Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. 2025/07/20 21:16:31 ignoring optional flag "sandboxArg"="0" 2025/07/20 21:16:32 parsed 1 programs [ 75.947729][ T4271] cgroup: Unknown subsys name 'net' [ 76.105345][ T4271] cgroup: Unknown subsys name 'rlimit' [ 77.695675][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.449950][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.458257][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.466597][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.478231][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.486235][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.494091][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.445139][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.461237][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.477627][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.480706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.488072][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.506788][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.694986][ T127] cfg80211: failed to load regulatory.db [ 81.931558][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 82.037542][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.046134][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.055289][ T4347] device bridge_slave_0 entered promiscuous mode [ 82.066717][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.074214][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.083217][ T4347] device bridge_slave_1 entered promiscuous mode [ 82.125045][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.138106][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.177914][ T4347] team0: Port device team_slave_0 added [ 82.197930][ T4347] team0: Port device team_slave_1 added [ 82.219327][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.226505][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.253159][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.274291][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.281470][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.308425][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.343232][ T4347] device hsr_slave_0 entered promiscuous mode [ 82.350422][ T4347] device hsr_slave_1 entered promiscuous mode [ 82.506075][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.518105][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.528516][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.537569][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.647662][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.661392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.672266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.683914][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.700281][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.711238][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.720469][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.728121][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.737172][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.760393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.771575][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.781020][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.788139][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.800900][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.818285][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.833363][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.843381][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.852433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.871944][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.881223][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.894069][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.903096][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.921080][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.930624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.942504][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.118630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.126882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.140178][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.192669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.202810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.220684][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.229059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.238839][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.248457][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.257771][ T4347] device veth0_vlan entered promiscuous mode [ 83.279874][ T4347] device veth1_vlan entered promiscuous mode [ 83.330329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.338693][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.348236][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.357478][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.369645][ T4347] device veth0_macvtap entered promiscuous mode [ 83.378334][ T4347] device veth1_macvtap entered promiscuous mode [ 83.412468][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.421152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.430363][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.438367][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.447810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.462454][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.473699][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.491758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.504316][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.513985][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.523045][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.532346][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.708118][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/20 21:16:42 executed programs: 0 [ 83.992661][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.002265][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.011818][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.020533][ T4322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.028834][ T4322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.038484][ T4322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.163928][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 84.208259][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.215543][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.223795][ T4369] device bridge_slave_0 entered promiscuous mode [ 84.231862][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.239014][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.246988][ T4369] device bridge_slave_1 entered promiscuous mode [ 84.271940][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.282910][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.307218][ T4369] team0: Port device team_slave_0 added [ 84.315351][ T4369] team0: Port device team_slave_1 added [ 84.337209][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.344816][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.371985][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.384657][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.391679][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.418745][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.452846][ T4369] device hsr_slave_0 entered promiscuous mode [ 84.461735][ T4369] device hsr_slave_1 entered promiscuous mode [ 84.471184][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.480278][ T4369] Cannot create hsr debugfs directory [ 85.791225][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.099600][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 88.170064][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 88.269418][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.342742][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.129050][ T9] device hsr_slave_0 left promiscuous mode [ 89.138161][ T9] device hsr_slave_1 left promiscuous mode [ 89.145675][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.156216][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.165269][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.175945][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.184689][ T9] device bridge_slave_1 left promiscuous mode [ 89.194857][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.208461][ T9] device bridge_slave_0 left promiscuous mode [ 89.222898][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.251708][ T9] device veth1_macvtap left promiscuous mode [ 89.258142][ T9] device veth0_macvtap left promiscuous mode [ 89.267926][ T9] device veth1_vlan left promiscuous mode [ 89.274563][ T9] device veth0_vlan left promiscuous mode [ 89.665677][ T9] team0 (unregistering): Port device team_slave_1 removed [ 89.698162][ T9] team0 (unregistering): Port device team_slave_0 removed [ 89.732855][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.765781][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.060539][ T9] bond0 (unregistering): Released all slaves [ 90.161568][ T4369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.172973][ T4369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.182131][ T4369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.194844][ T4369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.249311][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 90.288698][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.305136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.313578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.324384][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.337979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.348156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.360867][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.368042][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.377324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.388113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.397480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.406195][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.413744][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.425267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.438058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.450034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.458822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.467945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.479096][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.490874][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.504810][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.514930][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.528326][ T4369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.542462][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.551342][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.567662][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.754688][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.762832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.775094][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.792666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.801715][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.822524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.831525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.841218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.850178][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.863400][ T4369] device veth0_vlan entered promiscuous mode [ 90.874581][ T4369] device veth1_vlan entered promiscuous mode [ 90.893764][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.903512][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.913263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.924031][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.934918][ T4369] device veth0_macvtap entered promiscuous mode [ 90.948077][ T4369] device veth1_macvtap entered promiscuous mode [ 