Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. 2025/09/12 16:51:18 parsed 1 programs [ 92.930705][ T5803] cgroup: Unknown subsys name 'net' [ 93.069731][ T5803] cgroup: Unknown subsys name 'rlimit' [ 94.475801][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.302497][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 98.386367][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.394556][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.401866][ T5854] bridge_slave_0: entered allmulticast mode [ 98.409847][ T5854] bridge_slave_0: entered promiscuous mode [ 98.432078][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.439391][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.446778][ T5854] bridge_slave_1: entered allmulticast mode [ 98.454298][ T5854] bridge_slave_1: entered promiscuous mode [ 98.486255][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.497186][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.524644][ T5854] team0: Port device team_slave_0 added [ 98.543243][ T5854] team0: Port device team_slave_1 added [ 98.566892][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.577559][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.604166][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.627650][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.634833][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.661150][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.696485][ T5854] hsr_slave_0: entered promiscuous mode [ 98.703149][ T5854] hsr_slave_1: entered promiscuous mode [ 98.870382][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.881411][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.891771][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.903380][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.000853][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.027090][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.040366][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.047796][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.064896][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.072022][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.255676][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.296265][ T5854] veth0_vlan: entered promiscuous mode [ 99.313656][ T5854] veth1_vlan: entered promiscuous mode [ 99.345428][ T5854] veth0_macvtap: entered promiscuous mode [ 99.356321][ T5854] veth1_macvtap: entered promiscuous mode [ 99.376214][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.393514][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.406398][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.415407][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.424654][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.433696][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.716039][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.726216][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.735733][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.745761][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.754258][ T5882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.761994][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.795340][ T1327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.015122][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.024154][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.053743][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.061796][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/12 16:51:27 executed programs: 0 [ 100.740866][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.749673][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.759269][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.769157][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.777910][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.785484][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.919723][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 