Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs [ 33.303154][ T4324] cgroup: Unknown subsys name 'net' [ 33.585590][ T4324] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.855427][ T4324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.323168][ T4353] chnl_net:caif_netlink_parms(): no params data found [ 38.339897][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.341155][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.342979][ T4353] device bridge_slave_0 entered promiscuous mode [ 38.345158][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.346279][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.347695][ T4353] device bridge_slave_1 entered promiscuous mode [ 38.354599][ T4353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.357406][ T4353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.365749][ T4353] team0: Port device team_slave_0 added [ 38.367336][ T4353] team0: Port device team_slave_1 added [ 38.373587][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.374652][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.378502][ T4353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.380753][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.381845][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.385880][ T4353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.443649][ T4353] device hsr_slave_0 entered promiscuous mode [ 38.482806][ T4353] device hsr_slave_1 entered promiscuous mode [ 38.578108][ T4353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.605600][ T4353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.675386][ T4353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.724562][ T4353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.772459][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.773737][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.775099][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.776184][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.791861][ T4353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.796532][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.798707][ T236] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.800449][ T236] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.805010][ T4353] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.808032][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.809445][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.810525][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.815484][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.817069][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.818127][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.824893][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.826602][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.829639][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.832338][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.835704][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.837896][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.906159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.907469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.910542][ T4353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.916854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.922358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.924739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.926034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.928250][ T4353] device veth0_vlan entered promiscuous mode [ 38.931133][ T4353] device veth1_vlan entered promiscuous mode [ 38.939498][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.940829][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.942254][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.945389][ T4353] device veth0_macvtap entered promiscuous mode [ 38.947517][ T4353] device veth1_macvtap entered promiscuous mode [ 38.952227][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.954911][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.956810][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.959811][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.960939][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.964373][ T4353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965739][ T4353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967081][ T4353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.968335][ T4353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.084895][ T4385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.086376][ T4387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.087737][ T4387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.089166][ T4387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.090490][ T4387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.091715][ T4387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.633491][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.634710][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.636363][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.651903][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.653336][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.654950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:39 executed programs: 0 [ 40.018436][ T4387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.019836][ T4387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.021038][ T4387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.022518][ T4387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.024184][ T4387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.025405][ T4387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.166123][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.206235][ T4425] chnl_net:caif_netlink_parms(): no params data found [ 40.221325][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.222538][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.224188][ T4425] device bridge_slave_0 entered promiscuous mode [ 40.226070][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.227219][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.228658][ T4425] device bridge_slave_1 entered promiscuous mode [ 40.237086][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.239341][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.245956][ T4425] team0: Port device team_slave_0 added [ 40.248124][ T4425] team0: Port device team_slave_1 added [ 