Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts.
2025/09/13 05:02:14 parsed 1 programs
syzkaller login: [ 78.750752][ T5794] cgroup: Unknown subsys name 'net'
[ 78.912614][ T5794] cgroup: Unknown subsys name 'rlimit'
[ 80.633661][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.616867][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.626224][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.634175][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.643479][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.651463][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.659407][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.240045][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.248586][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.283813][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.292888][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.376548][ T5873] chnl_net:caif_netlink_parms(): no params data found
[ 86.460889][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.468348][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.476437][ T5873] bridge_slave_0: entered allmulticast mode
[ 86.483624][ T5873] bridge_slave_0: entered promiscuous mode
[ 86.492373][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.500137][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.509022][ T5873] bridge_slave_1: entered allmulticast mode
[ 86.516710][ T5873] bridge_slave_1: entered promiscuous mode
[ 86.551673][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.565131][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.597322][ T5873] team0: Port device team_slave_0 added
[ 86.606611][ T5873] team0: Port device team_slave_1 added
[ 86.632740][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.639821][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.666310][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.681268][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.688559][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.715011][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.782342][ T5873] hsr_slave_0: entered promiscuous mode
[ 86.801548][ T5873] hsr_slave_1: entered promiscuous mode
[ 86.948596][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.977812][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.987635][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.998580][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.056784][ T8] cfg80211: failed to load regulatory.db
[ 87.116139][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.152557][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.166084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.173673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.202976][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.210186][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.418604][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.474135][ T5873] veth0_vlan: entered promiscuous mode
[ 87.485901][ T5873] veth1_vlan: entered promiscuous mode
[ 87.529379][ T5873] veth0_macvtap: entered promiscuous mode
[ 87.541278][ T5873] veth1_macvtap: entered promiscuous mode
[ 87.565175][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.583435][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.596154][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.606536][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.615510][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.624232][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.810636][ T2962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/09/13 05:02:26 executed programs: 0
[ 88.291276][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.299822][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.309115][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.320211][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.328658][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 88.339419][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.482242][ T5904] chnl_net:caif_netlink_parms(): no params data found