100.980884][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.988461][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.996152][ T5901] bridge_slave_0: entered allmulticast mode [ 101.003078][ T5901] bridge_slave_0: entered promiscuous mode [ 101.011068][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.018668][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.026082][ T5901] bridge_slave_1: entered allmulticast mode [ 101.033367][ T5901] bridge_slave_1: entered promiscuous mode [ 101.067379][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.079432][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.107512][ T5901] team0: Port device team_slave_0 added [ 101.118518][ T5901] team0: Port device team_slave_1 added [ 101.144471][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.151918][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.179273][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.191908][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.199727][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.226856][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.274088][ T5901] hsr_slave_0: entered promiscuous mode [ 101.280569][ T5901] hsr_slave_1: entered promiscuous mode [ 101.287482][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.295692][ T5901] Cannot create hsr debugfs directory [ 102.273946][ T1327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.873362][ T5882] Bluetooth: hci0: command tx timeout [ 104.634699][ T1327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.707317][ T1327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.955208][ T5882] Bluetooth: hci0: command tx timeout [ 105.575456][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.590060][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.624028][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.633927][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.690464][ T1327] hsr_slave_0: left promiscuous mode [ 105.698324][ T1327] hsr_slave_1: left promiscuous mode [ 105.704434][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.711883][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.722533][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.729983][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.737971][ T1327] bridge_slave_1: left allmulticast mode [ 105.743658][ T1327] bridge_slave_1: left promiscuous mode [ 105.749976][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.761729][ T1327] bridge_slave_0: left allmulticast mode [ 105.767832][ T1327] bridge_slave_0: left promiscuous mode [ 105.773736][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.794795][ T1327] veth1_macvtap: left promiscuous mode [ 105.800720][ T1327] veth0_macvtap: left promiscuous mode [ 105.807124][ T1327] veth1_vlan: left promiscuous mode [ 105.812684][ T1327] veth0_vlan: left promiscuous mode [ 106.181008][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 106.211928][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 106.245628][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.278136][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.604597][ T1327] bond0 (unregistering): Released all slaves [ 106.700706][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.717692][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.738734][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.746120][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.769531][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.776762][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.960735][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.011630][ T5901] veth0_vlan: entered promiscuous mode [ 107.033337][ T5882] Bluetooth: hci0: command tx timeout [ 107.043881][ T5901] veth1_vlan: entered promiscuous mode [ 107.075249][ T5901] veth0_macvtap: entered promiscuous mode [ 107.084938][ T5901] veth1_macvtap: entered promiscuous mode [ 