Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts.
[ 92.161438][ T10] cfg80211: failed to load regulatory.db
2025/11/15 11:53:03 parsed 1 programs
[ 97.972116][ T5805] cgroup: Unknown subsys name 'net'
[ 98.233519][ T5805] cgroup: Unknown subsys name 'cpuset'
[ 98.308367][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 100.372844][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 104.265225][ T5826] chnl_net:caif_netlink_parms(): no params data found
[ 104.590106][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.591706][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.591854][ T5826] bridge_slave_0: entered allmulticast mode
[ 104.593944][ T5826] bridge_slave_0: entered promiscuous mode
[ 104.603214][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.603372][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.603594][ T5826] bridge_slave_1: entered allmulticast mode
[ 104.607192][ T5826] bridge_slave_1: entered promiscuous mode
[ 104.803798][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.807184][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.033278][ T5826] team0: Port device team_slave_0 added
[ 105.036947][ T5826] team0: Port device team_slave_1 added
[ 105.170890][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.170903][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.170923][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.173939][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.173954][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.173981][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.368862][ T5826] hsr_slave_0: entered promiscuous mode
[ 105.369997][ T5826] hsr_slave_1: entered promiscuous mode
[ 105.764419][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.784976][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.821757][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.862426][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.104736][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.127000][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.140149][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.140702][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.155610][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.155900][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.408651][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.459161][ T5826] veth0_vlan: entered promiscuous mode
[ 106.466766][ T5826] veth1_vlan: entered promiscuous mode
[ 106.521039][ T5826] veth0_macvtap: entered promiscuous mode
[ 106.528163][ T5826] veth1_macvtap: entered promiscuous mode
[ 106.551842][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.563691][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.576896][ T1420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.577185][ T1420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.577240][ T1420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.577278][ T1420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.362738][ T1306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.635846][ T1306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.900146][ T1306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.185515][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 108.192465][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 108.193582][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.195297][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.196180][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.462014][ T1306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.747948][ T1306] bridge_slave_1: left allmulticast mode
[ 109.748440][ T1306] bridge_slave_1: left promiscuous mode
[ 109.750484][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.830108][ T1306] bridge_slave_0: left allmulticast mode
[ 109.830145][ T1306] bridge_slave_0: left promiscuous mode
[ 109.830428][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.618236][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 111.681268][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 111.740182][ T1306] bond0 (unregistering): Released all slaves
