Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2025/11/02 11:23:16 parsed 1 programs syzkaller login: [ 86.908900][ T994] cfg80211: failed to load regulatory.db [ 87.100715][ T5810] cgroup: Unknown subsys name 'net' [ 87.331601][ T5810] cgroup: Unknown subsys name 'cpuset' [ 87.388328][ T5810] cgroup: Unknown subsys name 'rlimit' [ 89.187714][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.271374][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.271400][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.407300][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.407324][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.890284][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.892250][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.893080][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.894739][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.895569][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.141900][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 97.488918][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.491122][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.491338][ T5874] bridge_slave_0: entered allmulticast mode [ 97.494252][ T5874] bridge_slave_0: entered promiscuous mode [ 97.503062][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.503278][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.503454][ T5874] bridge_slave_1: entered allmulticast mode [ 97.506152][ T5874] bridge_slave_1: entered promiscuous mode [ 97.664762][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.672830][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.948489][ T5874] team0: Port device team_slave_0 added [ 97.950951][ T5874] team0: Port device team_slave_1 added [ 98.289061][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.289077][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.289098][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.347592][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.347609][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.347628][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.595421][ T5874] hsr_slave_0: entered promiscuous mode [ 98.596391][ T5874] hsr_slave_1: entered promiscuous mode [ 98.993042][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.015292][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.051462][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.089847][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.294512][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.323450][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.335384][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.336927][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.356180][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.356434][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.578338][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.640849][ T5874] veth0_vlan: entered promiscuous mode [ 99.655259][ T5874] veth1_vlan: entered promiscuous mode [ 99.713629][ T5874] veth0_macvtap: entered promiscuous mode [ 99.728025][ T5874] veth1_macvtap: entered promiscuous mode [ 99.752067][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.771029][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.801621][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.804070][ T1431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.804114][ T1431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.804149][ T1431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.671000][ T1401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.889409][ T1401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.460059][ T1401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.444284][ T1401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/02 11:23:34 executed programs: 0 [ 102.612805][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.625730][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.628833][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.631636][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.632329][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.844021][ T5916] chnl_net:caif_netlink_parms(): no params data found [ 103.178965][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.179099][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.179316][ T5916] bridge_slave_0: entered allmulticast mode [ 103.181459][ T5916] bridge_slave_0: entered promiscuous mode [ 103.204462][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.204579][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.204800][ T5916] bridge_slave_1: entered allmulticast mode [ 103.214319][ T5916] bridge_slave_1: entered promiscuous mode [ 103.401900][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.405398][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.497827][ T1401] bridge_slave_1: left allmulticast mode [ 103.498033][ T1401] bridge_slave_1: left promiscuous mode [ 103.499802][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.557961][ T1401] bridge_slave_0: left allmulticast mode [ 103.557983][ T1401] bridge_slave_0: left promiscuous mode [ 103.558159][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.648550][ T5125] Bluetooth: hci0: command tx timeout [ 105.258615][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.347252][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.369403][ T1401] bond0 (unregistering): Released all slaves [ 105.536059][ T5916] team0: Port device team_slave_0 added [ 105.545696][ T5916] team0: Port device team_slave_1 added [ 105.726759][ T1401] hsr_slave_0: left promiscuous mode [ 105.746703][ T1401] hsr_slave_1: left promiscuous mode [ 105.747609][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.747671][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.788550][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.788588][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.893234][ T1401] veth1_macvtap: left promiscuous mode [ 105.893397][ T1401] veth0_macvtap: left promiscuous mode [ 105.893829][ T1401] veth1_vlan: left promiscuous mode [ 105.894013][ T1401] veth0_vlan: left promiscuous mode [ 106.726726][ T5125] Bluetooth: hci0: command tx timeout [ 107.817419][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 107.997493][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 108.806701][ T5125] Bluetooth: hci0: command tx timeout [ 109.987721][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.987737][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.987762][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.990248][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.990263][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.990286][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.239185][ T5916] hsr_slave_0: entered promiscuous mode [ 110.240810][ T5916] hsr_slave_1: entered promiscuous mode [ 110.886685][ T5125] Bluetooth: hci0: command tx timeout [ 111.976998][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.001335][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.052179][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.093261][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.590716][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.639232][ T5916] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.653375][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.653644][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.672781][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.672976][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.861825][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.923402][ T5916] veth0_vlan: entered promiscuous mode [ 112.932427][ T5916] veth1_vlan: entered promiscuous mode [ 112.963656][ T5916] veth0_macvtap: entered promiscuous mode [ 112.970527][ T5916] veth1_macvtap: entered promiscuous mode [ 112.994830][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.005225][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.019633][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.021147][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.021587][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.022337][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.226094][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.226113][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.275268][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.275288][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/02 11:23:45 executed programs: 2 [ 113.364292][ T5992] loop0: detected capacity change from 0 to 512 [ 113.433827][ T5992] [ 113.433839][ T5992] ====================================================== [ 113.433847][ T5992] WARNING: possible circular locking dependency detected [ 113.433863][ T5992] syzkaller #0 Not tainted [ 113.433873][ T5992] -------------------------[ 113.433873][ T5992] ------------------------------------------------------ [ 113.433881][ T5992] syz.0.17/5992 is trying to acquire lock: [ 113.433891][ T5992] ffff88801090ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 113.433942][ T5992] [ 113.433942][ T5992] but task is already holding lock: [ 113.433948][ T5992] ffff888041615f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 113.433991][ T5992] [ 113.433991][ T5992] which lock already depends on the new lock. [ 113.433991][ T5992] [ 113.433997][ T5992] [ 113.433997][ T5992] the existing dependency chain (in reverse order) is: [ 113.434004][ T5992] [ 113.434004][ T5992] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 113.434029][ T5992] lock_acquire+0x120/0x360 [ 