Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 87.727202][ T10] cfg80211: failed to load regulatory.db 2025/09/13 07:33:14 parsed 1 programs [ 92.165939][ T5845] cgroup: Unknown subsys name 'net' [ 92.418418][ T5845] cgroup: Unknown subsys name 'cpuset' [ 92.474247][ T5845] cgroup: Unknown subsys name 'rlimit' [ 94.267003][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.676894][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.678795][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.679398][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.680597][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.681573][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.180771][ T4080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.180800][ T4080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.237889][ T2080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.237908][ T2080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.978953][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 103.286387][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.287536][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.287676][ T5919] bridge_slave_0: entered allmulticast mode [ 103.289366][ T5919] bridge_slave_0: entered promiscuous mode [ 103.374816][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.374900][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.375035][ T5919] bridge_slave_1: entered allmulticast mode [ 103.376507][ T5919] bridge_slave_1: entered promiscuous mode [ 103.578731][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.598915][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.738607][ T5919] team0: Port device team_slave_0 added [ 103.742174][ T5919] team0: Port device team_slave_1 added [ 103.886578][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.886589][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.886603][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.891581][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.891597][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.891619][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.117350][ T5919] hsr_slave_0: entered promiscuous mode [ 104.118712][ T5919] hsr_slave_1: entered promiscuous mode [ 104.758524][ T5919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.801384][ T5919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.818679][ T5919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.857979][ T5919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.001219][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.029320][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.040086][ T2080] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.041901][ T2080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.061810][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.069505][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.306832][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.359241][ T5919] veth0_vlan: entered promiscuous mode [ 105.372441][ T5919] veth1_vlan: entered promiscuous mode [ 105.412050][ T5919] veth0_macvtap: entered promiscuous mode [ 105.418507][ T5919] veth1_macvtap: entered promiscuous mode [ 105.444456][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.451984][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.471952][ T2080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.477825][ T2080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.480458][ T2080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.487640][ T2080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.294153][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.508650][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.758428][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.968410][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/13 07:33:32 executed programs: 0 [ 107.426480][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.428901][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.432975][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.441958][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.445149][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.669624][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 107.973129][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.973349][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.975926][ T5949] bridge_slave_0: entered allmulticast mode [ 107.978556][ T5949] bridge_slave_0: entered promiscuous mode [ 107.982548][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.982839][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.983010][ T5949] bridge_slave_1: entered allmulticast mode [ 107.991285][ T5949] bridge_slave_1: entered promiscuous mode [ 108.138360][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.141026][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.288100][ T5949] team0: Port device team_slave_0 added [ 108.290410][ T5949] team0: Port device team_slave_1 added [ 108.575976][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.575991][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.576016][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.579856][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.579868][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.579881][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.814882][ T5949] hsr_slave_0: entered promiscuous mode [ 108.816229][ T5949] hsr_slave_1: entered promiscuous mode [ 108.817184][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 108.817285][ T5949] Cannot create hsr debugfs directory [ 109.116248][ T67] bridge_slave_1: left allmulticast mode [ 109.116372][ T67] bridge_slave_1: left promiscuous mode [ 109.117466][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.205801][ T67] bridge_slave_0: left allmulticast mode [ 109.205835][ T67] bridge_slave_0: left promiscuous mode [ 109.206148][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.475425][ T5869] Bluetooth: hci0: command tx timeout [ 110.744285][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.824234][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.846280][ T67] bond0 (unregistering): Released all slaves [ 111.173842][ T67] hsr_slave_0: left promiscuous mode [ 111.193749][ T67] hsr_slave_1: left promiscuous mode [ 111.196707][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.196871][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.235301][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.235330][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.341500][ T67] veth1_macvtap: left promiscuous mode [ 111.341655][ T67] veth0_macvtap: left promiscuous mode [ 111.341830][ T67] veth1_vlan: left promiscuous mode [ 111.342015][ T67] veth0_vlan: left promiscuous mode [ 111.564625][ T5869] Bluetooth: hci0: command tx timeout [ 113.384243][ T67] team0 (unregistering): Port device team_slave_1 removed [ 113.577414][ T67] team0 (unregistering): Port device team_slave_0 removed [ 113.633652][ T5869] Bluetooth: hci0: command tx timeout [ 115.714059][ T5869] Bluetooth: hci0: command tx timeout [ 116.337784][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.369828][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.410795][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.450969][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.708023][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.891964][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.909065][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.909212][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.927020][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.927756][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.162790][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.300309][ T5949] veth0_vlan: entered promiscuous mode [ 117.309438][ T5949] veth1_vlan: entered promiscuous mode [ 117.409975][ T5949] veth0_macvtap: entered promiscuous mode [ 117.416346][ T5949] veth1_macvtap: entered promiscuous mode [ 117.439331][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.457598][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.474853][ T3713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.476354][ T3713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.476393][ T3713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.476426][ T3713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.660782][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.660806][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.707182][ T4080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.707202][ T4080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/13 07:33:42 executed programs: 2 [ 117.848580][ T5999] loop0: detected capacity change from 0 to 512 [ 117.900883][ T5999] [ 117.900895][ T5999] ====================================================== [ 117.900902][ T5999] WARNING: possible circular locking dependency detected [ 117.900918][ T5999] syzkaller #0 Not tainted [ 117.900926][ T5999] -----------------------------------------[ 117.900926][ T5999] ------------------------------------------------------ [ 117.900933][ T5999] syz.0.17/5999 is trying to acquire lock: [ 117.900942][ T5999] ffff888039144c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 117.901003][ T5999] [ 117.901003][ T5999] but task is already holding lock: [ 117.901009][ T5999] ffff888057f600b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 117.901047][ T5999] [ 117.901047][ T5999] which lock already depends on the new lock. [ 117.901047][ T5999] [ 117.901052][ T5999] [ 117.901052][ T5999] the existing dependency chain (in reverse order) is: [ 117.901059][ T5999] [ 117.901059][ T5999] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 117.901082][ T5999] lock_acquire+0x120/0x360 [ 117.901101][ T5999] down_write+0x3a/0x50 [ 117.901116][ T5999] ext4_xattr_set_handle+0x165/0x1590 [ 117.901136][ T5999] ext4_initxattrs+0x9f/0x110 [ 117.901152][ T5999] security_inode_init_security+0x29d/0x3f0 [ 117.901168][ T5999] __ext4_new_inode+0x3314/0x3cb0 [ 117.901188][ T5999] ext4_create+0x22d/0x460 [ 117.901212][ T5999] path_openat+0x1500/0x3840 [ 117.901228][ T5999] do_filp_open+0x1fa/0x410 [ 117.901243][ T5999] do_sys_openat2+0x121/0x1c0 [ 117.901258][ T5999] __x64_sys_openat+0x138/0x170 [ 117.901271][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.901285][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.901301][ T5999] [ 117.901301][ T5999] -> #1 (jbd2_handle){++++}-{0:0}: [ 117.901324][ T5999] lock_acquire+0x120/0x360 [ 117.901342][ T5999] start_this_handle+0x1fa7/0x21c0 [ 117.901360][ T5999] jbd2__journal_start+0x2c1/0x5b0 [ 117.901377][ T5999] __ext4_journal_start_sb+0x227/0x5c0 [ 117.901398][ T5999] ext4_do_writepages+0xf6f/0x4600 [ 117.901416][ T5999] ext4_writepages+0x205/0x350 [ 117.901430][ T5999] do_writepages+0x32e/0x550 [ 117.901447][ T5999] file_write_and_wait_range+0x244/0x340 [ 117.901468][ T5999] ext4_sync_file+0x2b4/0xb20 [ 117.901486][ T5999] __x64_sys_fsync+0x194/0x1f0 [ 117.901506][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.901519][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.901534][ T5999] [ 117.901534][ T5999] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 117.901557][ T5999] validate_chain+0xb9b/0x2140 [ 117.901578][ T5999] __lock_acquire+0xab9/0xd20 [ 117.901596][ T5999] lock_acquire+0x120/0x360 [ 117.901613][ T5999] percpu_down_read_internal+0x48/0x1d0 [ 117.901636][ T5999] ext4_writepages+0x1cc/0x350 [ 117.901649][ T5999] do_writepages+0x32e/0x550 [ 117.901666][ T5999] __writeback_single_inode+0x145/0x1000 [ 117.901683][ T5999] writeback_single_inode+0x1d5/0x640 [ 117.901698][ T5999] write_inode_now+0x160/0x1d0 [ 117.901713][ T5999] iput+0x5b9/0x9d0 [ 117.901732][ T5999] ext4_xattr_block_set+0x1fce/0x2ac0 [ 117.901752][ T5999] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 117.901773][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 117.901794][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.901811][ T5999] ext4_evict_inode+0x80d/0xee0 [ 117.901826][ T5999] evict+0x501/0x9c0 [ 117.901841][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 117.901857][ T5999] ext4_fill_super+0x57fa/0x60b0 [ 117.901878][ T5999] get_tree_bdev_flags+0x40b/0x4d0 [ 117.901896][ T5999] vfs_get_tree+0x8f/0x2b0 [ 117.901913][ T5999] do_new_mount+0x2a2/0x9e0 [ 117.901933][ T5999] __se_sys_mount+0x317/0x410 [ 117.901952][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.901965][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.901979][ T5999] [ 117.901979][ T5999] other info that might help us debug this: [ 117.901979][ T5999] [ 117.901985][ T5999] Chain exists of: [ 117.901985][ T5999] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 117.901985][ T5999] [ 117.902009][ T5999] Possible unsafe locking scenario: [ 117.902009][ T5999] [ 117.902014][ T5999] CPU0 CPU1 [ 117.902020][ T5999] ---- ---- [ 117.902025][ T5999] lock(&ei->xattr_sem); [ 117.902036][ T5999] lock(jbd2_handle); [ 117.902048][ T5999] lock(&ei->xattr_sem); [ 117.902061][ T5999] rlock(&sbi->s_writepages_rwsem); [ 117.902072][ T5999] [ 117.902072][ T5999] *** DEADLOCK *** [ 117.902072][ T5999] [ 117.902077][ T5999] 3 locks held by syz.0.17/5999: [ 117.902087][ T5999] #0: ffff8880391460d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 117.902134][ T5999] #1: ffff888039146778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 117.902173][ T5999] #2: ffff888057f600b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 117.902222][ T5999] [ 117.902222][ T5999] stack backtrace: [ 117.902248][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.902267][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.902287][ T5999] Call Trace: [ 117.902294][ T5999] [ 117.902302][ T5999] dump_stack_lvl+0x189/0x250 [ 117.902330][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.902353][ T5999] ? __pfx__printk+0x10/0x10 [ 117.902372][ T5999] ? print_lock_name+0xde/0x100 [ 117.902389][ T5999] print_circular_bug+0x2ee/0x310 [ 117.902406][ T5999] check_noncircular+0x134/0x160 [ 117.902433][ T5999] validate_chain+0xb9b/0x2140 [ 117.902459][ T5999] ? look_up_lock_class+0x74/0x170 [ 117.902480][ T5999] ? register_lock_class+0x51/0x320 [ 117.902500][ T5999] __lock_acquire+0xab9/0xd20 [ 117.902519][ T5999] ? ext4_writepages+0x1cc/0x350 [ 117.902534][ T5999] lock_acquire+0x120/0x360 [ 117.902553][ T5999] ? ext4_writepages+0x1cc/0x350 [ 117.902569][ T5999] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 117.902593][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.902618][ T5999] percpu_down_read_internal+0x48/0x1d0 [ 117.902640][ T5999] ? ext4_writepages+0x1cc/0x350 [ 117.902656][ T5999] ext4_writepages+0x1cc/0x350 [ 117.902672][ T5999] ? __pfx_ext4_writepages+0x10/0x10 [ 117.902686][ T5999] ? rt_mutex_slowunlock+0x493/0x8a0 [ 117.902713][ T5999] ? __pfx_ext4_writepages+0x10/0x10 [ 117.902729][ T5999] do_writepages+0x32e/0x550 [ 117.902750][ T5999] ? reacquire_held_locks+0x127/0x1d0 [ 117.902771][ T5999] ? rt_spin_lock+0x1bb/0x2c0 [ 117.902788][ T5999] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.902807][ T5999] __writeback_single_inode+0x145/0x1000 [ 117.902830][ T5999] writeback_single_inode+0x1d5/0x640 [ 117.902848][ T5999] write_inode_now+0x160/0x1d0 [ 117.902864][ T5999] ? __pfx_write_inode_now+0x10/0x10 [ 117.902892][ T5999] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 117.902913][ T5999] ? rt_spin_unlock+0x65/0x80 [ 117.902933][ T5999] iput+0x5b9/0x9d0 [ 117.902957][ T5999] ext4_xattr_block_set+0x1fce/0x2ac0 [ 117.902989][ T5999] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 117.903011][ T5999] ? ext4_xattr_block_find+0x2d4/0x350 [ 117.903032][ T5999] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 117.903067][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 117.903094][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.903117][ T5999] ext4_evict_inode+0x80d/0xee0 [ 117.903139][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.903160][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.903177][ T5999] evict+0x501/0x9c0 [ 117.903204][ T5999] ? __pfx_evict+0x10/0x10 [ 117.903223][ T5999] ? iput+0x6d8/0x9d0 [ 117.903247][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 117.903270][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.903288][ T5999] ? ext4_register_li_request+0x640/0x720 [ 117.903306][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 117.903328][ T5999] ext4_fill_super+0x57fa/0x60b0 [ 117.903360][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.903382][ T5999] ? set_blocksize+0x219/0x450 [ 117.903401][ T5999] ? sb_set_blocksize+0x104/0x180 [ 117.903421][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 117.903438][ T5999] get_tree_bdev_flags+0x40b/0x4d0 [ 117.903455][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.903476][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.903492][ T5999] ? cap_capable+0x11f/0x460 [ 117.903509][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 117.903529][ T5999] vfs_get_tree+0x8f/0x2b0 [ 117.903548][ T5999] do_new_mount+0x2a2/0x9e0 [ 117.903571][ T5999] ? ns_capable+0x8a/0xf0 [ 117.903591][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 117.903611][ T5999] ? path_mount+0x61c/0xfe0 [ 117.903635][ T5999] __se_sys_mount+0x317/0x410 [ 117.903658][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 117.903682][ T5999] ? do_syscall_64+0xbe/0x3b0 [ 117.903697][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 117.903718][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.903732][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.903754][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.903771][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 117.903789][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.903806][ T5999] RIP: 0033:0x7f80125f034a [ 117.903830][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.903843][ T5999] RSP: 002b:00007ffffb6e05c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.903861][ T5999] RAX: ffffffffffffffda RBX: 00007ffffb6e0650 RCX: 00007f80125f034a [ 117.903874][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffffb6e0610 [ 117.903886][ T5999] RBP: 0000200000000180 R08: 00007ffffb6e0650 R09: 0000000000800700 [ 117.903897][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.903909][ T5999] R13: 00007ffffb6e0610 R14: 0000000000000473 R15: 0000200000000680 [ 117.903927][ T5999] [ 117.927426][ T5999] ------------[ cut here ]------------ [ 117.927439][ T5999] EA inode 11 i_nlink=2 [ 117.927646][ T5999] WARNING: CPU: 0 PID: 5999 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.927685][ T5999] Modules linked in: [ 117.927702][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.927722][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.927733][ T5999] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.927758][ T5999] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 8d 97 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 14 39 [ 117.927772][ T5999] RSP: 0018:ffffc900043471a0 EFLAGS: 00010246 [ 117.927787][ T5999] RAX: 3ef53418ee847700 RBX: dffffc0000000000 RCX: ffff888031a75940 [ 117.927800][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.927811][ T5999] RBP: ffffc90004347298 R08: 0000000000000000 R09: 0000000000000000 [ 117.927822][ T5999] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff88804274e240 [ 117.927835][ T5999] R13: 1ffff110084e9c48 R14: 00000000ffffffff R15: 000000000000000b [ 117.927847][ T5999] FS: 000055555f4c3500(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 117.927862][ T5999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.927874][ T5999] CR2: 00007f60029789c0 CR3: 000000004020e000 CR4: 00000000003526f0 [ 117.927890][ T5999] Call Trace: [ 117.927896][ T5999] [ 117.927904][ T5999] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 117.927925][ T5999] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 117.927950][ T5999] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 117.927976][ T5999] ext4_xattr_set_entry+0xabb/0x1e20 [ 117.928027][ T5999] ext4_xattr_ibody_set+0x254/0x6a0 [ 117.928051][ T5999] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 117.928088][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 117.928116][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.928140][ T5999] ext4_evict_inode+0x80d/0xee0 [ 117.928162][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.928183][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.928201][ T5999] evict+0x501/0x9c0 [ 117.928221][ T5999] ? __pfx_evict+0x10/0x10 [ 117.928241][ T5999] ? iput+0x6d8/0x9d0 [ 117.928265][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 117.928288][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.928307][ T5999] ? ext4_register_li_request+0x640/0x720 [ 117.928324][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 117.928348][ T5999] ext4_fill_super+0x57fa/0x60b0 [ 117.928379][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.928401][ T5999] ? set_blocksize+0x219/0x450 [ 117.928421][ T5999] ? sb_set_blocksize+0x104/0x180 [ 117.928439][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 117.928466][ T5999] get_tree_bdev_flags+0x40b/0x4d0 [ 117.928486][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.928509][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.928530][ T5999] ? cap_capable+0x11f/0x460 [ 117.928549][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 117.928572][ T5999] vfs_get_tree+0x8f/0x2b0 [ 117.928593][ T5999] do_new_mount+0x2a2/0x9e0 [ 117.928616][ T5999] ? ns_capable+0x8a/0xf0 [ 117.928637][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 117.928658][ T5999] ? path_mount+0x61c/0xfe0 [ 117.928682][ T5999] __se_sys_mount+0x317/0x410 [ 117.928723][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 117.928747][ T5999] ? do_syscall_64+0xbe/0x3b0 [ 117.928763][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 117.928785][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.928800][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.928823][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.928841][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 117.928860][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.928876][ T5999] RIP: 0033:0x7f80125f034a [ 117.928892][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.928905][ T5999] RSP: 002b:00007ffffb6e05c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.928923][ T5999] RAX: ffffffffffffffda RBX: 00007ffffb6e0650 RCX: 00007f80125f034a [ 117.928936][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffffb6e0610 [ 117.928948][ T5999] RBP: 0000200000000180 R08: 00007ffffb6e0650 R09: 0000000000800700 [ 117.928961][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.928972][ T5999] R13: 00007ffffb6e0610 R14: 0000000000000473 R15: 0000200000000680 [ 117.928990][ T5999] [ 117.929000][ T5999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.929013][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.929032][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.929042][ T5999] Call Trace: [ 117.929049][ T5999] [ 117.929055][ T5999] dump_stack_lvl+0x99/0x250 [ 117.929080][ T5999] ? __asan_memcpy+0x40/0x70 [ 117.929098][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.929121][ T5999] ? __pfx__printk+0x10/0x10 [ 117.929144][ T5999] vpanic+0x281/0x750 [ 117.929167][ T5999] ? __pfx__printk+0x10/0x10 [ 117.929183][ T5999] ? __pfx_vpanic+0x10/0x10 [ 117.929206][ T5999] ? is_bpf_text_address+0x26/0x2b0 [ 117.929233][ T5999] panic+0xb9/0xc0 [ 117.929254][ T5999] ? __pfx_panic+0x10/0x10 [ 117.929282][ T5999] __warn+0x31b/0x4b0 [ 117.929304][ T5999] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.929329][ T5999] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.929353][ T5999] report_bug+0x2be/0x4f0 [ 117.929374][ T5999] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.929398][ T5999] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.929422][ T5999] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 117.929445][ T5999] handle_bug+0x84/0x160 [ 117.929472][ T5999] exc_invalid_op+0x1a/0x50 [ 117.929489][ T5999] asm_exc_invalid_op+0x1a/0x20 [ 117.929505][ T5999] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 117.929529][ T5999] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 8d 97 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 14 39 [ 117.929542][ T5999] RSP: 0018:ffffc900043471a0 EFLAGS: 00010246 [ 117.929557][ T5999] RAX: 3ef53418ee847700 RBX: dffffc0000000000 RCX: ffff888031a75940 [ 117.929570][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.929581][ T5999] RBP: ffffc90004347298 R08: 0000000000000000 R09: 0000000000000000 [ 117.929592][ T5999] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff88804274e240 [ 117.929605][ T5999] R13: 1ffff110084e9c48 R14: 00000000ffffffff R15: 000000000000000b [ 117.929625][ T5999] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 117.929645][ T5999] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 117.929670][ T5999] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 117.929696][ T5999] ext4_xattr_set_entry+0xabb/0x1e20 [ 117.929727][ T5999] ext4_xattr_ibody_set+0x254/0x6a0 [ 117.929752][ T5999] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 117.929789][ T5999] __ext4_expand_extra_isize+0x30d/0x400 [ 117.929816][ T5999] __ext4_mark_inode_dirty+0x46c/0x700 [ 117.929840][ T5999] ext4_evict_inode+0x80d/0xee0 [ 117.929863][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.929886][ T5999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 117.929903][ T5999] evict+0x501/0x9c0 [ 117.929924][ T5999] ? __pfx_evict+0x10/0x10 [ 117.929943][ T5999] ? iput+0x6d8/0x9d0 [ 117.929968][ T5999] ext4_orphan_cleanup+0xc20/0x1460 [ 117.929991][ T5999] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 117.930009][ T5999] ? ext4_register_li_request+0x640/0x720 [ 117.930026][ T5999] ? errseq_check_and_advance+0x66/0x120 [ 117.930049][ T5999] ext4_fill_super+0x57fa/0x60b0 [ 117.930081][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.930103][ T5999] ? set_blocksize+0x219/0x450 [ 117.930122][ T5999] ? sb_set_blocksize+0x104/0x180 [ 117.930140][ T5999] ? setup_bdev_super+0x4c1/0x5b0 [ 117.930162][ T5999] get_tree_bdev_flags+0x40b/0x4d0 [ 117.930183][ T5999] ? __pfx_ext4_fill_super+0x10/0x10 [ 117.930206][ T5999] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.930226][ T5999] ? cap_capable+0x11f/0x460 [ 117.930245][ T5999] ? safesetid_security_capable+0xa9/0x1a0 [ 117.930268][ T5999] vfs_get_tree+0x8f/0x2b0 [ 117.930288][ T5999] do_new_mount+0x2a2/0x9e0 [ 117.930311][ T5999] ? ns_capable+0x8a/0xf0 [ 117.930331][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 117.930352][ T5999] ? path_mount+0x61c/0xfe0 [ 117.930377][ T5999] __se_sys_mount+0x317/0x410 [ 117.930402][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 117.930426][ T5999] ? do_syscall_64+0xbe/0x3b0 [ 117.930441][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 117.930470][ T5999] do_syscall_64+0xfa/0x3b0 [ 117.930485][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.930508][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.930525][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 117.930544][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.930561][ T5999] RIP: 0033:0x7f80125f034a [ 117.930575][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.930601][ T5999] RSP: 002b:00007ffffb6e05c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.930617][ T5999] RAX: ffffffffffffffda RBX: 00007ffffb6e0650 RCX: 00007f80125f034a [ 117.930630][ T5999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffffb6e0610 [ 117.930641][ T5999] RBP: 0000200000000180 R08: 00007ffffb6e0650 R09: 0000000000800700 [ 117.930653][ T5999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 117.930664][ T5999] R13: 00007ffffb6e0610 R14: 0000000000000473 R15: 0000200000000680 [ 117.930682][ T5999] [ 117.931010][ T5999] Kernel Offset: disabled