[ 88.553611][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.560874][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.568307][ T5904] bridge_slave_0: entered allmulticast mode
[ 88.576462][ T5904] bridge_slave_0: entered promiscuous mode
[ 88.585585][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.592778][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.600104][ T5904] bridge_slave_1: entered allmulticast mode
[ 88.608406][ T5904] bridge_slave_1: entered promiscuous mode
[ 88.641546][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.654102][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.692686][ T5904] team0: Port device team_slave_0 added
[ 88.702133][ T5904] team0: Port device team_slave_1 added
[ 88.735625][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.743277][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.769651][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.782784][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.790595][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.817144][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.864427][ T5904] hsr_slave_0: entered promiscuous mode
[ 88.871446][ T5904] hsr_slave_1: entered promiscuous mode
[ 88.878185][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.886746][ T5904] Cannot create hsr debugfs directory
[ 90.425398][ T5107] Bluetooth: hci0: command tx timeout
[ 90.507029][ T2962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.495707][ T5107] Bluetooth: hci0: command tx timeout
[ 92.661938][ T2962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.749431][ T2962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.638470][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.648563][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.659707][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.670849][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.685652][ T2962] hsr_slave_0: left promiscuous mode
[ 93.691792][ T2962] hsr_slave_1: left promiscuous mode
[ 93.698582][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.706389][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.714457][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.722023][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.730826][ T2962] bridge_slave_1: left allmulticast mode
[ 93.736670][ T2962] bridge_slave_1: left promiscuous mode
[ 93.743058][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.754143][ T2962] bridge_slave_0: left allmulticast mode
[ 93.759912][ T2962] bridge_slave_0: left promiscuous mode
[ 93.767070][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.788961][ T2962] veth1_macvtap: left promiscuous mode
[ 93.795445][ T2962] veth0_macvtap: left promiscuous mode
[ 93.801202][ T2962] veth1_vlan: left promiscuous mode
[ 93.806824][ T2962] veth0_vlan: left promiscuous mode
[ 94.199343][ T2962] team0 (unregistering): Port device team_slave_1 removed
[ 94.232730][ T2962] team0 (unregistering): Port device team_slave_0 removed
[ 94.267537][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 94.300994][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 94.584744][ T5107] Bluetooth: hci0: command tx timeout
[ 94.633418][ T2962] bond0 (unregistering): Released all slaves
[ 94.871514][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.933600][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.969423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.976780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.008895][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.016102][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.359115][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.439330][ T5904] veth0_vlan: entered promiscuous mode
[ 95.453544][ T5904] veth1_vlan: entered promiscuous mode
