Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 parsed 1 programs 1970/01/01 00:00:33 serving rpc on tcp://40961 [ 34.804066][ T4340] cgroup: Unknown subsys name 'net' [ 35.098963][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.371656][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.044140][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.045497][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.047235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.056920][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.058163][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.059657][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.288645][ T4372] chnl_net:caif_netlink_parms(): no params data found [ 38.306126][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.307797][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.309386][ T4372] device bridge_slave_0 entered promiscuous mode [ 38.312908][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.314030][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.315444][ T4372] device bridge_slave_1 entered promiscuous mode [ 38.322122][ T4372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.324487][ T4372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.331436][ T4372] team0: Port device team_slave_0 added [ 38.333386][ T4372] team0: Port device team_slave_1 added [ 38.339926][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.341145][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.345079][ T4372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.347990][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.349145][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.352875][ T4372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.397625][ T4372] device hsr_slave_0 entered promiscuous mode [ 38.436564][ T4372] device hsr_slave_1 entered promiscuous mode [ 38.511002][ T4372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.548756][ T4372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.587878][ T4372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.629323][ T4372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.742062][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.743250][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.744563][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.745627][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.764209][ T4372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.769278][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.771602][ T1617] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.773330][ T1617] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.780062][ T4372] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.782991][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.784778][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.785879][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.789169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.790721][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.791833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.798959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.800677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.804520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.809004][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.811789][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.814215][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.880237][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.881584][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.884577][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.891525][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.897502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.899147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.900595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.904820][ T4372] device veth0_vlan entered promiscuous mode [ 38.908158][ T4372] device veth1_vlan entered promiscuous mode [ 38.914785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.919576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.921714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.924703][ T4372] device veth0_macvtap entered promiscuous mode [ 38.928766][ T4372] device veth1_macvtap entered promiscuous mode [ 38.934757][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.936022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.938582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.942154][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.943513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.946152][ T4372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.948157][ T4372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949482][ T4372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.950814][ T4372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.565762][ T4424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.568635][ T4424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.569832][ T4424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.571412][ T4424] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.572704][ T4424] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.573992][ T4424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:40 