Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. 1970/01/01 00:00:28 parsed 1 programs [ 29.827768][ T6576] cgroup: Unknown subsys name 'net' [ 29.977540][ T6576] cgroup: Unknown subsys name 'cpuset' [ 29.979760][ T6576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.130069][ T6576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.989034][ T6582] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.084872][ T6596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.093060][ T6596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.094661][ T6598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.095017][ T6598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.095210][ T6598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.903637][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.905245][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.915048][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.916144][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.289180][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 36.312023][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.312285][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.312353][ T6651] bridge_slave_0: entered allmulticast mode [ 36.312812][ T6651] bridge_slave_0: entered promiscuous mode [ 36.314005][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.314050][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.314089][ T6651] bridge_slave_1: entered allmulticast mode [ 36.315154][ T6651] bridge_slave_1: entered promiscuous mode [ 36.416484][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.417322][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.423799][ T6651] team0: Port device team_slave_0 added [ 36.424481][ T6651] team0: Port device team_slave_1 added [ 36.431043][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.431064][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.431077][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.431804][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.431812][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.431823][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.469874][ T6651] hsr_slave_0: entered promiscuous mode [ 36.471502][ T6651] hsr_slave_1: entered promiscuous mode [ 36.556979][ T6651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.596481][ T6651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.603269][ T6651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.605521][ T6651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.615537][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.615582][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.615775][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.615798][ T6651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.629504][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.632746][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.634503][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.707261][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.709863][ T614] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.709907][ T614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.713867][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.713916][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.725378][ T6651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.725409][ T6651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.773806][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.784973][ T6651] veth0_vlan: entered promiscuous mode [ 36.787096][ T6651] veth1_vlan: entered promiscuous mode [ 36.793330][ T6651] veth0_macvtap: entered promiscuous mode [ 36.794600][ T6651] veth1_macvtap: entered promiscuous mode [ 36.801919][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.802978][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.805822][ T614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.808918][ T614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.810701][ T614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813489][ T614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.133480][ T131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.188890][ T131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.231830][ T131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.252356][ T131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:37 executed programs: 0 [ 37.300764][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.302551][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.303946][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.305643][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.307422][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.362772][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 37.385081][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.385153][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.385229][ T6683] bridge_slave_0: entered allmulticast mode [ 37.385647][ T6683] bridge_slave_0: entered promiscuous mode [ 37.387076][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.387126][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.387173][ T6683] bridge_slave_1: entered allmulticast mode [ 37.387595][ T6683] bridge_slave_1: entered promiscuous mode [ 37.399572][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.400436][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.408054][ T6683] team0: Port device team_slave_0 added [ 37.408734][ T6683] team0: Port device team_slave_1 added [ 