Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://43325 [ 31.771258][ T4340] cgroup: Unknown subsys name 'net' [ 32.055721][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.338881][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.939422][ T4361] chnl_net:caif_netlink_parms(): no params data found [ 34.956553][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.957987][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.959719][ T4361] device bridge_slave_0 entered promiscuous mode [ 34.962019][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.964754][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.966374][ T4361] device bridge_slave_1 entered promiscuous mode [ 34.975169][ T4361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.977538][ T4361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.984640][ T4361] team0: Port device team_slave_0 added [ 34.986287][ T4361] team0: Port device team_slave_1 added [ 34.991505][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.992664][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.996893][ T4361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.999719][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.000858][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.006480][ T4361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.074532][ T4361] device hsr_slave_0 entered promiscuous mode [ 35.112940][ T4361] device hsr_slave_1 entered promiscuous mode [ 35.188191][ T4361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.206104][ T4361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.243978][ T4361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.285215][ T4361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.351326][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.352528][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.354092][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.355331][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.372410][ T4361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.377522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.380295][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.382133][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.384766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 35.389195][ T4361] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.392380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.394727][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.396045][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.400500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.402159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.403571][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.409676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.411541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.415644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.418652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.421441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.425102][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.476747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.478316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.481730][ T4361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.490320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.496562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.498514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.500090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.502443][ T4361] device veth0_vlan entered promiscuous mode [ 35.506773][ T4361] device veth1_vlan entered promiscuous mode [ 35.515251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.516933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.518625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.520868][ T4361] device veth0_macvtap entered promiscuous mode [ 35.526405][ T4361] device veth1_macvtap entered promiscuous mode [ 35.531633][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.533875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.535907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.538909][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.540248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.543702][ T4361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.545136][ T4361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.546536][ T4361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.547899][ T4361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.034520][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.120380][ T4385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.122114][ T4385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.124200][ T4385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.125695][ T4385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.127131][ T4385] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.128468][ T4385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.745310][ T1709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.746778][ T1709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.748587][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.757574][ T1709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.758964][ T1709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.760613][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:37 executed programs: 0 [ 37.049853][ T4385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.051565][ T4385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.061580][ T4385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.063389][ T4385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.064954][ T4385] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.066382][ T4385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.107359][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 37.123180][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.124593][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.126246][ T4427] device bridge_slave_0 entered promiscuous mode [ 37.128700][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.129982][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.131747][ T4427] device bridge_slave_1 entered promiscuous mode [ 37.139462][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.142216][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.149571][ T4427] team0: Port device team_slave_0 added [ 37.152218][ T4427] team0: Port device team_slave_1 added [ 37.158313][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.159481][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.163965][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.166518][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.167683][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.171718][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.224000][ T4427] device hsr_slave_0 entered promiscuous mode [ 37.262944][ T4427] device hsr_slave_1 entered promiscuous mode [ 37.305240][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.306786][ T4427] Cannot create hsr debugfs directory [ 38.473502][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.133443][ T4385] Bluetooth: hci0: command 0x0409 tx timeout [ 41.114103][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.195644][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.213374][ T4385] Bluetooth: hci0: command 0x041b tx timeout [ 42.191971][ T4427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.306731][ T4427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.385637][ T4427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.465720][ T4427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.516237][ T39] device hsr_slave_0 left promiscuous mode [ 42.572940][ T39] device hsr_slave_1 left promiscuous mode [ 42.682813][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.684278][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.686251][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.687470][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.688958][ T39] device bridge_slave_1 left promiscuous mode [ 42.690492][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.753846][ T39] device bridge_slave_0 left promiscuous mode [ 42.755018][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.882940][ T39] device veth1_macvtap left promiscuous mode [ 42.884087][ T39] device veth0_macvtap left promiscuous mode [ 42.885116][ T39] device veth1_vlan left promiscuous mode [ 42.886069][ T39] device veth0_vlan left promiscuous mode [ 43.292717][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 45.075242][ T39] team0 (unregistering): Port device team_slave_1 removed [ 45.234062][ T39] team0 (unregistering): Port device team_slave_0 removed [ 45.372757][ T4385] Bluetooth: hci0: command 0x0419 tx timeout [ 45.403203][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.603138][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.134704][ T39] bond0 (unregistering): Released all slaves [ 47.437768][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.441507][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.444158][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.446965][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.449430][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.451342][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.456520][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.457838][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.460315][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.465158][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.466859][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.468455][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.469719][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.472243][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.475998][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.478805][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.480617][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.482377][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.489185][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.491314][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.497036][ T4427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.498672][ T4427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.502864][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.504652][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.506339][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.508015][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.509533][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.559402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.560832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.564124][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.570868][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.572660][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.579420][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.581169][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.583105][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.584604][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.586859][ T4427] device veth0_vlan entered promiscuous mode [ 47.589972][ T4427] device veth1_vlan entered promiscuous mode [ 