Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 parsed 1 programs [ 34.863023][ T4325] cgroup: Unknown subsys name 'net' [ 35.094232][ T4325] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.398803][ T4325] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.308485][ T4344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.309982][ T4344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.311208][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.317911][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.319332][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.320579][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.885702][ T262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.886828][ T262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.888338][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.897461][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.898687][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.900381][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.060769][ T4383] chnl_net:caif_netlink_parms(): no params data found [ 40.078252][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.079407][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.081016][ T4383] device bridge_slave_0 entered promiscuous mode [ 40.084048][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.085160][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.086552][ T4383] device bridge_slave_1 entered promiscuous mode [ 40.093677][ T4383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.096071][ T4383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.104026][ T4383] team0: Port device team_slave_0 added [ 40.105715][ T4383] team0: Port device team_slave_1 added [ 40.111371][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.112599][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.116558][ T4383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.119206][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.120277][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.124355][ T4383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.202540][ T4383] device hsr_slave_0 entered promiscuous mode [ 40.241672][ T4383] device hsr_slave_1 entered promiscuous mode [ 40.345570][ T4383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.394010][ T4383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.443586][ T4383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.472824][ T4383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.540219][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.541347][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.542768][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.543891][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.561018][ T4383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.565209][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.567362][ T251] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.568986][ T251] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.575507][ T4383] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.578492][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.580060][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.581233][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.584569][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.585951][ T251] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.587147][ T251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.594261][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.595884][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.598837][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.602410][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.605745][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.608263][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.660167][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.662242][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.665936][ T4383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.672481][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.673998][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.679388][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.681019][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.683417][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.684872][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.687324][ T4383] device veth0_vlan entered promiscuous mode [ 40.690330][ T4383] device veth1_vlan entered promiscuous mode [ 40.708149][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.709664][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.711065][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.712969][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.715483][ T4383] device veth0_macvtap entered promiscuous mode [ 40.717699][ T4383] device veth1_macvtap entered promiscuous mode [ 40.723089][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.724258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.725726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.727184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.728607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.731095][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.732576][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.734148][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.737548][ T4383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.738929][ T4383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.740294][ T4383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.741757][ T4383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 0 [ 41.290241][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.292839][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.294148][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.295672][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.297256][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.298483][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.583860][ T4436] chnl_net:caif_netlink_parms(): no params data found [ 41.599586][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.600763][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.602432][ T4436] device bridge_slave_0 entered promiscuous mode [ 41.604231][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.605390][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.606888][ T4436] device bridge_slave_1 entered promiscuous mode [ 41.614376][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.617162][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.985668][ T4436] team0: Port device team_slave_0 added [ 41.987756][ T4436] team0: Port device team_slave_1 added [ 42.000211][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.001337][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.005608][ T4436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.007876][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.008840][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.012836][ T4436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.052590][ T4436] device hsr_slave_0 entered promiscuous mode [ 42.102248][ T4436] device hsr_slave_1 entered promiscuous mode [ 42.141592][ T4436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.142880][ T4436] Cannot create hsr debugfs directory [ 42.482875][ T4436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.382332][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 44.942363][ T4436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.451517][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 46.143495][ T4436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.233471][ T4436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.403548][ T4436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.493514][ T4436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.552567][ T4436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.643780][ T4436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.691335][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.745445][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.746860][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.749323][ T4436] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.751997][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.753526][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.754979][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.756129][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.757566][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.760357][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.762851][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.764756][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.765816][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.768007][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.770422][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.773767][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.775485][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.777442][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.779847][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.781404][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.834847][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.836531][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.838925][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.840428][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.843622][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.947556][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.948811][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.952154][ T4436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.957986][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.959534][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.964935][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.966354][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.967881][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.969266][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.971241][ T4436] device veth0_vlan entered promiscuous mode [ 46.974519][ T4436] device veth1_vlan entered promiscuous mode [ 46.981243][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.983636][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.985064][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.986582][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.043976][ T4436] device veth0_macvtap entered promiscuous mode [ 47.046139][ T4436] device veth1_macvtap entered promiscuous mode [ 47.050842][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.052974][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.055428][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.056673][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.058233][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.059617][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.061076][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.065122][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.066802][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.068733][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.069891][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.072880][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.075411][ T4436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.076858][ T4436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.078277][ T4436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.079631][ T4436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.150793][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.152207][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.154511][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.161459][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.162697][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.164389][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.175359][ T9] device hsr_slave_0 left promiscuous mode [ 47.201238][ T4466] loop0: detected capacity change from 0 to 512 [ 47.203218][ T9] device hsr_slave_1 left promiscuous mode [ 47.213665][ T4466] [ 47.214081][ T4466] ====================================================== [ 47.215080][ T4466] WARNING: possible circular locking dependency detected [ 47.216207][ T4466] syzkaller #0 Not tainted [ 47.216841][ T4466] ------------------------------------------------------ [ 47.217877][ T4466] syz.0.17/4466 is trying to acquire lock: [ 47.218772][ T4466] ffff0000ca0bab98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 47.220352][ T4466] [ 47.220352][ T4466] but task is already holding lock: [ 47.221492][ T4466] ffff0000e9ad8ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 47.223062][ T4466] [ 47.223062][ T4466] which lock already depends on the new lock. [ 47.223062][ T4466] [ 47.224691][ T4466] [ 47.224691][ T4466] the existing dependency chain (in reverse order) is: [ 47.226074][ T4466] [ 47.226074][ T4466] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 47.227250][ T4466] down_read+0x64/0x304 [ 47.228011][ T4466] ext4_setattr+0x7c4/0x150c [ 47.228780][ T4466] notify_change+0xb0c/0xdcc [ 47.229622][ T4466] chown_common+0x414/0x574 [ 47.230453][ T4466] do_fchownat+0x158/0x268 [ 47.231181][ T4466] __arm64_sys_fchownat+0xb8/0xd4 [ 47.231976][ T4466] invoke_syscall+0x98/0x2bc [ 47.232706][ T4466] el0_svc_common+0x138/0x258 [ 47.233434][ T4466] do_el0_svc+0x58/0x13c [ 47.234242][ T4466] el0_svc+0x58/0x138 [ 47.234980][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 47.235786][ T4466] el0t_64_sync+0x18c/0x190 [ 47.236485][ T4466] [ 47.236485][ T4466] -> #1 (jbd2_handle){++++}-{0:0}: [ 47.237653][ T4466] start_this_handle+0xfe0/0x122c [ 47.238455][ T4466] jbd2__journal_start+0x288/0x51c [ 47.239261][ T4466] __ext4_journal_start_sb+0x2fc/0x674 [ 47.240127][ T4466] ext4_writepages+0xa28/0x284c [ 47.240932][ T4466] do_writepages+0x2c0/0x4fc [ 47.241666][ T4466] __writeback_single_inode+0x164/0x157c [ 47.242657][ T4466] writeback_sb_inodes+0x824/0x1404 [ 47.243475][ T4466] __writeback_inodes_wb+0x110/0x394 [ 47.244391][ T4466] wb_writeback+0x414/0xfb0 [ 47.245170][ T4466] wb_workfn+0xac0/0xd98 [ 47.245903][ T4466] process_one_work+0x7f4/0x13a8 [ 47.246685][ T4466] worker_thread+0x8c8/0xfbc [ 47.247460][ T4466] kthread+0x250/0x2d8 [ 47.248140][ T4466] ret_from_fork+0x10/0x20 [ 47.248846][ T4466] [ 47.248846][ T4466] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 47.250081][ T4466] __lock_acquire+0x293c/0x6544 [ 47.250887][ T4466] lock_acquire+0x20c/0x644 [ 47.251623][ T4466] percpu_down_read+0x70/0x2a8 [ 47.252488][ T4466] ext4_writepages+0x188/0x284c [ 47.253346][ T4466] do_writepages+0x2c0/0x4fc [ 47.254204][ T4466] __writeback_single_inode+0x164/0x157c [ 47.255165][ T4466] writeback_single_inode+0x1c0/0x720 [ 47.256066][ T4466] write_inode_now+0x144/0x1b0 [ 47.256881][ T4466] iput+0x5cc/0x7f4 [ 47.257495][ T4466] ext4_xattr_block_set+0x17a4/0x2810 [ 47.258404][ T4466] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 47.259365][ T4466] __ext4_expand_extra_isize+0x298/0x358 [ 47.260329][ T4466] __ext4_mark_inode_dirty+0x3e4/0x790 [ 47.261316][ T4466] ext4_evict_inode+0xb58/0x1270 [ 47.262173][ T4466] evict+0x3c8/0x810 [ 47.262844][ T4466] iput+0x764/0x7f4 [ 47.263496][ T4466] ext4_process_orphan+0x240/0x2b4 [ 47.264371][ T4466] ext4_orphan_cleanup+0x908/0x104c [ 47.265190][ T4466] ext4_fill_super+0x6440/0x68a8 [ 47.266014][ T4466] get_tree_bdev+0x358/0x544 [ 47.266749][ T4466] ext4_get_tree+0x28/0x38 [ 47.267514][ T4466] vfs_get_tree+0x90/0x274 [ 47.268257][ T4466] do_new_mount+0x228/0x810 [ 47.268987][ T4466] path_mount+0x5b4/0xe78 [ 47.269672][ T4466] __arm64_sys_mount+0x49c/0x584 [ 47.270493][ T4466] invoke_syscall+0x98/0x2bc [ 47.271307][ T4466] el0_svc_common+0x138/0x258 [ 47.272056][ T4466] do_el0_svc+0x58/0x13c [ 47.272785][ T4466] el0_svc+0x58/0x138 [ 47.273427][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 47.274272][ T4466] el0t_64_sync+0x18c/0x190 [ 47.275036][ T4466] [ 47.275036][ T4466] other info that might help us debug this: [ 47.275036][ T4466] [ 47.276595][ T4466] Chain exists of: [ 47.276595][ T4466] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 47.276595][ T4466] [ 47.278530][ T4466] Possible unsafe locking scenario: [ 47.278530][ T4466] [ 47.279647][ T4466] CPU0 CPU1 [ 47.280411][ T4466] ---- ---- [ 47.281184][ T4466] lock(&ei->xattr_sem); [ 47.281860][ T4466] lock(jbd2_handle); [ 47.282861][ T4466] lock(&ei->xattr_sem); [ 47.283947][ T4466] lock(&sbi->s_writepages_rwsem); [ 47.284727][ T4466] [ 47.284727][ T4466] *** DEADLOCK *** [ 47.284727][ T4466] [ 47.285925][ T4466] 3 locks held by syz.0.17/4466: [ 47.286677][ T4466] #0: ffff0000ca0b80e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 47.288246][ T4466] #1: ffff0000ca0b8650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 47.289790][ T4466] #2: ffff0000e9ad8ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 47.291345][ T4466] [ 47.291345][ T4466] stack backtrace: [ 47.292284][ T4466] CPU: 0 PID: 4466 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.293293][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.294708][ T4466] Call trace: [ 47.295198][ T4466] dump_backtrace+0x1c8/0x1f4 [ 47.295851][ T4466] show_stack+0x2c/0x3c [ 47.296451][ T4466] __dump_stack+0x30/0x40 [ 47.297078][ T4466] dump_stack_lvl+0xf8/0x160 [ 47.297749][ T4466] dump_stack+0x1c/0x5c [ 47.298445][ T4466] print_circular_bug+0x148/0x1b0 [ 47.299237][ T4466] check_noncircular+0x240/0x2d4 [ 47.299937][ T4466] __lock_acquire+0x293c/0x6544 [ 47.300662][ T4466] lock_acquire+0x20c/0x644 [ 47.301333][ T4466] percpu_down_read+0x70/0x2a8 [ 47.302020][ T4466] ext4_writepages+0x188/0x284c [ 47.302758][ T4466] do_writepages+0x2c0/0x4fc [ 47.303493][ T4466] __writeback_single_inode+0x164/0x157c [ 47.304330][ T4466] writeback_single_inode+0x1c0/0x720 [ 47.305168][ T4466] write_inode_now+0x144/0x1b0 [ 47.305963][ T4466] iput+0x5cc/0x7f4 [ 47.306585][ T4466] ext4_xattr_block_set+0x17a4/0x2810 [ 47.307445][ T4466] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 47.308384][ T4466] __ext4_expand_extra_isize+0x298/0x358 [ 47.309292][ T4466] __ext4_mark_inode_dirty+0x3e4/0x790 [ 47.310102][ T4466] ext4_evict_inode+0xb58/0x1270 [ 47.310838][ T4466] evict+0x3c8/0x810 [ 47.311444][ T4466] iput+0x764/0x7f4 [ 47.312035][ T4466] ext4_process_orphan+0x240/0x2b4 [ 47.312795][ T4466] ext4_orphan_cleanup+0x908/0x104c [ 47.313579][ T4466] ext4_fill_super+0x6440/0x68a8 [ 47.314356][ T4466] get_tree_bdev+0x358/0x544 [ 47.315044][ T4466] ext4_get_tree+0x28/0x38 [ 47.315698][ T4466] vfs_get_tree+0x90/0x274 [ 47.316421][ T4466] do_new_mount+0x228/0x810 [ 47.317101][ T4466] path_mount+0x5b4/0xe78 [ 47.317723][ T4466] __arm64_sys_mount+0x49c/0x584 [ 47.318451][ T4466] invoke_syscall+0x98/0x2bc [ 47.319102][ T4466] el0_svc_common+0x138/0x258 [ 47.319826][ T4466] do_el0_svc+0x58/0x13c [ 47.320413][ T4466] el0_svc+0x58/0x138 [ 47.321035][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 47.321796][ T4466] el0t_64_sync+0x18c/0x190 [ 47.323889][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 47.326132][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.327063][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 47.329122][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.330050][ T4466] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.332273][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 47.334349][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.335367][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 47.337250][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.338288][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 47.340196][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.341190][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 47.343212][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.344265][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 47.346488][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.347517][ T4466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 47.349329][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 47.350361][ T4466] EXT4-fs (loop0): 1 orphan inode deleted [ 47.351281][ T4466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.359151][ T4436] EXT4-fs (loop0): unmounting filesystem. [ 47.371637][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.372818][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.374244][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.375524][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.376905][ T9] device bridge_slave_1 left promiscuous mode [ 47.377946][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.402113][ T9] device bridge_slave_0 left promiscuous mode [ 47.403155][ T9] bridge0: port 1(bridge_slave_0) entered disabled state