107.100845][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.118710][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.131636][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.140788][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.149876][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.158946][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.272126][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.287869][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.310790][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.319191][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.369441][ T5952] syz.0.17[5952]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 107.394053][ T5952] loop0: detected capacity change from 0 to 512 [ 107.439314][ T5952] [ 107.441687][ T5952] ====================================================== [ 107.448707][ T5952] WARNING: possible circular locking dependency detected [ 107.455719][ T5952] syzkaller #0 Not tainted [ 107.460239][ T5952] ------------------------------------------------------ [ 107.467280][ T5952] syz.0.17/5952 is trying to acquire lock: [ 107.473082][ T5952] ffff88802b820bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 107.483260][ T5952] [ 107.483260][ T5952] but task is already holding lock: [ 107.490619][ T5952] ffff888073fae4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 107.500545][ T5952] [ 107.500545][ T5952] which lock already depends on the new lock. [ 107.500545][ T5952] [ 107.510943][ T5952] [ 107.510943][ T5952] the existing dependency chain (in reverse order) is: [ 107.520117][ T5952] [ 107.520117][ T5952] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 107.527674][ T5952] down_read+0x46/0x2e0 [ 107.532613][ T5952] ext4_setattr+0x86b/0x1c90 [ 107.537725][ T5952] notify_change+0xb0d/0xe10 [ 107.542819][ T5952] chown_common+0x3f9/0x5a0 [ 107.547912][ T5952] do_fchownat+0x168/0x270 [ 107.553175][ T5952] __x64_sys_chown+0x82/0x90 [ 107.558293][ T5952] do_syscall_64+0x55/0xb0 [ 107.563310][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.569725][ T5952] [ 107.569725][ T5952] -> #1 (jbd2_handle){++++}-{0:0}: [ 107.577017][ T5952] start_this_handle+0x1e9d/0x20c0 [ 107.582641][ T5952] jbd2__journal_start+0x2bb/0x5b0 [ 107.588265][ T5952] __ext4_journal_start_sb+0x203/0x570 [ 107.594319][ T5952] ext4_do_writepages+0xf92/0x38d0 [ 107.599941][ T5952] ext4_writepages+0x1a8/0x2f0 [ 107.605213][ T5952] do_writepages+0x3a2/0x600 [ 107.610314][ T5952] __writeback_single_inode+0x153/0xee0 [ 107.616375][ T5952] writeback_sb_inodes+0x77c/0xef0 [ 107.622008][ T5952] __writeback_inodes_wb+0x111/0x240 [ 107.627871][ T5952] wb_writeback+0x464/0xba0 [ 107.632885][ T5952] wb_workfn+0xabc/0xe20 [ 107.637638][ T5952] process_scheduled_works+0xa45/0x15b0 [ 107.643690][ T5952] worker_thread+0xa55/0xfc0 [ 107.648788][ T5952] kthread+0x2fa/0x390 [ 107.653365][ T5952] ret_from_fork+0x48/0x80 [ 107.658297][ T5952] ret_from_fork_asm+0x11/0x20 [ 107.663568][ T5952] [ 107.663568][ T5952] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 107.672076][ T5952] __lock_acquire+0x2ddb/0x7c80 [ 107.677592][ T5952] lock_acquire+0x197/0x410 [ 107.682622][ T5952] percpu_down_read+0x44/0x1a0 [ 107.687907][ T5952] ext4_writepages+0x170/0x2f0 [ 107.693189][ T5952] do_writepages+0x3a2/0x600 [ 107.698292][ T5952] __writeback_single_inode+0x153/0xee0 [ 107.704435][ T5952] writeback_single_inode+0x211/0x720 [ 107.710323][ T5952] write_inode_now+0x161/0x1e0 [ 107.715605][ T5952] iput+0x5b2/0x920 [ 107.719923][ T5952] ext4_xattr_block_set+0x273a/0x32a0 [ 107.725805][ T5952] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 107.732233][ T5952] __ext4_expand_extra_isize+0x306/0x400 [ 107.738390][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 107.744361][ T5952] ext4_evict_inode+0x7ed/0xea0 [ 107.749906][ T5952] evict+0x486/0x870 [ 107.754314][ T5952] ext4_orphan_cleanup+0xbd4/0x1400 [ 107.760024][ T5952] ext4_fill_super+0x5de7/0x66c0 [ 107.765467][ T5952] get_tree_bdev+0x3e4/0x510 [ 107.770561][ T5952] vfs_get_tree+0x8c/0x280 [ 107.775495][ T5952] do_new_mount+0x24b/0xa40 [ 