[ 101.476114][ T115] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. 2025/12/06 06:42:59 parsed 1 programs [ 109.845477][ T5838] cgroup: Unknown subsys name 'net' [ 109.999350][ T5838] cgroup: Unknown subsys name 'cpuset' [ 110.009270][ T5838] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 111.750019][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.487452][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.345773][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.354076][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.393736][ T3958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.401616][ T3958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.080015][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 116.216826][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.224426][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.231561][ T5871] bridge_slave_0: entered allmulticast mode [ 116.239283][ T5871] bridge_slave_0: entered promiscuous mode [ 116.249156][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.256673][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.263909][ T5871] bridge_slave_1: entered allmulticast mode [ 116.271366][ T5871] bridge_slave_1: entered promiscuous mode [ 116.314251][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.329529][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.373747][ T5871] team0: Port device team_slave_0 added [ 116.383308][ T5871] team0: Port device team_slave_1 added [ 116.417472][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.424801][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.450755][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.465368][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.472353][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.498889][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.552957][ T5871] hsr_slave_0: entered promiscuous mode [ 116.559642][ T5871] hsr_slave_1: entered promiscuous mode [ 116.745307][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.758676][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.769628][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.781577][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.880054][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.906430][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.919831][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.927154][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.946137][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.953252][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.195608][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.247900][ T5871] veth0_vlan: entered promiscuous mode [ 117.262634][ T5871] veth1_vlan: entered promiscuous mode [ 117.296147][ T5871] veth0_macvtap: entered promiscuous mode [ 117.306888][ T5871] veth1_macvtap: entered promiscuous mode [ 117.330895][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.347789][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.365049][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.378061][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.391425][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.401280][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.573019][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.670420][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.770381][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.860734][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.473312][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.481646][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.490582][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.499243][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.507519][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.892230][ T63] bridge_slave_1: left allmulticast mode [ 119.898047][ T63] bridge_slave_1: left promiscuous mode [ 119.906475][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.928202][ T63] bridge_slave_0: left allmulticast mode [ 119.933937][ T63] bridge_slave_0: left promiscuous mode [ 119.939728][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.258961][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.270366][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.282851][ T63] bond0 (unregistering): Released all slaves [ 120.405427][ T63] hsr_slave_0: left promiscuous mode [ 120.411930][ T63] hsr_slave_1: