Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. 2025/09/09 23:24:15 parsed 1 programs [ 98.628875][ T5845] cgroup: Unknown subsys name 'net' [ 98.892784][ T5845] cgroup: Unknown subsys name 'cpuset' [ 98.927416][ T5845] cgroup: Unknown subsys name 'rlimit' [ 100.973565][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.189282][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.189306][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.235161][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.235184][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.382473][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 107.771069][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.772907][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.773136][ T5890] bridge_slave_0: entered allmulticast mode [ 107.777316][ T5890] bridge_slave_0: entered promiscuous mode [ 107.804311][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.804432][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.804573][ T5890] bridge_slave_1: entered allmulticast mode [ 107.806285][ T5890] bridge_slave_1: entered promiscuous mode [ 108.019662][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.025896][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.429136][ T5890] team0: Port device team_slave_0 added [ 108.431794][ T5890] team0: Port device team_slave_1 added [ 108.780713][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.780727][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.780743][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.878004][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.878024][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.878053][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.074562][ T5890] hsr_slave_0: entered promiscuous mode [ 109.075683][ T5890] hsr_slave_1: entered promiscuous mode [ 109.521225][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.553995][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.570485][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.687818][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.817530][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.844838][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.862599][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.863040][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.865721][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.865812][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.132021][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.191917][ T5890] veth0_vlan: entered promiscuous mode [ 110.204643][ T5890] veth1_vlan: entered promiscuous mode [ 110.240926][ T5890] veth0_macvtap: entered promiscuous mode [ 110.245213][ T5890] veth1_macvtap: entered promiscuous mode [ 110.271909][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.283763][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.305868][ T3591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.317285][ T3591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.319886][ T3591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.320641][ T3591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.163924][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.434855][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.766942][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.623546][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.272503][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.275750][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.278680][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.280041][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.280817][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.029136][ T43] bridge_slave_1: left allmulticast mode [ 114.029355][ T43] bridge_slave_1: left promiscuous mode [ 114.031422][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.168497][ T43] bridge_slave_0: left allmulticast mode [ 114.168534][ T43] bridge_slave_0: left promiscuous mode [ 114.168850][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.937635][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.997345][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.019897][ T43] bond0 (unregistering): Released all slaves [ 116.460395][ T43] hsr_slave_0: left promiscuous mode [ 116.499480][ T43] hsr_slave_1: left promiscuous mode [ 116.500724][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.500805][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.548799][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.548835][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.641526][ T43] veth1_macvtap: left promiscuous mode [ 116.641878][ T43] veth0_macvtap: left promiscuous mode [ 116.642249][ T43] veth1_vlan: left promiscuous mode [ 116.642611][ T43] veth0_vlan: left promiscuous mode [ 118.687449][ T43] team0 (unregistering): Port device team_slave_1 removed [ 118.867657][ T43] team0 (unregistering): Port device team_slave_0 removed 2025/09/09 23:24:42 executed programs: 0 [ 122.170145][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.173250][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.181499][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.192202][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.193021][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.296950][ T5998] chnl_net:caif_netlink_parms(): no params data found [ 123.720107][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.720328][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.720526][ T5998] bridge_slave_0: entered allmulticast mode [ 123.723676][ T5998] bridge_slave_0: entered promiscuous mode [ 123.755352][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.770534][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.770748][ T5998] bridge_slave_1: entered allmulticast mode [ 123.773935][ T5998] bridge_slave_1: entered promiscuous mode [ 123.991567][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.994502][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.260318][ T5998] team0: Port device team_slave_0 added [ 124.264185][ T5998] team0: Port device team_slave_1 added [ 124.298500][ T59] Bluetooth: hci0: command tx timeout [ 124.517913][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.517934][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.517963][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.520796][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.520812][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.520837][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.765830][ T5998] hsr_slave_0: entered promiscuous mode [ 124.767248][ T5998] hsr_slave_1: entered promiscuous mode [ 126.376572][ T59] Bluetooth: hci0: command tx timeout [ 126.801896][ T5998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.842443][ T5998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.882169][ T5998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.924141][ T5998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.153095][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.188328][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.196204][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.197824][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.236006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.236650][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.683566][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.769168][ T5998] veth0_vlan: entered promiscuous mode [ 127.788586][ T5998] veth1_vlan: entered promiscuous mode [ 127.862532][ T5998] veth0_macvtap: entered promiscuous mode [ 127.874145][ T5998] veth1_macvtap: entered promiscuous mode [ 127.913105][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.939339][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.963378][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.963726][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.963769][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.963808][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.242568][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.242594][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.347508][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.347534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/09 23:24:48 executed programs: 2 [ 128.471725][ T59] Bluetooth: hci0: command tx timeout [ 128.582848][ T6097] loop0: detected capacity change from 0 to 512 [ 128.718750][ T6097] [ 128.718763][ T6097] ====================================================== [ 128.718770][ T6097] WARNING: possible circular locking dependency detected [ 128.718779][ T6097] syzkaller #0 Not tainted [ 128.718789][ T6097] ------------------------------------------------------ [ 128.718796][ T6097] syz.0.17/6097 is trying to acquire lock: [ 128.718808][ T6097] ffff88803dfbec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 128.718861][ T6097] [ 128.718861][ T6097] but task is already holding lock: [ 128.718868][ T6097] ffff88823bf82560 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 128.718913][ T6097] [ 128.718913][ T6097] which lock already depends on the new lock. [ 128.718913][ T6097] [ 128.718920][ T6097] [ 128.718920][ T6097] the existing dependency chain (in reverse order) is: [ 128.718927][ T6097] [ 128.718927][ T6097] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 128.718952][ T6097] lock_acquire+0x120/0x360 [ 128.718977][ T6097] down_write+0x3a/0x50 [ 128.718994][ T6097] ext4_xattr_set_handle+0x165/0x1590 [ 128.719019][ T6097] ext4_initxattrs+0x9f/0x110 [ 128.719039][ T6097] security_inode_init_security+0x29d/0x3f0 [ 128.719059][ T6097] __ext4_new_inode+0x3314/0x3cb0 [ 128.719087][ T6097] ext4_create+0x22d/0x460 [ 128.719117][ T6097] path_openat+0x14fd/0x3840 [ 128.719139][ T6097] do_filp_open+0x1fa/0x410 [ 128.719160][ T6097] do_sys_openat2+0x121/0x1c0 [ 128.719179][ T6097] __x64_sys_openat+0x138/0x170 [ 128.719197][ T6097] do_syscall_64+0xfa/0x3b0 [ 128.719213][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.719233][ T6097] [ 128.719233][ T6097] -> #1 (jbd2_handle){++++}-{0:0}: [ 128.719261][ T6097] lock_acquire+0x120/0x360 [ 128.719285][ T6097] start_this_handle+0x1fa7/0x21c0 [ 128.719309][ T6097] jbd2__journal_start+0x2c1/0x5b0 [ 128.719332][ T6097] __ext4_journal_start_sb+0x227/0x5c0 [ 128.719358][ T6097] ext4_do_writepages+0xf6f/0x4600 [ 128.719382][ T6097] ext4_writepages+0x205/0x350 [ 128.719399][ T6097] do_writepages+0x32b/0x550 [ 128.719422][ T6097] __writeback_single_inode+0x145/0x1000 [ 128.719445][ T6097] writeback_sb_inodes+0x6b7/0xf60 [ 128.719467][ T6097] __writeback_inodes_wb+0x111/0x240 [ 128.719489][ T6097] wb_writeback+0x44f/0xaf0 [ 128.719510][ T6097] wb_workfn+0xaf4/0xf00 [ 128.719527][ T6097] process_scheduled_works+0xade/0x17b0 [ 128.719551][ T6097] worker_thread+0x8a0/0xda0 [ 128.719574][ T6097] kthread+0x70e/0x8a0 [ 128.719601][ T6097] ret_from_fork+0x3f9/0x770 [ 128.719625][ T6097] ret_from_fork_asm+0x1a/0x30 [ 128.719644][ T6097] [ 128.719644][ T6097] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 128.719671][ T6097] validate_chain+0xb9b/0x2140 [ 128.719700][ T6097] __lock_acquire+0xab9/0xd20 [ 128.719725][ T6097] lock_acquire+0x120/0x360 [ 128.719749][ T6097] percpu_down_read_internal+0x48/0x1d0 [ 128.719778][ T6097] ext4_writepages+0x1cc/0x350 [ 128.719795][ T6097] do_writepages+0x32b/0x550 [ 128.719817][ T6097] __writeback_single_inode+0x145/0x1000 [ 128.719841][ T6097] writeback_single_inode+0x1d5/0x640 [ 128.719860][ T6097] write_inode_now+0x160/0x1d0 [ 128.719879][ T6097] iput+0x5b9/0x9d0 [ 128.719904][ T6097] ext4_xattr_block_set+0x1fce/0x2ac0 [ 128.719929][ T6097] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 128.719957][ T6097] __ext4_expand_extra_isize+0x30d/0x400 [ 128.719985][ T6097] __ext4_mark_inode_dirty+0x46c/0x700 [ 128.720006][ T6097] ext4_evict_inode+0x80d/0xee0 [ 128.720026][ T6097] evict+0x504/0x9c0 [ 128.720045][ T6097] ext4_orphan_cleanup+0xc20/0x1460 [ 128.720064][ T6097] ext4_fill_super+0x57fa/0x60b0 [ 128.720102][ T6097] get_tree_bdev_flags+0x40e/0x4d0 [ 128.720127][ T6097] vfs_get_tree+0x8f/0x2b0 [ 128.720150][ T6097] do_new_mount+0x2a2/0x9e0 [ 128.720176][ T6097] __se_sys_mount+0x317/0x410 [ 128.720202][ T6097] do_syscall_64+0xfa/0x3b0 [ 128.720218][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.720237][ T6097] [ 128.720237][ T6097] other info that might help us debug this: [ 128.720237][ T6097] [ 128.720244][ T6097] Chain exists of: [ 128.720244][ T6097] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 128.720244][ T6097] [ 128.720277][ T6097] Possible unsafe locking scenario: [ 128.720277][ T6097] [ 128.720283][ T6097] CPU0 CPU1 [ 128.720290][ T6097] ---- ---- [ 128.720296][ T6097] lock(&ei->xattr_sem); [ 128.720310][ T6097] lock(jbd2_handle); [ 128.720324][ T6097] lock(&ei->xattr_sem); [ 128.720339][ T6097] rlock(&sbi->s_writepages_rwsem); [ 128.720351][ T6097] [ 128.720351][ T6097] *** DEADLOCK *** [ 128.720351][ T6097] [ 128.720356][ T6097] 3 locks held by syz.0.17/6097: [ 128.720368][ T6097] #0: ffff88803dfbc0d0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 128.720428][ T6097] #1: ffff88803dfbc778 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 128.720478][ T6097] #2: ffff88823bf82560 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 128.720530][ T6097] [ 128.720530][ T6097] stack backtrace: [ 128.720541][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.720565][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.720577][ T6097] Call Trace: [ 128.720585][ T6097] [ 128.720594][ T6097] dump_stack_lvl+0x189/0x250 [ 128.720627][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.720656][ T6097] ? __pfx__printk+0x10/0x10 [ 128.720678][ T6097] ? print_lock_name+0xde/0x100 [ 128.720701][ T6097] print_circular_bug+0x2ee/0x310 [ 128.720723][ T6097] check_noncircular+0x134/0x160 [ 128.720758][ T6097] validate_chain+0xb9b/0x2140 [ 128.720793][ T6097] ? look_up_lock_class+0x74/0x170 [ 128.720825][ T6097] ? register_lock_class+0x51/0x320 [ 128.720853][ T6097] __lock_acquire+0xab9/0xd20 [ 128.720883][ T6097] ? ext4_writepages+0x1cc/0x350 [ 128.720901][ T6097] lock_acquire+0x120/0x360 [ 128.720927][ T6097] ? ext4_writepages+0x1cc/0x350 [ 128.720947][ T6097] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 128.720978][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.721009][ T6097] percpu_down_read_internal+0x48/0x1d0 [ 128.721039][ T6097] ? ext4_writepages+0x1cc/0x350 [ 128.721058][ T6097] ext4_writepages+0x1cc/0x350 [ 128.721079][ T6097] ? __pfx_ext4_writepages+0x10/0x10 [ 128.721170][ T6097] ? rt_mutex_slowunlock+0x493/0x8a0 [ 128.721203][ T6097] ? __pfx_ext4_writepages+0x10/0x10 [ 128.721223][ T6097] do_writepages+0x32b/0x550 [ 128.721250][ T6097] ? reacquire_held_locks+0x127/0x1d0 [ 128.721281][ T6097] ? rt_spin_lock+0x1bb/0x2c0 [ 128.721303][ T6097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.721332][ T6097] __writeback_single_inode+0x145/0x1000 [ 128.721359][ T6097] writeback_single_inode+0x1d5/0x640 [ 128.721382][ T6097] write_inode_now+0x160/0x1d0 [ 128.721402][ T6097] ? __pfx_write_inode_now+0x10/0x10 [ 128.721437][ T6097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.721465][ T6097] ? rt_spin_unlock+0x65/0x80 [ 128.721492][ T6097] iput+0x5b9/0x9d0 [ 128.721524][ T6097] ext4_xattr_block_set+0x1fce/0x2ac0 [ 128.721566][ T6097] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 128.721594][ T6097] ? ext4_xattr_block_find+0x2d4/0x350 [ 128.721624][ T6097] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 128.721669][ T6097] __ext4_expand_extra_isize+0x30d/0x400 [ 128.721704][ T6097] __ext4_mark_inode_dirty+0x46c/0x700 [ 128.721732][ T6097] ext4_evict_inode+0x80d/0xee0 [ 128.721759][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.721786][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.721808][ T6097] evict+0x504/0x9c0 [ 128.721833][ T6097] ? __pfx_evict+0x10/0x10 [ 128.721858][ T6097] ? iput+0x6d8/0x9d0 [ 128.721889][ T6097] ext4_orphan_cleanup+0xc20/0x1460 [ 128.721917][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.721940][ T6097] ? ext4_register_li_request+0x640/0x720 [ 128.721960][ T6097] ? errseq_check_and_advance+0x66/0x120 [ 128.721989][ T6097] ext4_fill_super+0x57fa/0x60b0 [ 128.722029][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.722059][ T6097] ? set_blocksize+0x219/0x450 [ 128.722083][ T6097] ? sb_set_blocksize+0x104/0x180 [ 128.722114][ T6097] ? setup_bdev_super+0x4c1/0x5b0 [ 128.722141][ T6097] get_tree_bdev_flags+0x40e/0x4d0 [ 128.722167][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.722198][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.722224][ T6097] ? cap_capable+0x11f/0x460 [ 128.722248][ T6097] ? safesetid_security_capable+0xa9/0x1a0 [ 128.722277][ T6097] vfs_get_tree+0x8f/0x2b0 [ 128.722304][ T6097] do_new_mount+0x2a2/0x9e0 [ 128.722334][ T6097] ? ns_capable+0x8a/0xf0 [ 128.722357][ T6097] ? __pfx_do_new_mount+0x10/0x10 [ 128.722385][ T6097] ? path_mount+0x61c/0xfe0 [ 128.722416][ T6097] __se_sys_mount+0x317/0x410 [ 128.722448][ T6097] ? __pfx___se_sys_mount+0x10/0x10 [ 128.722479][ T6097] ? do_syscall_64+0xbe/0x3b0 [ 128.722496][ T6097] ? __x64_sys_mount+0x20/0xc0 [ 128.722525][ T6097] do_syscall_64+0xfa/0x3b0 [ 128.722543][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.722573][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.722593][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 128.722616][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.722636][ T6097] RIP: 0033:0x7fefaad0038a [ 128.722654][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.722672][ T6097] RSP: 002b:00007ffdb287c378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.722694][ T6097] RAX: ffffffffffffffda RBX: 00007ffdb287c400 RCX: 00007fefaad0038a [ 128.722709][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb287c3c0 [ 128.722724][ T6097] RBP: 0000200000000180 R08: 00007ffdb287c400 R09: 0000000000800700 [ 128.722738][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.722752][ T6097] R13: 00007ffdb287c3c0 R14: 0000000000000473 R15: 0000200000000680 [ 128.722774][ T6097] [ 128.723951][ T6097] ------------[ cut here ]------------ [ 128.723961][ T6097] EA inode 11 i_nlink=2 [ 128.724253][ T6097] WARNING: CPU: 1 PID: 6097 