107.780536][ T5952] __se_sys_mount+0x2da/0x3c0 [ 107.785729][ T5952] do_syscall_64+0x55/0xb0 [ 107.790668][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.797089][ T5952] [ 107.797089][ T5952] other info that might help us debug this: [ 107.797089][ T5952] [ 107.807484][ T5952] Chain exists of: [ 107.807484][ T5952] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 107.807484][ T5952] [ 107.820866][ T5952] Possible unsafe locking scenario: [ 107.820866][ T5952] [ 107.828310][ T5952] CPU0 CPU1 [ 107.833673][ T5952] ---- ---- [ 107.839025][ T5952] lock(&ei->xattr_sem); [ 107.843438][ T5952] lock(jbd2_handle); [ 107.850011][ T5952] lock(&ei->xattr_sem); [ 107.856845][ T5952] rlock(&sbi->s_writepages_rwsem); [ 107.862111][ T5952] [ 107.862111][ T5952] *** DEADLOCK *** [ 107.862111][ T5952] [ 107.870242][ T5952] 3 locks held by syz.0.17/5952: [ 107.875247][ T5952] #0: ffff88807ac480e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 107.885353][ T5952] #1: ffff88807ac48608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 107.894752][ T5952] #2: ffff888073fae4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 107.905009][ T5952] [ 107.905009][ T5952] stack backtrace: [ 107.910977][ T5952] CPU: 0 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0 [ 107.918160][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.928519][ T5952] Call Trace: [ 107.931892][ T5952] [ 107.935000][ T5952] dump_stack_lvl+0x16c/0x230 [ 107.939669][ T5952] ? load_image+0x3b0/0x3b0 [ 107.944158][ T5952] ? show_regs_print_info+0x20/0x20 [ 107.949466][ T5952] ? print_circular_bug+0x12b/0x1a0 [ 107.954668][ T5952] check_noncircular+0x2bd/0x3c0 [ 107.959623][ T5952] ? look_up_lock_class+0x75/0x140 [ 107.964736][ T5952] ? print_deadlock_bug+0x5d0/0x5d0 [ 107.969927][ T5952] ? lockdep_lock+0xe0/0x220 [ 107.974510][ T5952] ? _find_first_zero_bit+0xd3/0x100 [ 107.979795][ T5952] __lock_acquire+0x2ddb/0x7c80 [ 107.984656][ T5952] ? mark_lock+0x94/0x320 [ 107.988975][ T5952] ? verify_lock_unused+0x140/0x140 [ 107.994163][ T5952] ? __lock_acquire+0x1334/0x7c80 [ 107.999173][ T5952] ? verify_lock_unused+0x140/0x140 [ 108.004362][ T5952] lock_acquire+0x197/0x410 [ 108.008863][ T5952] ? ext4_writepages+0x170/0x2f0 [ 108.013884][ T5952] ? __might_sleep+0xe0/0xe0 [ 108.018469][ T5952] ? mark_lock+0x94/0x320 [ 108.022801][ T5952] ? read_lock_is_recursive+0x20/0x20 [ 108.028165][ T5952] ? __lock_acquire+0x1334/0x7c80 [ 108.033261][ T5952] percpu_down_read+0x44/0x1a0 [ 108.038012][ T5952] ? ext4_writepages+0x170/0x2f0 [ 108.042947][ T5952] ext4_writepages+0x170/0x2f0 [ 108.047707][ T5952] ? ext4_read_folio+0x2f0/0x2f0 [ 108.052634][ T5952] ? __rwlock_init+0x150/0x150 [ 108.057394][ T5952] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 108.063316][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.068496][ T5952] ? ext4_read_folio+0x2f0/0x2f0 [ 108.073425][ T5952] do_writepages+0x3a2/0x600 [ 108.078006][ T5952] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 108.083721][ T5952] ? writeback_single_inode+0x206/0x720 [ 108.089254][ T5952] ? __lock_acquire+0x7c80/0x7c80 [ 108.094260][ T5952] ? do_raw_spin_lock+0x121/0x2c0 [ 108.099271][ T5952] ? get_tree_bdev+0x3e4/0x510 [ 108.104024][ T5952] __writeback_single_inode+0x153/0xee0 [ 108.109632][ T5952] writeback_single_inode+0x211/0x720 [ 108.114990][ T5952] ? write_inode_now+0x1e0/0x1e0 [ 108.119949][ T5952] write_inode_now+0x161/0x1e0 [ 108.124817][ T5952] ? bdi_split_work_to_wbs+0x890/0x890 [ 108.130266][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.135541][ T5952] iput+0x5b2/0x920 [ 108.139343][ T5952] ext4_xattr_block_set+0x273a/0x32a0 [ 108.144714][ T5952] ? __might_sleep+0xe0/0xe0 [ 108.149343][ T5952] ? xattr_find_entry+0x12b/0x2f0 [ 108.154366][ T5952] ? ext4_xattr_block_find+0x350/0x350 [ 108.159906][ T5952] ? ext4_xattr_block_find+0x2d4/0x350 [ 108.165354][ T5952] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 108.171246][ T5952] __ext4_expand_extra_isize+0x306/0x400 [ 108.176869][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 