Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. 2025/09/10 23:45:36 parsed 1 programs [ 101.459908][ T5850] cgroup: Unknown subsys name 'net' [ 101.722407][ T5850] cgroup: Unknown subsys name 'cpuset' [ 101.777690][ T5850] cgroup: Unknown subsys name 'rlimit' [ 103.811125][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.671155][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.672429][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.673073][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.674724][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.675969][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.981941][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.981966][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.035761][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.035785][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.344363][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 114.807807][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.809445][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.809585][ T5927] bridge_slave_0: entered allmulticast mode [ 114.811467][ T5927] bridge_slave_0: entered promiscuous mode [ 114.847692][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.847952][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.848157][ T5927] bridge_slave_1: entered allmulticast mode [ 114.851630][ T5927] bridge_slave_1: entered promiscuous mode [ 115.044211][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.054226][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.210354][ T5927] team0: Port device team_slave_0 added [ 115.212897][ T5927] team0: Port device team_slave_1 added [ 115.490036][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.490050][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.490066][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.492969][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.492983][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.493006][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.706104][ T5927] hsr_slave_0: entered promiscuous mode [ 115.707892][ T5927] hsr_slave_1: entered promiscuous mode [ 116.120821][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.167390][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.191705][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.232343][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.389151][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.478007][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.485690][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.486451][ T4197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.508502][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.508804][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.785065][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.850879][ T5927] veth0_vlan: entered promiscuous mode [ 116.862025][ T5927] veth1_vlan: entered promiscuous mode [ 116.895741][ T5927] veth0_macvtap: entered promiscuous mode [ 116.906373][ T5927] veth1_macvtap: entered promiscuous mode [ 116.931438][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.946349][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.963437][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.964899][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.964956][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.964995][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.754270][ T158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.024726][ T158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.283788][ T158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/10 23:45:56 executed programs: 0 [ 118.563815][ T158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.652351][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.654302][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.655231][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.656537][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.664856][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.954987][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 119.280086][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.280262][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.280395][ T5953] bridge_slave_0: entered allmulticast mode [ 119.282137][ T5953] bridge_slave_0: entered promiscuous mode [ 119.286193][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.286291][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.286405][ T5953] bridge_slave_1: entered allmulticast mode [ 119.289326][ T5953] bridge_slave_1: entered promiscuous mode [ 119.463122][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.468167][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.635961][ T5953] team0: Port device team_slave_0 added [ 119.639998][ T5953] team0: Port device team_slave_1 added [ 119.940253][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.940271][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.940299][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.971483][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.971501][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.971526][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.240236][ T5953] hsr_slave_0: entered promiscuous mode [ 120.241748][ T5953] hsr_slave_1: entered promiscuous mode [ 120.243025][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 120.243093][ T5953] Cannot create hsr debugfs directory [ 120.365036][ T158] bridge_slave_1: left allmulticast mode [ 120.365234][ T158] bridge_slave_1: left promiscuous mode [ 120.376954][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.470288][ T158] bridge_slave_0: left allmulticast mode [ 120.470327][ T158] bridge_slave_0: left promiscuous mode [ 120.470615][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.755441][ T59] Bluetooth: hci0: command tx timeout [ 122.157979][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.219244][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.260380][ T158] bond0 (unregistering): Released all slaves [ 122.597212][ T158] hsr_slave_0: left promiscuous mode [ 122.637279][ T158] hsr_slave_1: left promiscuous mode [ 122.638528][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.638669][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.669062][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.669096][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.762672][ T158] veth1_macvtap: left promiscuous mode [ 122.762856][ T158] veth0_macvtap: left promiscuous mode [ 122.763067][ T158] veth1_vlan: left promiscuous mode [ 122.763281][ T158] veth0_vlan: left promiscuous mode [ 122.827255][ T59] Bluetooth: hci0: command tx timeout [ 124.827729][ T158] team0 (unregistering): Port device team_slave_1 removed [ 124.912387][ T59] Bluetooth: hci0: command tx timeout [ 125.039084][ T158] team0 (unregistering): Port device team_slave_0 removed [ 126.987080][ T59] Bluetooth: hci0: command tx timeout [ 128.512500][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.637982][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.685867][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.758425][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.015073][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.063436][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.099994][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.100134][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.102471][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.102596][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.456283][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.532434][ T5953] veth0_vlan: entered promiscuous mode [ 129.545706][ T5953] veth1_vlan: entered promiscuous mode [ 129.582118][ T5953] veth0_macvtap: entered promiscuous mode [ 129.586434][ T5953] veth1_macvtap: entered promiscuous mode [ 129.624895][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.640338][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.653418][ T1497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.665432][ T1497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666168][ T1497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666215][ T1497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.894162][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.894185][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.960644][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.960667][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/10 23:46:07 executed programs: 2 [ 130.126147][ T6030] loop0: detected capacity change from 0 to 512 [ 130.220175][ T6030] [ 130.220189][ T6030] ====================================================== [ 130.220197][ T6030] WARNING: possible circular locking dependency detected [ 130.220206][ T6030] syzkaller #0 Not tainted [ 130.220217][ T6030] ------------------------------------------------------ [ 130.220225][ T6030] syz.0.17/6030 is trying to acquire lock: [ 130.220237][ T6030] ffff88803b502c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 130.220290][ T6030] [ 130.220290][ T6030] but task is already holding lock: [ 130.220297][ T6030] ffff888056cb53a0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 130.220345][ T6030] [ 130.220345][ T6030] which lock already depends on the new lock. [ 130.220345][ T6030] [ 130.220352][ T6030] [ 130.220352][ T6030] the existing dependency chain (in reverse order) is: [ 130.220359][ T6030] [ 130.220359][ T6030] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 130.220384][ T6030] lock_acquire+0x120/0x360 [ 130.220409][ T6030] down_write+0x3a/0x50 [ 130.220427][ T6030] ext4_xattr_set_handle+0x165/0x1590 [ 130.220452][ T6030] ext4_initxattrs+0x9f/0x110 [ 130.220471][ T6030] security_inode_init_security+0x29d/0x3f0 [ 130.220489][ T6030] __ext4_new_inode+0x3314/0x3cb0 [ 130.220517][ T6030] ext4_create+0x22d/0x460 [ 130.220537][ T6030] path_openat+0x14fd/0x3840 [ 130.220558][ T6030] do_filp_open+0x1fa/0x410 [ 130.220578][ T6030] do_sys_openat2+0x121/0x1c0 [ 130.220596][ T6030] __x64_sys_openat+0x138/0x170 [ 130.220623][ T6030] do_syscall_64+0xfa/0x3b0 [ 130.220638][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.220656][ T6030] [ 130.220656][ T6030] -> #1 (jbd2_handle){++++}-{0:0}: [ 130.220683][ T6030] lock_acquire+0x120/0x360 [ 130.220705][ T6030] start_this_handle+0x1fa7/0x21c0 [ 130.220725][ T6030] jbd2__journal_start+0x2c1/0x5b0 [ 130.220746][ T6030] __ext4_journal_start_sb+0x227/0x5c0 [ 130.220770][ T6030] ext4_do_writepages+0xf6f/0x4600 [ 130.220790][ T6030] ext4_writepages+0x205/0x350 [ 130.220800][ T6030] do_writepages+0x32b/0x550 [ 130.220813][ T6030] __writeback_single_inode+0x145/0x1000 [ 130.220826][ T6030] writeback_sb_inodes+0x6b7/0xf60 [ 130.220838][ T6030] __writeback_inodes_wb+0x111/0x240 [ 130.220851][ T6030] wb_writeback+0x44f/0xaf0 [ 130.220862][ T6030] wb_workfn+0xaf4/0xf00 [ 130.220871][ T6030] process_scheduled_works+0xade/0x17b0 [ 130.220884][ T6030] worker_thread+0x8a0/0xda0 [ 130.220897][ T6030] kthread+0x70e/0x8a0 [ 130.220913][ T6030] ret_from_fork+0x3f9/0x770 [ 130.220926][ T6030] ret_from_fork_asm+0x1a/0x30 [ 130.220937][ T6030] [ 130.220937][ T6030] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 130.220954][ T6030] validate_chain+0xb9b/0x2140 [ 130.220970][ T6030] __lock_acquire+0xab9/0xd20 [ 130.220983][ T6030] lock_acquire+0x120/0x360 [ 130.220997][ T6030] percpu_down_read_internal+0x48/0x1d0 [ 130.221013][ T6030] ext4_writepages+0x1cc/0x350 [ 130.221022][ T6030] do_writepages+0x32b/0x550 [ 130.221035][ T6030] __writeback_single_inode+0x145/0x1000 [ 130.221047][ T6030] writeback_single_inode+0x1d5/0x640 [ 130.221058][ T6030] write_inode_now+0x160/0x1d0 [ 130.221067][ T6030] iput+0x5b9/0x9d0 [ 130.221082][ T6030] ext4_xattr_block_set+0x1fce/0x2ac0 [ 130.221097][ T6030] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 130.221113][ T6030] __ext4_expand_extra_isize+0x30d/0x400 [ 130.221129][ T6030] __ext4_mark_inode_dirty+0x46c/0x700 [ 130.221141][ T6030] ext4_evict_inode+0x80d/0xee0 [ 130.221152][ T6030] evict+0x504/0x9c0 [ 130.221162][ T6030] ext4_orphan_cleanup+0xc20/0x1460 [ 130.221173][ T6030] ext4_fill_super+0x57fa/0x60b0 [ 130.221189][ T6030] get_tree_bdev_flags+0x40e/0x4d0 [ 130.221203][ T6030] vfs_get_tree+0x8f/0x2b0 [ 130.221216][ T6030] do_new_mount+0x2a2/0x9e0 [ 130.221230][ T6030] __se_sys_mount+0x317/0x410 [ 130.221245][ T6030] do_syscall_64+0xfa/0x3b0 [ 130.221254][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.221264][ T6030] [ 130.221264][ T6030] other info that might help us debug this: [ 130.221264][ T6030] [ 130.221268][ T6030] Chain exists of: [ 130.221268][ T6030] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 130.221268][ T6030] [ 130.221286][ T6030] Possible unsafe locking scenario: [ 130.221286][ T6030] [ 130.221290][ T6030] CPU0 CPU1 [ 130.221293][ T6030] ---- ---- [ 130.221296][ T6030] lock(&ei->xattr_sem); [ 130.221304][ T6030] lock(jbd2_handle); [ 130.221312][ T6030] lock(&ei->xattr_sem); [ 130.221320][ T6030] rlock(&sbi->s_writepages_rwsem); [ 130.221327][ T6030] [ 130.221327][ T6030] *** DEADLOCK *** [ 130.221327][ T6030] [ 130.221330][ T6030] 3 locks held by syz.0.17/6030: [ 130.221337][ T6030] #0: ffff88803b5060d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 130.221371][ T6030] #1: ffff88803b506778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 130.221398][ T6030] #2: ffff888056cb53a0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 130.221426][ T6030] [ 130.221426][ T6030] stack backtrace: [ 130.221434][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.221448][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.221456][ T6030] Call Trace: [ 130.221461][ T6030] [ 130.221466][ T6030] dump_stack_lvl+0x189/0x250 [ 130.221485][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.221502][ T6030] ? __pfx__printk+0x10/0x10 [ 130.221514][ T6030] ? print_lock_name+0xde/0x100 [ 130.221526][ T6030] print_circular_bug+0x2ee/0x310 [ 130.221538][ T6030] check_noncircular+0x134/0x160 [ 130.221557][ T6030] validate_chain+0xb9b/0x2140 [ 130.221577][ T6030] ? look_up_lock_class+0x74/0x170 [ 130.221594][ T6030] ? register_lock_class+0x51/0x320 [ 130.221618][ T6030] __lock_acquire+0xab9/0xd20 [ 130.221634][ T6030] ? ext4_writepages+0x1cc/0x350 [ 130.221644][ T6030] lock_acquire+0x120/0x360 [ 130.221659][ T6030] ? ext4_writepages+0x1cc/0x350 [ 130.221670][ T6030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 130.221687][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.221705][ T6030] percpu_down_read_internal+0x48/0x1d0 [ 130.221723][ T6030] ? ext4_writepages+0x1cc/0x350 [ 130.221733][ T6030] ext4_writepages+0x1cc/0x350 [ 130.221744][ T6030] ? __pfx_ext4_writepages+0x10/0x10 [ 130.221754][ T6030] ? rt_mutex_slowunlock+0x493/0x8a0 [ 130.221772][ T6030] ? __pfx_ext4_writepages+0x10/0x10 [ 130.221782][ T6030] do_writepages+0x32b/0x550 [ 130.221797][ T6030] ? reacquire_held_locks+0x127/0x1d0 [ 130.221814][ T6030] ? rt_spin_lock+0x1bb/0x2c0 [ 130.221827][ T6030] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 130.221842][ T6030] __writeback_single_inode+0x145/0x1000 [ 130.221858][ T6030] writeback_single_inode+0x1d5/0x640 [ 130.221871][ T6030] write_inode_now+0x160/0x1d0 [ 130.221882][ T6030] ? __pfx_write_inode_now+0x10/0x10 [ 130.221900][ T6030] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 130.221916][ T6030] ? rt_spin_unlock+0x65/0x80 [ 130.221931][ T6030] iput+0x5b9/0x9d0 [ 130.221948][ T6030] ext4_xattr_block_set+0x1fce/0x2ac0 [ 130.221971][ T6030] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 130.221987][ T6030] ? ext4_xattr_block_find+0x2d4/0x350 [ 130.222004][ T6030] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 130.222027][ T6030] __ext4_expand_extra_isize+0x30d/0x400 [ 130.222046][ T6030] __ext4_mark_inode_dirty+0x46c/0x700 [ 130.222061][ T6030] ext4_evict_inode+0x80d/0xee0 [ 130.222076][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.222090][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.222102][ T6030] evict+0x504/0x9c0 [ 130.222116][ T6030] ? __pfx_evict+0x10/0x10 [ 130.222129][ T6030] ? iput+0x6d8/0x9d0 [ 130.222146][ T6030] ext4_orphan_cleanup+0xc20/0x1460 [ 130.222161][ T6030] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 130.222173][ T6030] ? ext4_register_li_request+0x640/0x720 [ 130.222185][ T6030] ? errseq_check_and_advance+0x66/0x120 [ 130.222201][ T6030] ext4_fill_super+0x57fa/0x60b0 [ 130.222223][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.222239][ T6030] ? set_blocksize+0x219/0x450 [ 130.222251][ T6030] ? sb_set_blocksize+0x104/0x180 [ 130.222263][ T6030] ? setup_bdev_super+0x4c1/0x5b0 [ 130.222278][ T6030] get_tree_bdev_flags+0x40e/0x4d0 [ 130.222292][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.222309][ T6030] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.222324][ T6030] ? cap_capable+0x11f/0x460 [ 130.222337][ T6030] ? safesetid_security_capable+0xa9/0x1a0 [ 130.222353][ T6030] vfs_get_tree+0x8f/0x2b0 [ 130.222367][ T6030] do_new_mount+0x2a2/0x9e0 [ 130.222384][ T6030] ? ns_capable+0x8a/0xf0 [ 130.222398][ T6030] ? __pfx_do_new_mount+0x10/0x10 [ 130.222413][ T6030] ? path_mount+0x61c/0xfe0 [ 130.222430][ T6030] __se_sys_mount+0x317/0x410 [ 130.222448][ T6030] ? __pfx___se_sys_mount+0x10/0x10 [ 130.222465][ T6030] ? do_syscall_64+0xbe/0x3b0 [ 130.222475][ T6030] ? __x64_sys_mount+0x20/0xc0 [ 130.222492][ T6030] do_syscall_64+0xfa/0x3b0 [ 130.222501][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.222518][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.222530][ T6030] ? clear_bhb_loop+0x60/0xb0 [ 130.222542][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.222553][ T6030] RIP: 0033:0x7f20cd9e034a [ 130.222566][ T6030] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.222576][ T6030] RSP: 002b:00007ffe838432c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.222589][ T6030] RAX: ffffffffffffffda RBX: 00007ffe83843350 RCX: 00007f20cd9e034a [ 130.222598][ T6030] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe83843310 [ 130.222611][ T6030] RBP: 0000200000000180 R08: 00007ffe83843350 R09: 0000000000800700 [ 130.222619][ T6030] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 130.222626][ T6030] R13: 00007ffe83843310 R14: 0000000000000473 R15: 0000200000000680 [ 130.222638][ T6030] [ 130.222982][ T6030] ------------[ cut here ]------------ [ 130.222988][ T6030] EA inode 11 i_nlink=2 [ 130.223124][ T6030] WARNING: CPU: 0 PID: 