Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. 2025/09/12 12:28:14 parsed 1 programs [ 86.911785][ T989] cfg80211: failed to load regulatory.db [ 88.825048][ T5843] cgroup: Unknown subsys name 'net' [ 89.082393][ T5843] cgroup: Unknown subsys name 'cpuset' [ 89.158478][ T5843] cgroup: Unknown subsys name 'rlimit' [ 90.864652][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.110473][ T5894] chnl_net:caif_netlink_parms(): no params data found [ 97.590728][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.590927][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.591087][ T5894] bridge_slave_0: entered allmulticast mode [ 97.595526][ T5894] bridge_slave_0: entered promiscuous mode [ 97.627260][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.627337][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.627456][ T5894] bridge_slave_1: entered allmulticast mode [ 97.651125][ T5894] bridge_slave_1: entered promiscuous mode [ 97.773911][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.871258][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.061129][ T5894] team0: Port device team_slave_0 added [ 98.081393][ T5894] team0: Port device team_slave_1 added [ 98.370836][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.370847][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.370861][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.374261][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.374276][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.374298][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.565699][ T5894] hsr_slave_0: entered promiscuous mode [ 98.566698][ T5894] hsr_slave_1: entered promiscuous mode [ 98.943204][ T5894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.966090][ T5894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.003094][ T5894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.042824][ T5894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.175850][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.277714][ T5894] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.285872][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.286451][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.303421][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.305674][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.526559][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.592990][ T5894] veth0_vlan: entered promiscuous mode [ 99.602266][ T5894] veth1_vlan: entered promiscuous mode [ 99.643425][ T5894] veth0_macvtap: entered promiscuous mode [ 99.647230][ T5894] veth1_macvtap: entered promiscuous mode [ 99.675576][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.691984][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.711432][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715166][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715833][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.716534][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.495558][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.743975][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.031578][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.312604][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.612697][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.615314][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.616067][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.617127][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.630094][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.062055][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.062081][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.128581][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.128602][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.993758][ T57] bridge_slave_1: left allmulticast mode [ 102.993838][ T57] bridge_slave_1: left promiscuous mode [ 102.995078][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.082461][ T57] bridge_slave_0: left allmulticast mode [ 103.082488][ T57] bridge_slave_0: left promiscuous mode [ 103.082720][ T57] bridge0: port 1(bridge_slave_0) entered disabled state 2025/09/12 12:28:31 executed programs: 0 [ 103.242202][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.245311][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.258819][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.262571][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.263277][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.868481][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.948651][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.014649][ T57] bond0 (unregistering): Released all slaves [ 105.312110][ T5156] Bluetooth: hci0: command tx timeout [ 105.527963][ T57] hsr_slave_0: left promiscuous mode [ 105.570475][ T57] hsr_slave_1: left promiscuous mode [ 105.571686][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.571758][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.619901][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.619933][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.719531][ T57] veth1_macvtap: left promiscuous mode [ 105.719778][ T57] veth0_macvtap: left promiscuous mode [ 105.720102][ T57] veth1_vlan: left promiscuous mode [ 105.720396][ T57] veth0_vlan: left promiscuous mode [ 107.389915][ T5156] Bluetooth: hci0: command tx timeout [ 107.710263][ T57] team0 (unregistering): Port device team_slave_1 removed [ 107.889900][ T57] team0 (unregistering): Port device team_slave_0 removed [ 109.467953][ T5156] Bluetooth: hci0: command tx timeout [ 109.932012][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 110.405528][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.406972][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.407191][ T5955] bridge_slave_0: entered allmulticast mode [ 110.415657][ T5955] bridge_slave_0: entered promiscuous mode [ 110.420399][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.420600][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.420804][ T5955] bridge_slave_1: entered allmulticast mode [ 110.423403][ T5955] bridge_slave_1: entered promiscuous mode [ 110.625940][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.630869][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.844616][ T5955] team0: Port device team_slave_0 added [ 110.945997][ T5955] team0: Port device team_slave_1 added [ 111.142925][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.142942][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.142965][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.150372][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.150387][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.150410][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.547882][ T5156] Bluetooth: hci0: command tx timeout [ 111.824840][ T5955] hsr_slave_0: entered promiscuous mode [ 111.831124][ T5955] hsr_slave_1: entered promiscuous mode [ 114.340486][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.420024][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.516407][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.556947][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.897984][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.936464][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.965379][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.965587][ T3256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.980902][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.981146][ T3256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.345664][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.452546][ T5955] veth0_vlan: entered promiscuous mode [ 115.475197][ T5955] veth1_vlan: entered promiscuous mode [ 115.537096][ T5955] veth0_macvtap: entered promiscuous mode [ 115.556387][ T5955] veth1_macvtap: entered promiscuous mode [ 115.595193][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.616231][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.642960][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.643328][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.644282][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.645960][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.843393][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.843414][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.887067][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.887087][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/12 12:28:44 executed programs: 2 [ 116.023176][ T6096] loop0: detected capacity change from 0 to 512 [ 116.072277][ T6096] [ 116.072291][ T6096] ====================================================== [ 116.072298][ T6096] WARNING: possible circular locking dependency detected [ 116.072314][ T6096] syzkaller #0 Not tainted [ 116.072323][ T6096] ------------------------------------------------------ [ 116.072329][ T6096] syz.0.17/6096 is trying to acquire lock: [ 116.072338][ T6096] ffff88803a2b0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 116.072390][ T6096] [ 116.072390][ T6096] but task is already holding lock: [ 116.072395][ T6096] ffff888041f65f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 