Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. 2025/09/13 05:29:18 parsed 1 programs [ 79.301072][ T5790] cgroup: Unknown subsys name 'net' [ 79.434889][ T5790] cgroup: Unknown subsys name 'rlimit' [ 81.155428][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.927147][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 83.992754][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.000437][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.007824][ T5815] bridge_slave_0: entered allmulticast mode [ 84.014728][ T5815] bridge_slave_0: entered promiscuous mode [ 84.029370][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.036739][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.044019][ T5815] bridge_slave_1: entered allmulticast mode [ 84.051062][ T5815] bridge_slave_1: entered promiscuous mode [ 84.079079][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.096029][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.126556][ T5815] team0: Port device team_slave_0 added [ 84.134336][ T5815] team0: Port device team_slave_1 added [ 84.164438][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.172894][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.199328][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.212422][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.220684][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.246615][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.295731][ T5815] hsr_slave_0: entered promiscuous mode [ 84.302809][ T5815] hsr_slave_1: entered promiscuous mode [ 84.460616][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.475987][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.486724][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.496755][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.533243][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.540520][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.548708][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.555871][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.614286][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.633498][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.644132][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.664677][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.679106][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.686253][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.700768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.707975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.898785][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.942199][ T5815] veth0_vlan: entered promiscuous mode [ 84.956481][ T5815] veth1_vlan: entered promiscuous mode [ 85.004706][ T5815] veth0_macvtap: entered promiscuous mode [ 85.014591][ T5815] veth1_macvtap: entered promiscuous mode [ 85.031123][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.045457][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.057444][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069807][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.080108][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.089352][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.242163][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.333716][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.342379][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.374785][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.385126][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.979895][ T788] cfg80211: failed to load regulatory.db [ 87.401416][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.409972][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.418188][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.426731][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.435006][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.442419][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.796121][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/13 