Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. 2025/09/11 01:22:57 parsed 1 programs [ 84.018630][ T5842] cgroup: Unknown subsys name 'net' [ 84.328116][ T5842] cgroup: Unknown subsys name 'cpuset' [ 84.403737][ T5842] cgroup: Unknown subsys name 'rlimit' [ 86.103554][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.746837][ T44] cfg80211: failed to load regulatory.db [ 90.056201][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.057663][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.058508][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.059721][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.060571][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.580948][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.580974][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.641115][ T1537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.641136][ T1537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.082597][ T5909] chnl_net:caif_netlink_parms(): no params data found [ 94.445125][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.446700][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.446866][ T5909] bridge_slave_0: entered allmulticast mode [ 94.448452][ T5909] bridge_slave_0: entered promiscuous mode [ 94.452592][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.452712][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.452807][ T5909] bridge_slave_1: entered allmulticast mode [ 94.456720][ T5909] bridge_slave_1: entered promiscuous mode [ 94.676688][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.696210][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.878405][ T5909] team0: Port device team_slave_0 added [ 94.882055][ T5909] team0: Port device team_slave_1 added [ 95.146823][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.146834][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.146849][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.149743][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.149757][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.149781][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.450417][ T5909] hsr_slave_0: entered promiscuous mode [ 95.451446][ T5909] hsr_slave_1: entered promiscuous mode [ 95.962186][ T5909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.002838][ T5909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.026595][ T5909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.066212][ T5909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.259751][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.288111][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.302410][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.303758][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.323304][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.323393][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.530908][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.580420][ T5909] veth0_vlan: entered promiscuous mode [ 96.592823][ T5909] veth1_vlan: entered promiscuous mode [ 96.624685][ T5909] veth0_macvtap: entered promiscuous mode [ 96.628966][ T5909] veth1_macvtap: entered promiscuous mode [ 96.647346][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.657986][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.676745][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.678282][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.678326][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.678394][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.479766][ T1537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.728706][ T1537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.927830][ T1537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.757564][ T1537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/11 01:23:15 executed programs: 0 [ 99.449505][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.451702][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.468779][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.472030][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.472749][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.832752][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 99.974946][ T1537] bridge_slave_1: left allmulticast mode [ 99.975144][ T1537] bridge_slave_1: left promiscuous mode [ 99.976800][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.046859][ T1537] bridge_slave_0: left allmulticast mode [ 100.046881][ T1537] bridge_slave_0: left promiscuous mode [ 100.047041][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.544843][ T5156] Bluetooth: hci0: command tx timeout [ 101.753985][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.834104][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.858636][ T1537] bond0 (unregistering): Released all slaves [ 102.223346][ T1537] hsr_slave_0: left promiscuous mode [ 102.243238][ T1537] hsr_slave_1: left promiscuous mode [ 102.244022][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.244084][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.294701][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.294731][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.360010][ T1537] veth1_macvtap: left promiscuous mode [ 102.360167][ T1537] veth0_macvtap: left promiscuous mode [ 102.360344][ T1537] veth1_vlan: left promiscuous mode [ 102.360520][ T1537] veth0_vlan: left promiscuous mode [ 103.623184][ T5156] Bluetooth: hci0: command tx timeout [ 104.363901][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 104.536399][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 105.703201][ T5156] Bluetooth: hci0: command tx timeout [ 106.564111][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.564324][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.564539][ T5950] bridge_slave_0: entered allmulticast mode [ 106.567313][ T5950] bridge_slave_0: entered promiscuous mode [ 106.572269][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.572392][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.572556][ T5950] bridge_slave_1: entered allmulticast mode [ 106.602133][ T5950] bridge_slave_1: entered promiscuous mode [ 106.790285][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.796837][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.947689][ T5950] team0: Port device team_slave_0 added [ 106.959874][ T5950] team0: Port device team_slave_1 added [ 107.161874][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.161890][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.161915][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.164508][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.164521][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.164545][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.416171][ T5950] hsr_slave_0: entered promiscuous mode [ 107.417452][ T5950] hsr_slave_1: entered promiscuous mode [ 107.783161][ T5156] Bluetooth: hci0: command tx timeout [ 109.563593][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.597976][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.641207][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.677762][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.821812][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.847617][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.854074][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.854227][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.869538][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.869679][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.101989][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.146447][ T5950] veth0_vlan: entered promiscuous mode [ 110.152236][ T5950] veth1_vlan: entered promiscuous mode [ 110.186551][ T5950] veth0_macvtap: entered promiscuous mode [ 110.191839][ T5950] veth1_macvtap: entered promiscuous mode [ 110.216092][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.227851][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.240650][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.240857][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.240892][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.240927][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.458334][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.458355][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.501935][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.501955][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/11 01:23:27 executed programs: 2 [ 110.630758][ T6026] loop0: detected capacity change from 0 to 512 [ 110.679453][ T6026] [ 110.679468][ T6026] ====================================================== [ 110.679475][ T6026] WARNING: possible circular locking dependency detected [ 110.679492][ T6026] syzkaller #0 Not tainted [ 110.679501][ T6026] ------------------------------------------------------ [ 110.679508][ T6026] syz.0.17/6026 is trying to acquire lock: [ 110.679518][ T6026] ffff88803531ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 110.679572][ T6026] [ 110.679572][ T6026] but task is already holding lock: [ 110.679578][ T6026] ffff888053500c90 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 