Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://33083 [ 32.044532][ T4338] cgroup: Unknown subsys name 'net' [ 32.324958][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.637990][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.934199][ T4369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.935742][ T4369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.937123][ T4369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.938775][ T4369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.940046][ T4369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.941390][ T4369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.014194][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.015531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.023147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.026042][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.027434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.029073][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.462544][ T4392] chnl_net:caif_netlink_parms(): no params data found [ 37.488543][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.489708][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.491920][ T4392] device bridge_slave_0 entered promiscuous mode [ 37.494789][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.495985][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.497610][ T4392] device bridge_slave_1 entered promiscuous mode [ 37.506690][ T4392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.509256][ T4392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.515883][ T4392] team0: Port device team_slave_0 added [ 37.518058][ T4392] team0: Port device team_slave_1 added [ 37.524714][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.526000][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.530213][ T4392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.533095][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.534246][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.538169][ T4392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.593836][ T4392] device hsr_slave_0 entered promiscuous mode [ 37.642881][ T4392] device hsr_slave_1 entered promiscuous mode [ 37.735534][ T4392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.794412][ T4392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.833880][ T4392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.853444][ T4392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.899908][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.901265][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.902837][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.904033][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.922164][ T4392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.926498][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.928952][ T251] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.930836][ T251] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.936937][ T4392] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.939904][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.941774][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.943052][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.946246][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.947864][ T251] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.949121][ T251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.955741][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.957581][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.960819][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.965317][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.968576][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.971232][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.024509][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.025952][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.029439][ T4392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.036732][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.038509][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.044321][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.046343][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.048055][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.049592][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.051842][ T4392] device veth0_vlan entered promiscuous mode [ 38.057332][ T4392] device veth1_vlan entered promiscuous mode [ 38.064959][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.066534][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.068092][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.069748][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.071977][ T4392] device veth0_macvtap entered promiscuous mode [ 38.085324][ T4392] device veth1_macvtap entered promiscuous mode [ 38.090018][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.091351][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.093600][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.095139][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.096803][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.100583][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.101950][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.104273][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.107263][ T4392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.108685][ T4392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110062][ T4392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.111469][ T4392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.028531][ T4369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.030154][ T4369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.031614][ T4369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.034899][ T4369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.037191][ T4369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.038572][ T4369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.373571][ T4453] chnl_net:caif_netlink_parms(): no params data found [ 39.416641][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.417946][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.419461][ T4453] device bridge_slave_0 entered promiscuous mode [ 39.421405][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.423079][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.424666][ T4453] device bridge_slave_1 entered promiscuous mode [ 39.430867][ T4453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.434420][ T4453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.440827][ T4453] team0: Port device team_slave_0 added [ 39.443516][ T4453] team0: Port device team_slave_1 added [ 39.448487][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.449731][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.455112][ T4453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.459231][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.460458][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.465189][ T4453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.643289][ T4453] device hsr_slave_0 entered promiscuous mode [ 39.692487][ T4453] device hsr_slave_1 entered promiscuous mode [ 39.752313][ T4453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.753731][ T4453] Cannot create hsr debugfs directory [ 40.084294][ T4453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.062453][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 43.132657][ T4369] Bluetooth: hci0: command 0x041b tx timeout [ 43.323782][ T4453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.433418][ T4453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.524132][ T4453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.745405][ T4453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.824580][ T4453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.863331][ T4453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.983917][ T4453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.091699][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.096060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.097710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.100044][ T4453] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.134383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.136882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.138559][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.140136][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.141691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.145519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.147610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.149245][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.150447][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.153072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.155766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.158316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.160283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.161866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.165621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.167353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.170503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.173544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.176335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.177944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.180316][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.297327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.298759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.302399][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.308380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.310127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.316163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.317987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.319710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.321163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.323763][ T4453] device veth0_vlan entered promiscuous mode [ 44.326855][ T4453] device veth1_vlan entered promiscuous mode [ 44.333416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.335060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.336667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.338083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.340436][ T4453] device veth0_macvtap entered promiscuous mode [ 44.385125][ T4453] device veth1_macvtap entered promiscuous mode [ 