Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts.
2025/09/10 11:46:39 parsed 1 programs
syzkaller login: [ 86.722040][ T2172] cfg80211: failed to load regulatory.db
[ 86.799370][ T5841] cgroup: Unknown subsys name 'net'
[ 87.061131][ T5841] cgroup: Unknown subsys name 'cpuset'
[ 87.147481][ T5841] cgroup: Unknown subsys name 'rlimit'
[ 88.891303][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.174569][ T5863] chnl_net:caif_netlink_parms(): no params data found
[ 92.597164][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.598908][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.599109][ T5863] bridge_slave_0: entered allmulticast mode
[ 92.600942][ T5863] bridge_slave_0: entered promiscuous mode
[ 92.604860][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.604972][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.605060][ T5863] bridge_slave_1: entered allmulticast mode
[ 92.606489][ T5863] bridge_slave_1: entered promiscuous mode
[ 92.833459][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.840587][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.011980][ T5863] team0: Port device team_slave_0 added
[ 93.015299][ T5863] team0: Port device team_slave_1 added
[ 93.160433][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.160444][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.160458][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.163550][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.163562][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.163586][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.564786][ T5863] hsr_slave_0: entered promiscuous mode
[ 93.565649][ T5863] hsr_slave_1: entered promiscuous mode
[ 93.894307][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.914304][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.951443][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.992535][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.115614][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.169555][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.176381][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.177549][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.194445][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.195800][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.403741][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.449961][ T5863] veth0_vlan: entered promiscuous mode
[ 94.458306][ T5863] veth1_vlan: entered promiscuous mode
[ 94.496097][ T5863] veth0_macvtap: entered promiscuous mode
[ 94.503989][ T5863] veth1_macvtap: entered promiscuous mode
[ 94.524692][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.541430][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.553680][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.555850][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.556577][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.560991][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.331466][ T1175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.540253][ T1175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.624286][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.624310][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.809125][ T1175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.881912][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.881932][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.021497][ T1175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.854146][ T1175] bridge_slave_1: left allmulticast mode
[ 97.854268][ T1175] bridge_slave_1: left promiscuous mode
[ 97.855554][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.961312][ T1175] bridge_slave_0: left allmulticast mode
[ 97.961350][ T1175] bridge_slave_0: left promiscuous mode
[ 97.961590][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.759879][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.817207][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.870248][ T1175] bond0 (unregistering): Released all slaves
[ 100.269288][ T1175] hsr_slave_0: left promiscuous mode
[ 100.306771][ T1175] hsr_slave_1: left promiscuous mode
[ 100.307769][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.307846][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.368481][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.368510][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.455991][ T1175] veth1_macvtap: left promiscuous mode
[ 100.456223][ T1175] veth0_macvtap: left promiscuous mode
[ 100.456531][ T1175] veth1_vlan: left promiscuous mode