[ 112.117741][ T1306] hsr_slave_0: left promiscuous mode
[ 112.173244][ T1306] hsr_slave_1: left promiscuous mode
[ 112.174442][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 112.174522][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 112.227601][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 112.227634][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 112.395221][ T1306] veth1_macvtap: left promiscuous mode
[ 112.395479][ T1306] veth0_macvtap: left promiscuous mode
[ 112.395786][ T1306] veth1_vlan: left promiscuous mode
[ 112.396090][ T1306] veth0_vlan: left promiscuous mode
[ 114.560492][ T1306] team0 (unregistering): Port device team_slave_1 removed
[ 114.758733][ T1306] team0 (unregistering): Port device team_slave_0 removed
[ 119.152441][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.152469][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.256644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.256666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/15 11:53:30 executed programs: 0
[ 121.455428][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 121.457206][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 121.463567][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 121.464987][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 121.465941][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.395043][ T5981] chnl_net:caif_netlink_parms(): no params data found
[ 122.888019][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.888177][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.888337][ T5981] bridge_slave_0: entered allmulticast mode
[ 122.890475][ T5981] bridge_slave_0: entered promiscuous mode
[ 122.894174][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.894365][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.894485][ T5981] bridge_slave_1: entered allmulticast mode
[ 122.896336][ T5981] bridge_slave_1: entered promiscuous mode
[ 123.118587][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.121992][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.339824][ T5981] team0: Port device team_slave_0 added
[ 123.342625][ T5981] team0: Port device team_slave_1 added
[ 123.519327][ T61] Bluetooth: hci0: command tx timeout
[ 123.520145][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.520156][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.520184][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.545852][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.545871][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.545901][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.986394][ T5981] hsr_slave_0: entered promiscuous mode
[ 123.987361][ T5981] hsr_slave_1: entered promiscuous mode
[ 125.543853][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.575497][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.597698][ T61] Bluetooth: hci0: command tx timeout
[ 125.615444][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.653300][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.835275][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.866049][ T5981] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.877552][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.877693][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.891026][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.891251][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.256177][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 126.328247][ T5981] veth0_vlan: entered promiscuous mode
[ 126.350184][ T5981] veth1_vlan: entered promiscuous mode
[ 126.404093][ T5981] veth0_macvtap: entered promiscuous mode
[ 126.420482][ T5981] veth1_macvtap: entered promiscuous mode
[ 126.453365][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.476173][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.502932][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.505181][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.505248][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.505287][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.753232][ T1527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.753256][ T1527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.823072][ T1527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.823095][ T1527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/15 11:53:35 executed programs: 2
