Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 2026/02/04 12:49:34 parsed 1 programs [ 132.128690][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.135251][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.122829][ T6178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.961271][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 138.043846][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.051396][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.058945][ T6209] bridge_slave_0: entered allmulticast mode [ 138.066371][ T6209] bridge_slave_0: entered promiscuous mode [ 138.074577][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.082400][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.089760][ T6209] bridge_slave_1: entered allmulticast mode [ 138.098905][ T6209] bridge_slave_1: entered promiscuous mode [ 138.132230][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.144478][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.181078][ T6209] team0: Port device team_slave_0 added [ 138.189148][ T6209] team0: Port device team_slave_1 added [ 138.220924][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.228232][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.254197][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.266549][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.273499][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.299521][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.351567][ T6209] hsr_slave_0: entered promiscuous mode [ 138.358011][ T6209] hsr_slave_1: entered promiscuous mode [ 138.835920][ T6209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.847592][ T6209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.862954][ T6209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.886356][ T6209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.020699][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.045339][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.071559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.078729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.089197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.096415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.143376][ T6209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.389272][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.445165][ T6209] veth0_vlan: entered promiscuous mode [ 139.460164][ T6209] veth1_vlan: entered promiscuous mode [ 139.497920][ T6209] veth0_macvtap: entered promiscuous mode [ 139.508425][ T6209] veth1_macvtap: entered promiscuous mode [ 139.535947][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.553747][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.579782][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.596783][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.618696][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.645308][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.829057][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.936112][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.006009][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.072855][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.650493][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.658855][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.666519][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.675941][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.683598][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.105871][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.113702][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.149401][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.160704][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.570942][ T12] bridge_slave_1: left allmulticast mode [ 142.576844][ T12] bridge_slave_1: left promiscuous mode [ 142.582580][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.594972][ T12] bridge_slave_0: left allmulticast mode [ 142.600611][ T12] bridge_slave_0: left promiscuous mode [ 142.606795][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.923244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.936519][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.948393][ T12] bond0 (unregistering): Released all slaves [ 143.074911][ T12] hsr_slave_0: left promiscuous mode [ 143.095074][ T12] hsr_slave_1: left promiscuous mode [ 143.101172][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.111660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.122391][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.133724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.189582][ T12] veth1_macvtap: left promiscuous mode [ 143.207043][ T12] veth0_macvtap: left promiscuous mode [ 143.212708][ T12] veth1_vlan: left promiscuous mode [ 143.226934][ T12] veth0_vlan: left promiscuous mode [ 143.623135][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.659387][ T12] team0 (unregistering): Port device team_slave_0 removed 2026/02/04 12:49:51 executed programs: 0 [ 144.924817][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.934260][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.942159][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.950809][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.966204][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.475953][ T6408] chnl_net:caif_netlink_parms(): no params data found [ 145.670051][ T6408] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.677346][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.684559][ T6408] bridge_slave_0: entered allmulticast mode [ 145.692397][ T6408] bridge_slave_0: entered promiscuous mode [ 145.712801][ T6408] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.724492][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.731679][ T6408] bridge_slave_1: entered