[ 100.460782][ T1175] veth0_vlan: left promiscuous mode
[ 102.427482][ T1175] team0 (unregistering): Port device team_slave_1 removed
[ 102.627399][ T1175] team0 (unregistering): Port device team_slave_0 removed
[ 104.826651][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 104.829010][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 104.832542][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 104.833941][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 104.834888][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/09/10 11:47:03 executed programs: 0
[ 107.882169][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.896976][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.904263][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.905200][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.905727][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.767211][ T6010] chnl_net:caif_netlink_parms(): no params data found
[ 109.180890][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.181109][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.181383][ T6010] bridge_slave_0: entered allmulticast mode
[ 109.187443][ T6010] bridge_slave_0: entered promiscuous mode
[ 109.191545][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.191741][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.191954][ T6010] bridge_slave_1: entered allmulticast mode
[ 109.194454][ T6010] bridge_slave_1: entered promiscuous mode
[ 109.374848][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.383553][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.629541][ T6010] team0: Port device team_slave_0 added
[ 109.631660][ T6010] team0: Port device team_slave_1 added
[ 110.003762][ T5155] Bluetooth: hci0: command tx timeout
[ 110.039847][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.039862][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.039875][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.041268][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.041281][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.041297][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.252951][ T6010] hsr_slave_0: entered promiscuous mode
[ 110.253680][ T6010] hsr_slave_1: entered promiscuous mode
[ 112.043110][ T6010] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.086660][ T5155] Bluetooth: hci0: command tx timeout
[ 112.091750][ T6010] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 112.131206][ T6010] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.172743][ T6010] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.341404][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.366557][ T6010] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.379664][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.380814][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.400114][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.400345][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.724966][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.805681][ T6010] veth0_vlan: entered promiscuous mode
[ 112.825574][ T6010] veth1_vlan: entered promiscuous mode
[ 112.891159][ T6010] veth0_macvtap: entered promiscuous mode
[ 112.899175][ T6010] veth1_macvtap: entered promiscuous mode
[ 112.929666][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.947916][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.971607][ T1515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.972795][ T1515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.973952][ T1515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.975379][ T1515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.255970][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.255991][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.306843][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.306862][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/10 11:47:08 executed programs: 2
[ 113.479131][ T6097] loop0: detected capacity change from 0 to 512
[ 113.572683][ T6097]
[ 113.572693][ T6097] ======================================================
[ 113.572700][ T6097] WARNING: possible circular locking dependency detected
[ 113.572716][ T6097] syzkaller #0 Not tainted
[ 113.572724][ T6097] ------------------------------------------------------
[ 113.572731][ T6097] syz.0.17/6097 is trying to acquire lock:
[ 113.572741][ T6097] ffff88801cb92c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 113.572792][ T6097]
[ 113.572792][ T6097] but task is already holding lock:
