Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2025/11/29 22:23:14 parsed 1 programs [ 71.295182][ T5793] cgroup: Unknown subsys name 'net' [ 71.459633][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.828839][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.494043][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.502009][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540156][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.548072][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.805996][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 76.995487][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.017063][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.024841][ T5856] bridge_slave_0: entered allmulticast mode [ 77.032203][ T5856] bridge_slave_0: entered promiscuous mode [ 77.043928][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.051052][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.058415][ T5856] bridge_slave_1: entered allmulticast mode [ 77.065720][ T5856] bridge_slave_1: entered promiscuous mode [ 77.110174][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.122238][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.161516][ T5856] team0: Port device team_slave_0 added [ 77.169365][ T5856] team0: Port device team_slave_1 added [ 77.189803][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.198091][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.224784][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.256503][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.263586][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.289750][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.357743][ T5856] hsr_slave_0: entered promiscuous mode [ 77.365900][ T5856] hsr_slave_1: entered promiscuous mode [ 77.525909][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.538423][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.549630][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.562632][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.598584][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.605845][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.613773][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.620873][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.677435][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.695335][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.705001][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.722918][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.738110][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745256][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.765545][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.772654][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.931882][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.970686][ T5856] veth0_vlan: entered promiscuous mode [ 77.985674][ T5856] veth1_vlan: entered promiscuous mode [ 78.013553][ T5856] veth0_macvtap: entered promiscuous mode [ 78.021776][ T5856] veth1_macvtap: entered promiscuous mode [ 78.039206][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.052873][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.068657][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.077888][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.086754][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.095547][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.221116][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.229343][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.237708][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.246842][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.255136][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.262429][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.384135][ T2936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/29 22:23:23 executed programs: 0 [ 