44.389431][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.391239][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.393784][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.395101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.396801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.398310][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.399951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.403191][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.404992][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.407146][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.408321][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.410030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.413405][ T4453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.414900][ T4453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.416260][ T4453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.417674][ T4453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.435549][ T755] device hsr_slave_0 left promiscuous mode [ 44.472536][ T755] device hsr_slave_1 left promiscuous mode [ 44.552363][ T755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.553785][ T755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.555522][ T755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.556741][ T755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.558171][ T755] device bridge_slave_1 left promiscuous mode [ 44.559684][ T755] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.592906][ T755] device bridge_slave_0 left promiscuous mode [ 44.594010][ T755] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.712462][ T755] device veth1_macvtap left promiscuous mode [ 44.713547][ T755] device veth0_macvtap left promiscuous mode [ 44.714599][ T755] device veth1_vlan left promiscuous mode [ 44.715633][ T755] device veth0_vlan left promiscuous mode [ 45.212319][ T4369] Bluetooth: hci0: command 0x040f tx timeout [ 46.814989][ T755] team0 (unregistering): Port device team_slave_1 removed [ 46.982951][ T755] team0 (unregistering): Port device team_slave_0 removed [ 47.142873][ T755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.302265][ T4369] Bluetooth: hci0: command 0x0419 tx timeout [ 47.342685][ T755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.883855][ T755] bond0 (unregistering): Released all slaves [ 49.204659][ T4455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.206093][ T4455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.212842][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.218295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.219610][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.221095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.373756][ T4475] loop0: detected capacity change from 0 to 32768 [ 49.375622][ T4475] ======================================================= [ 49.375622][ T4475] WARNING: The mand mount option has been deprecated and [ 49.375622][ T4475] and is ignored by this kernel. Remove the mand [ 49.375622][ T4475] option from the mount to silence this warning. [ 49.375622][ T4475] ======================================================= [ 49.391357][ T4475] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 49.401297][ T4475] [ 49.401769][ T4475] ====================================================== [ 49.403044][ T4475] WARNING: possible circular locking dependency detected [ 49.404278][ T4475] syzkaller #0 Not tainted [ 49.405072][ T4475] ------------------------------------------------------ [ 49.406279][ T4475] syz.0.17/4475 is trying to acquire lock: [ 49.407279][ T4475] ffff0000d2dec650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xb04/0x1950 [ 49.408923][ T4475] [ 49.408923][ T4475] but task is already holding lock: [ 49.410241][ T4475] ffff0000e53f5be0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xaf4/0x1950 [ 49.411936][ T4475] [ 49.411936][ T4475] which lock already depends on the new lock. [ 49.411936][ T4475] [ 49.413804][ T4475] [ 49.413804][ T4475] the existing dependency chain (in reverse order) is: [ 49.415381][ T4475] [ 49.415381][ T4475] -> #3 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 49.416716][ T4475] down_write+0x5c/0x88 [ 49.417578][ T4475] ocfs2_try_remove_refcount_tree+0xb4/0x2e4 [ 49.418802][ T4475] ocfs2_xattr_set+0x484/0xf0c [ 49.419782][ T4475] ocfs2_set_acl+0x410/0x4cc [ 49.420714][ T4475] ocfs2_iop_set_acl+0x178/0x258 [ 49.421705][ T4475] posix_acl_xattr_set+0x2f8/0x394 [ 49.422726][ T4475] __vfs_removexattr+0x364/0x380 [ 49.423699][ T4475] __vfs_removexattr_locked+0x1d0/0x208 [ 49.424741][ T4475] vfs_removexattr+0x80/0x18c [ 49.425643][ T4475] ovl_workdir_create+0x358/0x66c [ 49.426667][ T4475] ovl_get_workdir+0x31c/0x1084 [ 49.427671][ T4475] ovl_fill_super+0x17d0/0x3938 [ 49.428680][ T4475] mount_nodev+0x68/0x108 [ 49.429565][ T4475] ovl_mount+0x3c/0x50 [ 49.430373][ T4475] legacy_get_tree+0xd8/0x174 [ 49.431274][ T4475] vfs_get_tree+0x90/0x278 [ 49.432144][ T4475] do_new_mount+0x228/0x804 [ 49.433055][ T4475] path_mount+0x5ac/0xe6c [ 49.433881][ T4475] __arm64_sys_mount+0x4a0/0x5a0 [ 49.434825][ T4475] invoke_syscall+0x98/0x290 [ 49.435718][ T4475] el0_svc_common+0x13c/0x258 [ 49.436627][ T4475] do_el0_svc+0x5c/0x134 [ 49.437459][ T4475] el0_svc+0x58/0x128 [ 49.438210][ T4475] el0t_64_sync_handler+0x84/0xf0 [ 49.439135][ T4475] el0t_64_sync+0x18c/0x190 [ 49.440022][ T4475] [ 49.440022][ T4475] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 49.441384][ T4475] down_read+0x64/0x300 [ 49.442199][ T4475] ocfs2_init_acl+0x264/0x61c [ 49.443100][ T4475] ocfs2_mknod+0x12b0/0x218c [ 49.443957][ T4475] ocfs2_mkdir+0x19c/0x51c [ 49.444812][ T4475] vfs_mkdir+0x314/0x4d8 [ 49.445636][ T4475] do_mkdirat+0x1b8/0x3ec [ 49.446445][ T4475] __arm64_sys_mkdirat+0x90/0xa8 [ 49.447392][ T4475] invoke_syscall+0x98/0x290 [ 49.448273][ T4475] el0_svc_common+0x13c/0x258 [ 49.449241][ T4475] do_el0_svc+0x5c/0x134 [ 49.450060][ T4475] el0_svc+0x58/0x128 [ 49.450830][ T4475] el0t_64_sync_handler+0x84/0xf0 [ 49.451797][ T4475] el0t_64_sync+0x18c/0x190 [ 49.452682][ T4475] [ 49.452682][ T4475] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 49.454132][ T4475] down_read+0x64/0x300 [ 49.454931][ T4475] ocfs2_start_trans+0x38c/0x6f4 [ 49.455866][ T4475] ocfs2_mknod+0xd2c/0x218c [ 49.456709][ T4475] ocfs2_mkdir+0x19c/0x51c [ 49.457559][ T4475] vfs_mkdir+0x314/0x4d8 [ 49.458386][ T4475] do_mkdirat+0x1b8/0x3ec [ 49.459193][ T4475] __arm64_sys_mkdirat+0x90/0xa8 [ 49.460165][ T4475] invoke_syscall+0x98/0x290 [ 49.461013][ T4475] el0_svc_common+0x13c/0x258 [ 49.461970][ T4475] do_el0_svc+0x5c/0x134 [ 49.462794][ T4475] el0_svc+0x58/0x128 [ 49.463559][ T4475] el0t_64_sync_handler+0x84/0xf0 [ 49.464526][ T4475] el0t_64_sync+0x18c/0x190 [ 49.465392][ T4475] [ 49.465392][ T4475] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 49.466702][ T4475] __lock_acquire+0x2808/0x6634 [ 49.467616][ T4475] lock_acquire+0x20c/0x638 [ 49.468627][ T4475] ocfs2_start_trans+0x20c/0x6f4 [ 49.469643][ T4475] ocfs2_setattr+0xb04/0x1950 [ 49.470540][ T4475] notify_change+0xb5c/0xe20 [ 49.471465][ T4475] ovl_workdir_create+0x4d4/0x66c [ 49.472460][ T4475] ovl_get_workdir+0x31c/0x1084 [ 49.473404][ T4475] ovl_fill_super+0x17d0/0x3938 [ 49.474349][ T4475] mount_nodev+0x68/0x108 [ 49.475227][ T4475] ovl_mount+0x3c/0x50 [ 49.476146][ T4475] legacy_get_tree+0xd8/0x174 [ 49.477055][ T4475] vfs_get_tree+0x90/0x278 [ 49.477831][ T4475] do_new_mount+0x228/0x804 [ 49.478647][ T4475] path_mount+0x5ac/0xe6c [ 49.479454][ T4475] __arm64_sys_mount+0x4a0/0x5a0 [ 49.480332][ T4475] invoke_syscall+0x98/0x290 [ 49.481172][ T4475] el0_svc_common+0x13c/0x258 [ 49.482028][ T4475] do_el0_svc+0x5c/0x134 [ 49.482819][ T4475] el0_svc+0x58/0x128 [ 49.483603][ T4475] el0t_64_sync_handler+0x84/0xf0 [ 49.484553][ T4475] el0t_64_sync+0x18c/0x190 [ 49.485453][ T4475] [ 49.485453][ T4475] other info that might help us debug this: [ 49.485453][ T4475] [ 49.487155][ T4475] Chain exists of: [ 49.487155][ T4475] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 49.487155][ T4475] [ 49.489441][ T4475] Possible unsafe locking scenario: [ 49.489441][ T4475] [ 49.490652][ T4475] CPU0 CPU1 [ 49.491560][ T4475] ---- ---- [ 49.492518][ T4475] lock(&oi->ip_alloc_sem); [ 49.493320][ T4475] lock(&oi->ip_xattr_sem); [ 49.494507][ T4475] lock(&oi->ip_alloc_sem); [ 49.495734][ T4475] lock(sb_internal#2); [ 49.496495][ T4475] [ 49.496495][ T4475] *** DEADLOCK *** [ 49.496495][ T4475] [ 49.497903][ T4475] 5 locks held by syz.0.17/4475: [ 49.498751][ T4475] #0: ffff0000d405a0e0 (&type->s_umount_key#51/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 [ 49.500585][ T4475] #1: ffff0000d2dec460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 49.502250][ T4475] #2: ffff0000e53f42c8 (&sb->s_type->i_mutex_key#20/1){+.+.}-{3:3}, at: ovl_workdir_create+0x128/0x66c [ 49.504193][ T4475] #3: ffff0000e53f5f48 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: ovl_workdir_create+0x474/0x66c [ 49.506169][ T4475] #4: ffff0000e53f5be0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xaf4/0x1950 [ 49.507861][ T4475] [ 49.507861][ T4475] stack backtrace: [ 49.508897][ T4475] CPU: 0 PID: 4475 Comm: syz.0.17 Not tainted syzkaller #0 [ 49.510098][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.511820][ T4475] Call trace: [ 49.512395][ T4475] dump_backtrace+0x1c4/0x1f0 [ 49.513196][ T4475] show_stack+0x2c/0x3c [ 49.513878][ T4475] __dump_stack+0x30/0x40 [ 49.514568][ T4475] dump_stack_lvl+0xf4/0x15c [ 49.515305][ T4475] dump_stack+0x1c/0x5c [ 49.516024][ T4475] print_circular_bug+0x148/0x1b0 [ 49.516885][ T4475] check_noncircular+0x264/0x2f8 [ 49.517759][ T4475] __lock_acquire+0x2808/0x6634 [ 49.518601][ T4475] lock_acquire+0x20c/0x638 [ 49.519384][ T4475] ocfs2_start_trans+0x20c/0x6f4 [ 49.520241][ T4475] ocfs2_setattr+0xb04/0x1950 [ 49.521051][ T4475] notify_change+0xb5c/0xe20 [ 49.521843][ T4475] ovl_workdir_create+0x4d4/0x66c [ 49.522699][ T4475] ovl_get_workdir+0x31c/0x1084 [ 49.523559][ T4475] ovl_fill_super+0x17d0/0x3938 [ 49.524437][ T4475] mount_nodev+0x68/0x108 [ 49.525176][ T4475] ovl_mount+0x3c/0x50 [ 49.525909][ T4475] legacy_get_tree+0xd8/0x174 [ 49.526727][ T4475] vfs_get_tree+0x90/0x278 [ 49.527508][ T4475] do_new_mount+0x228/0x804 [ 49.528309][ T4475] path_mount+0x5ac/0xe6c [ 49.529079][ T4475] __arm64_sys_mount+0x4a0/0x5a0 [ 49.529970][ T4475] invoke_syscall+0x98/0x290 [ 49.530737][ T4475] el0_svc_common+0x13c/0x258 [ 49.531552][ T4475] do_el0_svc+0x5c/0x134 [ 49.532251][ T4475] el0_svc+0x58/0x128 [ 49.532918][ T4475] el0t_64_sync_handler+0x84/0xf0 [ 49.533738][ T4475] el0t_64_sync+0x18c/0x190 [ 49.541701][ T4475] overlayfs: upper fs does not support tmpfile. [ 49.543245][ T4475] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.544695][ T4475] overlayfs: upper fs missing required features. [ 49.555492][ T4453] ocfs2: Unmounting device (7,0) on (node local)