Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs syzkaller login: [ 33.835909][ T4326] cgroup: Unknown subsys name 'net' [ 34.061025][ T4326] cgroup: Unknown subsys name 'rlimit' [ 34.343444][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.867035][ T1661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.868328][ T1661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.871561][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.877716][ T1661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.879245][ T1661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.880751][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.374337][ T4360] chnl_net:caif_netlink_parms(): no params data found [ 39.390631][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.391809][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.393242][ T4360] device bridge_slave_0 entered promiscuous mode [ 39.395445][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.396656][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.398061][ T4360] device bridge_slave_1 entered promiscuous mode [ 39.406055][ T4360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.408437][ T4360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.416154][ T4360] team0: Port device team_slave_0 added [ 39.417941][ T4360] team0: Port device team_slave_1 added [ 39.423938][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.425055][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.429090][ T4360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.431527][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.432610][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.436421][ T4360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.460083][ T4360] device hsr_slave_0 entered promiscuous mode [ 39.498676][ T4360] device hsr_slave_1 entered promiscuous mode [ 39.571346][ T4360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.591273][ T4360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.629434][ T4360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.670787][ T4360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.747775][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.749042][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.750440][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.751495][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.767538][ T4360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.771498][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.773683][ T1586] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.775456][ T1586] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.780312][ T4360] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.783850][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.785572][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.786735][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.791046][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.792481][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.793577][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.799167][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.800757][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.803664][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.806351][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.810424][ T1586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.812729][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.193182][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.194462][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.197899][ T4360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.202772][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.204351][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.210500][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.212215][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.213947][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.215381][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.217753][ T4360] device veth0_vlan entered promiscuous mode [ 40.281539][ T4360] device veth1_vlan entered promiscuous mode [ 40.289562][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.291202][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.292504][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.294049][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.296240][ T4360] device veth0_macvtap entered promiscuous mode [ 40.298390][ T4360] device veth1_macvtap entered promiscuous mode [ 40.302983][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.304227][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.305671][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.307059][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.308858][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.311460][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.312675][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.314082][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.316252][ T4360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.317622][ T4360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.319624][ T4360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.320914][ T4360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.271990][ T221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.525263][ T4411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.526848][ T4411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.528213][ T4411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.530585][ T4411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.531960][ T4411] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.533282][ T4411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:41 executed programs: 0 [ 41.789189][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.791076][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.792374][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.793966][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.795316][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.796477][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.838556][ T4422] chnl_net:caif_netlink_parms(): no params data found [ 41.853410][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.854639][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.855995][ T4422] device bridge_slave_0 entered promiscuous mode [ 41.858327][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.859720][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.861095][ T4422] device bridge_slave_1 entered promiscuous mode [ 41.867499][ T4422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.870288][ T4422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.877286][ T4422] team0: Port device team_slave_0 added [ 41.879568][ T4422] team0: Port device team_slave_1 added [ 41.884922][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.885978][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.890249][ T4422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.892712][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.893792][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.897600][ T4422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.949499][ T4422] device hsr_slave_0 entered promiscuous mode [ 41.988719][ T4422] device hsr_slave_1 entered promiscuous mode [ 42.028554][ T4422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.029940][ T4422] Cannot create hsr debugfs directory [ 43.219230][ T221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.848748][ T4411] Bluetooth: hci0: command 0x0409 tx timeout [ 45.519500][ T221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.600003][ T221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.928758][ T4411] Bluetooth: hci0: command 0x041b tx timeout [ 46.512971][ T4422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.613579][ T4422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.659651][ T4422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.699459][ T4422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.809023][ T4422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.812375][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.813811][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.816088][ T4422] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.818401][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.820350][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.821810][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.822996][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.824493][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.893243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.894906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.896372][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.897558][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.900809][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.904397][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.906809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.908734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.910282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.913062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.914746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.917358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.918939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.922303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.923743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.925899][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.999660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.000956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.003580][ T4422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.009440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.011074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.057848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.059494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.061458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.062824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.064745][ T4422] device veth0_vlan entered promiscuous mode [ 47.067686][ T4422] device veth1_vlan entered promiscuous mode [ 47.073855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.075393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.076888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.078323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.081548][ T4422] device veth0_macvtap entered promiscuous mode [ 47.083689][ T4422] device veth1_macvtap entered promiscuous mode [ 