[ 113.572798][ T6097] ffff8880566e00b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 113.572835][ T6097]
[ 113.572835][ T6097] which lock alrea[ 113.572835][ T6097]
[ 113.572835][ T6097] which lock already depends on the new lock.
[ 113.572835][ T6097]
[ 113.572841][ T6097]
[ 113.572841][ T6097] the existing dependency chain (in reverse order) is:
[ 113.572847][ T6097]
[ 113.572847][ T6097] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 113.572870][ T6097] lock_acquire+0x120/0x360
[ 113.572890][ T6097] down_write+0x3a/0x50
[ 113.572904][ T6097] ext4_xattr_set_handle+0x165/0x1590
[ 113.572925][ T6097] ext4_initxattrs+0x9f/0x110
[ 113.572939][ T6097] security_inode_init_security+0x29d/0x3f0
[ 113.572954][ T6097] __ext4_new_inode+0x3314/0x3cb0
[ 113.572976][ T6097] ext4_create+0x22d/0x460
[ 113.572993][ T6097] path_openat+0x14fd/0x3840
[ 113.573010][ T6097] do_filp_open+0x1fa/0x410
[ 113.573026][ T6097] do_sys_openat2+0x121/0x1c0
[ 113.573040][ T6097] __x64_sys_openat+0x138/0x170
[ 113.573055][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.573068][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.573084][ T6097]
[ 113.573084][ T6097] -> #1 (jbd2_handle){++++}-{0:0}:
[ 113.573107][ T6097] lock_acquire+0x120/0x360
[ 113.573127][ T6097] start_this_handle+0x1fa7/0x21c0
[ 113.573146][ T6097] jbd2__journal_start+0x2c1/0x5b0
[ 113.573164][ T6097] __ext4_journal_start_sb+0x227/0x5c0
[ 113.573186][ T6097] ext4_do_writepages+0xf6f/0x4600
[ 113.573205][ T6097] ext4_writepages+0x205/0x350
[ 113.573218][ T6097] do_writepages+0x32b/0x550
[ 113.573235][ T6097] file_write_and_wait_range+0x244/0x340
[ 113.573256][ T6097] ext4_sync_file+0x2b4/0xb20
[ 113.573274][ T6097] __x64_sys_fsync+0x191/0x1f0
[ 113.573296][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.573309][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.573324][ T6097]
[ 113.573324][ T6097] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 113.573346][ T6097] validate_chain+0xb9b/0x2140
[ 113.573368][ T6097] __lock_acquire+0xab9/0xd20
[ 113.573386][ T6097] lock_acquire+0x120/0x360
[ 113.573404][ T6097] percpu_down_read_internal+0x48/0x1d0
[ 113.573433][ T6097] ext4_writepages+0x1cc/0x350
[ 113.573447][ T6097] do_writepages+0x32b/0x550
[ 113.573465][ T6097] __writeback_single_inode+0x145/0x1000
[ 113.573483][ T6097] writeback_single_inode+0x1d5/0x640
[ 113.573500][ T6097] write_inode_now+0x160/0x1d0
[ 113.573514][ T6097] iput+0x5b9/0x9d0
[ 113.573533][ T6097] ext4_xattr_block_set+0x1fce/0x2ac0
[ 113.573554][ T6097] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 113.573577][ T6097] __ext4_expand_extra_isize+0x30d/0x400
[ 113.573601][ T6097] __ext4_mark_inode_dirty+0x46c/0x700
[ 113.573619][ T6097] ext4_evict_inode+0x80d/0xee0
[ 113.573635][ T6097] evict+0x504/0x9c0
[ 113.573650][ T6097] ext4_orphan_cleanup+0xc20/0x1460
[ 113.573668][ T6097] ext4_fill_super+0x57fa/0x60b0
[ 113.573690][ T6097] get_tree_bdev_flags+0x40e/0x4d0
[ 113.573708][ T6097] vfs_get_tree+0x8f/0x2b0
[ 113.573726][ T6097] do_new_mount+0x2a2/0x9e0
[ 113.573745][ T6097] __se_sys_mount+0x317/0x410
[ 113.573765][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.573779][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.573794][ T6097]
[ 113.573794][ T6097] other info that might help us debug this:
[ 113.573794][ T6097]
[ 113.573799][ T6097] Chain exists of:
[ 113.573799][ T6097] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 113.573799][ T6097]
[ 113.573826][ T6097] Possible unsafe locking scenario:
[ 113.573826][ T6097]
[ 113.573831][ T6097] CPU0 CPU1
[ 113.573837][ T6097] ---- ----
[ 113.573842][ T6097] lock(&ei->xattr_sem);
[ 113.573853][ T6097] lock(jbd2_handle);
[ 113.573866][ T6097] lock(&ei->xattr_sem);
[ 113.573879][ T6097] rlock(&sbi->s_writepages_rwsem);
[ 113.573891][ T6097]
[ 113.573891][ T6097] *** DEADLOCK ***
[ 113.573891][ T6097]
[ 113.573896][ T6097] 3 locks held by syz.0.17/6097:
[ 113.573906][ T6097] #0: ffff88801cb960d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990
[ 113.573956][ T6097] #1: ffff88801cb96778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[ 113.573999][ T6097] #2: ffff8880566e00b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 113.574041][ T6097]
[ 113.574041][ T6097] stack backtrace:
[ 113.574065][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.574086][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 113.574103][ T6097] Call Trace:
[ 113.574110][ T6097]
[ 113.574117][ T6097] dump_stack_lvl+0x189/0x250
[ 113.574143][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 113.574167][ T6097] ? __pfx__printk+0x10/0x10
