Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. 2025/12/06 07:27:01 parsed 1 programs [ 57.878018][ T4189] cgroup: Unknown subsys name 'net' [ 58.016939][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.520201][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.121514][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 61.164571][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.172536][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.180599][ T4201] device bridge_slave_0 entered promiscuous mode [ 61.189506][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.196798][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.204660][ T4201] device bridge_slave_1 entered promiscuous mode [ 61.226542][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.237196][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.262198][ T4201] team0: Port device team_slave_0 added [ 61.269571][ T4201] team0: Port device team_slave_1 added [ 61.286599][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.293889][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.319916][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.332724][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.339681][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.365621][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.396187][ T4201] device hsr_slave_0 entered promiscuous mode [ 61.403138][ T4201] device hsr_slave_1 entered promiscuous mode [ 61.486470][ T4201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.496730][ T4201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.505516][ T4201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.515855][ T4201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.540967][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.548163][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.555987][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.563059][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.600099][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.621797][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.628649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.640430][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.651925][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.661985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 61.684618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.693641][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.700709][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.710034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.718986][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.726459][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.753409][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.768264][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.779167][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.792846][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.806439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.818589][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.953854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.963192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.979404][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.006106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.029331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.039015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.048923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.060443][ T4201] device veth0_vlan entered promiscuous mode [ 62.073326][ T4201] device veth1_vlan entered promiscuous mode [ 62.091630][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.099719][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.114957][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.125641][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.140348][ T4201] device veth0_macvtap entered promiscuous mode [ 62.152956][ T4201] device veth1_macvtap entered promiscuous mode [ 62.170098][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.182638][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.189927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.198545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.208171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.220902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.240717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.252467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.267394][ T4201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.276595][ T4201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.285357][ T4201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.294358][ T4201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.681301][ T1478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.699176][ T1478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.706863][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.718832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.730108][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.743812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.100389][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/06 07:27:09 executed programs: 0 [ 64.521547][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 64.559376][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.566539][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.574575][ T4282] device bridge_slave_0 entered promiscuous mode [ 64.583103][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.590203][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.598139][ T4282] device bridge_slave_1 entered promiscuous mode [ 64.618469][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.629293][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.651632][ T4282] team0: Port device team_slave_0 added [ 64.658700][ T4282] team0: Port device team_slave_1 added [ 64.676513][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.683566][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.709804][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.723728][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.730672][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.756703][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.785141][ T4282] device hsr_slave_0 entered promiscuous mode [ 64.791971][ T4282] device hsr_slave_1 entered promiscuous mode [ 64.798514][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.806408][ T4282] Cannot create hsr debugfs directory [ 65.818087][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.452417][ T4215] Bluetooth: hci0: command 0x0409 tx timeout [ 67.695956][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.748346][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.531305][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 68.633128][ T4282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.644107][ T4282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.661825][ T4282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.670632][ T4282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.736264][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.749068][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.757242][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.768473][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.784801][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.795027][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.804002][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.811155][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.819136][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.839664][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.848256][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.859063][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.866158][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.881661][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.890433][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.899291][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.908646][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.917892][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.926910][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.936747][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.960421][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.971769][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.988022][ T145] device hsr_slave_0 left promiscuous mode [ 68.995042][ T145] device hsr_slave_1 left promiscuous mode [ 69.002025][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.009426][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.017932][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.025698][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.033410][ T145] device bridge_slave_1 left promiscuous mode [ 69.040323][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.054662][ T145] device bridge_slave_0 left promiscuous mode [ 69.060839][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.078244][ T145] device veth1_macvtap left promiscuous mode [ 69.084488][ T145] device veth0_macvtap left promiscuous mode [ 69.090523][ T145] device veth1_vlan left promiscuous mode [ 69.097101][ T145] device veth0_vlan left promiscuous mode [ 69.229989][ T145] team0 (unregistering): Port device team_slave_1 removed [ 69.246535][ T145] team0 (unregistering): Port