executed programs: 0 [ 40.167696][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.169505][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.170799][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.172182][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.173368][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.174538][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.428775][ T4435] chnl_net:caif_netlink_parms(): no params data found [ 40.451912][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.453113][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.454596][ T4435] device bridge_slave_0 entered promiscuous mode [ 40.456713][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.457879][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.459439][ T4435] device bridge_slave_1 entered promiscuous mode [ 40.465566][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.468962][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.475017][ T4435] team0: Port device team_slave_0 added [ 40.478283][ T4435] team0: Port device team_slave_1 added [ 40.483506][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.484605][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.488945][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.576648][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.577774][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.581462][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.717747][ T4435] device hsr_slave_0 entered promiscuous mode [ 40.766549][ T4435] device hsr_slave_1 entered promiscuous mode [ 40.826424][ T4435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.827663][ T4435] Cannot create hsr debugfs directory [ 41.177585][ T4435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.246629][ T4424] Bluetooth: hci0: command 0x0409 tx timeout [ 43.577801][ T4435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.017581][ T4435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.118302][ T4435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.316939][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 44.330735][ T4435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.428341][ T4435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.477557][ T4435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.618640][ T4435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.746582][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.750973][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.752539][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.755409][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.757877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.759510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.760934][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.761991][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.763616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.765680][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.768316][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.769724][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.770791][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.819314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.822096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.824688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.826814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.828327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.830882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.833110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.835684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.838513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.841103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.842564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.844936][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.952101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.953428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.956220][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.962978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.964550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.002553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.004158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.005939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.007886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.010133][ T4435] device veth0_vlan entered promiscuous mode [ 45.013588][ T4435] device veth1_vlan entered promiscuous mode [ 45.019638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.021291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.022637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.024043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.026253][ T4435] device veth0_macvtap entered promiscuous mode [ 45.028742][ T4435] device veth1_macvtap entered promiscuous mode [ 