Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 2026/01/02 03:34:43 parsed 1 programs [ 69.947870][ T4187] cgroup: Unknown subsys name 'net' [ 70.098520][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.445451][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.452045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.621136][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.570594][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.580136][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.597060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.615396][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.623728][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.633092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.591318][ T4229] chnl_net:caif_netlink_parms(): no params data found [ 74.660742][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.669891][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.678556][ T4229] device bridge_slave_0 entered promiscuous mode [ 74.690760][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.698229][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.707917][ T4229] device bridge_slave_1 entered promiscuous mode [ 74.736901][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.748759][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.781061][ T4229] team0: Port device team_slave_0 added [ 74.789289][ T4229] team0: Port device team_slave_1 added [ 74.813956][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.820972][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.847070][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.860439][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.867499][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.893714][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.935759][ T4229] device hsr_slave_0 entered promiscuous mode [ 74.942810][ T4229] device hsr_slave_1 entered promiscuous mode [ 75.083043][ T4229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.095691][ T4229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.106096][ T4229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.117990][ T4229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.152406][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.159712][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.168024][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.175187][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.239525][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.253989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.266313][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.277051][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.286424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.307818][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.325959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.335112][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.342265][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.389916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.413432][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.420614][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.453404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.463211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.472322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.487908][ T4229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.501026][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.518708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.528749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.558628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.714182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.723218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.739794][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.783210][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.794510][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.819414][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.843718][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.866772][ T4229] device veth0_vlan entered promiscuous mode [ 75.877508][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.888661][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.917629][ T4229] device veth1_vlan entered promiscuous mode [ 75.953312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.961501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.970240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.980001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.990589][ T4229] device veth0_macvtap entered promiscuous mode [ 76.013617][ T4229] device veth1_macvtap entered promiscuous mode [ 76.030466][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.038460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.046831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.054998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.064984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.077053][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.086693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.095587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.107405][ T4229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.117892][ T4229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.127320][ T4229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136267][ T4229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/02 03:34:54 executed programs: 0 [ 78.251223][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 78.300630][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.307865][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.316492][ T4295] device bridge_slave_0 entered promiscuous mode [ 78.325417][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.332896][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.340811][ T4295] device bridge_slave_1 entered promiscuous mode [ 