[ 95.488650][ T5904] veth0_macvtap: entered promiscuous mode
[ 95.499916][ T5904] veth1_macvtap: entered promiscuous mode
[ 95.524420][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.538297][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.551002][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.560141][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.569825][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.579978][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.659470][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.668944][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.693409][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.702759][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.757935][ T5952] syz.0.17[5952]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 95.777902][ T5952] loop0: detected capacity change from 0 to 512
[ 95.823264][ T5952]
[ 95.825661][ T5952] ======================================================
[ 95.832763][ T5952] WARNING: possible circular locking dependency detected
[ 95.839870][ T5952] syzkaller #0 Not tainted
[ 95.844402][ T5952] ------------------------------------------------------
[ 95.851527][ T5952] syz.0.17/5952 is trying to acquire lock:
[ 95.857454][ T5952] ffff88802df3cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0
[ 95.867507][ T5952]
[ 95.867507][ T5952] but task is already holding lock:
[ 95.875158][ T5952] ffff8880726c32c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[ 95.885151][ T5952]
[ 95.885151][ T5952] which lock already depends on the new lock.
[ 95.885151][ T5952]
[ 95.895962][ T5952]
[ 95.895962][ T5952] the existing dependency chain (in reverse order) is:
[ 95.904974][ T5952]
[ 95.904974][ T5952] -> #2 (&ei->xattr_sem){++++}-{3:3}:
[ 95.912614][ T5952] down_read+0x46/0x2e0
[ 95.917643][ T5952] ext4_setattr+0x86b/0x1c90
[ 95.922843][ T5952] notify_change+0xb0d/0xe10
[ 95.927960][ T5952] chown_common+0x3f9/0x5a0
[ 95.933263][ T5952] do_fchownat+0x168/0x270
[ 95.938539][ T5952] __x64_sys_chown+0x82/0x90
[ 95.943642][ T5952] do_syscall_64+0x55/0xb0
[ 95.948590][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 95.955002][ T5952]
[ 95.955002][ T5952] -> #1 (jbd2_handle){++++}-{0:0}:
[ 95.962300][ T5952] start_this_handle+0x1e9d/0x20c0
[ 95.967925][ T5952] jbd2__journal_start+0x2bb/0x5b0
[ 95.973550][ T5952] __ext4_journal_start_sb+0x203/0x570
[ 95.979536][ T5952] ext4_do_writepages+0xf92/0x38d0
[ 95.985169][ T5952] ext4_writepages+0x1a8/0x2f0
[ 95.990627][ T5952] do_writepages+0x3a2/0x600
[ 95.995741][ T5952] filemap_fdatawrite_wbc+0x122/0x180
[ 96.001644][ T5952] file_write_and_wait_range+0x171/0x240
[ 96.008002][ T5952] ext4_sync_file+0x281/0xc10
[ 96.013458][ T5952] __x64_sys_fsync+0x195/0x1d0
[ 96.018739][ T5952] do_syscall_64+0x55/0xb0
[ 96.023669][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 96.030092][ T5952]
[ 96.030092][ T5952] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 96.038811][ T5952] __lock_acquire+0x2ddb/0x7c80
[ 96.044226][ T5952] lock_acquire+0x197/0x410
[ 96.049327][ T5952] percpu_down_read+0x44/0x1a0
[ 96.054729][ T5952] ext4_writepages+0x170/0x2f0
[ 96.060047][ T5952] do_writepages+0x3a2/0x600
[ 96.065263][ T5952] __writeback_single_inode+0x153/0xee0
[ 96.071333][ T5952] writeback_single_inode+0x211/0x720
[ 96.077238][ T5952] write_inode_now+0x161/0x1e0
[ 96.082740][ T5952] iput+0x5b2/0x920
[ 96.087110][ T5952] ext4_xattr_block_set+0x273a/0x32a0
[ 96.093011][ T5952] ext4_expand_extra_isize_ea+0x10ea/0x19e0
[ 96.099432][ T5952] __ext4_expand_extra_isize+0x306/0x400
[ 96.105598][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 96.111571][ T5952] ext4_evict_inode+0x7ed/0xea0
[ 96.116935][ T5952] evict+0x486/0x870
[ 96.121345][ T5952] ext4_orphan_cleanup+0xbd4/0x1400
[ 96.127081][ T5952] ext4_fill_super+0x5de7/0x66c0
[ 96.132543][ T5952] get_tree_bdev+0x3e4/0x510
[ 96.137947][ T5952] vfs_get_tree+0x8c/0x280