90.964531][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.974179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.985317][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.993456][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.002641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.014739][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.026034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.035364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.046687][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.056528][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066151][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075255][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138074][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.148679][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.165611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.177982][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.187573][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.199051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.445878][ T4417] loop0: detected capacity change from 0 to 32768 [ 91.456080][ T4417] ======================================================= [ 91.456080][ T4417] WARNING: The mand mount option has been deprecated and [ 91.456080][ T4417] and is ignored by this kernel. Remove the mand [ 91.456080][ T4417] option from the mount to silence this warning. [ 91.456080][ T4417] ======================================================= [ 91.519884][ T4417] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.546954][ T4417] [ 91.549377][ T4417] ====================================================== [ 91.556592][ T4417] WARNING: possible circular locking dependency detected [ 91.563721][ T4417] 6.1.146-syzkaller #0 Not tainted [ 91.569037][ T4417] ------------------------------------------------------ [ 91.576455][ T4417] syz.0.16/4417 is trying to acquire lock: [ 91.582554][ T4417] ffff88806923d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 91.597233][ T4417] [ 91.597233][ T4417] but task is already holding lock: [ 91.604920][ T4417] ffff8880690ea378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 91.615582][ T4417] [ 91.615582][ T4417] which lock already depends on the new lock. [ 91.615582][ T4417] [ 91.626516][ T4417] [ 91.626516][ T4417] the existing dependency chain (in reverse order) is: [ 91.635798][ T4417] [ 91.635798][ T4417] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 91.644091][ T4417] down_read+0x42/0x2d0 [ 91.649096][ T4417] ocfs2_init_acl+0x2fb/0x720 [ 91.654602][ T4417] ocfs2_mknod+0x1463/0x2350 [ 91.659741][ T4417] ocfs2_mkdir+0x1b6/0x4a0 [ 91.664776][ T4417] vfs_mkdir+0x387/0x570 [ 91.670254][ T4417] do_mkdirat+0x1d0/0x430 [ 91.675837][ T4417] __x64_sys_mkdir+0x6a/0x80 [ 91.681226][ T4417] do_syscall_64+0x4c/0xa0 [ 91.686444][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.692872][ T4417] [ 91.692872][ T4417] -> #4 (jbd2_handle){++++}-{0:0}: [ 91.700543][ T4417] start_this_handle+0x1f49/0x2150 [ 91.706463][ T4417] jbd2__journal_start+0x2b7/0x5a0 [ 91.712559][ T4417] jbd2_journal_start+0x26/0x30 [ 91.718141][ T4417] ocfs2_start_trans+0x372/0x6c0 [ 91.723879][ T4417] ocfs2_mknod+0xe6a/0x2350 [ 91.729082][ T4417] ocfs2_mkdir+0x1b6/0x4a0 [ 91.734112][ T4417] vfs_mkdir+0x387/0x570 [ 91.738880][ T4417] do_mkdirat+0x1d0/0x430 [ 91.743738][ T4417] __x64_sys_mkdir+0x6a/0x80 [ 91.748951][ T4417] do_syscall_64+0x4c/0xa0 [ 91.754507][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.761284][ T4417] [ 91.761284][ T4417] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 91.769818][ T4417] down_read+0x42/0x2d0 [ 91.774690][ T4417] ocfs2_start_trans+0x366/0x6c0 [ 91.780347][ T4417] ocfs2_mknod+0xe6a/0x2350 [ 91.785509][ T4417] ocfs2_mkdir+0x1b6/0x4a0 [ 91.790464][ T4417] vfs_mkdir+0x387/0x570 [ 91.795230][ T4417] do_mkdirat+0x1d0/0x430 [ 91.800105][ T4417] __x64_sys_mkdir+0x6a/0x80 [ 91.805239][ T4417] do_syscall_64+0x4c/0xa0 [ 91.810263][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.816774][ T4417] [ 91.816774][ T4417] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 91.824437][ T4417] ocfs2_start_trans+0x267/0x6c0 [ 91.830371][ T4417] ocfs2_mknod+0xe6a/0x2350 [ 91.835497][ T4417] ocfs2_mkdir+0x1b6/0x4a0 [ 91.840535][ T4417] vfs_mkdir+0x387/0x570 [ 91.845302][ T4417] do_mkdirat+0x1d0/0x430 [ 91.850159][ T4417] __x64_sys_mkdir+0x6a/0x80 [ 91.855421][ T4417] do_syscall_64+0x4c/0xa0 [ 91.860558][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.867107][ T4417] [ 91.867107][ T4417] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 91.877926][ T4417] down_write+0x36/0x60 [ 91.882710][ T4417] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 91.889478][ T4417] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 91.896512][ T4417] ocfs2_mknod+0xe18/0x2350 [ 91.901759][ T4417] ocfs2_mkdir+0x1b6/0x4a0 [ 91.906809][ T4417] vfs_mkdir+0x387/0x570 [ 91.911586][ T4417] do_mkdirat+0x1d0/0x430 [ 91.916530][ T4417] __x64_sys_mkdir+0x6a/0x80 [ 91.921655][ T4417] do_syscall_64+0x4c/0xa0 [ 91.926783][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.933396][ T4417] [ 91.933396][ T4417] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 91.944202][ T4417] __lock_acquire+0x2cf8/0x7c50 [ 91.949581][ T4417] lock_acquire+0x1b4/0x490 [ 91.954607][ T4417] down_write+0x36/0x60 [ 91.959312][ T4417] ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 91.965754][ T4417] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 91.972701][ T4417] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 91.978862][ T4417] ocfs2_xattr_set+0xb69/0x11e0 [ 91.984496][ T4417] __vfs_setxattr+0x3e0/0x420 [ 91.989894][ T4417] __vfs_setxattr_noperm+0x129/0x5e0 [ 91.995756][ T4417] vfs_setxattr+0x168/0x2f0 [ 92.000784][ T4417] setxattr+0x2b2/0x2d0 [ 92.005465][ T4417] path_setxattr+0x142/0x280 [ 92.010666][ T4417] __x64_sys_lsetxattr+0xb4/0xd0 [ 92.016241][ T4417] do_syscall_64+0x4c/0xa0 [ 92.021202][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.027653][ T4417] [ 92.027653][ T4417] other info that might help us debug this: [ 92.027653][ T4417] [ 92.038068][ T4417] Chain exists of: [ 92.038068][ T4417] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 92.038068][ T4417] [ 92.054089][ T4417] Possible unsafe