78.366141][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.378399][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.408497][ T4295] team0: Port device team_slave_0 added [ 78.416711][ T4295] team0: Port device team_slave_1 added [ 78.442160][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.449156][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.475306][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.487865][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.494914][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.521111][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.558392][ T4295] device hsr_slave_0 entered promiscuous mode [ 78.565481][ T4295] device hsr_slave_1 entered promiscuous mode [ 78.572611][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.580559][ T4295] Cannot create hsr debugfs directory [ 78.663319][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.172822][ T4259] Bluetooth: hci0: command 0x0409 tx timeout [ 81.339582][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.387008][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.440261][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.251489][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 82.318596][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.346696][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.358268][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.368489][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.438543][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.451529][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.460606][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.471337][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.483530][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.492667][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.501241][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.508386][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.517213][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.528481][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.537424][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.546387][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.553525][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.591429][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.607495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.616742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.626088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.635089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.644721][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.656126][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.689938][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.700150][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.711506][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.720418][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.755218][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.872844][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.880370][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.911315][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.930138][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.939117][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.958204][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.968327][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.978061][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.986888][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.998998][ T4295] device veth0_vlan entered promiscuous mode [ 83.033031][ T4295] device veth1_vlan entered promiscuous mode [ 83.053897][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.063794][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.072339][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.080896][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.091763][ T4295] device veth0_macvtap entered promiscuous mode [ 83.124646][ T4295] device veth1_macvtap entered promiscuous mode [ 83.141343][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.152673][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.163850][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.171488][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.181013][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.189422][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.198799][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.228128][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.238849][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.250885][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.261024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.270009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.281318][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.291680][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.300630][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.309410][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379763][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.399376][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.402397][ T144] device hsr_slave_0 left promiscuous mode [ 83.415322][ T144] device hsr_slave_1 left promiscuous mode [ 83.422784][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.430249][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.439030][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.446908][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.455247][ T144] device bridge_slave_1 left promiscuous mode [ 83.462464][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.477901][ T144] device bridge_slave_0 left promiscuous mode [ 83.484630][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.502560][ T144] device veth1_macvtap left promiscuous mode [ 83.508886][ T144] device veth0_macvtap left promiscuous mode [ 83.515237][ T144] device veth1_vlan left promiscuous mode [ 83.521218][ T144] device veth0_vlan