[ 113.574186][ T6097] ? print_lock_name+0xde/0x100
[ 113.574206][ T6097] print_circular_bug+0x2ee/0x310
[ 113.574224][ T6097] check_noncircular+0x134/0x160
[ 113.574253][ T6097] validate_chain+0xb9b/0x2140
[ 113.574281][ T6097] ? look_up_lock_class+0x74/0x170
[ 113.574306][ T6097] ? register_lock_class+0x51/0x320
[ 113.574330][ T6097] __lock_acquire+0xab9/0xd20
[ 113.574353][ T6097] ? ext4_writepages+0x1cc/0x350
[ 113.574369][ T6097] lock_acquire+0x120/0x360
[ 113.574390][ T6097] ? ext4_writepages+0x1cc/0x350
[ 113.574407][ T6097] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 113.574438][ T6097] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.574462][ T6097] percpu_down_read_internal+0x48/0x1d0
[ 113.574487][ T6097] ? ext4_writepages+0x1cc/0x350
[ 113.574502][ T6097] ext4_writepages+0x1cc/0x350
[ 113.574519][ T6097] ? __pfx_ext4_writepages+0x10/0x10
[ 113.574534][ T6097] ? rt_mutex_slowunlock+0x493/0x8a0
[ 113.574562][ T6097] ? __pfx_ext4_writepages+0x10/0x10
[ 113.574579][ T6097] do_writepages+0x32b/0x550
[ 113.574600][ T6097] ? reacquire_held_locks+0x127/0x1d0
[ 113.574625][ T6097] ? rt_spin_lock+0x1bb/0x2c0
[ 113.574644][ T6097] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 113.574667][ T6097] __writeback_single_inode+0x145/0x1000
[ 113.574691][ T6097] writeback_single_inode+0x1d5/0x640
[ 113.574712][ T6097] write_inode_now+0x160/0x1d0
[ 113.574729][ T6097] ? __pfx_write_inode_now+0x10/0x10
[ 113.574759][ T6097] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 113.574782][ T6097] ? rt_spin_unlock+0x65/0x80
[ 113.574803][ T6097] iput+0x5b9/0x9d0
[ 113.574829][ T6097] ext4_xattr_block_set+0x1fce/0x2ac0
[ 113.574864][ T6097] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 113.574888][ T6097] ? ext4_xattr_block_find+0x2d4/0x350
[ 113.574912][ T6097] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 113.574950][ T6097] __ext4_expand_extra_isize+0x30d/0x400
[ 113.574978][ T6097] __ext4_mark_inode_dirty+0x46c/0x700
[ 113.575001][ T6097] ext4_evict_inode+0x80d/0xee0
[ 113.575025][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.575046][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.575065][ T6097] evict+0x504/0x9c0
[ 113.575086][ T6097] ? __pfx_evict+0x10/0x10
[ 113.575105][ T6097] ? iput+0x6d8/0x9d0
[ 113.575130][ T6097] ext4_orphan_cleanup+0xc20/0x1460
[ 113.575153][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 113.575173][ T6097] ? ext4_register_li_request+0x640/0x720
[ 113.575191][ T6097] ? errseq_check_and_advance+0x66/0x120
[ 113.575214][ T6097] ext4_fill_super+0x57fa/0x60b0
[ 113.575246][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.575282][ T6097] ? set_blocksize+0x219/0x450
[ 113.575303][ T6097] ? sb_set_blocksize+0x104/0x180
[ 113.575321][ T6097] ? setup_bdev_super+0x4c1/0x5b0
[ 113.575343][ T6097] get_tree_bdev_flags+0x40e/0x4d0
[ 113.575365][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.575389][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 113.575410][ T6097] ? cap_capable+0x11f/0x460
[ 113.575435][ T6097] ? safesetid_security_capable+0xa9/0x1a0
[ 113.575458][ T6097] vfs_get_tree+0x8f/0x2b0
[ 113.575481][ T6097] do_new_mount+0x2a2/0x9e0
[ 113.575504][ T6097] ? ns_capable+0x8a/0xf0
[ 113.575526][ T6097] ? __pfx_do_new_mount+0x10/0x10
[ 113.575548][ T6097] ? path_mount+0x61c/0xfe0
[ 113.575574][ T6097] __se_sys_mount+0x317/0x410
[ 113.575599][ T6097] ? __pfx___se_sys_mount+0x10/0x10
[ 113.575624][ T6097] ? do_syscall_64+0xbe/0x3b0
[ 113.575639][ T6097] ? __x64_sys_mount+0x20/0xc0
[ 113.575663][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.575677][ T6097] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.575700][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.575718][ T6097] ? clear_bhb_loop+0x60/0xb0
[ 113.575737][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.575754][ T6097] RIP: 0033:0x7f5c4233034a
[ 113.575775][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.575789][ T6097] RSP: 002b:00007ffd24d648b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 113.575808][ T6097] RAX: ffffffffffffffda RBX: 00007ffd24d64940 RCX: 00007f5c4233034a
[ 113.575821][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd24d64900
[ 113.575834][ T6097] RBP: 0000200000000180 R08: 00007ffd24d64940 R09: 0000000000800700
[ 113.575846][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 113.575858][ T6097] R13: 00007ffd24d64900 R14: 0000000000000473 R15: 0000200000000680
[ 113.575876][ T6097]
[ 113.646936][ T6097] ------------[ cut here ]------------
[ 113.646948][ T6097] EA inode 11 i_nlink=2