116.072433][ T6096] [ 116.072433][ T6096] which lock already depends on the new lock. [ 116.072433][ T6096] [ 116.072439][ T6096] [ 116.072439][ T6096] the existing dependency chain (in reverse order) is: [ 116.072445][ T6096] [ 116.072445][ T6096] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 116.072467][ T6096] lock_acquire+0x120/0x360 [ 116.072484][ T6096] down_write+0x3a/0x50 [ 116.072499][ T6096] ext4_xattr_set_handle+0x165/0x1590 [ 116.072518][ T6096] ext4_initxattrs+0x9f/0x110 [ 116.072534][ T6096] security_inode_init_security+0x2a0/0x3f0 [ 116.072550][ T6096] __ext4_new_inode+0x3314/0x3cb0 [ 116.072571][ T6096] ext4_create+0x22d/0x460 [ 116.072587][ T6096] path_openat+0x1500/0x3840 [ 116.072603][ T6096] do_filp_open+0x1fa/0x410 [ 116.072618][ T6096] do_sys_openat2+0x121/0x1c0 [ 116.072632][ T6096] __x64_sys_openat+0x138/0x170 [ 116.072646][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.072660][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.072676][ T6096] [ 116.072676][ T6096] -> #1 (jbd2_handle){++++}-{0:0}: [ 116.072700][ T6096] lock_acquire+0x120/0x360 [ 116.072718][ T6096] start_this_handle+0x1fa7/0x21c0 [ 116.072735][ T6096] jbd2__journal_start+0x2c1/0x5b0 [ 116.072753][ T6096] __ext4_journal_start_sb+0x227/0x5c0 [ 116.072773][ T6096] ext4_do_writepages+0xf6f/0x4600 [ 116.072790][ T6096] ext4_writepages+0x205/0x350 [ 116.072804][ T6096] do_writepages+0x32e/0x550 [ 116.072832][ T6096] file_write_and_wait_range+0x244/0x340 [ 116.072853][ T6096] ext4_sync_file+0x2b4/0xb20 [ 116.072872][ T6096] __x64_sys_fsync+0x194/0x1f0 [ 116.072892][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.072906][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.072920][ T6096] [ 116.072920][ T6096] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 116.072943][ T6096] validate_chain+0xb9b/0x2140 [ 116.072964][ T6096] __lock_acquire+0xab9/0xd20 [ 116.072982][ T6096] lock_acquire+0x120/0x360 [ 116.073000][ T6096] percpu_down_read_internal+0x48/0x1d0 [ 116.073022][ T6096] ext4_writepages+0x1cc/0x350 [ 116.073035][ T6096] do_writepages+0x32e/0x550 [ 116.073051][ T6096] __writeback_single_inode+0x145/0x1000 [ 116.073068][ T6096] writeback_single_inode+0x1d5/0x640 [ 116.073081][ T6096] write_inode_now+0x160/0x1d0 [ 116.073095][ T6096] iput+0x5b9/0x9d0 [ 116.073114][ T6096] ext4_xattr_block_set+0x1fce/0x2ac0 [ 116.073133][ T6096] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 116.073155][ T6096] __ext4_expand_extra_isize+0x30d/0x400 [ 116.073176][ T6096] __ext4_mark_inode_dirty+0x46c/0x700 [ 116.073192][ T6096] ext4_evict_inode+0x80d/0xee0 [ 116.073208][ T6096] evict+0x501/0x9c0 [ 116.073219][ T6096] ext4_orphan_cleanup+0xc20/0x1460 [ 116.073232][ T6096] ext4_fill_super+0x57fa/0x60b0 [ 116.073252][ T6096] get_tree_bdev_flags+0x40b/0x4d0 [ 116.073270][ T6096] vfs_get_tree+0x8f/0x2b0 [ 116.073286][ T6096] do_new_mount+0x2a2/0x9e0 [ 116.073304][ T6096] __se_sys_mount+0x317/0x410 [ 116.073320][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.073333][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.073346][ T6096] [ 116.073346][ T6096] other info that might help us debug this: [ 116.073346][ T6096] [ 116.073351][ T6096] Chain exists of: [ 116.073351][ T6096] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 116.073351][ T6096] [ 116.073377][ T6096] Possible unsafe locking scenario: [ 116.073377][ T6096] [ 116.073382][ T6096] CPU0 CPU1 [ 116.073387][ T6096] ---- ---- [ 116.073392][ T6096] lock(&ei->xattr_sem); [ 116.073402][ T6096] lock(jbd2_handle); [ 116.073413][ T6096] lock(&ei->xattr_sem); [ 116.073424][ T6096] rlock(&sbi->s_writepages_rwsem); [ 116.073435][ T6096] [ 116.073435][ T6096] *** DEADLOCK *** [ 116.073435][ T6096] [ 116.073440][ T6096] 3 locks held by syz.0.17/6096: [ 116.073450][ T6096] #0: ffff88803a2b20d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 116.073494][ T6096] #1: ffff88803a2b2778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 116.073534][ T6096] #2: ffff888041f65f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 116.073575][ T6096] [ 116.073575][ T6096] stack backtrace: [ 116.073598][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.073617][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.073634][ T6096] Call Trace: [ 116.073641][ T6096] [ 116.073648][ T6096] dump_stack_lvl+0x189/0x250 [ 116.073672][ T6096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.073694][ T6096] ? __pfx__printk+0x10/0x10 [ 116.073711][ T6096] ? print_lock_name+0xde/0x100 [ 116.073727][ T6096] print_circular_bug+0x2ee/0x310 [ 116.073745][ T6096] check_noncircular+0x134/0x160 [ 