Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs [ 33.888851][ T6550] cgroup: Unknown subsys name 'net' [ 34.021903][ T6550] cgroup: Unknown subsys name 'cpuset' [ 34.023992][ T6550] cgroup: Unknown subsys name 'rlimit' [ 34.167841][ T6550] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 44.173353][ T6561] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.337054][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 44.357340][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.357588][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.357684][ T6573] bridge_slave_0: entered allmulticast mode [ 44.358138][ T6573] bridge_slave_0: entered promiscuous mode [ 44.359216][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.359260][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.359304][ T6573] bridge_slave_1: entered allmulticast mode [ 44.359704][ T6573] bridge_slave_1: entered promiscuous mode [ 44.371384][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.372265][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.378940][ T6573] team0: Port device team_slave_0 added [ 44.379613][ T6573] team0: Port device team_slave_1 added [ 44.401338][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.402486][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.402861][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.403636][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.403643][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.403656][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.420831][ T6573] hsr_slave_0: entered promiscuous mode [ 44.421141][ T6573] hsr_slave_1: entered promiscuous mode [ 44.461671][ T6573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.464943][ T6573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.467486][ T6573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.469706][ T6573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.493368][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.493415][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.493562][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.493586][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.508668][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.512760][ T2175] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.514036][ T2175] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.518322][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.520307][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.520347][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.532923][ T2175] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.532965][ T2175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.537917][ T6573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.574848][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.586586][ T6573] veth0_vlan: entered promiscuous mode [ 44.589494][ T6573] veth1_vlan: entered promiscuous mode [ 44.597538][ T6573] veth0_macvtap: entered promiscuous mode [ 44.599475][ T6573] veth1_macvtap: entered promiscuous mode [ 44.604105][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.607194][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.610182][ T4624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.610222][ T4624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.610242][ T4624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.610255][ T4624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.724157][ T6596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.724478][ T6596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.724634][ T6596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.724934][ T6596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.725120][ T6596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.884651][ T619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.951037][ T619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.986612][ T619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.031959][ T619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.040344][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.040446][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.052111][ T2175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.052135][ T2175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:45 executed programs: 0 [ 45.912962][ T6596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.914304][ T6596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.915554][ T6596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.917156][ T6596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.918385][ T6596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.966603][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 45.986844][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.988113][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.989312][ T6659] bridge_slave_0: entered allmulticast mode [ 45.991125][ T6659] bridge_slave_0: entered promiscuous mode [ 45.992902][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.994174][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.995419][ T6659] bridge_slave_1: entered allmulticast mode [ 45.996807][ T6659] bridge_slave_1: entered promiscuous mode [ 46.005640][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.006557][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.013890][ T6659] team0: Port device team_slave_0 added [ 46.015716][ T6659] team0: Port device team_slave_1 added [ 46.023257][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.023277][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.023300][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.023823][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.023834][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.023847][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.040224][ T6659] hsr_slave_0: entered promiscuous mode [ 46.040949][ T6659] hsr_slave_1: entered promiscuous mode [ 46.041161][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 46.041209][ T6659] Cannot create hsr debugfs directory [ 47.930657][ T6596] Bluetooth: hci0: command tx timeout [ 48.130010][ T619] bridge_slave_1: left allmulticast mode [ 48.130043][ T619] bridge_slave_1: left promiscuous mode [ 48.130283][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.134248][ T619] bridge_slave_0: left allmulticast mode [ 48.134269][ T619] bridge_slave_0: left promiscuous mode [ 48.134339][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.263609][ T619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.321665][ T619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.342373][ T619] bond0 (unregistering): Released all slaves [ 48.416049][ T619] hsr_slave_0: left promiscuous mode [ 48.417343][ T619] hsr_slave_1: left promiscuous mode [ 48.418793][ T619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.420038][ T619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.422492][ T619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.423714][ T619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.429769][ T619] veth1_macvtap: left promiscuous mode [ 48.430981][ T619] veth0_macvtap: left promiscuous mode [ 48.431970][ T619] veth1_vlan: left promiscuous mode [ 48.432916][ T619] veth0_vlan: left promiscuous mode [ 48.544984][ T619] team0 (unregistering): Port device team_slave_1 removed [ 48.554182][ T619] team0 (unregistering): Port device team_slave_0 removed [ 48.794050][ T6659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.796821][ T6659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.799141][ T6659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.801650][ T6659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.831178][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.836855][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.839767][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.839806][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.844298][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.844341][ T2107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.855627][ T6659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.857513][ T6659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.927468][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.942705][ T6659] veth0_vlan: entered promiscuous mode [ 48.944604][ T6659] veth1_vlan: entered promiscuous mode [ 48.953422][ T6659] veth0_macvtap: entered promiscuous mode [ 48.954315][ T6659] veth1_macvtap: entered promiscuous mode [ 48.958408][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.968233][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.158860][ T4624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158900][ T4624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158915][ T4624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158930][ T4624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.178131][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.178160][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.187760][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.187789][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.308640][ T6737] loop0: detected capacity change from 0 to 32768 [ 49.310341][ T6737] ======================================================= [ 49.310341][ T6737] WARNING: The mand mount option has been deprecated and [ 49.310341][ T6737] and is ignored by this kernel. Remove the mand [ 49.310341][ T6737] option from the mount to silence this warning. [ 49.310341][ T6737] ======================================================= [ 49.325427][ T6737] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 49.340474][ T6737] [ 49.340911][ T6737] ====================================================== [ 49.342006][ T6737] WARNING: possible circular locking dependency detected [ 49.343074][ T6737] syzkaller #0 Not tainted [ 49.343743][ T6737] ------------------------------------------------------ [ 49.344764][ T6737] syz.0.17/6737 is trying to acquire lock: [ 49.345623][ T6737] ffff0000f35886f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x258/0x5f0 [ 49.346951][ T6737] [ 49.346951][ T6737] but task is already holding lock: [ 49.348087][ T6737] ffff0000caea8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 49.349468][ T6737] [ 49.349468][ T6737] which lock already depends on the new lock. [ 49.349468][ T6737] [ 49.351122][ T6737] [ 49.351122][ T6737] the existing dependency chain (in reverse order) is: [ 49.352550][ T6737] [ 49.352550][ T6737] -> #4 (jbd2_handle){++++}-{0:0}: [ 49.353699][ T6737] start_this_handle+0xe74/0x10dc [ 49.354576][ T6737] jbd2__journal_start+0x288/0x51c [ 49.355441][ T6737] jbd2_journal_start+0x3c/0x4c [ 49.356271][ T6737] ocfs2_start_trans+0x368/0x6b0 [ 49.357074][ T6737] ocfs2_acl_set_mode+0x168/0x6c8 [ 49.357918][ T6737] ocfs2_iop_set_acl+0x234/0x25c [ 49.358809][ T6737] vfs_set_acl+0x70c/0x974 [ 49.359580][ T6737] do_set_acl+0xe0/0x1a8 [ 49.360359][ T6737] filename_setxattr+0x268/0x4f8 [ 49.361239][ T6737] path_setxattrat+0x2e8/0x320 [ 49.362090][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 49.362985][ T6737] invoke_syscall+0x98/0x254 [ 49.363757][ T6737] el0_svc_common+0x130/0x23c [ 49.364560][ T6737] do_el0_svc+0x48/0x58 [ 49.365306][ T6737] el0_svc+0x5c/0x254 [ 49.366025][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.366903][ T6737] el0t_64_sync+0x198/0x19c [ 49.367770][ T6737] [ 49.367770][ T6737] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 49.369173][ T6737] down_read+0x58/0x2f8 [ 49.369897][ T6737] ocfs2_start_trans+0x35c/0x6b0 [ 49.370698][ T6737] ocfs2_acl_set_mode+0x168/0x6c8 [ 49.371588][ T6737] ocfs2_iop_set_acl+0x234/0x25c [ 49.372383][ T6737] vfs_set_acl+0x70c/0x974 [ 49.373146][ T6737] do_set_acl+0xe0/0x1a8 [ 49.373921][ T6737] filename_setxattr+0x268/0x4f8 [ 49.374784][ T6737] path_setxattrat+0x2e8/0x320 [ 49.375560][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 49.376443][ T6737] invoke_syscall+0x98/0x254 [ 49.377258][ T6737] el0_svc_common+0x130/0x23c [ 49.378055][ T6737] do_el0_svc+0x48/0x58 [ 49.378752][ T6737] el0_svc+0x5c/0x254 [ 49.379441][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.380298][ T6737] el0t_64_sync+0x198/0x19c [ 49.381072][ T6737] [ 49.381072][ T6737] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 49.382260][ T6737] ocfs2_start_trans+0x1f4/0x6b0 [ 49.383107][ T6737] ocfs2_xattr_set+0xac4/0xe9c [ 49.383949][ T6737] ocfs2_set_acl+0x574/0x628 [ 49.384781][ T6737] ocfs2_iop_set_acl+0x190/0x25c [ 49.385688][ T6737] vfs_set_acl+0x70c/0x974 [ 49.386436][ T6737] do_set_acl+0xe0/0x1a8 [ 49.387120][ T6737] filename_setxattr+0x268/0x4f8 [ 49.387988][ T6737] path_setxattrat+0x2e8/0x320 [ 49.388826][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 49.389719][ T6737] invoke_syscall+0x98/0x254 [ 49.390590][ T6737] el0_svc_common+0x130/0x23c [ 49.391448][ T6737] do_el0_svc+0x48/0x58 [ 49.392158][ T6737] el0_svc+0x5c/0x254 [ 49.392830][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.393653][ T6737] el0t_64_sync+0x198/0x19c [ 49.394429][ T6737] [ 49.394429][ T6737] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 49.396163][ T6737] down_write+0x50/0xc0 [ 49.396936][ T6737] ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 