[ 113.647164][ T6097] WARNING: CPU: 0 PID: 6097 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.647204][ T6097] Modules linked in:
[ 113.647221][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.647242][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 113.647252][ T6097] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.647279][ T6097] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b
[ 113.647293][ T6097] RSP: 0000:ffffc90003ef71a0 EFLAGS: 00010246
[ 113.647307][ T6097] RAX: 7674a0efa246e200 RBX: dffffc0000000000 RCX: ffff888021e8bb80
[ 113.647328][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 113.647338][ T6097] RBP: ffffc90003ef7298 R08: 0000000000000000 R09: 0000000000000000
[ 113.647350][ T6097] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880564fe240
[ 113.647363][ T6097] R13: 1ffff1100ac9fc48 R14: 00000000ffffffff R15: 000000000000000b
[ 113.647375][ T6097] FS: 000055557d464500(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000
[ 113.647390][ T6097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.647402][ T6097] CR2: 000055edc8766678 CR3: 00000000269e2000 CR4: 00000000003526f0
[ 113.647417][ T6097] Call Trace:
[ 113.647423][ T6097]
[ 113.647431][ T6097] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 113.647452][ T6097] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 113.647479][ T6097] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 113.647506][ T6097] ext4_xattr_set_entry+0xabb/0x1e20
[ 113.647536][ T6097] ext4_xattr_ibody_set+0x254/0x6a0
[ 113.647562][ T6097] ext4_expand_extra_isize_ea+0x13a8/0x1ea0
[ 113.647599][ T6097] __ext4_expand_extra_isize+0x30d/0x400
[ 113.647629][ T6097] __ext4_mark_inode_dirty+0x46c/0x700
[ 113.647658][ T6097] ext4_evict_inode+0x80d/0xee0
[ 113.647681][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.647703][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.647721][ T6097] evict+0x504/0x9c0
[ 113.647741][ T6097] ? __pfx_evict+0x10/0x10
[ 113.647761][ T6097] ? iput+0x6d8/0x9d0
[ 113.647787][ T6097] ext4_orphan_cleanup+0xc20/0x1460
[ 113.647809][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 113.647828][ T6097] ? ext4_register_li_request+0x640/0x720
[ 113.647846][ T6097] ? errseq_check_and_advance+0x66/0x120
[ 113.647869][ T6097] ext4_fill_super+0x57fa/0x60b0
[ 113.647903][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.647926][ T6097] ? set_blocksize+0x219/0x450
[ 113.647946][ T6097] ? sb_set_blocksize+0x104/0x180
[ 113.647964][ T6097] ? setup_bdev_super+0x4c1/0x5b0
[ 113.647986][ T6097] get_tree_bdev_flags+0x40e/0x4d0
[ 113.648007][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.648031][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 113.648052][ T6097] ? cap_capable+0x11f/0x460
[ 113.648072][ T6097] ? safesetid_security_capable+0xa9/0x1a0
[ 113.648095][ T6097] vfs_get_tree+0x8f/0x2b0
[ 113.648117][ T6097] do_new_mount+0x2a2/0x9e0
[ 113.648140][ T6097] ? ns_capable+0x8a/0xf0
[ 113.648160][ T6097] ? __pfx_do_new_mount+0x10/0x10
[ 113.648182][ T6097] ? path_mount+0x61c/0xfe0
[ 113.648208][ T6097] __se_sys_mount+0x317/0x410
[ 113.648232][ T6097] ? __pfx___se_sys_mount+0x10/0x10
[ 113.648274][ T6097] ? do_syscall_64+0xbe/0x3b0
[ 113.648290][ T6097] ? __x64_sys_mount+0x20/0xc0
[ 113.648314][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.648328][ T6097] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.648351][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.648369][ T6097] ? clear_bhb_loop+0x60/0xb0
[ 113.648388][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.648404][ T6097] RIP: 0033:0x7f5c4233034a
[ 113.648419][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.648432][ T6097] RSP: 002b:00007ffd24d648b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 113.648449][ T6097] RAX: ffffffffffffffda RBX: 00007ffd24d64940 RCX: 00007f5c4233034a
[ 113.648462][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd24d64900
[ 113.648475][ T6097] RBP: 0000200000000180 R08: 00007ffd24d64940 R09: 0000000000800700
[ 113.648487][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 113.648498][ T6097] R13: 00007ffd24d64900 R14: 0000000000000473 R15: 0000200000000680
[ 113.648517][ T6097]
[ 113.648525][ T6097] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 113.648538][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.648558][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 113.648568][ T6097] Call Trace:
[ 113.648574][ T6097]
[ 113.648581][ T6097] dump_stack_lvl+0x99/0x250
[ 113.648605][ T6097] ? __asan_memcpy+0x40/0x70
