[ 92.242321][ T44] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts.
2025/09/10 03:40:49 parsed 1 programs
[ 100.123814][ T5847] cgroup: Unknown subsys name 'net'
[ 100.403904][ T5847] cgroup: Unknown subsys name 'cpuset'
[ 100.488770][ T5847] cgroup: Unknown subsys name 'rlimit'
[ 102.564708][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 109.141274][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.141302][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.193618][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.193641][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.201581][ T5918] chnl_net:caif_netlink_parms(): no params data found
[ 112.708964][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.709131][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.709344][ T5918] bridge_slave_0: entered allmulticast mode
[ 112.711945][ T5918] bridge_slave_0: entered promiscuous mode
[ 112.740978][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.741138][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.741372][ T5918] bridge_slave_1: entered allmulticast mode
[ 112.744836][ T5918] bridge_slave_1: entered promiscuous mode
[ 112.947238][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.953339][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.123307][ T5918] team0: Port device team_slave_0 added
[ 113.130595][ T5918] team0: Port device team_slave_1 added
[ 113.310542][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.310557][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.310577][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.313756][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.313772][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.313801][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.538815][ T5918] hsr_slave_0: entered promiscuous mode
[ 113.540037][ T5918] hsr_slave_1: entered promiscuous mode
[ 114.134239][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 114.155242][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 114.193503][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.223045][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.357526][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.385206][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.403820][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.404589][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.412812][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.412985][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.690437][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.754484][ T5918] veth0_vlan: entered promiscuous mode
[ 114.769099][ T5918] veth1_vlan: entered promiscuous mode
[ 114.812045][ T5918] veth0_macvtap: entered promiscuous mode
[ 114.816415][ T5918] veth1_macvtap: entered promiscuous mode
[ 114.841815][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.856743][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.876801][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876904][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876961][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.877001][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.634123][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.872171][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.104275][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.154579][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.158766][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.169241][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.174380][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.176426][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/09/10 03:41:10 executed programs: 0
[ 116.965787][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.080503][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.082587][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.083738][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.084871][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.086370][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.364488][ T5957] chnl_net:caif_netlink_parms(): no params data found
[ 117.689981][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.691123][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.691335][ T5957] bridge_slave_0: entered allmulticast mode
[ 117.693237][ T5957] bridge_slave_0: entered promiscuous mode
[ 117.703974][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.704197][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.704478][ T5957] bridge_slave_1: entered allmulticast mode
[ 117.707654][ T5957] bridge_slave_1: entered promiscuous mode