[ 96.142884][ T5952] do_new_mount+0x24b/0xa40
[ 96.147902][ T5952] __se_sys_mount+0x2da/0x3c0
[ 96.153090][ T5952] do_syscall_64+0x55/0xb0
[ 96.158584][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 96.165912][ T5952]
[ 96.165912][ T5952] other info that might help us debug this:
[ 96.165912][ T5952]
[ 96.176871][ T5952] Chain exists of:
[ 96.176871][ T5952] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 96.176871][ T5952]
[ 96.191348][ T5952] Possible unsafe locking scenario:
[ 96.191348][ T5952]
[ 96.199014][ T5952] CPU0 CPU1
[ 96.204664][ T5952] ---- ----
[ 96.210633][ T5952] lock(&ei->xattr_sem);
[ 96.215215][ T5952] lock(jbd2_handle);
[ 96.222419][ T5952] lock(&ei->xattr_sem);
[ 96.229376][ T5952] rlock(&sbi->s_writepages_rwsem);
[ 96.234675][ T5952]
[ 96.234675][ T5952] *** DEADLOCK ***
[ 96.234675][ T5952]
[ 96.242996][ T5952] 3 locks held by syz.0.17/5952:
[ 96.248026][ T5952] #0: ffff88802df3a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510
[ 96.258399][ T5952] #1: ffff88802df3a608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0
[ 96.267998][ T5952] #2: ffff8880726c32c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0
[ 96.278570][ T5952]
[ 96.278570][ T5952] stack backtrace:
[ 96.284765][ T5952] CPU: 1 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0
[ 96.291959][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 96.302182][ T5952] Call Trace:
[ 96.305460][ T5952]
[ 96.308384][ T5952] dump_stack_lvl+0x16c/0x230
[ 96.313136][ T5952] ? load_image+0x3b0/0x3b0
[ 96.317696][ T5952] ? show_regs_print_info+0x20/0x20
[ 96.322993][ T5952] ? print_circular_bug+0x12b/0x1a0
[ 96.328211][ T5952] check_noncircular+0x2bd/0x3c0
[ 96.333183][ T5952] ? look_up_lock_class+0x75/0x140
[ 96.338332][ T5952] ? print_deadlock_bug+0x5d0/0x5d0
[ 96.343626][ T5952] ? lockdep_lock+0xe0/0x220
[ 96.348754][ T5952] ? _find_first_zero_bit+0xd3/0x100
[ 96.354226][ T5952] __lock_acquire+0x2ddb/0x7c80
[ 96.359181][ T5952] ? mark_lock+0x94/0x320
[ 96.363529][ T5952] ? verify_lock_unused+0x140/0x140
[ 96.368837][ T5952] ? __lock_acquire+0x1334/0x7c80
[ 96.373865][ T5952] ? verify_lock_unused+0x140/0x140
[ 96.379091][ T5952] lock_acquire+0x197/0x410
[ 96.383686][ T5952] ? ext4_writepages+0x170/0x2f0
[ 96.388627][ T5952] ? __might_sleep+0xe0/0xe0
[ 96.393227][ T5952] ? mark_lock+0x94/0x320
[ 96.397582][ T5952] ? read_lock_is_recursive+0x20/0x20
[ 96.402960][ T5952] ? __lock_acquire+0x1334/0x7c80
[ 96.407991][ T5952] percpu_down_read+0x44/0x1a0
[ 96.412756][ T5952] ? ext4_writepages+0x170/0x2f0
[ 96.417697][ T5952] ext4_writepages+0x170/0x2f0
[ 96.422585][ T5952] ? ext4_read_folio+0x2f0/0x2f0
[ 96.427832][ T5952] ? __rwlock_init+0x150/0x150
[ 96.432641][ T5952] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 96.438796][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 96.444316][ T5952] ? ext4_read_folio+0x2f0/0x2f0
[ 96.449468][ T5952] do_writepages+0x3a2/0x600
[ 96.454181][ T5952] ? folio_clear_dirty_for_io+0xc30/0xc30
[ 96.460227][ T5952] ? writeback_single_inode+0x206/0x720
[ 96.466084][ T5952] ? __lock_acquire+0x7c80/0x7c80
[ 96.471209][ T5952] ? do_raw_spin_lock+0x121/0x2c0
[ 96.476352][ T5952] ? get_tree_bdev+0x3e4/0x510
[ 96.481113][ T5952] __writeback_single_inode+0x153/0xee0
[ 96.486697][ T5952] writeback_single_inode+0x211/0x720
[ 96.492128][ T5952] ? write_inode_now+0x1e0/0x1e0
[ 96.497125][ T5952] write_inode_now+0x161/0x1e0
[ 96.502063][ T5952] ? bdi_split_work_to_wbs+0x890/0x890
[ 96.507707][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 96.513008][ T5952] iput+0x5b2/0x920
[ 96.516815][ T5952] ext4_xattr_block_set+0x273a/0x32a0
[ 96.522319][ T5952] ? __might_sleep+0xe0/0xe0
[ 96.526945][ T5952] ? xattr_find_entry+0x12b/0x2f0
[ 96.532447][ T5952] ? ext4_xattr_block_find+0x350/0x350
[ 96.538108][ T5952] ? ext4_xattr_block_find+0x2d4/0x350
[ 96.543593][ T5952] ext4_expand_extra_isize_ea+0x10ea/0x19e0
[ 96.549601][ T5952] __ext4_expand_extra_isize+0x306/0x400