[ 113.648623][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 113.648653][ T6097] ? __pfx__printk+0x10/0x10
[ 113.648675][ T6097] vpanic+0x281/0x750
[ 113.648699][ T6097] ? __pfx__printk+0x10/0x10
[ 113.648716][ T6097] ? __pfx_vpanic+0x10/0x10
[ 113.648739][ T6097] ? is_bpf_text_address+0x26/0x2b0
[ 113.648767][ T6097] panic+0xb9/0xc0
[ 113.648789][ T6097] ? __pfx_panic+0x10/0x10
[ 113.648817][ T6097] __warn+0x31b/0x4b0
[ 113.648840][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.648866][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.648890][ T6097] report_bug+0x2be/0x4f0
[ 113.648913][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.648937][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.648968][ T6097] ? ext4_xattr_inode_update_ref+0x536/0x5d0
[ 113.648993][ T6097] handle_bug+0x84/0x160
[ 113.649009][ T6097] exc_invalid_op+0x1a/0x50
[ 113.649026][ T6097] asm_exc_invalid_op+0x1a/0x20
[ 113.649043][ T6097] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0
[ 113.649068][ T6097] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b
[ 113.649082][ T6097] RSP: 0000:ffffc90003ef71a0 EFLAGS: 00010246
[ 113.649096][ T6097] RAX: 7674a0efa246e200 RBX: dffffc0000000000 RCX: ffff888021e8bb80
[ 113.649109][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 113.649120][ T6097] RBP: ffffc90003ef7298 R08: 0000000000000000 R09: 0000000000000000
[ 113.649131][ T6097] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880564fe240
[ 113.649145][ T6097] R13: 1ffff1100ac9fc48 R14: 00000000ffffffff R15: 000000000000000b
[ 113.649164][ T6097] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 113.649184][ T6097] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 113.649209][ T6097] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 113.649236][ T6097] ext4_xattr_set_entry+0xabb/0x1e20
[ 113.649267][ T6097] ext4_xattr_ibody_set+0x254/0x6a0
[ 113.649292][ T6097] ext4_expand_extra_isize_ea+0x13a8/0x1ea0
[ 113.649330][ T6097] __ext4_expand_extra_isize+0x30d/0x400
[ 113.649358][ T6097] __ext4_mark_inode_dirty+0x46c/0x700
[ 113.649382][ T6097] ext4_evict_inode+0x80d/0xee0
[ 113.649403][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.649423][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10
[ 113.649441][ T6097] evict+0x504/0x9c0
[ 113.649462][ T6097] ? __pfx_evict+0x10/0x10
[ 113.649482][ T6097] ? iput+0x6d8/0x9d0
[ 113.649507][ T6097] ext4_orphan_cleanup+0xc20/0x1460
[ 113.649530][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 113.649549][ T6097] ? ext4_register_li_request+0x640/0x720
[ 113.649567][ T6097] ? errseq_check_and_advance+0x66/0x120
[ 113.649590][ T6097] ext4_fill_super+0x57fa/0x60b0
[ 113.649622][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.649655][ T6097] ? set_blocksize+0x219/0x450
[ 113.649674][ T6097] ? sb_set_blocksize+0x104/0x180
[ 113.649692][ T6097] ? setup_bdev_super+0x4c1/0x5b0
[ 113.649713][ T6097] get_tree_bdev_flags+0x40e/0x4d0
[ 113.649735][ T6097] ? __pfx_ext4_fill_super+0x10/0x10
[ 113.649759][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 113.649781][ T6097] ? cap_capable+0x11f/0x460
[ 113.649799][ T6097] ? safesetid_security_capable+0xa9/0x1a0
[ 113.649822][ T6097] vfs_get_tree+0x8f/0x2b0
[ 113.649844][ T6097] do_new_mount+0x2a2/0x9e0
[ 113.649868][ T6097] ? ns_capable+0x8a/0xf0
[ 113.649887][ T6097] ? __pfx_do_new_mount+0x10/0x10
[ 113.649909][ T6097] ? path_mount+0x61c/0xfe0
[ 113.649935][ T6097] __se_sys_mount+0x317/0x410
[ 113.649960][ T6097] ? __pfx___se_sys_mount+0x10/0x10
[ 113.649985][ T6097] ? do_syscall_64+0xbe/0x3b0
[ 113.649999][ T6097] ? __x64_sys_mount+0x20/0xc0
[ 113.650023][ T6097] do_syscall_64+0xfa/0x3b0
[ 113.650038][ T6097] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.650061][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.650078][ T6097] ? clear_bhb_loop+0x60/0xb0
[ 113.650097][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.650114][ T6097] RIP: 0033:0x7f5c4233034a
[ 113.650127][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.650141][ T6097] RSP: 002b:00007ffd24d648b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 113.650158][ T6097] RAX: ffffffffffffffda RBX: 00007ffd24d64940 RCX: 00007f5c4233034a
[ 113.650171][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffd24d64900
[ 113.650183][ T6097] RBP: 0000200000000180 R08: 00007ffd24d64940 R09: 0000000000800700
[ 113.650195][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 113.650207][ T6097] R13: 00007ffd24d64900 R14: 0000000000000473 R15: 0000200000000680
[ 113.650225][ T6097]
[ 113.650449][ T6097] Kernel Offset: disabled