[ 117.865715][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.870098][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.055552][ T5957] team0: Port device team_slave_0 added
[ 118.082001][ T5957] team0: Port device team_slave_1 added
[ 118.416835][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.416854][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 118.416883][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.490069][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.490086][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 118.490119][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.609457][ T37] bridge_slave_1: left allmulticast mode
[ 118.609653][ T37] bridge_slave_1: left promiscuous mode
[ 118.611149][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.689331][ T37] bridge_slave_0: left allmulticast mode
[ 118.689366][ T37] bridge_slave_0: left promiscuous mode
[ 118.689562][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.135227][ T59] Bluetooth: hci0: command tx timeout
[ 120.319580][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.399486][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.441413][ T37] bond0 (unregistering): Released all slaves
[ 120.540382][ T5957] hsr_slave_0: entered promiscuous mode
[ 120.541492][ T5957] hsr_slave_1: entered promiscuous mode
[ 120.542277][ T5957] debugfs: 'hsr0' already exists in 'hsr'
[ 120.542359][ T5957] Cannot create hsr debugfs directory
[ 120.808432][ T37] hsr_slave_0: left promiscuous mode
[ 120.858691][ T37] hsr_slave_1: left promiscuous mode
[ 120.859917][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.860002][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.889864][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.889902][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.996372][ T37] veth1_macvtap: left promiscuous mode
[ 120.996542][ T37] veth0_macvtap: left promiscuous mode
[ 120.996757][ T37] veth1_vlan: left promiscuous mode
[ 120.996968][ T37] veth0_vlan: left promiscuous mode
[ 121.199647][ T59] Bluetooth: hci0: command tx timeout
[ 123.022821][ T37] team0 (unregistering): Port device team_slave_1 removed
[ 123.239867][ T37] team0 (unregistering): Port device team_slave_0 removed
[ 123.278313][ T59] Bluetooth: hci0: command tx timeout
[ 125.358109][ T59] Bluetooth: hci0: command tx timeout
[ 126.862014][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.902446][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.942096][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.983214][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.130195][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.150248][ T5957] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.159677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.159926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.184203][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.184830][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.665911][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.716993][ T5957] veth0_vlan: entered promiscuous mode
[ 127.729565][ T5957] veth1_vlan: entered promiscuous mode
[ 127.766862][ T5957] veth0_macvtap: entered promiscuous mode
[ 127.775913][ T5957] veth1_macvtap: entered promiscuous mode
[ 127.796352][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.809672][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.817731][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.836788][ T1540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.836840][ T1540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.836880][ T1540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.001398][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.001422][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.054406][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.054436][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/10 03:41:21 executed programs: 2
[ 128.180492][ T6004] loop0: detected capacity change from 0 to 512
[ 128.241961][ T6004]
[ 128.241974][ T6004] ======================================================
[ 128.241982][ T6004] WARNING: possible circular locking dependency detected
[ 128.242002][ T6004] syzkaller #0 Not tainted
[ 128.242013][ T6004] ------------------------------------------------------
[ 128.242021][ T6004] syz.0.17/6004 is trying to acquire lock:
[ 128.242034][ T6004] ffff88802b1b2c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[ 128.242106][ T6004]
[ 128.242106][ T6004] but task is already holding lock:
[ 128.242113][ T6004] ffff88804179eb50 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 128.242162][ T6004]
