[ 101.524768][ T932] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 2025/10/25 01:31:41 parsed 1 programs [ 111.308126][ T5835] cgroup: Unknown subsys name 'net' [ 111.428003][ T5835] cgroup: Unknown subsys name 'cpuset' [ 111.437945][ T5835] cgroup: Unknown subsys name 'rlimit' [ 113.210584][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.004360][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 116.101711][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.109047][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.116799][ T5842] bridge_slave_0: entered allmulticast mode [ 116.124477][ T5842] bridge_slave_0: entered promiscuous mode [ 116.134458][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.142140][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.149467][ T5842] bridge_slave_1: entered allmulticast mode [ 116.157178][ T5842] bridge_slave_1: entered promiscuous mode [ 116.196487][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.209205][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.250295][ T5842] team0: Port device team_slave_0 added [ 116.259578][ T5842] team0: Port device team_slave_1 added [ 116.295345][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.302337][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.328538][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.342037][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.349052][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.375173][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.432118][ T5842] hsr_slave_0: entered promiscuous mode [ 116.438940][ T5842] hsr_slave_1: entered promiscuous mode [ 116.623218][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.636015][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.647385][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.659509][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.700097][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.707354][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.715545][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.722689][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.791076][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.810669][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.819590][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.838326][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.853691][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.860832][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.877350][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.884507][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.131475][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.180900][ T5842] veth0_vlan: entered promiscuous mode [ 117.195536][ T5842] veth1_vlan: entered promiscuous mode [ 117.229444][ T5842] veth0_macvtap: entered promiscuous mode [ 117.240282][ T5842] veth1_macvtap: entered promiscuous mode [ 117.261091][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.278924][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.296796][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.308365][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.318505][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.327782][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.408241][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.599831][ T1312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.679892][ T1312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.790185][ T1312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.873755][ T1312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.919684][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.928700][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.936955][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.945722][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.954733][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.297118][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.305477][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.340824][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.348928][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.478428][ T1312] bridge_slave_1: left allmulticast mode [ 120.491891][ T1312] bridge_slave_1: left promiscuous mode [ 120.509864][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.536398][ T1312] bridge_slave_0: left allmulticast mode [ 120.542091][ T1312] bridge_slave_0: left promiscuous mode [ 