[ 126.987341][ T6060] loop0: detected capacity change from 0 to 512
[ 127.069736][ T6060]
[ 127.069749][ T6060] ======================================================
[ 127.069758][ T6060] WARNING: possible circular locking dependency detected
[ 127.069775][ T6060] syzkaller #0 Not tainted
[ 127.069786][ T6060] ------------------------------------------------------
[ 127.069794][ T6060] syz.0.17/6060 is trying to acquire lock:
[ 127.069806][ T6060] ffff88803561cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 127.069875][ T6060]
[ 127.069875][ T6060] but task is already holding lock:
[ 127.069882][ T6060] ffff8880554ebbf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 127.069930][ T6060]
[ 127.069930][ T6060] which lock already depends on the new lock.
[ 127.069930][ T6060]
[ 127.069937][ T6060]
[ 127.069937][ T6060] the existing dependency chain (in reverse order) is:
[ 127.069944][ T6060]
[ 127.069944][ T6060] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 127.069971][ T6060] lock_acquire+0x120/0x360
[ 127.069998][ T6060] down_write+0x3a/0x50
[ 127.070015][ T6060] ext4_xattr_set_handle+0x165/0x1590
[ 127.070044][ T6060] ext4_initxattrs+0x9f/0x110
[ 127.070067][ T6060] security_inode_init_security+0x2a0/0x3f0
[ 127.070094][ T6060] __ext4_new_inode+0x3314/0x3cb0
[ 127.070123][ T6060] ext4_create+0x22d/0x460
[ 127.070144][ T6060] path_openat+0x1500/0x3840
[ 127.070164][ T6060] do_filp_open+0x1fa/0x410
[ 127.070183][ T6060] do_sys_openat2+0x121/0x1c0
[ 127.070200][ T6060] __x64_sys_openat+0x138/0x170
[ 127.070216][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.070242][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.070260][ T6060]
[ 127.070260][ T6060] -> #1 (jbd2_handle){++++}-{0:0}:
[ 127.070284][ T6060] lock_acquire+0x120/0x360
[ 127.070308][ T6060] start_this_handle+0x1fa7/0x21c0
[ 127.070331][ T6060] jbd2__journal_start+0x2c1/0x5b0
[ 127.070363][ T6060] __ext4_journal_start_sb+0x227/0x5c0
[ 127.070393][ T6060] ext4_do_writepages+0xf6f/0x4600
[ 127.070419][ T6060] ext4_writepages+0x205/0x350
[ 127.070442][ T6060] do_writepages+0x32e/0x550
[ 127.070463][ T6060] file_write_and_wait_range+0x244/0x340
[ 127.070574][ T6060] ext4_sync_file+0x2b4/0xb20
[ 127.070603][ T6060] __x64_sys_fsync+0x194/0x1f0
[ 127.070620][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.070657][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.070676][ T6060]
[ 127.070676][ T6060] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 127.070705][ T6060] validate_chain+0xb9b/0x2140
[ 127.070720][ T6060] __lock_acquire+0xab9/0xd20
[ 127.070743][ T6060] lock_acquire+0x120/0x360
[ 127.070765][ T6060] percpu_down_read_internal+0x48/0x1d0
[ 127.070783][ T6060] ext4_writepages+0x1cc/0x350
[ 127.070801][ T6060] do_writepages+0x32e/0x550
[ 127.070818][ T6060] __writeback_single_inode+0x145/0x1000
[ 127.070843][ T6060] writeback_single_inode+0x1db/0x640
[ 127.070862][ T6060] write_inode_now+0x160/0x1d0
[ 127.070880][ T6060] iput+0x830/0xc50
[ 127.070905][ T6060] ext4_xattr_block_set+0x1fce/0x2ac0
[ 127.070933][ T6060] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 127.070962][ T6060] __ext4_expand_extra_isize+0x30d/0x400
[ 127.070993][ T6060] __ext4_mark_inode_dirty+0x46c/0x700
[ 127.071016][ T6060] ext4_evict_inode+0x80d/0xee0
[ 127.071037][ T6060] evict+0x504/0x9c0
[ 127.071056][ T6060] ext4_orphan_cleanup+0xc20/0x1460
[ 127.071078][ T6060] ext4_fill_super+0x593b/0x61f0
[ 127.071095][ T6060] get_tree_bdev_flags+0x40e/0x4d0
[ 127.071119][ T6060] vfs_get_tree+0x92/0x2b0
[ 127.071142][ T6060] do_new_mount+0x302/0xa10
[ 127.071167][ T6060] __se_sys_mount+0x313/0x410
[ 127.071191][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.071218][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.071237][ T6060]
[ 127.071237][ T6060] other info that might help us debug this:
[ 127.071237][ T6060]
[ 127.071243][ T6060] Chain exists of:
[ 127.071243][ T6060] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 127.071243][ T6060]
[ 127.071278][ T6060] Possible unsafe locking scenario:
[ 127.071278][ T6060]
[ 127.071284][ T6060] CPU0 CPU1
[ 127.071290][ T6060] ---- ----
[ 127.071296][ T6060] lock(&ei->xattr_sem);
[ 127.071329][ T6060] lock(jbd2_handle);
[ 127.071345][ T6060] lock(&ei->xattr_sem);
[ 127.071360][ T6060] rlock(&sbi->s_writepages_rwsem);
[ 127.071374][ T6060]
[ 127.071374][ T6060] *** DEADLOCK ***
[ 127.071374][ T6060]
[ 127.071379][ T6060] 3 locks held by syz.0.17/6060:
[ 127.071391][ T6060] #0: ffff88803561a0d0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0
[ 127.071452][ T6060] #1: ffff88803561a770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[ 127.071508][ T6060] #2: ffff8880554ebbf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 127.071573][ T6060]
[ 127.071573][ T6060] stack backtrace:
[ 127.071602][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 127.071625][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 127.071645][ T6060] Call Trace:
[ 127.071657][ T6060]
[ 127.071666][ T6060] dump_stack_lvl+0x189/0x250
[ 127.071702][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10
[ 127.071735][ T6060] ? __pfx__printk+0x10/0x10
[ 127.071762][ T6060] ? print_lock_name+0xde/0x100
[ 127.071788][ T6060] print_circular_bug+0x2ee/0x310
[ 127.071812][ T6060] check_noncircular+0x134/0x160
[ 127.071836][ T6060] validate_chain+0xb9b/0x2140
[ 127.071860][ T6060] ? look_up_lock_class+0x74/0x170
[ 127.071893][ T6060] ? register_lock_class+0x51/0x320
[ 127.071925][ T6060] __lock_acquire+0xab9/0xd20
[ 127.071956][ T6060] ? ext4_writepages+0x1cc/0x350
[ 127.071977][ T6060] lock_acquire+0x120/0x360
[ 127.072005][ T6060] ? ext4_writepages+0x1cc/0x350
[ 127.072028][ T6060] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 127.072062][ T6060] ? lockdep_hardirqs_on+0x9c/0x150
[ 127.072096][ T6060] percpu_down_read_internal+0x48/0x1d0
[ 127.072117][ T6060] ? ext4_writepages+0x1cc/0x350
[ 127.072137][ T6060] ext4_writepages+0x1cc/0x350
[ 127.072159][ T6060] ? __pfx_ext4_writepages+0x10/0x10
[ 127.072179][ T6060] ? rt_mutex_slowunlock+0x493/0x8a0
[ 127.072207][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.072231][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.072253][ T6060] ? __pfx_ext4_writepages+0x10/0x10
[ 127.072274][ T6060] do_writepages+0x32e/0x550
[ 127.072295][ T6060] ? reacquire_held_locks+0x127/0x1d0
[ 127.072327][ T6060] ? rt_spin_lock+0x1c1/0x3e0
[ 127.072353][ T6060] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 127.072380][ T6060] __writeback_single_inode+0x145/0x1000
[ 127.072410][ T6060] writeback_single_inode+0x1db/0x640
[ 127.072435][ T6060] write_inode_now+0x160/0x1d0
[ 127.072456][ T6060] ? __pfx_write_inode_now+0x10/0x10
[ 127.072503][ T6060] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 127.072530][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.072557][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.072583][ T6060] iput+0x830/0xc50
[ 127.072617][ T6060] ext4_xattr_block_set+0x1fce/0x2ac0
[ 127.072668][ T6060] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 127.072703][ T6060] ? ext4_xattr_block_find+0x2d4/0x350
[ 127.072739][ T6060] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 127.072790][ T6060] __ext4_expand_extra_isize+0x30d/0x400
[ 127.072830][ T6060] __ext4_mark_inode_dirty+0x46c/0x700
[ 127.072863][ T6060] ext4_evict_inode+0x80d/0xee0
[ 127.072895][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.072920][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.072948][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.072973][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.072997][ T6060] evict+0x504/0x9c0
[ 127.073024][ T6060] ? __pfx_evict+0x10/0x10
[ 127.073045][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.073070][ T6060] ? iput+0x946/0xc50
[ 127.073100][ T6060] ext4_orphan_cleanup+0xc20/0x1460
[ 127.073130][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 127.073156][ T6060] ? ext4_register_li_request+0x640/0x720
