Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. 1970/01/01 00:00:25 parsed 1 programs [ 27.055830][ T4326] cgroup: Unknown subsys name 'net' [ 27.289530][ T4326] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.580123][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.691738][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 32.711498][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.712650][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.714085][ T4343] device bridge_slave_0 entered promiscuous mode [ 32.716403][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.717848][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.719374][ T4343] device bridge_slave_1 entered promiscuous mode [ 32.727476][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.729742][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.737501][ T4343] team0: Port device team_slave_0 added [ 32.739315][ T4343] team0: Port device team_slave_1 added [ 32.745003][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.746074][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.750493][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.753120][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.754117][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.758278][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.828123][ T4343] device hsr_slave_0 entered promiscuous mode [ 32.867236][ T4343] device hsr_slave_1 entered promiscuous mode [ 32.950738][ T4343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.979717][ T4343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.019783][ T4343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.069016][ T4343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.117112][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.118320][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.119636][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.120734][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.138045][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.141567][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.145100][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.146981][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.148854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 33.153341][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.156996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.158626][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.159750][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.163765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.165156][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.166201][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.172300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.173921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.176741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.181095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.183925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.186331][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.239177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.240529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.244247][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.250150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.256089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.258507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.259953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.262676][ T4343] device veth0_vlan entered promiscuous mode [ 33.265640][ T4343] device veth1_vlan entered promiscuous mode [ 33.276585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.279012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.280438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.282831][ T4343] device veth0_macvtap entered promiscuous mode [ 33.285082][ T4343] device veth1_macvtap entered promiscuous mode [ 33.291138][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.292420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.294288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.298134][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.299550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.302359][ T4343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.303693][ T4343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.305021][ T4343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306438][ T4343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403096][ T4366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.404776][ T4366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.406112][ T4366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.408348][ T4366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.409816][ T4366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.411102][ T4366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.788842][ T203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.421229][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.422432][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.430424][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.438705][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.439973][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.441633][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:34 executed programs: 0 [ 34.689298][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.690927][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.692292][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.693885][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.695283][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.696622][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.742905][ T4414] chnl_net:caif_netlink_parms(): no params data found [ 34.759306][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.760602][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.762178][ T4414] device bridge_slave_0 entered promiscuous mode [ 34.764045][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.765258][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.766718][ T4414] device bridge_slave_1 entered promiscuous mode [ 34.775286][ T4414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.778083][ T4414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.785488][ T4414] team0: Port device team_slave_0 added [ 34.787504][ T4414] team0: Port device team_slave_1 added [ 34.793476][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.794597][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.798811][ T4414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.802804][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.803885][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.808396][ T4414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.868111][ T4414] device hsr_slave_0 entered promiscuous mode [ 34.907293][ T4414] device hsr_slave_1 entered promiscuous mode [ 34.947022][ T4414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.948421][ T4414] Cannot create hsr debugfs directory [ 36.488137][ T203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.727137][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 38.798001][ T203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.807348][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 38.878767][ T203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.803630][ T4414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.848446][ T4414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.938682][ T4414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.029814][ T4414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.140942][ T4414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.145316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.148536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.151271][ T4414] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.153647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.155243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.156694][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.157891][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.159944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.201673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.203425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.204869][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.205880][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.208427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.211033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.213708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.215400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.217095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.220673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.222694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.225424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.226840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.291732][ T4414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.293744][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.297975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.299540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.372164][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.373454][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.376235][ T4414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.382224][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.383782][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.390683][ T203] device hsr_slave_0 left promiscuous mode [ 40.417216][ T203] device hsr_slave_1 left promiscuous mode [ 40.497080][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.498297][ T203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.499923][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.500945][ T203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.502211][ T203] device bridge_slave_1 left promiscuous mode [ 40.503458][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.537634][ T203] device bridge_slave_0 left promiscuous mode [ 40.538659][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.667155][ T203] device veth1_macvtap left promiscuous mode [ 40.668234][ T203] device veth0_macvtap left promiscuous mode [ 40.669429][ T203] device veth1_vlan left promiscuous mode [ 40.670351][ T203] device veth0_vlan left promiscuous mode [ 40.886985][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 42.478065][ T203] team0 (unregistering): Port device team_slave_1 removed [ 42.667542][ T203] team0 (unregistering): Port device team_slave_0 removed [ 42.837379][ T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.966949][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 43.067343][ T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.627833][ T203] bond0 (unregistering): Released all slaves [ 45.863572][ T4414] device veth0_vlan entered promiscuous mode [ 45.867343][ T4414] device veth1_vlan entered promiscuous mode [ 45.873295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.874890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.876391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.880861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.883046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.887613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.889111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.891577][ T4414] device veth0_macvtap entered promiscuous mode [ 45.894121][ T4414] device veth1_macvtap entered promiscuous mode [ 45.902294][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.903478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.905161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.906604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.909395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.912261][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.913391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.915085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.917900][ T4414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.919291][ T4414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.920591][ T4414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.921920][ T4414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.945780][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.947259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.950356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.952417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.953524][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.955222][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.991220][ T4521] loop0: detected capacity change from 0 to 512 [ 45.998358][ T4521] [ 45.998791][ T4521] ====================================================== [ 45.999818][ T4521] WARNING: possible circular locking dependency detected [ 46.000791][ T4521] syzkaller #0 Not tainted [ 46.001459][ T4521] ------------------------------------------------------ [ 46.002363][ T4521] syz.0.17/4521 is trying to acquire lock: [ 46.003184][ T4521] ffff0000d41a0b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 46.004583][ T4521] [ 46.004583][ T4521] but task is already holding lock: [ 46.005633][ T4521] ffff0000e5115b10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.007067][ T4521] [ 46.007067][ T4521] which lock already depends on the new lock. [ 46.007067][ T4521] [ 46.008766][ T4521] [ 46.008766][ T4521] the existing dependency chain (in reverse order) is: [ 46.010070][ T4521] [ 46.010070][ T4521] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 46.011250][ T4521] down_read+0x64/0x304 [ 46.011949][ T4521] ext4_setattr+0x7c4/0x150c [ 46.012724][ T4521] notify_change+0xb0c/0xdcc [ 46.013555][ T4521] chown_common+0x414/0x574 [ 46.014359][ T4521] do_fchownat+0x158/0x268 [ 46.015107][ T4521] __arm64_sys_fchownat+0xb8/0xd4 [ 46.015919][ T4521] invoke_syscall+0x98/0x2bc [ 46.016669][ T4521] el0_svc_common+0x138/0x258 [ 46.017433][ T4521] do_el0_svc+0x58/0x13c [ 46.018149][ T4521] el0_svc+0x58/0x138 [ 46.018810][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 46.019610][ T4521] el0t_64_sync+0x18c/0x190 [ 46.020281][ T4521] [ 46.020281][ T4521] -> #1 (jbd2_handle){++++}-{0:0}: [ 46.021302][ T4521] start_this_handle+0xfe0/0x122c [ 46.022132][ T4521] jbd2__journal_start+0x288/0x51c [ 46.022925][ T4521] __ext4_journal_start_sb+0x2fc/0x674 [ 46.023815][ T4521] ext4_writepages+0xa28/0x284c [ 46.024552][ T4521] do_writepages+0x2c0/0x4fc [ 46.025309][ T4521] __writeback_single_inode+0x164/0x157c [ 46.026200][ T4521] writeback_sb_inodes+0x824/0x1404 [ 46.027047][ T4521] __writeback_inodes_wb+0x110/0x394 [ 46.027881][ T4521] wb_writeback+0x414/0xfb0 [ 46.028630][ T4521] wb_workfn+0xac0/0xd98 [ 46.029342][ T4521] process_one_work+0x7f4/0x13a8 [ 46.030218][ T4521] worker_thread+0x8c8/0xfbc [ 46.030959][ T4521] kthread+0x250/0x2d8 [ 46.031628][ T4521] ret_from_fork+0x10/0x20 [ 46.032309][ T4521] [ 46.032309][ T4521] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 46.033508][ T4521] __lock_acquire+0x293c/0x6544 [ 46.034286][ T4521] lock_acquire+0x20c/0x644 [ 46.035039][ T4521] percpu_down_read+0x70/0x2a8 [ 46.035774][ T4521] ext4_writepages+0x188/0x284c [ 46.036557][ T4521] do_writepages+0x2c0/0x4fc [ 46.037285][ T4521] __writeback_single_inode+0x164/0x157c [ 46.038234][ T4521] writeback_single_inode+0x1c0/0x720 [ 46.039101][ T4521] write_inode_now+0x144/0x1b0 [ 46.039816][ T4521] iput+0x5cc/0x7f4 [ 46.040450][ T4521] ext4_xattr_block_set+0x17a4/0x2810 [ 46.041312][ T4521] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 46.042188][ T4521] __ext4_expand_extra_isize+0x298/0x358 [ 46.043068][ T4521] __ext4_mark_inode_dirty+0x3e4/0x790 [ 46.043891][ T4521] ext4_evict_inode+0xb58/0x1270 [ 46.044641][ T4521] evict+0x3c8/0x810 [ 46.045229][ T4521] iput+0x764/0x7f4 [ 46.045878][ T4521] ext4_process_orphan+0x240/0x2b4 [ 46.046620][ T4521] ext4_orphan_cleanup+0x908/0x104c [ 46.047400][ T4521] ext4_fill_super+0x6440/0x68a8 [ 46.048219][ T4521] get_tree_bdev+0x358/0x544 [ 46.049040][ T4521] ext4_get_tree+0x28/0x38 [ 46.049816][ T4521] vfs_get_tree+0x90/0x274 [ 46.050603][ T4521] do_new_mount+0x228/0x810 [ 46.051353][ T4521] path_mount+0x5b4/0xe78 [ 46.052059][ T4521] __arm64_sys_mount+0x49c/0x584 [ 46.052804][ T4521] invoke_syscall+0x98/0x2bc [ 46.053614][ T4521] el0_svc_common+0x138/0x258 [ 46.054333][ T4521] do_el0_svc+0x58/0x13c [ 46.055018][ T4521] el0_svc+0x58/0x138 [ 46.055638][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 46.056457][ T4521] el0t_64_sync+0x18c/0x190 [ 46.057156][ T4521] [ 46.057156][ T4521] other info that might help us debug this: [ 46.057156][ T4521] [ 46.058614][ T4521] Chain exists of: [ 46.058614][ T4521] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 46.058614][ T4521] [ 46.060565][ T4521] Possible unsafe locking scenario: [ 46.060565][ T4521] [ 46.061613][ T4521] CPU0 CPU1 [ 46.062354][ T4521] ---- ---- [ 46.063116][ T4521] lock(&ei->xattr_sem); [ 46.063736][ T4521] lock(jbd2_handle); [ 46.064703][ T4521] lock(&ei->xattr_sem); [ 46.065715][ T4521] lock(&sbi->s_writepages_rwsem); [ 46.066481][ T4521] [ 46.066481][ T4521] *** DEADLOCK *** [ 46.066481][ T4521] [ 46.067633][ T4521] 3 locks held by syz.0.17/4521: [ 46.068353][ T4521] #0: ffff0000ded4a0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 46.069841][ T4521] #1: ffff0000ded4a650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 46.071228][ T4521] #2: ffff0000e5115b10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.072741][ T4521] [ 46.072741][ T4521] stack backtrace: [ 46.073569][ T4521] CPU: 0 PID: 4521 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.074552][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 46.076028][ T4521] Call trace: [ 46.076493][ T4521] dump_backtrace+0x1c8/0x1f4 [ 46.077218][ T4521] show_stack+0x2c/0x3c [ 46.077846][ T4521] __dump_stack+0x30/0x40 [ 46.078488][ T4521] dump_stack_lvl+0xf8/0x160 [ 46.079160][ T4521] dump_stack+0x1c/0x5c [ 46.079744][ T4521] print_circular_bug+0x148/0x1b0 [ 46.080422][ T4521] check_noncircular+0x240/0x2d4 [ 46.081130][ T4521] __lock_acquire+0x293c/0x6544 [ 46.081820][ T4521] lock_acquire+0x20c/0x644 [ 46.082545][ T4521] percpu_down_read+0x70/0x2a8 [ 46.083263][ T4521] ext4_writepages+0x188/0x284c [ 46.084038][ T4521] do_writepages+0x2c0/0x4fc [ 46.084683][ T4521] __writeback_single_inode+0x164/0x157c [ 46.085495][ T4521] writeback_single_inode+0x1c0/0x720 [ 46.086306][ T4521] write_inode_now+0x144/0x1b0 [ 46.087001][ T4521] iput+0x5cc/0x7f4 [ 46.087534][ T4521] ext4_xattr_block_set+0x17a4/0x2810 [ 46.088271][ T4521] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 46.089161][ T4521] __ext4_expand_extra_isize+0x298/0x358 [ 46.090023][ T4521] __ext4_mark_inode_dirty+0x3e4/0x790 [ 46.090832][ T4521] ext4_evict_inode+0xb58/0x1270 [ 46.091530][ T4521] evict+0x3c8/0x810 [ 46.092044][ T4521] iput+0x764/0x7f4 [ 46.092634][ T4521] ext4_process_orphan+0x240/0x2b4 [ 46.093433][ T4521] ext4_orphan_cleanup+0x908/0x104c [ 46.094288][ T4521] ext4_fill_super+0x6440/0x68a8 [ 46.095122][ T4521] get_tree_bdev+0x358/0x544 [ 46.095830][ T4521] ext4_get_tree+0x28/0x38 [ 46.096504][ T4521] vfs_get_tree+0x90/0x274 [ 46.097224][ T4521] do_new_mount+0x228/0x810 [ 46.097905][ T4521] path_mount+0x5b4/0xe78 [ 46.098561][ T4521] __arm64_sys_mount+0x49c/0x584 [ 46.099302][ T4521] invoke_syscall+0x98/0x2bc [ 46.099961][ T4521] el0_svc_common+0x138/0x258 [ 46.100630][ T4521] do_el0_svc+0x58/0x13c [ 46.101218][ T4521] el0_svc+0x58/0x138 [ 46.101826][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 46.102565][ T4521] el0t_64_sync+0x18c/0x190 [ 46.103676][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.105801][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.106818][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 46.108836][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.109729][ T4521] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.111538][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.113564][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.114477][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 46.116362][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.117421][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.119475][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.120435][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 46.122226][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.123189][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.125389][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.126402][ T4521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 46.128534][ T4521] EXT4-fs (loop0): Remounting filesystem read-only [ 46.129556][ T4521] EXT4-fs (loop0): 1 orphan inode deleted [ 46.130444][ T4521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 46.144385][ T4414] EXT4-fs (loop0): unmounting filesystem.