116.073771][ T6096] validate_chain+0xb9b/0x2140 [ 116.073796][ T6096] ? look_up_lock_class+0x74/0x170 [ 116.073827][ T6096] ? register_lock_class+0x51/0x320 [ 116.073848][ T6096] __lock_acquire+0xab9/0xd20 [ 116.073868][ T6096] ? ext4_writepages+0x1cc/0x350 [ 116.073881][ T6096] lock_acquire+0x120/0x360 [ 116.073898][ T6096] ? ext4_writepages+0x1cc/0x350 [ 116.073914][ T6096] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 116.073936][ T6096] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.073958][ T6096] percpu_down_read_internal+0x48/0x1d0 [ 116.073982][ T6096] ? ext4_writepages+0x1cc/0x350 [ 116.073997][ T6096] ext4_writepages+0x1cc/0x350 [ 116.074013][ T6096] ? __pfx_ext4_writepages+0x10/0x10 [ 116.074028][ T6096] ? rt_mutex_slowunlock+0x493/0x8a0 [ 116.074069][ T6096] ? __pfx_ext4_writepages+0x10/0x10 [ 116.074085][ T6096] do_writepages+0x32e/0x550 [ 116.074106][ T6096] ? reacquire_held_locks+0x127/0x1d0 [ 116.074128][ T6096] ? rt_spin_lock+0x1bb/0x2c0 [ 116.074147][ T6096] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 116.074168][ T6096] __writeback_single_inode+0x145/0x1000 [ 116.074192][ T6096] writeback_single_inode+0x1d5/0x640 [ 116.074211][ T6096] write_inode_now+0x160/0x1d0 [ 116.074227][ T6096] ? __pfx_write_inode_now+0x10/0x10 [ 116.074256][ T6096] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 116.074279][ T6096] ? rt_spin_unlock+0x65/0x80 [ 116.074300][ T6096] iput+0x5b9/0x9d0 [ 116.074324][ T6096] ext4_xattr_block_set+0x1fce/0x2ac0 [ 116.074359][ T6096] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 116.074380][ T6096] ? ext4_xattr_block_find+0x2d4/0x350 [ 116.074403][ T6096] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 116.074437][ T6096] __ext4_expand_extra_isize+0x30d/0x400 [ 116.074464][ T6096] __ext4_mark_inode_dirty+0x46c/0x700 [ 116.074486][ T6096] ext4_evict_inode+0x80d/0xee0 [ 116.074508][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.074529][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.074545][ T6096] evict+0x501/0x9c0 [ 116.074566][ T6096] ? __pfx_evict+0x10/0x10 [ 116.074586][ T6096] ? iput+0x6d8/0x9d0 [ 116.074607][ T6096] ext4_orphan_cleanup+0xc20/0x1460 [ 116.074629][ T6096] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 116.074648][ T6096] ? ext4_register_li_request+0x640/0x720 [ 116.074664][ T6096] ? errseq_check_and_advance+0x66/0x120 [ 116.074688][ T6096] ext4_fill_super+0x57fa/0x60b0 [ 116.074719][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.074741][ T6096] ? set_blocksize+0x219/0x450 [ 116.074761][ T6096] ? sb_set_blocksize+0x104/0x180 [ 116.074778][ T6096] ? setup_bdev_super+0x4c1/0x5b0 [ 116.074799][ T6096] get_tree_bdev_flags+0x40b/0x4d0 [ 116.074826][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.074848][ T6096] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.074868][ T6096] ? cap_capable+0x11f/0x460 [ 116.074887][ T6096] ? safesetid_security_capable+0xa9/0x1a0 [ 116.074909][ T6096] vfs_get_tree+0x8f/0x2b0 [ 116.074930][ T6096] do_new_mount+0x2a2/0x9e0 [ 116.074951][ T6096] ? ns_capable+0x8a/0xf0 [ 116.074969][ T6096] ? __pfx_do_new_mount+0x10/0x10 [ 116.074988][ T6096] ? path_mount+0x61c/0xfe0 [ 116.075012][ T6096] __se_sys_mount+0x317/0x410 [ 116.075034][ T6096] ? __pfx___se_sys_mount+0x10/0x10 [ 116.075057][ T6096] ? do_syscall_64+0xbe/0x3b0 [ 116.075071][ T6096] ? __x64_sys_mount+0x20/0xc0 [ 116.075093][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.075108][ T6096] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.075130][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.075145][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 116.075163][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.075179][ T6096] RIP: 0033:0x7f0fa0c9034a [ 116.075200][ T6096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.075214][ T6096] RSP: 002b:00007ffdfa2d5948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.075231][ T6096] RAX: ffffffffffffffda RBX: 00007ffdfa2d59d0 RCX: 00007f0fa0c9034a [ 116.075244][ T6096] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdfa2d5990 [ 116.075257][ T6096] RBP: 0000200000000180 R08: 00007ffdfa2d59d0 R09: 0000000000800700 [ 116.075268][ T6096] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 116.075280][ T6096] R13: 00007ffdfa2d5990 R14: 0000000000000473 R15: 0000200000000680 [ 116.075298][ T6096] [ 116.075797][ T6096] ------------[ cut here ]------------ [ 116.075807][ T6096] EA inode 11 i_nlink=2 [ 116.075992][ T6096] WARNING: CPU: 0 PID: 6096 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.076028][ T6096] Modules linked in: [ 