Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2025/11/12 04:23:17 parsed 1 programs [ 86.805144][ T5805] cgroup: Unknown subsys name 'net' [ 86.824486][ T993] cfg80211: failed to load regulatory.db [ 87.065937][ T5805] cgroup: Unknown subsys name 'cpuset' [ 87.141830][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.903464][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.499055][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.503344][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.504195][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.505487][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.506180][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.768717][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 95.291573][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.291660][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.291802][ T5855] bridge_slave_0: entered allmulticast mode [ 95.293587][ T5855] bridge_slave_0: entered promiscuous mode [ 95.296607][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.296679][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.296772][ T5855] bridge_slave_1: entered allmulticast mode [ 95.298287][ T5855] bridge_slave_1: entered promiscuous mode [ 95.526862][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.535800][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.696252][ T5855] team0: Port device team_slave_0 added [ 95.698456][ T5855] team0: Port device team_slave_1 added [ 96.063312][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.063323][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.063337][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.065974][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.065988][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.066010][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.297975][ T5855] hsr_slave_0: entered promiscuous mode [ 96.298988][ T5855] hsr_slave_1: entered promiscuous mode [ 96.647122][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.668424][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.706279][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.755459][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.928892][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.950703][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.965545][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.966874][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.970015][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.970254][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.209469][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.256874][ T5855] veth0_vlan: entered promiscuous mode [ 97.265475][ T5855] veth1_vlan: entered promiscuous mode [ 97.303263][ T5855] veth0_macvtap: entered promiscuous mode [ 97.307161][ T5855] veth1_macvtap: entered promiscuous mode [ 97.329120][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.339948][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.360149][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374676][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374941][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374979][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.125995][ T1362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.333156][ T1362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.563119][ T1362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.617468][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.617493][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.687294][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.687316][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.246379][ T1362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.515449][ T1362] bridge_slave_1: left allmulticast mode [ 100.515538][ T1362] bridge_slave_1: left promiscuous mode [ 100.517144][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.602534][ T1362] bridge_slave_0: left allmulticast mode [ 100.602555][ T1362] bridge_slave_0: left promiscuous mode [ 100.602996][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.391888][ T1362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.451692][ T1362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.473225][ T1362] bond0 (unregistering): Released all slaves [ 102.811096][ T1362] hsr_slave_0: left promiscuous mode [ 102.859416][ T1362] hsr_slave_1: left promiscuous mode [ 102.860655][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.860739][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.893180][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.893210][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.000881][ T1362] veth1_macvtap: left promiscuous mode [ 103.008047][ T1362] veth0_macvtap: left promiscuous mode [ 103.008343][ T1362] veth1_vlan: left promiscuous mode [ 103.008633][ T1362] veth0_vlan: left promiscuous mode [ 104.992250][ T1362] team0 (unregistering): Port device team_slave_1 removed [ 105.261791][ T1362] team0 (unregistering): Port device team_slave_0 removed 2025/11/12 04:23:41 executed programs: 0 [ 108.649677][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.658686][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.668397][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.669779][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.670579][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.580561][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 110.025817][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.026014][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.026182][ T5952] bridge_slave_0: entered allmulticast mode [ 110.028876][ T5952] bridge_slave_0: entered promiscuous mode [ 110.036562][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.036774][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.036937][ T5952] bridge_slave_1: entered allmulticast mode [ 110.042036][ T5952] bridge_slave_1: entered promiscuous mode [ 110.228342][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.242741][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.743059][ T5120] Bluetooth: hci0: command tx timeout [ 110.854870][ T5952] team0: Port device team_slave_0 added [ 110.874038][ T5952] team0: Port device team_slave_1 added [ 111.372847][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.372864][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.372884][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.375555][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.375571][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.375592][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.709506][ T5952] hsr_slave_0: entered promiscuous mode [ 111.710281][ T5952] hsr_slave_1: entered promiscuous mode [ 112.821744][ T5120] Bluetooth: hci0: command tx timeout [ 113.640639][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.665982][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.705896][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.749968][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.914193][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.954879][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.979558][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.979854][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.007793][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.008184][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.355565][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.429764][ T5952] veth0_vlan: entered promiscuous mode [ 114.450429][ T5952] veth1_vlan: entered promiscuous mode [ 114.497298][ T5952] veth0_macvtap: entered promiscuous mode [ 114.515074][ T5952] veth1_macvtap: entered promiscuous mode [ 114.543995][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.558266][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.569328][ T1362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.569530][ T1362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.569573][ T1362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.569608][ T1362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.800276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.800297][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.869545][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.869566][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.901262][ T5120] Bluetooth: hci0: command tx timeout 2025/11/12 04:23:48 executed programs: 2 [ 115.070307][ T6060] loop0: detected capacity change from 0 to 512 [ 115.179017][ T6060] [ 115.179030][ T6060] ====================================================== [ 115.179037][ T6060] WARNING: possible circular locking dependency detected [ 115.179053][ T6060] syzkaller #0 Not tainted [ 115.179061][ T6060] ------------------------------------------------------ [ 115.179067][ T6060] syz.0.17/6060 is trying to acquire lock: [ 115.179077][ T6060] ffff888035a04c58 (&sbi->s_writepages_rwse[ 115.179077][ T6060] ffff888035a04c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 115.179129][ T6060] [ 115.179129][ T6060] but task is already holding lock: [ 115.179135][ T6060] ffff8880492a6b50 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 115.179176][ T6060] [ 115.179176][ T6060] which lock already depends on the new lock. [ 115.179176][ T6060] [ 115.179182][ T6060] [ 115.179182][ T6060] the existing dependency chain (in reverse order) is: [ 115.179189][ T6060] [ 115.179189][ T6060] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 115.179212][ T6060] lock_acquire+0x120/0x360 [ 115.179233][ T6060] down_write+0x3a/0x50 [ 115.179245][ T6060] ext4_xattr_set_handle+0x165/0x1590 [ 115.179267][ T6060] ext4_initxattrs+0x9f/0x110 [ 115.179285][ T6060] security_inode_init_security+0x2a0/0x3f0 [ 115.179307][ T6060] __ext4_new_inode+0x3314/0x3cb0 [ 115.179329][ T6060] ext4_create+0x22d/0x460 [ 115.179347][ T6060] path_openat+0x1500/0x3840 [ 115.179364][ T6060] do_filp_open+0x1fa/0x410 [ 115.179380][ T6060] do_sys_openat2+0x121/0x1c0 [ 115.179395][ T6060] __x64_sys_openat+0x138/0x170 [ 115.179411][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.179431][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.179448][ T6060] [ 115.179448][ T6060] -> #1 (jbd2_handle){++++}-{0:0}: [ 115.179471][ T6060] lock_acquire+0x120/0x360 [ 115.179491][ T6060] start_this_handle+0x1fa7/0x21c0 [ 115.179511][ T6060] jbd2__journal_start+0x2c1/0x5b0 [ 115.179530][ T6060] __ext4_journal_start_sb+0x227/0x5c0 [ 115.179553][ T6060] ext4_do_writepages+0xf6f/0x4600 [ 115.179572][ T6060] ext4_writepages+0x205/0x350 [ 115.179595][ T6060] do_writepages+0x32e/0x550 [ 115.179611][ T6060] file_write_and_wait_range+0x244/0x340 [ 115.179630][ T6060] ext4_sync_file+0x2b4/0xb20 [ 115.179651][ T6060] __x64_sys_fsync+0x194/0x1f0 [ 115.179665][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.179685][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.179701][ T6060] [ 115.179701][ T6060] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 115.179725][ T6060] validate_chain+0xb9b/0x2140 [ 115.179738][ T6060] __lock_acquire+0xab9/0xd20 [ 115.179757][ T6060] lock_acquire+0x120/0x360 [ 115.179776][ T6060] percpu_down_read_internal+0x48/0x1d0 [ 115.179791][ T6060] ext4_writepages+0x1cc/0x350 [ 115.179807][ T6060] do_writepages+0x32e/0x550 [ 115.179823][ T6060] __writeback_single_inode+0x145/0x1000 [ 115.179842][ T6060] writeback_single_inode+0x1db/0x640 [ 115.179858][ T6060] write_inode_now+0x160/0x1d0 [ 115.179874][ T6060] iput+0x830/0xc50 [ 115.179894][ T6060] ext4_xattr_block_set+0x1fce/0x2ac0 [ 115.179915][ T6060] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 115.179938][ T6060] __ext4_expand_extra_isize+0x30d/0x400 [ 115.179953][ T6060] __ext4_mark_inode_dirty+0x46c/0x700 [ 115.179972][ T6060] ext4_evict_inode+0x80d/0xee0 [ 115.179989][ T6060] evict+0x504/0x9c0 [ 115.180003][ T6060] ext4_orphan_cleanup+0xc20/0x1460 [ 115.180021][ T6060] ext4_fill_super+0x593b/0x61f0 [ 115.180036][ T6060] get_tree_bdev_flags+0x40e/0x4d0 [ 115.180056][ T6060] vfs_get_tree+0x92/0x2b0 [ 115.180074][ T6060] do_new_mount+0x302/0xa10 [ 115.180095][ T6060] __se_sys_mount+0x313/0x410 [ 115.180115][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.180135][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.180151][ T6060] [ 115.180151][ T6060] other info that might help us debug this: [ 115.180151][ T6060] [ 115.180157][ T6060] Chain exists of: [ 115.180157][ T6060] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 115.180157][ T6060] [ 115.180185][ T6060] Possible unsafe locking scenario: [ 115.180185][ T6060] [ 115.180191][ T6060] CPU0 CPU1 [ 115.180196][ T6060] ---- ---- [ 115.180202][ T6060] lock(&ei->xattr_sem); [ 115.180213][ T6060] lock(jbd2_handle); [ 115.180226][ T6060] lock(&ei->xattr_sem); [ 115.180239][ T6060] rlock(&sbi->s_writepages_rwsem); [ 115.180252][ T6060] [ 115.180252][ T6060] *** DEADLOCK *** [ 115.180252][ T6060] [ 115.180257][ T6060] 3 locks held by syz.0.17/6060: [ 115.180267][ T6060] #0: ffff888035a020d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 115.180317][ T6060] #1: ffff888035a02770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 115.180359][ T6060] #2: ffff8880492a6b50 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 115.180403][ T6060] [ 115.180403][ T6060] stack backtrace: [ 115.180425][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.180446][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.180464][ T6060] Call Trace: [ 115.180475][ T6060] [ 115.180483][ T6060] dump_stack_lvl+0x189/0x250 [ 115.180509][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.180533][ T6060] ? __pfx__printk+0x10/0x10 [ 115.180553][ T6060] ? print_lock_name+0xde/0x100 [ 115.180574][ T6060] print_circular_bug+0x2ee/0x310 [ 115.180600][ T6060] check_noncircular+0x134/0x160 [ 115.180619][ T6060] validate_chain+0xb9b/0x2140 [ 115.180640][ T6060] ? look_up_lock_class+0x74/0x170 [ 115.180663][ T6060] ? register_lock_class+0x51/0x320 [ 115.180686][ T6060] __lock_acquire+0xab9/0xd20 [ 115.180711][ T6060] ? ext4_writepages+0x1cc/0x350 [ 115.180728][ T6060] lock_acquire+0x120/0x360 [ 115.180748][ T6060] ? ext4_writepages+0x1cc/0x350 [ 115.180767][ T6060] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 115.180791][ T6060] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.180815][ T6060] percpu_down_read_internal+0x48/0x1d0 [ 115.180832][ T6060] ? ext4_writepages+0x1cc/0x350 [ 115.180849][ T6060] ext4_writepages+0x1cc/0x350 [ 115.180867][ T6060] ? __pfx_ext4_writepages+0x10/0x10 [ 115.180883][ T6060] ? rt_mutex_slowunlock+0x493/0x8a0 [ 115.180909][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.180925][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.180940][ T6060] ? __pfx_ext4_writepages+0x10/0x10 [ 115.180955][ T6060] do_writepages+0x32e/0x550 [ 115.180970][ T6060] ? reacquire_held_locks+0x127/0x1d0 [ 115.180984][ T6060] ? rt_spin_lock+0x1c1/0x3e0 [ 115.181003][ T6060] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 115.181025][ T6060] __writeback_single_inode+0x145/0x1000 [ 115.181048][ T6060] writeback_single_inode+0x1db/0x640 [ 115.181068][ T6060] write_inode_now+0x160/0x1d0 [ 115.181085][ T6060] ? __pfx_write_inode_now+0x10/0x10 [ 115.181116][ T6060] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 115.181135][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.181155][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.181175][ T6060] iput+0x830/0xc50 [ 115.181200][ T6060] ext4_xattr_block_set+0x1fce/0x2ac0 [ 115.181238][ T6060] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 115.181262][ T6060] ? ext4_xattr_block_find+0x2d4/0x350 [ 115.181287][ T6060] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 115.181325][ T6060] __ext4_expand_extra_isize+0x30d/0x400 [ 115.181346][ T6060] __ext4_mark_inode_dirty+0x46c/0x700 [ 115.181371][ T6060] ext4_evict_inode+0x80d/0xee0 [ 115.181395][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.181413][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.181434][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.181454][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.181473][ T6060] evict+0x504/0x9c0 [ 115.181494][ T6060] ? __pfx_evict+0x10/0x10 [ 115.181511][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.181531][ T6060] ? iput+0x946/0xc50 [ 115.181555][ T6060] ext4_orphan_cleanup+0xc20/0x1460 [ 115.181579][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 115.181608][ T6060] ? ext4_register_li_request+0x640/0x720 [ 115.181627][ T6060] ? errseq_check_and_advance+0x66/0x120 [ 115.181648][ T6060] ext4_fill_super+0x593b/0x61f0 [ 115.181674][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.181690][ T6060] ? snprintf+0xda/0x120 [ 115.181707][ T6060] ? rt_spin_lock+0x1c1/0x3e0 [ 115.181726][ T6060] ? __pfx_snprintf+0x10/0x10 [ 115.181740][ T6060] ? set_blocksize+0x219/0x450 [ 115.181762][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.181778][ T6060] ? sb_set_blocksize+0x104/0x180 [ 115.181799][ T6060] ? setup_bdev_super+0x4c1/0x5b0 [ 115.181820][ T6060] get_tree_bdev_flags+0x40e/0x4d0 [ 115.181840][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.181857][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.181877][ T6060] ? cap_capable+0x11f/0x460 [ 115.181894][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.181913][ T6060] vfs_get_tree+0x92/0x2b0 [ 115.181934][ T6060] do_new_mount+0x302/0xa10 [ 115.181955][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.181974][ T6060] ? __pfx_do_new_mount+0x10/0x10 [ 115.181995][ T6060] ? ns_capable+0x8a/0xf0 [ 115.182022][ T6060] __se_sys_mount+0x313/0x410 [ 115.182046][ T6060] ? __pfx___se_sys_mount+0x10/0x10 [ 115.182070][ T6060] ? do_syscall_64+0xbe/0xfa0 [ 115.182091][ T6060] ? __x64_sys_mount+0x20/0xc0 [ 115.182114][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.182136][ T6060] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.182158][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.182175][ T6060] ? clear_bhb_loop+0x60/0xb0 [ 115.182194][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.182211][ T6060] RIP: 0033:0x7efd4afa0e6a [ 115.182235][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.182250][ T6060] RSP: 002b:00007ffed5a39af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.182269][ T6060] RAX: ffffffffffffffda RBX: 00007ffed5a39b80 RCX: 00007efd4afa0e6a [ 115.182283][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed5a39b40 [ 115.182295][ T6060] RBP: 0000200000000180 R08: 00007ffed5a39b80 R09: 0000000000800700 [ 115.182307][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 115.182319][ T6060] R13: 00007ffed5a39b40 R14: 000000000000046f R15: 000000000000002c [ 115.182338][ T6060] [ 115.228384][ T6060] ------------[ cut here ]------------ [ 115.228397][ T6060] EA inode 11 i_nlink=2 [ 115.228704][ T6060] WARNING: CPU: 1 PID: 6060 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.228737][ T6060] Modules linked in: [ 115.228758][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.228779][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.228790][ T6060] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.228809][ T6060] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 37 95 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 11 41 08 44 89 f9 [ 115.228823][ T6060] RSP: 0018:ffffc90004097100 EFLAGS: 00010246 [ 115.228838][ T6060] RAX: cf7f02969e3fcc00 RBX: 0000000000000001 RCX: ffff888019fc5a00 [ 115.228851][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.228862][ T6060] RBP: ffffc900040971f8 R08: 0000000000000000 R09: 0000000000000000 [ 115.228873][ T6060] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 115.228886][ T6060] R13: ffff888057528450 R14: 1ffff1100aea5070 R15: ffff888057528380 [ 115.228899][ T6060] FS: 000055557163b500(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 115.228915][ T6060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.228927][ T6060] CR2: 00007ff0239fc368 CR3: 000000002331e000 CR4: 00000000003526f0 [ 115.228942][ T6060] Call Trace: [ 115.228949][ T6060] [ 115.228958][ T6060] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 115.228979][ T6060] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 115.228998][ T6060] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 115.229026][ T6060] ext4_xattr_set_entry+0xabb/0x1e20 [ 115.229057][ T6060] ext4_xattr_ibody_set+0x254/0x6a0 [ 115.229084][ T6060] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 115.229123][ T6060] __ext4_expand_extra_isize+0x30d/0x400 [ 115.229144][ T6060] __ext4_mark_inode_dirty+0x46c/0x700 [ 115.229169][ T6060] ext4_evict_inode+0x80d/0xee0 [ 115.229194][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.229212][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.229233][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.229252][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.229271][ T6060] evict+0x504/0x9c0 [ 115.229292][ T6060] ? __pfx_evict+0x10/0x10 [ 115.229309][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.229328][ T6060] ? iput+0x946/0xc50 [ 115.229353][ T6060] ext4_orphan_cleanup+0xc20/0x1460 [ 115.229378][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 115.229399][ T6060] ? ext4_register_li_request+0x640/0x720 [ 115.229417][ T6060] ? errseq_check_and_advance+0x66/0x120 [ 115.229439][ T6060] ext4_fill_super+0x593b/0x61f0 [ 115.229465][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.229481][ T6060] ? snprintf+0xda/0x120 [ 115.229497][ T6060] ? rt_spin_lock+0x1c1/0x3e0 [ 115.229517][ T6060] ? __pfx_snprintf+0x10/0x10 [ 115.229534][ T6060] ? set_blocksize+0x219/0x450 [ 115.229558][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.229578][ T6060] ? sb_set_blocksize+0x104/0x180 [ 115.229608][ T6060] ? setup_bdev_super+0x4c1/0x5b0 [ 115.229630][ T6060] get_tree_bdev_flags+0x40e/0x4d0 [ 115.229651][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.229669][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.229689][ T6060] ? cap_capable+0x11f/0x460 [ 115.229705][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.229725][ T6060] vfs_get_tree+0x92/0x2b0 [ 115.229747][ T6060] do_new_mount+0x302/0xa10 [ 115.229769][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.229787][ T6060] ? __pfx_do_new_mount+0x10/0x10 [ 115.229809][ T6060] ? ns_capable+0x8a/0xf0 [ 115.229836][ T6060] __se_sys_mount+0x313/0x410 [ 115.229860][ T6060] ? __pfx___se_sys_mount+0x10/0x10 [ 115.229883][ T6060] ? do_syscall_64+0xbe/0xfa0 [ 115.229905][ T6060] ? __x64_sys_mount+0x20/0xc0 [ 115.229928][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.229949][ T6060] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.229972][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.229989][ T6060] ? clear_bhb_loop+0x60/0xb0 [ 115.230008][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.230024][ T6060] RIP: 0033:0x7efd4afa0e6a [ 115.230041][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.230055][ T6060] RSP: 002b:00007ffed5a39af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.230072][ T6060] RAX: ffffffffffffffda RBX: 00007ffed5a39b80 RCX: 00007efd4afa0e6a [ 115.230085][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed5a39b40 [ 115.230098][ T6060] RBP: 0000200000000180 R08: 00007ffed5a39b80 R09: 0000000000800700 [ 115.230110][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 115.230122][ T6060] R13: 00007ffed5a39b40 R14: 000000000000046f R15: 000000000000002c [ 115.230141][ T6060] [ 115.230150][ T6060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.230163][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.230183][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.230193][ T6060] Call Trace: [ 115.230200][ T6060] [ 115.230206][ T6060] dump_stack_lvl+0x99/0x250 [ 115.230232][ T6060] ? __asan_memcpy+0x40/0x70 [ 115.230252][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.230274][ T6060] ? __pfx__printk+0x10/0x10 [ 115.230299][ T6060] vpanic+0x237/0x6d0 [ 115.230316][ T6060] ? __pfx_vpanic+0x10/0x10 [ 115.230336][ T6060] panic+0xb9/0xc0 [ 115.230351][ T6060] ? __pfx_panic+0x10/0x10 [ 115.230372][ T6060] __warn+0x31b/0x4b0 [ 115.230388][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.230406][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.230423][ T6060] report_bug+0x2be/0x4f0 [ 115.230445][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.230461][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.230478][ T6060] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 115.230494][ T6060] handle_bug+0x84/0x160 [ 115.230511][ T6060] exc_invalid_op+0x1a/0x50 [ 115.230527][ T6060] asm_exc_invalid_op+0x1a/0x20 [ 115.230544][ T6060] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 115.230561][ T6060] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 37 95 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 11 41 08 44 89 f9 [ 115.230575][ T6060] RSP: 0018:ffffc90004097100 EFLAGS: 00010246 [ 115.230590][ T6060] RAX: cf7f02969e3fcc00 RBX: 0000000000000001 RCX: ffff888019fc5a00 [ 115.230608][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.230619][ T6060] RBP: ffffc900040971f8 R08: 0000000000000000 R09: 0000000000000000 [ 115.230630][ T6060] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b [ 115.230643][ T6060] R13: ffff888057528450 R14: 1ffff1100aea5070 R15: ffff888057528380 [ 115.230663][ T6060] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 115.230684][ T6060] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 115.230699][ T6060] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 115.230722][ T6060] ext4_xattr_set_entry+0xabb/0x1e20 [ 115.230749][ T6060] ext4_xattr_ibody_set+0x254/0x6a0 [ 115.230774][ T6060] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 115.230810][ T6060] __ext4_expand_extra_isize+0x30d/0x400 [ 115.230830][ T6060] __ext4_mark_inode_dirty+0x46c/0x700 [ 115.230854][ T6060] ext4_evict_inode+0x80d/0xee0 [ 115.230878][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.230901][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.230918][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.230936][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.230955][ T6060] evict+0x504/0x9c0 [ 115.230974][ T6060] ? __pfx_evict+0x10/0x10 [ 115.230989][ T6060] ? rt_spin_unlock+0x161/0x200 [ 115.231007][ T6060] ? iput+0x946/0xc50 [ 115.231030][ T6060] ext4_orphan_cleanup+0xc20/0x1460 [ 115.231052][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 115.231070][ T6060] ? ext4_register_li_request+0x640/0x720 [ 115.231087][ T6060] ? errseq_check_and_advance+0x66/0x120 [ 115.231106][ T6060] ext4_fill_super+0x593b/0x61f0 [ 115.231131][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.231147][ T6060] ? snprintf+0xda/0x120 [ 115.231164][ T6060] ? rt_spin_lock+0x1c1/0x3e0 [ 115.231184][ T6060] ? __pfx_snprintf+0x10/0x10 [ 115.231200][ T6060] ? set_blocksize+0x219/0x450 [ 115.231221][ T6060] ? rt_spin_unlock+0x150/0x200 [ 115.231239][ T6060] ? sb_set_blocksize+0x104/0x180 [ 115.231263][ T6060] ? setup_bdev_super+0x4c1/0x5b0 [ 115.231285][ T6060] get_tree_bdev_flags+0x40e/0x4d0 [ 115.231306][ T6060] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.231323][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.231342][ T6060] ? cap_capable+0x11f/0x460 [ 115.231358][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.231378][ T6060] vfs_get_tree+0x92/0x2b0 [ 115.231400][ T6060] do_new_mount+0x302/0xa10 [ 115.231422][ T6060] ? safesetid_security_capable+0xa9/0x1a0 [ 115.231440][ T6060] ? __pfx_do_new_mount+0x10/0x10 [ 115.231461][ T6060] ? ns_capable+0x8a/0xf0 [ 115.231487][ T6060] __se_sys_mount+0x313/0x410 [ 115.231513][ T6060] ? __pfx___se_sys_mount+0x10/0x10 [ 115.231536][ T6060] ? do_syscall_64+0xbe/0xfa0 [ 115.231558][ T6060] ? __x64_sys_mount+0x20/0xc0 [ 115.231581][ T6060] do_syscall_64+0xfa/0xfa0 [ 115.231628][ T6060] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.231650][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.231667][ T6060] ? clear_bhb_loop+0x60/0xb0 [ 115.231686][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.231703][ T6060] RIP: 0033:0x7efd4afa0e6a [ 115.231718][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.231733][ T6060] RSP: 002b:00007ffed5a39af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.231751][ T6060] RAX: ffffffffffffffda RBX: 00007ffed5a39b80 RCX: 00007efd4afa0e6a [ 115.231764][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed5a39b40 [ 115.231777][ T6060] RBP: 0000200000000180 R08: 00007ffed5a39b80 R09: 0000000000800700 [ 115.231790][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 115.231802][ T6060] R13: 00007ffed5a39b40 R14: 000000000000046f R15: 000000000000002c [ 115.231820][ T6060] [ 115.232082][ T6060] Kernel Offset: disabled