120.550063][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.777258][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.788912][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.799137][ T1312] bond0 (unregistering): Released all slaves [ 120.946835][ T1312] hsr_slave_0: left promiscuous mode [ 120.972800][ T1312] hsr_slave_1: left promiscuous mode [ 120.997923][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.013849][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.034755][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.045966][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.069915][ T1312] veth1_macvtap: left promiscuous mode [ 121.075655][ T1312] veth0_macvtap: left promiscuous mode [ 121.081332][ T1312] veth1_vlan: left promiscuous mode [ 121.087874][ T1312] veth0_vlan: left promiscuous mode [ 121.729223][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 121.818422][ T1312] team0 (unregistering): Port device team_slave_0 removed 2025/10/25 01:32:01 executed programs: 0 [ 125.459226][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.470879][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.478801][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.496584][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.504417][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.816046][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 125.910263][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.917711][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.925694][ T5997] bridge_slave_0: entered allmulticast mode [ 125.934445][ T5997] bridge_slave_0: entered promiscuous mode [ 125.943138][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.950272][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.957504][ T5997] bridge_slave_1: entered allmulticast mode [ 125.965218][ T5997] bridge_slave_1: entered promiscuous mode [ 126.002963][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.015910][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.061465][ T5997] team0: Port device team_slave_0 added [ 126.070134][ T5997] team0: Port device team_slave_1 added [ 126.107788][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.114807][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.141424][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.155535][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.162580][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.188529][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.243286][ T5997] hsr_slave_0: entered promiscuous mode [ 126.249939][ T5997] hsr_slave_1: entered promiscuous mode [ 126.796223][ T5997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.817842][ T5997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.831367][ T5997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.847233][ T5997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.007363][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.039319][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.055596][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.062787][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.086293][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.093467][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.428707][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.496760][ T5997] veth0_vlan: entered promiscuous mode [ 127.515116][ T5997] veth1_vlan: entered promiscuous mode [ 127.527464][ T52] Bluetooth: hci0: command tx timeout [ 127.558404][ T5997] veth0_macvtap: entered promiscuous mode [ 127.571445][ T5997] veth1_macvtap: entered promiscuous mode [ 127.599412][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.617078][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.635000][ T1312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.658577][ T1312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.678385][ T1312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.689534][ T1312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.773639][ T4781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.788926][ T4781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.830509][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.838541][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.954918][ T6049] loop0: detected capacity change from 0 to 512 [ 128.026460][ T6049] [ 128.028843][ T6049] ====================================================== [ 128.035860][ T6049] WARNING: possible circular locking dependency detected [ 128.042912][ T6049] syzkaller #0 Not tainted [ 128.047326][ T6049] ------------------------------------------------------ [ 128.054344][ T6049] syz.0.17/6049 is trying to acquire lock: [ 128.060151][ T6049] ffff888030ef2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 128.070038][ T6049] [ 128.070038][ T6049] but task is already holding lock: [ 128.077402][ T6049] ffff888057859d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 128.087304][ T6049] [ 128.087304][ T6049] which lock already depends on the new lock. [ 128.087304][ T6049] [ 128.097711][ T6049] [ 128.097711][ T6049] the existing dependency chain (in reverse order) is: [ 128.106734][ T6049] [ 128.106734][ T6049] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 128.114336][ T6049] down_read+0x9b/0x480 [ 128.119053][ T6049] ext4_setattr+0x875/0x2ae0 [ 128.124197][ T6049] notify_change+0x6d2/0x12a0 [ 128.129429][ T6049] chown_common+0x54e/0x680 [ 128.134472][ T6049] do_fchownat+0x1a7/0x200 [ 128.139435][ T6049] __x64_sys_chown+0x7b/0xc0 [ 128.144655][ T6049] do_syscall_64+0xcd/0xfa0 [ 128.149708][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.156141][ T6049] [ 128.156141][ T6049] -> #1 (jbd2_handle){++++}-{0:0}: [ 128.163475][ T6049] start_this_handle+0x5ea/0x1410 [ 128.169065][ T6049] jbd2__journal_start+0x394/0x6a0 [ 128.174735][ T6049] __ext4_journal_start_sb+0x195/0x690 [ 128.180745][ T6049] ext4_do_writepages+0xc23/0x3cf0 [ 128.186413][ T6049] ext4_writepages+0x37a/0x7d0 [ 128.191726][ T6049] do_writepages+0x27a/0x600 [ 128.196856][ T6049] __writeback_single_inode+0x160/0xfb0 [ 128.202950][ T6049] writeback_sb_inodes+0x60d/0xfa0 [ 128.208609][ T6049] __writeback_inodes_wb+0xf8/0x2d0 [ 128.214357][ T6049] wb_writeback+0x7f3/0xb70 [ 128.219405][ T6049] wb_workfn+0x8ca/0xbe0 [ 128.224200][ T6049] process_one_work+0x9cf/0x1b70 [ 128.229681][ T6049] worker_thread+0x6c8/0xf10 [ 128.234814][ T6049] kthread+0x3c5/0x780 [ 128.239420][ T6049] ret_from_fork+0x675/0x7d0 [ 128.244574][ T6049] ret_from_fork_asm+0x1a/0x30 [ 128.249903][ T6049] [ 128.249903][ T6049] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 128.258357][ T6049] __lock_acquire+0x126f/0x1c90 [ 128.263766][ T6049] lock_acquire+0x179/0x350 [ 128.268798][ T6049] ext4_writepages+0x224/0x7d0 [ 128.274102][ T6049] do_writepages+0x27a/0x600 [ 128.279223][ T6049] __writeback_single_inode+0x160/0xfb0 [ 128.285310][ T6049] writeback_single_inode+0x2bc/0x550 [ 128.291220][ T6049] write_inode_now+0x170/0x1e0 [ 128.296516][ T6049] iput.part.0+0x487/0xb00 [ 128.301464][ T6049] iput+0x35/0x40 [ 128.305629][ T6049] ext4_xattr_block_set+0x67c/0x3650 [ 128.311464][ T6049] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 128.317884][ T6049] __ext4_expand_extra_isize+0x346/0x480 [ 128.324068][ T6049] __ext4_mark_inode_dirty+0x544/0x870 [ 128.330066][ T6049] ext4_evict_inode+0x74e/0x18e0 [ 128.335540][ T6049] evict+0x3e6/0x920 [ 128.339963][ T6049] iput.part.0+0x6a9/0xb00 [ 128.344906][ T6049] iput+0x35/0x40 [ 128.349071][ T6049] ext4_orphan_cleanup+0x731/0x11e0 [ 128.354809][ T6049] ext4_fill_super+0x8db7/0xaf70 [ 128.360291][ T6049] get_tree_bdev_flags+0x38c/0x620 [ 128.365945][ T6049] vfs_get_tree+0x8e/0x340 [ 128.370899][ T6049] path_mount+0x7b9/0x23a0 [ 128.375839][ T6049] __x64_sys_mount+0x293/0x310 [ 128.381134][ T6049] do_syscall_64+0xcd/0xfa0 [ 128.386171][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.392592][ T6049] [ 128.392592][ T6049] other info that might help us debug this: [ 128.392592][ T6049] [ 128.402817][ T6049] Chain exists of: [ 128.402817][ T6049] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 128.402817][ T6049] [ 128.416230][ T6049] Possible unsafe locking scenario: [ 128.416230][ T6049] [ 128.423667][ T6049] CPU0 CPU1 [ 128.429030][ T6049] ---- ---- [ 128.434382][ T6049] lock(&ei->xattr_sem); [ 128.438718][ T6049] lock(jbd2_handle); [ 128.445309][ T6049] lock(&ei->xattr_sem); [ 128.452159][ T6049] rlock(&sbi->s_writepages_rwsem); [ 128.457446][ T6049] [ 128.457446][ T6049] *** DEADLOCK *** [ 128.457446][ T6049] [ 128.465579][ T6049] 3 locks held by syz.0.17/6049: [ 128.470513][ T6049] #0: ffff888030ef00e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 128.480701][ T6049] #1: ffff888030ef0610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 128.489198][ T6049] #2: ffff888057859d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 128.499526][ T6049] [ 128.499526][ T6049] stack backtrace: [ 128.505415][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.505455][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.505475][ T6049] Call Trace: [ 128.505488][ T6049] [ 128.505500][ T6049] dump_stack_lvl+0x116/0x1f0 [ 128.505543][ T6049] print_circular_bug+0x275/0x350 [ 128.505600][ T6049] check_noncircular+0x14c/0x170 [ 128.505662][ T6049] __lock_acquire+0x126f/0x1c90 [ 128.505720][ T6049] ? __lock_acquire+0x622/0x1c90 [ 128.505776][ T6049] lock_acquire+0x179/0x350 [ 128.505804][ T6049] ? do_writepages+0x27a/0x600 [ 128.505839][ T6049] ? __pfx___might_resched+0x10/0x10 [ 128.505887][ T6049] ext4_writepages+0x224/0x7d0 [ 128.505929][ T6049] ? do_writepages+0x27a/0x600 [ 128.505962][ T6049] ? __pfx_ext4_writepages+0x10/0x10 [ 128.506003][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506044][ T6049] ? __lock_acquire+0xb8a/0x1c90 [ 128.506104][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506147][ T6049] ? __pfx_ext4_writepages+0x10/0x10 [ 128.506190][ T6049] do_writepages+0x27a/0x600 [ 128.506225][ T6049] ? __pfx_do_writepages+0x10/0x10 [ 128.506262][ T6049] __writeback_single_inode+0x160/0xfb0 [ 128.506307][ T6049] ? __pfx___writeback_single_inode+0x10/0x10 [ 128.506349][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506389][ T6049] ? do_raw_spin_unlock+0x172/0x230 [ 128.506427][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506470][ T6049] writeback_single_inode+0x2bc/0x550 [ 128.506516][ T6049] write_inode_now+0x170/0x1e0 [ 128.506559][ T6049] ? __pfx_write_inode_now+0x10/0x10 [ 128.506630][ T6049] ? find_held_lock+0x2b/0x80 [ 128.506678][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506721][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.506764][ T6049] iput.part.0+0x487/0xb00 [ 128.506804][ T6049] iput+0x35/0x40 [ 128.506836][ T6049] ext4_xattr_block_set+0x67c/0x3650 [ 128.506903][ T6049] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 128.506962][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507002][ T6049] ? xattr_find_entry+0x289/0x330 [ 128.507057][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507097][ T6049] ? ext4_xattr_block_find+0x59/0x430 [ 128.507154][ T6049] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 128.507203][ T6049] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 128.507245][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507285][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507325][ T6049] ? dquot_initialize_needed+0x183/0x2a0 [ 128.507364][ T6049] __ext4_expand_extra_isize+0x346/0x480 [ 128.507422][ T6049] __ext4_mark_inode_dirty+0x544/0x870 [ 128.507468][ T6049] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 128.507513][ T6049] ? __pfx___might_resched+0x10/0x10 [ 128.507560][ T6049] ? ext4_journal_check_start+0x22b/0x340 [ 128.507600][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507647][ T6049] ? __ext4_journal_start_sb+0x19e/0x690 [ 128.507685][ T6049] ? ext4_evict_inode+0x5cf/0x18e0 [ 128.507731][ T6049] ext4_evict_inode+0x74e/0x18e0 [ 128.507777][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.507821][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.507865][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.507908][ T6049] evict+0x3e6/0x920 [ 128.507943][ T6049] ? __pfx_evict+0x10/0x10 [ 128.507975][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508020][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508066][ T6049] iput.part.0+0x6a9/0xb00 [ 128.508100][ T6049] ? __pfx_ext4_drop_inode+0x10/0x10 [ 128.508135][ T6049] iput+0x35/0x40 [ 128.508168][ T6049] ext4_orphan_cleanup+0x731/0x11e0 [ 128.508218][ T6049] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.508265][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508305][ T6049] ? ext4_register_li_request+0xec/0x9b0 [ 128.508357][ T6049] ext4_fill_super+0x8db7/0xaf70 [ 128.508419][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.508467][ T6049] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.508502][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508542][ T6049] ? find_held_lock+0x2b/0x80 [ 128.508586][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508630][ T6049] ? sb_set_blocksize+0x176/0x1d0 [ 128.508686][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.508726][ T6049] ? setup_bdev_super+0x369/0x730 [ 128.508772][ T6049] get_tree_bdev_flags+0x38c/0x620 [ 128.508821][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.508871][ T6049] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.508922][ T6049] ? apparmor_capable+0x114/0x1d0 [ 