Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. 2025/11/02 09:39:47 parsed 1 programs [ 98.677090][ T5807] cgroup: Unknown subsys name 'net' [ 98.918168][ T5807] cgroup: Unknown subsys name 'cpuset' [ 98.992600][ T5807] cgroup: Unknown subsys name 'rlimit' [ 101.022547][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.789056][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 105.214923][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.216764][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.217030][ T5825] bridge_slave_0: entered allmulticast mode [ 105.220392][ T5825] bridge_slave_0: entered promiscuous mode [ 105.229660][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.229819][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.229989][ T5825] bridge_slave_1: entered allmulticast mode [ 105.233118][ T5825] bridge_slave_1: entered promiscuous mode [ 105.376852][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.379827][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.505222][ T5825] team0: Port device team_slave_0 added [ 105.507905][ T5825] team0: Port device team_slave_1 added [ 105.843796][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.843810][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.843827][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.846550][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.846566][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.846592][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.069619][ T5825] hsr_slave_0: entered promiscuous mode [ 106.070695][ T5825] hsr_slave_1: entered promiscuous mode [ 106.461185][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.500897][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.516430][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.556080][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.694501][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.772975][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.780785][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.781503][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.820164][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.820439][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.061130][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.110884][ T5825] veth0_vlan: entered promiscuous mode [ 107.130105][ T5825] veth1_vlan: entered promiscuous mode [ 107.176457][ T5825] veth0_macvtap: entered promiscuous mode [ 107.180434][ T5825] veth1_macvtap: entered promiscuous mode [ 107.197962][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.214723][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.234701][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.234777][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.234815][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.234851][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.046633][ T4031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.311596][ T4031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.864525][ T4031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.584299][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.586561][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.587398][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.588611][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.589456][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.946712][ T4031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.440675][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.440700][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.585681][ T3726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.585706][ T3726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.632288][ T4031] bridge_slave_1: left allmulticast mode [ 110.632510][ T4031] bridge_slave_1: left promiscuous mode [ 110.634473][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.725006][ T4031] bridge_slave_0: left allmulticast mode [ 110.725038][ T4031] bridge_slave_0: left promiscuous mode [ 110.725399][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.692775][ T4031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.762671][ T4031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.784479][ T4031] bond0 (unregistering): Released all slaves [ 113.183446][ T4031] hsr_slave_0: left promiscuous mode [ 113.223521][ T4031] hsr_slave_1: left promiscuous mode [ 113.224822][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.224905][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.283928][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.283960][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.416209][ T4031] veth1_macvtap: left promiscuous mode [ 113.416475][ T4031] veth0_macvtap: left promiscuous mode [ 113.416825][ T4031] veth1_vlan: left promiscuous mode [ 113.417159][ T4031] veth0_vlan: left promiscuous mode [ 115.572826][ T4031] team0 (unregistering): Port device team_slave_1 removed [ 115.824325][ T4031] team0 (unregistering): Port device team_slave_0 removed 2025/11/02 09:40:15 executed programs: 0 [ 123.828517][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.830520][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.831329][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.834888][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.838799][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.331696][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 124.872393][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.872539][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.872671][ T5982] bridge_slave_0: entered allmulticast mode [ 124.874499][ T5982] bridge_slave_0: entered promiscuous mode [ 124.877980][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.878124][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.878242][ T5982] bridge_slave_1: entered allmulticast mode [ 124.879915][ T5982] bridge_slave_1: entered promiscuous mode [ 125.075665][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.095790][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.268681][ T5982] team0: Port device team_slave_0 added [ 125.273406][ T5982] team0: Port device team_slave_1 added [ 125.634879][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.634893][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.634909][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.637502][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.637519][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.637546][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.868783][ T5982] hsr_slave_0: entered promiscuous mode [ 125.869682][ T5982] hsr_slave_1: entered promiscuous mode [ 125.913620][ T5118] Bluetooth: hci0: command tx timeout [ 127.550268][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.588601][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.627266][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.667919][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.857065][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.904095][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.939334][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.939504][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.975538][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.975721][ T3726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.991890][ T5118] Bluetooth: hci0: command tx timeout [ 128.354325][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.447434][ T5982] veth0_vlan: entered promiscuous mode [ 128.464900][ T5982] veth1_vlan: entered promiscuous mode [ 128.525935][ T5982] veth0_macvtap: entered promiscuous mode [ 128.537120][ T5982] veth1_macvtap: entered promiscuous mode [ 128.561237][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.574804][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.591156][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.600512][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.600747][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.600784][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.827399][ T3726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.827426][ T3726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.936278][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.936302][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/02 09:40:21 executed programs: 2 [ 129.130341][ T6068] loop0: detected capacity change from 0 to 512 [ 129.229997][ T6068] [ 129.230031][ T6068] ====================================================== [ 129.230039][ T6068] WARNING: possible circular locking dependency detected [ 129.230049][ T6068] syzkaller #0 Not tainted [ 129.230061][ T6068] ------------------------------------------------------ [ 129.230061][ T6068] ------------------------------------------------------ [ 129.230068][ T6068] syz.0.17/6068 is trying to acquire lock: [ 129.230080][ T6068] ffff8880363d0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 129.230136][ T6068] [ 129.230136][ T6068] but task is already holding lock: [ 129.230143][ T6068] ffff888041783bf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 129.230193][ T6068] [ 129.230193][ T6068] which lock already depends on the new lock. [ 129.230193][ T6068] [ 129.230201][ T6068] [ 129.230201][ T6068] the existing dependency chain (in reverse order) is: [ 129.230208][ T6068] [ 129.230208][ T6068] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 129.230234][ T6068] lock_acquire+0x120/0x360 [ 129.230259][ T6068] down_write+0x3a/0x50 [ 129.230285][ T6068] ext4_xattr_set_handle+0x165/0x1590 [ 129.230313][ T6068] ext4_initxattrs+0x9f/0x110 [ 129.230335][ T6068] security_inode_init_security+0x2a0/0x3f0 [ 129.230363][ T6068] __ext4_new_inode+0x3314/0x3cb0 [ 129.230390][ T6068] ext4_create+0x22d/0x460 [ 129.230411][ T6068] path_openat+0x1500/0x3840 [ 129.230432][ T6068] do_filp_open+0x1fa/0x410 [ 129.230450][ T6068] do_sys_openat2+0x121/0x1c0 [ 129.230468][ T6068] __x64_sys_openat+0x138/0x170 [ 129.230486][ T6068] do_syscall_64+0xfa/0xfa0 [ 129.230511][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.230528][ T6068] [ 129.230528][ T6068] -> #1 (jbd2_handle){++++}-{0:0}: [ 129.230555][ T6068] lock_acquire+0x120/0x360 [ 129.230580][ T6068] start_this_handle+0x1fa7/0x21c0 [ 129.230604][ T6068] jbd2__journal_start+0x2c1/0x5b0 [ 129.230628][ T6068] __ext4_journal_start_sb+0x227/0x5c0 [ 129.230657][ T6068] ext4_do_writepages+0xf6f/0x4600 [ 129.230680][ T6068] ext4_writepages+0x205/0x350 [ 129.230699][ T6068] do_writepages+0x32e/0x550 [ 129.230718][ T6068] __writeback_single_inode+0x145/0x1000 [ 129.230742][ T6068] writeback_sb_inodes+0x6b7/0xf60 [ 129.230764][ T6068] __writeback_inodes_wb+0x111/0x240 [ 129.230787][ T6068] wb_writeback+0x44f/0xaf0 [ 129.230806][ T6068] wb_workfn+0xaf4/0xf00 [ 129.230821][ T6068] process_scheduled_works+0xae1/0x17b0 [ 129.230844][ T6068] worker_thread+0x8a0/0xda0 [ 129.230866][ T6068] kthread+0x711/0x8a0 [ 129.230893][ T6068] ret_from_fork+0x4bc/0x870 [ 129.230914][ T6068] ret_from_fork_asm+0x1a/0x30 [ 129.230934][ T6068] [ 129.230934][ T6068] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 129.230962][ T6068] validate_chain+0xb9b/0x2140 [ 129.230979][ T6068] __lock_acquire+0xab9/0xd20 [ 129.231012][ T6068] lock_acquire+0x120/0x360 [ 129.231036][ T6068] percpu_down_read_internal+0x48/0x1d0 [ 129.231053][ T6068] ext4_writepages+0x1cc/0x350 [ 129.231071][ T6068] do_writepages+0x32e/0x550 [ 129.231090][ T6068] __writeback_single_inode+0x145/0x1000 [ 129.231112][ T6068] writeback_single_inode+0x1db/0x640 [ 129.231146][ T6068] write_inode_now+0x160/0x1d0 [ 129.231165][ T6068] iput+0x830/0xc50 [ 129.231190][ T6068] ext4_xattr_block_set+0x1fce/0x2ac0 [ 129.231218][ T6068] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 129.231256][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 129.231283][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 129.231305][ T6068] ext4_evict_inode+0x80d/0xee0 [ 129.231325][ T6068] evict+0x504/0x9c0 [ 129.231344][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 129.231365][ T6068] ext4_fill_super+0x593b/0x61f0 [ 129.231382][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 129.231406][ T6068] vfs_get_tree+0x92/0x2b0 [ 129.231430][ T6068] do_new_mount+0x302/0xa10 [ 129.231454][ T6068] __se_sys_mount+0x313/0x410 [ 129.231478][ T6068] do_syscall_64+0xfa/0xfa0 [ 129.231502][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.231520][ T6068] [ 129.231520][ T6068] other info that might help us debug this: [ 129.231520][ T6068] [ 129.231527][ T6068] Chain exists of: [ 129.231527][ T6068] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 129.231527][ T6068] [ 129.231561][ T6068] Possible unsafe locking scenario: [ 129.231561][ T6068] [ 129.231567][ T6068] CPU0 CPU1 [ 129.231574][ T6068] ---- ---- [ 129.231580][ T6068] lock(&ei->xattr_sem); [ 129.231608][ T6068] lock(jbd2_handle); [ 129.231621][ T6068] lock(&ei->xattr_sem); [ 129.231636][ T6068] rlock(&sbi->s_writepages_rwsem); [ 129.231649][ T6068] [ 129.231649][ T6068] *** DEADLOCK *** [ 129.231649][ T6068] [ 129.231655][ T6068] 3 locks held by syz.0.17/6068: [ 129.231667][ T6068] #0: ffff88803a6cc0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0 [ 129.231726][ T6068] #1: ffff88803a6cc770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 129.231781][ T6068] #2: ffff888041783bf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 129.231828][ T6068] [ 129.231828][ T6068] stack backtrace: [ 129.231840][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.231865][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.231877][ T6068] Call Trace: [ 129.231885][ T6068] [ 129.231893][ T6068] dump_stack_lvl+0x189/0x250 [ 129.231925][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.231955][ T6068] ? __pfx__printk+0x10/0x10 [ 129.231978][ T6068] ? print_lock_name+0xde/0x100 [ 129.232000][ T6068] print_circular_bug+0x2ee/0x310 [ 129.232037][ T6068] check_noncircular+0x134/0x160 [ 129.232059][ T6068] validate_chain+0xb9b/0x2140 [ 129.232093][ T6068] ? look_up_lock_class+0x74/0x170 [ 129.232121][ T6068] ? register_lock_class+0x51/0x320 [ 129.232150][ T6068] __lock_acquire+0xab9/0xd20 [ 129.232181][ T6068] ? ext4_writepages+0x1cc/0x350 [ 129.232200][ T6068] lock_acquire+0x120/0x360 [ 129.232225][ T6068] ? ext4_writepages+0x1cc/0x350 [ 129.232246][ T6068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.232272][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.232300][ T6068] percpu_down_read_internal+0x48/0x1d0 [ 129.232320][ T6068] ? ext4_writepages+0x1cc/0x350 [ 129.232341][ T6068] ext4_writepages+0x1cc/0x350 [ 129.232362][ T6068] ? __pfx_ext4_writepages+0x10/0x10 [ 129.232382][ T6068] ? rt_mutex_slowunlock+0x493/0x8a0 [ 129.232407][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.232430][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.232451][ T6068] ? __pfx_ext4_writepages+0x10/0x10 [ 129.232473][ T6068] do_writepages+0x32e/0x550 [ 129.232495][ T6068] ? reacquire_held_locks+0x127/0x1d0 [ 129.232525][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 129.232548][ T6068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 129.232574][ T6068] __writeback_single_inode+0x145/0x1000 [ 129.232603][ T6068] writeback_single_inode+0x1db/0x640 [ 129.232627][ T6068] write_inode_now+0x160/0x1d0 [ 129.232648][ T6068] ? __pfx_write_inode_now+0x10/0x10 [ 129.232683][ T6068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 129.232707][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.232729][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.232752][ T6068] iput+0x830/0xc50 [ 129.232785][ T6068] ext4_xattr_block_set+0x1fce/0x2ac0 [ 129.232830][ T6068] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 129.232862][ T6068] ? ext4_xattr_block_find+0x2d4/0x350 [ 129.232893][ T6068] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 129.232940][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 129.232977][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 129.233017][ T6068] ext4_evict_inode+0x80d/0xee0 [ 129.233046][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.233069][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.233093][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.233115][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.233138][ T6068] evict+0x504/0x9c0 [ 129.233163][ T6068] ? __pfx_evict+0x10/0x10 [ 129.233184][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.233207][ T6068] ? iput+0x946/0xc50 [ 129.233237][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 129.233265][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.233290][ T6068] ? ext4_register_li_request+0x640/0x720 [ 129.233312][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 129.233339][ T6068] ext4_fill_super+0x593b/0x61f0 [ 129.233367][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.233386][ T6068] ? snprintf+0xda/0x120 [ 129.233405][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 129.233428][ T6068] ? __pfx_snprintf+0x10/0x10 [ 129.233447][ T6068] ? set_blocksize+0x219/0x450 [ 129.233477][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.233500][ T6068] ? sb_set_blocksize+0x104/0x180 [ 129.233530][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 129.233558][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 129.233584][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.233604][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.233629][ T6068] ? cap_capable+0x11f/0x460 [ 129.233648][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.233671][ T6068] vfs_get_tree+0x92/0x2b0 [ 129.233698][ T6068] do_new_mount+0x302/0xa10 [ 129.233726][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.233747][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 129.233774][ T6068] ? ns_capable+0x8a/0xf0 [ 129.233806][ T6068] __se_sys_mount+0x313/0x410 [ 129.233837][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 129.233866][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 129.233893][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 129.233921][ T6068] do_syscall_64+0xfa/0xfa0 [ 129.233947][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.233973][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.233994][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 129.234026][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.234047][ T6068] RIP: 0033:0x7fbc0625076a [ 129.234065][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.234082][ T6068] RSP: 002b:00007ffcd2e44218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.234104][ T6068] RAX: ffffffffffffffda RBX: 00007ffcd2e442a0 RCX: 00007fbc0625076a [ 129.234120][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffcd2e44260 [ 129.234134][ T6068] RBP: 0000200000000180 R08: 00007ffcd2e442a0 R09: 0000000000800700 [ 129.234148][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.234162][ T6068] R13: 00007ffcd2e44260 R14: 000000000000046f R15: 00002000000007c0 [ 129.234184][ T6068] [ 129.262840][ T6068] ------------[ cut here ]------------ [ 129.262854][ T6068] EA inode 11 i_nlink=2 [ 129.263093][ T6068] WARNING: CPU: 0 PID: 6068 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.263137][ T6068] Modules linked in: [ 129.263153][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.263176][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.263186][ T6068] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.263216][ T6068] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 