[ 127.073180][ T6060] ? errseq_check_and_advance+0x66/0x120
[ 127.073205][ T6060] ext4_fill_super+0x593b/0x61f0
[ 127.073237][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.073256][ T6060] ? snprintf+0xda/0x120
[ 127.073278][ T6060] ? rt_spin_lock+0x1c1/0x3e0
[ 127.073304][ T6060] ? __pfx_snprintf+0x10/0x10
[ 127.073326][ T6060] ? set_blocksize+0x219/0x450
[ 127.073356][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.073384][ T6060] ? sb_set_blocksize+0x104/0x180
[ 127.073416][ T6060] ? setup_bdev_super+0x4c1/0x5b0
[ 127.073446][ T6060] get_tree_bdev_flags+0x40e/0x4d0
[ 127.073473][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.073503][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 127.073531][ T6060] ? cap_capable+0x11f/0x460
[ 127.073551][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.073575][ T6060] vfs_get_tree+0x92/0x2b0
[ 127.073603][ T6060] do_new_mount+0x302/0xa10
[ 127.073631][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.073653][ T6060] ? __pfx_do_new_mount+0x10/0x10
[ 127.073683][ T6060] ? ns_capable+0x8a/0xf0
[ 127.073717][ T6060] __se_sys_mount+0x313/0x410
[ 127.073750][ T6060] ? __pfx___se_sys_mount+0x10/0x10
[ 127.073781][ T6060] ? do_syscall_64+0xbe/0xfa0
[ 127.073812][ T6060] ? __x64_sys_mount+0x20/0xc0
[ 127.073842][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.073872][ T6060] ? lockdep_hardirqs_on+0x9c/0x150
[ 127.073904][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.073925][ T6060] ? clear_bhb_loop+0x60/0xb0
[ 127.073949][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.073970][ T6060] RIP: 0033:0x7f2c8af90e6a
[ 127.074000][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 127.074017][ T6060] RSP: 002b:00007ffca113d908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 127.074039][ T6060] RAX: ffffffffffffffda RBX: 00007ffca113d990 RCX: 00007f2c8af90e6a
[ 127.074055][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffca113d950
[ 127.074069][ T6060] RBP: 0000200000000180 R08: 00007ffca113d990 R09: 0000000000800700
[ 127.074083][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 127.074097][ T6060] R13: 00007ffca113d950 R14: 000000000000046f R15: 000000000000002c
[ 127.074120][ T6060]
[ 127.074722][ T6060] ------------[ cut here ]------------
[ 127.074733][ T6060] EA inode 11 i_nlink=2
[ 127.075093][ T6060] WARNING: CPU: 0 PID: 6060 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.075129][ T6060] Modules linked in:
[ 127.075152][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 127.075175][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 127.075188][ T6060] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.075210][ T6060] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 d7 94 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 53 21 41 08 44 89 f9
[ 127.075228][ T6060] RSP: 0018:ffffc90003b27100 EFLAGS: 00010246
[ 127.075245][ T6060] RAX: e439adb1598f5f00 RBX: 0000000000000001 RCX: ffff8880240cda00
[ 127.075261][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 127.075273][ T6060] RBP: ffffc90003b271f8 R08: 0000000000000000 R09: 0000000000000000
[ 127.075287][ T6060] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b
[ 127.075301][ T6060] R13: ffff8880554ee310 R14: 1ffff1100aa9dc48 R15: ffff8880554ee240
[ 127.075317][ T6060] FS: 000055555c841500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000
[ 127.075335][ T6060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 127.075348][ T6060] CR2: 0000557eb5e65950 CR3: 0000000041c3a000 CR4: 00000000003526f0
[ 127.075366][ T6060] Call Trace:
[ 127.075374][ T6060]
[ 127.075382][ T6060] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 127.075408][ T6060] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 127.075429][ T6060] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 127.075465][ T6060] ext4_xattr_set_entry+0xabb/0x1e20
[ 127.075519][ T6060] ext4_xattr_ibody_set+0x254/0x6a0
[ 127.075556][ T6060] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 127.075607][ T6060] __ext4_expand_extra_isize+0x30d/0x400
[ 127.075648][ T6060] __ext4_mark_inode_dirty+0x46c/0x700