113.434050][ T5992] down_write+0x3a/0x50 [ 113.434072][ T5992] ext4_xattr_set_handle+0x165/0x1590 [ 113.434094][ T5992] ext4_initxattrs+0x9f/0x110 [ 113.434112][ T5992] security_inode_init_security+0x2a0/0x3f0 [ 113.434135][ T5992] __ext4_new_inode+0x3314/0x3cb0 [ 113.434157][ T5992] ext4_create+0x22d/0x460 [ 113.434175][ T5992] path_openat+0x1500/0x3840 [ 113.434191][ T5992] do_filp_open+0x1fa/0x410 [ 113.434207][ T5992] do_sys_openat2+0x121/0x1c0 [ 113.434222][ T5992] __x64_sys_openat+0x138/0x170 [ 113.434237][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.434257][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434274][ T5992] [ 113.434274][ T5992] -> #1 (jbd2_handle){++++}-{0:0}: [ 113.434299][ T5992] lock_acquire+0x120/0x360 [ 113.434318][ T5992] start_this_handle+0x1fa7/0x21c0 [ 113.434336][ T5992] jbd2__journal_start+0x2c1/0x5b0 [ 113.434356][ T5992] __ext4_journal_start_sb+0x227/0x5c0 [ 113.434378][ T5992] ext4_do_writepages+0xf6f/0x4600 [ 113.434399][ T5992] ext4_writepages+0x205/0x350 [ 113.434414][ T5992] do_writepages+0x32e/0x550 [ 113.434431][ T5992] file_write_and_wait_range+0x244/0x340 [ 113.434450][ T5992] ext4_sync_file+0x2b4/0xb20 [ 113.434471][ T5992] __x64_sys_fsync+0x194/0x1f0 [ 113.434485][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.434505][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434521][ T5992] [ 113.434521][ T5992] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 113.434546][ T5992] validate_chain+0xb9b/0x2140 [ 113.434561][ T5992] __lock_acquire+0xab9/0xd20 [ 113.434586][ T5992] lock_acquire+0x120/0x360 [ 113.434605][ T5992] percpu_down_read_internal+0x48/0x1d0 [ 113.434620][ T5992] ext4_writepages+0x1cc/0x350 [ 113.434635][ T5992] do_writepages+0x32e/0x550 [ 113.434650][ T5992] __writeback_single_inode+0x145/0x1000 [ 113.434670][ T5992] writeback_single_inode+0x1db/0x640 [ 113.434687][ T5992] write_inode_now+0x160/0x1d0 [ 113.434703][ T5992] iput+0x830/0xc50 [ 113.434723][ T5992] ext4_xattr_block_set+0x1fce/0x2ac0 [ 113.434745][ T5992] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 113.434767][ T5992] __ext4_expand_extra_isize+0x30d/0x400 [ 113.434791][ T5992] __ext4_mark_inode_dirty+0x46c/0x700 [ 113.434809][ T5992] ext4_evict_inode+0x80d/0xee0 [ 113.434826][ T5992] evict+0x504/0x9c0 [ 113.434842][ T5992] ext4_orphan_cleanup+0xc20/0x1460 [ 113.434860][ T5992] ext4_fill_super+0x593b/0x61f0 [ 113.434875][ T5992] get_tree_bdev_flags+0x40e/0x4d0 [ 113.434894][ T5992] vfs_get_tree+0x92/0x2b0 [ 113.434909][ T5992] do_new_mount+0x302/0xa10 [ 113.434927][ T5992] __se_sys_mount+0x313/0x410 [ 113.434946][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.434966][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434981][ T5992] [ 113.434981][ T5992] other info that might help us debug this: [ 113.434981][ T5992] [ 113.434987][ T5992] Chain exists of: [ 113.434987][ T5992] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 113.434987][ T5992] [ 113.435012][ T5992] Possible unsafe locking scenario: [ 113.435012][ T5992] [ 113.435018][ T5992] CPU0 CPU1 [ 113.435023][ T5992] ---- ---- [ 113.435028][ T5992] lock(&ei->xattr_sem); [ 113.435038][ T5992] lock(jbd2_handle); [ 113.435050][ T5992] lock(&ei->xattr_sem); [ 113.435063][ T5992] rlock(&sbi->s_writepages_rwsem); [ 113.435075][ T5992] [ 113.435075][ T5992] *** DEADLOCK *** [ 113.435075][ T5992] [ 113.435079][ T5992] 3 locks held by syz.0.17/5992: [ 113.435089][ T5992] #0: ffff88801090c0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 113.435139][ T5992] #1: ffff88801090c770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 113.435178][ T5992] #2: ffff888041615f78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 113.435220][ T5992] [ 113.435220][ T5992] stack backtrace: [ 113.435243][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.435263][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.435281][ T5992] Call Trace: [ 113.435291][ T5992] [ 113.435299][ T5992] dump_stack_lvl+0x189/0x250 [ 113.435326][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.435349][ T5992] ? __pfx__printk+0x10/0x10 [ 113.435371][ T5992] ? print_lock_name+0xde/0x100 [ 113.435391][ T5992] print_circular_bug+0x2ee/0x310 [ 113.435410][ T5992] check_noncircular+0x134/0x160 [ 113.435429][ T5992] validate_chain+0xb9b/0x2140 [ 113.435448][ T5992] ? look_up_lock_class+0x74/0x170 [ 113.435470][ T5992] ? register_lock_class+0x51/0x320 [ 113.435493][ T5992] __lock_acquire+0xab9/0xd20 [ 113.435517][ T5992] ? ext4_writepages+0x1cc/0x350 [ 113.435534][ T5992] lock_acquire+0x120/0x360 [ 113.435553][ T5992] ? ext4_writepages+0x1cc/0x350 [ 113.435572][ T5992] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 113.435602][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.435633][ T5992] percpu_down_read_internal+0x48/0x1d0 [ 113.435650][ T5992] ? ext4_writepages+0x1cc/0x350 [ 113.435667][ T5992] ext4_writepages+0x1cc/0x350 [ 113.435685][ T5992] ? __pfx_ext4_writepages+0x10/0x10 [ 113.435701][ T5992] ? rt_mutex_slowunlock+0x493/0x8a0 [ 113.435722][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.435739][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.435757][ T5992] ? __pfx_ext4_writepages+0x10/0x10 [ 113.435774][ T5992] do_writepages+0x32e/0x550 [ 113.435793][ T5992] ? reacquire_held_locks+0x127/0x1d0 [ 113.435817][ T5992] ? rt_spin_lock+0x1c1/0x3e0 [ 113.435836][ T5992] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 113.435857][ T5992] __writeback_single_inode+0x145/0x1000 [ 113.435880][ T5992] writeback_single_inode+0x1db/0x640 [ 113.435901][ T5992] write_inode_now+0x160/0x1d0 [ 113.435918][ T5992] ? __pfx_write_inode_now+0x10/0x10 [ 113.435949][ T5992] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 113.435968][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.435987][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.436006][ T5992] iput+0x830/0xc50 [ 113.436030][ T5992] ext4_xattr_block_set+0x1fce/0x2ac0 [ 113.436066][ T5992] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 113.436091][ T5992] ? ext4_xattr_block_find+0x2d4/0x350 [ 113.436121][ T5992] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 113.436160][ T5992] __ext4_expand_extra_isize+0x30d/0x400 [ 113.436188][ T5992] __ext4_mark_inode_dirty+0x46c/0x700 [ 113.436213][ T5992] ext4_evict_inode+0x80d/0xee0 [ 113.436237][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.436255][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.436275][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.436293][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.436312][ T5992] evict+0x504/0x9c0 [ 113.436332][ T5992] ? __pfx_evict+0x10/0x10 [ 113.436349][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.436368][ T5992] ? iput+0x946/0xc50 [ 113.436393][ T5992] ext4_orphan_cleanup+0xc20/0x1460 [ 113.436417][ T5992] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 113.436437][ T5992] ? ext4_register_li_request+0x640/0x720 [ 113.436457][ T5992] ? errseq_check_and_advance+0x66/0x120 [ 113.436481][ T5992] ext4_fill_super+0x593b/0x61f0 [ 113.436502][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.436516][ T5992] ? snprintf+0xda/0x120 [ 113.436529][ T5992] ? rt_spin_lock+0x1c1/0x3e0 [ 113.436546][ T5992] ? __pfx_snprintf+0x10/0x10 [ 113.436562][ T5992] ? set_blocksize+0x219/0x450 [ 113.436595][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.436615][ T5992] ? sb_set_blocksize+0x104/0x180 [ 113.436638][ T5992] ? setup_bdev_super+0x4c1/0x5b0 [ 113.436661][ T5992] get_tree_bdev_flags+0x40e/0x4d0 [ 113.436681][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.436698][ T5992] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.436718][ T5992] ? cap_capable+0x11f/0x460 [ 113.436735][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.436754][ T5992] vfs_get_tree+0x92/0x2b0 [ 113.436776][ T5992] do_new_mount+0x302/0xa10 [ 113.436798][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.436815][ T5992] ? __pfx_do_new_mount+0x10/0x10 [ 113.436836][ T5992] ? ns_capable+0x8a/0xf0 [ 113.436861][ T5992] __se_sys_mount+0x313/0x410 [ 113.436885][ T5992] ? __pfx___se_sys_mount+0x10/0x10 [ 113.436908][ T5992] ? do_syscall_64+0xbe/0xfa0 [ 113.436928][ T5992] ? __x64_sys_mount+0x20/0xc0 [ 113.436951][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.436972][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.436993][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.437010][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 113.437029][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.437046][ T5992] RIP: 0033:0x7f002152076a [ 113.437069][ T5992] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.437084][ T5992] RSP: 002b:00007ffc35861cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.437103][ T5992] RAX: ffffffffffffffda RBX: 00007ffc35861d40 RCX: 00007f002152076a [ 113.437117][ T5992] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc35861d00 [ 113.437130][ T5992] RBP: 0000200000000180 R08: 00007ffc35861d40 R09: 0000000000800700 [ 113.437142][ T5992] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 113.437154][ T5992] R13: 00007ffc35861d00 R14: 000000000000046f R15: 000000000000002c [ 113.437173][ T5992] [ 113.458006][ T5992] ------------[ cut here ]------------ [ 113.458018][ T5992] EA inode 11 i_nlink=2 [ 113.458258][ T5992] WARNING: CPU: 0 PID: 5992 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.458298][ T5992] Modules linked in: [ 113.458314][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.458343][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.458354][ T5992] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.458381][ T5992] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 