Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 1970/01/01 00:00:34 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:35 parsed 1 programs [ 38.791258][ T6533] cgroup: Unknown subsys name 'net' [ 38.939270][ T6533] cgroup: Unknown subsys name 'cpuset' [ 38.943354][ T6533] cgroup: Unknown subsys name 'rlimit' [ 39.120710][ T6533] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 48.812164][ T6544] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.495504][ T6570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.498712][ T6570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.501176][ T6570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.504193][ T6570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.512855][ T6570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.797272][ T346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.797352][ T346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.812445][ T346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.814303][ T346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.168690][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 51.315153][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.316882][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.317016][ T6602] bridge_slave_0: entered allmulticast mode [ 51.317942][ T6602] bridge_slave_0: entered promiscuous mode [ 51.320076][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.320136][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.320239][ T6602] bridge_slave_1: entered allmulticast mode [ 51.321189][ T6602] bridge_slave_1: entered promiscuous mode [ 51.342503][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.344144][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.361332][ T6602] team0: Port device team_slave_0 added [ 51.362749][ T6602] team0: Port device team_slave_1 added [ 51.379762][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.381808][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.386291][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.388038][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.388068][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.388098][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.415946][ T6602] hsr_slave_0: entered promiscuous mode [ 51.416619][ T6602] hsr_slave_1: entered promiscuous mode [ 51.597846][ T6602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.603568][ T6602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.619378][ T6602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.623377][ T6602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.643692][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.643807][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.644162][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.644243][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.806930][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.816230][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.821444][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.834060][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.838978][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.839077][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.848432][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.848520][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.952258][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.971757][ T6602] veth0_vlan: entered promiscuous mode [ 51.978832][ T6602] veth1_vlan: entered promiscuous mode [ 51.998429][ T6602] veth0_macvtap: entered promiscuous mode [ 52.003115][ T6602] veth1_macvtap: entered promiscuous mode [ 52.014016][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.020325][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.025280][ T6602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.025358][ T6602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.025389][ T6602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.025432][ T6602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.439093][ T566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.528683][ T566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.609627][ T566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.748873][ T566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:52 executed programs: 0 [ 53.013369][ T6096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.015227][ T6096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.015750][ T6096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.016777][ T6096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.017197][ T6096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.111611][ T6638] chnl_net:caif_netlink_parms(): no params data found [ 53.155480][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.157771][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.157897][ T6638] bridge_slave_0: entered allmulticast mode [ 53.162773][ T6638] bridge_slave_0: entered promiscuous mode [ 53.164385][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.164450][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.164583][ T6638] bridge_slave_1: entered allmulticast mode [ 53.165445][ T6638] bridge_slave_1: entered promiscuous mode [ 53.188773][ T6638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.190387][ T6638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.204429][ T6638] team0: Port device team_slave_0 added [ 53.207157][ T6638] team0: Port device team_slave_1 added [ 53.221507][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.221563][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.221623][ T6638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.222766][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.222791][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.222822][ T6638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.258343][ T6638] hsr_slave_0: entered promiscuous mode [ 53.258854][ T6638] hsr_slave_1: entered promiscuous mode [ 53.259159][ T6638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.259258][ T6638] Cannot create hsr debugfs directory [ 55.056763][ T6096] Bluetooth: hci0: command tx timeout [ 55.506358][ T566] bridge_slave_1: left allmulticast mode [ 55.506462][ T566] bridge_slave_1: left promiscuous mode [ 55.506939][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.514109][ T566] bridge_slave_0: left allmulticast mode [ 55.514169][ T566] bridge_slave_0: left promiscuous mode [ 55.514304][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.048658][ T566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.088665][ T566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.129836][ T566] bond0 (unregistering): Released all slaves [ 57.136491][ T6096] Bluetooth: hci0: command tx timeout [ 57.204672][ T566] hsr_slave_0: left promiscuous mode [ 57.207428][ T566] hsr_slave_1: left promiscuous mode [ 57.207876][ T566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.207920][ T566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.208769][ T566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.208804][ T566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.234141][ T566] veth1_macvtap: left promiscuous mode [ 57.234289][ T566] veth0_macvtap: left promiscuous mode [ 57.234387][ T566] veth1_vlan: left promiscuous mode [ 57.234866][ T566] veth0_vlan: left promiscuous mode [ 59.129355][ T566] team0 (unregistering): Port device team_slave_1 removed [ 59.216688][ T6096] Bluetooth: hci0: command tx timeout [ 59.307682][ T566] team0 (unregistering): Port device team_slave_0 removed [ 61.296199][ T6096] Bluetooth: hci0: command tx timeout [ 61.756914][ T6638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.760726][ T6638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.762760][ T6638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.769455][ T6638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.820394][ T6638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.828271][ T6638] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.833874][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.833965][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.843810][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.843898][ T4579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.079487][ T6638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.099772][ T6638] veth0_vlan: entered promiscuous mode [ 62.114151][ T6638] veth1_vlan: entered promiscuous mode [ 62.132341][ T6638] veth0_macvtap: entered promiscuous mode [ 62.146919][ T6638] veth1_macvtap: entered promiscuous mode [ 62.155754][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.164143][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.169808][ T6638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.172465][ T6638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.174961][ T6638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.177562][ T6638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.372727][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.375016][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.393813][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.393876][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.607583][ T6687] loop0: detected capacity change from 0 to 32768 [ 62.630931][ T6687] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 62.635110][ T4492] (kworker/u8:10,4492,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 62.648810][ T6687] [ 62.649562][ T6687] ====================================================== [ 62.651466][ T6687] WARNING: possible circular locking dependency detected [ 62.653428][ T6687] 6.16.0-rc6-syzkaller-gaaef6f251176 #0 Not tainted [ 62.655247][ T6687] ------------------------------------------------------ [ 62.657177][ T6687] syz.0.16/6687 is trying to acquire lock: [ 62.658793][ T6687] ffff0000d7006d80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 62.662433][ T6687] [ 62.662433][ T6687] but task is already holding lock: [ 62.664502][ T6687] ffff0000d70006f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x330/0xe9c [ 62.667191][ T6687] [ 62.667191][ T6687] which lock already depends on the new lock. [ 62.667191][ T6687] [ 62.670281][ T6687] [ 62.670281][ T6687] the existing dependency chain (in reverse order) is: [ 62.672860][ T6687] [ 62.672860][ T6687] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}: [ 62.675115][ T6687] down_read+0x58/0x2f8 [ 62.676422][ T6687] ocfs2_init_acl+0x258/0x5f0 [ 62.677932][ T6687] ocfs2_mknod+0x1028/0x1cf0 [ 62.679331][ T6687] ocfs2_create+0x190/0x474 [ 62.680756][ T6687] path_openat+0x12d8/0x2c40 [ 62.682201][ T6687] do_filp_open+0x18c/0x36c [ 62.683607][ T6687] do_sys_openat2+0x11c/0x1b4 [ 62.685034][ T6687] __arm64_sys_openat+0x120/0x158 [ 62.686505][ T6687] invoke_syscall+0x98/0x2b8 [ 62.687912][ T6687] el0_svc_common+0x130/0x23c [ 62.689452][ T6687] do_el0_svc+0x48/0x58 [ 62.690824][ T6687] el0_svc+0x58/0x180 [ 62.692052][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.693602][ T6687] el0t_64_sync+0x198/0x19c [ 62.695036][ T6687] [ 62.695036][ T6687] -> #4 (jbd2_handle){++++}-{0:0}: [ 62.697059][ T6687] start_this_handle+0xe74/0x10dc [ 62.698572][ T6687] jbd2__journal_start+0x288/0x51c [ 62.700257][ T6687] jbd2_journal_start+0x3c/0x4c [ 62.701783][ T6687] ocfs2_start_trans+0x368/0x6b0 [ 62.703339][ T6687] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 62.705202][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.707078][ T6687] ocfs2_mknod+0xbd8/0x1cf0 [ 62.708510][ T6687] ocfs2_create+0x190/0x474 [ 62.710012][ T6687] path_openat+0x12d8/0x2c40 [ 62.711422][ T6687] do_filp_open+0x18c/0x36c [ 62.712787][ T6687] do_sys_openat2+0x11c/0x1b4 [ 62.714256][ T6687] __arm64_sys_openat+0x120/0x158 [ 62.715759][ T6687] invoke_syscall+0x98/0x2b8 [ 62.717157][ T6687] el0_svc_common+0x130/0x23c [ 62.718538][ T6687] do_el0_svc+0x48/0x58 [ 62.719841][ T6687] el0_svc+0x58/0x180 [ 62.721053][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.722570][ T6687] el0t_64_sync+0x198/0x19c [ 62.723962][ T6687] [ 62.723962][ T6687] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 62.726320][ T6687] down_read+0x58/0x2f8 [ 62.727604][ T6687] ocfs2_start_trans+0x35c/0x6b0 [ 62.729085][ T6687] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 62.730840][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.732758][ T6687] ocfs2_mknod+0xbd8/0x1cf0 [ 62.734112][ T6687] ocfs2_create+0x190/0x474 [ 62.735503][ T6687] path_openat+0x12d8/0x2c40 [ 62.736873][ T6687] do_filp_open+0x18c/0x36c [ 62.738265][ T6687] do_sys_openat2+0x11c/0x1b4 [ 62.739809][ T6687] __arm64_sys_openat+0x120/0x158 [ 62.741364][ T6687] invoke_syscall+0x98/0x2b8 [ 62.742806][ T6687] el0_svc_common+0x130/0x23c [ 62.744239][ T6687] do_el0_svc+0x48/0x58 [ 62.745553][ T6687] el0_svc+0x58/0x180 [ 62.746819][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.748356][ T6687] el0t_64_sync+0x198/0x19c [ 62.749789][ T6687] [ 62.749789][ T6687] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 62.751940][ T6687] ocfs2_start_trans+0x1f4/0x6b0 [ 62.753405][ T6687] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 62.755159][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.757069][ T6687] ocfs2_mknod+0xbd8/0x1cf0 [ 62.758453][ T6687] ocfs2_create+0x190/0x474 [ 62.759847][ T6687] path_openat+0x12d8/0x2c40 [ 62.761274][ T6687] do_filp_open+0x18c/0x36c [ 62.762743][ T6687] do_sys_openat2+0x11c/0x1b4 [ 62.764228][ T6687] __arm64_sys_openat+0x120/0x158 [ 62.765777][ T6687] invoke_syscall+0x98/0x2b8 [ 62.767210][ T6687] el0_svc_common+0x130/0x23c [ 62.768627][ T6687] do_el0_svc+0x48/0x58 [ 62.769945][ T6687] el0_svc+0x58/0x180 [ 62.771188][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.772770][ T6687] el0t_64_sync+0x198/0x19c [ 62.774189][ T6687] [ 62.774189][ T6687] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}: [ 62.777121][ T6687] down_write+0x50/0xc0 [ 62.778464][ T6687] ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 62.780284][ T6687] ocfs2_reserve_clusters_with_limit+0x290/0x9e0 [ 62.782166][ T6687] ocfs2_reserve_suballoc_bits+0x610/0x3b9c [ 62.783964][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.785863][ T6687] ocfs2_mknod+0xbd8/0x1cf0 [ 62.787265][ T6687] ocfs2_create+0x190/0x474 [ 62.788673][ T6687] path_openat+0x12d8/0x2c40 [ 62.790060][ T6687] do_filp_open+0x18c/0x36c [ 62.791436][ T6687] do_sys_openat2+0x11c/0x1b4 [ 62.792878][ T6687] __arm64_sys_openat+0x120/0x158 [ 62.794369][ T6687] invoke_syscall+0x98/0x2b8 [ 62.795794][ T6687] el0_svc_common+0x130/0x23c [ 62.797221][ T6687] do_el0_svc+0x48/0x58 [ 62.798533][ T6687] el0_svc+0x58/0x180 [ 62.799795][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.801359][ T6687] el0t_64_sync+0x198/0x19c [ 62.802801][ T6687] [ 62.802801][ T6687] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}: [ 62.805646][ T6687] __lock_acquire+0x1774/0x30a4 [ 62.807132][ T6687] lock_acquire+0x14c/0x2e0 [ 62.808532][ T6687] down_write+0x50/0xc0 [ 62.809889][ T6687] ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 62.811656][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.813572][ T6687] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 62.815215][ T6687] ocfs2_xattr_set+0x920/0xe9c [ 62.816653][ T6687] ocfs2_set_acl+0x574/0x628 [ 62.818105][ T6687] ocfs2_iop_set_acl+0x190/0x25c [ 62.819621][ T6687] vfs_set_acl+0x70c/0x974 [ 62.820998][ T6687] do_set_acl+0xe0/0x1a8 [ 62.822330][ T6687] filename_setxattr+0x268/0x4f8 [ 62.823893][ T6687] path_setxattrat+0x2e8/0x320 [ 62.825355][ T6687] __arm64_sys_setxattr+0xc0/0xdc [ 62.826918][ T6687] invoke_syscall+0x98/0x2b8 [ 62.828407][ T6687] el0_svc_common+0x130/0x23c [ 62.829844][ T6687] do_el0_svc+0x48/0x58 [ 62.831161][ T6687] el0_svc+0x58/0x180 [ 62.832423][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.833986][ T6687] el0t_64_sync+0x198/0x19c [ 62.835437][ T6687] [ 62.835437][ T6687] other info that might help us debug this: [ 62.835437][ T6687] [ 62.838311][ T6687] Chain exists of: [ 62.838311][ T6687] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 62.838311][ T6687] [ 62.842833][ T6687] Possible unsafe locking scenario: [ 62.842833][ T6687] [ 62.844823][ T6687] CPU0 CPU1 [ 62.846296][ T6687] ---- ---- [ 62.847758][ T6687] lock(&oi->ip_xattr_sem); [ 62.849058][ T6687] lock(jbd2_handle); [ 62.850857][ T6687] lock(&oi->ip_xattr_sem); [ 62.852874][ T6687] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 62.854932][ T6687] [ 62.854932][ T6687] *** DEADLOCK *** [ 62.854932][ T6687] [ 62.857216][ T6687] 3 locks held by syz.0.16/6687: [ 62.858539][ T6687] #0: ffff0000da0be428 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 62.861145][ T6687] #1: ffff0000d70009c0 (&type->i_mutex_dir_key#8){+.+.}-{4:4}, at: vfs_set_acl+0x338/0x974 [ 62.863980][ T6687] #2: ffff0000d70006f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x330/0xe9c [ 62.866779][ T6687] [ 62.866779][ T6687] stack backtrace: [ 62.868402][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT [ 62.871312][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.874107][ T6687] Call trace: [ 62.875007][ T6687] show_stack+0x2c/0x3c (C) [ 62.876280][ T6687] __dump_stack+0x30/0x40 [ 62.877454][ T6687] dump_stack_lvl+0xd8/0x12c [ 62.878733][ T6687] dump_stack+0x1c/0x28 [ 62.879879][ T6687] print_circular_bug+0x324/0x32c [ 62.881280][ T6687] check_noncircular+0x154/0x174 [ 62.882626][ T6687] __lock_acquire+0x1774/0x30a4 [ 62.883974][ T6687] lock_acquire+0x14c/0x2e0 [ 62.885206][ T6687] down_write+0x50/0xc0 [ 62.886360][ T6687] ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 62.887937][ T6687] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 62.889756][ T6687] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 62.891350][ T6687] ocfs2_xattr_set+0x920/0xe9c [ 62.892682][ T6687] ocfs2_set_acl+0x574/0x628 [ 62.894161][ T6687] ocfs2_iop_set_acl+0x190/0x25c [ 62.895576][ T6687] vfs_set_acl+0x70c/0x974 [ 62.896904][ T6687] do_set_acl+0xe0/0x1a8 [ 62.898064][ T6687] filename_setxattr+0x268/0x4f8 [ 62.899395][ T6687] path_setxattrat+0x2e8/0x320 [ 62.900682][ T6687] __arm64_sys_setxattr+0xc0/0xdc [ 62.902128][ T6687] invoke_syscall+0x98/0x2b8 [ 62.903377][ T6687] el0_svc_common+0x130/0x23c [ 62.904635][ T6687] do_el0_svc+0x48/0x58 [ 62.905839][ T6687] el0_svc+0x58/0x180 [ 62.906921][ T6687] el0t_64_sync_handler+0x84/0x12c [ 62.908328][ T6687] el0t_64_sync+0x198/0x19c [ 62.933332][ T6638] ocfs2: Unmounting device (7,0) on (node local)