49.397964][ T6737] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 49.399107][ T6737] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 49.400053][ T6737] ocfs2_xattr_set+0x920/0xe9c [ 49.400873][ T6737] ocfs2_set_acl+0x574/0x628 [ 49.401686][ T6737] ocfs2_iop_set_acl+0x190/0x25c [ 49.402522][ T6737] vfs_set_acl+0x70c/0x974 [ 49.403290][ T6737] do_set_acl+0xe0/0x1a8 [ 49.403989][ T6737] filename_setxattr+0x268/0x4f8 [ 49.404768][ T6737] path_setxattrat+0x2e8/0x320 [ 49.405520][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 49.406354][ T6737] invoke_syscall+0x98/0x254 [ 49.407111][ T6737] el0_svc_common+0x130/0x23c [ 49.407907][ T6737] do_el0_svc+0x48/0x58 [ 49.408572][ T6737] el0_svc+0x5c/0x254 [ 49.409247][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.410050][ T6737] el0t_64_sync+0x198/0x19c [ 49.410751][ T6737] [ 49.410751][ T6737] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 49.411909][ T6737] __lock_acquire+0x1774/0x30a4 [ 49.412750][ T6737] lock_acquire+0x14c/0x2e0 [ 49.413565][ T6737] down_read+0x58/0x2f8 [ 49.414309][ T6737] ocfs2_init_acl+0x258/0x5f0 [ 49.415043][ T6737] ocfs2_mknod+0x1028/0x1cf0 [ 49.415783][ T6737] ocfs2_create+0x190/0x474 [ 49.416480][ T6737] path_openat+0x12d8/0x2c40 [ 49.417213][ T6737] do_filp_open+0x18c/0x36c [ 49.417967][ T6737] do_sys_openat2+0x11c/0x1b4 [ 49.418747][ T6737] __arm64_sys_openat+0x120/0x158 [ 49.419536][ T6737] invoke_syscall+0x98/0x254 [ 49.420334][ T6737] el0_svc_common+0x130/0x23c [ 49.421152][ T6737] do_el0_svc+0x48/0x58 [ 49.421912][ T6737] el0_svc+0x5c/0x254 [ 49.422691][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.423634][ T6737] el0t_64_sync+0x198/0x19c [ 49.424425][ T6737] [ 49.424425][ T6737] other info that might help us debug this: [ 49.424425][ T6737] [ 49.426056][ T6737] Chain exists of: [ 49.426056][ T6737] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 49.426056][ T6737] [ 49.428176][ T6737] Possible unsafe locking scenario: [ 49.428176][ T6737] [ 49.429260][ T6737] CPU0 CPU1 [ 49.429970][ T6737] ---- ---- [ 49.430762][ T6737] rlock(jbd2_handle); [ 49.431412][ T6737] lock(&journal->j_trans_barrier); [ 49.432692][ T6737] lock(jbd2_handle); [ 49.433789][ T6737] rlock(&oi->ip_xattr_sem); [ 49.434552][ T6737] [ 49.434552][ T6737] *** DEADLOCK *** [ 49.434552][ T6737] [ 49.435854][ T6737] 8 locks held by syz.0.17/6737: [ 49.436589][ T6737] #0: ffff0000caeac428 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 49.438050][ T6737] #1: ffff0000f35889c0 (&type->i_mutex_dir_key#8){+.+.}-{4:4}, at: path_openat+0x638/0x2c40 [ 49.439751][ T6737] #2: ffff0000f35909c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 49.441968][ T6737] #3: ffff0000f358ed80 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 49.444201][ T6737] #4: ffff0000f3592640 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 49.446318][ T6737] #5: ffff0000caeac618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0 [ 49.447784][ T6737] #6: ffff0000c7cb08e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 49.449508][ T6737] #7: ffff0000caea8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 49.450938][ T6737] [ 49.450938][ T6737] stack backtrace: [ 49.451808][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 49.453061][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 49.454596][ T6737] Call trace: [ 49.455066][ T6737] show_stack+0x2c/0x3c (C) [ 49.455676][ T6737] __dump_stack+0x30/0x40 [ 49.456363][ T6737] dump_stack_lvl+0xd8/0x12c [ 49.457073][ T6737] dump_stack+0x1c/0x28 [ 49.457724][ T6737] print_circular_bug+0x324/0x32c [ 49.458489][ T6737] check_noncircular+0x154/0x174 [ 49.459187][ T6737] __lock_acquire+0x1774/0x30a4 [ 49.459926][ T6737] lock_acquire+0x14c/0x2e0 [ 49.460590][ T6737] down_read+0x58/0x2f8 [ 49.461150][ T6737] ocfs2_init_acl+0x258/0x5f0 [ 49.461859][ T6737] ocfs2_mknod+0x1028/0x1cf0 [ 49.462531][ T6737] ocfs2_create+0x190/0x474 [ 49.463243][ T6737] path_openat+0x12d8/0x2c40 [ 49.463911][ T6737] do_filp_open+0x18c/0x36c [ 49.464582][ T6737] do_sys_openat2+0x11c/0x1b4 [ 49.465335][ T6737] __arm64_sys_openat+0x120/0x158 [ 49.466108][ T6737] invoke_syscall+0x98/0x254 [ 49.466814][ T6737] el0_svc_common+0x130/0x23c [ 49.467502][ T6737] do_el0_svc+0x48/0x58 [ 49.468181][ T6737] el0_svc+0x5c/0x254 [ 49.468747][ T6737] el0t_64_sync_handler+0x84/0x12c [ 49.469477][ T6737] el0t_64_sync+0x198/0x19c [ 49.496682][ T6659] ocfs2: Unmounting device (7,0) on (node local)