45.032920][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.034684][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.037183][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.108456][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.110036][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.111527][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.112970][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.115290][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.117527][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.119633][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.120940][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.122538][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.125443][ T4435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.127197][ T4435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.128526][ T4435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.129874][ T4435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.150227][ T242] device hsr_slave_0 left promiscuous mode [ 45.186600][ T242] device hsr_slave_1 left promiscuous mode [ 45.276610][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.277845][ T242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.279605][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.280750][ T242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.282107][ T242] device bridge_slave_1 left promiscuous mode [ 45.283499][ T242] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.317117][ T242] device bridge_slave_0 left promiscuous mode [ 45.318161][ T242] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.476599][ T242] device veth1_macvtap left promiscuous mode [ 45.477720][ T242] device veth0_macvtap left promiscuous mode [ 45.478669][ T242] device veth1_vlan left promiscuous mode [ 45.479646][ T242] device veth0_vlan left promiscuous mode [ 46.396348][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 47.717256][ T242] team0 (unregistering): Port device team_slave_1 removed [ 47.907424][ T242] team0 (unregistering): Port device team_slave_0 removed [ 48.076852][ T242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.296874][ T242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.476366][ T4424] Bluetooth: hci0: command 0x0419 tx timeout [ 49.907201][ T242] bond0 (unregistering): Released all slaves [ 50.225735][ T1860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.227983][ T1860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.229409][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.238855][ T1860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.240211][ T1860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.241745][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.358099][ T4459] loop0: detected capacity change from 0 to 32768 [ 50.359873][ T4459] ======================================================= [ 50.359873][ T4459] WARNING: The mand mount option has been deprecated and [ 50.359873][ T4459] and is ignored by this kernel. Remove the mand [ 50.359873][ T4459] option from the mount to silence this warning. [ 50.359873][ T4459] ======================================================= [ 50.385572][ T4459] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 50.394508][ T4459] [ 50.394982][ T4459] ====================================================== [ 50.395996][ T4459] WARNING: possible circular locking dependency detected [ 50.397126][ T4459] syzkaller #0 Not tainted [ 50.397859][ T4459] ------------------------------------------------------ [ 50.398985][ T4459] syz.0.17/4459 is trying to acquire lock: [ 50.399908][ T4459] ffff0000ccb52650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xb04/0x1950 [ 50.401398][ T4459] [ 50.401398][ T4459] but task is already holding lock: [ 50.402605][ T4459] ffff0000f1c422e0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xaf4/0x1950 [ 50.404030][ T4459] [ 50.404030][ T4459] which lock already depends on the new lock. [ 50.404030][ T4459] [ 50.405754][ T4459] [ 50.405754][ T4459] the existing dependency chain (in reverse order) is: [ 50.407246][ T4459] [ 50.407246][ T4459] -> #3 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 50.408491][ T4459] down_write+0x5c/0x88 [ 50.409249][ T4459] ocfs2_try_remove_refcount_tree+0xb4/0x2e4 [ 50.410270][ T4459] ocfs2_xattr_set+0x484/0xf0c [ 50.411211][ T4459] ocfs2_set_acl+0x410/0x4cc [ 50.412040][ T4459] ocfs2_iop_set_acl+0x178/0x258 [ 50.412943][ T4459] posix_acl_xattr_set+0x2f8/0x394 [ 50.413815][ T4459] __vfs_removexattr+0x364/0x380 [ 50.414690][ T4459] __vfs_removexattr_locked+0x1d0/0x208 [ 50.415694][ T4459] vfs_removexattr+0x80/0x18c [ 50.416591][ T4459] ovl_workdir_create+0x358/0x66c [ 50.417569][ T4459] ovl_get_workdir+0x31c/0x1084 [ 50.418470][ T4459] ovl_fill_super+0x17d0/0x3938 [ 50.419337][ T4459] mount_nodev+0x68/0x108 [ 50.420122][ T4459] ovl_mount+0x3c/0x50 [ 50.420864][ T4459] legacy_get_tree+0xd8/0x174 [ 50.421726][ T4459] vfs_get_tree+0x90/0x278 [ 50.422593][ T4459] do_new_mount+0x228/0x804 [ 50.423441][ T4459] path_mount+0x5ac/0xe6c [ 50.424269][ T4459] __arm64_sys_mount+0x4a0/0x5a0 [ 50.425162][ T4459] invoke_syscall+0x98/0x290 [ 50.425977][ T4459] el0_svc_common+0x13c/0x258 [ 50.426812][ T4459] do_el0_svc+0x5c/0x134 [ 50.427575][ T4459] el0_svc+0x58/0x128 [ 50.428350][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 50.429246][ T4459] el0t_64_sync+0x18c/0x190 [ 50.430064][ T4459] [ 50.430064][ T4459] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 50.431336][ T4459] down_read+0x64/0x300 [ 50.432114][ T4459] ocfs2_init_acl+0x264/0x61c [ 50.433026][ T4459] ocfs2_mknod+0x12b0/0x218c [ 50.433893][ T4459] ocfs2_mkdir+0x19c/0x51c [ 50.434728][ T4459] vfs_mkdir+0x314/0x4d8 [ 50.435523][ T4459] do_mkdirat+0x1b8/0x3ec [ 50.436374][ T4459] __arm64_sys_mkdirat+0x90/0xa8 [ 50.437277][ T4459] invoke_syscall+0x98/0x290 [ 50.438095][ T4459] el0_svc_common+0x13c/0x258 [ 50.439005][ T4459] do_el0_svc+0x5c/0x134 [ 50.439833][ T4459] el0_svc+0x58/0x128 [ 50.440579][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 50.441468][ T4459] el0t_64_sync+0x18c/0x190 [ 50.442290][ T4459] [ 50.442290][ T4459] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 50.443703][ T4459] down_read+0x64/0x300 [ 50.444434][ T4459] ocfs2_start_trans+0x38c/0x6f4 [ 50.445289][ T4459] ocfs2_mknod+0xd2c/0x218c [ 50.446095][ T4459] ocfs2_mkdir+0x19c/0x51c [ 50.446917][ T4459] vfs_mkdir+0x314/0x4d8 [ 50.447798][ T4459] do_mkdirat+0x1b8/0x3ec [ 50.448628][ T4459] __arm64_sys_mkdirat+0x90/0xa8 [ 50.449541][ T4459] invoke_syscall+0x98/0x290 [ 50.450375][ T4459] el0_svc_common+0x13c/0x258 [ 50.451241][ T4459] do_el0_svc+0x5c/0x134 [ 50.452057][ T4459] el0_svc+0x58/0x128 [ 50.452829][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 50.453745][ T4459] el0t_64_sync+0x18c/0x190 [ 50.454585][ T4459] [ 50.454585][ T4459] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 50.455740][ T4459] __lock_acquire+0x2808/0x6634 [ 50.456630][ T4459] lock_acquire+0x20c/0x638 [ 50.457513][ T4459] ocfs2_start_trans+0x20c/0x6f4 [ 50.458374][ T4459] ocfs2_setattr+0xb04/0x1950 [ 50.459238][ T4459] notify_change+0xb5c/0xe20 [ 50.460033][ T4459] ovl_workdir_create+0x4d4/0x66c [ 50.460940][ T4459] ovl_get_workdir+0x31c/0x1084 [ 50.461818][ T4459] ovl_fill_super+0x17d0/0x3938 [ 50.462649][ T4459] mount_nodev+0x68/0x108 [ 50.463352][ T4459] ovl_mount+0x3c/0x50 [ 50.464155][ T4459] legacy_get_tree+0xd8/0x174 [ 50.464987][ T4459] vfs_get_tree+0x90/0x278 [ 50.465773][ T4459] do_new_mount+0x228/0x804 [ 50.466617][ T4459] path_mount+0x5ac/0xe6c [ 50.467448][ T4459] __arm64_sys_mount+0x4a0/0x5a0 [ 50.468310][ T4459] invoke_syscall+0x98/0x290 [ 50.469159][ T4459] el0_svc_common+0x13c/0x258 [ 50.469980][ T4459] do_el0_svc+0x5c/0x134 [ 50.470715][ T4459] el0_svc+0x58/0x128 [ 50.471487][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 50.472453][ T4459] el0t_64_sync+0x18c/0x190 [ 50.473287][ T4459] [ 50.473287][ T4459] other info that might help us debug this: [ 50.473287][ T4459] [ 50.474913][ T4459] Chain exists of: [ 50.474913][ T4459] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 50.474913][ T4459] [ 50.477122][ T4459] Possible unsafe locking scenario: [ 50.477122][ T4459] [ 50.478383][ T4459] CPU0 CPU1 [ 50.479281][ T4459] ---- ---- [ 50.480280][ T4459] lock(&oi->ip_alloc_sem); [ 50.481059][ T4459] lock(&oi->ip_xattr_sem); [ 50.482187][ T4459] lock(&oi->ip_alloc_sem); [ 50.483242][ T4459] lock(sb_internal#2); [ 50.483924][ T4459] [ 50.483924][ T4459] *** DEADLOCK *** [ 50.483924][ T4459] [ 50.485169][ T4459] 5 locks held by syz.0.17/4459: [ 50.485937][ T4459] #0: ffff0000cb9ec0e0 (&type->s_umount_key#51/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 [ 50.487597][ T4459] #1: ffff0000ccb52460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 50.489103][ T4459] #2: ffff0000f1c41808 (&sb->s_type->i_mutex_key#20/1){+.+.}-{3:3}, at: ovl_workdir_create+0x128/0x66c [ 50.490919][ T4459] #3: ffff0000f1c42648 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: ovl_workdir_create+0x474/0x66c [ 50.492835][ T4459] #4: ffff0000f1c422e0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xaf4/0x1950 [ 50.494440][ T4459] [ 50.494440][ T4459] stack backtrace: [ 50.495289][ T4459] CPU: 0 PID: 4459 Comm: syz.0.17 Not tainted syzkaller #0 [ 50.496368][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.498087][ T4459] Call trace: [ 50.498624][ T4459] dump_backtrace+0x1c4/0x1f0 [ 50.499413][ T4459] show_stack+0x2c/0x3c [ 50.500129][ T4459] __dump_stack+0x30/0x40 [ 50.500900][ T4459] dump_stack_lvl+0xf4/0x15c [ 50.501637][ T4459] dump_stack+0x1c/0x5c [ 50.502271][ T4459] print_circular_bug+0x148/0x1b0 [ 50.503053][ T4459] check_noncircular+0x264/0x2f8 [ 50.503851][ T4459] __lock_acquire+0x2808/0x6634 [ 50.504687][ T4459] lock_acquire+0x20c/0x638 [ 50.505465][ T4459] ocfs2_start_trans+0x20c/0x6f4 [ 50.506267][ T4459] ocfs2_setattr+0xb04/0x1950 [ 50.507022][ T4459] notify_change+0xb5c/0xe20 [ 50.507814][ T4459] ovl_workdir_create+0x4d4/0x66c [ 50.508596][ T4459] ovl_get_workdir+0x31c/0x1084 [ 50.509386][ T4459] ovl_fill_super+0x17d0/0x3938 [ 50.510126][ T4459] mount_nodev+0x68/0x108 [ 50.510805][ T4459] ovl_mount+0x3c/0x50 [ 50.511466][ T4459] legacy_get_tree+0xd8/0x174 [ 50.512198][ T4459] vfs_get_tree+0x90/0x278 [ 50.512885][ T4459] do_new_mount+0x228/0x804 [ 50.513574][ T4459] path_mount+0x5ac/0xe6c [ 50.514284][ T4459] __arm64_sys_mount+0x4a0/0x5a0 [ 50.515049][ T4459] invoke_syscall+0x98/0x290 [ 50.515791][ T4459] el0_svc_common+0x13c/0x258 [ 50.516632][ T4459] do_el0_svc+0x5c/0x134 [ 50.517354][ T4459] el0_svc+0x58/0x128 [ 50.517963][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 50.518828][ T4459] el0t_64_sync+0x18c/0x190 [ 50.520734][ T4459] overlayfs: upper fs does not support tmpfile. [ 50.522163][ T4459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.523857][ T4459] overlayfs: upper fs missing required features. [ 50.529130][ T4435] ocfs2: Unmounting device (7,0) on (node local)