Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts.
2025/11/11 04:06:03 parsed 1 programs
syzkaller login: [ 86.760005][ T985] cfg80211: failed to load regulatory.db
[ 87.558035][ T5809] cgroup: Unknown subsys name 'net'
[ 87.792199][ T5809] cgroup: Unknown subsys name 'cpuset'
[ 87.845002][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.675085][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 93.502715][ T5836] chnl_net:caif_netlink_parms(): no params data found
[ 93.924945][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.926205][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.926369][ T5836] bridge_slave_0: entered allmulticast mode
[ 93.927977][ T5836] bridge_slave_0: entered promiscuous mode
[ 93.931650][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.931767][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.931869][ T5836] bridge_slave_1: entered allmulticast mode
[ 93.933298][ T5836] bridge_slave_1: entered promiscuous mode
[ 94.207625][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.210402][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.386642][ T5836] team0: Port device team_slave_0 added
[ 94.490316][ T5836] team0: Port device team_slave_1 added
[ 94.647151][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.647166][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.647186][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.650986][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.651001][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.651025][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.860743][ T5836] hsr_slave_0: entered promiscuous mode
[ 94.861834][ T5836] hsr_slave_1: entered promiscuous mode
[ 95.232167][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.251005][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.289029][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.327499][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.507265][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.529322][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.547061][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.547477][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.562351][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.562597][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.763412][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.821828][ T5836] veth0_vlan: entered promiscuous mode
[ 95.837883][ T5836] veth1_vlan: entered promiscuous mode
[ 95.867983][ T5836] veth0_macvtap: entered promiscuous mode
[ 95.871600][ T5836] veth1_macvtap: entered promiscuous mode
[ 95.890530][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.904979][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.914832][ T1472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.916095][ T1182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.916134][ T1182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.916168][ T1182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.678230][ T1182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.948063][ T1182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.177574][ T1182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.408698][ T1182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.693832][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.697180][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.697963][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.701762][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.703031][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.175350][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.175374][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.221165][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.221185][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.416677][ T1182] bridge_slave_1: left allmulticast mode
[ 99.417301][ T1182] bridge_slave_1: left promiscuous mode
[ 99.444068][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.525846][ T1182] bridge_slave_0: left allmulticast mode
[ 99.525876][ T1182] bridge_slave_0: left promiscuous mode