97 9a 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 33 f6 40 08 44 89 f9 [ 129.263232][ T6068] RSP: 0018:ffffc90003f17100 EFLAGS: 00010246 [ 129.263248][ T6068] RAX: 9d63e259ca3b0f00 RBX: 0000000000000001 RCX: ffff888024715a00 [ 129.263271][ T6068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.263282][ T6068] RBP: ffffc90003f171f8 R08: 0000000000000000 R09: 0000000000000000 [ 129.263294][ T6068] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 129.263306][ T6068] R13: ffff88823be388f8 R14: 1ffff110477c7105 R15: ffff88823be38828 [ 129.263321][ T6068] FS: 000055558fd52500(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 129.263337][ T6068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.263351][ T6068] CR2: 00007f8d5611a000 CR3: 00000000568e0000 CR4: 00000000003526f0 [ 129.263368][ T6068] Call Trace: [ 129.263375][ T6068] [ 129.263384][ T6068] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 129.263407][ T6068] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 129.263437][ T6068] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 129.263466][ T6068] ext4_xattr_set_entry+0xabb/0x1e20 [ 129.263499][ T6068] ext4_xattr_ibody_set+0x254/0x6a0 [ 129.263527][ T6068] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 129.263567][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 129.263598][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 129.263624][ T6068] ext4_evict_inode+0x80d/0xee0 [ 129.263649][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.263669][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.263691][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.263710][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.263731][ T6068] evict+0x504/0x9c0 [ 129.263752][ T6068] ? __pfx_evict+0x10/0x10 [ 129.263771][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.263791][ T6068] ? iput+0x946/0xc50 [ 129.263819][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 129.263844][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.263866][ T6068] ? ext4_register_li_request+0x640/0x720 [ 129.263887][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 129.263910][ T6068] ext4_fill_super+0x593b/0x61f0 [ 129.263936][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.263952][ T6068] ? snprintf+0xda/0x120 [ 129.263968][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 129.263988][ T6068] ? __pfx_snprintf+0x10/0x10 [ 129.264005][ T6068] ? set_blocksize+0x219/0x450 [ 129.264030][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.264050][ T6068] ? sb_set_blocksize+0x104/0x180 [ 129.264076][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 129.264099][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 129.264122][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.264139][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.264161][ T6068] ? cap_capable+0x11f/0x460 [ 129.264178][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.264199][ T6068] vfs_get_tree+0x92/0x2b0 [ 129.264222][ T6068] do_new_mount+0x302/0xa10 [ 129.264245][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.264272][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 129.264295][ T6068] ? ns_capable+0x8a/0xf0 [ 129.264322][ T6068] __se_sys_mount+0x313/0x410 [ 129.264348][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 129.264373][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 129.264396][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 129.264420][ T6068] do_syscall_64+0xfa/0xfa0 [ 129.264443][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.264466][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.264484][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 129.264505][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.264522][ T6068] RIP: 0033:0x7fbc0625076a [ 129.264538][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.264553][ T6068] RSP: 002b:00007ffcd2e44218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.264572][ T6068] RAX: ffffffffffffffda RBX: 00007ffcd2e442a0 RCX: 00007fbc0625076a [ 129.264585][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffcd2e44260 [ 129.264598][ T6068] RBP: 0000200000000180 R08: 00007ffcd2e442a0 R09: 0000000000800700 [ 129.264611][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.264623][ T6068] R13: 00007ffcd2e44260 R14: 000000000000046f R15: 00002000000007c0 [ 129.264642][ T6068] [ 129.264652][ T6068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.264665][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.264686][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.264697][ T6068] Call Trace: [ 129.264704][ T6068] [ 129.264711][ T6068] dump_stack_lvl+0x99/0x250 [ 129.264738][ T6068] ? __asan_memcpy+0x40/0x70 [ 129.264759][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.264785][ T6068] ? __pfx__printk+0x10/0x10 [ 129.264810][ T6068] vpanic+0x237/0x6d0 [ 129.264828][ T6068] ? __pfx_vpanic+0x10/0x10 [ 129.264849][ T6068] panic+0xb9/0xc0 [ 129.264865][ T6068] ? __pfx_panic+0x10/0x10 [ 129.264886][ T6068] __warn+0x31b/0x4b0 [ 129.264902][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.264931][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.264958][ T6068] report_bug+0x2be/0x4f0 [ 129.264980][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.265007][ T6068] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.265035][ T6068] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 129.265062][ T6068] handle_bug+0x84/0x160 [ 129.265089][ T6068] exc_invalid_op+0x1a/0x50 [ 129.265115][ T6068] asm_exc_invalid_op+0x1a/0x20 [ 129.265132][ T6068] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 129.265160][ T6068] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 97 9a 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 33 f6 40 08 44 89 f9 [ 129.265175][ T6068] RSP: 0018:ffffc90003f17100 EFLAGS: 00010246 [ 129.265190][ T6068] RAX: 9d63e259ca3b0f00 RBX: 0000000000000001 RCX: ffff888024715a00 [ 129.265204][ T6068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.265215][ T6068] RBP: ffffc90003f171f8 R08: 0000000000000000 R09: 0000000000000000 [ 129.265227][ T6068] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b [ 129.265240][ T6068] R13: ffff88823be388f8 R14: 1ffff110477c7105 R15: ffff88823be38828 [ 129.265268][ T6068] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 129.265289][ T6068] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 129.265318][ T6068] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 129.265347][ T6068] ext4_xattr_set_entry+0xabb/0x1e20 [ 129.265380][ T6068] ext4_xattr_ibody_set+0x254/0x6a0 [ 129.265408][ T6068] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 129.265447][ T6068] __ext4_expand_extra_isize+0x30d/0x400 [ 129.265477][ T6068] __ext4_mark_inode_dirty+0x46c/0x700 [ 129.265503][ T6068] ext4_evict_inode+0x80d/0xee0 [ 129.265527][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.265547][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.265567][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.265587][ T6068] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.265607][ T6068] evict+0x504/0x9c0 [ 129.265629][ T6068] ? __pfx_evict+0x10/0x10 [ 129.265647][ T6068] ? rt_spin_unlock+0x161/0x200 [ 129.265667][ T6068] ? iput+0x946/0xc50 [ 129.265693][ T6068] ext4_orphan_cleanup+0xc20/0x1460 [ 129.265719][ T6068] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 129.265741][ T6068] ? ext4_register_li_request+0x640/0x720 [ 129.265760][ T6068] ? errseq_check_and_advance+0x66/0x120 [ 129.265782][ T6068] ext4_fill_super+0x593b/0x61f0 [ 129.265807][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.265824][ T6068] ? snprintf+0xda/0x120 [ 129.265840][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 129.265860][ T6068] ? __pfx_snprintf+0x10/0x10 [ 129.265877][ T6068] ? set_blocksize+0x219/0x450 [ 129.265901][ T6068] ? rt_spin_unlock+0x150/0x200 [ 129.265921][ T6068] ? sb_set_blocksize+0x104/0x180 [ 129.265947][ T6068] ? setup_bdev_super+0x4c1/0x5b0 [ 129.265970][ T6068] get_tree_bdev_flags+0x40e/0x4d0 [ 129.265993][ T6068] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.266010][ T6068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 129.266032][ T6068] ? cap_capable+0x11f/0x460 [ 129.266049][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.266070][ T6068] vfs_get_tree+0x92/0x2b0 [ 129.266092][ T6068] do_new_mount+0x302/0xa10 [ 129.266115][ T6068] ? safesetid_security_capable+0xa9/0x1a0 [ 129.266134][ T6068] ? __pfx_do_new_mount+0x10/0x10 [ 129.266157][ T6068] ? ns_capable+0x8a/0xf0 [ 129.266184][ T6068] __se_sys_mount+0x313/0x410 [ 129.266210][ T6068] ? __pfx___se_sys_mount+0x10/0x10 [ 129.266235][ T6068] ? do_syscall_64+0xbe/0xfa0 [ 129.266336][ T6068] ? __x64_sys_mount+0x20/0xc0 [ 129.266361][ T6068] do_syscall_64+0xfa/0xfa0 [ 129.266384][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.266407][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.266425][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 129.266446][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.266464][ T6068] RIP: 0033:0x7fbc0625076a [ 129.266478][ T6068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.266492][ T6068] RSP: 002b:00007ffcd2e44218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.266510][ T6068] RAX: ffffffffffffffda RBX: 00007ffcd2e442a0 RCX: 00007fbc0625076a [ 129.266523][ T6068] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffcd2e44260 [ 129.266536][ T6068] RBP: 0000200000000180 R08: 00007ffcd2e442a0 R09: 0000000000800700 [ 129.266549][ T6068] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.266561][ T6068] R13: 00007ffcd2e44260 R14: 000000000000046f R15: 00002000000007c0 [ 129.266581][ T6068] [ 129.266857][ T6068] Kernel Offset: disabled