6030 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.223150][ T6030] Modules linked in: [ 130.223160][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.223174][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.223180][ T6030] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.223198][ T6030] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 9d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 24 3c [ 130.223208][ T6030] RSP: 0018:ffffc90004daf1a0 EFLAGS: 00010246 [ 130.223218][ T6030] RAX: 94cbfabb37e47e00 RBX: dffffc0000000000 RCX: ffff88803521d940 [ 130.223227][ T6030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.223234][ T6030] RBP: ffffc90004daf298 R08: 0000000000000000 R09: 0000000000000000 [ 130.223242][ T6030] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888056e51b30 [ 130.223250][ T6030] R13: 1ffff1100adca366 R14: 00000000ffffffff R15: 000000000000000b [ 130.223259][ T6030] FS: 0000555582ebf500(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 130.223269][ T6030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.223278][ T6030] CR2: 00007f1ab42299c0 CR3: 000000003a890000 CR4: 00000000003526f0 [ 130.223290][ T6030] Call Trace: [ 130.223295][ T6030] [ 130.223299][ T6030] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 130.223314][ T6030] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 130.223332][ T6030] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 130.223350][ T6030] ext4_xattr_set_entry+0xabb/0x1e20 [ 130.223370][ T6030] ext4_xattr_ibody_set+0x254/0x6a0 [ 130.223388][ T6030] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 130.223412][ T6030] __ext4_expand_extra_isize+0x30d/0x400 [ 130.223430][ T6030] __ext4_mark_inode_dirty+0x46c/0x700 [ 130.223446][ T6030] ext4_evict_inode+0x80d/0xee0 [ 130.223461][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.223475][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.223487][ T6030] evict+0x504/0x9c0 [ 130.223501][ T6030] ? __pfx_evict+0x10/0x10 [ 130.223514][ T6030] ? iput+0x6d8/0x9d0 [ 130.223532][ T6030] ext4_orphan_cleanup+0xc20/0x1460 [ 130.223546][ T6030] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 130.223559][ T6030] ? ext4_register_li_request+0x640/0x720 [ 130.223571][ T6030] ? errseq_check_and_advance+0x66/0x120 [ 130.223587][ T6030] ext4_fill_super+0x57fa/0x60b0 [ 130.223621][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.223638][ T6030] ? set_blocksize+0x219/0x450 [ 130.223650][ T6030] ? sb_set_blocksize+0x104/0x180 [ 130.223662][ T6030] ? setup_bdev_super+0x4c1/0x5b0 [ 130.223677][ T6030] get_tree_bdev_flags+0x40e/0x4d0 [ 130.223692][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.223709][ T6030] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.223724][ T6030] ? cap_capable+0x11f/0x460 [ 130.223737][ T6030] ? safesetid_security_capable+0xa9/0x1a0 [ 130.223752][ T6030] vfs_get_tree+0x8f/0x2b0 [ 130.223767][ T6030] do_new_mount+0x2a2/0x9e0 [ 130.223784][ T6030] ? ns_capable+0x8a/0xf0 [ 130.223798][ T6030] ? __pfx_do_new_mount+0x10/0x10 [ 130.223813][ T6030] ? path_mount+0x61c/0xfe0 [ 130.223830][ T6030] __se_sys_mount+0x317/0x410 [ 130.223847][ T6030] ? __pfx___se_sys_mount+0x10/0x10 [ 130.223865][ T6030] ? do_syscall_64+0xbe/0x3b0 [ 130.223875][ T6030] ? __x64_sys_mount+0x20/0xc0 [ 130.223891][ T6030] do_syscall_64+0xfa/0x3b0 [ 130.223901][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.223917][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.223929][ T6030] ? clear_bhb_loop+0x60/0xb0 [ 130.223942][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.223953][ T6030] RIP: 0033:0x7f20cd9e034a [ 130.223962][ T6030] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.223971][ T6030] RSP: 002b:00007ffe838432c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.223983][ T6030] RAX: ffffffffffffffda RBX: 00007ffe83843350 RCX: 00007f20cd9e034a [ 130.223992][ T6030] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe83843310 [ 130.223999][ T6030] RBP: 0000200000000180 R08: 00007ffe83843350 R09: 0000000000800700 [ 130.224007][ T6030] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 130.224015][ T6030] R13: 00007ffe83843310 R14: 0000000000000473 R15: 0000200000000680 [ 130.224026][ T6030] [ 130.224033][ T6030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.224041][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.224055][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.224061][ T6030] Call Trace: [ 130.224066][ T6030] [ 130.224070][ T6030] dump_stack_lvl+0x99/0x250 [ 130.224087][ T6030] ? __asan_memcpy+0x40/0x70 [ 130.224099][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.224116][ T6030] ? __pfx__printk+0x10/0x10 [ 130.224130][ T6030] vpanic+0x281/0x750 [ 130.224147][ T6030] ? __pfx__printk+0x10/0x10 [ 130.224159][ T6030] ? __pfx_vpanic+0x10/0x10 [ 130.224176][ T6030] ? is_bpf_text_address+0x26/0x2b0 [ 130.224194][ T6030] panic+0xb9/0xc0 [ 130.224210][ T6030] ? __pfx_panic+0x10/0x10 [ 130.224230][ T6030] __warn+0x31b/0x4b0 [ 130.224246][ T6030] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.224265][ T6030] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.224282][ T6030] report_bug+0x2be/0x4f0 [ 130.224298][ T6030] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.224315][ T6030] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.224332][ T6030] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 130.224349][ T6030] handle_bug+0x84/0x160 [ 130.224361][ T6030] exc_invalid_op+0x1a/0x50 [ 130.224373][ T6030] asm_exc_invalid_op+0x1a/0x20 [ 130.224384][ T6030] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 130.224401][ T6030] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 9d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 24 3c [ 130.224411][ T6030] RSP: 0018:ffffc90004daf1a0 EFLAGS: 00010246 [ 130.224421][ T6030] RAX: 94cbfabb37e47e00 RBX: dffffc0000000000 RCX: ffff88803521d940 [ 130.224430][ T6030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.224437][ T6030] RBP: ffffc90004daf298 R08: 0000000000000000 R09: 0000000000000000 [ 130.224444][ T6030] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888056e51b30 [ 130.224453][ T6030] R13: 1ffff1100adca366 R14: 00000000ffffffff R15: 000000000000000b [ 130.224465][ T6030] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 130.224479][ T6030] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 130.224497][ T6030] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 130.224515][ T6030] ext4_xattr_set_entry+0xabb/0x1e20 [ 130.224536][ T6030] ext4_xattr_ibody_set+0x254/0x6a0 [ 130.224553][ T6030] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 130.224577][ T6030] __ext4_expand_extra_isize+0x30d/0x400 [ 130.224597][ T6030] __ext4_mark_inode_dirty+0x46c/0x700 [ 130.224619][ T6030] ext4_evict_inode+0x80d/0xee0 [ 130.224634][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.224648][ T6030] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.224661][ T6030] evict+0x504/0x9c0 [ 130.224675][ T6030] ? __pfx_evict+0x10/0x10 [ 130.224688][ T6030] ? iput+0x6d8/0x9d0 [ 130.224705][ T6030] ext4_orphan_cleanup+0xc20/0x1460 [ 130.224720][ T6030] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 130.224733][ T6030] ? ext4_register_li_request+0x640/0x720 [ 130.224745][ T6030] ? errseq_check_and_advance+0x66/0x120 [ 130.224761][ T6030] ext4_fill_super+0x57fa/0x60b0 [ 130.224783][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.224800][ T6030] ? set_blocksize+0x219/0x450 [ 130.224813][ T6030] ? sb_set_blocksize+0x104/0x180 [ 130.224825][ T6030] ? setup_bdev_super+0x4c1/0x5b0 [ 130.224839][ T6030] get_tree_bdev_flags+0x40e/0x4d0 [ 130.224854][ T6030] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.224871][ T6030] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.224887][ T6030] ? cap_capable+0x11f/0x460 [ 130.224900][ T6030] ? safesetid_security_capable+0xa9/0x1a0 [ 130.224915][ T6030] vfs_get_tree+0x8f/0x2b0 [ 130.224930][ T6030] do_new_mount+0x2a2/0x9e0 [ 130.224947][ T6030] ? ns_capable+0x8a/0xf0 [ 130.224961][ T6030] ? __pfx_do_new_mount+0x10/0x10 [ 130.224976][ T6030] ? path_mount+0x61c/0xfe0 [ 130.224994][ T6030] __se_sys_mount+0x317/0x410 [ 130.225012][ T6030] ? __pfx___se_sys_mount+0x10/0x10 [ 130.225029][ T6030] ? do_syscall_64+0xbe/0x3b0 [ 130.225039][ T6030] ? __x64_sys_mount+0x20/0xc0 [ 130.225055][ T6030] do_syscall_64+0xfa/0x3b0 [ 130.225065][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.225081][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.225093][ T6030] ? clear_bhb_loop+0x60/0xb0 [ 130.225106][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.225117][ T6030] RIP: 0033:0x7f20cd9e034a [ 130.225126][ T6030] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.225135][ T6030] RSP: 002b:00007ffe838432c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.225146][ T6030] RAX: ffffffffffffffda RBX: 00007ffe83843350 RCX: 00007f20cd9e034a [ 130.225155][ T6030] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe83843310 [ 130.225163][ T6030] RBP: 0000200000000180 R08: 00007ffe83843350 R09: 0000000000800700 [ 130.225171][ T6030] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 130.225178][ T6030] R13: 00007ffe83843310 R14: 0000000000000473 R15: 0000200000000680 [ 130.225190][ T6030] [ 130.225359][ T6030] Kernel Offset: disabled