47.087718][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.089994][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.092001][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.093196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.094680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.096136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.097589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.143009][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.144566][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.146455][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.147684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.149466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.152371][ T4422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.153648][ T4422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.155076][ T4422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.156555][ T4422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.172259][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.176266][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.178251][ T1661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.181583][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.182895][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.184670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.272216][ T221] device hsr_slave_0 left promiscuous mode [ 47.316117][ T4502] loop0: detected capacity change from 0 to 32768 [ 47.317682][ T4502] ======================================================= [ 47.317682][ T4502] WARNING: The mand mount option has been deprecated and [ 47.317682][ T4502] and is ignored by this kernel. Remove the mand [ 47.317682][ T4502] option from the mount to silence this warning. [ 47.317682][ T4502] ======================================================= [ 47.323026][ T221] device hsr_slave_1 left promiscuous mode [ 47.330514][ T4502] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 47.335016][ T4502] [ 47.335431][ T4502] ====================================================== [ 47.336567][ T4502] WARNING: possible circular locking dependency detected [ 47.337671][ T4502] syzkaller #0 Not tainted [ 47.338343][ T4502] ------------------------------------------------------ [ 47.339354][ T4502] syz.0.17/4502 is trying to acquire lock: [ 47.340168][ T4502] ffff0000ea3b6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3cd4 [ 47.342158][ T4502] [ 47.342158][ T4502] but task is already holding lock: [ 47.343270][ T4502] ffff0000ea3b06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x32c/0xe98 [ 47.344656][ T4502] [ 47.344656][ T4502] which lock already depends on the new lock. [ 47.344656][ T4502] [ 47.346091][ T4502] [ 47.346091][ T4502] the existing dependency chain (in reverse order) is: [ 47.347349][ T4502] [ 47.347349][ T4502] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 47.348668][ T4502] down_read+0x64/0x304 [ 47.349447][ T4502] ocfs2_init_acl+0x258/0x5f0 [ 47.350300][ T4502] ocfs2_mknod+0x1168/0x1f18 [ 47.351131][ T4502] ocfs2_create+0x19c/0x4f0 [ 47.351965][ T4502] path_openat+0x112c/0x2680 [ 47.352811][ T4502] do_filp_open+0x174/0x344 [ 47.353554][ T4502] do_sys_openat2+0x128/0x3d8 [ 47.354306][ T4502] __arm64_sys_openat+0x120/0x154 [ 47.355144][ T4502] invoke_syscall+0x98/0x2bc [ 47.355910][ T4502] el0_svc_common+0x138/0x258 [ 47.356721][ T4502] do_el0_svc+0x58/0x13c [ 47.357472][ T4502] el0_svc+0x58/0x138 [ 47.358156][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.359040][ T4502] el0t_64_sync+0x18c/0x190 [ 47.359789][ T4502] [ 47.359789][ T4502] -> #4 (jbd2_handle){.+.+}-{0:0}: [ 47.360868][ T4502] start_this_handle+0xfe0/0x122c [ 47.361714][ T4502] jbd2__journal_start+0x288/0x51c [ 47.362535][ T4502] jbd2_journal_start+0x3c/0x4c [ 47.363269][ T4502] ocfs2_start_trans+0x380/0x6c4 [ 47.364101][ T4502] ocfs2_mknod+0xc7c/0x1f18 [ 47.364847][ T4502] ocfs2_create+0x19c/0x4f0 [ 47.365558][ T4502] path_openat+0x112c/0x2680 [ 47.366298][ T4502] do_filp_open+0x174/0x344 [ 47.367035][ T4502] do_sys_openat2+0x128/0x3d8 [ 47.367816][ T4502] __arm64_sys_openat+0x120/0x154 [ 47.368624][ T4502] invoke_syscall+0x98/0x2bc [ 47.369362][ T4502] el0_svc_common+0x138/0x258 [ 47.370107][ T4502] do_el0_svc+0x58/0x13c [ 47.370829][ T4502] el0_svc+0x58/0x138 [ 47.371483][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.372271][ T4502] el0t_64_sync+0x18c/0x190 [ 47.373006][ T4502] [ 47.373006][ T4502] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 47.374239][ T4502] down_read+0x64/0x304 [ 47.374949][ T4502] ocfs2_start_trans+0x374/0x6c4 [ 47.375775][ T4502] ocfs2_mknod+0xc7c/0x1f18 [ 47.376473][ T4502] ocfs2_create+0x19c/0x4f0 [ 47.377210][ T4502] path_openat+0x112c/0x2680 [ 47.377950][ T4502] do_filp_open+0x174/0x344 [ 47.378704][ T4502] do_sys_openat2+0x128/0x3d8 [ 47.379532][ T4502] __arm64_sys_openat+0x120/0x154 [ 47.380404][ T4502] invoke_syscall+0x98/0x2bc [ 47.381217][ T4502] el0_svc_common+0x138/0x258 [ 47.382076][ T4502] do_el0_svc+0x58/0x13c [ 47.382830][ T4502] el0_svc+0x58/0x138 [ 47.383538][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.384367][ T4502] el0t_64_sync+0x18c/0x190 [ 47.385119][ T4502] [ 47.385119][ T4502] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 47.386254][ T4502] ocfs2_start_trans+0x20c/0x6c4 [ 47.387091][ T4502] ocfs2_mknod+0xc7c/0x1f18 [ 47.387847][ T4502] ocfs2_create+0x19c/0x4f0 [ 47.388554][ T4502] path_openat+0x112c/0x2680 [ 47.389296][ T4502] do_filp_open+0x174/0x344 [ 47.390015][ T4502] do_sys_openat2+0x128/0x3d8 [ 47.390766][ T4502] __arm64_sys_openat+0x120/0x154 [ 47.391588][ T4502] invoke_syscall+0x98/0x2bc [ 47.392342][ T4502] el0_svc_common+0x138/0x258 [ 47.393115][ T4502] do_el0_svc+0x58/0x13c [ 47.393814][ T4502] el0_svc+0x58/0x138 [ 47.394461][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.395243][ T4502] el0t_64_sync+0x18c/0x190 [ 47.395977][ T4502] [ 47.395977][ T4502] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 47.397528][ T4502] down_write+0x5c/0x88 [ 47.398253][ T4502] ocfs2_reserve_local_alloc_bits+0xf8/0x278c [ 47.399174][ T4502] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 47.400219][ T4502] ocfs2_reserve_clusters+0x3c/0x50 [ 47.401085][ T4502] ocfs2_mknod+0xc2c/0x1f18 [ 47.401843][ T4502] ocfs2_create+0x19c/0x4f0 [ 47.402594][ T4502] path_openat+0x112c/0x2680 [ 47.403350][ T4502] do_filp_open+0x174/0x344 [ 47.404081][ T4502] do_sys_openat2+0x128/0x3d8 [ 47.404818][ T4502] __arm64_sys_openat+0x120/0x154 [ 47.405634][ T4502] invoke_syscall+0x98/0x2bc [ 47.406410][ T4502] el0_svc_common+0x138/0x258 [ 47.407120][ T4502] do_el0_svc+0x58/0x13c [ 47.407758][ T4502] el0_svc+0x58/0x138 [ 47.408372][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.409146][ T4502] el0t_64_sync+0x18c/0x190 [ 47.409857][ T4502] [ 47.409857][ T4502] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 47.411303][ T4502] __lock_acquire+0x293c/0x6544 [ 47.412148][ T4502] lock_acquire+0x20c/0x644 [ 47.412840][ T4502] down_write+0x5c/0x88 [ 47.413518][ T4502] ocfs2_reserve_suballoc_bits+0x12c/0x3cd4 [ 47.414478][ T4502] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 47.415454][ T4502] ocfs2_init_xattr_set_ctxt+0x300/0x7bc [ 47.416330][ T4502] ocfs2_xattr_set+0x91c/0xe98 [ 47.417191][ T4502] ocfs2_set_acl+0x3ec/0x4a0 [ 47.417922][ T4502] ocfs2_iop_set_acl+0x174/0x240 [ 47.418740][ T4502] posix_acl_xattr_set+0x2f8/0x398 [ 47.419611][ T4502] __vfs_setxattr+0x388/0x3a4 [ 47.420369][ T4502] __vfs_setxattr_noperm+0x120/0x564 [ 47.421188][ T4502] __vfs_setxattr_locked+0x1ec/0x218 [ 47.422040][ T4502] vfs_setxattr+0x158/0x2ac [ 47.422789][ T4502] setxattr+0x228/0x28c [ 47.423517][ T4502] path_setxattr+0x12c/0x25c [ 47.424232][ T4502] __arm64_sys_setxattr+0xbc/0xd8 [ 47.425018][ T4502] invoke_syscall+0x98/0x2bc [ 47.425802][ T4502] el0_svc_common+0x138/0x258 [ 47.426557][ T4502] do_el0_svc+0x58/0x13c [ 47.427262][ T4502] el0_svc+0x58/0x138 [ 47.427907][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.428753][ T4502] el0t_64_sync+0x18c/0x190 [ 47.429453][ T4502] [ 47.429453][ T4502] other info that might help us debug this: [ 47.429453][ T4502] [ 47.430976][ T4502] Chain exists of: [ 47.430976][ T4502] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 47.430976][ T4502] [ 47.433265][ T4502] Possible unsafe locking scenario: [ 47.433265][ T4502] [ 47.434332][ T4502] CPU0 CPU1 [ 47.435063][ T4502] ---- ---- [ 47.435851][ T4502] lock(&oi->ip_xattr_sem); [ 47.436495][ T4502] lock(jbd2_handle); [ 47.437409][ T4502] lock(&oi->ip_xattr_sem); [ 47.438408][ T4502] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 47.439454][ T4502] [ 47.439454][ T4502] *** DEADLOCK *** [ 47.439454][ T4502] [ 47.440625][ T4502] 3 locks held by syz.0.17/4502: [ 47.441308][ T4502] #0: ffff0000d2e72460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 47.442660][ T4502] #1: ffff0000ea3b09c8 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2ac [ 47.444288][ T4502] #2: ffff0000ea3b06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x32c/0xe98 [ 47.445846][ T4502] [ 47.445846][ T4502] stack backtrace: [ 47.446746][ T4502] CPU: 0 PID: 4502 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.447769][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.449235][ T4502] Call trace: [ 47.449731][ T4502] dump_backtrace+0x1c8/0x1f4 [ 47.450374][ T4502] show_stack+0x2c/0x3c [ 47.450955][ T4502] __dump_stack+0x30/0x40 [ 47.451568][ T4502] dump_stack_lvl+0xf8/0x160 [ 47.452262][ T4502] dump_stack+0x1c/0x5c [ 47.452840][ T4502] print_circular_bug+0x148/0x1b0 [ 47.453529][ T4502] check_noncircular+0x240/0x2d4 [ 47.454292][ T4502] __lock_acquire+0x293c/0x6544 [ 47.455025][ T4502] lock_acquire+0x20c/0x644 [ 47.455632][ T4502] down_write+0x5c/0x88 [ 47.456166][ T4502] ocfs2_reserve_suballoc_bits+0x12c/0x3cd4 [ 47.457024][ T4502] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 47.457913][ T4502] ocfs2_init_xattr_set_ctxt+0x300/0x7bc [ 47.458698][ T4502] ocfs2_xattr_set+0x91c/0xe98 [ 47.459394][ T4502] ocfs2_set_acl+0x3ec/0x4a0 [ 47.460051][ T4502] ocfs2_iop_set_acl+0x174/0x240 [ 47.460733][ T4502] posix_acl_xattr_set+0x2f8/0x398 [ 47.461508][ T4502] __vfs_setxattr+0x388/0x3a4 [ 47.462246][ T4502] __vfs_setxattr_noperm+0x120/0x564 [ 47.463041][ T4502] __vfs_setxattr_locked+0x1ec/0x218 [ 47.463765][ T4502] vfs_setxattr+0x158/0x2ac [ 47.464438][ T4502] setxattr+0x228/0x28c [ 47.465059][ T4502] path_setxattr+0x12c/0x25c [ 47.465701][ T4502] __arm64_sys_setxattr+0xbc/0xd8 [ 47.466443][ T4502] invoke_syscall+0x98/0x2bc [ 47.467103][ T4502] el0_svc_common+0x138/0x258 [ 47.467763][ T4502] do_el0_svc+0x58/0x13c [ 47.468403][ T4502] el0_svc+0x58/0x138 [ 47.469015][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 47.469762][ T4502] el0t_64_sync+0x18c/0x190 [ 47.481650][ T4422] ocfs2: Unmounting device (7,0) on (node local) [ 47.529020][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.530214][ T221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.532078][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.533258][ T221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.534658][ T221] device bridge_slave_1 left promiscuous mode [ 47.535635][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.559497][ T221] device bridge_slave_0 left promiscuous mode [ 47.560532][ T221] bridge0: port 1(bridge_slave_0) entered disabled state