[ 96.555592][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 96.561267][ T5952] ext4_evict_inode+0x7ed/0xea0
[ 96.566217][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 96.571088][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 96.577099][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 96.582598][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 96.588707][ T5952] evict+0x486/0x870
[ 96.592606][ T5952] ? __lock_acquire+0x7c80/0x7c80
[ 96.597652][ T5952] ? proc_nr_inodes+0x230/0x230
[ 96.603144][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 96.608363][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 96.613209][ T5952] ? iput+0x70a/0x920
[ 96.617190][ T5952] ext4_orphan_cleanup+0xbd4/0x1400
[ 96.622408][ T5952] ? ext4_orphan_del+0xba0/0xba0
[ 96.627372][ T5952] ? ext4_register_li_request+0x183/0x940
[ 96.633111][ T5952] ? errseq_check_and_advance+0x66/0x120
[ 96.638765][ T5952] ext4_fill_super+0x5de7/0x66c0
[ 96.643712][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 96.649952][ T5952] ? vscnprintf+0x80/0x80
[ 96.654363][ T5952] ? down_read_killable+0x340/0x340
[ 96.659585][ T5952] ? setup_bdev_super+0x56b/0x660
[ 96.664642][ T5952] get_tree_bdev+0x3e4/0x510
[ 96.669266][ T5952] ? vfs_parse_fs_string+0x160/0x160
[ 96.674809][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 96.674975][ T5107] Bluetooth: hci0: command tx timeout
[ 96.681076][ T5952] ? setup_bdev_super+0x660/0x660
[ 96.681099][ T5952] ? apparmor_capable+0x137/0x1a0
[ 96.681116][ T5952] ? bpf_lsm_capable+0x9/0x10
[ 96.701757][ T5952] ? security_capable+0x89/0xb0
[ 96.706697][ T5952] vfs_get_tree+0x8c/0x280
[ 96.711246][ T5952] do_new_mount+0x24b/0xa40
[ 96.715783][ T5952] __se_sys_mount+0x2da/0x3c0
[ 96.720575][ T5952] ? __x64_sys_mount+0xc0/0xc0
[ 96.725369][ T5952] ? lockdep_hardirqs_on+0x98/0x150
[ 96.730571][ T5952] ? __x64_sys_mount+0x20/0xc0
[ 96.736047][ T5952] do_syscall_64+0x55/0xb0
[ 96.740487][ T5952] ? clear_bhb_loop+0x40/0x90
[ 96.745170][ T5952] ? clear_bhb_loop+0x40/0x90
[ 96.749924][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 96.755832][ T5952] RIP: 0033:0x7f4fd2d9034a
[ 96.760272][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 96.780500][ T5952] RSP: 002b:00007ffed29f3f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 96.789016][ T5952] RAX: ffffffffffffffda RBX: 00007ffed29f3fa0 RCX: 00007f4fd2d9034a
[ 96.796991][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed29f3f60
[ 96.804958][ T5952] RBP: 0000200000000180 R08: 00007ffed29f3fa0 R09: 0000000000800700
[ 96.812956][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 96.820937][ T5952] R13: 00007ffed29f3f60 R14: 0000000000000473 R15: 0000200000000680
[ 96.828930][ T5952]
[ 96.840431][ T5952] ------------[ cut here ]------------
[ 96.846101][ T5952] EA inode 11 i_nlink=2
[ 96.846633][ T5952] WARNING: CPU: 1 PID: 5952 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580
[ 96.861872][ T5952] Modules linked in:
[ 96.865843][ T5952] CPU: 1 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0
[ 96.873059][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 96.883418][ T5952] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580
[ 96.890165][ T5952] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff
[ 96.910030][ T5952] RSP: 0018:ffffc90003047220 EFLAGS: 00010246
[ 96.916172][ T5952] RAX: 69f6db804c947a00 RBX: 0000000000000001 RCX: ffff88802cabda00
[ 96.924421][ T5952] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 96.932968][ T5952] RBP: ffffc90003047318 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
[ 96.941179][ T5952] R10: dffffc0000000000 R11: ffffed10171e5183 R12: ffff8880726c52b0
[ 96.949372][ T5952] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880726c5300
[ 96.957429][ T5952] FS: 000055559256c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 96.966459][ T5952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 96.973353][ T5952] CR2: 00007faed1544000 CR3: 000000002f2d3000 CR4: 00000000003506e0