left promiscuous mode [ 120.418799][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.426673][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.437056][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.444609][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.468832][ T63] veth1_macvtap: left promiscuous mode [ 120.474632][ T63] veth0_macvtap: left promiscuous mode [ 120.480658][ T63] veth1_vlan: left promiscuous mode [ 120.486456][ T63] veth0_vlan: left promiscuous mode [ 120.934267][ T63] team0 (unregistering): Port device team_slave_1 removed [ 120.975641][ T63] team0 (unregistering): Port device team_slave_0 removed 2025/12/06 06:43:17 executed programs: 0 [ 123.032249][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.040601][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.048481][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.059980][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.074383][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.609025][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 123.734629][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.742834][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.749974][ T5976] bridge_slave_0: entered allmulticast mode [ 123.757741][ T5976] bridge_slave_0: entered promiscuous mode [ 123.768382][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.775757][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.784051][ T5976] bridge_slave_1: entered allmulticast mode [ 123.791947][ T5976] bridge_slave_1: entered promiscuous mode [ 123.835018][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.848654][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.910926][ T5976] team0: Port device team_slave_0 added [ 123.920083][ T5976] team0: Port device team_slave_1 added [ 123.974693][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.981675][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.020103][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.034196][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.041153][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.068825][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.134921][ T5976] hsr_slave_0: entered promiscuous mode [ 124.142140][ T5976] hsr_slave_1: entered promiscuous mode [ 124.658546][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.671087][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.685676][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.702601][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.820508][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.849472][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.867136][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.874370][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.891347][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.898555][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.153848][ T52] Bluetooth: hci0: command tx timeout [ 125.209034][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.270233][ T5976] veth0_vlan: entered promiscuous mode [ 125.284345][ T5976] veth1_vlan: entered promiscuous mode [ 125.330130][ T5976] veth0_macvtap: entered promiscuous mode [ 125.341435][ T5976] veth1_macvtap: entered promiscuous mode [ 125.368191][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.404490][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.422173][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.442801][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.468594][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.493109][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.574217][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.598901][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.640807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.649476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.769029][ T6041] loop0: detected capacity change from 0 to 512 [ 125.830326][ T6041] [ 125.832698][ T6041] ====================================================== [ 125.839709][ T6041] WARNING: possible circular locking dependency detected [ 125.846723][ T6041] syzkaller #0 Not tainted [ 125.851133][ T6041] ------------------------------------------------------ [ 125.858150][ T6041] syz.0.17/6041 is trying to acquire lock: [ 125.863949][ T6041] ffff88803394eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 125.873841][ T6041] [ 125.873841][ T6041] but task is already