128.508973][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.509013][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.509053][ T6049] ? security_capable+0x7e/0x260 [ 128.509100][ T6049] vfs_get_tree+0x8e/0x340 [ 128.509140][ T6049] path_mount+0x7b9/0x23a0 [ 128.509175][ T6049] ? __pfx_path_mount+0x10/0x10 [ 128.509208][ T6049] ? putname+0x154/0x1a0 [ 128.509244][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.509284][ T6049] ? putname+0x154/0x1a0 [ 128.509318][ T6049] ? __x64_sys_mount+0x293/0x310 [ 128.509349][ T6049] __x64_sys_mount+0x293/0x310 [ 128.509381][ T6049] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.509413][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.509459][ T6049] do_syscall_64+0xcd/0xfa0 [ 128.509500][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.509534][ T6049] RIP: 0033:0x7fab3799076a [ 128.509560][ T6049] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.509592][ T6049] RSP: 002b:00007ffe0530f1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.509627][ T6049] RAX: ffffffffffffffda RBX: 00007ffe0530f280 RCX: 00007fab3799076a [ 128.509650][ T6049] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe0530f240 [ 128.509671][ T6049] RBP: 0000200000000180 R08: 00007ffe0530f280 R09: 0000000000800700 [ 128.509692][ T6049] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.509713][ T6049] R13: 00007ffe0530f240 R14: 000000000000046f R15: 000000000000002c [ 128.509745][ T6049] [ 129.099100][ T6049] ------------[ cut here ]------------ [ 129.104620][ T6049] EA inode 11 i_nlink=2 [ 129.105853][ T6049] WARNING: CPU: 0 PID: 6049 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.120339][ T6049] Modules linked in: [ 129.124274][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 129.133435][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.143531][ T6049] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.150173][ T6049] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 45 f2 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 e6 be 2e ff 44 0f b6 2d 45 75 dc 0d [ 129.169825][ T6049] RSP: 0018:ffffc9000396f178 EFLAGS: 00010282 [ 129.176099][ T6049] RAX: 0000000000000000 RBX: ffff88805785bbf8 RCX: ffffffff817b2ee8 [ 129.184247][ T6049] RDX: ffff888027381e40 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 129.192234][ T6049] RBP: ffffc9000396f240 R08: 0000000000000001 R09: 0000000000000000 [ 129.200244][ T6049] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 129.208329][ T6049] R13: 0000000000000000 R14: 1ffff9200072de32 R15: ffff88805785bde8 [ 129.216348][ T6049] FS: 0000555556708500(0000) GS:ffff888124a0c000(0000) knlGS:0000000000000000 [ 129.225415][ T6049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.232021][ T6049] CR2: 00007fff39ee8ccc CR3: 00000000789f9000 CR4: 0000000000350ef0 [ 129.240034][ T6049] Call Trace: [ 129.243339][ T6049] [ 129.246280][ T6049] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 129.252689][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.258353][ T6049] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 129.263909][ T6049] ext4_xattr_set_entry+0x158f/0x1f00 [ 129.269347][ T6049] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 129.275273][ T6049] ? xattr_find_entry+0x289/0x330 [ 129.280346][ T6049] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 129.285805][ T6049] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 129.291749][ T6049] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 129.298065][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.303850][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.309522][ T6049] ? dquot_initialize_needed+0x183/0x2a0 [ 129.315248][ T6049] __ext4_expand_extra_isize+0x346/0x480 [ 129.320931][ T6049] __ext4_mark_inode_dirty+0x544/0x870 [ 129.326461][ T6049] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 129.332497][ T6049] ? __pfx___might_resched+0x10/0x10 [ 129.337832][ T6049] ? ext4_journal_check_start+0x22b/0x340 [ 129.343635][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.349297][ T6049] ? __ext4_journal_start_sb+0x19e/0x690 [ 129.354995][ T6049] ? ext4_evict_inode+0x5cf/0x18e0 [ 129.360154][ T6049] ext4_evict_inode+0x74e/0x18e0 [ 129.365148][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.370559][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.376271][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.381881][ T6049] evict+0x3e6/0x920 [ 129.386058][ T6049] ? __pfx_evict+0x10/0x10 [ 129.390502][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.396208][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.401885][ T6049] iput.part.0+0x6a9/0xb00 [ 129.406370][ T6049] ? __pfx_ext4_drop_inode+0x10/0x10 [ 129.411678][ T6049] iput+0x35/0x40 [ 129.415368][ T6049] ext4_orphan_cleanup+0x731/0x11e0 [ 129.420612][ T6049] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.426335][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.432002][ T6049] ? ext4_register_li_request+0xec/0x9b0 [ 129.437727][ T6049] ext4_fill_super+0x8db7/0xaf70 [ 129.443171][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.448499][ T6049] ? do_raw_spin_lock+0x12c/0x2b0 [ 129.453656][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.459323][ T6049] ? find_held_lock+0x2b/0x80 [ 129.464072][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.469846][ T6049] ? sb_set_blocksize+0x176/0x1d0 [ 129.474981][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.480809][ T6049] ? setup_bdev_super+0x369/0x730 [ 129.486076][ T6049] get_tree_bdev_flags+0x38c/0x620 [ 129.491233][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.496606][ T6049] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.502278][ T6049] ? apparmor_capable+0x114/0x1d0 [ 129.507402][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.513091][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.518759][ T6049] ? security_capable+0x7e/0x260 [ 129.523772][ T6049] vfs_get_tree+0x8e/0x340 [ 129.528217][ T6049] path_mount+0x7b9/0x23a0 [ 129.532711][ T6049] ? __pfx_path_mount+0x10/0x10 [ 129.537585][ T6049] ? putname+0x154/0x1a0 [ 129.541855][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.547563][ T6049] ? putname+0x154/0x1a0 [ 129.551829][ T6049] ? __x64_sys_mount+0x293/0x310 [ 129.556836][ T6049] __x64_sys_mount+0x293/0x310 [ 129.561627][ T6049] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.566972][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.572678][ T6049] do_syscall_64+0xcd/0xfa0 [ 129.577209][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.583301][ T6049] RIP: 0033:0x7fab3799076a [ 129.587733][ T6049] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.607574][ T6049] RSP: 002b:00007ffe0530f1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.610499][ T52] Bluetooth: hci0: command tx timeout [ 129.616063][ T6049] RAX: ffffffffffffffda RBX: 00007ffe0530f280 RCX: 00007fab3799076a [ 129.616092][ T6049] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe0530f240 [ 129.637449][ T6049] RBP: 0000200000000180 R08: 00007ffe0530f280 R09: 0000000000800700 [ 129.645490][ T6049] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.653502][ T6049] R13: 00007ffe0530f240 R14: 000000000000046f R15: 000000000000002c [ 129.661512][ T6049] [ 129.664587][ T6049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.671886][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 129.681022][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.691092][ T6049] Call Trace: [ 129.694379][ T6049] [ 129.697317][ T6049] dump_stack_lvl+0x3d/0x1f0 [ 129.701937][ T6049] vpanic+0x640/0x6f0 [ 129.705983][ T6049] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.712052][ T6049] panic+0xca/0xd0 [ 129.715821][ T6049] ? __pfx_panic+0x10/0x10 [ 129.720293][ T6049] ? check_panic_on_warn+0x1f/0xb0 [ 129.725448][ T6049] check_panic_on_warn+0xab/0xb0 [ 129.730444][ T6049] __warn+0xf6/0x3c0 [ 129.734369][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.740037][ T6049] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.746069][ T6049] report_bug+0x3c3/0x580 [ 129.750420][ T6049] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.756449][ T6049] handle_bug+0x184/0x210 [ 129.760820][ T6049] exc_invalid_op+0x17/0x50 [ 129.765367][ T6049] asm_exc_invalid_op+0x1a/0x20 [ 129.770229][ T6049] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 129.776853][ T6049] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 45 f2 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 e6 be 2e ff 44 0f b6 2d 45 75 dc 0d [ 129.796473][ T6049] RSP: 0018:ffffc9000396f178 EFLAGS: 00010282 [ 129.802553][ T6049] RAX: 0000000000000000 RBX: ffff88805785bbf8 RCX: ffffffff817b2ee8 [ 129.810528][ T6049] RDX: ffff888027381e40 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 129.818498][ T6049] RBP: ffffc9000396f240 R08: 0000000000000001 R09: 0000000000000000 [ 129.826472][ T6049] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 129.834533][ T6049] R13: 0000000000000000 R14: 1ffff9200072de32 R15: ffff88805785bde8 [ 129.842516][ T6049] ? __warn_printk+0x198/0x350 [ 129.847315][ T6049] ? __warn_printk+0x1a5/0x350 [ 