[ 9.612395][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.641359][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.642979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://42739 syzkaller login: [ 31.262228][ T4338] cgroup: Unknown subsys name 'net' [ 31.476530][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.752141][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 35.816246][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 35.832848][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.834376][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.835995][ T4363] device bridge_slave_0 entered promiscuous mode [ 35.838302][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.839504][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.841030][ T4363] device bridge_slave_1 entered promiscuous mode [ 35.847769][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.850349][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.857716][ T4363] team0: Port device team_slave_0 added [ 35.859416][ T4363] team0: Port device team_slave_1 added [ 35.867078][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.868208][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.872232][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.875026][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.876233][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.880320][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.925681][ T4363] device hsr_slave_0 entered promiscuous mode [ 35.963734][ T4363] device hsr_slave_1 entered promiscuous mode [ 36.048160][ T4363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.086263][ T4363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.136280][ T4363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.195778][ T4363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.241984][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.243256][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.244800][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.246028][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.264259][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.268311][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.270707][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.272878][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.278698][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.281988][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.284889][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.286110][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.290430][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.292107][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.293343][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.300384][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.302034][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.306627][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.310141][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.313334][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.316279][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.366896][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.368414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.372278][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.381650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.387457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.389198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.390749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.393050][ T4363] device veth0_vlan entered promiscuous mode [ 36.397227][ T4363] device veth1_vlan entered promiscuous mode [ 36.404156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.405741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.407344][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.410365][ T4363] device veth0_macvtap entered promiscuous mode [ 36.412587][ T4363] device veth1_macvtap entered promiscuous mode [ 36.418395][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.419821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.421922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.426376][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.427747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.430357][ T4363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.431985][ T4363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.433414][ T4363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.436628][ T4363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.519462][ T4382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.521025][ T4382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.522427][ T4382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.528662][ T4382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.530229][ T4382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.531721][ T4382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.905604][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.678559][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.679929][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.683064][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.690095][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.691578][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.693030][ T256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:37 executed programs: 0 [ 37.892407][ T4382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.894292][ T4382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.895876][ T4382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.897511][ T4382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.899073][ T4382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.900599][ T4382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.945684][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 37.961034][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.962265][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.964585][ T4427] device bridge_slave_0 entered promiscuous mode [ 37.966654][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.967903][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.969393][ T4427] device bridge_slave_1 entered promiscuous mode [ 37.975861][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.978426][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.986515][ T4427] team0: Port device team_slave_0 added [ 37.988259][ T4427] team0: Port device team_slave_1 added [ 37.993311][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.995226][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.999444][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.002149][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.003347][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.008391][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.054587][ T4427] device hsr_slave_0 entered promiscuous mode [ 38.093983][ T4427] device hsr_slave_1 entered promiscuous mode [ 38.143786][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.145130][ T4427] Cannot create hsr debugfs directory [ 39.685222][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.923842][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 41.974725][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.993853][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 42.065528][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.015934][ T4427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.087320][ T4427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.167529][ T4427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.214592][ T4427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.354270][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.357835][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.359475][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.362212][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.397844][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.399537][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.401084][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.402167][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.403957][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.407381][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.409094][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.410602][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.411788][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.414848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.418156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.422712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.424809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.426782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.429449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.431198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.477470][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.479158][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.481857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.483601][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.486202][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.560386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.561733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.566413][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.571799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.574585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.580831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.582489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.584304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.586205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.588559][ T4427] device veth0_vlan entered promiscuous mode [ 43.591907][ T4427] device veth1_vlan entered promiscuous mode [ 43.598926][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.600492][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.602079][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.604427][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.657181][ T4427] device veth0_macvtap entered promiscuous mode [ 43.659569][ T4427] device veth1_macvtap entered promiscuous mode [ 43.665114][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.666946][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.669140][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.670531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.672247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.674466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.676129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.678696][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.680605][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.682771][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.684603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.686411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.689707][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.691151][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.692615][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.694480][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.785289][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.788597][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.790374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.797538][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.798936][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.800546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.828209][ T11] device hsr_slave_0 left promiscuous mode [ 43.864032][ T11] device hsr_slave_1 left promiscuous mode [ 43.913315][ T4486] loop0: detected capacity change from 0 to 32768 [ 43.916006][ T4486] ======================================================= [ 43.916006][ T4486] WARNING: The mand mount option has been deprecated and [ 43.916006][ T4486] and is ignored by this kernel. Remove the mand [ 43.916006][ T4486] option from the mount to silence this warning. [ 43.916006][ T4486] ======================================================= [ 43.935769][ T4486] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 43.941192][ T4486] [ 43.941602][ T4486] ====================================================== [ 43.942798][ T4486] WARNING: possible circular locking dependency detected [ 43.943686][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.943901][ T4486] syzkaller #0 Not tainted [ 43.943912][ T4486] ------------------------------------------------------ [ 43.945295][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.945972][ T4486] syz.0.17/4486 is trying to acquire lock: [ 43.949036][ T4486] ffff0000e577ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 43.951184][ T4486] [ 43.951184][ T4486] but task is already holding lock: [ 43.952365][ T4486] ffff0000f20fbff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 43.953937][ T4486] [ 43.953937][ T4486] which lock already depends on the new lock. [ 43.953937][ T4486] [ 43.955693][ T4486] [ 43.955693][ T4486] the existing dependency chain (in reverse order) is: [ 43.957220][ T4486] [ 43.957220][ T4486] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 43.958561][ T4486] down_read+0x64/0x300 [ 43.959404][ T4486] ocfs2_init_acl+0x264/0x61c [ 43.960304][ T4486] ocfs2_mknod+0x12b0/0x218c [ 43.961201][ T4486] ocfs2_create+0x19c/0x51c [ 43.962093][ T4486] path_openat+0xda8/0x27a0 [ 43.962923][ T4486] do_filp_open+0x198/0x38c [ 43.963785][ T4486] do_sys_openat2+0x134/0x3fc [ 43.964687][ T4486] __arm64_sys_openat+0x11c/0x150 [ 43.965640][ T4486] invoke_syscall+0x98/0x290 [ 43.966523][ T4486] el0_svc_common+0x13c/0x258 [ 43.967416][ T4486] do_el0_svc+0x5c/0x134 [ 43.968142][ T4486] el0_svc+0x58/0x128 [ 43.968871][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 43.969813][ T4486] el0t_64_sync+0x18c/0x190 [ 43.970670][ T4486] [ 43.970670][ T4486] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 43.972065][ T4486] down_read+0x64/0x300 [ 43.972838][ T4486] ocfs2_start_trans+0x38c/0x6f4 [ 43.973736][ T4486] ocfs2_mknod+0xd2c/0x218c [ 43.974522][ T4486] ocfs2_create+0x19c/0x51c [ 43.975320][ T4486] path_openat+0xda8/0x27a0 [ 43.976102][ T4486] do_filp_open+0x198/0x38c [ 43.976903][ T4486] do_sys_openat2+0x134/0x3fc [ 43.977731][ T4486] __arm64_sys_openat+0x11c/0x150 [ 43.978623][ T4486] invoke_syscall+0x98/0x290 [ 43.979490][ T4486] el0_svc_common+0x13c/0x258 [ 43.980359][ T4486] do_el0_svc+0x5c/0x134 [ 43.981171][ T4486] el0_svc+0x58/0x128 [ 43.981895][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 43.982818][ T4486] el0t_64_sync+0x18c/0x190 [ 43.983712][ T4486] [ 43.983712][ T4486] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 43.985015][ T4486] ocfs2_start_trans+0x20c/0x6f4 [ 43.985939][ T4486] ocfs2_mknod+0xd2c/0x218c [ 43.986794][ T4486] ocfs2_create+0x19c/0x51c [ 43.987651][ T4486] path_openat+0xda8/0x27a0 [ 43.988496][ T4486] do_filp_open+0x198/0x38c [ 43.989363][ T4486] do_sys_openat2+0x134/0x3fc [ 43.990228][ T4486] __arm64_sys_openat+0x11c/0x150 [ 43.991126][ T4486] invoke_syscall+0x98/0x290 [ 43.992008][ T4486] el0_svc_common+0x13c/0x258 [ 43.992823][ T4486] do_el0_svc+0x5c/0x134 [ 43.993621][ T4486] el0_svc+0x58/0x128 [ 43.994376][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 43.995286][ T4486] el0t_64_sync+0x18c/0x190 [ 43.996130][ T4486] [ 43.996130][ T4486] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 43.997941][ T4486] down_write+0x5c/0x88 [ 43.998717][ T4486] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 43.999815][ T4486] ocfs2_reserve_clusters_with_limit+0x290/0xa3c [ 44.001000][ T4486] ocfs2_reserve_clusters+0x3c/0x50 [ 44.001960][ T4486] ocfs2_mknod+0xcd4/0x218c [ 44.002808][ T4486] ocfs2_create+0x19c/0x51c [ 44.003687][ T4486] path_openat+0xda8/0x27a0 [ 44.004529][ T4486] do_filp_open+0x198/0x38c [ 44.005381][ T4486] do_sys_openat2+0x134/0x3fc [ 44.006186][ T4486] __arm64_sys_openat+0x11c/0x150 [ 44.007098][ T4486] invoke_syscall+0x98/0x290 [ 44.007944][ T4486] el0_svc_common+0x13c/0x258 [ 44.008761][ T4486] do_el0_svc+0x5c/0x134 [ 44.009546][ T4486] el0_svc+0x58/0x128 [ 44.010299][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 44.011194][ T4486] el0t_64_sync+0x18c/0x190 [ 44.011989][ T4486] [ 44.011989][ T4486] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 44.013659][ T4486] __lock_acquire+0x2808/0x6634 [ 44.014514][ T4486] lock_acquire+0x20c/0x638 [ 44.015346][ T4486] down_write+0x5c/0x88 [ 44.016150][ T4486] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 44.017154][ T4486] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 44.018266][ T4486] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 44.019313][ T4486] ocfs2_xattr_set+0x978/0xf0c [ 44.020222][ T4486] ocfs2_xattr_trusted_set+0x4c/0x64 [ 44.021159][ T4486] __vfs_setxattr+0x374/0x390 [ 44.022042][ T4486] __vfs_setxattr_noperm+0x120/0x56c [ 44.023009][ T4486] __vfs_setxattr_locked+0x1e8/0x214 [ 44.023992][ T4486] vfs_setxattr+0x158/0x2a8 [ 44.024829][ T4486] setxattr+0x258/0x2d8 [ 44.025619][ T4486] path_setxattr+0x130/0x260 [ 44.026480][ T4486] __arm64_sys_setxattr+0xc4/0xe0 [ 44.027444][ T4486] invoke_syscall+0x98/0x290 [ 44.028283][ T4486] el0_svc_common+0x13c/0x258 [ 44.029183][ T4486] do_el0_svc+0x5c/0x134 [ 44.030023][ T4486] el0_svc+0x58/0x128 [ 44.030765][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 44.031601][ T4486] el0t_64_sync+0x18c/0x190 [ 44.032417][ T4486] [ 44.032417][ T4486] other info that might help us debug this: [ 44.032417][ T4486] [ 44.034113][ T4486] Chain exists of: [ 44.034113][ T4486] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 44.034113][ T4486] [ 44.036838][ T4486] Possible unsafe locking scenario: [ 44.036838][ T4486] [ 44.038072][ T4486] CPU0 CPU1 [ 44.038978][ T4486] ---- ---- [ 44.039851][ T4486] lock(&oi->ip_xattr_sem); [ 44.040616][ T4486] lock(&journal->j_trans_barrier); [ 44.041837][ T4486] lock(&oi->ip_xattr_sem); [ 44.042923][ T4486] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 44.044067][ T4486] [ 44.044067][ T4486] *** DEADLOCK *** [ 44.044067][ T4486] [ 44.045355][ T4486] 3 locks held by syz.0.17/4486: [ 44.046160][ T4486] #0: ffff0000d382e460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 44.047728][ T4486] #1: ffff0000f20fc2c8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2a8 [ 44.049545][ T4486] #2: ffff0000f20fbff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 44.051197][ T4486] [ 44.051197][ T4486] stack backtrace: [ 44.052155][ T4486] CPU: 0 PID: 4486 Comm: syz.0.17 Not tainted syzkaller #0 [ 44.053352][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.054928][ T4486] Call trace: [ 44.055442][ T4486] dump_backtrace+0x1c4/0x1f0 [ 44.056166][ T4486] show_stack+0x2c/0x3c [ 44.056849][ T4486] __dump_stack+0x30/0x40 [ 44.057575][ T4486] dump_stack_lvl+0xf4/0x15c [ 44.058346][ T4486] dump_stack+0x1c/0x5c [ 44.059017][ T4486] print_circular_bug+0x148/0x1b0 [ 44.059823][ T4486] check_noncircular+0x264/0x2f8 [ 44.060600][ T4486] __lock_acquire+0x2808/0x6634 [ 44.061422][ T4486] lock_acquire+0x20c/0x638 [ 44.062180][ T4486] down_write+0x5c/0x88 [ 44.062888][ T4486] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 44.063930][ T4486] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 44.064916][ T4486] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 44.065842][ T4486] ocfs2_xattr_set+0x978/0xf0c [ 44.066667][ T4486] ocfs2_xattr_trusted_set+0x4c/0x64 [ 44.067575][ T4486] __vfs_setxattr+0x374/0x390 [ 44.068338][ T4486] __vfs_setxattr_noperm+0x120/0x56c [ 44.069192][ T4486] __vfs_setxattr_locked+0x1e8/0x214 [ 44.070061][ T4486] vfs_setxattr+0x158/0x2a8 [ 44.070841][ T4486] setxattr+0x258/0x2d8 [ 44.071537][ T4486] path_setxattr+0x130/0x260 [ 44.072307][ T4486] __arm64_sys_setxattr+0xc4/0xe0 [ 44.073146][ T4486] invoke_syscall+0x98/0x290 [ 44.073909][ T4486] el0_svc_common+0x13c/0x258 [ 44.074696][ T4486] do_el0_svc+0x5c/0x134 [ 44.075422][ T4486] el0_svc+0x58/0x128 [ 44.076076][ T4486] el0t_64_sync_handler+0x84/0xf0 [ 44.076899][ T4486] el0t_64_sync+0x18c/0x190 [ 44.078350][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 44.079224][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.080660][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.082130][ T11] device bridge_slave_1 left promiscuous mode [ 44.083251][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.091468][ T4427] ocfs2: Unmounting device (7,0) on (node local) [ 44.125040][ T11] device bridge_slave_0 left promiscuous mode [ 44.126168][ T11] bridge0: port 1(bridge_slave_0) entered disabled state