holding lock: [ 125.881199][ T6041] ffff888059c16aa8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x840 [ 125.891096][ T6041] [ 125.891096][ T6041] which lock already depends on the new lock. [ 125.891096][ T6041] [ 125.901494][ T6041] [ 125.901494][ T6041] the existing dependency chain (in reverse order) is: [ 125.910502][ T6041] [ 125.910502][ T6041] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 125.918088][ T6041] down_read+0x9b/0x460 [ 125.922793][ T6041] ext4_setattr+0x869/0x28d0 [ 125.927937][ T6041] notify_change+0x6d2/0x1290 [ 125.933158][ T6041] chown_common+0x549/0x680 [ 125.938183][ T6041] do_fchownat+0x1a7/0x200 [ 125.943113][ T6041] __x64_sys_chown+0x7b/0xc0 [ 125.948220][ T6041] do_syscall_64+0xcd/0xf80 [ 125.953248][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.959662][ T6041] [ 125.959662][ T6041] -> #1 (jbd2_handle){++++}-{0:0}: [ 125.966970][ T6041] wait_transaction_locked+0x191/0x230 [ 125.972951][ T6041] add_transaction_credits+0x110/0xe60 [ 125.978929][ T6041] start_this_handle+0x3e7/0x1410 [ 125.984474][ T6041] jbd2__journal_start+0x394/0x6a0 [ 125.990110][ T6041] __ext4_journal_start_sb+0x195/0x640 [ 125.996100][ T6041] ext4_do_writepages+0xc23/0x3c70 [ 126.001745][ T6041] ext4_writepages+0x37a/0x7d0 [ 126.007041][ T6041] do_writepages+0x27a/0x600 [ 126.012159][ T6041] __writeback_single_inode+0x168/0x14a0 [ 126.018322][ T6041] writeback_sb_inodes+0x795/0x1de0 [ 126.024052][ T6041] __writeback_inodes_wb+0xf8/0x2d0 [ 126.029779][ T6041] wb_writeback+0x799/0xae0 [ 126.034811][ T6041] wb_workfn+0x8a0/0xbb0 [ 126.039583][ T6041] process_one_work+0x9ba/0x1b20 [ 126.045056][ T6041] worker_thread+0x6c8/0xf10 [ 126.050180][ T6041] kthread+0x3c5/0x780 [ 126.054775][ T6041] ret_from_fork+0x983/0xb10 [ 126.059886][ T6041] ret_from_fork_asm+0x1a/0x30 [ 126.065186][ T6041] [ 126.065186][ T6041] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.073625][ T6041] __lock_acquire+0x1542/0x22f0 [ 126.079005][ T6041] lock_acquire+0x179/0x330 [ 126.084039][ T6041] ext4_writepages+0x224/0x7d0 [ 126.089338][ T6041] do_writepages+0x27a/0x600 [ 126.094459][ T6041] __writeback_single_inode+0x168/0x14a0 [ 126.100620][ T6041] writeback_single_inode+0x5ea/0x11f0 [ 126.106609][ T6041] write_inode_now+0x170/0x1e0 [ 126.111906][ T6041] iput.part.0+0x815/0x1190 [ 126.116933][ T6041] iput+0x35/0x40 [ 126.121086][ T6041] ext4_xattr_block_set+0x67c/0x3640 [ 126.126924][ T6041] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.133348][ T6041] __ext4_expand_extra_isize+0x346/0x480 [ 126.139507][ T6041] __ext4_mark_inode_dirty+0x544/0x840 [ 126.145501][ T6041] ext4_evict_inode+0x713/0x1730 [ 126.150976][ T6041] evict+0x3c2/0xad0 [ 126.155394][ T6041] iput.part.0+0x621/0x1190 [ 126.160425][ T6041] iput+0x35/0x40 [ 126.164581][ T6041] ext4_orphan_cleanup+0x731/0x11e0 [ 126.170366][ T6041] ext4_fill_super+0x7ec1/0xb570 [ 126.175825][ T6041] get_tree_bdev_flags+0x38c/0x620 [ 126.181475][ T6041] vfs_get_tree+0x8e/0x330 [ 126.186416][ T6041] path_mount+0x7bf/0x23a0 [ 126.191359][ T6041] __x64_sys_mount+0x293/0x310 [ 126.196647][ T6041] do_syscall_64+0xcd/0xf80 [ 126.201676][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.208093][ T6041] [ 126.208093][ T6041] other info that might help us debug this: [ 126.208093][ T6041] [ 126.218307][ T6041] Chain exists of: [ 126.218307][ T6041] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 126.218307][ T6041] [ 126.231726][ T6041] Possible unsafe locking scenario: [ 126.231726][ T6041] [ 126.239174][ T6041] CPU0 CPU1 [ 126.244530][ T6041] ---- ---- [ 126.249885][ T6041] lock(&ei->xattr_sem); [ 126.254218][ T6041] lock(jbd2_handle); [ 126.260809][ T6041] lock(&ei->xattr_sem); [ 126.267663][ T6041] rlock(&sbi->s_writepages_rwsem); [ 126.272953][ T6041] [ 126.272953][ T6041] *** DEADLOCK *** [ 126.272953][ T6041] [ 126.281080][ T6041] 3 locks held by syz.0.17/6041: [ 126.286029][ T6041] #0: ffff88803394c0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd00 [ 126.296301][ T6041] #1: ffff88803394c610 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 126.304797][ T6041] #2: ffff888059c16aa8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x840 [ 126.315130][ T6041] [ 126.315130][ T6041] stack backtrace: [ 126.321013][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.321051][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.321071][ T6041] Call Trace: [ 126.321085][ T6041] [ 126.321098][ T6041] dump_stack_lvl+0x116/0x1f0 [ 126.321169][ T6041] print_circular_bug+0x2db/0x410 [ 126.321223][ T6041] check_noncircular+0x146/0x160 [ 126.321274][ T6041] __lock_acquire+0x1542/0x22f0 [ 126.321340][ T6041] lock_acquire+0x179/0x330 [ 126.321396][ T6041] ? do_writepages+0x27a/0x600 [ 126.321446][ T6041] ? __pfx___might_resched+0x10/0x10 [ 126.321489][ T6041] ext4_writepages+0x224/0x7d0 [ 126.321542][ T6041] ? do_writepages+0x27a/0x600 [ 126.321583][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.321625][ T6041] ? __pfx_ext4_writepages+0x10/0x10 [ 126.321680][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.321722][ T6041] ? __pfx_ext4_writepages+0x10/0x10 [ 126.321773][ T6041] do_writepages+0x27a/0x600 [ 126.321818][ T6041] ? __pfx_do_writepages+0x10/0x10 [ 126.321862][ T6041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.321899][ T6041] __writeback_single_inode+0x168/0x14a0 [ 126.321947][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.321986][ T6041] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.322016][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322056][ T6041] ? __pfx___writeback_single_inode+0x10/0x10 [ 126.322102][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322144][ T6041] writeback_single_inode+0x5ea/0x11f0 [ 126.322192][ T6041] ? ext4_orphan_cleanup+0x731/0x11e0 [ 126.322250][ T6041] write_inode_now+0x170/0x1e0 [ 126.322297][ T6041] ? __pfx_write_inode_now+0x10/0x10 [ 126.322367][ T6041] ? find_held_lock+0x2b/0x80 [ 126.322403][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322443][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322485][ T6041] iput.part.0+0x815/0x1190 [ 126.322527][ T6041] iput+0x35/0x40 [ 126.322562][ T6041] ext4_xattr_block_set+0x67c/0x3640 [ 126.322612][ T6041] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 126.322655][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322694][ T6041] ? xattr_find_entry+0x289/0x330 [ 126.322733][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322772][ T6041] ? ext4_xattr_block_find+0x59/0x430 [ 126.322812][ T6041] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 126.322870][ T6041] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 126.322921][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322959][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.322998][ T6041] ? dquot_initialize_needed+0x183/0x2a0 [ 126.323044][ T6041] __ext4_expand_extra_isize+0x346/0x480 [ 126.323084][ T6041] __ext4_mark_inode_dirty+0x544/0x840 [ 126.323136][ T6041] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 126.323187][ T6041] ? __pfx___might_resched+0x10/0x10 [ 126.323228][ T6041] ? ext4_journal_check_start+0x22b/0x340 [ 126.323284][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.323323][ T6041] ? __ext4_journal_start_sb+0x19e/0x640 [ 126.323370][ T6041] ? ext4_evict_inode+0x595/0x1730 [ 126.323430][ T6041] ext4_evict_inode+0x713/0x1730 [ 126.323494][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.323548][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.323589][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.323639][ T6041] evict+0x3c2/0xad0 [ 126.323676][ T6041] ? __pfx_evict+0x10/0x10 [ 126.323710][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.323753][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.323796][ T6041] iput.part.0+0x621/0x1190 [ 126.323836][ T6041] iput+0x35/0x40 [ 126.323870][ T6041] ext4_orphan_cleanup+0x731/0x11e0 [ 126.323928][ T6041] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 126.323983][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324021][ T6041] ? ext4_register_li_request+0xec/0x9b0 [ 126.324058][ T6041] ext4_fill_super+0x7ec1/0xb570 [ 126.324105][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.324138][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324180][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324219][ T6041] ? sb_set_blocksize+0xfe/0x320 [ 126.324253][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324291][ T6041] ? setup_bdev_super+0x369/0x730 [ 126.324335][ T6041] get_tree_bdev_flags+0x38c/0x620 [ 126.324385][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.324419][ T6041] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 126.324466][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324507][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324545][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324583][ T6041] ? security_capable+0x7e/0x260 [ 126.324641][ T6041] vfs_get_tree+0x8e/0x330 [ 126.324678][ T6041] path_mount+0x7bf/0x23a0 [ 126.324713][ T6041] ? rcu_is_watching+0x12/0xc0 [ 126.324756][ T6041] ? __pfx_path_mount+0x10/0x10 [ 126.324791][ T6041] ? kmem_cache_free+0x2d8/0x770 [ 126.324829][ T6041] ? putname+0xf5/0x1a0 [ 126.324862][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.324900][ T6041] ? putname+0xf5/0x1a0 [ 126.324932][ T6041] ? __x64_sys_mount+0x293/0x310 [ 126.324966][ T6041] __x64_sys_mount+0x293/0x310 [ 126.325001][ T6041] ? __pfx___x64_sys_mount+0x10/0x10 [ 126.325038][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.325081][ T6041] do_syscall_64+0xcd/0xf80 [ 126.325120][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.325152][ T6041] RIP: 0033:0x7f24b8790eea [ 126.325179][ T6041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.325211][ T6041] RSP: 002b:00007ffe9c113938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.325242][ T6041] RAX: ffffffffffffffda RBX: 00007ffe9c1139c0 RCX: 00007f24b8790eea [ 126.325263][ T6041] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe9c113980 [ 126.325284][ T6041] RBP: 0000200000000180 R08: 00007ffe9c1139c0 R09: 0000000000800700 [ 126.325305][ T6041] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.325326][ T6041] R13: 00007ffe9c113980 R14: 000000000000046f R15: 000000000000002c [ 126.325356][ T6041] [ 126.973919][ T6041] ------------[ cut here ]------------ [ 126.979426][ T6041] EA inode 11 i_nlink=2 [ 126.979448][ T6041] WARNING: fs/ext4/xattr.c:1056 at 0x0, CPU#0: syz.0.17/6041 [ 126.991038][ T6041] Modules linked in: [ 126.994968][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.004117][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.014281][ T6041] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 127.020907][ T6041] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f1 00 00 00 48 8d 3d 09 d6 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a e9 06 ff ff ff e8 23 c7 2c ff 48 8d 7b 40 48 b8 00 [ 127.040614][ T6041] RSP: 0018:ffffc900033c7178 EFLAGS: 00010246 [ 127.046757][ T6041] RAX: dffffc0000000000 RBX: ffff888059d59f78 RCX: ffffffff82915db4 [ 127.054774][ T6041] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff908d34b0 [ 127.062785][ T6041] RBP: ffffc900033c7240 R08: 0000000000000005 R09: 0000000000000001 [ 127.070757][ T6041] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 127.078752][ T6041] R13: ffffffffffffffff R14: 1ffff92000678e32 R15: ffff888059d5a168 [ 127.086763][ T6041] FS: 00005555694d6500(0000) GS:ffff88812495e000(0000) knlGS:0000000000000000 [ 127.095789][ T6041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.102745][ T6041] CR2: 00005641e7f0f078 CR3: 00000000744a9000 CR4: 0000000000350ef0 [ 127.110726][ T6041] Call Trace: [ 127.114347][ T6041] [ 127.117288][ T6041] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 127.123996][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.129661][ T6041] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 127.135445][ T6041] ext4_xattr_set_entry+0x158f/0x1f00 [ 127.140835][ T6041] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 127.147177][ T6041] ? xattr_find_entry+0x289/0x330 [ 127.152617][ T6041] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 127.157847][ T6041] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 127.164402][ T6041] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 127.170680][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.176704][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.182657][ T6041] ? dquot_initialize_needed+0x183/0x2a0 [ 127.188300][ T6041] __ext4_expand_extra_isize+0x346/0x480 [ 127.194189][ T6041] __ext4_mark_inode_dirty+0x544/0x840 [ 127.199663][ T6041] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 127.206092][ T6041] ? __pfx___might_resched+0x10/0x10 [ 127.212325][ T6041] ? ext4_journal_check_start+0x22b/0x340 [ 127.218080][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.224566][ T6041] ? __ext4_journal_start_sb+0x19e/0x640 [ 127.230233][ T6041] ? ext4_evict_inode+0x595/0x1730 [ 127.235812][ T6041] ext4_evict_inode+0x713/0x1730 [ 127.240767][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.241768][ T52] Bluetooth: hci0: command tx timeout [ 127.246930][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.257461][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.263229][ T6041] evict+0x3c2/0xad0 [ 127.267149][ T6041] ? __pfx_evict+0x10/0x10 [ 