110.679619][ T6026] [ 110.679619][ T6026] which lock already depends on the new lock. [ 110.679619][ T6026] [ 110.679626][ T6026] [ 110.679626][ T6026] the existing dependency chain (in reverse order) is: [ 110.679632][ T6026] [ 110.679632][ T6026] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 110.679657][ T6026] lock_acquire+0x120/0x360 [ 110.679678][ T6026] down_write+0x3a/0x50 [ 110.679692][ T6026] ext4_xattr_set_handle+0x165/0x1590 [ 110.679714][ T6026] ext4_initxattrs+0x9f/0x110 [ 110.679731][ T6026] security_inode_init_security+0x29d/0x3f0 [ 110.679749][ T6026] __ext4_new_inode+0x3314/0x3cb0 [ 110.679772][ T6026] ext4_create+0x22d/0x460 [ 110.679786][ T6026] path_openat+0x14fd/0x3840 [ 110.679801][ T6026] do_filp_open+0x1fa/0x410 [ 110.679816][ T6026] do_sys_openat2+0x121/0x1c0 [ 110.679832][ T6026] __x64_sys_openat+0x138/0x170 [ 110.679845][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.679861][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.679875][ T6026] [ 110.679875][ T6026] -> #1 (jbd2_handle){++++}-{0:0}: [ 110.679896][ T6026] lock_acquire+0x120/0x360 [ 110.679914][ T6026] start_this_handle+0x1fa7/0x21c0 [ 110.679931][ T6026] jbd2__journal_start+0x2c1/0x5b0 [ 110.679949][ T6026] __ext4_journal_start_sb+0x227/0x5c0 [ 110.679970][ T6026] ext4_do_writepages+0xf6f/0x4600 [ 110.679988][ T6026] ext4_writepages+0x205/0x350 [ 110.680010][ T6026] do_writepages+0x32b/0x550 [ 110.680028][ T6026] file_write_and_wait_range+0x244/0x340 [ 110.680049][ T6026] ext4_sync_file+0x2b4/0xb20 [ 110.680068][ T6026] __x64_sys_fsync+0x191/0x1f0 [ 110.680091][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.680104][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.680120][ T6026] [ 110.680120][ T6026] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 110.680144][ T6026] validate_chain+0xb9b/0x2140 [ 110.680166][ T6026] __lock_acquire+0xab9/0xd20 [ 110.680185][ T6026] lock_acquire+0x120/0x360 [ 110.680204][ T6026] percpu_down_read_internal+0x48/0x1d0 [ 110.680227][ T6026] ext4_writepages+0x1cc/0x350 [ 110.680240][ T6026] do_writepages+0x32b/0x550 [ 110.680257][ T6026] __writeback_single_inode+0x145/0x1000 [ 110.680276][ T6026] writeback_single_inode+0x1d5/0x640 [ 110.680292][ T6026] write_inode_now+0x160/0x1d0 [ 110.680307][ T6026] iput+0x5b9/0x9d0 [ 110.680328][ T6026] ext4_xattr_block_set+0x1fce/0x2ac0 [ 110.680348][ T6026] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 110.680370][ T6026] __ext4_expand_extra_isize+0x30d/0x400 [ 110.680392][ T6026] __ext4_mark_inode_dirty+0x46c/0x700 [ 110.680409][ T6026] ext4_evict_inode+0x80d/0xee0 [ 110.680425][ T6026] evict+0x504/0x9c0 [ 110.680441][ T6026] ext4_orphan_cleanup+0xc20/0x1460 [ 110.680457][ T6026] ext4_fill_super+0x57fa/0x60b0 [ 110.680480][ T6026] get_tree_bdev_flags+0x40e/0x4d0 [ 110.680499][ T6026] vfs_get_tree+0x8f/0x2b0 [ 110.680518][ T6026] do_new_mount+0x2a2/0x9e0 [ 110.680539][ T6026] __se_sys_mount+0x317/0x410 [ 110.680559][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.680573][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.680589][ T6026] [ 110.680589][ T6026] other info that might help us debug this: [ 110.680589][ T6026] [ 110.680594][ T6026] Chain exists of: [ 110.680594][ T6026] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 110.680594][ T6026] [ 110.680621][ T6026] Possible unsafe locking scenario: [ 110.680621][ T6026] [ 110.680626][ T6026] CPU0 CPU1 [ 110.680631][ T6026] ---- ---- [ 110.680637][ T6026] lock(&ei->xattr_sem); [ 110.680648][ T6026] lock(jbd2_handle); [ 110.680660][ T6026] lock(&ei->xattr_sem); [ 110.680673][ T6026] rlock(&sbi->s_writepages_rwsem); [ 110.680685][ T6026] [ 110.680685][ T6026] *** DEADLOCK *** [ 110.680685][ T6026] [ 110.680690][ T6026] 3 locks held by syz.0.17/6026: [ 110.680701][ T6026] #0: ffff888034c260d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 110.680752][ T6026] #1: ffff888034c26778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 110.680792][ T6026] #2: ffff888053500c90 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 110.680834][ T6026] [ 110.680834][ T6026] stack backtrace: [ 110.680858][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.680877][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.680895][ T6026] Call Trace: [ 110.680901][ T6026] [ 110.680908][ T6026] dump_stack_lvl+0x189/0x250 [ 110.680935][ T6026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.680958][ T6026] ? __pfx__printk+0x10/0x10 [ 110.680977][ T6026] ? print_lock_name+0xde/0x100 [ 110.680996][ T6026] print_circular_bug+0x2ee/0x310 [ 110.681024][ T6026] check_noncircular+0x134/0x160 [ 110.681050][ T6026] validate_chain+0xb9b/0x2140 [ 110.681074][ T6026] ? look_up_lock_class+0x74/0x170 [ 110.681097][ T6026] ? register_lock_class+0x51/0x320 [ 110.681117][ T6026] __lock_acquire+0xab9/0xd20 [ 110.681140][ T6026] ? ext4_writepages+0x1cc/0x350 [ 110.681156][ T6026] lock_acquire+0x120/0x360 [ 110.681175][ T6026] ? ext4_writepages+0x1cc/0x350 [ 110.681192][ T6026] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 110.681217][ T6026] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.681242][ T6026] percpu_down_read_internal+0x48/0x1d0 [ 110.681266][ T6026] ? ext4_writepages+0x1cc/0x350 [ 110.681283][ T6026] ext4_writepages+0x1cc/0x350 [ 110.681299][ T6026] ? __pfx_ext4_writepages+0x10/0x10 [ 110.681314][ T6026] ? rt_mutex_slowunlock+0x493/0x8a0 [ 110.681342][ T6026] ? __pfx_ext4_writepages+0x10/0x10 [ 110.681359][ T6026] do_writepages+0x32b/0x550 [ 110.681381][ T6026] ? reacquire_held_locks+0x127/0x1d0 [ 110.681405][ T6026] ? rt_spin_lock+0x1bb/0x2c0 [ 110.681425][ T6026] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 110.681448][ T6026] __writeback_single_inode+0x145/0x1000 [ 110.681473][ T6026] writeback_single_inode+0x1d5/0x640 [ 110.681493][ T6026] write_inode_now+0x160/0x1d0 [ 110.681511][ T6026] ? __pfx_write_inode_now+0x10/0x10 [ 110.681541][ T6026] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 110.681564][ T6026] ? rt_spin_unlock+0x65/0x80 [ 110.681585][ T6026] iput+0x5b9/0x9d0 [ 110.681609][ T6026] ext4_xattr_block_set+0x1fce/0x2ac0 [ 110.681644][ T6026] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 110.681666][ T6026] ? ext4_xattr_block_find+0x2d4/0x350 [ 110.681690][ T6026] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 110.681727][ T6026] __ext4_expand_extra_isize+0x30d/0x400 [ 110.681755][ T6026] __ext4_mark_inode_dirty+0x46c/0x700 [ 110.681778][ T6026] ext4_evict_inode+0x80d/0xee0 [ 110.681802][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.681824][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.681842][ T6026] evict+0x504/0x9c0 [ 110.681862][ T6026] ? __pfx_evict+0x10/0x10 [ 110.681880][ T6026] ? iput+0x6d8/0x9d0 [ 110.681905][ T6026] ext4_orphan_cleanup+0xc20/0x1460 [ 110.681927][ T6026] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 110.681945][ T6026] ? ext4_register_li_request+0x640/0x720 [ 110.681963][ T6026] ? errseq_check_and_advance+0x66/0x120 [ 110.681987][ T6026] ext4_fill_super+0x57fa/0x60b0 [ 110.682028][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.682052][ T6026] ? set_blocksize+0x219/0x450 [ 110.682072][ T6026] ? sb_set_blocksize+0x104/0x180 [ 110.682090][ T6026] ? setup_bdev_super+0x4c1/0x5b0 [ 110.682112][ T6026] get_tree_bdev_flags+0x40e/0x4d0 [ 110.682134][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.682159][ T6026] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 110.682180][ T6026] ? cap_capable+0x11f/0x460 [ 110.682200][ T6026] ? safesetid_security_capable+0xa9/0x1a0 [ 110.682224][ T6026] vfs_get_tree+0x8f/0x2b0 [ 110.682246][ T6026] do_new_mount+0x2a2/0x9e0 [ 110.682270][ T6026] ? ns_capable+0x8a/0xf0 [ 110.682290][ T6026] ? __pfx_do_new_mount+0x10/0x10 [ 110.682312][ T6026] ? path_mount+0x61c/0xfe0 [ 110.682337][ T6026] __se_sys_mount+0x317/0x410 [ 110.682362][ T6026] ? __pfx___se_sys_mount+0x10/0x10 [ 110.682387][ T6026] ? do_syscall_64+0xbe/0x3b0 [ 110.682402][ T6026] ? __x64_sys_mount+0x20/0xc0 [ 110.682426][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.682441][ T6026] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.682465][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.682481][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 110.682500][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.682517][ T6026] RIP: 0033:0x7f86acd3034a [ 110.682540][ T6026] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.682554][ T6026] RSP: 002b:00007ffe8f09caf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.682573][ T6026] RAX: ffffffffffffffda RBX: 00007ffe8f09cb80 RCX: 00007f86acd3034a [ 110.682586][ T6026] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f09cb40 [ 110.682599][ T6026] RBP: 0000200000000180 R08: 00007ffe8f09cb80 R09: 0000000000800700 [ 110.682611][ T6026] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 110.682623][ T6026] R13: 00007ffe8f09cb40 R14: 0000000000000473 R15: 0000200000000680 [ 110.682641][ T6026] [ 110.682966][ T6026] ------------[ cut here ]------------ [ 110.682975][ T6026] EA inode 11 i_nlink=2 [ 110.683229][ T6026] WARNING: CPU: 1 PID: 6026 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.683265][ T6026] Modules linked in: [ 