[ 99.526119][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.264973][ T1182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.325901][ T1182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.366294][ T1182] bond0 (unregistering): Released all slaves
[ 101.696649][ T1182] hsr_slave_0: left promiscuous mode
[ 101.734199][ T1182] hsr_slave_1: left promiscuous mode
[ 101.740132][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.740213][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.799332][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.799360][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.914470][ T1182] veth1_macvtap: left promiscuous mode
[ 101.914717][ T1182] veth0_macvtap: left promiscuous mode
[ 101.915028][ T1182] veth1_vlan: left promiscuous mode
[ 101.915332][ T1182] veth0_vlan: left promiscuous mode
[ 103.854849][ T1182] team0 (unregistering): Port device team_slave_1 removed
[ 104.074632][ T1182] team0 (unregistering): Port device team_slave_0 removed
2025/11/11 04:06:27 executed programs: 0
[ 109.073436][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 109.078605][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 109.080413][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 109.082682][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 109.083634][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.320563][ T5981] chnl_net:caif_netlink_parms(): no params data found
[ 110.001101][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.001215][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.001410][ T5981] bridge_slave_0: entered allmulticast mode
[ 110.007093][ T5981] bridge_slave_0: entered promiscuous mode
[ 110.056454][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.056647][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.056844][ T5981] bridge_slave_1: entered allmulticast mode
[ 110.059280][ T5981] bridge_slave_1: entered promiscuous mode
[ 110.597230][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.603300][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.887657][ T5981] team0: Port device team_slave_0 added
[ 110.935813][ T5981] team0: Port device team_slave_1 added
[ 111.155168][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.155182][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.155236][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.155925][ T5122] Bluetooth: hci0: command tx timeout
[ 111.237308][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.237319][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.237334][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.649936][ T5981] hsr_slave_0: entered promiscuous mode
[ 111.650744][ T5981] hsr_slave_1: entered promiscuous mode
[ 113.234212][ T5122] Bluetooth: hci0: command tx timeout
[ 113.437245][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.468852][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.510604][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.549324][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.722053][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.748710][ T5981] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.757868][ T994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.759529][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.786691][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.786832][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.097869][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.171270][ T5981] veth0_vlan: entered promiscuous mode
[ 114.187919][ T5981] veth1_vlan: entered promiscuous mode
[ 114.241372][ T5981] veth0_macvtap: entered promiscuous mode
[ 114.259163][ T5981] veth1_macvtap: entered promiscuous mode
[ 114.283134][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.298021][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.312340][ T994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.312575][ T994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.312613][ T994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.312648][ T994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.539514][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.539534][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.601666][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.601685][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/11 04:06:32 executed programs: 2