127.271560][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.277817][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.283858][ T6041] iput.part.0+0x621/0x1190 [ 127.288390][ T6041] iput+0x35/0x40 [ 127.292413][ T6041] ext4_orphan_cleanup+0x731/0x11e0 [ 127.297659][ T6041] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 127.303708][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.309374][ T6041] ? ext4_register_li_request+0xec/0x9b0 [ 127.316021][ T6041] ext4_fill_super+0x7ec1/0xb570 [ 127.320990][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.326633][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.332746][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.338408][ T6041] ? sb_set_blocksize+0xfe/0x320 [ 127.343734][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.349391][ T6041] ? setup_bdev_super+0x369/0x730 [ 127.354814][ T6041] get_tree_bdev_flags+0x38c/0x620 [ 127.359960][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.365617][ T6041] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.371289][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.377652][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.383696][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.389361][ T6041] ? security_capable+0x7e/0x260 [ 127.394909][ T6041] vfs_get_tree+0x8e/0x330 [ 127.399351][ T6041] path_mount+0x7bf/0x23a0 [ 127.404143][ T6041] ? rcu_is_watching+0x12/0xc0 [ 127.408932][ T6041] ? __pfx_path_mount+0x10/0x10 [ 127.414104][ T6041] ? kmem_cache_free+0x2d8/0x770 [ 127.419044][ T6041] ? putname+0xf5/0x1a0 [ 127.423554][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.429876][ T6041] ? putname+0xf5/0x1a0 [ 127.434625][ T6041] ? __x64_sys_mount+0x293/0x310 [ 127.439636][ T6041] __x64_sys_mount+0x293/0x310 [ 127.444803][ T6041] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.450149][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.456309][ T6041] do_syscall_64+0xcd/0xf80 [ 127.460864][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.467590][ T6041] RIP: 0033:0x7f24b8790eea [ 127.472537][ T6041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.492542][ T6041] RSP: 002b:00007ffe9c113938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.500961][ T6041] RAX: ffffffffffffffda RBX: 00007ffe9c1139c0 RCX: 00007f24b8790eea [ 127.509609][ T6041] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe9c113980 [ 127.517959][ T6041] RBP: 0000200000000180 R08: 00007ffe9c1139c0 R09: 0000000000800700 [ 127.526323][ T6041] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 127.534664][ T6041] R13: 00007ffe9c113980 R14: 000000000000046f R15: 000000000000002c [ 127.543061][ T6041] [ 127.546116][ T6041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.553401][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.562524][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.572580][ T6041] Call Trace: [ 127.575859][ T6041] [ 127.578792][ T6041] dump_stack_lvl+0x3d/0x1f0 [ 127.583404][ T6041] vpanic+0x640/0x6f0 [ 127.587414][ T6041] panic+0xca/0xd0 [ 127.591160][ T6041] ? __pfx_panic+0x10/0x10 [ 127.595606][ T6041] ? check_panic_on_warn+0x1f/0xb0 [ 127.600754][ T6041] check_panic_on_warn+0xab/0xb0 [ 127.605721][ T6041] __warn+0x108/0x3c0 [ 127.609740][ T6041] __report_bug+0x2a0/0x520 [ 127.614288][ T6041] ? __pfx___report_bug+0x10/0x10 [ 127.619355][ T6041] ? ext4_xattr_inode_update_ref+0x3c4/0x5b0 [ 127.625363][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.631021][ T6041] report_bug_entry+0xb2/0x220 [ 127.635827][ T6041] ? ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 127.641830][ T6041] handle_bug+0x18a/0x260 [ 127.646187][ T6041] exc_invalid_op+0x17/0x50 [ 127.650802][ T6041] asm_exc_invalid_op+0x1a/0x20 [ 127.655664][ T6041] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x5b0 [ 127.662267][ T6041] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f1 00 00 00 48 8d 3d 09 d6 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a e9 06 ff ff ff e8 23 c7 2c ff 48 8d 7b 40 48 b8 00 [ 127.681881][ T6041] RSP: 0018:ffffc900033c7178 EFLAGS: 00010246 [ 127.687948][ T6041] RAX: dffffc0000000000 RBX: ffff888059d59f78 RCX: ffffffff82915db4 [ 127.695913][ T6041] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff908d34b0 [ 127.703878][ T6041] RBP: ffffc900033c7240 R08: 0000000000000005 R09: 0000000000000001 [ 127.711847][ T6041] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 127.719824][ T6041] R13: ffffffffffffffff R14: 1ffff92000678e32 R15: ffff888059d5a168 [ 127.727803][ T6041] ? ext4_xattr_inode_update_ref+0x3c4/0x5b0 [ 127.733814][ T6041] ? ext4_xattr_inode_update_ref+0x491/0x5b0 [ 127.739811][ T6041] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 127.746157][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.751801][ T6041] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 127.757274][ T6041] ext4_xattr_set_entry+0x158f/0x1f00 [ 127.762664][ T6041] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 127.768393][ T6041] ? xattr_find_entry+0x289/0x330 [ 127.773426][ T6041] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 127.778639][ T6041] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 127.784562][ T6041] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 127.790830][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.796478][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.802119][ T6041] ? dquot_initialize_needed+0x183/0x2a0 [ 127.807769][ T6041] __ext4_expand_extra_isize+0x346/0x480 [ 127.813416][ T6041] __ext4_mark_inode_dirty+0x544/0x840 [ 127.818899][ T6041] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 127.824897][ T6041] ? __pfx___might_resched+0x10/0x10 [ 127.830193][ T6041] ? ext4_journal_check_start+0x22b/0x340 [ 127.835925][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.841564][ T6041] ? __ext4_journal_start_sb+0x19e/0x640 [ 127.847208][ T6041] ? ext4_evict_inode+0x595/0x1730 [ 127.852343][ T6041] ext4_evict_inode+0x713/0x1730 [ 127.857305][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.862695][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.868342][ T6041] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.873734][ T6041] evict+0x3c2/0xad0 [ 127.877643][ T6041] ? __pfx_evict+0x10/0x10 [ 127.882061][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.887712][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.893356][ T6041] iput.part.0+0x621/0x1190 [ 127.897874][ T6041] iput+0x35/0x40 [ 127.901511][ T6041] ext4_orphan_cleanup+0x731/0x11e0 [ 127.906915][ T6041] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 127.912574][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.918217][ T6041] ? ext4_register_li_request+0xec/0x9b0 [ 127.923853][ T6041] ext4_fill_super+0x7ec1/0xb570 [ 127.928807][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.934092][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.939738][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.945378][ T6041] ? sb_set_blocksize+0xfe/0x320 [ 127.950318][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.955954][ T6041] ? setup_bdev_super+0x369/0x730 [ 127.960991][ T6041] get_tree_bdev_flags+0x38c/0x620 [ 127.966125][ T6041] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.971411][ T6041] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.977056][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.982700][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.988339][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.993975][ T6041] ? security_capable+0x7e/0x260 [ 127.998931][ T6041] vfs_get_tree+0x8e/0x330 [ 128.003355][ T6041] path_mount+0x7bf/0x23a0 [ 128.007774][ T6041] ? rcu_is_watching+0x12/0xc0 [ 128.012547][ T6041] ? __pfx_path_mount+0x10/0x10 [ 128.017402][ T6041] ? kmem_cache_free+0x2d8/0x770 [ 128.022343][ T6041] ? putname+0xf5/0x1a0 [ 128.026499][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.032138][ T6041] ? putname+0xf5/0x1a0 [ 128.036293][ T6041] ? __x64_sys_mount+0x293/0x310 [ 128.041231][ T6041] __x64_sys_mount+0x293/0x310 [ 128.046000][ T6041] ? __pfx___x64_sys_mount+0x10/0x10 [ 128.051290][ T6041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.056936][ T6041] do_syscall_64+0xcd/0xf80 [ 128.061482][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.067379][ T6041] RIP: 0033:0x7f24b8790eea [ 128.071795][ T6041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.091411][ T6041] RSP: 002b:00007ffe9c113938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.099838][ T6041] RAX: ffffffffffffffda RBX: 00007ffe9c1139c0 RCX: 00007f24b8790eea [ 128.107808][ T6041] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffe9c113980 [ 128.115778][ T6041] RBP: 0000200000000180 R08: 00007ffe9c1139c0 R09: 0000000000800700 [ 128.123746][ T6041] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.131715][ T6041] R13: 00007ffe9c113980 R14: 000000000000046f R15: 000000000000002c [ 128.139698][ T6041] [ 128.142887][ T6041] Kernel Offset: disabled [ 128.147201][ T6041] Rebooting in 86400 seconds..