97 9a 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 33 f6 40 08 44 89 f9 [ 113.458396][ T5992] RSP: 0018:ffffc90003cb7100 EFLAGS: 00010246 [ 113.458411][ T5992] RAX: b9ab98aecddff600 RBX: 0000000000000001 RCX: ffff88802ffa0000 [ 113.458424][ T5992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.458434][ T5992] RBP: ffffc90003cb71f8 R08: 0000000000000000 R09: 0000000000000000 [ 113.458445][ T5992] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 113.458457][ T5992] R13: ffff888053469c00 R14: 1ffff1100a68d366 R15: ffff888053469b30 [ 113.458471][ T5992] FS: 000055557fb3a500(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 113.458486][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.458499][ T5992] CR2: 00007fef74a3a9c0 CR3: 000000003fdf0000 CR4: 00000000003526f0 [ 113.458515][ T5992] Call Trace: [ 113.458521][ T5992] [ 113.458529][ T5992] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 113.458550][ T5992] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 113.458576][ T5992] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 113.458604][ T5992] ext4_xattr_set_entry+0xabb/0x1e20 [ 113.458635][ T5992] ext4_xattr_ibody_set+0x254/0x6a0 [ 113.458661][ T5992] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 113.458699][ T5992] __ext4_expand_extra_isize+0x30d/0x400 [ 113.458729][ T5992] __ext4_mark_inode_dirty+0x46c/0x700 [ 113.458754][ T5992] ext4_evict_inode+0x80d/0xee0 [ 113.458778][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.458796][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.458818][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.458836][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.458854][ T5992] evict+0x504/0x9c0 [ 113.458874][ T5992] ? __pfx_evict+0x10/0x10 [ 113.458891][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.458910][ T5992] ? iput+0x946/0xc50 [ 113.458934][ T5992] ext4_orphan_cleanup+0xc20/0x1460 [ 113.458958][ T5992] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 113.458978][ T5992] ? ext4_register_li_request+0x640/0x720 [ 113.458998][ T5992] ? errseq_check_and_advance+0x66/0x120 [ 113.459019][ T5992] ext4_fill_super+0x593b/0x61f0 [ 113.459044][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.459060][ T5992] ? snprintf+0xda/0x120 [ 113.459075][ T5992] ? rt_spin_lock+0x1c1/0x3e0 [ 113.459095][ T5992] ? __pfx_snprintf+0x10/0x10 [ 113.459110][ T5992] ? set_blocksize+0x219/0x450 [ 113.459133][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.459152][ T5992] ? sb_set_blocksize+0x104/0x180 [ 113.459175][ T5992] ? setup_bdev_super+0x4c1/0x5b0 [ 113.459198][ T5992] get_tree_bdev_flags+0x40e/0x4d0 [ 113.459218][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.459235][ T5992] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.459255][ T5992] ? cap_capable+0x11f/0x460 [ 113.459271][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.459291][ T5992] vfs_get_tree+0x92/0x2b0 [ 113.459312][ T5992] do_new_mount+0x302/0xa10 [ 113.459340][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.459359][ T5992] ? __pfx_do_new_mount+0x10/0x10 [ 113.459380][ T5992] ? ns_capable+0x8a/0xf0 [ 113.459406][ T5992] __se_sys_mount+0x313/0x410 [ 113.459431][ T5992] ? __pfx___se_sys_mount+0x10/0x10 [ 113.459454][ T5992] ? do_syscall_64+0xbe/0xfa0 [ 113.459474][ T5992] ? __x64_sys_mount+0x20/0xc0 [ 113.459497][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.459517][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.459539][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.459556][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 113.459575][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.459591][ T5992] RIP: 0033:0x7f002152076a [ 113.459607][ T5992] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.459620][ T5992] RSP: 002b:00007ffc35861cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.459638][ T5992] RAX: ffffffffffffffda RBX: 00007ffc35861d40 RCX: 00007f002152076a [ 113.459651][ T5992] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc35861d00 [ 113.459663][ T5992] RBP: 0000200000000180 R08: 00007ffc35861d40 R09: 0000000000800700 [ 113.459675][ T5992] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 113.459686][ T5992] R13: 00007ffc35861d00 R14: 000000000000046f R15: 000000000000002c [ 113.459705][ T5992] [ 113.459715][ T5992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.459728][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.459747][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.459757][ T5992] Call Trace: [ 113.459763][ T5992] [ 113.459770][ T5992] dump_stack_lvl+0x99/0x250 [ 113.459795][ T5992] ? __asan_memcpy+0x40/0x70 [ 113.459814][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.459838][ T5992] ? __pfx__printk+0x10/0x10 [ 113.459862][ T5992] vpanic+0x237/0x6d0 [ 113.459878][ T5992] ? __pfx_vpanic+0x10/0x10 [ 113.459899][ T5992] panic+0xb9/0xc0 [ 113.459914][ T5992] ? __pfx_panic+0x10/0x10 [ 113.459935][ T5992] __warn+0x31b/0x4b0 [ 113.459951][ T5992] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.459978][ T5992] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.460003][ T5992] report_bug+0x2be/0x4f0 [ 113.460024][ T5992] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.460049][ T5992] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.460074][ T5992] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 113.460098][ T5992] handle_bug+0x84/0x160 [ 113.460122][ T5992] exc_invalid_op+0x1a/0x50 [ 113.460146][ T5992] asm_exc_invalid_op+0x1a/0x20 [ 113.460162][ T5992] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 113.460188][ T5992] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 97 9a 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 33 f6 40 08 44 89 f9 [ 113.460202][ T5992] RSP: 0018:ffffc90003cb7100 EFLAGS: 00010246 [ 113.460217][ T5992] RAX: b9ab98aecddff600 RBX: 0000000000000001 RCX: ffff88802ffa0000 [ 113.460230][ T5992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.460240][ T5992] RBP: ffffc90003cb71f8 R08: 0000000000000000 R09: 0000000000000000 [ 113.460251][ T5992] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 113.460264][ T5992] R13: ffff888053469c00 R14: 1ffff1100a68d366 R15: ffff888053469b30 [ 113.460285][ T5992] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 113.460305][ T5992] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 113.460337][ T5992] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 113.460364][ T5992] ext4_xattr_set_entry+0xabb/0x1e20 [ 113.460396][ T5992] ext4_xattr_ibody_set+0x254/0x6a0 [ 113.460422][ T5992] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 113.460460][ T5992] __ext4_expand_extra_isize+0x30d/0x400 [ 113.460489][ T5992] __ext4_mark_inode_dirty+0x46c/0x700 [ 113.460514][ T5992] ext4_evict_inode+0x80d/0xee0 [ 113.460537][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.460556][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.460576][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.460594][ T5992] ? __pfx_ext4_evict_inode+0x10/0x10 [ 113.460613][ T5992] evict+0x504/0x9c0 [ 113.460634][ T5992] ? __pfx_evict+0x10/0x10 [ 113.460651][ T5992] ? rt_spin_unlock+0x161/0x200 [ 113.460670][ T5992] ? iput+0x946/0xc50 [ 113.460695][ T5992] ext4_orphan_cleanup+0xc20/0x1460 [ 113.460719][ T5992] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 113.460739][ T5992] ? ext4_register_li_request+0x640/0x720 [ 113.460758][ T5992] ? errseq_check_and_advance+0x66/0x120 [ 113.460779][ T5992] ext4_fill_super+0x593b/0x61f0 [ 113.460804][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.460820][ T5992] ? snprintf+0xda/0x120 [ 113.460836][ T5992] ? rt_spin_lock+0x1c1/0x3e0 [ 113.460855][ T5992] ? __pfx_snprintf+0x10/0x10 [ 113.460871][ T5992] ? set_blocksize+0x219/0x450 [ 113.460893][ T5992] ? rt_spin_unlock+0x150/0x200 [ 113.460912][ T5992] ? sb_set_blocksize+0x104/0x180 [ 113.460936][ T5992] ? setup_bdev_super+0x4c1/0x5b0 [ 113.460958][ T5992] get_tree_bdev_flags+0x40e/0x4d0 [ 113.460978][ T5992] ? __pfx_ext4_fill_super+0x10/0x10 [ 113.460995][ T5992] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.461017][ T5992] ? cap_capable+0x11f/0x460 [ 113.461032][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.461051][ T5992] vfs_get_tree+0x92/0x2b0 [ 113.461072][ T5992] do_new_mount+0x302/0xa10 [ 113.461094][ T5992] ? safesetid_security_capable+0xa9/0x1a0 [ 113.461112][ T5992] ? __pfx_do_new_mount+0x10/0x10 [ 113.461134][ T5992] ? ns_capable+0x8a/0xf0 [ 113.461159][ T5992] __se_sys_mount+0x313/0x410 [ 113.461183][ T5992] ? __pfx___se_sys_mount+0x10/0x10 [ 113.461207][ T5992] ? do_syscall_64+0xbe/0xfa0 [ 113.461227][ T5992] ? __x64_sys_mount+0x20/0xc0 [ 113.461250][ T5992] do_syscall_64+0xfa/0xfa0 [ 113.461271][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.461291][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.461309][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 113.461333][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.461350][ T5992] RIP: 0033:0x7f002152076a [ 113.461363][ T5992] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.461376][ T5992] RSP: 002b:00007ffc35861cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.461393][ T5992] RAX: ffffffffffffffda RBX: 00007ffc35861d40 RCX: 00007f002152076a [ 113.461407][ T5992] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc35861d00 [ 113.461419][ T5992] RBP: 0000200000000180 R08: 00007ffc35861d40 R09: 0000000000800700 [ 113.461431][ T5992] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 113.461443][ T5992] R13: 00007ffc35861d00 R14: 000000000000046f R15: 000000000000002c [ 113.461462][ T5992] [ 113.461734][ T5992] Kernel Offset: disabled