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.724299][ T6097] Modules linked in: [ 128.724317][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.724340][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.724351][ T6097] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.724382][ T6097] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b [ 128.724399][ T6097] RSP: 0018:ffffc900041bf1a0 EFLAGS: 00010246 [ 128.724417][ T6097] RAX: 3b7a600244a15000 RBX: dffffc0000000000 RCX: ffff88803cfa3b80 [ 128.724433][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.724445][ T6097] RBP: ffffc900041bf298 R08: 0000000000000000 R09: 0000000000000000 [ 128.724459][ T6097] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888049711b30 [ 128.724473][ T6097] R13: 1ffff110092e2366 R14: 00000000ffffffff R15: 000000000000000b [ 128.724488][ T6097] FS: 000055556e3f9500(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 128.724506][ T6097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.724520][ T6097] CR2: 00007f24cdec2e9c CR3: 000000002c16a000 CR4: 00000000003526f0 [ 128.724541][ T6097] Call Trace: [ 128.724548][ T6097] [ 128.724557][ T6097] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 128.724583][ T6097] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.724615][ T6097] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 128.724647][ T6097] ext4_xattr_set_entry+0xabb/0x1e20 [ 128.724682][ T6097] ext4_xattr_ibody_set+0x254/0x6a0 [ 128.724713][ T6097] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 128.724758][ T6097] __ext4_expand_extra_isize+0x30d/0x400 [ 128.724794][ T6097] __ext4_mark_inode_dirty+0x46c/0x700 [ 128.724817][ T6097] ext4_evict_inode+0x80d/0xee0 [ 128.724842][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.724867][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.724889][ T6097] evict+0x504/0x9c0 [ 128.724913][ T6097] ? __pfx_evict+0x10/0x10 [ 128.724937][ T6097] ? iput+0x6d8/0x9d0 [ 128.724968][ T6097] ext4_orphan_cleanup+0xc20/0x1460 [ 128.724994][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.725018][ T6097] ? ext4_register_li_request+0x640/0x720 [ 128.725038][ T6097] ? errseq_check_and_advance+0x66/0x120 [ 128.725067][ T6097] ext4_fill_super+0x57fa/0x60b0 [ 128.725117][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.725145][ T6097] ? set_blocksize+0x219/0x450 [ 128.725168][ T6097] ? sb_set_blocksize+0x104/0x180 [ 128.725189][ T6097] ? setup_bdev_super+0x4c1/0x5b0 [ 128.725215][ T6097] get_tree_bdev_flags+0x40e/0x4d0 [ 128.725239][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.725268][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.725295][ T6097] ? cap_capable+0x11f/0x460 [ 128.725319][ T6097] ? safesetid_security_capable+0xa9/0x1a0 [ 128.725345][ T6097] vfs_get_tree+0x8f/0x2b0 [ 128.725371][ T6097] do_new_mount+0x2a2/0x9e0 [ 128.725401][ T6097] ? ns_capable+0x8a/0xf0 [ 128.725426][ T6097] ? __pfx_do_new_mount+0x10/0x10 [ 128.725453][ T6097] ? path_mount+0x61c/0xfe0 [ 128.725483][ T6097] __se_sys_mount+0x317/0x410 [ 128.725514][ T6097] ? __pfx___se_sys_mount+0x10/0x10 [ 128.725545][ T6097] ? do_syscall_64+0xbe/0x3b0 [ 128.725563][ T6097] ? __x64_sys_mount+0x20/0xc0 [ 128.725591][ T6097] do_syscall_64+0xfa/0x3b0 [ 128.725608][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.725637][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.725658][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 128.725680][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.725699][ T6097] RIP: 0033:0x7fefaad0038a [ 128.725716][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.725733][ T6097] RSP: 002b:00007ffdb287c378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.725754][ T6097] RAX: ffffffffffffffda RBX: 00007ffdb287c400 RCX: 00007fefaad0038a [ 128.725769][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb287c3c0 [ 128.725782][ T6097] RBP: 0000200000000180 R08: 00007ffdb287c400 R09: 0000000000800700 [ 128.725796][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.725809][ T6097] R13: 00007ffdb287c3c0 R14: 0000000000000473 R15: 0000200000000680 [ 128.725830][ T6097] [ 128.725841][ T6097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.725855][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.725878][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.725889][ T6097] Call Trace: [ 128.725897][ T6097] [ 128.725905][ T6097] dump_stack_lvl+0x99/0x250 [ 128.725935][ T6097] ? __asan_memcpy+0x40/0x70 [ 128.725957][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.725988][ T6097] ? __pfx__printk+0x10/0x10 [ 128.726014][ T6097] vpanic+0x281/0x750 [ 128.726044][ T6097] ? __pfx__printk+0x10/0x10 [ 128.726065][ T6097] ? __pfx_vpanic+0x10/0x10 [ 128.726103][ T6097] ? is_bpf_text_address+0x26/0x2b0 [ 128.726137][ T6097] panic+0xb9/0xc0 [ 128.726165][ T6097] ? __pfx_panic+0x10/0x10 [ 128.726201][ T6097] __warn+0x31b/0x4b0 [ 128.726229][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.726261][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.726291][ T6097] report_bug+0x2be/0x4f0 [ 128.726319][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.726354][ T6097] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.726381][ T6097] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 128.726407][ T6097] handle_bug+0x84/0x160 [ 128.726427][ T6097] exc_invalid_op+0x1a/0x50 [ 128.726446][ T6097] asm_exc_invalid_op+0x1a/0x20 [ 128.726464][ T6097] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 128.726497][ T6097] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 6d 1f 8b 4c 89 fe e8 1d 9a 07 ff 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 a4 2b [ 128.726514][ T6097] RSP: 0018:ffffc900041bf1a0 EFLAGS: 00010246 [ 128.726533][ T6097] RAX: 3b7a600244a15000 RBX: dffffc0000000000 RCX: ffff88803cfa3b80 [ 128.726550][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.726563][ T6097] RBP: ffffc900041bf298 R08: 0000000000000000 R09: 0000000000000000 [ 128.726577][ T6097] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888049711b30 [ 128.726593][ T6097] R13: 1ffff110092e2366 R14: 00000000ffffffff R15: 000000000000000b [ 128.726616][ T6097] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 128.726642][ T6097] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 128.726675][ T6097] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 128.726707][ T6097] ext4_xattr_set_entry+0xabb/0x1e20 [ 128.726745][ T6097] ext4_xattr_ibody_set+0x254/0x6a0 [ 128.726777][ T6097] ext4_expand_extra_isize_ea+0x13a8/0x1ea0 [ 128.726822][ T6097] __ext4_expand_extra_isize+0x30d/0x400 [ 128.726857][ T6097] __ext4_mark_inode_dirty+0x46c/0x700 [ 128.726884][ T6097] ext4_evict_inode+0x80d/0xee0 [ 128.726911][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.726936][ T6097] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.726957][ T6097] evict+0x504/0x9c0 [ 128.726979][ T6097] ? __pfx_evict+0x10/0x10 [ 128.727003][ T6097] ? iput+0x6d8/0x9d0 [ 128.727032][ T6097] ext4_orphan_cleanup+0xc20/0x1460 [ 128.727058][ T6097] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 128.727080][ T6097] ? ext4_register_li_request+0x640/0x720 [ 128.727108][ T6097] ? errseq_check_and_advance+0x66/0x120 [ 128.727136][ T6097] ext4_fill_super+0x57fa/0x60b0 [ 128.727176][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.727204][ T6097] ? set_blocksize+0x219/0x450 [ 128.727226][ T6097] ? sb_set_blocksize+0x104/0x180 [ 128.727246][ T6097] ? setup_bdev_super+0x4c1/0x5b0 [ 128.727271][ T6097] get_tree_bdev_flags+0x40e/0x4d0 [ 128.727294][ T6097] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.727322][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.727346][ T6097] ? cap_capable+0x11f/0x460 [ 128.727368][ T6097] ? safesetid_security_capable+0xa9/0x1a0 [ 128.727395][ T6097] vfs_get_tree+0x8f/0x2b0 [ 128.727420][ T6097] do_new_mount+0x2a2/0x9e0 [ 128.727448][ T6097] ? ns_capable+0x8a/0xf0 [ 128.727472][ T6097] ? __pfx_do_new_mount+0x10/0x10 [ 128.727497][ T6097] ? path_mount+0x61c/0xfe0 [ 128.727525][ T6097] __se_sys_mount+0x317/0x410 [ 128.727554][ T6097] ? __pfx___se_sys_mount+0x10/0x10 [ 128.727583][ T6097] ? do_syscall_64+0xbe/0x3b0 [ 128.727600][ T6097] ? __x64_sys_mount+0x20/0xc0 [ 128.727627][ T6097] do_syscall_64+0xfa/0x3b0 [ 128.727644][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.727672][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.727691][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 128.727713][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.727731][ T6097] RIP: 0033:0x7fefaad0038a [ 128.727747][ T6097] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.727764][ T6097] RSP: 002b:00007ffdb287c378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.727784][ T6097] RAX: ffffffffffffffda RBX: 00007ffdb287c400 RCX: 00007fefaad0038a [ 128.727799][ T6097] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdb287c3c0 [ 128.727813][ T6097] RBP: 0000200000000180 R08: 00007ffdb287c400 R09: 0000000000800700 [ 128.727826][ T6097] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.727839][ T6097] R13: 00007ffdb287c3c0 R14: 0000000000000473 R15: 0000200000000680 [ 128.727859][ T6097] [ 128.728179][ T6097] Kernel Offset: disabled