05:29:29 executed programs: 0 [ 87.942379][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.950608][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.961587][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.971131][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.979913][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.987261][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.131668][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 88.193084][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.200330][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.207715][ T5897] bridge_slave_0: entered allmulticast mode [ 88.214548][ T5897] bridge_slave_0: entered promiscuous mode [ 88.223195][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.230757][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.238198][ T5897] bridge_slave_1: entered allmulticast mode [ 88.245185][ T5897] bridge_slave_1: entered promiscuous mode [ 88.274125][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.285502][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.316561][ T5897] team0: Port device team_slave_0 added [ 88.325174][ T5897] team0: Port device team_slave_1 added [ 88.350900][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.358157][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.384837][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.397083][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.404116][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.430530][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.471409][ T5897] hsr_slave_0: entered promiscuous mode [ 88.477912][ T5897] hsr_slave_1: entered promiscuous mode [ 88.484069][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.492957][ T5897] Cannot create hsr debugfs directory [ 90.018169][ T5104] Bluetooth: hci0: command tx timeout [ 90.258066][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.343140][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.250832][ T48] hsr_slave_0: left promiscuous mode [ 91.257335][ T48] hsr_slave_1: left promiscuous mode [ 91.263965][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.274251][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.283690][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.295480][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.303683][ T48] bridge_slave_1: left allmulticast mode [ 91.312498][ T48] bridge_slave_1: left promiscuous mode [ 91.319530][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.334946][ T48] bridge_slave_0: left allmulticast mode [ 91.341833][ T48] bridge_slave_0: left promiscuous mode [ 91.350306][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.384400][ T48] veth1_macvtap: left promiscuous mode [ 91.393757][ T48] veth0_macvtap: left promiscuous mode [ 91.400101][ T48] veth1_vlan: left promiscuous mode [ 91.405663][ T48] veth0_vlan: left promiscuous mode [ 91.803551][ T48] team0 (unregistering): Port device team_slave_1 removed [ 91.839319][ T48] team0 (unregistering): Port device team_slave_0 removed [ 91.871677][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.914063][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.098450][ T5104] Bluetooth: hci0: command tx timeout [ 92.312900][ T48] bond0 (unregistering): Released all slaves [ 92.414732][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.459450][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.481328][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.501036][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.632330][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.654750][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.670460][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.677683][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.694354][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.701534][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.744717][ T5897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.954803][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.040904][ T5897] veth0_vlan: entered promiscuous mode [ 93.055424][ T5897] veth1_vlan: entered promiscuous mode [ 93.122961][ T5897] veth0_macvtap: entered promiscuous mode [ 93.140497][ T5897] veth1_macvtap: entered promiscuous mode [ 93.175940][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.198461][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.213803][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.223974][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.233441][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.244149][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.306322][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.319232][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.345998][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.354324][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401494][ T5944] syz.0.17[5944]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.416411][ T5944] loop0: detected capacity change from 0 to 512 [ 93.454052][ T5944] [ 93.456438][ T5944] ====================================================== [ 93.463478][ T5944] WARNING: possible circular locking dependency detected [ 93.470523][ T5944] syzkaller #0 Not tainted [ 93.474966][ T5944] ------------------------------------------------------ [ 93.482020][ T5944] syz.0.17/5944 is trying to acquire lock: [ 93.487854][ T5944] ffff88802b96ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 93.497910][ T5944] [ 93.497910][ T5944] but task is already holding lock: [ 93.505270][ T5944] ffff8880746a6ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 93.515277][ T5944] [ 93.515277][ T5944] which lock already depends on the new lock. [ 93.515277][ T5944] [ 93.525773][ T5944] [ 93.525773][ T5944] the existing dependency chain (in reverse order) is: [ 93.534780][ T5944] [ 93.534780][ T5944] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 93.542357][ T5944] down_read+0x46/0x2e0 [ 93.547066][ T5944] ext4_setattr+0x86b/0x1c90 [ 93.552265][ T5944] notify_change+0xb0d/0xe10 [ 93.557457][ T5944] chown_common+0x3f9/0x5a0 [ 93.562496][ T5944] do_fchownat+0x168/0x270 [ 93.567444][ T5944] __x64_sys_chown+0x82/0x90 [ 93.572730][ T5944] do_syscall_64+0x55/0xb0 [ 93.577667][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.584107][ T5944] [ 93.584107][ T5944] -> #1 (jbd2_handle){++++}-{0:0}: [ 93.591421][ T5944] start_this_handle+0x1e9d/0x20c0 [ 93.597082][ T5944] jbd2__journal_start+0x2bb/0x5b0 [ 93.602824][ T5944] __ext4_journal_start_sb+0x203/0x570 [ 93.608819][ T5944] ext4_do_writepages+0xf92/0x38d0 [ 93.614458][ T5944] ext4_writepages+0x1a8/0x2f0 [ 93.619749][ T5944] do_writepages+0x3a2/0x600 [ 93.624958][ T5944] filemap_fdatawrite_wbc+0x122/0x180 [ 93.630952][ T5944] file_write_and_wait_range+0x171/0x240 [ 93.637113][ T5944] ext4_sync_file+0x281/0xc10 [ 93.642482][ T5944] __x64_sys_fsync+0x195/0x1d0 [ 93.647864][ T5944] do_syscall_64+0x55/0xb0 [ 93.652816][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.659258][ T5944] [ 93.659258][ T5944] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 93.667723][ T5944] __lock_acquire+0x2ddb/0x7c80 [ 93.673122][ T5944] lock_acquire+0x197/0x410 [ 93.678140][ T5944] percpu_down_read+0x44/0x1a0 [ 93.683445][ T5944] ext4_writepages+0x170/0x2f0 [ 93.688812][ T5944] do_writepages+0x3a2/0x600 [ 93.693933][ T5944] __writeback_single_inode+0x153/0xee0 [ 93.699998][ T5944] writeback_single_inode+0x211/0x720 [ 93.705884][ T5944] write_inode_now+0x161/0x1e0 [ 93.711168][ T5944] iput+0x5b2/0x920 [ 93.715580][ T5944] ext4_xattr_block_set+0x273a/0x32a0 [ 93.721469][ T5944] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 93.728142][ T5944] __ext4_expand_extra_isize+0x306/0x400 [ 93.734301][ T5944] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 93.740283][ T5944] ext4_evict_inode+0x7ed/0xea0 [ 93.745649][ T5944] evict+0x486/0x870 [ 93.750060][ T5944] ext4_orphan_cleanup+0xbd4/0x1400 [ 93.755859][ T5944] ext4_fill_super+0x5de7/0x66c0 [ 93.761402][ T5944] get_tree_bdev+0x3e4/0x510 [ 93.766503][ T5944] vfs_get_tree+0x8c/0x280 [ 93.771427][ T5944] do_new_mount+0x24b/0xa40 [ 93.776458][ T5944] __se_sys_mount+0x2da/0x3c0 [ 93.781663][ T5944] do_syscall_64+0x55/0xb0 [ 93.786613][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.793137][ T5944] [ 93.793137][ T5944] other info that might help us debug this: [ 93.793137][ T5944] [ 93.803445][ T5944] Chain exists of: [ 93.803445][ T5944] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 93.803445][ T5944] [ 93.816844][ T5944] Possible unsafe locking scenario: [ 93.816844][ T5944] [ 93.824724][ T5944] CPU0 CPU1 [ 93.830080][ T5944] ---- ---- [ 93.835520][ T5944] lock(&ei->xattr_sem); [ 93.839873][ T5944] lock(jbd2_handle); [ 93.846452][ T5944] lock(&ei->xattr_sem); [ 93.853297][ T5944] rlock(&sbi->s_writepages_rwsem); [ 93.858595][ T5944] [ 93.858595][ T5944] *** DEADLOCK *** [ 93.858595][ T5944] [ 93.867007][ T5944] 3 locks held by syz.0.17/5944: [ 93.871935][ T5944] #0: ffff88807bf920e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 93.882023][ T5944] #1: ffff88807bf92608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 93.891411][ T5944] #2: ffff8880746a6ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 93.901667][ T5944] [ 93.901667][ T5944] stack backtrace: [ 93.907548][ T5944] CPU: 0 PID: 5944 Comm: syz.0.17 Not tainted syzkaller #0 [ 93.914771][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.924832][ T5944] Call Trace: [ 93.928112][ T5944] [ 93.931224][ T5944] dump_stack_lvl+0x16c/0x230 [ 93.935914][ T5944] ? load_image+0x3b0/0x3b0 [ 93.940454][ T5944] ? show_regs_print_info+0x20/0x20 [ 93.945756][ T5944] ? print_circular_bug+0x12b/0x1a0 [ 93.950961][ T5944] check_noncircular+0x2bd/0x3c0 [ 93.955904][ T5944] ? look_up_lock_class+0x75/0x140 [ 93.961112][ T5944] ? print_deadlock_bug+0x5d0/0x5d0 [ 93.966329][ T5944] ? lockdep_lock+0xe0/0x220 [ 93.970927][ T5944] ? _find_first_zero_bit+0xd3/0x100 [ 93.976222][ T5944] __lock_acquire+0x2ddb/0x7c80 [ 93.981170][ T5944] ? mark_lock+0x94/0x320 [ 93.985506][ T5944] ? verify_lock_unused+0x140/0x140 [ 93.990707][ T5944] ? __lock_acquire+0x1334/0x7c80 [ 93.995821][ T5944] ? verify_lock_unused+0x140/0x140 [ 94.001030][ T5944] lock_acquire+0x197/0x410 [ 94.005624][ T5944] ? ext4_writepages+0x170/0x2f0 [ 94.010585][ T5944] ? __might_sleep+0xe0/0xe0 [ 94.015212][ T5944] ? mark_lock+0x94/0x320 [ 94.019556][ T5944] ? read_lock_is_recursive+0x20/0x20 [ 94.024940][ T5944] ? __lock_acquire+0x1334/0x7c80 [ 94.029972][ T5944] percpu_down_read+0x44/0x1a0 [ 94.034746][ T5944] ? ext4_writepages+0x170/0x2f0 [ 94.039696][ T5944] ext4_writepages+0x170/0x2f0 [ 94.044492][ T5944] ? ext4_read_folio+0x2f0/0x2f0 [ 94.049700][ T5944] ? __rwlock_init+0x150/0x150 [ 94.054476][ T5944] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 94.060381][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.065590][ T5944] ? ext4_read_folio+0x2f0/0x2f0 [ 94.070537][ T5944] do_writepages+0x3a2/0x600 [ 94.075143][ T5944] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 94.080959][ T5944] ? writeback_single_inode+0x206/0x720 [ 94.086542][ T5944] ? __lock_acquire+0x7c80/0x7c80 [ 94.091668][ T5944] ? do_raw_spin_lock+0x121/0x2c0 [ 94.096707][ T5944] ? get_tree_bdev+0x3e4/0x510 [ 94.101480][ T5944] __writeback_single_inode+0x153/0xee0 [ 94.107124][ T5944] writeback_single_inode+0x211/0x720 [ 94.112508][ T5944] ? write_inode_now+0x1e0/0x1e0 [ 94.117457][ T5944] write_inode_now+0x161/0x1e0 [ 94.122235][ T5944] ? bdi_split_work_to_wbs+0x890/0x890 [ 94.127704][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.132919][ T5944] iput+0x5b2/0x920 [ 94.136747][ T5944] ext4_xattr_block_set+0x273a/0x32a0 [ 94.142153][ T5944] ? __might_sleep+0xe0/0xe0 [ 94.146761][ T5944] ? xattr_find_entry+0x12b/0x2f0 [ 94.151806][ T5944] ? ext4_xattr_block_find+0x350/0x350 [ 94.157281][ T5944] ? ext4_xattr_block_find+0x2d4/0x350 [ 94.162754][ T5944] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 94.168926][ T5944] __ext4_expand_extra_isize+0x306/0x400 [ 94.174654][ T5944] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 94.180125][ T5944] ext4_evict_inode+0x7ed/0xea0 [ 94.184980][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 94.189839][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.195743][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.200959][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.207035][ T5944] evict+0x486/0x870 [ 94.210944][ T5944] ? __lock_acquire+0x7c80/0x7c80 [ 94.216067][ T5944] ? proc_nr_inodes+0x230/0x230 [ 94.220925][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.226138][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 94.231087][ T5944] ? iput+0x70a/0x920 [ 94.235077][ T5944] ext4_orphan_cleanup+0xbd4/0x1400 [ 94.240287][ T5944] ? ext4_orphan_del+0xba0/0xba0 [ 94.245231][ T5944] ? ext4_register_li_request+0x183/0x940 [ 94.251042][ T5944] ? errseq_check_and_advance+0x66/0x120 [ 94.256679][ T5944] ext4_fill_super+0x5de7/0x66c0 [ 94.261630][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.267965][ T5944] ? vscnprintf+0x80/0x80 [ 94.272298][ T5944] ? down_read_killable+0x340/0x340 [ 94.277508][ T5944] ? setup_bdev_super+0x56b/0x660 [ 94.282539][ T5944] get_tree_bdev+0x3e4/0x510 [ 94.287225][ T5944] ? vfs_parse_fs_string+0x160/0x160 [ 94.292511][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.298754][ T5944] ? setup_bdev_super+0x660/0x660 [ 94.303781][ T5944] ? apparmor_capable+0x137/0x1a0 [ 94.308804][ T5944] ? bpf_lsm_capable+0x9/0x10 [ 94.313487][ T5944] ? security_capable+0x89/0xb0 [ 94.318348][ T5944] vfs_get_tree+0x8c/0x280 [ 94.322773][ T5944] do_new_mount+0x24b/0xa40 [ 94.327282][ T5944] __se_sys_mount+0x2da/0x3c0 [ 94.331969][ T5944] ? __x64_sys_mount+0xc0/0xc0 [ 94.336749][ T5944] ? lockdep_hardirqs_on+0x98/0x150 [ 94.341953][ T5944] ? __x64_sys_mount+0x20/0xc0 [ 94.346718][ T5944] do_syscall_64+0x55/0xb0 [ 94.351149][ T5944] ? clear_bhb_loop+0x40/0x90 [ 94.355824][ T5944] ? clear_bhb_loop+0x40/0x90 [ 94.360504][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.366495][ T5944] RIP: 0033:0x7fa65139034a [ 94.371003][ T5944] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.390611][ T5944] RSP: 002b:00007ffe7f4f89e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.399117][ T5944] RAX: ffffffffffffffda RBX: 00007ffe7f4f8a70 RCX: 00007fa65139034a [ 94.407097][ T5944] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f4f8a30 [ 94.415073][ T5944] RBP: 0000200000000180 R08: 00007ffe7f4f8a70 R09: 0000000000800700 [ 94.423046][ T5944] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 94.431023][ T5944] R13: 00007ffe7f4f8a30 R14: 0000000000000473 R15: 0000200000000680 [ 94.439019][ T5944] [ 94.449549][ T5944] ------------[ cut here ]------------ [ 94.455117][ T5944] EA inode 11 i_nlink=2 [ 94.455387][ T5944] WARNING: CPU: 1 PID: 5944 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580 [ 94.467817][ T5104] Bluetooth: hci0: command tx timeout [ 94.470384][ T5944] Modules linked in: [ 94.479398][ T5944] CPU: 1 PID: 5944 Comm: syz.0.17 Not tainted syzkaller #0 [ 94.486716][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.496822][ T5944] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 94.503529][ T5944] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 94.523213][ T5944] RSP: 0018:ffffc90003247220 EFLAGS: 00010246 [ 94.529325][ T5944] RAX: 5dd776f1e25edc00 RBX: 0000000000000001 RCX: ffff888018be5a00 [ 94.537316][ T5944] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 94.545328][ T5944] RBP: ffffc90003247318 R08: ffffc90003246e27 R09: 1ffff92000648dc4 [ 94.553373][ T5944] R10: dffffc0000000000 R11: fffff52000648dc5 R12: ffff88805e9d8cb0 [ 94.561433][ T5944] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805e9d8d00 [ 94.569816][ T5944] FS: 000055557e533500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 94.578859][ T5944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.585758][ T5944] CR2: 00007f229596e000 CR3: 0000000076f3f000 CR4: 00000000003506e0 [ 94.593810][ T5944] Call Trace: [ 94.597132][ T5944] [ 94.600159][ T5944] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 94.605838][ T5944] ? ext4_xattr_inode_iget+0x3df/0x600 [ 94.611445][ T5944] ext4_xattr_set_entry+0xcda/0x1e90 [ 94.616778][ T5944] ext4_xattr_ibody_set+0x254/0x6a0 [ 94.622043][ T5944] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 94.628011][ T5944] __ext4_expand_extra_isize+0x306/0x400 [ 94.633672][ T5944] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 94.639345][ T5944] ext4_evict_inode+0x7ed/0xea0 [ 94.644234][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 94.649230][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.655155][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.660441][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.666369][ T5944] evict+0x486/0x870 [ 94.670694][ T5944] ? __lock_acquire+0x7c80/0x7c80 [ 94.675741][ T5944] ? proc_nr_inodes+0x230/0x230 [ 94.680682][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 94.685904][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 94.690828][ T5944] ? iput+0x70a/0x920 [ 94.694965][ T5944] ext4_orphan_cleanup+0xbd4/0x1400 [ 94.700241][ T5944] ? ext4_orphan_del+0xba0/0xba0 [ 94.705229][ T5944] ? ext4_register_li_request+0x183/0x940 [ 94.711038][ T5944] ? errseq_check_and_advance+0x66/0x120 [ 94.716793][ T5944] ext4_fill_super+0x5de7/0x66c0 [ 94.721810][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.728146][ T5944] ? vscnprintf+0x80/0x80 [ 94.732502][ T5944] ? down_read_killable+0x340/0x340 [ 94.738092][ T5944] ? setup_bdev_super+0x56b/0x660 [ 94.743136][ T5944] get_tree_bdev+0x3e4/0x510 [ 94.747884][ T5944] ? vfs_parse_fs_string+0x160/0x160 [ 94.753185][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.759460][ T5944] ? setup_bdev_super+0x660/0x660 [ 94.764515][ T5944] ? apparmor_capable+0x137/0x1a0 [ 94.769571][ T5944] ? bpf_lsm_capable+0x9/0x10 [ 94.774505][ T5944] ? security_capable+0x89/0xb0 [ 94.779510][ T5944] vfs_get_tree+0x8c/0x280 [ 94.783963][ T5944] do_new_mount+0x24b/0xa40 [ 94.788603][ T5944] __se_sys_mount+0x2da/0x3c0 [ 94.793293][ T5944] ? __x64_sys_mount+0xc0/0xc0 [ 94.798097][ T5944] ? lockdep_hardirqs_on+0x98/0x150 [ 94.803579][ T5944] ? __x64_sys_mount+0x20/0xc0 [ 94.808379][ T5944] do_syscall_64+0x55/0xb0 [ 94.812904][ T5944] ? clear_bhb_loop+0x40/0x90 [ 94.817708][ T5944] ? clear_bhb_loop+0x40/0x90 [ 94.822414][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.828387][ T5944] RIP: 0033:0x7fa65139034a [ 94.832828][ T5944] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.852687][ T5944] RSP: 002b:00007ffe7f4f89e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.861139][ T5944] RAX: ffffffffffffffda RBX: 00007ffe7f4f8a70 RCX: 00007fa65139034a [ 94.869138][ T5944] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f4f8a30 [ 94.877352][ T5944] RBP: 0000200000000180 R08: 00007ffe7f4f8a70 R09: 0000000000800700 [ 94.885496][ T5944] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 94.893536][ T5944] R13: 00007ffe7f4f8a30 R14: 0000000000000473 R15: 0000200000000680 [ 94.901663][ T5944] [ 94.904713][ T5944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.911983][ T5944] CPU: 1 PID: 5944 Comm: syz.0.17 Not tainted syzkaller #0 [ 94.919170][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.929215][ T5944] Call Trace: [ 94.932500][ T5944] [ 94.935443][ T5944] dump_stack_lvl+0x16c/0x230 [ 94.940120][ T5944] ? show_regs_print_info+0x20/0x20 [ 94.945320][ T5944] ? load_image+0x3b0/0x3b0 [ 94.949924][ T5944] panic+0x2c0/0x710 [ 94.953825][ T5944] ? bpf_jit_dump+0xd0/0xd0 [ 94.958340][ T5944] __warn+0x2e0/0x470 [ 94.962352][ T5944] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 94.968453][ T5944] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 94.974543][ T5944] report_bug+0x2be/0x4f0 [ 94.978884][ T5944] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 94.984871][ T5944] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 94.990855][ T5944] ? ext4_xattr_inode_update_ref+0x523/0x580 [ 94.996926][ T5944] handle_bug+0xcf/0x120 [ 95.001178][ T5944] exc_invalid_op+0x1a/0x50 [ 95.005691][ T5944] asm_exc_invalid_op+0x1a/0x20 [ 95.010544][ T5944] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 95.017146][ T5944] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 95.036856][ T5944] RSP: 0018:ffffc90003247220 EFLAGS: 00010246 [ 95.042930][ T5944] RAX: 5dd776f1e25edc00 RBX: 0000000000000001 RCX: ffff888018be5a00 [ 95.051002][ T5944] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 95.059073][ T5944] RBP: ffffc90003247318 R08: ffffc90003246e27 R09: 1ffff92000648dc4 [ 95.067047][ T5944] R10: dffffc0000000000 R11: fffff52000648dc5 R12: ffff88805e9d8cb0 [ 95.075022][ T5944] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805e9d8d00 [ 95.083014][ T5944] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 95.088672][ T5944] ? ext4_xattr_inode_iget+0x3df/0x600 [ 95.094143][ T5944] ext4_xattr_set_entry+0xcda/0x1e90 [ 95.099451][ T5944] ext4_xattr_ibody_set+0x254/0x6a0 [ 95.104658][ T5944] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 95.110569][ T5944] __ext4_expand_extra_isize+0x306/0x400 [ 95.116210][ T5944] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 95.121682][ T5944] ext4_evict_inode+0x7ed/0xea0 [ 95.126536][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 95.131421][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 95.137411][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 95.142645][ T5944] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 95.148643][ T5944] evict+0x486/0x870 [ 95.152556][ T5944] ? __lock_acquire+0x7c80/0x7c80 [ 95.157585][ T5944] ? proc_nr_inodes+0x230/0x230 [ 95.162482][ T5944] ? do_raw_spin_unlock+0x121/0x230 [ 95.167703][ T5944] ? _raw_spin_unlock+0x28/0x40 [ 95.172558][ T5944] ? iput+0x70a/0x920 [ 95.176563][ T5944] ext4_orphan_cleanup+0xbd4/0x1400 [ 95.181949][ T5944] ? ext4_orphan_del+0xba0/0xba0 [ 95.186896][ T5944] ? ext4_register_li_request+0x183/0x940 [ 95.192623][ T5944] ? errseq_check_and_advance+0x66/0x120 [ 95.198270][ T5944] ext4_fill_super+0x5de7/0x66c0 [ 95.203242][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 95.209492][ T5944] ? vscnprintf+0x80/0x80 [ 95.213833][ T5944] ? down_read_killable+0x340/0x340 [ 95.219044][ T5944] ? setup_bdev_super+0x56b/0x660 [ 95.224074][ T5944] get_tree_bdev+0x3e4/0x510 [ 95.228666][ T5944] ? vfs_parse_fs_string+0x160/0x160 [ 95.233954][ T5944] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 95.240283][ T5944] ? setup_bdev_super+0x660/0x660 [ 95.245310][ T5944] ? apparmor_capable+0x137/0x1a0 [ 95.250341][ T5944] ? bpf_lsm_capable+0x9/0x10 [ 95.255026][ T5944] ? security_capable+0x89/0xb0 [ 95.259880][ T5944] vfs_get_tree+0x8c/0x280 [ 95.264304][ T5944] do_new_mount+0x24b/0xa40 [ 95.268826][ T5944] __se_sys_mount+0x2da/0x3c0 [ 95.273505][ T5944] ? __x64_sys_mount+0xc0/0xc0 [ 95.278267][ T5944] ? lockdep_hardirqs_on+0x98/0x150 [ 95.283471][ T5944] ? __x64_sys_mount+0x20/0xc0 [ 95.288243][ T5944] do_syscall_64+0x55/0xb0 [ 95.292664][ T5944] ? clear_bhb_loop+0x40/0x90 [ 95.297380][ T5944] ? clear_bhb_loop+0x40/0x90 [ 95.302074][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.307982][ T5944] RIP: 0033:0x7fa65139034a [ 95.312402][ T5944] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.332019][ T5944] RSP: 002b:00007ffe7f4f89e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.340474][ T5944] RAX: ffffffffffffffda RBX: 00007ffe7f4f8a70 RCX: 00007fa65139034a [ 95.348447][ T5944] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe7f4f8a30 [ 95.356519][ T5944] RBP: 0000200000000180 R08: 00007ffe7f4f8a70 R09: 0000000000800700 [ 95.364491][ T5944] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 95.372463][ T5944] R13: 00007ffe7f4f8a30 R14: 0000000000000473 R15: 0000200000000680 [ 95.380442][ T5944] [ 95.383788][ T5944] Kernel Offset: disabled [ 95.388103][ T5944] Rebooting in 86400 seconds..