47.597922][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.599529][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.601068][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.602653][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.606499][ T4427] device veth0_macvtap entered promiscuous mode [ 47.608955][ T4427] device veth1_macvtap entered promiscuous mode [ 47.616095][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.617398][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.618971][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.620447][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.622177][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.625192][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.626470][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.628139][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.630619][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.632055][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.634002][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.635452][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.659114][ T1707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.660505][ T1707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.662087][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.668867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.670278][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.671731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.794506][ T4509] loop0: detected capacity change from 0 to 32768 [ 47.806084][ T4509] JBD2: Ignoring recovery information on journal [ 47.816017][ T4509] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 47.821731][ T4509] [ 47.822223][ T4509] ====================================================== [ 47.823457][ T4509] WARNING: possible circular locking dependency detected [ 47.824657][ T4509] syzkaller #0 Not tainted [ 47.825424][ T4509] ------------------------------------------------------ [ 47.826695][ T4509] syz.0.17/4509 is trying to acquire lock: [ 47.827698][ T4509] ffff0000e52e6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 47.830163][ T4509] [ 47.830163][ T4509] but task is already holding lock: [ 47.831489][ T4509] ffff0000e52ebf60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_reflink+0x484/0x84c [ 47.833173][ T4509] [ 47.833173][ T4509] which lock already depends on the new lock. [ 47.833173][ T4509] [ 47.835090][ T4509] [ 47.835090][ T4509] the existing dependency chain (in reverse order) is: [ 47.836730][ T4509] [ 47.836730][ T4509] -> #5 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 47.838105][ T4509] down_write+0x5c/0x88 [ 47.838941][ T4509] ocfs2_reflink+0x484/0x84c [ 47.839843][ T4509] ocfs2_vfs_reflink+0x300/0x400 [ 47.840764][ T4509] ocfs2_reflink_ioctl+0x35c/0x3f0 [ 47.841740][ T4509] ocfs2_ioctl+0x884/0xb2c [ 47.842600][ T4509] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.843546][ T4509] invoke_syscall+0x98/0x290 [ 47.844450][ T4509] el0_svc_common+0x13c/0x258 [ 47.845283][ T4509] do_el0_svc+0x5c/0x134 [ 47.846054][ T4509] el0_svc+0x58/0x128 [ 47.846928][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.847926][ T4509] el0t_64_sync+0x18c/0x190 [ 47.848786][ T4509] [ 47.848786][ T4509] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 47.850087][ T4509] down_read+0x64/0x300 [ 47.850912][ T4509] ocfs2_init_acl+0x264/0x61c [ 47.851751][ T4509] ocfs2_mknod+0x12b0/0x218c [ 47.852578][ T4509] ocfs2_create+0x19c/0x51c [ 47.853403][ T4509] path_openat+0xda8/0x27a0 [ 47.854239][ T4509] do_filp_open+0x198/0x38c [ 47.855070][ T4509] do_sys_openat2+0x134/0x3fc [ 47.855973][ T4509] __arm64_sys_openat+0x11c/0x150 [ 47.856969][ T4509] invoke_syscall+0x98/0x290 [ 47.857836][ T4509] el0_svc_common+0x13c/0x258 [ 47.858707][ T4509] do_el0_svc+0x5c/0x134 [ 47.859528][ T4509] el0_svc+0x58/0x128 [ 47.860321][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.861269][ T4509] el0t_64_sync+0x18c/0x190 [ 47.862139][ T4509] [ 47.862139][ T4509] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 47.863693][ T4509] down_read+0x64/0x300 [ 47.864557][ T4509] ocfs2_start_trans+0x38c/0x6f4 [ 47.865549][ T4509] ocfs2_mknod+0xd2c/0x218c [ 47.866443][ T4509] ocfs2_create+0x19c/0x51c [ 47.867301][ T4509] path_openat+0xda8/0x27a0 [ 47.868140][ T4509] do_filp_open+0x198/0x38c [ 47.869006][ T4509] do_sys_openat2+0x134/0x3fc [ 47.869881][ T4509] __arm64_sys_openat+0x11c/0x150 [ 47.870832][ T4509] invoke_syscall+0x98/0x290 [ 47.871741][ T4509] el0_svc_common+0x13c/0x258 [ 47.872650][ T4509] do_el0_svc+0x5c/0x134 [ 47.873477][ T4509] el0_svc+0x58/0x128 [ 47.874269][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.875278][ T4509] el0t_64_sync+0x18c/0x190 [ 47.876201][ T4509] [ 47.876201][ T4509] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 47.877500][ T4509] ocfs2_start_trans+0x20c/0x6f4 [ 47.878458][ T4509] ocfs2_mknod+0xd2c/0x218c [ 47.879371][ T4509] ocfs2_create+0x19c/0x51c [ 47.880265][ T4509] path_openat+0xda8/0x27a0 [ 47.881139][ T4509] do_filp_open+0x198/0x38c [ 47.882008][ T4509] do_sys_openat2+0x134/0x3fc [ 47.882944][ T4509] __arm64_sys_openat+0x11c/0x150 [ 47.883916][ T4509] invoke_syscall+0x98/0x290 [ 47.884804][ T4509] el0_svc_common+0x13c/0x258 [ 47.885730][ T4509] do_el0_svc+0x5c/0x134 [ 47.886567][ T4509] el0_svc+0x58/0x128 [ 47.887367][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.888325][ T4509] el0t_64_sync+0x18c/0x190 [ 47.889184][ T4509] [ 47.889184][ T4509] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 47.891012][ T4509] down_write+0x5c/0x88 [ 47.891834][ T4509] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 47.892927][ T4509] ocfs2_reserve_clusters_with_limit+0x290/0xa3c [ 47.894063][ T4509] ocfs2_reserve_clusters+0x3c/0x50 [ 47.895002][ T4509] ocfs2_mknod+0xcd4/0x218c [ 47.895879][ T4509] ocfs2_create+0x19c/0x51c [ 47.896709][ T4509] path_openat+0xda8/0x27a0 [ 47.897581][ T4509] do_filp_open+0x198/0x38c [ 47.898443][ T4509] do_sys_openat2+0x134/0x3fc [ 47.899320][ T4509] __arm64_sys_openat+0x11c/0x150 [ 47.900421][ T4509] invoke_syscall+0x98/0x290 [ 47.901329][ T4509] el0_svc_common+0x13c/0x258 [ 47.902241][ T4509] do_el0_svc+0x5c/0x134 [ 47.903086][ T4509] el0_svc+0x58/0x128 [ 47.904020][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.905152][ T4509] el0t_64_sync+0x18c/0x190 [ 47.906169][ T4509] [ 47.906169][ T4509] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 47.908299][ T4509] __lock_acquire+0x2808/0x6634 [ 47.909372][ T4509] lock_acquire+0x20c/0x638 [ 47.910249][ T4509] down_write+0x5c/0x88 [ 47.911076][ T4509] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 47.912163][ T4509] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 47.913555][ T4509] ocfs2_create_refcount_tree+0x248/0x118c [ 47.914654][ T4509] __ocfs2_reflink+0x3f4/0x136c [ 47.915582][ T4509] ocfs2_reflink+0x498/0x84c [ 47.916419][ T4509] ocfs2_vfs_reflink+0x300/0x400 [ 47.917372][ T4509] ocfs2_reflink_ioctl+0x35c/0x3f0 [ 47.918339][ T4509] ocfs2_ioctl+0x884/0xb2c [ 47.919222][ T4509] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.920149][ T4509] invoke_syscall+0x98/0x290 [ 47.921072][ T4509] el0_svc_common+0x13c/0x258 [ 47.921947][ T4509] do_el0_svc+0x5c/0x134 [ 47.922769][ T4509] el0_svc+0x58/0x128 [ 47.923561][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.924535][ T4509] el0t_64_sync+0x18c/0x190 [ 47.925403][ T4509] [ 47.925403][ T4509] other info that might help us debug this: [ 47.925403][ T4509] [ 47.927133][ T4509] Chain exists of: [ 47.927133][ T4509] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 47.927133][ T4509] [ 47.929968][ T4509] Possible unsafe locking scenario: [ 47.929968][ T4509] [ 47.931290][ T4509] CPU0 CPU1 [ 47.932281][ T4509] ---- ---- [ 47.933243][ T4509] lock(&oi->ip_alloc_sem); [ 47.934044][ T4509] lock(&oi->ip_xattr_sem); [ 47.935297][ T4509] lock(&oi->ip_alloc_sem); [ 47.936506][ T4509] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 47.937700][ T4509] [ 47.937700][ T4509] *** DEADLOCK *** [ 47.937700][ T4509] [ 47.939119][ T4509] 5 locks held by syz.0.17/4509: [ 47.939975][ T4509] #0: ffff0000d68ce460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 47.941521][ T4509] #1: ffff0000e52e09c8 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8 [ 47.943395][ T4509] #2: ffff0000e52ec2c8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2bc/0x400 [ 47.945255][ T4509] #3: ffff0000e52ebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x47c/0x84c [ 47.946927][ T4509] #4: ffff0000e52ebf60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_reflink+0x484/0x84c [ 47.948933][ T4509] [ 47.948933][ T4509] stack backtrace: [ 47.950003][ T4509] CPU: 0 PID: 4509 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.951274][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.952953][ T4509] Call trace: [ 47.953485][ T4509] dump_backtrace+0x1c4/0x1f0 [ 47.954328][ T4509] show_stack+0x2c/0x3c [ 47.955006][ T4509] __dump_stack+0x30/0x40 [ 47.955723][ T4509] dump_stack_lvl+0xf4/0x15c [ 47.956534][ T4509] dump_stack+0x1c/0x5c [ 47.957238][ T4509] print_circular_bug+0x148/0x1b0 [ 47.958152][ T4509] check_noncircular+0x264/0x2f8 [ 47.958986][ T4509] __lock_acquire+0x2808/0x6634 [ 47.959827][ T4509] lock_acquire+0x20c/0x638 [ 47.960601][ T4509] down_write+0x5c/0x88 [ 47.961286][ T4509] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 47.962329][ T4509] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 47.963408][ T4509] ocfs2_create_refcount_tree+0x248/0x118c [ 47.964393][ T4509] __ocfs2_reflink+0x3f4/0x136c [ 47.965228][ T4509] ocfs2_reflink+0x498/0x84c [ 47.965982][ T4509] ocfs2_vfs_reflink+0x300/0x400 [ 47.966866][ T4509] ocfs2_reflink_ioctl+0x35c/0x3f0 [ 47.967769][ T4509] ocfs2_ioctl+0x884/0xb2c [ 47.968538][ T4509] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.969389][ T4509] invoke_syscall+0x98/0x290 [ 47.970168][ T4509] el0_svc_common+0x13c/0x258 [ 47.970984][ T4509] do_el0_svc+0x5c/0x134 [ 47.971671][ T4509] el0_svc+0x58/0x128 [ 47.972347][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.973204][ T4509] el0t_64_sync+0x18c/0x190 [ 47.980015][ T4509] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 47.984036][ T4509] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 47.985790][ T4509] OCFS2: File system is now read-only. [ 47.986755][ T4509] (syz.0.17,4509,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 47.988173][ T4509] (syz.0.17,4509,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 47.989423][ T4509] (syz.0.17,4509,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 47.990683][ T4509] (syz.0.17,4509,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 47.992012][ T4509] (syz.0.17,4509,0):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 47.994687][ T4509] (syz.0.17,4509,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 47.996021][ T4509] (syz.0.17,4509,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 47.997295][ T4509] (syz.0.17,4509,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 47.998571][ T4509] (syz.0.17,4509,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 48.000194][ T4509] (syz.0.17,4509,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 48.001787][ T4509] (syz.0.17,4509,0):ocfs2_create_refcount_tree:573 ERROR: status = -30 [ 48.003598][ T4509] (syz.0.17,4509,0):ocfs2_attach_refcount_tree:3785 ERROR: status = -30 [ 48.005099][ T4509] (syz.0.17,4509,0):__ocfs2_reflink:4174 ERROR: status = -30 [ 48.006544][ T4509] (syz.0.17,4509,0):ocfs2_reflink:4287 ERROR: status = -30 [ 48.023712][ T4427] ocfs2: Unmounting device (7,0) on (node local)