110.683280][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.683301][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.683312][ T6026] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.683338][ T6026] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 9d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 24 3c [ 110.683352][ T6026] RSP: 0018:ffffc90004b671a0 EFLAGS: 00010246 [ 110.683368][ T6026] RAX: ad4a8a39fe73a400 RBX: dffffc0000000000 RCX: ffff88802c3d0000 [ 110.683382][ T6026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.683393][ T6026] RBP: ffffc90004b67298 R08: 0000000000000000 R09: 0000000000000000 [ 110.683405][ T6026] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff8880535032e0 [ 110.683419][ T6026] R13: 1ffff1100a6a065c R14: 00000000ffffffff R15: 000000000000000b [ 110.683431][ T6026] FS: 0000555579f2e500(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 110.683448][ T6026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.683461][ T6026] CR2: 00007ff2c9cd4000 CR3: 00000000324c6000 CR4: 00000000003526f0 [ 110.683476][ T6026] Call Trace: [ 110.683483][ T6026] [ 110.683491][ T6026] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 110.683513][ T6026] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 110.683539][ T6026] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 110.683567][ T6026] ext4_xattr_set_entry+0xabb/0x1e20 [ 110.683598][ T6026] ext4_xattr_ibody_set+0x254/0x6a0 [ 110.683625][ T6026] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 110.683663][ T6026] __ext4_expand_extra_isize+0x30d/0x400 [ 110.683692][ T6026] __ext4_mark_inode_dirty+0x46c/0x700 [ 110.683716][ T6026] ext4_evict_inode+0x80d/0xee0 [ 110.683741][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.683763][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.683782][ T6026] evict+0x504/0x9c0 [ 110.683804][ T6026] ? __pfx_evict+0x10/0x10 [ 110.683824][ T6026] ? iput+0x6d8/0x9d0 [ 110.683850][ T6026] ext4_orphan_cleanup+0xc20/0x1460 [ 110.683874][ T6026] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 110.683894][ T6026] ? ext4_register_li_request+0x640/0x720 [ 110.683912][ T6026] ? errseq_check_and_advance+0x66/0x120 [ 110.683936][ T6026] ext4_fill_super+0x57fa/0x60b0 [ 110.683970][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.683994][ T6026] ? set_blocksize+0x219/0x450 [ 110.684022][ T6026] ? sb_set_blocksize+0x104/0x180 [ 110.684040][ T6026] ? setup_bdev_super+0x4c1/0x5b0 [ 110.684062][ T6026] get_tree_bdev_flags+0x40e/0x4d0 [ 110.684082][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.684106][ T6026] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 110.684127][ T6026] ? cap_capable+0x11f/0x460 [ 110.684147][ T6026] ? safesetid_security_capable+0xa9/0x1a0 [ 110.684171][ T6026] vfs_get_tree+0x8f/0x2b0 [ 110.684192][ T6026] do_new_mount+0x2a2/0x9e0 [ 110.684215][ T6026] ? ns_capable+0x8a/0xf0 [ 110.684235][ T6026] ? __pfx_do_new_mount+0x10/0x10 [ 110.684256][ T6026] ? path_mount+0x61c/0xfe0 [ 110.684280][ T6026] __se_sys_mount+0x317/0x410 [ 110.684305][ T6026] ? __pfx___se_sys_mount+0x10/0x10 [ 110.684330][ T6026] ? do_syscall_64+0xbe/0x3b0 [ 110.684346][ T6026] ? __x64_sys_mount+0x20/0xc0 [ 110.684370][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.684386][ T6026] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.684409][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.684426][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 110.684444][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.684461][ T6026] RIP: 0033:0x7f86acd3034a [ 110.684475][ T6026] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.684489][ T6026] RSP: 002b:00007ffe8f09caf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.684507][ T6026] RAX: ffffffffffffffda RBX: 00007ffe8f09cb80 RCX: 00007f86acd3034a [ 110.684520][ T6026] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f09cb40 [ 110.684532][ T6026] RBP: 0000200000000180 R08: 00007ffe8f09cb80 R09: 0000000000800700 [ 110.684545][ T6026] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 110.684557][ T6026] R13: 00007ffe8f09cb40 R14: 0000000000000473 R15: 0000200000000680 [ 110.684575][ T6026] [ 110.684584][ T6026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.684597][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.684617][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.684628][ T6026] Call Trace: [ 110.684634][ T6026] [ 110.684641][ T6026] dump_stack_lvl+0x99/0x250 [ 110.684667][ T6026] ? __asan_memcpy+0x40/0x70 [ 110.684686][ T6026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.684711][ T6026] ? __pfx__printk+0x10/0x10 [ 110.684733][ T6026] vpanic+0x281/0x750 [ 110.684757][ T6026] ? __pfx__printk+0x10/0x10 [ 110.684774][ T6026] ? __pfx_vpanic+0x10/0x10 [ 110.684798][ T6026] ? is_bpf_text_address+0x26/0x2b0 [ 110.684825][ T6026] panic+0xb9/0xc0 [ 110.684848][ T6026] ? __pfx_panic+0x10/0x10 [ 110.684877][ T6026] __warn+0x31b/0x4b0 [ 110.684900][ T6026] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.684925][ T6026] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.684950][ T6026] report_bug+0x2be/0x4f0 [ 110.684973][ T6026] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.685006][ T6026] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.685032][ T6026] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 110.685056][ T6026] handle_bug+0x84/0x160 [ 110.685074][ T6026] exc_invalid_op+0x1a/0x50 [ 110.685092][ T6026] asm_exc_invalid_op+0x1a/0x20 [ 110.685108][ T6026] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 110.685133][ T6026] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 9d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 24 3c [ 110.685147][ T6026] RSP: 0018:ffffc90004b671a0 EFLAGS: 00010246 [ 110.685163][ T6026] RAX: ad4a8a39fe73a400 RBX: dffffc0000000000 RCX: ffff88802c3d0000 [ 110.685177][ T6026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.685188][ T6026] RBP: ffffc90004b67298 R08: 0000000000000000 R09: 0000000000000000 [ 110.685199][ T6026] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff8880535032e0 [ 110.685212][ T6026] R13: 1ffff1100a6a065c R14: 00000000ffffffff R15: 000000000000000b [ 110.685231][ T6026] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 110.685250][ T6026] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 110.685276][ T6026] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 110.685302][ T6026] ext4_xattr_set_entry+0xabb/0x1e20 [ 110.685333][ T6026] ext4_xattr_ibody_set+0x254/0x6a0 [ 110.685360][ T6026] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 110.685397][ T6026] __ext4_expand_extra_isize+0x30d/0x400 [ 110.685426][ T6026] __ext4_mark_inode_dirty+0x46c/0x700 [ 110.685449][ T6026] ext4_evict_inode+0x80d/0xee0 [ 110.685473][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.685496][ T6026] ? __pfx_ext4_evict_inode+0x10/0x10 [ 110.685514][ T6026] evict+0x504/0x9c0 [ 110.685536][ T6026] ? __pfx_evict+0x10/0x10 [ 110.685556][ T6026] ? iput+0x6d8/0x9d0 [ 110.685582][ T6026] ext4_orphan_cleanup+0xc20/0x1460 [ 110.685605][ T6026] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 110.685625][ T6026] ? ext4_register_li_request+0x640/0x720 [ 110.685644][ T6026] ? errseq_check_and_advance+0x66/0x120 [ 110.685666][ T6026] ext4_fill_super+0x57fa/0x60b0 [ 110.685700][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.685723][ T6026] ? set_blocksize+0x219/0x450 [ 110.685741][ T6026] ? sb_set_blocksize+0x104/0x180 [ 110.685758][ T6026] ? setup_bdev_super+0x4c1/0x5b0 [ 110.685778][ T6026] get_tree_bdev_flags+0x40e/0x4d0 [ 110.685799][ T6026] ? __pfx_ext4_fill_super+0x10/0x10 [ 110.685824][ T6026] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 110.685845][ T6026] ? cap_capable+0x11f/0x460 [ 110.685866][ T6026] ? safesetid_security_capable+0xa9/0x1a0 [ 110.685889][ T6026] vfs_get_tree+0x8f/0x2b0 [ 110.685911][ T6026] do_new_mount+0x2a2/0x9e0 [ 110.685934][ T6026] ? ns_capable+0x8a/0xf0 [ 110.685955][ T6026] ? __pfx_do_new_mount+0x10/0x10 [ 110.685978][ T6026] ? path_mount+0x61c/0xfe0 [ 110.686012][ T6026] __se_sys_mount+0x317/0x410 [ 110.686037][ T6026] ? __pfx___se_sys_mount+0x10/0x10 [ 110.686062][ T6026] ? do_syscall_64+0xbe/0x3b0 [ 110.686076][ T6026] ? __x64_sys_mount+0x20/0xc0 [ 110.686106][ T6026] do_syscall_64+0xfa/0x3b0 [ 110.686120][ T6026] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.686145][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.686163][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 110.686182][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.686200][ T6026] RIP: 0033:0x7f86acd3034a [ 110.686214][ T6026] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.686228][ T6026] RSP: 002b:00007ffe8f09caf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.686245][ T6026] RAX: ffffffffffffffda RBX: 00007ffe8f09cb80 RCX: 00007f86acd3034a [ 110.686258][ T6026] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe8f09cb40 [ 110.686271][ T6026] RBP: 0000200000000180 R08: 00007ffe8f09cb80 R09: 0000000000800700 [ 110.686283][ T6026] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 110.686295][ T6026] R13: 00007ffe8f09cb40 R14: 0000000000000473 R15: 0000200000000680 [ 110.686312][ T6026] [ 110.686540][ T6026] Kernel Offset: disabled