79.253473][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.261184][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.270630][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.280138][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.288354][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.295920][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.418546][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 79.477297][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.484673][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.491766][ T5899] bridge_slave_0: entered allmulticast mode [ 79.499034][ T5899] bridge_slave_0: entered promiscuous mode [ 79.507059][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.514455][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.521555][ T5899] bridge_slave_1: entered allmulticast mode [ 79.528835][ T5899] bridge_slave_1: entered promiscuous mode [ 79.556826][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.568750][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.601071][ T5899] team0: Port device team_slave_0 added [ 79.609872][ T5899] team0: Port device team_slave_1 added [ 79.632665][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.639711][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.667169][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.679782][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.686824][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.713214][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.751507][ T5899] hsr_slave_0: entered promiscuous mode [ 79.758025][ T5899] hsr_slave_1: entered promiscuous mode [ 79.764768][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.772607][ T5899] Cannot create hsr debugfs directory [ 80.873956][ T2936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.353745][ T51] Bluetooth: hci0: command tx timeout [ 81.755414][ T1203] cfg80211: failed to load regulatory.db [ 83.143990][ T2936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.206647][ T2936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.434179][ T51] Bluetooth: hci0: command tx timeout [ 83.991671][ T2936] hsr_slave_0: left promiscuous mode [ 84.000648][ T2936] hsr_slave_1: left promiscuous mode [ 84.009382][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.017378][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.027237][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.034789][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.043505][ T2936] bridge_slave_1: left allmulticast mode [ 84.049163][ T2936] bridge_slave_1: left promiscuous mode [ 84.055890][ T2936] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.067060][ T2936] bridge_slave_0: left allmulticast mode [ 84.072699][ T2936] bridge_slave_0: left promiscuous mode [ 84.078548][ T2936] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.105772][ T2936] veth1_macvtap: left promiscuous mode [ 84.111426][ T2936] veth0_macvtap: left promiscuous mode [ 84.117303][ T2936] veth1_vlan: left promiscuous mode [ 84.122643][ T2936] veth0_vlan: left promiscuous mode [ 84.439257][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 84.471866][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 84.498841][ T2936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.526060][ T2936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.782980][ T2936] bond0 (unregistering): Released all slaves [ 84.889339][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.899662][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.909987][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.920428][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.008999][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.026295][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.038828][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.045982][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.062050][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.069190][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.250720][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.304754][ T5899] veth0_vlan: entered promiscuous mode [ 85.320326][ T5899] veth1_vlan: entered promiscuous mode [ 85.366319][ T5899] veth0_macvtap: entered