[ 114.796200][ T6072] loop0: detected capacity change from 0 to 512
[ 114.873631][ T6072]
[ 114.873644][ T6072] ======================================================
[ 114.873651][ T6072] WARNING: possible circular locking dependency detected
[ 114.873667][ T6072] syzkaller #0 Not tainted
[ 114.873676][ T6072] ------------------------------------------------------
[ 114.873683][ T6072] syz.0.17/6072 is trying to acquire lock:
[ 114.873694][ T6072] ffff888031b2cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 114.873745][ T6072]
[ 114.873745][ T6072] but task is already holding lock:
[ 114.873750][ T6072] ffff88805[ 114.873750][ T6072] ffff88805691bbf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 114.873792][ T6072]
[ 114.873792][ T6072] which lock already depends on the new lock.
[ 114.873792][ T6072]
[ 114.873798][ T6072]
[ 114.873798][ T6072] the existing dependency chain (in reverse order) is:
[ 114.873805][ T6072]
[ 114.873805][ T6072] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 114.873829][ T6072] lock_acquire+0x120/0x360
[ 114.873850][ T6072] down_write+0x3a/0x50
[ 114.873863][ T6072] ext4_xattr_set_handle+0x165/0x1590
[ 114.873886][ T6072] ext4_initxattrs+0x9f/0x110
[ 114.873903][ T6072] security_inode_init_security+0x2a0/0x3f0
[ 114.873934][ T6072] __ext4_new_inode+0x3314/0x3cb0
[ 114.873957][ T6072] ext4_create+0x22d/0x460
[ 114.873977][ T6072] path_openat+0x1500/0x3840
[ 114.873991][ T6072] do_filp_open+0x1fa/0x410
[ 114.874005][ T6072] do_sys_openat2+0x121/0x1c0
[ 114.874017][ T6072] __x64_sys_openat+0x138/0x170
[ 114.874030][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.874049][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.874062][ T6072]
[ 114.874062][ T6072] -> #1 (jbd2_handle){++++}-{0:0}:
[ 114.874081][ T6072] lock_acquire+0x120/0x360
[ 114.874097][ T6072] start_this_handle+0x1fa7/0x21c0
[ 114.874113][ T6072] jbd2__journal_start+0x2c1/0x5b0
[ 114.874129][ T6072] __ext4_journal_start_sb+0x227/0x5c0
[ 114.874148][ T6072] ext4_do_writepages+0xf6f/0x4600
[ 114.874164][ T6072] ext4_writepages+0x205/0x350
[ 114.874177][ T6072] do_writepages+0x32e/0x550
[ 114.874190][ T6072] file_write_and_wait_range+0x244/0x340
[ 114.874205][ T6072] ext4_sync_file+0x2b4/0xb20
[ 114.874223][ T6072] __x64_sys_fsync+0x194/0x1f0
[ 114.874234][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.874251][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.874263][ T6072]
[ 114.874263][ T6072] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 114.874282][ T6072] validate_chain+0xb9b/0x2140
[ 114.874293][ T6072] __lock_acquire+0xab9/0xd20
[ 114.874308][ T6072] lock_acquire+0x120/0x360
[ 114.874324][ T6072] percpu_down_read_internal+0x48/0x1d0
[ 114.874335][ T6072] ext4_writepages+0x1cc/0x350
[ 114.874347][ T6072] do_writepages+0x32e/0x550
[ 114.874359][ T6072] __writeback_single_inode+0x145/0x1000
[ 114.874375][ T6072] writeback_single_inode+0x1db/0x640
[ 114.874388][ T6072] write_inode_now+0x160/0x1d0
[ 114.874400][ T6072] iput+0x830/0xc50
[ 114.874417][ T6072] ext4_xattr_block_set+0x1fce/0x2ac0
[ 114.874435][ T6072] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 114.874453][ T6072] __ext4_expand_extra_isize+0x30d/0x400
[ 114.874465][ T6072] __ext4_mark_inode_dirty+0x46c/0x700
[ 114.874480][ T6072] ext4_evict_inode+0x80d/0xee0
[ 114.874494][ T6072] evict+0x504/0x9c0
[ 114.874506][ T6072] ext4_orphan_cleanup+0xc20/0x1460
[ 114.874519][ T6072] ext4_fill_super+0x593b/0x61f0
[ 114.874531][ T6072] get_tree_bdev_flags+0x40e/0x4d0
[ 114.874547][ T6072] vfs_get_tree+0x92/0x2b0
[ 114.874561][ T6072] do_new_mount+0x302/0xa10
[ 114.874577][ T6072] __se_sys_mount+0x313/0x410
[ 114.874594][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.874610][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.874622][ T6072]
[ 114.874622][ T6072] other info that might help us debug this:
[ 114.874622][ T6072]
