[ 101.587938][ T889] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.253' (ED25519) to the list of known hosts. 2025/11/29 22:16:48 parsed 1 programs [ 111.790541][ T5828] cgroup: Unknown subsys name 'net' [ 111.890652][ T5828] cgroup: Unknown subsys name 'cpuset' [ 111.901238][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.681938][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.294182][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.302394][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.311683][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.320324][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.328784][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.526280][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.937640][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 117.047653][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.055758][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.062973][ T5849] bridge_slave_0: entered allmulticast mode [ 117.071593][ T5849] bridge_slave_0: entered promiscuous mode [ 117.082865][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.090162][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.097389][ T5849] bridge_slave_1: entered allmulticast mode [ 117.104935][ T5849] bridge_slave_1: entered promiscuous mode [ 117.144923][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.158162][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.200548][ T5849] team0: Port device team_slave_0 added [ 117.209183][ T5849] team0: Port device team_slave_1 added [ 117.248483][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.255598][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.281632][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.294949][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.301981][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.328113][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.386747][ T5849] hsr_slave_0: entered promiscuous mode [ 117.393708][ T5849] hsr_slave_1: entered promiscuous mode [ 117.583870][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.597491][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.609063][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.621625][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.661268][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.668562][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.676760][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.683890][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.757608][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.779259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.788002][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.807488][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.823631][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.830855][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.846430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.853969][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.150883][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.218060][ T5849] veth0_vlan: entered promiscuous mode [ 118.236179][ T5849] veth1_vlan: entered promiscuous mode [ 118.276722][ T5849] veth0_macvtap: entered promiscuous mode [ 118.288753][ T5849] veth1_macvtap: entered promiscuous mode [ 118.317931][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.339461][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.359762][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.401408][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.425786][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.434534][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.611112][ T3531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.677116][ T3531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.749928][ T3531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.839627][ T3531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.371714][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.380389][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.414199][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.423038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.320351][ T3531] bridge_slave_1: left allmulticast mode [ 121.335912][ T3531] bridge_slave_1: left promiscuous mode [ 121.347628][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.389708][ T3531] bridge_slave_0: left allmulticast mode [ 121.413522][ T3531] bridge_slave_0: left promiscuous mode [ 121.428896][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.969688][ T3531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.982302][ T3531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.994280][ T3531] bond0 (unregistering): Released all slaves [ 122.106377][ T3531] hsr_slave_0: left promiscuous mode [ 122.112713][ T3531] hsr_slave_1: left promiscuous mode [ 122.119959][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.128963][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.137609][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.144992][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.168274][ T3531] veth1_macvtap: left promiscuous mode [ 122.173931][ T3531] veth0_macvtap: left promiscuous mode [ 122.180133][ T3531] veth1_vlan: left promiscuous mode [ 122.185842][ T3531] veth0_vlan: left promiscuous mode [ 122.474256][ T3531] team0 (unregistering): Port device team_slave_1 removed [ 122.509115][ T3531] team0 (unregistering): Port device team_slave_0 removed 2025/11/29 22:17:08 executed programs: 0 [ 126.001627][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.011346][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.031958][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.041379][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.049341][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.305613][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 126.410074][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.417501][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.424697][ T5999] bridge_slave_0: entered allmulticast mode [ 126.432514][ T5999] bridge_slave_0: entered promiscuous mode [ 126.441412][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.448731][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.455995][ T5999] bridge_slave_1: entered allmulticast mode [ 126.463705][ T5999] bridge_slave_1: entered promiscuous mode [ 126.509644][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.522907][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.564182][ T5999] team0: Port device team_slave_0 added [ 126.573355][ T5999] team0: Port device team_slave_1 added [ 126.611332][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.619653][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.645620][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.658345][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.665364][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.691341][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.747398][ T5999] hsr_slave_0: entered promiscuous mode [ 126.754035][ T5999] hsr_slave_1: entered promiscuous mode [ 127.323405][ T5999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.338156][ T5999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.354365][ T5999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.368653][ T5999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.482765][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.516838][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.532078][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.539384][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.561077][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.568284][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.894369][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.958438][ T5999] veth0_vlan: entered promiscuous mode [ 127.974602][ T5999] veth1_vlan: entered promiscuous mode [ 128.028060][ T5999] veth0_macvtap: entered promiscuous mode [ 128.043609][ T5999] veth1_macvtap: entered promiscuous mode [ 128.066417][ T5844] Bluetooth: hci0: command tx timeout [ 128.077728][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.096233][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.113730][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.139972][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.166543][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.192774][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.241913][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.261745][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.298575][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.309784][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.424060][ T6052] loop0: detected capacity change from 0 to 512 [ 128.472951][ T6052] [ 128.475306][ T6052] ====================================================== [ 128.482319][ T6052] WARNING: possible circular locking dependency detected [ 128.489345][ T6052] syzkaller #0 Not tainted [ 128.493763][ T6052] ------------------------------------------------------ [ 128.500786][ T6052] syz.0.17/6052 is trying to acquire lock: [ 128.506606][ T6052] ffff888072368b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 128.516500][ T6052] [ 128.516500][ T6052] but task is already holding lock: [ 128.523863][ T6052] ffff88805a006068 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 128.533749][ T6052] [ 128.533749][ T6052] which lock already depends on the new lock. [ 128.533749][ T6052] [ 128.544153][ T6052] [ 128.544153][ T6052] the existing dependency chain (in reverse order) is: [ 128.553167][ T6052] [ 128.553167][ T6052] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 128.560753][ T6052] down_read+0x9b/0x480 [ 128.565465][ T6052] ext4_setattr+0x875/0x2ae0 [ 128.570593][ T6052] notify_change+0x6d2/0x12a0 [ 128.575805][ T6052] chown_common+0x54e/0x680 [ 128.580920][ T6052] do_fchownat+0x1a7/0x200 [ 128.585863][ T6052] __x64_sys_chown+0x7b/0xc0 [ 128.590987][ T6052] do_syscall_64+0xcd/0xfa0 [ 128.596028][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.602448][ T6052] [ 128.602448][ T6052] -> #1 (jbd2_handle){++++}-{0:0}: [ 128.609766][ T6052] start_this_handle+0x5ea/0x1410 [ 128.615341][ T6052] jbd2__journal_start+0x394/0x6a0 [ 128.620998][ T6052] __ext4_journal_start_sb+0x195/0x690 [ 128.626991][ T6052] ext4_do_writepages+0xc23/0x3cf0 [ 128.632654][ T6052] ext4_writepages+0x37a/0x7d0 [ 128.637961][ T6052] do_writepages+0x27a/0x600 [ 128.643087][ T6052] __writeback_single_inode+0x160/0xfb0 [ 128.649175][ T6052] writeback_sb_inodes+0x60d/0xfa0 [ 128.654825][ T6052] __writeback_inodes_wb+0xf8/0x2d0 [ 128.660558][ T6052] wb_writeback+0x7f3/0xb70 [ 128.665598][ T6052] wb_workfn+0x8ca/0xbe0 [ 128.670375][ T6052] process_one_work+0x9cf/0x1b70 [ 128.675838][ T6052] worker_thread+0x6c8/0xf10 [ 128.680956][ T6052] kthread+0x3c5/0x780 [ 128.685548][ T6052] ret_from_fork+0x675/0x7d0 [ 128.690655][ T6052] ret_from_fork_asm+0x1a/0x30 [ 128.695968][ T6052] [ 128.695968][ T6052] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 128.704420][ T6052] __lock_acquire+0x126f/0x1c90 [ 128.709821][ T6052] lock_acquire+0x179/0x350 [ 128.714933][ T6052] ext4_writepages+0x224/0x7d0 [ 128.720226][ T6052] do_writepages+0x27a/0x600 [ 128.725336][ T6052] __writeback_single_inode+0x160/0xfb0 [ 128.731419][ T6052] writeback_single_inode+0x2bc/0x550 [ 128.737325][ T6052] write_inode_now+0x170/0x1e0 [ 128.742619][ T6052] iput.part.0+0x487/0xb00 [ 128.747558][ T6052] iput+0x35/0x40 [ 128.751714][ T6052] ext4_xattr_block_set+0x67c/0x3650 [ 128.757519][ T6052] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 128.763938][ T6052] __ext4_expand_extra_isize+0x346/0x480 [ 128.770107][ T6052] __ext4_mark_inode_dirty+0x544/0x870 [ 128.776098][ T6052] ext4_evict_inode+0x74e/0x18e0 [ 128.781583][ T6052] evict+0x3e6/0x920 [ 128.786022][ T6052] iput.part.0+0x6a9/0xb00 [ 128.790970][ T6052] iput+0x35/0x40 [ 128.795130][ T6052] ext4_orphan_cleanup+0x731/0x11e0 [ 128.800863][ T6052] ext4_fill_super+0x8db7/0xaf70 [ 128.806337][ T6052] get_tree_bdev_flags+0x38c/0x620 [ 128.811984][ T6052] vfs_get_tree+0x8e/0x340 [ 128.816926][ T6052] path_mount+0x7b9/0x23a0 [ 128.821863][ T6052] __x64_sys_mount+0x293/0x310 [ 128.827234][ T6052] do_syscall_64+0xcd/0xfa0 [ 128.832274][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.838694][ T6052] [ 128.838694][ T6052] other info that might help us debug this: [ 128.838694][ T6052] [ 128.848913][ T6052] Chain exists of: [ 128.848913][ T6052] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 128.848913][ T6052] [ 128.862347][ T6052] Possible unsafe locking scenario: [ 128.862347][ T6052] [ 128.869789][ T6052] CPU0 CPU1 [ 128.875147][ T6052] ---- ---- [ 128.880503][ T6052] lock(&ei->xattr_sem); [ 128.884840][ T6052] lock(jbd2_handle); [ 128.891429][ T6052] lock(&ei->xattr_sem); [ 128.898278][ T6052] rlock(&sbi->s_writepages_rwsem); [ 128.903584][ T6052] [ 128.903584][ T6052] *** DEADLOCK *** [ 128.903584][ T6052] [ 128.911720][ T6052] 3 locks held by syz.0.17/6052: [ 128.916652][ T6052] #0: ffff88807236c0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 128.926828][ T6052] #1: ffff88807236c610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 128.935324][ T6052] #2: ffff88805a006068 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 128.945644][ T6052] [ 128.945644][ T6052] stack backtrace: [ 