[ 128.242162][ T6004] which lock already depends on the new lock.
[ 128.242162][ T6004]
[ 128.242170][ T6004]
[ 128.242170][ T6004] the existing dependency chain (in reverse order) is:
[ 128.242178][ T6004]
[ 128.242178][ T6004] -> #2 (&ei->xattr_sem){++++}-{4:4}:
[ 128.242204][ T6004] lock_acquire+0x120/0x360
[ 128.242230][ T6004] down_write+0x3a/0x50
[ 128.242246][ T6004] ext4_xattr_set_handle+0x165/0x1590
[ 128.242273][ T6004] ext4_initxattrs+0x9f/0x110
[ 128.242293][ T6004] security_inode_init_security+0x29d/0x3f0
[ 128.242313][ T6004] __ext4_new_inode+0x3314/0x3cb0
[ 128.242343][ T6004] ext4_create+0x22d/0x460
[ 128.242365][ T6004] path_openat+0x14fd/0x3840
[ 128.242386][ T6004] do_filp_open+0x1fa/0x410
[ 128.242417][ T6004] do_sys_openat2+0x121/0x1c0
[ 128.242436][ T6004] __x64_sys_openat+0x138/0x170
[ 128.242454][ T6004] do_syscall_64+0xfa/0x3b0
[ 128.242472][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.242493][ T6004]
[ 128.242493][ T6004] -> #1 (jbd2_handle){++++}-{0:0}:
[ 128.242521][ T6004] lock_acquire+0x120/0x360
[ 128.242547][ T6004] start_this_handle+0x1fa7/0x21c0
[ 128.242572][ T6004] jbd2__journal_start+0x2c1/0x5b0
[ 128.242597][ T6004] __ext4_journal_start_sb+0x227/0x5c0
[ 128.242627][ T6004] ext4_do_writepages+0xf6f/0x4600
[ 128.242653][ T6004] ext4_writepages+0x205/0x350
[ 128.242670][ T6004] do_writepages+0x32b/0x550
[ 128.242695][ T6004] __writeback_single_inode+0x145/0x1000
[ 128.242721][ T6004] writeback_sb_inodes+0x6b7/0xf60
[ 128.242744][ T6004] __writeback_inodes_wb+0x111/0x240
[ 128.242768][ T6004] wb_writeback+0x44f/0xaf0
[ 128.242791][ T6004] wb_workfn+0xaf4/0xf00
[ 128.242807][ T6004] process_scheduled_works+0xade/0x17b0
[ 128.242833][ T6004] worker_thread+0x8a0/0xda0
[ 128.242859][ T6004] kthread+0x70e/0x8a0
[ 128.242888][ T6004] ret_from_fork+0x3f9/0x770
[ 128.242914][ T6004] ret_from_fork_asm+0x1a/0x30
[ 128.242934][ T6004]
[ 128.242934][ T6004] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 128.242963][ T6004] validate_chain+0xb9b/0x2140
[ 128.242993][ T6004] __lock_acquire+0xab9/0xd20
[ 128.243018][ T6004] lock_acquire+0x120/0x360
[ 128.243042][ T6004] percpu_down_read_internal+0x48/0x1d0
[ 128.243073][ T6004] ext4_writepages+0x1cc/0x350
[ 128.243090][ T6004] do_writepages+0x32b/0x550
[ 128.243113][ T6004] __writeback_single_inode+0x145/0x1000
[ 128.243138][ T6004] writeback_single_inode+0x1d5/0x640
[ 128.243156][ T6004] write_inode_now+0x160/0x1d0
[ 128.243174][ T6004] iput+0x5b9/0x9d0
[ 128.243201][ T6004] ext4_xattr_block_set+0x1fce/0x2ac0
[ 128.243230][ T6004] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 128.243260][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 128.243291][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 128.243314][ T6004] ext4_evict_inode+0x80d/0xee0
[ 128.243335][ T6004] evict+0x504/0x9c0
[ 128.243355][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 128.243376][ T6004] ext4_fill_super+0x57fa/0x60b0
[ 128.243418][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 128.243444][ T6004] vfs_get_tree+0x8f/0x2b0
[ 128.243470][ T6004] do_new_mount+0x2a2/0x9e0
[ 128.243497][ T6004] __se_sys_mount+0x317/0x410
[ 128.243526][ T6004] do_syscall_64+0xfa/0x3b0
[ 128.243543][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.243562][ T6004]
[ 128.243562][ T6004] other info that might help us debug this:
[ 128.243562][ T6004]
[ 128.243569][ T6004] Chain exists of:
[ 128.243569][ T6004] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem
[ 128.243569][ T6004]
[ 128.243604][ T6004] Possible unsafe locking scenario:
[ 128.243604][ T6004]
[ 128.243610][ T6004] CPU0 CPU1
[ 128.243617][ T6004] ---- ----
[ 128.243623][ T6004] lock(&ei->xattr_sem);
[ 128.243638][ T6004] lock(jbd2_handle);
[ 128.243653][ T6004] lock(&ei->xattr_sem);
[ 128.243668][ T6004] rlock(&sbi->s_writepages_rwsem);
[ 128.243683][ T6004]
[ 128.243683][ T6004] *** DEADLOCK ***
[ 128.243683][ T6004]
[ 128.243688][ T6004] 3 locks held by syz.0.17/6004:
[ 128.243701][ T6004] #0: ffff88802b1b40d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990
[ 128.243763][ T6004] #1: ffff88802b1b4778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[ 128.243816][ T6004] #2: ffff88804179eb50 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[ 128.243869][ T6004]
[ 128.243869][ T6004] stack backtrace:
[ 128.243901][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.243927][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 128.243948][ T6004] Call Trace:
[ 128.243956][ T6004]
[ 128.243965][ T6004] dump_stack_lvl+0x189/0x250
[ 128.244001][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.244034][ T6004] ? __pfx__printk+0x10/0x10