[ 127.075680][ T6060] ext4_evict_inode+0x80d/0xee0
[ 127.075712][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.075738][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.075766][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.075792][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.075817][ T6060] evict+0x504/0x9c0
[ 127.075844][ T6060] ? __pfx_evict+0x10/0x10
[ 127.075866][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.075892][ T6060] ? iput+0x946/0xc50
[ 127.075926][ T6060] ext4_orphan_cleanup+0xc20/0x1460
[ 127.075958][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 127.075986][ T6060] ? ext4_register_li_request+0x640/0x720
[ 127.076011][ T6060] ? errseq_check_and_advance+0x66/0x120
[ 127.076039][ T6060] ext4_fill_super+0x593b/0x61f0
[ 127.076069][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.076089][ T6060] ? snprintf+0xda/0x120
[ 127.076110][ T6060] ? rt_spin_lock+0x1c1/0x3e0
[ 127.076137][ T6060] ? __pfx_snprintf+0x10/0x10
[ 127.076159][ T6060] ? set_blocksize+0x219/0x450
[ 127.076189][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.076217][ T6060] ? sb_set_blocksize+0x104/0x180
[ 127.076249][ T6060] ? setup_bdev_super+0x4c1/0x5b0
[ 127.076279][ T6060] get_tree_bdev_flags+0x40e/0x4d0
[ 127.076306][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.076328][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 127.076356][ T6060] ? cap_capable+0x11f/0x460
[ 127.076376][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.076400][ T6060] vfs_get_tree+0x92/0x2b0
[ 127.076429][ T6060] do_new_mount+0x302/0xa10
[ 127.076458][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.076489][ T6060] ? __pfx_do_new_mount+0x10/0x10
[ 127.076519][ T6060] ? ns_capable+0x8a/0xf0
[ 127.076554][ T6060] __se_sys_mount+0x313/0x410
[ 127.076588][ T6060] ? __pfx___se_sys_mount+0x10/0x10
[ 127.076621][ T6060] ? do_syscall_64+0xbe/0xfa0
[ 127.076652][ T6060] ? __x64_sys_mount+0x20/0xc0
[ 127.076684][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.076714][ T6060] ? lockdep_hardirqs_on+0x9c/0x150
[ 127.076748][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.076768][ T6060] ? clear_bhb_loop+0x60/0xb0
[ 127.076792][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.076813][ T6060] RIP: 0033:0x7f2c8af90e6a
[ 127.076832][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 127.076849][ T6060] RSP: 002b:00007ffca113d908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 127.076870][ T6060] RAX: ffffffffffffffda RBX: 00007ffca113d990 RCX: 00007f2c8af90e6a
[ 127.076885][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffca113d950
[ 127.076899][ T6060] RBP: 0000200000000180 R08: 00007ffca113d990 R09: 0000000000800700
[ 127.076913][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 127.076927][ T6060] R13: 00007ffca113d950 R14: 000000000000046f R15: 000000000000002c
[ 127.076949][ T6060]
[ 127.076960][ T6060] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 127.076975][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 127.076999][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 127.077011][ T6060] Call Trace:
[ 127.077019][ T6060]
[ 127.077027][ T6060] dump_stack_lvl+0x99/0x250
[ 127.077061][ T6060] ? __asan_memcpy+0x40/0x70
[ 127.077084][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10
[ 127.077126][ T6060] ? __pfx__printk+0x10/0x10
[ 127.077157][ T6060] vpanic+0x237/0x6d0
[ 127.077178][ T6060] ? __pfx_vpanic+0x10/0x10
[ 127.077203][ T6060] panic+0xb9/0xc0
[ 127.077222][ T6060] ? __pfx_panic+0x10/0x10
[ 127.077249][ T6060] __warn+0x31b/0x4b0
[ 127.077269][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.077292][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.077313][ T6060] report_bug+0x2be/0x4f0
[ 127.077342][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.077363][ T6060] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.077388][ T6060] ? ext4_xattr_inode_update_ref+0x51c/0x5b0
[ 127.077408][ T6060] handle_bug+0x84/0x160
[ 127.077428][ T6060] exc_invalid_op+0x1a/0x50
[ 127.077448][ T6060] asm_exc_invalid_op+0x1a/0x20