[ 114.874627][ T6072] Chain exists of:
[ 114.874627][ T6072] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 114.874627][ T6072]
[ 114.874649][ T6072] Possible unsafe locking scenario:
[ 114.874649][ T6072]
[ 114.874654][ T6072] CPU0 CPU1
[ 114.874658][ T6072] ---- ----
[ 114.874662][ T6072] lock(&ei->xattr_sem);
[ 114.874671][ T6072] lock(jbd2_handle);
[ 114.874681][ T6072] lock(&ei->xattr_sem);
[ 114.874691][ T6072] rlock(&sbi->s_writepages_rwsem);
[ 114.874700][ T6072]
[ 114.874700][ T6072] *** DEADLOCK ***
[ 114.874700][ T6072]
[ 114.874704][ T6072] 3 locks held by syz.0.17/6072:
[ 114.874712][ T6072] #0: ffff888035aa00d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1ba/0x9a0
[ 114.874753][ T6072] #1: ffff888035aa0770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[ 114.874786][ T6072] #2: ffff88805691bbf0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 114.874820][ T6072]
[ 114.874820][ T6072] stack backtrace:
[ 114.874839][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.874855][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 114.874869][ T6072] Call Trace:
[ 114.874877][ T6072]
[ 114.874883][ T6072] dump_stack_lvl+0x189/0x250
[ 114.874905][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.874930][ T6072] ? __pfx__printk+0x10/0x10
[ 114.874946][ T6072] ? print_lock_name+0xde/0x100
[ 114.874962][ T6072] print_circular_bug+0x2ee/0x310
[ 114.874977][ T6072] check_noncircular+0x134/0x160
[ 114.874992][ T6072] validate_chain+0xb9b/0x2140
[ 114.875008][ T6072] ? look_up_lock_class+0x74/0x170
[ 114.875027][ T6072] ? register_lock_class+0x51/0x320
[ 114.875046][ T6072] __lock_acquire+0xab9/0xd20
[ 114.875065][ T6072] ? ext4_writepages+0x1cc/0x350
[ 114.875078][ T6072] lock_acquire+0x120/0x360
[ 114.875095][ T6072] ? ext4_writepages+0x1cc/0x350
[ 114.875109][ T6072] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 114.875129][ T6072] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.875148][ T6072] percpu_down_read_internal+0x48/0x1d0
[ 114.875161][ T6072] ? ext4_writepages+0x1cc/0x350
[ 114.875176][ T6072] ext4_writepages+0x1cc/0x350
[ 114.875190][ T6072] ? __pfx_ext4_writepages+0x10/0x10
[ 114.875203][ T6072] ? rt_mutex_slowunlock+0x493/0x8a0
[ 114.875222][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.875238][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.875252][ T6072] ? __pfx_ext4_writepages+0x10/0x10
[ 114.875266][ T6072] do_writepages+0x32e/0x550
[ 114.875280][ T6072] ? reacquire_held_locks+0x127/0x1d0
[ 114.875293][ T6072] ? rt_spin_lock+0x1c1/0x3e0
[ 114.875308][ T6072] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 114.875325][ T6072] __writeback_single_inode+0x145/0x1000
[ 114.875344][ T6072] writeback_single_inode+0x1db/0x640
[ 114.875361][ T6072] write_inode_now+0x160/0x1d0
[ 114.875374][ T6072] ? __pfx_write_inode_now+0x10/0x10
[ 114.875398][ T6072] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 114.875414][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.875430][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.875446][ T6072] iput+0x830/0xc50
[ 114.875466][ T6072] ext4_xattr_block_set+0x1fce/0x2ac0
[ 114.875496][ T6072] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 114.875516][ T6072] ? ext4_xattr_block_find+0x2d4/0x350
[ 114.875536][ T6072] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 114.875567][ T6072] __ext4_expand_extra_isize+0x30d/0x400
[ 114.875582][ T6072] __ext4_mark_inode_dirty+0x46c/0x700
[ 114.875602][ T6072] ext4_evict_inode+0x80d/0xee0
[ 114.875621][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.875636][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.875652][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.875667][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.875682][ T6072] evict+0x504/0x9c0
[ 114.875698][ T6072] ? __pfx_evict+0x10/0x10
[ 114.875712][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.875727][ T6072] ? iput+0x946/0xc50
[ 114.875747][ T6072] ext4_orphan_cleanup+0xc20/0x1460
[ 114.875766][ T6072] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 114.875783][ T6072] ? ext4_register_li_request+0x640/0x720