[ 128.244059][ T6004] ? print_lock_name+0xde/0x100
[ 128.244083][ T6004] print_circular_bug+0x2ee/0x310
[ 128.244106][ T6004] check_noncircular+0x134/0x160
[ 128.244151][ T6004] validate_chain+0xb9b/0x2140
[ 128.244192][ T6004] ? look_up_lock_class+0x74/0x170
[ 128.244223][ T6004] ? register_lock_class+0x51/0x320
[ 128.244251][ T6004] __lock_acquire+0xab9/0xd20
[ 128.244280][ T6004] ? ext4_writepages+0x1cc/0x350
[ 128.244297][ T6004] lock_acquire+0x120/0x360
[ 128.244323][ T6004] ? ext4_writepages+0x1cc/0x350
[ 128.244344][ T6004] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 128.244378][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.244420][ T6004] percpu_down_read_internal+0x48/0x1d0
[ 128.244454][ T6004] ? ext4_writepages+0x1cc/0x350
[ 128.244475][ T6004] ext4_writepages+0x1cc/0x350
[ 128.244496][ T6004] ? __pfx_ext4_writepages+0x10/0x10
[ 128.244515][ T6004] ? rt_mutex_slowunlock+0x493/0x8a0
[ 128.244550][ T6004] ? __pfx_ext4_writepages+0x10/0x10
[ 128.244570][ T6004] do_writepages+0x32b/0x550
[ 128.244600][ T6004] ? reacquire_held_locks+0x127/0x1d0
[ 128.244633][ T6004] ? rt_spin_lock+0x1bb/0x2c0
[ 128.244659][ T6004] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 128.244689][ T6004] __writeback_single_inode+0x145/0x1000
[ 128.244722][ T6004] writeback_single_inode+0x1d5/0x640
[ 128.244749][ T6004] write_inode_now+0x160/0x1d0
[ 128.244770][ T6004] ? __pfx_write_inode_now+0x10/0x10
[ 128.244806][ T6004] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 128.244835][ T6004] ? rt_spin_unlock+0x65/0x80
[ 128.244862][ T6004] iput+0x5b9/0x9d0
[ 128.244895][ T6004] ext4_xattr_block_set+0x1fce/0x2ac0
[ 128.244942][ T6004] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 128.244973][ T6004] ? ext4_xattr_block_find+0x2d4/0x350
[ 128.245006][ T6004] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 128.245055][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 128.245094][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 128.245124][ T6004] ext4_evict_inode+0x80d/0xee0
[ 128.245155][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.245184][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.245207][ T6004] evict+0x504/0x9c0
[ 128.245233][ T6004] ? __pfx_evict+0x10/0x10
[ 128.245256][ T6004] ? iput+0x6d8/0x9d0
[ 128.245287][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 128.245317][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 128.245341][ T6004] ? ext4_register_li_request+0x640/0x720
[ 128.245363][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 128.245404][ T6004] ext4_fill_super+0x57fa/0x60b0
[ 128.245451][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.245484][ T6004] ? set_blocksize+0x219/0x450
[ 128.245510][ T6004] ? sb_set_blocksize+0x104/0x180
[ 128.245532][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 128.245561][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 128.245588][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.245622][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 128.245649][ T6004] ? cap_capable+0x11f/0x460
[ 128.245675][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 128.245703][ T6004] vfs_get_tree+0x8f/0x2b0
[ 128.245733][ T6004] do_new_mount+0x2a2/0x9e0
[ 128.245766][ T6004] ? ns_capable+0x8a/0xf0
[ 128.245793][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 128.245822][ T6004] ? path_mount+0x61c/0xfe0
[ 128.245857][ T6004] __se_sys_mount+0x317/0x410
[ 128.245891][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 128.245925][ T6004] ? do_syscall_64+0xbe/0x3b0
[ 128.245945][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 128.245978][ T6004] do_syscall_64+0xfa/0x3b0
[ 128.245997][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.246029][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.246051][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 128.246075][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.246097][ T6004] RIP: 0033:0x7fdc8d87034a
[ 128.246123][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.246141][ T6004] RSP: 002b:00007fff01a5bb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 128.246165][ T6004] RAX: ffffffffffffffda RBX: 00007fff01a5bc20 RCX: 00007fdc8d87034a
[ 128.246181][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff01a5bbe0
[ 128.246197][ T6004] RBP: 0000200000000180 R08: 00007fff01a5bc20 R09: 0000000000800700
[ 128.246212][ T6004] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 128.246227][ T6004] R13: 00007fff01a5bbe0 R14: 0000000000000473 R15: 0000200000000680
[ 128.246250][ T6004]
[ 128.246689][ T6004] ------------[ cut here ]------------