device team_slave_0 removed [ 69.258509][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.273659][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.328342][ T145] bond0 (unregistering): Released all slaves [ 69.406816][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.416646][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.426046][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.436816][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.450926][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.544478][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.552596][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.574039][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.590464][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.599432][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.624587][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.633679][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.646326][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.655643][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.665628][ T4282] device veth0_vlan entered promiscuous mode [ 69.676241][ T4282] device veth1_vlan entered promiscuous mode [ 69.696292][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.704478][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.712727][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.721357][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.733580][ T4282] device veth0_macvtap entered promiscuous mode [ 69.743735][ T4282] device veth1_macvtap entered promiscuous mode [ 69.751598][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.759570][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.778446][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.786408][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.812588][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.825534][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.833740][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.851780][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.875024][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.883910][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899217][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.908269][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.979343][ T1478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.991363][ T1478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.004601][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.036195][ T1478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.044975][ T1478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.057288][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.127614][ T4333] loop0: detected capacity change from 0 to 512 [ 70.182167][ T4333] ======================================================= [ 70.182167][ T4333] WARNING: The mand mount option has been deprecated and [ 70.182167][ T4333] and is ignored by this kernel. Remove the mand [ 70.182167][ T4333] option from the mount to silence this warning. [ 70.182167][ T4333] ======================================================= [ 70.336325][ T4333] [ 70.338704][ T4333] ====================================================== [ 70.345726][ T4333] WARNING: possible circular locking dependency detected [ 70.352753][ T4333] syzkaller #0 Not tainted [ 70.357173][ T4333] ------------------------------------------------------ [ 70.364191][ T4333] syz.0.17/4333 is trying to acquire lock: [ 70.369996][ T4333] ffff88807e9ecbd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 70.380106][ T4333] [ 70.380106][ T4333] but task is already holding lock: [ 70.387469][ T4333] ffff888061901eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 70.397314][ T4333] [ 70.397314][ T4333] which lock already depends on the new lock. [ 70.397314][ T4333] [ 70.407727][ T4333] [ 70.407727][ T4333] the existing dependency chain (in reverse order) is: [ 70.416745][ T4333] [ 70.416745][ T4333] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 70.424316][ T4333] down_read+0x44/0x2e0 [ 70.429031][ T4333] ext4_setattr+0x71d/0x19e0 [ 70.434151][ T4333] notify_change+0xbcd/0xee0 [ 70.439263][ T4333] chown_common+0x483/0x610 [ 70.444286][ T4333] do_fchownat+0x164/0x270 [ 70.449219][ T4333] __x64_sys_chown+0x7e/0x90 [ 70.454325][ T4333] do_syscall_64+0x4c/0xa0 [ 70.459258][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.465666][ T4333] [ 70.465666][ T4333] -> #1 (jbd2_handle){++++}-{0:0}: [ 70.472954][ T4333] start_this_handle+0x1338/0x15a0 [ 70.478581][ T4333] jbd2__journal_start+0x2b7/0x5a0 [ 70.484207][ T4333] __ext4_journal_start_sb+0x167/0x360 [ 70.490183][ T4333] ext4_writepages+0xdc2/0x2d20 [ 70.495550][ T4333] do_writepages+0x48d/0x6d0 [ 70.500657][ T4333] filemap_fdatawrite_wbc+0x1eb/0x240 [ 70.506557][ T4333] file_write_and_wait_range+0x129/0x1e0 [ 70.512707][ T4333] ext4_sync_file+0x1ff/0xae0 [ 70.517906][ T4333] __x64_sys_fsync+0x1a5/0x1e0 [ 70.523194][ T4333] do_syscall_64+0x4c/0xa0 [ 70.528214][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.534632][ T4333] [ 70.534632][ T4333] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 70.543049][ T4333] __lock_acquire+0x2c33/0x7c60 [ 70.548503][ T4333] lock_acquire+0x197/0x3f0 [ 70.553523][ T4333] percpu_down_read+0x46/0x1b0 [ 70.558804][ T4333] ext4_writepages+0x1c0/0x2d20 [ 70.564174][ T4333] do_writepages+0x48d/0x6d0 [ 70.569283][ T4333] __writeback_single_inode+0x153/0xda0 [ 70.575435][ T4333] writeback_single_inode+0x221/0x8b0 [ 70.581330][ T4333] write_inode_now+0x217/0x280 [ 70.586610][ T4333] iput+0x5ab/0x8a0 [ 70.590938][ T4333] ext4_xattr_set_entry+0x10ff/0x3d30 [ 70.596826][ T4333] ext4_xattr_block_set+0x4f7/0x2d30 [ 70.602716][ T4333] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 70.609041][ T4333] __ext4_expand_extra_isize+0x301/0x3e0 [ 70.615194][ T4333] __ext4_mark_inode_dirty+0x469/0x700 [ 70.621167][ T4333] ext4_evict_inode+0xa81/0x1080 [ 70.626618][ T4333] evict+0x485/0x870 [ 70.631034][ T4333] ext4_orphan_cleanup+0xaa9/0x12e0 [ 70.636747][ T4333] ext4_fill_super+0x92f0/0x9a60 [ 70.642199][ T4333] mount_bdev+0x287/0x3c0 [ 70.647047][ T4333] legacy_get_tree+0xe6/0x180 [ 70.652251][ T4333] vfs_get_tree+0x88/0x270 [ 70.657181][ T4333] do_new_mount+0x24a/0xa40 [ 70.662198][ T4333] __se_sys_mount+0x2d6/0x3c0 [ 70.667395][ T4333] do_syscall_64+0x4c/0xa0 [ 70.672326][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.678734][ T4333] [ 70.678734][ T4333] other info that might help us debug this: [ 70.678734][ T4333] [ 70.688979][ T4333] Chain exists of: [ 70.688979][ T4333] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 70.688979][ T4333] [ 70.702352][ T4333] Possible unsafe locking scenario: [ 70.702352][ T4333] [ 70.709810][ T4333] CPU0 CPU1 [ 70.715169][ T4333] ---- ---- [ 70.720528][ T4333] lock(&ei->xattr_sem); [ 70.724852][ T4333] lock(jbd2_handle); [ 70.731446][ T4333] lock(&ei->xattr_sem); [ 70.738305][ T4333] lock(&sbi->s_writepages_rwsem); [ 70.743510][ T4333] [ 70.743510][ T4333] *** DEADLOCK *** [ 70.743510][ T4333] [ 70.751655][ T4333] 3 locks held by syz.0.17/4333: [ 70.756593][ T4333] #0: ffff88807e9ee0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 70.766788][ T4333] #1: ffff88807e9ee650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 70.776273][ T4333] #2: ffff888061901eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 70.786534][ T4333] [ 70.786534][ T4333] stack backtrace: [ 70.792413][ T4333] CPU: 1 PID: 4333 Comm: syz.0.17 Not tainted syzkaller #0 [ 70.799608][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.809655][ T4333] Call Trace: [ 70.812932][ T4333] [ 70.815894][ T4333] dump_stack_lvl+0x168/0x230 [ 70.820575][ T4333] ? load_image+0x3b0/0x3b0 [ 70.825078][ T4333] ? show_regs_print_info+0x20/0x20 [ 70.830281][ T4333] ? print_circular_bug+0x12b/0x1a0 [ 70.835480][ T4333] check_noncircular+0x274/0x310 [ 70.840416][ T4333] ? add_chain_block+0x940/0x940 [ 70.845347][ T4333] ? lockdep_lock+0xdc/0x1e0 [ 70.849934][ T4333] ? lockdep_unlock+0x134/0x2d0 [ 70.854782][ T4333] ? mark_lock+0x94/0x320 [ 70.859116][ T4333] __lock_acquire+0x2c33/0x7c60 [ 70.863970][ T4333] ? verify_lock_unused+0x140/0x140 [ 70.869164][ T4333] ? verify_lock_unused+0x140/0x140 [ 70.874446][ T4333] ? mark_lock+0x94/0x320 [ 70.878780][ T4333] lock_acquire+0x197/0x3f0 [ 70.883278][ T4333] ? ext4_writepages+0x1c0/0x2d20 [ 70.888322][ T4333] ? check_path+0x40/0x40 [ 70.892645][ T4333] ? __might_sleep+0xf0/0xf0 [ 70.897231][ T4333] ? read_lock_is_recursive+0x10/0x10 [ 70.902599][ T4333] ? mark_lock+0x94/0x320 [ 70.906924][ T4333] ? __lock_acquire+0x13ad/0x7c60 [ 70.911945][ T4333] percpu_down_read+0x46/0x1b0 [ 70.916706][ T4333] ? ext4_writepages+0x1c0/0x2d20 [ 70.921723][ T4333] ext4_writepages+0x1c0/0x2d20 [ 70.926569][ T4333] ? rcu_is_watching+0x11/0xa0 [ 70.931326][ T4333] ? lock_release+0xba/0x870 [ 70.935916][ T4333] ? rcu_lock_release+0x5/0x20 [ 70.940676][ T4333] ? mark_lock+0x94/0x320 [ 70.944999][ T4333] ? verify_lock_unused+0x140/0x140 [ 70.950194][ T4333] ? mark_lock+0x94/0x320 [ 70.954519][ T4333] ? ext4_readpage+0x2e0/0x2e0 [ 70.959276][ T4333] ? __lock_acquire+0x13ad/0x7c60 [ 70.964299][ T4333] ? rcu_lock_release+0x5/0x20 [ 70.969064][ T4333] ? __lock_acquire+0x7c60/0x7c60 [ 70.974089][ T4333] ? do_raw_spin_lock+0x11d/0x280 [ 70.979121][ T4333] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 70.984487][ T4333] ? do_raw_spin_unlock+0x11d/0x230 [ 70.989676][ T4333] ? ext4_readpage+0x2e0/0x2e0 [ 70.994431][ T4333] do_writepages+0x48d/0x6d0 [ 70.999019][ T4333] ? __writepage+0x130/0x130 [ 71.003601][ T4333] ? writeback_single_inode+0x216/0x8b0 [ 71.009142][ T4333] ? __lock_acquire+0x7c60/0x7c60 [ 71.014160][ T4333] ? do_raw_spin_lock+0x11d/0x280 [ 71.019180][ T4333] __writeback_single_inode+0x153/0xda0 [ 71.024721][ T4333] writeback_single_inode+0x221/0x8b0 [ 71.030092][ T4333] ? write_inode_now+0x280/0x280 [ 71.035034][ T4333] write_inode_now+0x217/0x280 [ 71.039793][ T4333] ? bdi_split_work_to_wbs+0x820/0x820 [ 71.045252][ T4333] ? do_raw_spin_unlock+0x11d/0x230 [ 71.050441][ T4333] iput+0x5ab/0x8a0 [ 71.054247][ T4333] ext4_xattr_set_entry+0x10ff/0x3d30 [ 71.059621][ T4333] ? ext4_xattr_ibody_set+0x330/0x330 [ 71.064988][ T4333] ? rcu_is_watching+0x11/0xa0 [ 71.069743][ T4333] ? kmem_cache_free+0x14c/0x210 [ 71.074674][ T4333] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 71.080736][ T4333] ext4_xattr_block_set+0x4f7/0x2d30 [ 71.086062][ T4333] ? do_raw_spin_unlock+0x11d/0x230 [ 71.091268][ T4333] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 71.096982][ T4333] ? ext4_xattr_block_find+0x500/0x500 [ 71.102438][ T4333] ? ext4_xattr_block_find+0x433/0x500 [ 71.107936][ T4333] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 71.113751][ T4333] __ext4_expand_extra_isize+0x301/0x3e0 [ 71.119383][ T4333] __ext4_mark_inode_dirty+0x469/0x700 [ 71.124840][ T4333] ext4_evict_inode+0xa81/0x1080 [ 71.129778][ T4333] ? _raw_spin_unlock+0x24/0x40 [ 71.134628][ T4333] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 71.140515][ T4333] ? do_raw_spin_unlock+0x11d/0x230 [ 71.145713][ T4333] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 71.151602][ T4333] evict+0x485/0x870 [ 71.155498][ T4333] ? __lock_acquire+0x7c60/0x7c60 [ 71.160520][ T4333] ? proc_nr_inodes+0x320/0x320 [ 71.165364][ T4333] ? do_raw_spin_unlock+0x11d/0x230 [ 71.170556][ T4333] ? _raw_spin_unlock+0x24/0x40 [ 71.175400][ T4333] ? iput+0x706/0x8a0 [ 71.179382][ T4333] ext4_orphan_cleanup+0xaa9/0x12e0 [ 71.184575][ T4333] ? ext4_orphan_del+0xb90/0xb90 [ 71.189507][ T4333] ? errseq_check_and_advance+0x62/0x120 [ 71.195135][ T4333] ext4_fill_super+0x92f0/0x9a60 [ 71.200102][ T4333] ? ext4_mount+0x40/0x40 [ 71.204423][ T4333] ? set_blocksize+0x1f1/0x370 [ 71.209182][ T4333] ? sb_set_blocksize+0xa5/0xe0 [ 71.214029][ T4333] mount_bdev+0x287/0x3c0 [ 71.218495][ T4333] ? ext4_mount+0x40/0x40 [ 71.222834][ T4333] legacy_get_tree+0xe6/0x180 [ 71.227521][ T4333] ? ext4_errno_to_code+0x160/0x160 [ 71.232729][ T4333] vfs_get_tree+0x88/0x270 [ 71.237164][ T4333] do_new_mount+0x24a/0xa40 [ 71.241675][ T4333] __se_sys_mount+0x2d6/0x3c0 [ 71.246361][ T4333] ? __x64_sys_mount+0xc0/0xc0 [ 71.251126][ T4333] ? lockdep_hardirqs_on+0x94/0x140 [ 71.256319][ T4333] ? __x64_sys_mount+0x1c/0xc0 [ 71.261078][ T4333] do_syscall_64+0x4c/0xa0 [ 71.265500][ T4333] ? clear_bhb_loop+0x30/0x80 [ 71.270177][ T4333] ? clear_bhb_loop+0x30/0x80 [ 71.274876][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.280765][ T4333] RIP: 0033:0x7f099e72aeea [ 71.285316][ T4333] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.304933][ T4333] RSP: 002b:00007ffd93d2af78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.313351][ T4333] RAX: ffffffffffffffda RBX: 00007ffd93d2b000 RCX: 00007f099e72aeea [ 71.321321][ T4333] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007ffd93d2afc0 [ 71.329288][ T4333] RBP: 0000200000000180 R08: 00007ffd93d2b000 R09: 0000000002808340 [ 71.337258][ T4333] R10: 0000000002808340 R11: 0000000000000246 R12: 0000200000000080 [ 71.345222][ T4333] R13: 00007ffd93d2afc0 R14: 000000000000047c R15: 0000200000000640 [ 71.353194][ T4333] [ 71.358966][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365318][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374247][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 71.392087][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 71.405984][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 71.419814][ T4333] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.433100][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 71.451885][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 71.464673][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 71.481348][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 71.500816][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 71.514319][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 71.527472][ T4333] EXT4-fs (loop0): 1 orphan inode deleted [ 71.534310][ T4333] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,norecovery,debug_want_extra_isize=0x000000000000005a,dax=inode,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue. Quota mode: none.