[ 114.875798][ T6072] ? errseq_check_and_advance+0x66/0x120
[ 114.875816][ T6072] ext4_fill_super+0x593b/0x61f0
[ 114.875835][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.875848][ T6072] ? snprintf+0xda/0x120
[ 114.875861][ T6072] ? rt_spin_lock+0x1c1/0x3e0
[ 114.875877][ T6072] ? __pfx_snprintf+0x10/0x10
[ 114.875890][ T6072] ? set_blocksize+0x219/0x450
[ 114.875909][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.875930][ T6072] ? sb_set_blocksize+0x104/0x180
[ 114.875949][ T6072] ? setup_bdev_super+0x4c1/0x5b0
[ 114.875966][ T6072] get_tree_bdev_flags+0x40e/0x4d0
[ 114.875983][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.875996][ T6072] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 114.876013][ T6072] ? cap_capable+0x11f/0x460
[ 114.876026][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.876041][ T6072] vfs_get_tree+0x92/0x2b0
[ 114.876058][ T6072] do_new_mount+0x302/0xa10
[ 114.876075][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.876090][ T6072] ? __pfx_do_new_mount+0x10/0x10
[ 114.876107][ T6072] ? ns_capable+0x8a/0xf0
[ 114.876128][ T6072] __se_sys_mount+0x313/0x410
[ 114.876148][ T6072] ? __pfx___se_sys_mount+0x10/0x10
[ 114.876168][ T6072] ? do_syscall_64+0xbe/0xfa0
[ 114.876185][ T6072] ? __x64_sys_mount+0x20/0xc0
[ 114.876203][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.876221][ T6072] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.876238][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.876252][ T6072] ? clear_bhb_loop+0x60/0xb0
[ 114.876267][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.876280][ T6072] RIP: 0033:0x7fd11e7d0e6a
[ 114.876296][ T6072] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.876308][ T6072] RSP: 002b:00007fffe23ce008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 114.876323][ T6072] RAX: ffffffffffffffda RBX: 00007fffe23ce090 RCX: 00007fd11e7d0e6a
[ 114.876333][ T6072] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffe23ce050
[ 114.876343][ T6072] RBP: 0000200000000180 R08: 00007fffe23ce090 R09: 0000000001a08700
[ 114.876353][ T6072] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0
[ 114.876363][ T6072] R13: 00007fffe23ce050 R14: 0000000000000470 R15: 0000200000000700
[ 114.876378][ T6072]
[ 114.927124][ T6072] ------------[ cut here ]------------
[ 114.927136][ T6072] EA inode 11 i_nlink=2
[ 114.927376][ T6072] WARNING: CPU: 1 PID: 6072 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.927407][ T6072] Modules linked in:
[ 114.927428][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.927449][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 114.927460][ T6072] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.927478][ T6072] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 d7 9b 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 53 08 41 08 44 89 f9
[ 114.927493][ T6072] RSP: 0018:ffffc90004d9f100 EFLAGS: 00010246
[ 114.927507][ T6072] RAX: b627df0abeb9f500 RBX: 0000000000000001 RCX: ffff88802cd40000
[ 114.927521][ T6072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 114.927531][ T6072] RBP: ffffc90004d9f1f8 R08: 0000000000000000 R09: 0000000000000000
[ 114.927542][ T6072] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b
[ 114.927554][ T6072] R13: ffff888056823f88 R14: 1ffff1100ad047d7 R15: ffff888056823eb8
[ 114.927568][ T6072] FS: 000055556338c500(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000
[ 114.927584][ T6072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.927596][ T6072] CR2: 00007fd17931f368 CR3: 0000000028384000 CR4: 00000000003526f0
[ 114.927611][ T6072] Call Trace:
[ 114.927618][ T6072]
[ 114.927626][ T6072] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 114.927647][ T6072] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 114.927666][ T6072] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 114.927693][ T6072] ext4_xattr_set_entry+0xabb/0x1e20
[ 114.927724][ T6072] ext4_xattr_ibody_set+0x254/0x6a0
[ 114.927749][ T6072] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 114.927788][ T6072] __ext4_expand_extra_isize+0x30d/0x400
[ 114.927808][ T6072] __ext4_mark_inode_dirty+0x46c/0x700