[ 128.246700][ T6004] EA inode 11 i_nlink=2
[ 128.247074][ T6004] WARNING: CPU: 0 PID: 6004 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.247124][ T6004] Modules linked in:
[ 128.247152][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.247177][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 128.247191][ T6004] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.247226][ T6004] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b
[ 128.247245][ T6004] RSP: 0018:ffffc90003f271a0 EFLAGS: 00010246
[ 128.247263][ T6004] RAX: 96e939f6ad7ec700 RBX: dffffc0000000000 RCX: ffff88802b495940
[ 128.247281][ T6004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 128.247294][ T6004] RBP: ffffc90003f27298 R08: 0000000000000000 R09: 0000000000000000
[ 128.247309][ T6004] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888050760f58
[ 128.247326][ T6004] R13: 1ffff1100a0ec1eb R14: 00000000ffffffff R15: 000000000000000b
[ 128.247341][ T6004] FS: 000055556e44f500(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000
[ 128.247361][ T6004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 128.247376][ T6004] CR2: 00007f72d63afd30 CR3: 000000003f332000 CR4: 00000000003526f0
[ 128.247396][ T6004] Call Trace:
[ 128.247404][ T6004]
[ 128.247413][ T6004] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 128.247441][ T6004] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 128.247478][ T6004] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 128.247515][ T6004] ext4_xattr_set_entry+0xabb/0x1e20
[ 128.247557][ T6004] ext4_xattr_ibody_set+0x254/0x6a0
[ 128.247591][ T6004] ext4_expand_extra_isize_ea+0x13a8/0x1ea0
[ 128.247644][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 128.247684][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 128.247716][ T6004] ext4_evict_inode+0x80d/0xee0
[ 128.247746][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.247775][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.247800][ T6004] evict+0x504/0x9c0
[ 128.247827][ T6004] ? __pfx_evict+0x10/0x10
[ 128.247853][ T6004] ? iput+0x6d8/0x9d0
[ 128.247933][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 128.247963][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 128.247987][ T6004] ? ext4_register_li_request+0x640/0x720
[ 128.248009][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 128.248039][ T6004] ext4_fill_super+0x57fa/0x60b0
[ 128.248082][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.248112][ T6004] ? set_blocksize+0x219/0x450
[ 128.248138][ T6004] ? sb_set_blocksize+0x104/0x180
[ 128.248176][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 128.248210][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 128.248243][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.248276][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 128.248304][ T6004] ? cap_capable+0x11f/0x460
[ 128.248333][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 128.248364][ T6004] vfs_get_tree+0x8f/0x2b0
[ 128.248396][ T6004] do_new_mount+0x2a2/0x9e0
[ 128.248432][ T6004] ? ns_capable+0x8a/0xf0
[ 128.248464][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 128.248497][ T6004] ? path_mount+0x61c/0xfe0
[ 128.248537][ T6004] __se_sys_mount+0x317/0x410
[ 128.248576][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 128.248614][ T6004] ? do_syscall_64+0xbe/0x3b0
[ 128.248635][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 128.248672][ T6004] do_syscall_64+0xfa/0x3b0
[ 128.248694][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.248729][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.248753][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 128.248781][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.248806][ T6004] RIP: 0033:0x7fdc8d87034a
[ 128.248826][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.248846][ T6004] RSP: 002b:00007fff01a5bb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 128.248872][ T6004] RAX: ffffffffffffffda RBX: 00007fff01a5bc20 RCX: 00007fdc8d87034a
[ 128.248890][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff01a5bbe0
[ 128.248908][ T6004] RBP: 0000200000000180 R08: 00007fff01a5bc20 R09: 0000000000800700
[ 128.248926][ T6004] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 128.248942][ T6004] R13: 00007fff01a5bbe0 R14: 0000000000000473 R15: 0000200000000680
[ 128.248967][ T6004]
[ 128.248980][ T6004] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 128.248998][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.249026][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 128.249040][ T6004] Call Trace:
[ 128.249049][ T6004]
[ 128.249058][ T6004] dump_stack_lvl+0x99/0x250