left promiscuous mode [ 83.704603][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.717978][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.731546][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.747047][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.809920][ T144] bond0 (unregistering): Released all slaves [ 83.865960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.880212][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.889604][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.899424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.969294][ T4349] loop0: detected capacity change from 0 to 512 [ 83.977437][ T4349] ======================================================= [ 83.977437][ T4349] WARNING: The mand mount option has been deprecated and [ 83.977437][ T4349] and is ignored by this kernel. Remove the mand [ 83.977437][ T4349] option from the mount to silence this warning. [ 83.977437][ T4349] ======================================================= [ 84.069958][ T4349] [ 84.072447][ T4349] ====================================================== [ 84.079496][ T4349] WARNING: possible circular locking dependency detected [ 84.086641][ T4349] syzkaller #0 Not tainted [ 84.091087][ T4349] ------------------------------------------------------ [ 84.098123][ T4349] syz.0.17/4349 is trying to acquire lock: [ 84.103939][ T4349] ffff88807cff0bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 84.114090][ T4349] [ 84.114090][ T4349] but task is already holding lock: [ 84.121673][ T4349] ffff88805d115088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 84.131538][ T4349] [ 84.131538][ T4349] which lock already depends on the new lock. [ 84.131538][ T4349] [ 84.141959][ T4349] [ 84.141959][ T4349] the existing dependency chain (in reverse order) is: [ 84.150991][ T4349] [ 84.150991][ T4349] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 84.158560][ T4349] down_read+0x44/0x2e0 [ 84.163256][ T4349] ext4_setattr+0x71d/0x19e0 [ 84.168404][ T4349] notify_change+0xbcd/0xee0 [ 84.173522][ T4349] chown_common+0x483/0x610 [ 84.178546][ T4349] do_fchownat+0x164/0x270 [ 84.183492][ T4349] __x64_sys_chown+0x7e/0x90 [ 84.188624][ T4349] do_syscall_64+0x4c/0xa0 [ 84.193563][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.199979][ T4349] [ 84.199979][ T4349] -> #1 (jbd2_handle){++++}-{0:0}: [ 84.207292][ T4349] start_this_handle+0x1338/0x15a0 [ 84.212934][ T4349] jbd2__journal_start+0x2b7/0x5a0 [ 84.218569][ T4349] __ext4_journal_start_sb+0x167/0x360 [ 84.224553][ T4349] ext4_writepages+0xdc2/0x2d20 [ 84.229932][ T4349] do_writepages+0x48d/0x6d0 [ 84.235045][ T4349] filemap_fdatawrite_wbc+0x1eb/0x240 [ 84.240940][ T4349] file_write_and_wait_range+0x129/0x1e0 [ 84.247100][ T4349] ext4_sync_file+0x1ff/0xae0 [ 84.252309][ T4349] __x64_sys_fsync+0x1a5/0x1e0 [ 84.257618][ T4349] do_syscall_64+0x4c/0xa0 [ 84.262571][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.269038][ T4349] [ 84.269038][ T4349] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 84.277461][ T4349] __lock_acquire+0x2c33/0x7c60 [ 84.282848][ T4349] lock_acquire+0x197/0x3f0 [ 84.287895][ T4349] percpu_down_read+0x46/0x1b0 [ 84.293192][ T4349] ext4_writepages+0x1c0/0x2d20 [ 84.298564][ T4349] do_writepages+0x48d/0x6d0 [ 84.303684][ T4349] __writeback_single_inode+0x153/0xda0 [ 84.309774][ T4349] writeback_single_inode+0x221/0x8b0 [ 84.315673][ T4349] write_inode_now+0x217/0x280 [ 84.320964][ T4349] iput+0x5ab/0x8a0 [ 84.323493][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 84.325302][ T4349] ext4_xattr_set_entry+0x10ff/0x3d30 [ 84.337191][ T4349] ext4_xattr_block_set+0x4f7/0x2d30 [ 84.343034][ T4349] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 84.349394][ T4349] __ext4_expand_extra_isize+0x301/0x3e0 [ 84.355556][ T4349] __ext4_mark_inode_dirty+0x469/0x700 [ 84.361558][ T4349] ext4_evict_inode+0xa81/0x1080 [ 84.367018][ T4349] evict+0x485/0x870 [ 84.371439][ T4349] ext4_orphan_cleanup+0xaa9/0x12e0 [ 84.377222][ T4349] ext4_fill_super+0x92f0/0x9a60 [ 84.382695][ T4349] mount_bdev+0x287/0x3c0 [ 84.387571][ T4349] legacy_get_tree+0xe6/0x180 [ 84.392773][ T4349] vfs_get_tree+0x88/0x270 [ 84.397754][ T4349] do_new_mount+0x24a/0xa40 [ 84.402789][ T4349] __se_sys_mount+0x2d6/0x3c0 [ 84.408009][ T4349] do_syscall_64+0x4c/0xa0 [ 84.412960][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.419396][ T4349] [ 84.419396][ T4349] other info that might help us debug this: [ 84.419396][ T4349] [ 84.429648][ T4349] Chain exists of: [ 84.429648][ T4349] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 84.429648][ T4349] [ 84.443042][ T4349] Possible unsafe locking scenario: [ 84.443042][ T4349] [ 84.450506][ T4349] CPU0 CPU1 [ 84.455864][ T4349] ---- ---- [ 84.461227][ T4349] lock(&ei->xattr_sem); [ 84.465552][ T4349] lock(jbd2_handle); [ 84.472148][ T4349] lock(&ei->xattr_sem); [ 84.479038][ T4349] lock(&sbi->s_writepages_rwsem); [ 84.484240][ T4349] [ 84.484240][ T4349] *** DEADLOCK *** [ 84.484240][ T4349] [ 84.492390][ T4349] 3 locks held by syz.0.17/4349: [ 84.497335][ T4349] #0: ffff88807cff20e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 84.507435][ T4349] #1: ffff88807cff2650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 84.516920][ T4349] #2: ffff88805d115088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 84.527193][ T4349] [ 84.527193][ T4349] stack backtrace: [ 84.533115][ T4349] CPU: 0 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0 [ 84.540451][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.550518][ T4349] Call Trace: [ 84.553801][ T4349] [ 84.556736][ T4349] dump_stack_lvl+0x168/0x230 [ 84.561414][ T4349] ? load_image+0x3b0/0x3b0 [ 84.565949][ T4349] ? show_regs_print_info+0x20/0x20 [ 84.571157][ T4349] ? print_circular_bug+0x12b/0x1a0 [ 84.576356][ T4349] check_noncircular+0x274/0x310 [ 84.581320][ T4349] ? add_chain_block+0x940/0x940 [ 84.586254][ T4349] ? lockdep_lock+0xdc/0x1e0 [ 84.590940][ T4349] ? lockdep_unlock+0x134/0x2d0 [ 84.595802][ T4349] ? mark_lock+0x94/0x320 [ 84.600134][ T4349] __lock_acquire+0x2c33/0x7c60 [ 84.604999][ T4349] ? verify_lock_unused+0x140/0x140 [ 84.610202][ T4349] ? verify_lock_unused+0x140/0x140 [ 84.615407][ T4349] ? mark_lock+0x94/0x320 [ 84.619770][ T4349] lock_acquire+0x197/0x3f0 [ 84.624302][ T4349] ? ext4_writepages+0x1c0/0x2d20 [ 84.629335][ T4349] ? check_path+0x40/0x40 [ 84.633669][ T4349] ? __might_sleep+0xf0/0xf0 [ 84.638262][ T4349] ? read_lock_is_recursive+0x10/0x10 [ 84.643816][ T4349] ? mark_lock+0x94/0x320 [ 84.648190][ T4349] ? __lock_acquire+0x13ad/0x7c60 [ 84.653234][ T4349] percpu_down_read+0x46/0x1b0 [ 84.658022][ T4349] ? ext4_writepages+0x1c0/0x2d20 [ 84.663063][ T4349] ext4_writepages+0x1c0/0x2d20 [ 84.667939][ T4349] ? rcu_is_watching+0x11/0xa0 [ 84.672715][ T4349] ? lock_release+0xba/0x870 [ 84.677327][ T4349] ? rcu_lock_release+0x5/0x20 [ 84.682090][ T4349] ? mark_lock+0x94/0x320 [ 84.686441][ T4349] ? verify_lock_unused+0x140/0x140 [ 84.691642][ T4349] ? mark_lock+0x94/0x320 [ 84.695987][ T4349] ? ext4_readpage+0x2e0/0x2e0 [ 84.700766][ T4349] ? __lock_acquire+0x13ad/0x7c60 [ 84.705791][ T4349] ? rcu_lock_release+0x5/0x20 [ 84.710567][ T4349] ? __lock_acquire+0x7c60/0x7c60 [ 84.715595][ T4349] ? do_raw_spin_lock+0x11d/0x280 [ 84.720633][ T4349] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 84.726028][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 84.731271][ T4349] ? ext4_readpage+0x2e0/0x2e0 [ 84.736075][ T4349] do_writepages+0x48d/0x6d0 [ 84.740768][ T4349] ? __writepage+0x130/0x130 [ 84.745400][ T4349] ? writeback_single_inode+0x216/0x8b0 [ 84.750957][ T4349] ? __lock_acquire+0x7c60/0x7c60 [ 84.756076][ T4349] ? do_raw_spin_lock+0x11d/0x280 [ 84.761110][ T4349] __writeback_single_inode+0x153/0xda0 [ 84.766672][ T4349] writeback_single_inode+0x221/0x8b0 [ 84.772062][ T4349] ? write_inode_now+0x280/0x280 [ 84.777041][ T4349] write_inode_now+0x217/0x280 [ 84.781842][ T4349] ? bdi_split_work_to_wbs+0x820/0x820 [ 84.787340][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 84.792554][ T4349] iput+0x5ab/0x8a0 [ 84.796388][ T4349] ext4_xattr_set_entry+0x10ff/0x3d30 [ 84.801876][ T4349] ? ext4_xattr_ibody_set+0x330/0x330 [ 84.807318][ T4349] ? rcu_is_watching+0x11/0xa0 [ 84.812113][ T4349] ? kmem_cache_free+0x14c/0x210 [ 84.817083][ T4349] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 84.823197][ T4349] ext4_xattr_block_set+0x4f7/0x2d30 [ 84.828509][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 84.833723][ T4349] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 84.839482][ T4349] ? ext4_xattr_block_find+0x500/0x500 [ 84.844960][ T4349] ? ext4_xattr_block_find+0x433/0x500 [ 84.850462][ T4349] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 84.856288][ T4349] __ext4_expand_extra_isize+0x301/0x3e0 [ 84.861939][ T4349] __ext4_mark_inode_dirty+0x469/0x700 [ 84.867425][ T4349] ext4_evict_inode+0xa81/0x1080 [ 84.872381][ T4349] ? _raw_spin_unlock+0x24/0x40 [ 84.877278][ T4349] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.883198][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 84.888481][ T4349] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.894390][ T4349] evict+0x485/0x870 [ 84.898306][ T4349] ? __lock_acquire+0x7c60/0x7c60 [ 84.903351][ T4349] ? proc_nr_inodes+0x320/0x320 [ 84.908220][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 84.913437][ T4349] ? _raw_spin_unlock+0x24/0x40 [ 84.918314][ T4349] ? iput+0x706/0x8a0 [ 84.922310][ T4349] ext4_orphan_cleanup+0xaa9/0x12e0 [ 84.927639][ T4349] ? ext4_orphan_del+0xb90/0xb90 [ 84.932603][ T4349] ? errseq_check_and_advance+0x62/0x120 [ 84.938268][ T4349] ext4_fill_super+0x92f0/0x9a60 [ 84.943832][ T4349] ? ext4_mount+0x40/0x40 [ 84.948165][ T4349] ? set_blocksize+0x1f1/0x370 [ 84.952957][ T4349] ? sb_set_blocksize+0xa5/0xe0 [ 84.957831][ T4349] mount_bdev+0x287/0x3c0 [ 84.962165][ T4349] ? ext4_mount+0x40/0x40 [ 84.966523][ T4349] legacy_get_tree+0xe6/0x180 [ 84.971233][ T4349] ? ext4_errno_to_code+0x160/0x160 [ 84.976440][ T4349] vfs_get_tree+0x88/0x270 [ 84.980866][ T4349] do_new_mount+0x24a/0xa40 [ 84.985375][ T4349] __se_sys_mount+0x2d6/0x3c0 [ 84.990060][ T4349] ? __x64_sys_mount+0xc0/0xc0 [ 84.994830][ T4349] ? lockdep_hardirqs_on+0x94/0x140 [ 85.000036][ T4349] ? __x64_sys_mount+0x1c/0xc0 [ 85.004807][ T4349] do_syscall_64+0x4c/0xa0 [ 85.009231][ T4349] ? clear_bhb_loop+0x30/0x80 [ 85.013909][ T4349] ? clear_bhb_loop+0x30/0x80 [ 85.018591][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.024511][ T4349] RIP: 0033:0x7f30a10f7eea [ 85.028946][ T4349] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.048691][ T4349] RSP: 002b:00007ffcd31ec228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.057137][ T4349] RAX: ffffffffffffffda RBX: 00007ffcd31ec2b0 RCX: 00007f30a10f7eea [ 85.065121][ T4349] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007ffcd31ec270 [ 85.073201][ T4349] RBP: 0000200000000180 R08: 00007ffcd31ec2b0 R09: 0000000002808340 [ 85.081202][ T4349] R10: 0000000002808340 R11: 0000000000000246 R12: 0000200000000080 [ 85.089179][ T4349] R13: 00007ffcd31ec270 R14: 000000000000047c R15: 0000200000000640 [ 85.097168][ T4349] [ 85.119316][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 85.136644][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 85.149480][ T4349] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.163423][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 85.177299][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 85.189883][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 85.203767][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 85.216334][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 85.230166][ T4349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 85.244422][ T4349] EXT4-fs (loop0): 1 orphan inode deleted [ 85.250209][ T4349] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobarrier,debug_want_extra_isize=0x000000000000005a,sysvgroups,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue. Quota mode: none.