNING: CPU: 1 PID: 6067 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.430747][ T6067] Modules linked in:
[ 146.430770][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 146.430797][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 146.430812][ T6067] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.430845][ T6067] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 97 ff 8a 4c 89 e6 e8 77 4b 02 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 a3 e4 41 08 44 89 f9
[ 146.430866][ T6067] RSP: 0018:ffffc900045bf100 EFLAGS: 00010246
[ 146.430887][ T6067] RAX: abba094fe0962500 RBX: 0000000000000001 RCX: ffff88802aac8000
[ 146.430905][ T6067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 146.430920][ T6067] RBP: ffffc900045bf1f8 R08: 0000000000000000 R09: 0000000000000000
[ 146.430934][ T6067] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b
[ 146.430951][ T6067] R13: ffff888041fae310 R14: 1ffff110083f5c48 R15: ffff888041fae240
[ 146.430969][ T6067] FS: 000055556004f500(0000) GS:ffff888126ee9000(0000) knlGS:0000000000000000
[ 146.430989][ T6067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 146.431006][ T6067] CR2: 00007f57a3362000 CR3: 00000000415e4000 CR4: 00000000003526f0
[ 146.431027][ T6067] Call Trace:
[ 146.431036][ T6067]
[ 146.431049][ T6067] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 146.431083][ T6067] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 146.431116][ T6067] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 146.431147][ T6067] ext4_xattr_set_entry+0xabb/0x1e20
[ 146.431186][ T6067] ext4_xattr_ibody_set+0x254/0x6a0
[ 146.431216][ T6067] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 146.431273][ T6067] __ext4_expand_extra_isize+0x30d/0x400
[ 146.431304][ T6067] __ext4_mark_inode_dirty+0x46c/0x700
[ 146.431346][ T6067] ext4_evict_inode+0x7ac/0xe80
[ 146.431387][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.431419][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.431445][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.431467][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.431501][ T6067] evict+0x5f4/0xae0
[ 146.431535][ T6067] ? __pfx_evict+0x10/0x10
[ 146.431562][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.431584][ T6067] ? iput+0xce7/0x1050
[ 146.431620][ T6067] ext4_orphan_cleanup+0xc20/0x1460
[ 146.431666][ T6067] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 146.431701][ T6067] ? ext4_register_li_request+0x640/0x720
[ 146.431736][ T6067] ? errseq_check_and_advance+0x66/0x120
[ 146.431774][ T6067] ext4_fill_super+0x593b/0x61f0
[ 146.431815][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.431844][ T6067] ? snprintf+0xda/0x120
[ 146.431863][ T6067] ? rt_spin_lock+0x1c1/0x3e0
[ 146.431886][ T6067] ? __pfx_snprintf+0x10/0x10
[ 146.431905][ T6067] ? set_blocksize+0x219/0x450
[ 146.431932][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.431955][ T6067] ? sb_set_blocksize+0x11b/0x210
[ 146.431982][ T6067] ? setup_bdev_super+0x4c1/0x5b0
[ 146.432018][ T6067] get_tree_bdev_flags+0x40e/0x4d0
[ 146.432052][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.432081][ T6067] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 146.432115][ T6067] ? cap_capable+0x11f/0x460
[ 146.432144][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.432179][ T6067] vfs_get_tree+0x92/0x2b0
[ 146.432215][ T6067] do_new_mount+0x302/0xa10
[ 146.432236][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.432271][ T6067] ? __pfx_do_new_mount+0x10/0x10
[ 146.432292][ T6067] ? ns_capable+0x8a/0xf0
[ 146.432330][ T6067] __se_sys_mount+0x313/0x410
[ 146.432356][ T6067] ? __pfx___se_sys_mount+0x10/0x10
[ 146.432381][ T6067] ? do_syscall_64+0xbe/0xfa0
[ 146.432409][ T6067] ? __x64_sys_mount+0x20/0xc0
[ 146.432432][ T6067] do_syscall_64+0xfa/0xfa0
[ 146.432459][ T6067] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.432488][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.432512][ T6067] ? clear_bhb_loop+0x60/0xb0
[ 146.432538][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.432560][ T6067] RIP: 0033:0x7feae1910eea
[ 146.432582][ T6067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 146.432601][ T6067] RSP: 002b:00007ffdb7ab6a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 146.432636][ T6067] RAX: ffffffffffffffda RBX: 00007ffdb7ab6b10 RCX: 00007feae1910eea
[ 146.432654][ T6067] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb7ab6ad0
[ 146.432671][ T6067] RBP: 0000200000000180 R08: 00007ffdb7ab6b10 R09: 0000000000800700
[ 146.432688][ T6067] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 146.432703][ T6067] R13: 00007ffdb7ab6ad0 R14: 000000000000046f R15: 000000000000002c
[ 146.432728][ T6067]
[ 146.432743][ T6067] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 146.432758][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 146.432785][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 146.432800][ T6067] Call Trace:
[ 146.432809][ T6067]
[ 146.432818][ T6067] dump_stack_lvl+0x99/0x250
[ 146.432855][ T6067] ? __asan_memcpy+0x40/0x70