[ 114.927832][ T6072] ext4_evict_inode+0x80d/0xee0
[ 114.927856][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.927875][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.927904][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.927922][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.927940][ T6072] evict+0x504/0x9c0
[ 114.927961][ T6072] ? __pfx_evict+0x10/0x10
[ 114.927978][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.927997][ T6072] ? iput+0x946/0xc50
[ 114.928021][ T6072] ext4_orphan_cleanup+0xc20/0x1460
[ 114.928046][ T6072] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 114.928066][ T6072] ? ext4_register_li_request+0x640/0x720
[ 114.928086][ T6072] ? errseq_check_and_advance+0x66/0x120
[ 114.928106][ T6072] ext4_fill_super+0x593b/0x61f0
[ 114.928131][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.928147][ T6072] ? snprintf+0xda/0x120
[ 114.928170][ T6072] ? rt_spin_lock+0x1c1/0x3e0
[ 114.928190][ T6072] ? __pfx_snprintf+0x10/0x10
[ 114.928206][ T6072] ? set_blocksize+0x219/0x450
[ 114.928228][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.928248][ T6072] ? sb_set_blocksize+0x104/0x180
[ 114.928272][ T6072] ? setup_bdev_super+0x4c1/0x5b0
[ 114.928293][ T6072] get_tree_bdev_flags+0x40e/0x4d0
[ 114.928314][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.928331][ T6072] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 114.928351][ T6072] ? cap_capable+0x11f/0x460
[ 114.928367][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.928386][ T6072] vfs_get_tree+0x92/0x2b0
[ 114.928405][ T6072] do_new_mount+0x302/0xa10
[ 114.928426][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.928444][ T6072] ? __pfx_do_new_mount+0x10/0x10
[ 114.928466][ T6072] ? ns_capable+0x8a/0xf0
[ 114.928492][ T6072] __se_sys_mount+0x313/0x410
[ 114.928516][ T6072] ? __pfx___se_sys_mount+0x10/0x10
[ 114.928539][ T6072] ? do_syscall_64+0xbe/0xfa0
[ 114.928560][ T6072] ? __x64_sys_mount+0x20/0xc0
[ 114.928583][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.928604][ T6072] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.928631][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.928649][ T6072] ? clear_bhb_loop+0x60/0xb0
[ 114.928668][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.928685][ T6072] RIP: 0033:0x7fd11e7d0e6a
[ 114.928700][ T6072] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.928714][ T6072] RSP: 002b:00007fffe23ce008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 114.928731][ T6072] RAX: ffffffffffffffda RBX: 00007fffe23ce090 RCX: 00007fd11e7d0e6a
[ 114.928745][ T6072] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffe23ce050
[ 114.928757][ T6072] RBP: 0000200000000180 R08: 00007fffe23ce090 R09: 0000000001a08700
[ 114.928770][ T6072] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0
[ 114.928782][ T6072] R13: 00007fffe23ce050 R14: 0000000000000470 R15: 0000200000000700
[ 114.928800][ T6072]
[ 114.928810][ T6072] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 114.928823][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.928843][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 114.928853][ T6072] Call Trace:
[ 114.928860][ T6072]
[ 114.928866][ T6072] dump_stack_lvl+0x99/0x250
[ 114.928891][ T6072] ? __asan_memcpy+0x40/0x70
[ 114.928910][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.928934][ T6072] ? __pfx__printk+0x10/0x10
[ 114.928958][ T6072] vpanic+0x237/0x6d0
[ 114.928974][ T6072] ? __pfx_vpanic+0x10/0x10
[ 114.928994][ T6072] panic+0xb9/0xc0
[ 114.929009][ T6072] ? __pfx_panic+0x10/0x10
[ 114.929030][ T6072] __warn+0x31b/0x4b0
[ 114.929045][ T6072] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.929063][ T6072] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.929080][ T6072] report_bug+0x2be/0x4f0
[ 114.929101][ T6072] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.929118][ T6072] ? ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.929134][ T6072] ? ext4_xattr_inode_update_ref+0x51c/0x5b0
[ 114.929150][ T6072] handle_bug+0x84/0x160
[ 114.929173][ T6072] exc_invalid_op+0x1a/0x50
[ 114.929189][ T6072] asm_exc_invalid_op+0x1a/0x20