37.414748][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.414773][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.414787][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.415281][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.415287][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.415298][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.433547][ T6683] hsr_slave_0: entered promiscuous mode [ 37.433841][ T6683] hsr_slave_1: entered promiscuous mode [ 37.434028][ T6683] debugfs: 'hsr0' already exists in 'hsr' [ 37.434074][ T6683] Cannot create hsr debugfs directory [ 39.386524][ T54] Bluetooth: hci0: command tx timeout [ 40.167124][ T131] bridge_slave_1: left allmulticast mode [ 40.167165][ T131] bridge_slave_1: left promiscuous mode [ 40.167485][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.172922][ T131] bridge_slave_0: left allmulticast mode [ 40.172951][ T131] bridge_slave_0: left promiscuous mode [ 40.173019][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.330894][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.367343][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.387143][ T131] bond0 (unregistering): Released all slaves [ 40.511327][ T131] hsr_slave_0: left promiscuous mode [ 40.512864][ T131] hsr_slave_1: left promiscuous mode [ 40.514136][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.515405][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.517480][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.517501][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.522834][ T131] veth1_macvtap: left promiscuous mode [ 40.523036][ T131] veth0_macvtap: left promiscuous mode [ 40.523087][ T131] veth1_vlan: left promiscuous mode [ 40.523326][ T131] veth0_vlan: left promiscuous mode [ 40.628821][ T131] team0 (unregistering): Port device team_slave_1 removed [ 40.634571][ T131] team0 (unregistering): Port device team_slave_0 removed [ 40.848658][ T6683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.852089][ T6683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.855682][ T6683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.857770][ T6683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.876863][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.881518][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.884962][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.885001][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.893067][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.893105][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.986614][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.997137][ T6683] veth0_vlan: entered promiscuous mode [ 41.000071][ T6683] veth1_vlan: entered promiscuous mode [ 41.005988][ T6683] veth0_macvtap: entered promiscuous mode [ 41.007404][ T6683] veth1_macvtap: entered promiscuous mode [ 41.010342][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.013532][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.015648][ T4121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.015746][ T4121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.015868][ T4121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.015912][ T4121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.052381][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.054472][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.063218][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.063247][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.185865][ T6737] loop0: detected capacity change from 0 to 32768 [ 41.188487][ T6737] (syz.0.17,6737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.191562][ T6737] (syz.0.17,6737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 41.205231][ T6737] JBD2: Ignoring recovery information on journal [ 41.230927][ T6737] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 41.245518][ T6737] [ 41.245959][ T6737] ====================================================== [ 41.247031][ T6737] WARNING: possible circular locking dependency detected [ 41.248102][ T6737] syzkaller #0 Not tainted [ 41.248716][ T6737] ------------------------------------------------------ [ 41.249756][ T6737] syz.0.17/6737 is trying to acquire lock: [ 41.250594][ T6737] ffff0000e23886f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x258/0x63c [ 41.252029][ T6737] [ 41.252029][ T6737] but task is already holding lock: [ 41.253122][ T6737] ffff0000df71ace8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 41.254657][ T6737] [ 41.254657][ T6737] which lock already depends on the new lock. [ 41.254657][ T6737] [ 41.256285][ T6737] [ 41.256285][ T6737] the existing dependency chain (in reverse order) is: [ 41.257728][ T6737] [ 41.257728][ T6737] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 41.259156][ T6737] down_read+0x58/0x308 [ 41.259823][ T6737] ocfs2_start_trans+0x35c/0x6b0 [ 41.260633][ T6737] ocfs2_modify_bh+0xe4/0x43c [ 41.261401][ T6737] ocfs2_local_read_info+0x104c/0x1364 [ 41.262360][ T6737] dquot_load_quota_sb+0x6bc/0xa90 [ 41.263173][ T6737] dquot_load_quota_inode+0x274/0x4e4 [ 41.263899][ T6737] ocfs2_enable_quotas+0x17c/0x3b4 [ 41.264726][ T6737] ocfs2_fill_super+0x3fe4/0x532c [ 41.265560][ T6737] get_tree_bdev_flags+0x360/0x414 [ 41.266442][ T6737] get_tree_bdev+0x2c/0x3c [ 41.267219][ T6737] ocfs2_get_tree+0x28/0x38 [ 41.267834][ T6737] vfs_get_tree+0x90/0x28c [ 41.268451][ T6737] do_new_mount+0x284/0x944 [ 41.269201][ T6737] path_mount+0x5b4/0xdfc [ 41.269954][ T6737] __arm64_sys_mount+0x3e8/0x468 [ 41.270763][ T6737] invoke_syscall+0x98/0x254 [ 41.271646][ T6737] el0_svc_common+0xe8/0x23c [ 41.272450][ T6737] do_el0_svc+0x48/0x58 [ 41.273171][ T6737] el0_svc+0x5c/0x26c [ 41.273928][ T6737] el0t_64_sync_handler+0x84/0x12c [ 41.274754][ T6737] el0t_64_sync+0x198/0x19c [ 41.276187][ T6737] [ 41.276187][ T6737] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 41.277422][ T6737] ocfs2_start_trans+0x1f4/0x6b0 [ 41.278305][ T6737] ocfs2_xattr_set+0xac4/0xe9c [ 41.279155][ T6737] ocfs2_xattr_trusted_set+0x4c/0x64 [ 41.280092][ T6737] __vfs_setxattr+0x3d8/0x400 [ 41.280971][ T6737] __vfs_setxattr_noperm+0x120/0x5c4 [ 41.281879][ T6737] __vfs_setxattr_locked+0x1e8/0x214 [ 41.282852][ T6737] vfs_setxattr+0x158/0x2a8 [ 41.283630][ T6737] filename_setxattr+0x20c/0x4f8 [ 41.284455][ T6737] path_setxattrat+0x2e8/0x320 [ 41.285195][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 41.285966][ T6737] invoke_syscall+0x98/0x254 [ 41.286752][ T6737] el0_svc_common+0xe8/0x23c [ 41.287488][ T6737] do_el0_svc+0x48/0x58 [ 41.288174][ T6737] el0_svc+0x5c/0x26c [ 41.288801][ T6737] el0t_64_sync_handler+0x84/0x12c [ 41.289612][ T6737] el0t_64_sync+0x198/0x19c [ 41.290283][ T6737] [ 41.290283][ T6737] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 41.291858][ T6737] down_write+0x50/0xc0 [ 41.292532][ T6737] ocfs2_reserve_suballoc_bits+0x130/0x3ea0 [ 41.293492][ T6737] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 41.294564][ T6737] ocfs2_init_xattr_set_ctxt+0x300/0x778 [ 41.295462][ T6737] ocfs2_xattr_set+0x920/0xe9c [ 41.296206][ T6737] ocfs2_xattr_trusted_set+0x4c/0x64 [ 41.297081][ T6737] __vfs_setxattr+0x3d8/0x400 [ 41.297774][ T6737] __vfs_setxattr_noperm+0x120/0x5c4 [ 41.298720][ T6737] __vfs_setxattr_locked+0x1e8/0x214 [ 41.299546][ T6737] vfs_setxattr+0x158/0x2a8 [ 41.300268][ T6737] filename_setxattr+0x20c/0x4f8 [ 41.301068][ T6737] path_setxattrat+0x2e8/0x320 [ 41.301930][ T6737] __arm64_sys_setxattr+0xc0/0xdc [ 41.302822][ T6737] invoke_syscall+0x98/0x254 [ 41.303635][ T6737] el0_svc_common+0xe8/0x23c [ 41.304374][ T6737] do_el0_svc+0x48/0x58 [ 41.305116][ T6737] el0_svc+0x5c/0x26c [ 41.305774][ T6737] el0t_64_sync_handler+0x84/0x12c [ 41.306566][ T6737] el0t_64_sync+0x198/0x19c [ 41.307403][ T6737] [ 41.307403][ T6737] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 41.308711][ T6737] __lock_acquire+0x1774/0x30a4 [ 41.309627][ T6737] lock_acquire+0x140/0x2e0 [ 41.310436][ T6737] down_read+0x58/0x308 [ 41.311232][ T6737] ocfs2_init_acl+0x258/0x63c [ 41.312056][ T6737] ocfs2_mknod+0x1008/0x1cf0 [ 41.312954][ T6737] ocfs2_create+0x178/0x474 [ 41.313741][ T6737] vfs_create+0x348/0x394 [ 41.314534][ T6737] do_mknodat+0x3c8/0x5d0 [ 41.315293][ T6737] __arm64_sys_mknodat+0xac/0xc8 [ 41.316171][ T6737] invoke_syscall+0x98/0x254 [ 41.316974][ T6737] el0_svc_common+0xe8/0x23c [ 41.317840][ T6737] do_el0_svc+0x48/0x58 [ 41.318567][ T6737] el0_svc+0x5c/0x26c [ 41.319316][ T6737] el0t_64_sync_handler+0x84/0x12c [ 41.320230][ T6737] el0t_64_sync+0x198/0x19c [ 41.321078][ T6737] [ 41.321078][ T6737] other info that might help us debug this: [ 41.321078][ T6737] [ 41.322649][ T6737] Chain exists of: [ 41.322649][ T6737] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 41.322649][ T6737] [ 41.324905][ T6737] Possible unsafe locking scenario: [ 41.324905][ T6737] [ 41.326015][ T6737] CPU0 CPU1 [ 41.326858][ T6737] ---- ---- [ 41.327632][ T6737] rlock(&journal->j_trans_barrier); [ 41.328473][ T6737] lock(sb_internal#2); [ 41.329505][ T6737] lock(&journal->j_trans_barrier); [ 41.330708][ T6737] rlock(&oi->ip_xattr_sem); [ 41.331448][ T6737] [ 41.331448][ T6737] *** DEADLOCK *** [ 41.331448][ T6737] [ 41.332683][ T6737] 8 locks held by syz.0.17/6737: [ 41.333379][ T6737] #0: ffff0000e1d24420 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 41.334847][ T6737] #1: ffff0000e23889c0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1a4/0x2d8 [ 41.336451][ T6737] #2: ffff0000e2392640 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x130/0x3ea0 [ 41.338611][ T6737] #3: ffff0000e2391800 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x130/0x3ea0 [ 41.340867][ T6737] #4: ffff0000e23942c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a8 [ 41.343030][ T6737] #5: ffff0000e1d24610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xc30/0x1cf0 [ 41.344535][ T6737] #6: ffff0000df71ace8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 41.346152][ T6737] #7: ffff0000dd3e0950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 41.347650][ T6737] [ 41.347650][ T6737] stack backtrace: [ 41.348547][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 41.349860][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.351371][ T6737] Call trace: [ 41.351861][ T6737] show_stack+0x2c/0x3c (C) [ 41.352493][ T6737] __dump_stack+0x30/0x40 [ 41.353187][ T6737] dump_stack_lvl+0xd8/0x12c [ 41.353892][ T6737] dump_stack+0x1c/0x28 [ 41.354564][ T6737] print_circular_bug+0x324/0x32c [ 41.355368][ T6737] check_noncircular+0x154/0x174 [ 41.356101][ T6737] __lock_acquire+0x1774/0x30a4 [ 41.356881][ T6737] lock_acquire+0x140/0x2e0 [ 41.357549][ T6737] down_read+0x58/0x308 [ 41.358179][ T6737] ocfs2_init_acl+0x258/0x63c [ 41.358898][ T6737] ocfs2_mknod+0x1008/0x1cf0 [ 41.359629][ T6737] ocfs2_create+0x178/0x474 [ 41.360292][ T6737] vfs_create+0x348/0x394 [ 41.360935][ T6737] do_mknodat+0x3c8/0x5d0 [ 41.361555][ T6737] __arm64_sys_mknodat+0xac/0xc8 [ 41.362339][ T6737] invoke_syscall+0x98/0x254 [ 41.363062][ T6737] el0_svc_common+0xe8/0x23c [ 41.363755][ T6737] do_el0_svc+0x48/0x58 [ 41.364363][ T6737] el0_svc+0x5c/0x26c [ 41.364978][ T6737] el0t_64_sync_handler+0x84/0x12c [ 41.365737][ T6737] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.428747][ T6683] ocfs2: Unmounting device (7,0) on (node local) [ 41.456151][ T54] Bluetooth: hci0: command tx timeout