[ 146.432884][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10
[ 146.432919][ T6067] ? __pfx__printk+0x10/0x10
[ 146.432955][ T6067] vpanic+0x237/0x6d0
[ 146.432976][ T6067] ? __pfx_vpanic+0x10/0x10
[ 146.433004][ T6067] panic+0xb9/0xc0
[ 146.433026][ T6067] ? __pfx_panic+0x10/0x10
[ 146.433055][ T6067] __warn+0x31b/0x4b0
[ 146.433076][ T6067] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.433108][ T6067] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.433136][ T6067] report_bug+0x2be/0x4f0
[ 146.433161][ T6067] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.433190][ T6067] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.433219][ T6067] ? ext4_xattr_inode_update_ref+0x51c/0x5b0
[ 146.433248][ T6067] handle_bug+0x84/0x160
[ 146.433281][ T6067] exc_invalid_op+0x1a/0x50
[ 146.433312][ T6067] asm_exc_invalid_op+0x1a/0x20
[ 146.433335][ T6067] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 146.433365][ T6067] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 97 ff 8a 4c 89 e6 e8 77 4b 02 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 a3 e4 41 08 44 89 f9
[ 146.433384][ T6067] RSP: 0018:ffffc900045bf100 EFLAGS: 00010246
[ 146.433404][ T6067] RAX: abba094fe0962500 RBX: 0000000000000001 RCX: ffff88802aac8000
[ 146.433421][ T6067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 146.433436][ T6067] RBP: ffffc900045bf1f8 R08: 0000000000000000 R09: 0000000000000000
[ 146.433450][ T6067] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b
[ 146.433467][ T6067] R13: ffff888041fae310 R14: 1ffff110083f5c48 R15: ffff888041fae240
[ 146.433495][ T6067] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 146.433529][ T6067] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 146.433567][ T6067] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 146.433600][ T6067] ext4_xattr_set_entry+0xabb/0x1e20
[ 146.433644][ T6067] ext4_xattr_ibody_set+0x254/0x6a0
[ 146.433675][ T6067] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 146.433724][ T6067] __ext4_expand_extra_isize+0x30d/0x400
[ 146.433759][ T6067] __ext4_mark_inode_dirty+0x46c/0x700
[ 146.433807][ T6067] ext4_evict_inode+0x7ac/0xe80
[ 146.433849][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.433885][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.433910][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.433931][ T6067] ? __pfx_ext4_evict_inode+0x10/0x10
[ 146.433967][ T6067] evict+0x5f4/0xae0
[ 146.434001][ T6067] ? __pfx_evict+0x10/0x10
[ 146.434028][ T6067] ? rt_spin_unlock+0x161/0x200
[ 146.434053][ T6067] ? iput+0xce7/0x1050
[ 146.434080][ T6067] ext4_orphan_cleanup+0xc20/0x1460
[ 146.434120][ T6067] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 146.434156][ T6067] ? ext4_register_li_request+0x640/0x720
[ 146.434188][ T6067] ? errseq_check_and_advance+0x66/0x120
[ 146.434224][ T6067] ext4_fill_super+0x593b/0x61f0
[ 146.434266][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.434294][ T6067] ? snprintf+0xda/0x120
[ 146.434313][ T6067] ? rt_spin_lock+0x1c1/0x3e0
[ 146.434338][ T6067] ? __pfx_snprintf+0x10/0x10
[ 146.434357][ T6067] ? set_blocksize+0x219/0x450
[ 146.434383][ T6067] ? rt_spin_unlock+0x150/0x200
[ 146.434406][ T6067] ? sb_set_blocksize+0x11b/0x210
[ 146.434435][ T6067] ? setup_bdev_super+0x4c1/0x5b0
[ 146.434469][ T6067] get_tree_bdev_flags+0x40e/0x4d0
[ 146.434503][ T6067] ? __pfx_ext4_fill_super+0x10/0x10
[ 146.434532][ T6067] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 146.434571][ T6067] ? cap_capable+0x11f/0x460
[ 146.434594][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.434629][ T6067] vfs_get_tree+0x92/0x2b0
[ 146.434660][ T6067] do_new_mount+0x302/0xa10
[ 146.434681][ T6067] ? safesetid_security_capable+0xa9/0x1a0
[ 146.434715][ T6067] ? __pfx_do_new_mount+0x10/0x10
[ 146.434736][ T6067] ? ns_capable+0x8a/0xf0
[ 146.434772][ T6067] __se_sys_mount+0x313/0x410
[ 146.434799][ T6067] ? __pfx___se_sys_mount+0x10/0x10
[ 146.434823][ T6067] ? do_syscall_64+0xbe/0xfa0
[ 146.434851][ T6067] ? __x64_sys_mount+0x20/0xc0
[ 146.434873][ T6067] do_syscall_64+0xfa/0xfa0
[ 146.434901][ T6067] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.434929][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.434953][ T6067] ? clear_bhb_loop+0x60/0xb0
[ 146.434980][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.435002][ T6067] RIP: 0033:0x7feae1910eea
[ 146.435021][ T6067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 146.435042][ T6067] RSP: 002b:00007ffdb7ab6a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 146.435066][ T6067] RAX: ffffffffffffffda RBX: 00007ffdb7ab6b10 RCX: 00007feae1910eea
[ 146.435084][ T6067] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb7ab6ad0
[ 146.435103][ T6067] RBP: 0000200000000180 R08: 00007ffdb7ab6b10 R09: 0000000000800700
[ 146.435120][ T6067] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 146.435137][ T6067] R13: 00007ffdb7ab6ad0 R14: 000000000000046f R15: 000000000000002c
[ 146.435170][ T6067]
[ 146.435503][ T6067] Kernel Offset: disabled