[ 114.929204][ T6072] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0
[ 114.929222][ T6072] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 9b ff 8a 4c 89 e6 e8 d7 9b 03 ff 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 53 08 41 08 44 89 f9
[ 114.929236][ T6072] RSP: 0018:ffffc90004d9f100 EFLAGS: 00010246
[ 114.929250][ T6072] RAX: b627df0abeb9f500 RBX: 0000000000000001 RCX: ffff88802cd40000
[ 114.929263][ T6072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 114.929274][ T6072] RBP: ffffc90004d9f1f8 R08: 0000000000000000 R09: 0000000000000000
[ 114.929285][ T6072] R10: dffffc0000000000 R11: ffffed101712487b R12: 000000000000000b
[ 114.929297][ T6072] R13: ffff888056823f88 R14: 1ffff1100ad047d7 R15: ffff888056823eb8
[ 114.929317][ T6072] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 114.929337][ T6072] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 114.929356][ T6072] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 114.929383][ T6072] ext4_xattr_set_entry+0xabb/0x1e20
[ 114.929414][ T6072] ext4_xattr_ibody_set+0x254/0x6a0
[ 114.929440][ T6072] ext4_expand_extra_isize_ea+0x13ad/0x1ea0
[ 114.929479][ T6072] __ext4_expand_extra_isize+0x30d/0x400
[ 114.929498][ T6072] __ext4_mark_inode_dirty+0x46c/0x700
[ 114.929523][ T6072] ext4_evict_inode+0x80d/0xee0
[ 114.929547][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.929565][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.929586][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.929604][ T6072] ? __pfx_ext4_evict_inode+0x10/0x10
[ 114.929623][ T6072] evict+0x504/0x9c0
[ 114.929643][ T6072] ? __pfx_evict+0x10/0x10
[ 114.929661][ T6072] ? rt_spin_unlock+0x161/0x200
[ 114.929680][ T6072] ? iput+0x946/0xc50
[ 114.929705][ T6072] ext4_orphan_cleanup+0xc20/0x1460
[ 114.929729][ T6072] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 114.929749][ T6072] ? ext4_register_li_request+0x640/0x720
[ 114.929768][ T6072] ? errseq_check_and_advance+0x66/0x120
[ 114.929789][ T6072] ext4_fill_super+0x593b/0x61f0
[ 114.929813][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.929829][ T6072] ? snprintf+0xda/0x120
[ 114.929845][ T6072] ? rt_spin_lock+0x1c1/0x3e0
[ 114.929865][ T6072] ? __pfx_snprintf+0x10/0x10
[ 114.929882][ T6072] ? set_blocksize+0x219/0x450
[ 114.929903][ T6072] ? rt_spin_unlock+0x150/0x200
[ 114.929923][ T6072] ? sb_set_blocksize+0x104/0x180
[ 114.929947][ T6072] ? setup_bdev_super+0x4c1/0x5b0
[ 114.929968][ T6072] get_tree_bdev_flags+0x40e/0x4d0
[ 114.929989][ T6072] ? __pfx_ext4_fill_super+0x10/0x10
[ 114.930006][ T6072] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 114.930026][ T6072] ? cap_capable+0x11f/0x460
[ 114.930042][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.930061][ T6072] vfs_get_tree+0x92/0x2b0
[ 114.930082][ T6072] do_new_mount+0x302/0xa10
[ 114.930102][ T6072] ? safesetid_security_capable+0xa9/0x1a0
[ 114.930120][ T6072] ? __pfx_do_new_mount+0x10/0x10
[ 114.930142][ T6072] ? ns_capable+0x8a/0xf0
[ 114.930184][ T6072] __se_sys_mount+0x313/0x410
[ 114.930208][ T6072] ? __pfx___se_sys_mount+0x10/0x10
[ 114.930232][ T6072] ? do_syscall_64+0xbe/0xfa0
[ 114.930253][ T6072] ? __x64_sys_mount+0x20/0xc0
[ 114.930275][ T6072] do_syscall_64+0xfa/0xfa0
[ 114.930297][ T6072] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.930318][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.930335][ T6072] ? clear_bhb_loop+0x60/0xb0
[ 114.930354][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.930371][ T6072] RIP: 0033:0x7fd11e7d0e6a
[ 114.930384][ T6072] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.930398][ T6072] RSP: 002b:00007fffe23ce008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 114.930415][ T6072] RAX: ffffffffffffffda RBX: 00007fffe23ce090 RCX: 00007fd11e7d0e6a
[ 114.930428][ T6072] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fffe23ce050
[ 114.930441][ T6072] RBP: 0000200000000180 R08: 00007fffe23ce090 R09: 0000000001a08700
[ 114.930453][ T6072] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0
[ 114.930465][ T6072] R13: 00007fffe23ce050 R14: 0000000000000470 R15: 0000200000000700
[ 114.930484][ T6072]
[ 114.930748][ T6072] Kernel Offset: disabled