locking scenario: [ 92.054089][ T4417] [ 92.061716][ T4417] CPU0 CPU1 [ 92.067080][ T4417] ---- ---- [ 92.072533][ T4417] lock(&oi->ip_xattr_sem); [ 92.077326][ T4417] lock(jbd2_handle); [ 92.083927][ T4417] lock(&oi->ip_xattr_sem); [ 92.091053][ T4417] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 92.098386][ T4417] [ 92.098386][ T4417] *** DEADLOCK *** [ 92.098386][ T4417] [ 92.106704][ T4417] 3 locks held by syz.0.16/4417: [ 92.111660][ T4417] #0: ffff88801e246460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 92.121621][ T4417] #1: ffff8880690ea648 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 92.132183][ T4417] #2: ffff8880690ea378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 92.142230][ T4417] [ 92.142230][ T4417] stack backtrace: [ 92.148119][ T4417] CPU: 1 PID: 4417 Comm: syz.0.16 Not tainted 6.1.146-syzkaller #0 [ 92.156011][ T4417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/19/2025 [ 92.166363][ T4417] Call Trace: [ 92.169824][ T4417] [ 92.172849][ T4417] dump_stack_lvl+0x168/0x22e [ 92.177620][ T4417] ? load_image+0x3b0/0x3b0 [ 92.182226][ T4417] ? show_regs_print_info+0x12/0x12 [ 92.187516][ T4417] ? print_circular_bug+0x12b/0x1a0 [ 92.192815][ T4417] check_noncircular+0x274/0x310 [ 92.197764][ T4417] ? add_chain_block+0x940/0x940 [ 92.202708][ T4417] ? lockdep_lock+0xdc/0x1e0 [ 92.207307][ T4417] ? verify_lock_unused+0x140/0x140 [ 92.212539][ T4417] ? _find_first_zero_bit+0xcf/0x100 [ 92.218009][ T4417] __lock_acquire+0x2cf8/0x7c50 [ 92.222964][ T4417] ? verify_lock_unused+0x140/0x140 [ 92.228553][ T4417] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 92.234320][ T4417] ? do_raw_spin_lock+0x11d/0x280 [ 92.239630][ T4417] ? mutex_unlock+0x10/0x10 [ 92.244283][ T4417] ? __rwlock_init+0x140/0x140 [ 92.249323][ T4417] ? __rwlock_init+0x140/0x140 [ 92.254102][ T4417] ? do_raw_spin_unlock+0x11d/0x230 [ 92.259336][ T4417] lock_acquire+0x1b4/0x490 [ 92.263852][ T4417] ? ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 92.270175][ T4417] ? __might_sleep+0xd0/0xd0 [ 92.274834][ T4417] ? read_lock_is_recursive+0x10/0x10 [ 92.280228][ T4417] down_write+0x36/0x60 [ 92.284396][ T4417] ? ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 92.290573][ T4417] ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 92.296642][ T4417] ? mark_lock+0x94/0x320 [ 92.301614][ T4417] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 92.307704][ T4417] ? lock_chain_count+0x20/0x20 [ 92.312594][ T4417] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 92.318775][ T4417] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 92.324683][ T4417] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 92.331047][ T4417] ? _raw_spin_unlock+0x40/0x40 [ 92.336110][ T4417] ? stack_trace_save+0x98/0xe0 [ 92.341076][ T4417] ? __stack_depot_save+0x421/0x460 [ 92.346550][ T4417] ? kasan_set_track+0x60/0x70 [ 92.351338][ T4417] ? kasan_set_track+0x4b/0x70 [ 92.356124][ T4417] ? __kasan_kmalloc+0x8e/0xa0 [ 92.360898][ T4417] ? ocfs2_reserve_new_metadata_blocks+0x110/0x940 [ 92.368306][ T4417] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 92.375348][ T4417] ? ocfs2_xattr_set+0xb69/0x11e0 [ 92.380481][ T4417] ? __vfs_setxattr+0x3e0/0x420 [ 92.385527][ T4417] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 92.391547][ T4417] ? vfs_setxattr+0x168/0x2f0 [ 92.396372][ T4417] ? setxattr+0x2b2/0x2d0 [ 92.400823][ T4417] ? path_setxattr+0x142/0x280 [ 92.405595][ T4417] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 92.410903][ T4417] ? do_syscall_64+0x4c/0xa0 [ 92.415597][ T4417] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.421700][ T4417] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 92.428042][ T4417] ? ocfs2_init_steal_slots+0x150/0x150 [ 92.433606][ T4417] ? ocfs2_xattr_block_set+0x2da0/0x2da0 [ 92.439246][ T4417] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 92.444979][ T4417] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 92.451162][ T4417] ? ocfs2_truncate_log_needs_flush+0x131/0x2e0 [ 92.457413][ T4417] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 92.463323][ T4417] ? preempt_count_add+0x8d/0x190 [ 92.468356][ T4417] ? up_write+0x1bb/0x420 [ 92.472878][ T4417] ocfs2_xattr_set+0xb69/0x11e0 [ 92.477855][ T4417] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 92.483955][ T4417] ? verify_lock_unused+0x140/0x140 [ 92.489351][ T4417] ? aa_get_newest_label+0xf4/0x5c0 [ 92.494595][ T4417] ? posix_xattr_acl+0x8f/0xb0 [ 92.499453][ T4417] ? evm_protect_xattr+0x333/0x990 [ 92.504834][ T4417] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 92.510328][ T4417] __vfs_setxattr+0x3e0/0x420 [ 92.515203][ T4417] __vfs_setxattr_noperm+0x129/0x5e0 [ 92.520499][ T4417] vfs_setxattr+0x168/0x2f0 [ 92.525020][ T4417] ? xattr_permission+0x500/0x500 [ 92.530208][ T4417] ? strncpy_from_user+0x1e3/0x350 [ 92.535502][ T4417] setxattr+0x2b2/0x2d0 [ 92.539754][ T4417] ? path_setxattr+0x280/0x280 [ 92.544533][ T4417] ? __mnt_want_write+0x21f/0x2a0 [ 92.549762][ T4417] path_setxattr+0x142/0x280 [ 92.554393][ T4417] ? simple_xattr_list_add+0xf0/0xf0 [ 92.559702][ T4417] ? lock_chain_count+0x20/0x20 [ 92.564570][ T4417] __x64_sys_lsetxattr+0xb4/0xd0 [ 92.569514][ T4417] do_syscall_64+0x4c/0xa0 [ 92.573935][ T4417] ? clear_bhb_loop+0x60/0xb0 [ 92.578879][ T4417] ? clear_bhb_loop+0x60/0xb0 [ 92.583986][ T4417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.589989][ T4417] RIP: 0033:0x7f054198e9a9 [ 92.594414][ T4417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.614573][ T4417] RSP: 002b:00007fffa7603848 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 92.623094][ T4417] RAX: ffffffffffffffda RBX: 00007f0541bb5fa0 RCX: 00007f054198e9a9 [ 92.631454][ T4417] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 92.639800][ T4417] RBP: 00007f0541a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 92.647878][ T4417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.656206][ T4417] R13: 00007f0541bb5fa0 R14: 00007f0541bb5fa0 R15: 0000000000000005 [ 92.664205][ T4417] [ 92.679240][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 92.711492][ T4369] ocfs2: Unmounting device (7,0) on (node local)