[ 127.077467][ T6060] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 127.077497][ T6060] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 40 9b ff 8a 4c 89 e6 e8 d7 94 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 53 21 41 08 44 89 f9
[ 127.077514][ T6060] RSP: 0018:ffffc90003b27100 EFLAGS: 00010246
[ 127.077532][ T6060] RAX: e439adb1598f5f00 RBX: 0000000000000001 RCX: ffff8880240cda00
[ 127.077548][ T6060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 127.077561][ T6060] RBP: ffffc90003b271f8 R08: 0000000000000000 R09: 0000000000000000
[ 127.077574][ T6060] R10: dffffc0000000000 R11: ffffed101710487b R12: 000000000000000b
[ 127.077588][ T6060] R13: ffff8880554ee310 R14: 1ffff1100aa9dc48 R15: ffff8880554ee240
[ 127.077613][ T6060] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 127.077638][ T6060] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 127.077660][ T6060] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 127.077698][ T6060] ext4_xattr_set_entry+0xabb/0x1e20
[ 127.077740][ T6060] ext4_xattr_ibody_set+0x254/0x6a0
[ 127.077775][ T6060] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 127.077826][ T6060] __ext4_expand_extra_isize+0x30d/0x400
[ 127.077868][ T6060] __ext4_mark_inode_dirty+0x46c/0x700
[ 127.077903][ T6060] ext4_evict_inode+0x80d/0xee0
[ 127.077936][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.077961][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.077989][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.078016][ T6060] ? __pfx_ext4_evict_inode+0x10/0x10
[ 127.078041][ T6060] evict+0x504/0x9c0
[ 127.078075][ T6060] ? __pfx_evict+0x10/0x10
[ 127.078096][ T6060] ? rt_spin_unlock+0x161/0x200
[ 127.078123][ T6060] ? iput+0x946/0xc50
[ 127.078157][ T6060] ext4_orphan_cleanup+0xc20/0x1460
[ 127.078189][ T6060] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 127.078216][ T6060] ? ext4_register_li_request+0x640/0x720
[ 127.078240][ T6060] ? errseq_check_and_advance+0x66/0x120
[ 127.078265][ T6060] ext4_fill_super+0x593b/0x61f0
[ 127.078297][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.078316][ T6060] ? snprintf+0xda/0x120
[ 127.078338][ T6060] ? rt_spin_lock+0x1c1/0x3e0
[ 127.078365][ T6060] ? __pfx_snprintf+0x10/0x10
[ 127.078387][ T6060] ? set_blocksize+0x219/0x450
[ 127.078417][ T6060] ? rt_spin_unlock+0x150/0x200
[ 127.078444][ T6060] ? sb_set_blocksize+0x104/0x180
[ 127.078477][ T6060] ? setup_bdev_super+0x4c1/0x5b0
[ 127.078513][ T6060] get_tree_bdev_flags+0x40e/0x4d0
[ 127.078540][ T6060] ? __pfx_ext4_fill_super+0x10/0x10
[ 127.078561][ T6060] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 127.078590][ T6060] ? cap_capable+0x11f/0x460
[ 127.078609][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.078634][ T6060] vfs_get_tree+0x92/0x2b0
[ 127.078663][ T6060] do_new_mount+0x302/0xa10
[ 127.078693][ T6060] ? safesetid_security_capable+0xa9/0x1a0
[ 127.078716][ T6060] ? __pfx_do_new_mount+0x10/0x10
[ 127.078743][ T6060] ? ns_capable+0x8a/0xf0
[ 127.078776][ T6060] __se_sys_mount+0x313/0x410
[ 127.078808][ T6060] ? __pfx___se_sys_mount+0x10/0x10
[ 127.078841][ T6060] ? do_syscall_64+0xbe/0xfa0
[ 127.078871][ T6060] ? __x64_sys_mount+0x20/0xc0
[ 127.078901][ T6060] do_syscall_64+0xfa/0xfa0
[ 127.078933][ T6060] ? lockdep_hardirqs_on+0x9c/0x150
[ 127.078963][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.078985][ T6060] ? clear_bhb_loop+0x60/0xb0
[ 127.079009][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.079030][ T6060] RIP: 0033:0x7f2c8af90e6a
[ 127.079048][ T6060] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 127.079065][ T6060] RSP: 002b:00007ffca113d908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 127.079087][ T6060] RAX: ffffffffffffffda RBX: 00007ffca113d990 RCX: 00007f2c8af90e6a
[ 127.079103][ T6060] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffca113d950
[ 127.079118][ T6060] RBP: 0000200000000180 R08: 00007ffca113d990 R09: 0000000000800700
[ 127.079133][ T6060] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 127.079147][ T6060] R13: 00007ffca113d950 R14: 000000000000046f R15: 000000000000002c
[ 127.079169][ T6060]
[ 127.079327][ T6060] Kernel Offset: disabled