116.076043][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.076070][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.076080][ T6096] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.076104][ T6096] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 8d 97 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 14 29 [ 116.076117][ T6096] RSP: 0018:ffffc90003b5f1a0 EFLAGS: 00010246 [ 116.076131][ T6096] RAX: 8f75d00f7ce60100 RBX: dffffc0000000000 RCX: ffff888029debb80 [ 116.076145][ T6096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.076156][ T6096] RBP: ffffc90003b5f298 R08: 0000000000000000 R09: 0000000000000000 [ 116.076166][ T6096] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880531f0380 [ 116.076178][ T6096] R13: 1ffff1100a63e070 R14: 00000000ffffffff R15: 000000000000000b [ 116.076190][ T6096] FS: 000055556416f500(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 116.076229][ T6096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.076241][ T6096] CR2: 00007f1b9b8149c0 CR3: 000000002b320000 CR4: 00000000003526f0 [ 116.076255][ T6096] Call Trace: [ 116.076261][ T6096] [ 116.076269][ T6096] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 116.076290][ T6096] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 116.076312][ T6096] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 116.076334][ T6096] ext4_xattr_set_entry+0xabb/0x1e20 [ 116.076360][ T6096] ext4_xattr_ibody_set+0x254/0x6a0 [ 116.076382][ T6096] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 116.076417][ T6096] __ext4_expand_extra_isize+0x30d/0x400 [ 116.076445][ T6096] __ext4_mark_inode_dirty+0x46c/0x700 [ 116.076469][ T6096] ext4_evict_inode+0x80d/0xee0 [ 116.076490][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.076511][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.076528][ T6096] evict+0x501/0x9c0 [ 116.076549][ T6096] ? __pfx_evict+0x10/0x10 [ 116.076567][ T6096] ? iput+0x6d8/0x9d0 [ 116.076590][ T6096] ext4_orphan_cleanup+0xc20/0x1460 [ 116.076612][ T6096] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 116.076628][ T6096] ? ext4_register_li_request+0x640/0x720 [ 116.076645][ T6096] ? errseq_check_and_advance+0x66/0x120 [ 116.076668][ T6096] ext4_fill_super+0x57fa/0x60b0 [ 116.076698][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.076719][ T6096] ? set_blocksize+0x219/0x450 [ 116.076739][ T6096] ? sb_set_blocksize+0x104/0x180 [ 116.076756][ T6096] ? setup_bdev_super+0x4c1/0x5b0 [ 116.076783][ T6096] get_tree_bdev_flags+0x40b/0x4d0 [ 116.076804][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.076822][ T6096] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.076840][ T6096] ? cap_capable+0x11f/0x460 [ 116.076857][ T6096] ? safesetid_security_capable+0xa9/0x1a0 [ 116.076879][ T6096] vfs_get_tree+0x8f/0x2b0 [ 116.076898][ T6096] do_new_mount+0x2a2/0x9e0 [ 116.076921][ T6096] ? ns_capable+0x8a/0xf0 [ 116.076941][ T6096] ? __pfx_do_new_mount+0x10/0x10 [ 116.076962][ T6096] ? path_mount+0x61c/0xfe0 [ 116.076985][ T6096] __se_sys_mount+0x317/0x410 [ 116.077010][ T6096] ? __pfx___se_sys_mount+0x10/0x10 [ 116.077033][ T6096] ? do_syscall_64+0xbe/0x3b0 [ 116.077048][ T6096] ? __x64_sys_mount+0x20/0xc0 [ 116.077087][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.077101][ T6096] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.077124][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.077141][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 116.077159][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.077174][ T6096] RIP: 0033:0x7f0fa0c9034a [ 116.077189][ T6096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.077202][ T6096] RSP: 002b:00007ffdfa2d5948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.077219][ T6096] RAX: ffffffffffffffda RBX: 00007ffdfa2d59d0 RCX: 00007f0fa0c9034a [ 116.077232][ T6096] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdfa2d5990 [ 116.077244][ T6096] RBP: 0000200000000180 R08: 00007ffdfa2d59d0 R09: 0000000000800700 [ 116.077255][ T6096] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 116.077267][ T6096] R13: 00007ffdfa2d5990 R14: 0000000000000473 R15: 0000200000000680 [ 116.077284][ T6096] [ 116.077294][ T6096] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.077307][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.077327][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.077337][ T6096] Call Trace: [ 116.077344][ T6096] [ 116.077351][ T6096] dump_stack_lvl+0x99/0x250 [ 116.077374][ T6096] ? __asan_memcpy+0x40/0x70 [ 116.077391][ T6096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.077414][ T6096] ? __pfx__printk+0x10/0x10 [ 116.077435][ T6096] vpanic+0x281/0x750 [ 116.077459][ T6096] ? __pfx__printk+0x10/0x10 [ 116.077475][ T6096] ? __pfx_vpanic+0x10/0x10 [ 116.077497][ T6096] ? is_bpf_text_address+0x26/0x2b0 [ 116.077523][ T6096] panic+0xb9/0xc0 [ 116.077545][ T6096] ? __pfx_panic+0x10/0x10 [ 116.077572][ T6096] __warn+0x31b/0x4b0 [ 116.077594][ T6096] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.077619][ T6096] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.077641][ T6096] report_bug+0x2be/0x4f0 [ 116.077663][ T6096] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.077687][ T6096] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.077707][ T6096] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 116.077732][ T6096] handle_bug+0x84/0x160 [ 116.077746][ T6096] exc_invalid_op+0x1a/0x50 [ 116.077760][ T6096] asm_exc_invalid_op+0x1a/0x20 [ 116.077775][ T6096] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 116.077794][ T6096] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 70 1f 8b 4c 89 fe e8 8d 97 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 14 29 [ 116.077806][ T6096] RSP: 0018:ffffc90003b5f1a0 EFLAGS: 00010246 [ 116.077819][ T6096] RAX: 8f75d00f7ce60100 RBX: dffffc0000000000 RCX: ffff888029debb80 [ 116.077831][ T6096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.077839][ T6096] RBP: ffffc90003b5f298 R08: 0000000000000000 R09: 0000000000000000 [ 116.077849][ T6096] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880531f0380 [ 116.077860][ T6096] R13: 1ffff1100a63e070 R14: 00000000ffffffff R15: 000000000000000b [ 116.077877][ T6096] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 116.077894][ T6096] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 116.077919][ T6096] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 116.077944][ T6096] ext4_xattr_set_entry+0xabb/0x1e20 [ 116.077975][ T6096] ext4_xattr_ibody_set+0x254/0x6a0 [ 116.078000][ T6096] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 116.078032][ T6096] __ext4_expand_extra_isize+0x30d/0x400 [ 116.078054][ T6096] __ext4_mark_inode_dirty+0x46c/0x700 [ 116.078083][ T6096] ext4_evict_inode+0x80d/0xee0 [ 116.078102][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.078123][ T6096] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.078138][ T6096] evict+0x501/0x9c0 [ 116.078157][ T6096] ? __pfx_evict+0x10/0x10 [ 116.078173][ T6096] ? iput+0x6d8/0x9d0 [ 116.078196][ T6096] ext4_orphan_cleanup+0xc20/0x1460 [ 116.078218][ T6096] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 116.078237][ T6096] ? ext4_register_li_request+0x640/0x720 [ 116.078254][ T6096] ? errseq_check_and_advance+0x66/0x120 [ 116.078276][ T6096] ext4_fill_super+0x57fa/0x60b0 [ 116.078308][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.078330][ T6096] ? set_blocksize+0x219/0x450 [ 116.078350][ T6096] ? sb_set_blocksize+0x104/0x180 [ 116.078367][ T6096] ? setup_bdev_super+0x4c1/0x5b0 [ 116.078388][ T6096] get_tree_bdev_flags+0x40b/0x4d0 [ 116.078409][ T6096] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.078432][ T6096] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.078453][ T6096] ? cap_capable+0x11f/0x460 [ 116.078472][ T6096] ? safesetid_security_capable+0xa9/0x1a0 [ 116.078494][ T6096] vfs_get_tree+0x8f/0x2b0 [ 116.078515][ T6096] do_new_mount+0x2a2/0x9e0 [ 116.078537][ T6096] ? ns_capable+0x8a/0xf0 [ 116.078557][ T6096] ? __pfx_do_new_mount+0x10/0x10 [ 116.078577][ T6096] ? path_mount+0x61c/0xfe0 [ 116.078602][ T6096] __se_sys_mount+0x317/0x410 [ 116.078626][ T6096] ? __pfx___se_sys_mount+0x10/0x10 [ 116.078650][ T6096] ? do_syscall_64+0xbe/0x3b0 [ 116.078665][ T6096] ? __x64_sys_mount+0x20/0xc0 [ 116.078687][ T6096] do_syscall_64+0xfa/0x3b0 [ 116.078702][ T6096] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.078724][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.078741][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 116.078759][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.078775][ T6096] RIP: 0033:0x7f0fa0c9034a [ 116.078789][ T6096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.078802][ T6096] RSP: 002b:00007ffdfa2d5948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.078819][ T6096] RAX: ffffffffffffffda RBX: 00007ffdfa2d59d0 RCX: 00007f0fa0c9034a [ 116.078832][ T6096] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdfa2d5990 [ 116.078844][ T6096] RBP: 0000200000000180 R08: 00007ffdfa2d59d0 R09: 0000000000800700 [ 116.078856][ T6096] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 116.078867][ T6096] R13: 00007ffdfa2d5990 R14: 0000000000000473 R15: 0000200000000680 [ 116.078885][ T6096] [ 116.079159][ T6096] Kernel Offset: disabled