[ 96.981464][ T5952] Call Trace:
[ 96.984804][ T5952]
[ 96.987760][ T5952] ? ext4_xattr_list_entries+0x3d0/0x3d0
[ 96.993398][ T5952] ? ext4_xattr_inode_iget+0x3df/0x600
[ 96.998927][ T5952] ext4_xattr_set_entry+0xcda/0x1e90
[ 97.004238][ T5952] ext4_xattr_ibody_set+0x254/0x6a0
[ 97.009488][ T5952] ext4_expand_extra_isize_ea+0x113a/0x19e0
[ 97.015554][ T5952] __ext4_expand_extra_isize+0x306/0x400
[ 97.021286][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 97.026796][ T5952] ext4_evict_inode+0x7ed/0xea0
[ 97.031880][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 97.036906][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 97.042839][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 97.048139][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 97.054053][ T5952] evict+0x486/0x870
[ 97.058132][ T5952] ? __lock_acquire+0x7c80/0x7c80
[ 97.063329][ T5952] ? proc_nr_inodes+0x230/0x230
[ 97.068253][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 97.073582][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 97.078478][ T5952] ? iput+0x70a/0x920
[ 97.082488][ T5952] ext4_orphan_cleanup+0xbd4/0x1400
[ 97.087791][ T5952] ? ext4_orphan_del+0xba0/0xba0
[ 97.092868][ T5952] ? ext4_register_li_request+0x183/0x940
[ 97.098753][ T5952] ? errseq_check_and_advance+0x66/0x120
[ 97.104392][ T5952] ext4_fill_super+0x5de7/0x66c0
[ 97.109393][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 97.115692][ T5952] ? vscnprintf+0x80/0x80
[ 97.120035][ T5952] ? down_read_killable+0x340/0x340
[ 97.125322][ T5952] ? setup_bdev_super+0x56b/0x660
[ 97.130638][ T5952] get_tree_bdev+0x3e4/0x510
[ 97.135605][ T5952] ? vfs_parse_fs_string+0x160/0x160
[ 97.140899][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 97.147260][ T5952] ? setup_bdev_super+0x660/0x660
[ 97.152302][ T5952] ? apparmor_capable+0x137/0x1a0
[ 97.157400][ T5952] ? bpf_lsm_capable+0x9/0x10
[ 97.162107][ T5952] ? security_capable+0x89/0xb0
[ 97.167314][ T5952] vfs_get_tree+0x8c/0x280
[ 97.171866][ T5952] do_new_mount+0x24b/0xa40
[ 97.177199][ T5952] __se_sys_mount+0x2da/0x3c0
[ 97.181915][ T5952] ? __x64_sys_mount+0xc0/0xc0
[ 97.186736][ T5952] ? lockdep_hardirqs_on+0x98/0x150
[ 97.191956][ T5952] ? __x64_sys_mount+0x20/0xc0
[ 97.196887][ T5952] do_syscall_64+0x55/0xb0
[ 97.201337][ T5952] ? clear_bhb_loop+0x40/0x90
[ 97.206135][ T5952] ? clear_bhb_loop+0x40/0x90
[ 97.210943][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.216955][ T5952] RIP: 0033:0x7f4fd2d9034a
[ 97.221428][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 97.241639][ T5952] RSP: 002b:00007ffed29f3f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 97.250167][ T5952] RAX: ffffffffffffffda RBX: 00007ffed29f3fa0 RCX: 00007f4fd2d9034a
[ 97.258295][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed29f3f60
[ 97.266528][ T5952] RBP: 0000200000000180 R08: 00007ffed29f3fa0 R09: 0000000000800700
[ 97.274710][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 97.282712][ T5952] R13: 00007ffed29f3f60 R14: 0000000000000473 R15: 0000200000000680
[ 97.290759][ T5952]
[ 97.293795][ T5952] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 97.301068][ T5952] CPU: 1 PID: 5952 Comm: syz.0.17 Not tainted syzkaller #0
[ 97.308344][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 97.318406][ T5952] Call Trace:
[ 97.321685][ T5952]
[ 97.324697][ T5952] dump_stack_lvl+0x16c/0x230
[ 97.329381][ T5952] ? show_regs_print_info+0x20/0x20
[ 97.334620][ T5952] ? load_image+0x3b0/0x3b0
[ 97.339143][ T5952] panic+0x2c0/0x710
[ 97.343046][ T5952] ? bpf_jit_dump+0xd0/0xd0
[ 97.347558][ T5952] __warn+0x2e0/0x470
[ 97.351641][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580
[ 97.357649][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580
[ 97.363895][ T5952] report_bug+0x2be/0x4f0
[ 97.368337][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580
[ 97.374332][ T5952] ? ext4_xattr_inode_update_ref+0x521/0x580