allmulticast mode [ 145.749357][ T6408] bridge_slave_1: entered promiscuous mode [ 145.849191][ T6408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.876031][ T6408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.959515][ T6408] team0: Port device team_slave_0 added [ 145.971506][ T6408] team0: Port device team_slave_1 added [ 146.060443][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.069877][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.097313][ T6408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.110351][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.117650][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.153177][ T6408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.228939][ T6408] hsr_slave_0: entered promiscuous mode [ 146.235810][ T6408] hsr_slave_1: entered promiscuous mode [ 146.800102][ T6408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.816114][ T6408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.829042][ T6408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.841393][ T6408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.930372][ T6408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.950812][ T6408] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.964914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.972027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.986244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.993375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.008836][ T5139] Bluetooth: hci0: command tx timeout [ 147.190389][ T6408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.232657][ T6408] veth0_vlan: entered promiscuous mode [ 147.247447][ T6408] veth1_vlan: entered promiscuous mode [ 147.276838][ T6408] veth0_macvtap: entered promiscuous mode [ 147.288005][ T6408] veth1_macvtap: entered promiscuous mode [ 147.308033][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.321795][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.336846][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.347127][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.361860][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.370885][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.425242][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.435610][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.465471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.473295][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.543096][ T6466] loop0: detected capacity change from 0 to 1024 [ 147.616889][ T6466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.697029][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.800889][ T6471] loop0: detected capacity change from 0 to 1024 [ 147.874715][ T6471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.926365][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.988363][ T6475] loop0: detected capacity change from 0 to 1024 [ 148.017116][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.067248][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.139178][ T6479] loop0: detected capacity change from 0 to 1024 [ 148.197469][ T6479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.243507][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.306753][ T6483] loop0: detected capacity change from 0 to 1024 [ 148.348090][ T6483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.393821][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.451708][ T6487] loop0: detected capacity change from 0 to 1024 [ 148.501743][ T6487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.558458][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.612012][ T6491] loop0: detected capacity change from 0 to 1024 [ 148.667195][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.726226][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.800759][ T6495] loop0: detected capacity change from 0 to 1024 [ 148.829397][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.874358][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.943040][ T6499] loop0: detected capacity change from 0 to 1024 [ 148.972213][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.029409][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.084075][ T5139] Bluetooth: hci0: command tx timeout 2026/02/04 12:49:56 executed programs: 12 [ 150.447748][ T6506] loop0: detected capacity change from 0 to 1024 [ 150.480434][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.528390][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.601058][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.649534][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.744174][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.808776][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.888940][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.931865][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.039597][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.084822][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.166556][ T5139] Bluetooth: hci0: command tx timeout [ 151.209500][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.249871][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.327262][ T6531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.393484][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.478461][ T6535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.529966][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.620481][ T6539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.661823][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.760474][ T6543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.808395][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.883823][ T6547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.943852][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.050203][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.110870][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.182047][ T6555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.226471][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.300768][ T6559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.367240][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.459556][ T6563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.518389][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.572567][ T6567] set_capacity_and_notify: 14 callbacks suppressed [ 152.572584][ T6567] loop0: detected capacity change from 0 to 1024 [ 152.627372][ T6567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.689778][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.741352][ T6571] loop0: detected capacity change from 0 to 1024 [ 152.768900][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.813372][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.244923][ T5139] Bluetooth: hci0: command tx timeout [ 154.231436][ T6578] loop0: detected capacity change from 0 to 1024 [ 154.278404][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.319905][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.369661][ T6582] loop0: detected capacity change from 0 to 1024 [ 154.409261][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.460226][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.502767][ T6586] loop0: detected capacity change from 0 to 1024 [ 154.536079][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.596244][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.650162][ T6591] loop0: detected capacity change from 0 to 1024 [ 154.675007][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.736315][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.787007][ T6595] loop0: detected capacity change from 0 to 1024 [ 154.832918][ T6595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.888799][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.939854][ T6599] loop0: detected capacity change from 0 to 1024 [ 154.977722][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.022612][ T6408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.066309][ T6603] loop0: detected capacity change from 0 to 1024 [ 155.199819][ T6607] loop0: detected capacity change from 0 to 1024 2026/02/04 12:50:01 executed programs: 40 [ 157.373803][ T6638] [ 157.376169][ T6638] ====================================================== [ 157.383179][ T6638] WARNING: possible circular locking dependency detected [ 157.390189][ T6638] syzkaller #0 Not tainted [ 157.394586][ T6638] ------------------------------------------------------ [ 157.401599][ T6638] syz.0.60/6638 is trying to acquire lock: [ 157.407404][ T6638] ffff88805baea0c0 (&sb->s_type->i_mutex_key#11/1){+.+.}-{4:4}, at: ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.419360][ T6638] [ 157.419360][ T6638] but task is already holding lock: [ 157.426709][ T6638] ffff88805bae28f0 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_truncate+0xacf/0x1300 [ 157.436047][ T6638] [ 157.436047][ T6638] which lock already depends on the new lock. [ 157.436047][ T6638] [ 157.446522][ T6638] [ 157.446522][ T6638] the existing dependency chain (in reverse order) is: [ 157.455519][ T6638] [ 157.455519][ T6638] -> #1 (&ei->i_data_sem/3){++++}-{4:4}: [ 157.463362][ T6638] down_write+0x96/0x200 [ 157.468136][ T6638] ext4_xattr_inode_lookup_create+0x14f6/0x1cf0 [ 157.474892][ T6638] ext4_xattr_ibody_set+0x202/0x6a0 [ 157.480597][ T6638] ext4_xattr_set_handle+0xcc8/0x14c0 [ 157.486474][ T6638] ext4_xattr_set+0x255/0x340 [ 157.491657][ T6638] __vfs_setxattr+0x43c/0x480 [ 157.496849][ T6638] __vfs_setxattr_noperm+0x12d/0x660 [ 157.502648][ T6638] vfs_setxattr+0x16a/0x2e0 [ 157.507647][ T6638] filename_setxattr+0x281/0x630 [ 157.513086][ T6638] path_setxattrat+0x3f3/0x430 [ 157.518426][ T6638] __x64_sys_setxattr+0xbc/0xe0 [ 157.523780][ T6638] do_syscall_64+0xe2/0xf80 [ 157.528786][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.535191][ T6638] [ 157.535191][ T6638] -> #0 (&sb->s_type->i_mutex_key#11/1){+.+.}-{4:4}: [ 157.544055][ T6638] __lock_acquire+0x15a5/0x2cf0 [ 157.549420][ T6638] lock_acquire+0x106/0x330 [ 157.554438][ T6638] down_write+0x96/0x200 [ 157.559189][ T6638] ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.566002][ T6638] ext4_xattr_block_set+0x229/0x2ad0 [ 157.571969][ T6638] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 157.578374][ T6638] __ext4_expand_extra_isize+0x30d/0x400 [ 157.584526][ T6638] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 157.590498][ T6638] ext4_ext_truncate+0xac/0x2f0 [ 157.595870][ T6638] ext4_truncate+0xb63/0x1300 [ 157.601061][ T6638] ext4_evict_inode+0x863/0xe60 [ 157.606440][ T6638] evict+0x61e/0xb10 [ 157.610854][ T6638] do_unlinkat+0x354/0x590 [ 157.615777][ T6638] __x64_sys_unlink+0x47/0x50 [ 157.620970][ T6638] do_syscall_64+0xe2/0xf80 [ 157.626247][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.632645][ T6638] [ 157.632645][ T6638] other info that might help us debug this: [ 157.632645][ T6638] [ 157.642853][ T6638] Possible unsafe locking scenario: [ 157.642853][ T6638] [ 157.650377][ T6638] CPU0 CPU1 [ 157.655720][ T6638] ---- ---- [ 157.661062][ T6638] lock(&ei->i_data_sem/3); [ 157.665647][ T6638] lock(&sb->s_type->i_mutex_key#11/1); [ 157.673826][ T6638] lock(&ei->i_data_sem/3); [ 157.680961][ T6638] lock(&sb->s_type->i_mutex_key#11/1); [ 157.686599][ T6638] [ 157.686599][ T6638] *** DEADLOCK *** [ 157.686599][ T6638] [ 157.694724][ T6638] 4 locks held by syz.0.60/6638: [ 157.699637][ T6638] #0: ffff88802f648420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 157.708812][ T6638] #1: ffff88802f648610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x274/0xe60 [ 157.718270][ T6638] #2: ffff88805bae28f0 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_truncate+0xacf/0x1300 [ 157.728025][ T6638] #3: ffff88805bae2748 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x6e0 [ 157.738289][ T6638] [ 157.738289][ T6638] stack backtrace: [ 157.744625][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) [ 157.744645][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.744656][ T6638] Call Trace: [ 157.744665][ T6638] [ 157.744673][ T6638] dump_stack_lvl+0xe8/0x150 [ 157.744700][ T6638] print_circular_bug+0x2e1/0x300 [ 157.744721][ T6638] check_noncircular+0x12e/0x150 [ 157.744742][ T6638] __lock_acquire+0x15a5/0x2cf0 [ 157.744778][ T6638] ? ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.744802][ T6638] lock_acquire+0x106/0x330 [ 157.744826][ T6638] ? ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.744852][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.744877][ T6638] down_write+0x96/0x200 [ 157.744899][ T6638] ? ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.744922][ T6638] ? __pfx_down_write+0x10/0x10 [ 157.744945][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.744966][ T6638] ? ext4_get_dquots+0xd/0x20 [ 157.744981][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745001][ T6638] ? dquot_drop+0x144/0x170 [ 157.745026][ T6638] ext4_xattr_inode_lookup_create+0x187d/0x1cf0 [ 157.745057][ T6638] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 157.745094][ T6638] ? bdev_getblk+0xbe/0x6e0 [ 157.745119][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745139][ T6638] ? bdev_getblk+0x582/0x6e0 [ 157.745163][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745184][ T6638] ? ext4_xattr_block_set+0xd3/0x2ad0 [ 157.745209][ T6638] ext4_xattr_block_set+0x229/0x2ad0 [ 157.745247][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745276][ T6638] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 157.745310][ T6638] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 157.745341][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745369][ T6638] ? xattr_find_entry+0x236/0x280 [ 157.745397][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745424][ T6638] ? ext4_xattr_block_find+0xea/0x350 [ 157.745457][ T6638] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 157.745507][ T6638] __ext4_expand_extra_isize+0x30d/0x400 [ 157.745544][ T6638] __ext4_mark_inode_dirty+0x45c/0x6e0 [ 157.745586][ T6638] ext4_ext_truncate+0xac/0x2f0 [ 157.745624][ T6638] ext4_truncate+0xb63/0x1300 [ 157.745650][ T6638] ? __pfx_ext4_truncate+0x10/0x10 [ 157.745676][ T6638] ext4_evict_inode+0x863/0xe60 [ 157.745693][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745718][ T6638] ? __pfx_ext4_evict_inode+0x10/0x10 [ 157.745733][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745755][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745775][ T6638] ? do_raw_spin_unlock+0xf5/0x210 [ 157.745796][ T6638] ? __pfx_ext4_evict_inode+0x10/0x10 [ 157.745813][ T6638] evict+0x61e/0xb10 [ 157.745842][ T6638] ? __pfx_evict+0x10/0x10 [ 157.745867][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745887][ T6638] ? _raw_spin_unlock+0x28/0x50 [ 157.745914][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.745934][ T6638] ? iput+0xcc2/0x1020 [ 157.745957][ T6638] do_unlinkat+0x354/0x590 [ 157.745976][ T6638] ? __pfx_do_unlinkat+0x10/0x10 [ 157.745994][ T6638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.746014][ T6638] ? getname_flags+0x1e4/0x540 [ 157.746035][ T6638] __x64_sys_unlink+0x47/0x50 [ 157.746051][ T6638] do_syscall_64+0xe2/0xf80 [ 157.746070][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.746087][ T6638] ? trace_irq_disable+0x37/0x100 [ 157.746108][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.746126][ T6638] RIP: 0033:0x7f708eb9a379 [ 157.746142][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.746155][ T6638] RSP: 002b:00007f708f98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 157.746174][ T6638] RAX: ffffffffffffffda RBX: 00007f708edd5fa0 RCX: 00007f708eb9a379 [ 157.746187][ T6638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 157.746198][ T6638] RBP: 00007f708ec2dd68 R08: 0000000000000000 R09: 0000000000000000 [ 157.746209][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.746219][ T6638] R13: 00007f708edd6038 R14: 00007f708edd5fa0 R15: 00007ffcf4087918 [ 157.746240][ T6638] [ 158.201133][ T6642] set_capacity_and_notify: 7 callbacks suppressed [ 158.201149][ T6642] loop0: detected capacity change from 0 to 1024 [ 159.408467][ T6649] loop0: detected capacity change from 0 to 1024 [ 159.493398][ T6654] loop0: detected capacity change from 0 to 1024 [ 159.592806][ T6658] loop0: detected capacity change from 0 to 1024 [ 159.689024][ T6662] loop0: detected capacity change from 0 to 1024 [ 160.894610][ T6669] loop0: detected capacity change from 0 to 1024 2026/02/04 12:50:07 executed programs: 54 [ 160.982101][ T6674] loop0: detected capacity change from 0 to 1024 [ 161.062864][ T6678] loop0: detected capacity change from 0 to 1024 [ 161.123023][ T6682] loop0: detected capacity change from 0 to 1024 [ 161.219700][ T6686] loop0: detected capacity change from 0 to 1024 [ 163.858550][ T6712] set_capacity_and_notify: 4 callbacks suppressed [ 163.858572][ T6712] loop0: detected capacity change from 0 to 1024 [ 163.943022][ T6716] loop0: detected capacity change from 0 to 1024 [ 164.012345][ T6720] loop0: detected capacity change from 0 to 1024 [ 164.113203][ T6724] loop0: detected capacity change from 0 to 1024 [ 164.189024][ T6728] loop0: detected capacity change from 0 to 1024 [ 164.260650][ T6732] loop0: detected capacity change from 0 to 1024 [ 164.368261][ T6736] loop0: detected capacity change from 0 to 1024 [ 164.457381][ T6740] loop0: detected capacity change from 0 to 1024 [ 164.544367][ T6744] loop0: detected capacity change from 0 to 1024 [ 164.614845][ T6748] loop0: detected capacity change from 0 to 1024 2026/02/04 12:50:12 executed programs: 78