promiscuous mode [ 85.377048][ T5899] veth1_macvtap: entered promiscuous mode [ 85.390998][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.407109][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.418732][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.427577][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.436412][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.445199][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.509265][ T2119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.522606][ T51] Bluetooth: hci0: command tx timeout [ 85.525129][ T2119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.558927][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.567126][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.611628][ T5946] syz.0.17[5946]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.627183][ T5946] loop0: detected capacity change from 0 to 512 [ 85.666547][ T5946] [ 85.668905][ T5946] ====================================================== [ 85.675902][ T5946] WARNING: possible circular locking dependency detected [ 85.682900][ T5946] syzkaller #0 Not tainted [ 85.687287][ T5946] ------------------------------------------------------ [ 85.694279][ T5946] syz.0.17/5946 is trying to acquire lock: [ 85.700055][ T5946] ffff888020c3cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 85.710039][ T5946] [ 85.710039][ T5946] but task is already holding lock: [ 85.717376][ T5946] ffff888071338ac8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 85.727178][ T5946] [ 85.727178][ T5946] which lock already depends on the new lock. [ 85.727178][ T5946] [ 85.737565][ T5946] [ 85.737565][ T5946] the existing dependency chain (in reverse order) is: [ 85.746555][ T5946] [ 85.746555][ T5946] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 85.754085][ T5946] down_read+0x46/0x2e0 [ 85.758744][ T5946] ext4_setattr+0x86b/0x1c90 [ 85.763835][ T5946] notify_change+0xb0d/0xe10 [ 85.768919][ T5946] chown_common+0x3f9/0x5a0 [ 85.773932][ T5946] do_fchownat+0x168/0x270 [ 85.778864][ T5946] __x64_sys_chown+0x82/0x90 [ 85.783955][ T5946] do_syscall_64+0x55/0xb0 [ 85.788870][ T5946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.795260][ T5946] [ 85.795260][ T5946] -> #1 (jbd2_handle){++++}-{0:0}: [ 85.802530][ T5946] start_this_handle+0x1e9d/0x20c0 [ 85.808139][ T5946] jbd2__journal_start+0x2bb/0x5b0 [ 85.813749][ T5946] __ext4_journal_start_sb+0x203/0x570 [ 85.819706][ T5946] ext4_do_writepages+0xf92/0x38d0 [ 85.825323][ T5946] ext4_writepages+0x1a8/0x2f0 [ 85.830594][ T5946] do_writepages+0x3a2/0x600 [ 85.835697][ T5946] __writeback_single_inode+0x153/0xee0 [ 85.841743][ T5946] writeback_sb_inodes+0x77c/0xef0 [ 85.847375][ T5946] __writeback_inodes_wb+0x111/0x240 [ 85.853163][ T5946] wb_writeback+0x464/0xba0 [ 85.858170][ T5946] wb_workfn+0xabc/0xe20 [ 85.862907][ T5946] process_scheduled_works+0xa45/0x15b0 [ 85.868952][ T5946] worker_thread+0xa55/0xfc0 [ 85.874052][ T5946] kthread+0x2fa/0x390 [ 85.878634][ T5946] ret_from_fork+0x48/0x80 [ 85.883551][ T5946] ret_from_fork_asm+0x11/0x20 [ 85.888820][ T5946] [ 85.888820][ T5946] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 85.897217][ T5946] __lock_acquire+0x2ddb/0x7c80 [ 85.902563][ T5946] lock_acquire+0x197/0x410 [ 85.907563][ T5946] percpu_down_read+0x44/0x1a0 [ 85.912826][ T5946] ext4_writepages+0x170/0x2f0 [ 85.918087][ T5946] do_writepages+0x3a2/0x600 [ 85.923183][ T5946] __writeback_single_inode+0x153/0xee0 [ 85.929244][ T5946] writeback_single_inode+0x211/0x720 [ 85.935123][ T5946] write_inode_now+0x161/0x1e0 [ 85.940386][ T5946] iput+0x5b2/0x920 [ 85.944693][ T5946] ext4_xattr_block_set+0x273a/0x32a0 [ 85.950568][ T5946] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 85.956959][ T5946] __ext4_expand_extra_isize+0x306/0x400 [ 85.963089][ T5946] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 85.969044][ T5946] ext4_evict_inode+0x7ed/0xea0 [ 85.974398][ T5946] evict+0x486/0x870 [ 85.978789][ T5946] ext4_orphan_cleanup+0xbd4/0x1400 [ 85.984488][ T5946] ext4_fill_super+0x5de4/0x66c0 [ 85.989922][ T5946] get_tree_bdev+0x3e4/0x510 [ 