[ 97.380389][ T5952] ? ext4_xattr_inode_update_ref+0x523/0x580
[ 97.386392][ T5952] handle_bug+0xcf/0x120
[ 97.390661][ T5952] exc_invalid_op+0x1a/0x50
[ 97.395193][ T5952] asm_exc_invalid_op+0x1a/0x20
[ 97.400067][ T5952] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580
[ 97.406674][ T5952] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff
[ 97.426564][ T5952] RSP: 0018:ffffc90003047220 EFLAGS: 00010246
[ 97.432740][ T5952] RAX: 69f6db804c947a00 RBX: 0000000000000001 RCX: ffff88802cabda00
[ 97.441156][ T5952] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 97.449136][ T5952] RBP: ffffc90003047318 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
[ 97.457213][ T5952] R10: dffffc0000000000 R11: ffffed10171e5183 R12: ffff8880726c52b0
[ 97.465283][ T5952] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880726c5300
[ 97.473279][ T5952] ? ext4_xattr_list_entries+0x3d0/0x3d0
[ 97.478925][ T5952] ? ext4_xattr_inode_iget+0x3df/0x600
[ 97.484424][ T5952] ext4_xattr_set_entry+0xcda/0x1e90
[ 97.489740][ T5952] ext4_xattr_ibody_set+0x254/0x6a0
[ 97.495229][ T5952] ext4_expand_extra_isize_ea+0x113a/0x19e0
[ 97.501233][ T5952] __ext4_expand_extra_isize+0x306/0x400
[ 97.506891][ T5952] __ext4_mark_inode_dirty+0x45d/0x6e0
[ 97.512370][ T5952] ext4_evict_inode+0x7ed/0xea0
[ 97.517490][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 97.522341][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 97.528241][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 97.533534][ T5952] ? ext4_inode_is_fast_symlink+0x390/0x390
[ 97.539445][ T5952] evict+0x486/0x870
[ 97.543347][ T5952] ? __lock_acquire+0x7c80/0x7c80
[ 97.548384][ T5952] ? proc_nr_inodes+0x230/0x230
[ 97.553241][ T5952] ? do_raw_spin_unlock+0x121/0x230
[ 97.558446][ T5952] ? _raw_spin_unlock+0x28/0x40
[ 97.563299][ T5952] ? iput+0x70a/0x920
[ 97.567285][ T5952] ext4_orphan_cleanup+0xbd4/0x1400
[ 97.572497][ T5952] ? ext4_orphan_del+0xba0/0xba0
[ 97.577727][ T5952] ? ext4_register_li_request+0x183/0x940
[ 97.583490][ T5952] ? errseq_check_and_advance+0x66/0x120
[ 97.589163][ T5952] ext4_fill_super+0x5de7/0x66c0
[ 97.594239][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 97.600589][ T5952] ? vscnprintf+0x80/0x80
[ 97.604932][ T5952] ? down_read_killable+0x340/0x340
[ 97.610142][ T5952] ? setup_bdev_super+0x56b/0x660
[ 97.615190][ T5952] get_tree_bdev+0x3e4/0x510
[ 97.619889][ T5952] ? vfs_parse_fs_string+0x160/0x160
[ 97.625194][ T5952] ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 97.631452][ T5952] ? setup_bdev_super+0x660/0x660
[ 97.636490][ T5952] ? apparmor_capable+0x137/0x1a0
[ 97.641519][ T5952] ? bpf_lsm_capable+0x9/0x10
[ 97.646204][ T5952] ? security_capable+0x89/0xb0
[ 97.651069][ T5952] vfs_get_tree+0x8c/0x280
[ 97.655493][ T5952] do_new_mount+0x24b/0xa40
[ 97.660013][ T5952] __se_sys_mount+0x2da/0x3c0
[ 97.664704][ T5952] ? __x64_sys_mount+0xc0/0xc0
[ 97.669645][ T5952] ? lockdep_hardirqs_on+0x98/0x150
[ 97.674854][ T5952] ? __x64_sys_mount+0x20/0xc0
[ 97.679625][ T5952] do_syscall_64+0x55/0xb0
[ 97.684053][ T5952] ? clear_bhb_loop+0x40/0x90
[ 97.688733][ T5952] ? clear_bhb_loop+0x40/0x90
[ 97.693418][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.699323][ T5952] RIP: 0033:0x7f4fd2d9034a
[ 97.703748][ T5952] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 97.723885][ T5952] RSP: 002b:00007ffed29f3f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 97.732393][ T5952] RAX: ffffffffffffffda RBX: 00007ffed29f3fa0 RCX: 00007f4fd2d9034a
[ 97.740377][ T5952] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffed29f3f60
[ 97.748355][ T5952] RBP: 0000200000000180 R08: 00007ffed29f3fa0 R09: 0000000000800700
[ 97.756328][ T5952] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 97.764302][ T5952] R13: 00007ffed29f3f60 R14: 0000000000000473 R15: 0000200000000680
[ 97.772288][ T5952]
[ 97.775784][ T5952] Kernel Offset: disabled
[ 97.780099][ T5952] Rebooting in 86400 seconds..