108.182328][ T5952] ext4_evict_inode+0x7ed/0xea0 [ 108.187185][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 108.192115][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.197996][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.203183][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.209060][ T5952] evict+0x486/0x870 [ 108.212952][ T5952] ? __lock_acquire+0x7c80/0x7c80 [ 108.218007][ T5952] ? proc_nr_inodes+0x230/0x230 [ 108.222843][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.228043][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 108.232889][ T5952] ? iput+0x70a/0x920 [ 108.236854][ T5952] ext4_orphan_cleanup+0xbd4/0x1400 [ 108.242047][ T5952] ? ext4_orphan_del+0xba0/0xba0 [ 108.247286][ T5952] ? ext4_register_li_request+0x183/0x940 [ 108.252994][ T5952] ? errseq_check_and_advance+0x66/0x120 [ 108.258618][ T5952] ext4_fill_super+0x5de7/0x66c0 [ 108.263554][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.269866][ T5952] ? vscnprintf+0x80/0x80 [ 108.274184][ T5952] ? down_read_killable+0x340/0x340 [ 108.279374][ T5952] ? setup_bdev_super+0x56b/0x660 [ 108.284380][ T5952] get_tree_bdev+0x3e4/0x510 [ 108.288951][ T5952] ? vfs_parse_fs_string+0x160/0x160 [ 108.294221][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.300446][ T5952] ? setup_bdev_super+0x660/0x660 [ 108.305451][ T5952] ? apparmor_capable+0x137/0x1a0 [ 108.310459][ T5952] ? bpf_lsm_capable+0x9/0x10 [ 108.315122][ T5952] ? security_capable+0x89/0xb0 [ 108.319956][ T5952] vfs_get_tree+0x8c/0x280 [ 108.324444][ T5952] do_new_mount+0x24b/0xa40 [ 108.328938][ T5952] __se_sys_mount+0x2da/0x3c0 [ 108.333690][ T5952] ? __x64_sys_mount+0xc0/0xc0 [ 108.338440][ T5952] ? lockdep_hardirqs_on+0x98/0x150 [ 108.343628][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 108.348378][ T5952] do_syscall_64+0x55/0xb0 [ 108.352792][ T5952] ? clear_bhb_loop+0x40/0x90 [ 108.357467][ T5952] ? clear_bhb_loop+0x40/0x90 [ 108.362143][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.368080][ T5952] RIP: 0033:0x7f926e99034a [ 108.372499][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.392276][ T5952] RSP: 002b:00007fffd7669848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.400680][ T5952] RAX: ffffffffffffffda RBX: 00007fffd76698d0 RCX: 00007f926e99034a [ 108.408653][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffd7669890 [ 108.416740][ T5952] RBP: 0000200000000180 R08: 00007fffd76698d0 R09: 0000000000800700 [ 108.424712][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.432678][ T5952] R13: 00007fffd7669890 R14: 0000000000000473 R15: 0000200000000680 [ 108.440646][ T5952] [ 108.458637][ T5952] ------------[ cut here ]------------ [ 108.464660][ T5952] EA inode 11 i_nlink=2 [ 108.470474][ T5952] WARNING: CPU: 1 PID: 5952 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580 [ 108.485802][ T5952] Modules linked in: [ 108.489715][ T5952] CPU: 1 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0 [ 108.497219][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.507503][ T5952] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 108.514387][ T5952] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 108.534413][ T5952] RSP: 0018:ffffc9000325f220 EFLAGS: 00010246 [ 108.540498][ T5952] RAX: 57733ffb81112700 RBX: 0000000000000001 RCX: ffff888029233c00 [ 108.548637][ T5952] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 108.556795][ T5952] RBP: ffffc9000325f318 R08: ffffc9000325ee27 R09: 1ffff9200064bdc4 [ 108.564847][ T5952] R10: dffffc0000000000 R11: fffff5200064bdc5 R12: ffff888060df0cb0 [ 108.572852][ T5952] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888060df0d00 [ 108.580822][ T5952] FS: 000055556cd18500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.589826][ T5952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.596554][ T5952] CR2: 00007fe9fbd646c8 CR3: 0000000026981000 CR4: 00000000003506e0 [ 108.604569][ T5952] Call Trace: [ 108.607850][ T5952] [ 108.610776][ T5952] ? vcpu_run+0x1810/0x73b0 [ 108.615323][ T5952] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 108.620969][ T5952] ? ext4_xattr_inode_iget+0x3df/0x600 [ 108.626466][ T5952] ext4_xattr_set_entry+0xcda/0x1e90 [ 108.631970][ T5952] ext4_xattr_ibody_set+0x254/0x6a0 [ 108.637280][ T5952] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 108.643319][ T5952] __ext4_expand_extra_isize+0x306/0x400 [ 108.649033][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 108.654532][ T5952] ext4_evict_inode+0x7ed/0xea0 [ 108.659385][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 108.664365][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.670350][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.675608][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.681535][ T5952] evict+0x486/0x870 [ 108.685481][ T5952] ? __lock_acquire+0x7c80/0x7c80 [ 108.690641][ T5952] ? proc_nr_inodes+0x230/0x230 [ 108.695781][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 108.701012][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 108.705895][ T5952] ? iput+0x70a/0x920 [ 108.709888][ T5952] ext4_orphan_cleanup+0xbd4/0x1400 [ 108.715216][ T5952] ? ext4_orphan_del+0xba0/0xba0 [ 108.720251][ T5952] ? ext4_register_li_request+0x183/0x940 [ 108.726069][ T5952] ? errseq_check_and_advance+0x66/0x120 [ 108.731724][ T5952] ext4_fill_super+0x5de7/0x66c0 [ 108.737084][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.743441][ T5952] ? vscnprintf+0x80/0x80 [ 108.747793][ T5952] ? down_read_killable+0x340/0x340 [ 108.753035][ T5952] ? setup_bdev_super+0x56b/0x660 [ 108.758119][ T5952] get_tree_bdev+0x3e4/0x510 [ 108.762736][ T5952] ? vfs_parse_fs_string+0x160/0x160 [ 108.768083][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.774452][ T5952] ? setup_bdev_super+0x660/0x660 [ 108.779504][ T5952] ? apparmor_capable+0x137/0x1a0 [ 108.784595][ T5952] ? bpf_lsm_capable+0x9/0x10 [ 108.789292][ T5952] ? security_capable+0x89/0xb0 [ 108.794172][ T5952] vfs_get_tree+0x8c/0x280 [ 108.798700][ T5952] do_new_mount+0x24b/0xa40 [ 108.803265][ T5952] __se_sys_mount+0x2da/0x3c0 [ 108.807952][ T5952] ? __x64_sys_mount+0xc0/0xc0 [ 108.812765][ T5952] ? lockdep_hardirqs_on+0x98/0x150 [ 108.817986][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 108.822793][ T5952] do_syscall_64+0x55/0xb0 [ 108.827223][ T5952] ? clear_bhb_loop+0x40/0x90 [ 108.831890][ T5952] ? clear_bhb_loop+0x40/0x90 [ 108.836961][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.842995][ T5952] RIP: 0033:0x7f926e99034a [ 108.847420][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.867082][ T5952] RSP: 002b:00007fffd7669848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.877557][ T5952] RAX: ffffffffffffffda RBX: 00007fffd76698d0 RCX: 00007f926e99034a [ 108.885561][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffd7669890 [ 108.893589][ T5952] RBP: 0000200000000180 R08: 00007fffd76698d0 R09: 0000000000800700 [ 108.901657][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.909781][ T5952] R13: 00007fffd7669890 R14: 0000000000000473 R15: 0000200000000680 [ 108.917902][ T5952] [ 108.921070][ T5952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.928450][ T5952] CPU: 1 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0 [ 108.935634][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.945681][ T5952] Call Trace: [ 108.948942][ T5952] [ 108.951850][ T5952] dump_stack_lvl+0x16c/0x230 [ 108.956542][ T5952] ? show_regs_print_info+0x20/0x20 [ 108.961752][ T5952] ? load_image+0x3b0/0x3b0 [ 108.966253][ T5952] panic+0x2c0/0x710 [ 108.970151][ T5952] ? bpf_jit_dump+0xd0/0xd0 [ 108.974749][ T5952] __warn+0x2e0/0x470 [ 108.978728][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 108.984791][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 108.990782][ T5952] report_bug+0x2be/0x4f0 [ 108.995115][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 109.001198][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 109.007174][ T5952] ? ext4_xattr_inode_update_ref+0x523/0x580 [ 109.013149][ T5952] handle_bug+0xcf/0x120 [ 109.017386][ T5952] exc_invalid_op+0x1a/0x50 [ 109.021893][ T5952] asm_exc_invalid_op+0x1a/0x20 [ 109.026816][ T5952] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 109.033488][ T5952] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 109.053260][ T5952] RSP: 0018:ffffc9000325f220 EFLAGS: 00010246 [ 109.059407][ T5952] RAX: 57733ffb81112700 RBX: 0000000000000001 RCX: ffff888029233c00 [ 109.067470][ T5952] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 109.075445][ T5952] RBP: ffffc9000325f318 R08: ffffc9000325ee27 R09: 1ffff9200064bdc4 [ 109.083410][ T5952] R10: dffffc0000000000 R11: fffff5200064bdc5 R12: ffff888060df0cb0 [ 109.091371][ T5952] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888060df0d00 [ 109.099435][ T5952] ? vcpu_run+0x1810/0x73b0 [ 109.103937][ T5952] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 109.109595][ T5952] ? ext4_xattr_inode_iget+0x3df/0x600 [ 109.112360][ T5882] Bluetooth: hci0: command tx timeout [ 109.120389][ T5952] ext4_xattr_set_entry+0xcda/0x1e90 [ 109.125716][ T5952] ext4_xattr_ibody_set+0x254/0x6a0 [ 109.131044][ T5952] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 109.136949][ T5952] __ext4_expand_extra_isize+0x306/0x400 [ 109.142637][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 109.148107][ T5952] ext4_evict_inode+0x7ed/0xea0 [ 109.153048][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 109.157893][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 109.163776][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 109.169058][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 109.175096][ T5952] evict+0x486/0x870 [ 109.178989][ T5952] ? __lock_acquire+0x7c80/0x7c80 [ 109.184005][ T5952] ? proc_nr_inodes+0x230/0x230 [ 109.188841][ T5952] ? do_raw_spin_unlock+0x121/0x230 [ 109.194032][ T5952] ? _raw_spin_unlock+0x28/0x40 [ 109.198955][ T5952] ? iput+0x70a/0x920 [ 109.202941][ T5952] ext4_orphan_cleanup+0xbd4/0x1400 [ 109.208191][ T5952] ? ext4_orphan_del+0xba0/0xba0 [ 109.213150][ T5952] ? ext4_register_li_request+0x183/0x940 [ 109.218880][ T5952] ? errseq_check_and_advance+0x66/0x120 [ 109.224515][ T5952] ext4_fill_super+0x5de7/0x66c0 [ 109.229487][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 109.235736][ T5952] ? vscnprintf+0x80/0x80 [ 109.240086][ T5952] ? down_read_killable+0x340/0x340 [ 109.245302][ T5952] ? setup_bdev_super+0x56b/0x660 [ 109.250434][ T5952] get_tree_bdev+0x3e4/0x510 [ 109.255544][ T5952] ? vfs_parse_fs_string+0x160/0x160 [ 109.260834][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 109.267077][ T5952] ? setup_bdev_super+0x660/0x660 [ 109.272088][ T5952] ? apparmor_capable+0x137/0x1a0 [ 109.277196][ T5952] ? bpf_lsm_capable+0x9/0x10 [ 109.281867][ T5952] ? security_capable+0x89/0xb0 [ 109.286802][ T5952] vfs_get_tree+0x8c/0x280 [ 109.291357][ T5952] do_new_mount+0x24b/0xa40 [ 109.295857][ T5952] __se_sys_mount+0x2da/0x3c0 [ 109.300611][ T5952] ? __x64_sys_mount+0xc0/0xc0 [ 109.305366][ T5952] ? lockdep_hardirqs_on+0x98/0x150 [ 109.310563][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 109.315321][ T5952] do_syscall_64+0x55/0xb0 [ 109.319733][ T5952] ? clear_bhb_loop+0x40/0x90 [ 109.324399][ T5952] ? clear_bhb_loop+0x40/0x90 [ 109.330109][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.336018][ T5952] RIP: 0033:0x7f926e99034a [ 109.340415][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.360101][ T5952] RSP: 002b:00007fffd7669848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.368506][ T5952] RAX: ffffffffffffffda RBX: 00007fffd76698d0 RCX: 00007f926e99034a [ 109.376489][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffd7669890 [ 109.384556][ T5952] RBP: 0000200000000180 R08: 00007fffd76698d0 R09: 0000000000800700 [ 109.392521][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 109.400490][ T5952] R13: 00007fffd7669890 R14: 0000000000000473 R15: 0000200000000680 [ 109.408461][ T5952] [ 109.411767][ T5952] Kernel Offset: disabled [ 109.416207][ T5952] Rebooting in 86400 seconds..