40.254312][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.255398][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.259669][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.261874][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.263377][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.267235][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.343762][ T4425] device hsr_slave_0 entered promiscuous mode [ 40.382913][ T4425] device hsr_slave_1 entered promiscuous mode [ 40.432769][ T4425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.433995][ T4425] Cannot create hsr debugfs directory [ 42.093138][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 42.683813][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.172864][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 44.773797][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.874546][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.944738][ T4425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.024891][ T4425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.073847][ T4425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.164649][ T4425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.262850][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 46.275131][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.278378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.279797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.283964][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.356644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.358314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.359912][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.361032][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.362607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.365463][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.367078][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.368396][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.369442][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.372002][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.375442][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.377879][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.379728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.381236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.383991][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.385591][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.387888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.389367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.391714][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.394939][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.445961][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.527254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.528540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.531422][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.536689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.538146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.544113][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.545570][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.547240][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.548619][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.550434][ T4425] device veth0_vlan entered promiscuous mode [ 46.554269][ T4425] device veth1_vlan entered promiscuous mode [ 46.560000][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.561455][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.563336][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.564765][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.567039][ T4425] device veth0_macvtap entered promiscuous mode [ 46.569193][ T4425] device veth1_macvtap entered promiscuous mode [ 46.605706][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.607374][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.609291][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.610514][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.612126][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.613706][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.615192][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.617469][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.618940][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.620876][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.622050][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.624903][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.627330][ T4425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.628566][ T4425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.629890][ T4425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.631235][ T4425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.651309][ T1659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.654262][ T1659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.658117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.661278][ T1659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.662420][ T1659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.665338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.697939][ T4535] loop0: detected capacity change from 0 to 512 [ 46.714809][ T4535] [ 46.715226][ T4535] ====================================================== [ 46.716387][ T4535] WARNING: possible circular locking dependency detected [ 46.717527][ T4535] syzkaller #0 Not tainted [ 46.718267][ T4535] ------------------------------------------------------ [ 46.719390][ T4535] syz.0.17/4535 is trying to acquire lock: [ 46.720256][ T4535] ffff0000d9a5eb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 46.721746][ T4535] [ 46.721746][ T4535] but task is already holding lock: [ 46.722864][ T4535] ffff0000ea226f20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.724301][ T4535] [ 46.724301][ T4535] which lock already depends on the new lock. [ 46.724301][ T4535] [ 46.725737][ T4535] [ 46.725737][ T4535] the existing dependency chain (in reverse order) is: [ 46.726981][ T4535] [ 46.726981][ T4535] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 46.728073][ T4535] down_read+0x64/0x304 [ 46.728817][ T4535] ext4_setattr+0x7c4/0x150c [ 46.729637][ T4535] notify_change+0xb0c/0xdcc [ 46.730357][ T4535] chown_common+0x414/0x574 [ 46.731126][ T4535] do_fchownat+0x158/0x268 [ 46.731862][ T4535] __arm64_sys_fchownat+0xb8/0xd4 [ 46.732678][ T4535] invoke_syscall+0x98/0x2bc [ 46.733404][ T4535] el0_svc_common+0x138/0x258 [ 46.734113][ T4535] do_el0_svc+0x58/0x13c [ 46.734799][ T4535] el0_svc+0x58/0x138 [ 46.735407][ T4535] el0t_64_sync_handler+0x84/0xf0 [ 46.736262][ T4535] el0t_64_sync+0x18c/0x190 [ 46.737061][ T4535] [ 46.737061][ T4535] -> #1 (jbd2_handle){++++}-{0:0}: [ 46.738163][ T4535] start_this_handle+0xfe0/0x122c [ 46.739035][ T4535] jbd2__journal_start+0x288/0x51c [ 46.739911][ T4535] __ext4_journal_start_sb+0x2fc/0x674 [ 46.740800][ T4535] ext4_writepages+0xa28/0x284c [ 46.741599][ T4535] do_writepages+0x2c0/0x4fc [ 46.742325][ T4535] __writeback_single_inode+0x164/0x157c [ 46.743217][ T4535] writeback_sb_inodes+0x824/0x1404 [ 46.744089][ T4535] __writeback_inodes_wb+0x110/0x394 [ 46.744926][ T4535] wb_writeback+0x414/0xfb0 [ 46.745626][ T4535] wb_workfn+0xac0/0xd98 [ 46.746289][ T4535] process_one_work+0x7f4/0x13a8 [ 46.747097][ T4535] worker_thread+0x8c8/0xfbc [ 46.747769][ T4535] kthread+0x250/0x2d8 [ 46.748435][ T4535] ret_from_fork+0x10/0x20 [ 46.749125][ T4535] [ 46.749125][ T4535] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 46.750328][ T4535] __lock_acquire+0x293c/0x6544 [ 46.751122][ T4535] lock_acquire+0x20c/0x644 [ 46.751895][ T4535] percpu_down_read+0x70/0x2a8 [ 46.752656][ T4535] ext4_writepages+0x188/0x284c [ 46.753460][ T4535] do_writepages+0x2c0/0x4fc [ 46.754279][ T4535] __writeback_single_inode+0x164/0x157c [ 46.755165][ T4535] writeback_single_inode+0x1c0/0x720 [ 46.756076][ T4535] write_inode_now+0x144/0x1b0 [ 46.756827][ T4535] iput+0x5cc/0x7f4 [ 46.757466][ T4535] ext4_xattr_block_set+0x17a4/0x2810 [ 46.758382][ T4535] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 46.759341][ T4535] __ext4_expand_extra_isize+0x298/0x358 [ 46.760275][ T4535] __ext4_mark_inode_dirty+0x3e4/0x790 [ 46.761074][ T4535] ext4_evict_inode+0xb58/0x1270 [ 46.761766][ T4535] evict+0x3c8/0x810 [ 46.762321][ T4535] iput+0x764/0x7f4 [ 46.762908][ T4535] ext4_process_orphan+0x240/0x2b4 [ 46.763804][ T4535] ext4_orphan_cleanup+0x908/0x104c [ 46.764657][ T4535] ext4_fill_super+0x6440/0x68a8 [ 46.765446][ T4535] get_tree_bdev+0x358/0x544 [ 46.766205][ T4535] ext4_get_tree+0x28/0x38 [ 46.766930][ T4535] vfs_get_tree+0x90/0x274 [ 46.767635][ T4535] do_new_mount+0x228/0x810 [ 46.768370][ T4535] path_mount+0x5b4/0xe78 [ 46.769087][ T4535] __arm64_sys_mount+0x49c/0x584 [ 46.769886][ T4535] invoke_syscall+0x98/0x2bc [ 46.770659][ T4535] el0_svc_common+0x138/0x258 [ 46.771409][ T4535] do_el0_svc+0x58/0x13c [ 46.772123][ T4535] el0_svc+0x58/0x138 [ 46.772842][ T4535] el0t_64_sync_handler+0x84/0xf0 [ 46.773634][ T4535] el0t_64_sync+0x18c/0x190 [ 46.774366][ T4535] [ 46.774366][ T4535] other info that might help us debug this: [ 46.774366][ T4535] [ 46.775917][ T4535] Chain exists of: [ 46.775917][ T4535] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 46.775917][ T4535] [ 46.778021][ T4535] Possible unsafe locking scenario: [ 46.778021][ T4535] [ 46.779143][ T4535] CPU0 CPU1 [ 46.779927][ T4535] ---- ---- [ 46.780681][ T4535] lock(&ei->xattr_sem); [ 46.781350][ T4535] lock(jbd2_handle); [ 46.782288][ T4535] lock(&ei->xattr_sem); [ 46.783312][ T4535] lock(&sbi->s_writepages_rwsem); [ 46.784096][ T4535] [ 46.784096][ T4535] *** DEADLOCK *** [ 46.784096][ T4535] [ 46.785244][ T4535] 3 locks held by syz.0.17/4535: [ 46.785956][ T4535] #0: ffff0000d493c0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 46.787529][ T4535] #1: ffff0000d493c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 46.788900][ T4535] #2: ffff0000ea226f20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.790489][ T4535] [ 46.790489][ T4535] stack backtrace: [ 46.791375][ T4535] CPU: 1 PID: 4535 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.792492][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 46.793929][ T4535] Call trace: [ 46.794427][ T4535] dump_backtrace+0x1c8/0x1f4 [ 46.795126][ T4535] show_stack+0x2c/0x3c [ 46.795799][ T4535] __dump_stack+0x30/0x40 [ 46.796499][ T4535] dump_stack_lvl+0xf8/0x160 [ 46.797205][ T4535] dump_stack+0x1c/0x5c [ 46.797818][ T4535] print_circular_bug+0x148/0x1b0 [ 46.798532][ T4535] check_noncircular+0x240/0x2d4 [ 46.799284][ T4535] __lock_acquire+0x293c/0x6544 [ 46.800030][ T4535] lock_acquire+0x20c/0x644 [ 46.800671][ T4535] percpu_down_read+0x70/0x2a8 [ 46.801390][ T4535] ext4_writepages+0x188/0x284c [ 46.802080][ T4535] do_writepages+0x2c0/0x4fc [ 46.802800][ T4535] __writeback_single_inode+0x164/0x157c [ 46.803636][ T4535] writeback_single_inode+0x1c0/0x720 [ 46.804448][ T4535] write_inode_now+0x144/0x1b0 [ 46.805126][ T4535] iput+0x5cc/0x7f4 [ 46.805632][ T4535] ext4_xattr_block_set+0x17a4/0x2810 [ 46.806391][ T4535] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 46.807165][ T4535] __ext4_expand_extra_isize+0x298/0x358 [ 46.807970][ T4535] __ext4_mark_inode_dirty+0x3e4/0x790 [ 46.808796][ T4535] ext4_evict_inode+0xb58/0x1270 [ 46.809553][ T4535] evict+0x3c8/0x810 [ 46.810115][ T4535] iput+0x764/0x7f4 [ 46.810733][ T4535] ext4_process_orphan+0x240/0x2b4 [ 46.811591][ T4535] ext4_orphan_cleanup+0x908/0x104c [ 46.812413][ T4535] ext4_fill_super+0x6440/0x68a8 [ 46.813129][ T4535] get_tree_bdev+0x358/0x544 [ 46.813820][ T4535] ext4_get_tree+0x28/0x38 [ 46.814476][ T4535] vfs_get_tree+0x90/0x274 [ 46.815142][ T4535] do_new_mount+0x228/0x810 [ 46.815882][ T4535] path_mount+0x5b4/0xe78 [ 46.816586][ T4535] __arm64_sys_mount+0x49c/0x584 [ 46.817320][ T4535] invoke_syscall+0x98/0x2bc [ 46.818069][ T4535] el0_svc_common+0x138/0x258 [ 46.818773][ T4535] do_el0_svc+0x58/0x13c [ 46.819436][ T4535] el0_svc+0x58/0x138 [ 46.820110][ T4535] el0t_64_sync_handler+0x84/0xf0 [ 46.820925][ T4535] el0t_64_sync+0x18c/0x190 [ 46.824765][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.828314][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 46.830329][ T4535] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.832294][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.834474][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 46.836567][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.838709][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 46.840715][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 46.843181][ T4535] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 46.845142][ T4535] EXT4-fs (loop0): 1 orphan inode deleted [ 46.846009][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.861374][ T4425] EXT4-fs (loop0): unmounting filesystem.