129.852115][ T6049] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 129.858128][ T6049] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 129.864491][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.870143][ T6049] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 129.875635][ T6049] ext4_xattr_set_entry+0x158f/0x1f00 [ 129.881055][ T6049] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 129.886812][ T6049] ? xattr_find_entry+0x289/0x330 [ 129.891871][ T6049] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 129.897081][ T6049] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 129.902999][ T6049] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 129.909253][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.914901][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.920546][ T6049] ? dquot_initialize_needed+0x183/0x2a0 [ 129.926190][ T6049] __ext4_expand_extra_isize+0x346/0x480 [ 129.931855][ T6049] __ext4_mark_inode_dirty+0x544/0x870 [ 129.937330][ T6049] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 129.943328][ T6049] ? __pfx___might_resched+0x10/0x10 [ 129.948635][ T6049] ? ext4_journal_check_start+0x22b/0x340 [ 129.954365][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.960008][ T6049] ? __ext4_journal_start_sb+0x19e/0x690 [ 129.965649][ T6049] ? ext4_evict_inode+0x5cf/0x18e0 [ 129.970781][ T6049] ext4_evict_inode+0x74e/0x18e0 [ 129.975739][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.981129][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.986787][ T6049] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.992177][ T6049] evict+0x3e6/0x920 [ 129.996085][ T6049] ? __pfx_evict+0x10/0x10 [ 130.000509][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.006182][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.011840][ T6049] iput.part.0+0x6a9/0xb00 [ 130.016262][ T6049] ? __pfx_ext4_drop_inode+0x10/0x10 [ 130.021557][ T6049] iput+0x35/0x40 [ 130.025203][ T6049] ext4_orphan_cleanup+0x731/0x11e0 [ 130.030602][ T6049] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 130.036265][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.041911][ T6049] ? ext4_register_li_request+0xec/0x9b0 [ 130.047568][ T6049] ext4_fill_super+0x8db7/0xaf70 [ 130.052546][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.057941][ T6049] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.063060][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.068709][ T6049] ? find_held_lock+0x2b/0x80 [ 130.073404][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.079048][ T6049] ? sb_set_blocksize+0x176/0x1d0 [ 130.084098][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.089749][ T6049] ? setup_bdev_super+0x369/0x730 [ 130.094799][ T6049] get_tree_bdev_flags+0x38c/0x620 [ 130.099934][ T6049] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.105244][ T6049] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 130.110904][ T6049] ? apparmor_capable+0x114/0x1d0 [ 130.115952][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.121599][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.127247][ T6049] ? security_capable+0x7e/0x260 [ 130.132205][ T6049] vfs_get_tree+0x8e/0x340 [ 130.136639][ T6049] path_mount+0x7b9/0x23a0 [ 130.141065][ T6049] ? __pfx_path_mount+0x10/0x10 [ 130.145930][ T6049] ? putname+0x154/0x1a0 [ 130.150181][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.155829][ T6049] ? putname+0x154/0x1a0 [ 130.160082][ T6049] ? __x64_sys_mount+0x293/0x310 [ 130.165032][ T6049] __x64_sys_mount+0x293/0x310 [ 130.169810][ T6049] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.175101][ T6049] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.180756][ T6049] do_syscall_64+0xcd/0xfa0 [ 130.185271][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.191169][ T6049] RIP: 0033:0x7fab3799076a [ 130.195585][ T6049] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.215208][ T6049] RSP: 002b:00007ffe0530f1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.223637][ T6049] RAX: ffffffffffffffda RBX: 00007ffe0530f280 RCX: 00007fab3799076a [ 130.231609][ T6049] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe0530f240 [ 130.239584][ T6049] RBP: 0000200000000180 R08: 00007ffe0530f280 R09: 0000000000800700 [ 130.247559][ T6049] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 130.255791][ T6049] R13: 00007ffe0530f240 R14: 000000000000046f R15: 000000000000002c [ 130.263777][ T6049] [ 130.266999][ T6049] Kernel Offset: disabled [ 130.271315][ T6049] Rebooting in 86400 seconds..