128.951526][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.951574][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.951593][ T6052] Call Trace: [ 128.951603][ T6052] [ 128.951614][ T6052] dump_stack_lvl+0x116/0x1f0 [ 128.951658][ T6052] print_circular_bug+0x275/0x350 [ 128.951712][ T6052] check_noncircular+0x14c/0x170 [ 128.951768][ T6052] __lock_acquire+0x126f/0x1c90 [ 128.951827][ T6052] lock_acquire+0x179/0x350 [ 128.951855][ T6052] ? do_writepages+0x27a/0x600 [ 128.951889][ T6052] ? __pfx___might_resched+0x10/0x10 [ 128.951935][ T6052] ext4_writepages+0x224/0x7d0 [ 128.951977][ T6052] ? do_writepages+0x27a/0x600 [ 128.952008][ T6052] ? __pfx_ext4_writepages+0x10/0x10 [ 128.952050][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952097][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952138][ T6052] ? __pfx_ext4_writepages+0x10/0x10 [ 128.952181][ T6052] do_writepages+0x27a/0x600 [ 128.952214][ T6052] ? __pfx_do_writepages+0x10/0x10 [ 128.952251][ T6052] __writeback_single_inode+0x160/0xfb0 [ 128.952295][ T6052] ? __pfx___writeback_single_inode+0x10/0x10 [ 128.952337][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952375][ T6052] ? do_raw_spin_unlock+0x172/0x230 [ 128.952412][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952453][ T6052] writeback_single_inode+0x2bc/0x550 [ 128.952498][ T6052] write_inode_now+0x170/0x1e0 [ 128.952545][ T6052] ? __pfx_write_inode_now+0x10/0x10 [ 128.952608][ T6052] ? find_held_lock+0x2b/0x80 [ 128.952649][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952689][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952730][ T6052] iput.part.0+0x487/0xb00 [ 128.952770][ T6052] iput+0x35/0x40 [ 128.952802][ T6052] ext4_xattr_block_set+0x67c/0x3650 [ 128.952843][ T6052] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 128.952877][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.952916][ T6052] ? xattr_find_entry+0x289/0x330 [ 128.952970][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953008][ T6052] ? ext4_xattr_block_find+0x59/0x430 [ 128.953067][ T6052] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 128.953115][ T6052] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 128.953158][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953196][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953237][ T6052] ? dquot_initialize_needed+0x183/0x2a0 [ 128.953276][ T6052] __ext4_expand_extra_isize+0x346/0x480 [ 128.953333][ T6052] __ext4_mark_inode_dirty+0x544/0x870 [ 128.953378][ T6052] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 128.953422][ T6052] ? __pfx___might_resched+0x10/0x10 [ 128.953467][ T6052] ? ext4_journal_check_start+0x22b/0x340 [ 128.953507][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953549][ T6052] ? __ext4_journal_start_sb+0x19e/0x690 [ 128.953587][ T6052] ? ext4_evict_inode+0x5cf/0x18e0 [ 128.953632][ T6052] ext4_evict_inode+0x74e/0x18e0 [ 128.953677][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.953721][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953763][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.953806][ T6052] evict+0x3e6/0x920 [ 128.953840][ T6052] ? __pfx_evict+0x10/0x10 [ 128.953873][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953916][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.953959][ T6052] iput.part.0+0x6a9/0xb00 [ 128.953993][ T6052] ? __pfx_ext4_drop_inode+0x10/0x10 [ 128.954029][ T6052] iput+0x35/0x40 [ 128.954061][ T6052] ext4_orphan_cleanup+0x731/0x11e0 [ 128.954110][ T6052] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.954156][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954194][ T6052] ? ext4_register_li_request+0xec/0x9b0 [ 128.954245][ T6052] ext4_fill_super+0x8db7/0xaf70 [ 128.954307][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.954353][ T6052] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.954388][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954426][ T6052] ? find_held_lock+0x2b/0x80 [ 128.954469][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954508][ T6052] ? sb_set_blocksize+0x176/0x1d0 [ 128.954564][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954603][ T6052] ? setup_bdev_super+0x369/0x730 [ 128.954648][ T6052] get_tree_bdev_flags+0x38c/0x620 [ 128.954695][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.954743][ T6052] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.954796][ T6052] ? apparmor_capable+0x114/0x1d0 [ 128.954846][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954884][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.954923][ T6052] ? security_capable+0x7e/0x260 [ 128.954969][ T6052] vfs_get_tree+0x8e/0x340 [ 128.955009][ T6052] path_mount+0x7b9/0x23a0 [ 128.955044][ T6052] ? __pfx_path_mount+0x10/0x10 [ 128.955077][ T6052] ? putname+0x154/0x1a0 [ 128.955113][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.955154][ T6052] ? putname+0x154/0x1a0 [ 128.955188][ T6052] ? __x64_sys_mount+0x293/0x310 [ 128.955219][ T6052] __x64_sys_mount+0x293/0x310 [ 128.955252][ T6052] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.955283][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.955328][ T6052] do_syscall_64+0xcd/0xfa0 [ 128.955371][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.955403][ T6052] RIP: 0033:0x7fa669190eea [ 128.955428][ T6052] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.955459][ T6052] RSP: 002b:00007fff10eb20f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.955489][ T6052] RAX: ffffffffffffffda RBX: 00007fff10eb2180 RCX: 00007fa669190eea [ 128.955510][ T6052] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff10eb2140 [ 128.955531][ T6052] RBP: 0000200000000180 R08: 00007fff10eb2180 R09: 0000000000800718 [ 128.955556][ T6052] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 128.955576][ T6052] R13: 00007fff10eb2140 R14: 000000000000046f R15: 0000200000000480 [ 128.955607][ T6052] [ 129.529447][ T6052] ------------[ cut here ]------------ [ 129.534950][ T6052] EA inode 11 i_nlink=2 [ 129.535508][ T6052] WARNING: CPU: 0 PID: 6052 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.549833][ T6052] Modules linked in: [ 129.553741][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 129.562891][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.572977][ T6052] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.579640][ T6052] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 75 d4 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 b6 a0 2e ff 44 0f b6 2d ab 90 dc 0d [ 129.599457][ T6052] RSP: 0018:ffffc90003147178 EFLAGS: 00010282 [ 129.605577][ T6052] RAX: 0000000000000000 RBX: ffff88805a028298 RCX: ffffffff817b1cd8 [ 129.613559][ T6052] RDX: ffff88802f9b8000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 129.621564][ T6052] RBP: ffffc90003147240 R08: 0000000000000001 R09: 0000000000000000 [ 129.629604][ T6052] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 129.637667][ T6052] R13: 0000000000000000 R14: 1ffff92000628e32 R15: ffff88805a028488 [ 129.645681][ T6052] FS: 0000555568768500(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 129.654639][ T6052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.661265][ T6052] CR2: 00007f0fc74c5286 CR3: 0000000074910000 CR4: 0000000000350ef0 [ 129.669337][ T6052] Call Trace: [ 129.672626][ T6052] [ 129.675593][ T6052] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 129.681971][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.687655][ T6052] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 129.693165][ T6052] ext4_xattr_set_entry+0x158f/0x1f00 [ 129.698600][ T6052] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 129.704336][ T6052] ? xattr_find_entry+0x289/0x330 [ 129.709438][ T6052] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 129.714656][ T6052] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 129.720631][ T6052] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 129.726942][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.732606][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.738311][ T6052] ? dquot_initialize_needed+0x183/0x2a0 [ 129.743985][ T6052] __ext4_expand_extra_isize+0x346/0x480 [ 129.749969][ T6052] __ext4_mark_inode_dirty+0x544/0x870 [ 129.755513][ T6052] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 129.761548][ T6052] ? __pfx___might_resched+0x10/0x10 [ 129.766913][ T6052] ? ext4_journal_check_start+0x22b/0x340 [ 129.772666][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.778368][ T6052] ? __ext4_journal_start_sb+0x19e/0x690 [ 129.784029][ T6052] ? ext4_evict_inode+0x5cf/0x18e0 [ 129.789225][ T6052] ext4_evict_inode+0x74e/0x18e0 [ 129.794223][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.799674][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.805365][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.810779][ T6052] evict+0x3e6/0x920 [ 129.814707][ T6052] ? __pfx_evict+0x10/0x10 [ 129.819186][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.824935][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.830640][ T6052] iput.part.0+0x6a9/0xb00 [ 129.835090][ T6052] ? __pfx_ext4_drop_inode+0x10/0x10 [ 129.840440][ T6052] iput+0x35/0x40 [ 129.844100][ T6052] ext4_orphan_cleanup+0x731/0x11e0 [ 129.849625][ T6052] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.855602][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.861265][ T6052] ? ext4_register_li_request+0xec/0x9b0 [ 129.866996][ T6052] ext4_fill_super+0x8db7/0xaf70 [ 129.871985][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.877349][ T6052] ? do_raw_spin_lock+0x12c/0x2b0 [ 129.882399][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.888110][ T6052] ? find_held_lock+0x2b/0x80 [ 129.892819][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.898524][ T6052] ? sb_set_blocksize+0x176/0x1d0 [ 129.903595][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.909317][ T6052] ? setup_bdev_super+0x369/0x730 [ 129.914381][ T6052] get_tree_bdev_flags+0x38c/0x620 [ 129.919583][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.924917][ T6052] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.930641][ T6052] ? apparmor_capable+0x114/0x1d0 [ 129.935990][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.941665][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.947391][ T6052] ? security_capable+0x7e/0x260 [ 129.952377][ T6052] vfs_get_tree+0x8e/0x340 [ 129.956864][ T6052] path_mount+0x7b9/0x23a0 [ 129.961332][ T6052] ? __pfx_path_mount+0x10/0x10 [ 129.966249][ T6052] ? putname+0x154/0x1a0 [ 129.970524][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.976219][ T6052] ? putname+0x154/0x1a0 [ 129.980490][ T6052] ? __x64_sys_mount+0x293/0x310 [ 129.985516][ T6052] __x64_sys_mount+0x293/0x310 [ 129.990304][ T6052] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.995647][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.001487][ T6052] do_syscall_64+0xcd/0xfa0 [ 130.006054][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.011965][ T6052] RIP: 0033:0x7fa669190eea [ 130.016424][ T6052] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.036104][ T6052] RSP: 002b:00007fff10eb20f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.044538][ T6052] RAX: ffffffffffffffda RBX: 00007fff10eb2180 RCX: 00007fa669190eea [ 130.052557][ T6052] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff10eb2140 [ 130.060564][ T6052] RBP: 0000200000000180 R08: 00007fff10eb2180 R09: 0000000000800718 [ 130.068579][ T6052] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 130.076695][ T6052] R13: 00007fff10eb2140 R14: 000000000000046f R15: 0000200000000480 [ 130.084698][ T6052] [ 130.088085][ T6052] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.095370][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 130.104489][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.114543][ T6052] Call Trace: [ 130.117820][ T6052] [ 130.120743][ T6052] dump_stack_lvl+0x3d/0x1f0 [ 130.125353][ T6052] vpanic+0x640/0x6f0 [ 130.129360][ T6052] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 130.135372][ T6052] panic+0xca/0xd0 [ 130.139116][ T6052] ? __pfx_panic+0x10/0x10 [ 130.143564][ T6052] ? check_panic_on_warn+0x1f/0xb0 [ 130.148703][ T6052] check_panic_on_warn+0xab/0xb0 [ 130.153689][ T6052] __warn+0xf6/0x3c0 [ 130.157583][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.163236][ T6052] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 130.169254][ T6052] report_bug+0x3c3/0x580 [ 130.173693][ T6052] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 130.179708][ T6052] handle_bug+0x184/0x210 [ 130.184070][ T6052] exc_invalid_op+0x17/0x50 [ 130.188599][ T6052] asm_exc_invalid_op+0x1a/0x20 [ 130.193458][ T6052] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 130.200081][ T6052] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5f a8 8b e8 75 d4 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 b6 a0 2e ff 44 0f b6 2d ab 90 dc 0d [ 130.219705][ T6052] RSP: 0018:ffffc90003147178 EFLAGS: 00010282 [ 130.225784][ T6052] RAX: 0000000000000000 RBX: ffff88805a028298 RCX: ffffffff817b1cd8 [ 130.233757][ T6052] RDX: ffff88802f9b8000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 130.241727][ T6052] RBP: ffffc90003147240 R08: 0000000000000001 R09: 0000000000000000 [ 130.249697][ T6052] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 130.257666][ T6052] R13: 0000000000000000 R14: 1ffff92000628e32 R15: ffff88805a028488 [ 130.265644][ T6052] ? __warn_printk+0x198/0x350 [ 130.270435][ T6052] ? __warn_printk+0x1a5/0x350 [ 130.275225][ T6052] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 130.281262][ T6052] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 130.287639][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.293286][ T6052] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 130.298773][ T6052] ext4_xattr_set_entry+0x158f/0x1f00 [ 130.304164][ T6052] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 130.309888][ T6052] ? xattr_find_entry+0x289/0x330 [ 130.314941][ T6052] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 130.320151][ T6052] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 130.326068][ T6052] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 130.332326][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.337969][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343614][ T6052] ? dquot_initialize_needed+0x183/0x2a0 [ 130.349260][ T6052] __ext4_expand_extra_isize+0x346/0x480 [ 130.354930][ T6052] __ext4_mark_inode_dirty+0x544/0x870 [ 130.360404][ T6052] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 130.366400][ T6052] ? __pfx___might_resched+0x10/0x10 [ 130.371706][ T6052] ? ext4_journal_check_start+0x22b/0x340 [ 130.377447][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.383093][ T6052] ? __ext4_journal_start_sb+0x19e/0x690 [ 130.388739][ T6052] ? ext4_evict_inode+0x5cf/0x18e0 [ 130.393873][ T6052] ext4_evict_inode+0x74e/0x18e0 [ 130.398831][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.404219][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.409873][ T6052] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.415263][ T6052] evict+0x3e6/0x920 [ 130.419176][ T6052] ? __pfx_evict+0x10/0x10 [ 130.423595][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.429244][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.434896][ T6052] iput.part.0+0x6a9/0xb00 [ 130.439322][ T6052] ? __pfx_ext4_drop_inode+0x10/0x10 [ 130.444617][ T6052] iput+0x35/0x40 [ 130.448258][ T6052] ext4_orphan_cleanup+0x731/0x11e0 [ 130.453484][ T6052] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 130.459136][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.464785][ T6052] ? ext4_register_li_request+0xec/0x9b0 [ 130.470532][ T6052] ext4_fill_super+0x8db7/0xaf70 [ 130.475504][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.480813][ T6052] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.485849][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.491502][ T6052] ? find_held_lock+0x2b/0x80 [ 130.496198][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.501843][ T6052] ? sb_set_blocksize+0x176/0x1d0 [ 130.506896][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.512540][ T6052] ? setup_bdev_super+0x369/0x730 [ 130.517583][ T6052] get_tree_bdev_flags+0x38c/0x620 [ 130.522756][ T6052] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.528066][ T6052] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.533724][ T6052] ? apparmor_capable+0x114/0x1d0 [ 130.538774][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.544417][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.550063][ T6052] ? security_capable+0x7e/0x260 [ 130.555028][ T6052] vfs_get_tree+0x8e/0x340 [ 130.559462][ T6052] path_mount+0x7b9/0x23a0 [ 130.563889][ T6052] ? __pfx_path_mount+0x10/0x10 [ 130.568746][ T6052] ? putname+0x154/0x1a0 [ 130.573000][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.578648][ T6052] ? putname+0x154/0x1a0 [ 130.582904][ T6052] ? __x64_sys_mount+0x293/0x310 [ 130.587856][ T6052] __x64_sys_mount+0x293/0x310 [ 130.592639][ T6052] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.597934][ T6052] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.603590][ T6052] do_syscall_64+0xcd/0xfa0 [ 130.608122][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.614025][ T6052] RIP: 0033:0x7fa669190eea [ 130.618486][ T6052] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.638106][ T6052] RSP: 002b:00007fff10eb20f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.646535][ T6052] RAX: ffffffffffffffda RBX: 00007fff10eb2180 RCX: 00007fa669190eea [ 130.654511][ T6052] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff10eb2140 [ 130.662574][ T6052] RBP: 0000200000000180 R08: 00007fff10eb2180 R09: 0000000000800718 [ 130.670556][ T6052] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 130.678533][ T6052] R13: 00007fff10eb2140 R14: 000000000000046f R15: 0000200000000480 [ 130.686530][ T6052] [ 130.689890][ T6052] Kernel Offset: disabled [ 130.694210][ T6052] Rebooting in 86400 seconds..