[ 128.249095][ T6004] ? __asan_memcpy+0x40/0x70
[ 128.249121][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.249167][ T6004] ? __pfx__printk+0x10/0x10
[ 128.249201][ T6004] vpanic+0x281/0x750
[ 128.249237][ T6004] ? __pfx__printk+0x10/0x10
[ 128.249261][ T6004] ? __pfx_vpanic+0x10/0x10
[ 128.249297][ T6004] ? is_bpf_text_address+0x26/0x2b0
[ 128.249340][ T6004] panic+0xb9/0xc0
[ 128.249374][ T6004] ? __pfx_panic+0x10/0x10
[ 128.249418][ T6004] __warn+0x31b/0x4b0
[ 128.249454][ T6004] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.249493][ T6004] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.249531][ T6004] report_bug+0x2be/0x4f0
[ 128.249569][ T6004] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.249609][ T6004] ? ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.249647][ T6004] ? ext4_xattr_inode_update_ref+0x536/0x5d0
[ 128.249685][ T6004] handle_bug+0x84/0x160
[ 128.249709][ T6004] exc_invalid_op+0x1a/0x50
[ 128.249734][ T6004] asm_exc_invalid_op+0x1a/0x20
[ 128.249756][ T6004] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0
[ 128.249796][ T6004] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b
[ 128.249815][ T6004] RSP: 0018:ffffc90003f271a0 EFLAGS: 00010246
[ 128.249835][ T6004] RAX: 96e939f6ad7ec700 RBX: dffffc0000000000 RCX: ffff88802b495940
[ 128.249854][ T6004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 128.249870][ T6004] RBP: ffffc90003f27298 R08: 0000000000000000 R09: 0000000000000000
[ 128.249885][ T6004] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff888050760f58
[ 128.249904][ T6004] R13: 1ffff1100a0ec1eb R14: 00000000ffffffff R15: 000000000000000b
[ 128.249931][ T6004] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 128.249961][ T6004] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 128.250001][ T6004] ? ext4_xattr_inode_iget+0x3d2/0x5f0
[ 128.250040][ T6004] ext4_xattr_set_entry+0xabb/0x1e20
[ 128.250087][ T6004] ext4_xattr_ibody_set+0x254/0x6a0
[ 128.250125][ T6004] ext4_expand_extra_isize_ea+0x13a8/0x1ea0
[ 128.250189][ T6004] __ext4_expand_extra_isize+0x30d/0x400
[ 128.250233][ T6004] __ext4_mark_inode_dirty+0x46c/0x700
[ 128.250268][ T6004] ext4_evict_inode+0x80d/0xee0
[ 128.250302][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.250334][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10
[ 128.250360][ T6004] evict+0x504/0x9c0
[ 128.250391][ T6004] ? __pfx_evict+0x10/0x10
[ 128.250417][ T6004] ? iput+0x6d8/0x9d0
[ 128.250451][ T6004] ext4_orphan_cleanup+0xc20/0x1460
[ 128.250480][ T6004] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 128.250504][ T6004] ? ext4_register_li_request+0x640/0x720
[ 128.250526][ T6004] ? errseq_check_and_advance+0x66/0x120
[ 128.250557][ T6004] ext4_fill_super+0x57fa/0x60b0
[ 128.250603][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.250637][ T6004] ? set_blocksize+0x219/0x450
[ 128.250662][ T6004] ? sb_set_blocksize+0x104/0x180
[ 128.250684][ T6004] ? setup_bdev_super+0x4c1/0x5b0
[ 128.250710][ T6004] get_tree_bdev_flags+0x40e/0x4d0
[ 128.250738][ T6004] ? __pfx_ext4_fill_super+0x10/0x10
[ 128.250771][ T6004] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 128.250799][ T6004] ? cap_capable+0x11f/0x460
[ 128.250825][ T6004] ? safesetid_security_capable+0xa9/0x1a0
[ 128.250854][ T6004] vfs_get_tree+0x8f/0x2b0
[ 128.250883][ T6004] do_new_mount+0x2a2/0x9e0
[ 128.250914][ T6004] ? ns_capable+0x8a/0xf0
[ 128.250940][ T6004] ? __pfx_do_new_mount+0x10/0x10
[ 128.250970][ T6004] ? path_mount+0x61c/0xfe0
[ 128.251003][ T6004] __se_sys_mount+0x317/0x410
[ 128.251036][ T6004] ? __pfx___se_sys_mount+0x10/0x10
[ 128.251071][ T6004] ? do_syscall_64+0xbe/0x3b0
[ 128.251091][ T6004] ? __x64_sys_mount+0x20/0xc0
[ 128.251124][ T6004] do_syscall_64+0xfa/0x3b0
[ 128.251151][ T6004] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.251184][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.251206][ T6004] ? clear_bhb_loop+0x60/0xb0
[ 128.251231][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.251253][ T6004] RIP: 0033:0x7fdc8d87034a
[ 128.251270][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.251289][ T6004] RSP: 002b:00007fff01a5bb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 128.251311][ T6004] RAX: ffffffffffffffda RBX: 00007fff01a5bc20 RCX: 00007fdc8d87034a
[ 128.251328][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff01a5bbe0
[ 128.251344][ T6004] RBP: 0000200000000180 R08: 00007fff01a5bc20 R09: 0000000000800700
[ 128.251360][ T6004] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 128.251375][ T6004] R13: 00007fff01a5bbe0 R14: 0000000000000473 R15: 0000200000000680
[ 128.251398][ T6004]
[ 128.251558][ T6004] Kernel Offset: disabled