85.995009][ T5946] vfs_get_tree+0x8c/0x280 [ 85.999921][ T5946] do_new_mount+0x24b/0xa40 [ 86.004917][ T5946] __se_sys_mount+0x2da/0x3c0 [ 86.010088][ T5946] do_syscall_64+0x55/0xb0 [ 86.015004][ T5946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.021393][ T5946] [ 86.021393][ T5946] other info that might help us debug this: [ 86.021393][ T5946] [ 86.031600][ T5946] Chain exists of: [ 86.031600][ T5946] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 86.031600][ T5946] [ 86.044957][ T5946] Possible unsafe locking scenario: [ 86.044957][ T5946] [ 86.052387][ T5946] CPU0 CPU1 [ 86.057728][ T5946] ---- ---- [ 86.063067][ T5946] lock(&ei->xattr_sem); [ 86.067374][ T5946] lock(jbd2_handle); [ 86.073948][ T5946] lock(&ei->xattr_sem); [ 86.080790][ T5946] rlock(&sbi->s_writepages_rwsem); [ 86.086053][ T5946] [ 86.086053][ T5946] *** DEADLOCK *** [ 86.086053][ T5946] [ 86.094169][ T5946] 3 locks held by syz.0.17/5946: [ 86.099077][ T5946] #0: ffff888020c3a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 86.109142][ T5946] #1: ffff888020c3a608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 86.118508][ T5946] #2: ffff888071338ac8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 86.128744][ T5946] [ 86.128744][ T5946] stack backtrace: [ 86.134631][ T5946] CPU: 1 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0 [ 86.141826][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.151868][ T5946] Call Trace: [ 86.155127][ T5946] [ 86.158041][ T5946] dump_stack_lvl+0x16c/0x230 [ 86.162702][ T5946] ? load_image+0x3b0/0x3b0 [ 86.167187][ T5946] ? show_regs_print_info+0x20/0x20 [ 86.172364][ T5946] ? print_circular_bug+0x12b/0x1a0 [ 86.177548][ T5946] check_noncircular+0x2bd/0x3c0 [ 86.182477][ T5946] ? look_up_lock_class+0x75/0x140 [ 86.187568][ T5946] ? print_deadlock_bug+0x5d0/0x5d0 [ 86.192741][ T5946] ? lockdep_lock+0xe0/0x220 [ 86.197307][ T5946] ? _find_first_zero_bit+0xd3/0x100 [ 86.202572][ T5946] __lock_acquire+0x2ddb/0x7c80 [ 86.207405][ T5946] ? mark_lock+0x94/0x320 [ 86.211710][ T5946] ? verify_lock_unused+0x140/0x140 [ 86.216884][ T5946] ? __lock_acquire+0x1334/0x7c80 [ 86.221882][ T5946] ? verify_lock_unused+0x140/0x140 [ 86.227059][ T5946] lock_acquire+0x197/0x410 [ 86.231536][ T5946] ? ext4_writepages+0x170/0x2f0 [ 86.236454][ T5946] ? __might_sleep+0xe0/0xe0 [ 86.241027][ T5946] ? mark_lock+0x94/0x320 [ 86.245338][ T5946] ? read_lock_is_recursive+0x20/0x20 [ 86.250694][ T5946] ? __lock_acquire+0x1334/0x7c80 [ 86.255701][ T5946] percpu_down_read+0x44/0x1a0 [ 86.260446][ T5946] ? ext4_writepages+0x170/0x2f0 [ 86.265369][ T5946] ext4_writepages+0x170/0x2f0 [ 86.270113][ T5946] ? ext4_read_folio+0x2f0/0x2f0 [ 86.275049][ T5946] ? __rwlock_init+0x150/0x150 [ 86.279811][ T5946] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 86.285698][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.290880][ T5946] ? ext4_read_folio+0x2f0/0x2f0 [ 86.295796][ T5946] do_writepages+0x3a2/0x600 [ 86.300369][ T5946] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 86.306072][ T5946] ? writeback_single_inode+0x206/0x720 [ 86.311593][ T5946] ? __lock_acquire+0x7c80/0x7c80 [ 86.316592][ T5946] ? do_raw_spin_lock+0x121/0x2c0 [ 86.321597][ T5946] ? get_tree_bdev+0x3e4/0x510 [ 86.326342][ T5946] __writeback_single_inode+0x153/0xee0 [ 86.331870][ T5946] writeback_single_inode+0x211/0x720 [ 86.337223][ T5946] ? write_inode_now+0x1e0/0x1e0 [ 86.342155][ T5946] write_inode_now+0x161/0x1e0 [ 86.346916][ T5946] ? bdi_split_work_to_wbs+0x890/0x890 [ 86.352369][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.357548][ T5946] iput+0x5b2/0x920 [ 86.361339][ T5946] ext4_xattr_block_set+0x273a/0x32a0 [ 86.366703][ T5946] ? __might_sleep+0xe0/0xe0 [ 86.371278][ T5946] ? xattr_find_entry+0x12b/0x2f0 [ 86.376309][ T5946] ? ext4_xattr_block_find+0x350/0x350 [ 86.381747][ T5946] ? ext4_xattr_block_find+0x2d4/0x350 [ 86.387189][ T5946] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 86.393067][ T5946] __ext4_expand_extra_isize+0x306/0x400 [ 86.398685][ T5946] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 86.404126][ T5946] ext4_evict_inode+0x7ed/0xea0 [ 86.408951][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 86.413781][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 86.419651][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.424844][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 86.430741][ T5946] evict+0x486/0x870 [ 86.434619][ T5946] ? __lock_acquire+0x7c80/0x7c80 [ 86.439621][ T5946] ? proc_nr_inodes+0x230/0x230 [ 86.444455][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.449650][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 86.454486][ T5946] ? iput+0x70a/0x920 [ 86.458446][ T5946] ext4_orphan_cleanup+0xbd4/0x1400 [ 86.463628][ T5946] ? ext4_orphan_del+0xba0/0xba0 [ 86.468548][ T5946] ? ext4_register_li_request+0x183/0x940 [ 86.474257][ T5946] ? errseq_check_and_advance+0x66/0x120 [ 86.479889][ T5946] ext4_fill_super+0x5de4/0x66c0 [ 86.484815][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 86.491029][ T5946] ? __might_sleep+0xe0/0xe0 [ 86.495597][ T5946] ? read_lock_is_recursive+0x20/0x20 [ 86.500944][ T5946] ? snprintf+0xdb/0x120 [ 86.505165][ T5946] ? vscnprintf+0x80/0x80 [ 86.509476][ T5946] ? down_write+0x162/0x1f0 [ 86.513953][ T5946] ? down_read_killable+0x340/0x340 [ 86.519125][ T5946] ? setup_bdev_super+0x56b/0x660 [ 86.524129][ T5946] get_tree_bdev+0x3e4/0x510 [ 86.528697][ T5946] ? vfs_parse_fs_string+0x160/0x160 [ 86.533962][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 86.540178][ T5946] ? setup_bdev_super+0x660/0x660 [ 86.545177][ T5946] ? apparmor_capable+0x137/0x1a0 [ 86.550181][ T5946] ? bpf_lsm_capable+0x9/0x10 [ 86.554841][ T5946] ? security_capable+0x89/0xb0 [ 86.559670][ T5946] vfs_get_tree+0x8c/0x280 [ 86.564067][ T5946] do_new_mount+0x24b/0xa40 [ 86.568548][ T5946] __se_sys_mount+0x2da/0x3c0 [ 86.573206][ T5946] ? __x64_sys_mount+0xc0/0xc0 [ 86.577964][ T5946] ? lockdep_hardirqs_on+0x98/0x150 [ 86.583146][ T5946] ? __x64_sys_mount+0x20/0xc0 [ 86.587895][ T5946] do_syscall_64+0x55/0xb0 [ 86.592290][ T5946] ? clear_bhb_loop+0x40/0x90 [ 86.596962][ T5946] ? clear_bhb_loop+0x40/0x90 [ 86.601617][ T5946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.607492][ T5946] RIP: 0033:0x7f039f190eea [ 86.611896][ T5946] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.631481][ T5946] RSP: 002b:00007ffe8f8a8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.639874][ T5946] RAX: ffffffffffffffda RBX: 00007ffe8f8a8c30 RCX: 00007f039f190eea [ 86.647825][ T5946] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f8a8bf0 [ 86.655779][ T5946] RBP: 0000200000000180 R08: 00007ffe8f8a8c30 R09: 0000000000800700 [ 86.663731][ T5946] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 86.671680][ T5946] R13: 00007ffe8f8a8bf0 R14: 000000000000046f R15: 0000200000000200 [ 86.679642][ T5946] [ 86.687804][ T5946] ------------[ cut here ]------------ [ 86.693613][ T5946] EA inode 11 i_nlink=2 [ 86.694870][ T5946] WARNING: CPU: 1 PID: 5946 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 86.709652][ T5946] Modules linked in: [ 86.713672][ T5946] CPU: 1 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0 [ 86.720869][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.730939][ T5946] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 86.737561][ T5946] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 86.757196][ T5946] RSP: 0018:ffffc900033171c0 EFLAGS: 00010246 [ 86.763293][ T5946] RAX: 6372dfbb57117300 RBX: 0000000000000002 RCX: ffff888024745a00 [ 86.771290][ T5946] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 86.779290][ T5946] RBP: ffffc900033172b8 R08: ffffc90003316dc7 R09: 1ffff92000662db8 [ 86.787286][ T5946] R10: dffffc0000000000 R11: fffff52000662db9 R12: dffffc0000000000 [ 86.795295][ T5946] R13: ffff88807133aca8 R14: ffff88807133aab0 R15: ffff88807133ab00 [ 86.803289][ T5946] FS: 00005555866db500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 86.812218][ T5946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.818838][ T5946] CR2: 00007fc4cf943000 CR3: 000000007a468000 CR4: 00000000003506e0 [ 86.826865][ T5946] Call Trace: [ 86.830144][ T5946] [ 86.833067][ T5946] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 86.838737][ T5946] ? ext4_xattr_inode_iget+0x3df/0x600 [ 86.844215][ T5946] ext4_xattr_set_entry+0xcda/0x1e90 [ 86.849490][ T5946] ext4_xattr_ibody_set+0x254/0x6a0 [ 86.854724][ T5946] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 86.860626][ T5946] __ext4_expand_extra_isize+0x306/0x400 [ 86.866284][ T5946] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 86.871741][ T5946] ext4_evict_inode+0x7ed/0xea0 [ 86.876624][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 86.881479][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 86.887386][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.892584][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 86.898512][ T5946] evict+0x486/0x870 [ 86.902402][ T5946] ? __lock_acquire+0x7c80/0x7c80 [ 86.907479][ T5946] ? proc_nr_inodes+0x230/0x230 [ 86.912329][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 86.917552][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 86.922412][ T5946] ? iput+0x70a/0x920 [ 86.926405][ T5946] ext4_orphan_cleanup+0xbd4/0x1400 [ 86.931612][ T5946] ? ext4_orphan_del+0xba0/0xba0 [ 86.936573][ T5946] ? ext4_register_li_request+0x183/0x940 [ 86.942307][ T5946] ? errseq_check_and_advance+0x66/0x120 [ 86.947964][ T5946] ext4_fill_super+0x5de4/0x66c0 [ 86.952918][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 86.959203][ T5946] ? __might_sleep+0xe0/0xe0 [ 86.963820][ T5946] ? read_lock_is_recursive+0x20/0x20 [ 86.969192][ T5946] ? snprintf+0xdb/0x120 [ 86.973465][ T5946] ? vscnprintf+0x80/0x80 [ 86.977796][ T5946] ? down_write+0x162/0x1f0 [ 86.982280][ T5946] ? down_read_killable+0x340/0x340 [ 86.987495][ T5946] ? setup_bdev_super+0x56b/0x660 [ 86.992516][ T5946] get_tree_bdev+0x3e4/0x510 [ 86.997126][ T5946] ? vfs_parse_fs_string+0x160/0x160 [ 87.002410][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 87.008663][ T5946] ? setup_bdev_super+0x660/0x660 [ 87.013711][ T5946] ? apparmor_capable+0x137/0x1a0 [ 87.018719][ T5946] ? bpf_lsm_capable+0x9/0x10 [ 87.023421][ T5946] ? security_capable+0x89/0xb0 [ 87.028270][ T5946] vfs_get_tree+0x8c/0x280 [ 87.032666][ T5946] do_new_mount+0x24b/0xa40 [ 87.037190][ T5946] __se_sys_mount+0x2da/0x3c0 [ 87.041865][ T5946] ? __x64_sys_mount+0xc0/0xc0 [ 87.046646][ T5946] ? lockdep_hardirqs_on+0x98/0x150 [ 87.051842][ T5946] ? __x64_sys_mount+0x20/0xc0 [ 87.056638][ T5946] do_syscall_64+0x55/0xb0 [ 87.061057][ T5946] ? clear_bhb_loop+0x40/0x90 [ 87.065751][ T5946] ? clear_bhb_loop+0x40/0x90 [ 87.070427][ T5946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.076340][ T5946] RIP: 0033:0x7f039f190eea [ 87.080750][ T5946] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.100382][ T5946] RSP: 002b:00007ffe8f8a8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.108823][ T5946] RAX: ffffffffffffffda RBX: 00007ffe8f8a8c30 RCX: 00007f039f190eea [ 87.116836][ T5946] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f8a8bf0 [ 87.124843][ T5946] RBP: 0000200000000180 R08: 00007ffe8f8a8c30 R09: 0000000000800700 [ 87.132817][ T5946] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.140839][ T5946] R13: 00007ffe8f8a8bf0 R14: 000000000000046f R15: 0000200000000200 [ 87.148827][ T5946] [ 87.151829][ T5946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.159084][ T5946] CPU: 1 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0 [ 87.166259][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.176294][ T5946] Call Trace: [ 87.179551][ T5946] [ 87.182458][ T5946] dump_stack_lvl+0x16c/0x230 [ 87.187120][ T5946] ? show_regs_print_info+0x20/0x20 [ 87.192297][ T5946] ? load_image+0x3b0/0x3b0 [ 87.196785][ T5946] panic+0x2c0/0x710 [ 87.200657][ T5946] ? bpf_jit_dump+0xd0/0xd0 [ 87.205146][ T5946] __warn+0x2e0/0x470 [ 87.209106][ T5946] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 87.215066][ T5946] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 87.221024][ T5946] report_bug+0x2be/0x4f0 [ 87.225337][ T5946] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 87.231295][ T5946] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 87.237254][ T5946] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 87.243212][ T5946] handle_bug+0xcf/0x120 [ 87.247437][ T5946] exc_invalid_op+0x1a/0x50 [ 87.251918][ T5946] asm_exc_invalid_op+0x1a/0x20 [ 87.256752][ T5946] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 87.263330][ T5946] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 87.282924][ T5946] RSP: 0018:ffffc900033171c0 EFLAGS: 00010246 [ 87.288980][ T5946] RAX: 6372dfbb57117300 RBX: 0000000000000002 RCX: ffff888024745a00 [ 87.296934][ T5946] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 87.304887][ T5946] RBP: ffffc900033172b8 R08: ffffc90003316dc7 R09: 1ffff92000662db8 [ 87.312849][ T5946] R10: dffffc0000000000 R11: fffff52000662db9 R12: dffffc0000000000 [ 87.320803][ T5946] R13: ffff88807133aca8 R14: ffff88807133aab0 R15: ffff88807133ab00 [ 87.328765][ T5946] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 87.334389][ T5946] ? ext4_xattr_inode_iget+0x3df/0x600 [ 87.339835][ T5946] ext4_xattr_set_entry+0xcda/0x1e90 [ 87.345114][ T5946] ext4_xattr_ibody_set+0x254/0x6a0 [ 87.350298][ T5946] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 87.356187][ T5946] __ext4_expand_extra_isize+0x306/0x400 [ 87.361809][ T5946] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 87.367256][ T5946] ext4_evict_inode+0x7ed/0xea0 [ 87.372092][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 87.376956][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.382835][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 87.388016][ T5946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.393893][ T5946] evict+0x486/0x870 [ 87.397773][ T5946] ? __lock_acquire+0x7c80/0x7c80 [ 87.402784][ T5946] ? proc_nr_inodes+0x230/0x230 [ 87.407617][ T5946] ? do_raw_spin_unlock+0x121/0x230 [ 87.412797][ T5946] ? _raw_spin_unlock+0x28/0x40 [ 87.417629][ T5946] ? iput+0x70a/0x920 [ 87.421591][ T5946] ext4_orphan_cleanup+0xbd4/0x1400 [ 87.426789][ T5946] ? ext4_orphan_del+0xba0/0xba0 [ 87.431715][ T5946] ? ext4_register_li_request+0x183/0x940 [ 87.437421][ T5946] ? errseq_check_and_advance+0x66/0x120 [ 87.443038][ T5946] ext4_fill_super+0x5de4/0x66c0 [ 87.447964][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 87.454199][ T5946] ? __might_sleep+0xe0/0xe0 [ 87.458775][ T5946] ? read_lock_is_recursive+0x20/0x20 [ 87.464129][ T5946] ? snprintf+0xdb/0x120 [ 87.468362][ T5946] ? vscnprintf+0x80/0x80 [ 87.472683][ T5946] ? down_write+0x162/0x1f0 [ 87.477168][ T5946] ? down_read_killable+0x340/0x340 [ 87.482350][ T5946] ? setup_bdev_super+0x56b/0x660 [ 87.487359][ T5946] get_tree_bdev+0x3e4/0x510 [ 87.491931][ T5946] ? vfs_parse_fs_string+0x160/0x160 [ 87.497200][ T5946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 87.503423][ T5946] ? setup_bdev_super+0x660/0x660 [ 87.508427][ T5946] ? apparmor_capable+0x137/0x1a0 [ 87.513436][ T5946] ? bpf_lsm_capable+0x9/0x10 [ 87.518096][ T5946] ? security_capable+0x89/0xb0 [ 87.522930][ T5946] vfs_get_tree+0x8c/0x280 [ 87.527335][ T5946] do_new_mount+0x24b/0xa40 [ 87.531821][ T5946] __se_sys_mount+0x2da/0x3c0 [ 87.536481][ T5946] ? __x64_sys_mount+0xc0/0xc0 [ 87.541225][ T5946] ? lockdep_hardirqs_on+0x98/0x150 [ 87.546407][ T5946] ? __x64_sys_mount+0x20/0xc0 [ 87.551152][ T5946] do_syscall_64+0x55/0xb0 [ 87.555558][ T5946] ? clear_bhb_loop+0x40/0x90 [ 87.560225][ T5946] ? clear_bhb_loop+0x40/0x90 [ 87.564886][ T5946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.570764][ T5946] RIP: 0033:0x7f039f190eea [ 87.575173][ T5946] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.594773][ T5946] RSP: 002b:00007ffe8f8a8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.603185][ T5946] RAX: ffffffffffffffda RBX: 00007ffe8f8a8c30 RCX: 00007f039f190eea [ 87.611162][ T5946] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f8a8bf0 [ 87.619124][ T5946] RBP: 0000200000000180 R08: 00007ffe8f8a8c30 R09: 0000000000800700 [ 87.627087][ T5946] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.635044][ T5946] R13: 00007ffe8f8a8bf0 R14: 000000000000046f R15: 0000200000000200 [ 87.643014][ T5946] [ 87.646258][ T5946] Kernel Offset: disabled [ 87.650565][ T5946] Rebooting in 86400 seconds..