Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 parsed 1 programs [ 34.613553][ T4326] cgroup: Unknown subsys name 'net' [ 34.832829][ T4326] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.112453][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.621807][ T4363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.623349][ T4363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.624591][ T4363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.626042][ T4363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.627341][ T4363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.628559][ T4363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.736110][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.737340][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.739128][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.748682][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.750186][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.751835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.897704][ T4377] chnl_net:caif_netlink_parms(): no params data found [ 38.917529][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.918665][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.921269][ T4377] device bridge_slave_0 entered promiscuous mode [ 38.923784][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.924997][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.926498][ T4377] device bridge_slave_1 entered promiscuous mode [ 38.934442][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.936918][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.001101][ T4377] team0: Port device team_slave_0 added [ 39.003062][ T4377] team0: Port device team_slave_1 added [ 39.010532][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.011651][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.015597][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.018302][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.019381][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.023783][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.070698][ T4377] device hsr_slave_0 entered promiscuous mode [ 39.119734][ T4377] device hsr_slave_1 entered promiscuous mode [ 39.223893][ T4377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.251657][ T4377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.291249][ T4377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.331447][ T4377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.378839][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.380087][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.381433][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.382492][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.400872][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.405278][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.407601][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.409420][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.414594][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.417929][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.419502][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.420534][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.424596][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.426096][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.427317][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.435025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.437046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.441962][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.443606][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.446517][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.448974][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.501322][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.502645][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.506328][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.513448][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.520617][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.522524][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.523986][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.526432][ T4377] device veth0_vlan entered promiscuous mode [ 39.529458][ T4377] device veth1_vlan entered promiscuous mode [ 39.538179][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.540230][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.541698][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.544266][ T4377] device veth0_macvtap entered promiscuous mode [ 39.546617][ T4377] device veth1_macvtap entered promiscuous mode [ 39.553366][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.554646][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.556783][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.559677][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.561164][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.563870][ T4377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.565217][ T4377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.566543][ T4377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.567867][ T4377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:40 executed programs: 0 [ 40.137917][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.139674][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.141410][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.142932][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.144345][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.145536][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.511921][ T4438] chnl_net:caif_netlink_parms(): no params data found [ 40.528114][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.529173][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.530735][ T4438] device bridge_slave_0 entered promiscuous mode [ 40.532984][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.534139][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.535719][ T4438] device bridge_slave_1 entered promiscuous mode [ 40.862581][ T4438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.868470][ T4438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.878287][ T4438] team0: Port device team_slave_0 added [ 40.881068][ T4438] team0: Port device team_slave_1 added [ 40.886733][ T4438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.887872][ T4438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.892298][ T4438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.895835][ T4438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.896913][ T4438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.901113][ T4438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.010641][ T4438] device hsr_slave_0 entered promiscuous mode [ 41.059763][ T4438] device hsr_slave_1 entered promiscuous mode [ 41.099591][ T4438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.100916][ T4438] Cannot create hsr debugfs directory [ 41.391535][ T4438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.170056][ T4363] Bluetooth: hci0: command 0x0409 tx timeout [ 44.040841][ T4438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.249735][ T4363] Bluetooth: hci0: command 0x041b tx timeout [ 45.160790][ T4438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.241740][ T4438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.483109][ T4438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.520857][ T4438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.631483][ T4438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.751272][ T4438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.870252][ T4438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.873641][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.875038][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.877404][ T4438] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.912440][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.914332][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.915819][ T248] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.917023][ T248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.918514][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.921610][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.923261][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.924657][ T248] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.925739][ T248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.928105][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.931447][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.934046][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.936144][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.937767][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.943242][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.944967][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.946521][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.948006][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.951678][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.953201][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.955526][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.046415][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.047737][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.051610][ T4438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.056938][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.058478][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.065182][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.066726][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.068256][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.070973][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.102249][ T4438] device veth0_vlan entered promiscuous mode [ 46.105751][ T4438] device veth1_vlan entered promiscuous mode [ 46.111687][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.113253][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.114684][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.116198][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.118515][ T4438] device veth0_macvtap entered promiscuous mode [ 46.120852][ T4438] device veth1_macvtap entered promiscuous mode [ 46.125755][ T4438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.127440][ T4438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.130321][ T4438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.131546][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.133100][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.134481][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.135928][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.138295][ T4438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.140931][ T4438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.143005][ T4438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.146480][ T263] device hsr_slave_0 left promiscuous mode [ 46.189835][ T263] device hsr_slave_1 left promiscuous mode [ 46.269589][ T263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.270737][ T263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.272335][ T263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.273438][ T263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.274891][ T263] device bridge_slave_1 left promiscuous mode [ 46.276179][ T263] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.310721][ T263] device bridge_slave_0 left promiscuous mode [ 46.311745][ T263] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.329590][ T4363] Bluetooth: hci0: command 0x040f tx timeout [ 46.449862][ T263] device veth1_macvtap left promiscuous mode [ 46.450878][ T263] device veth0_macvtap left promiscuous mode [ 46.451859][ T263] device veth1_vlan left promiscuous mode [ 46.452947][ T263] device veth0_vlan left promiscuous mode [ 48.180787][ T263] team0 (unregistering): Port device team_slave_1 removed [ 48.360083][ T263] team0 (unregistering): Port device team_slave_0 removed [ 48.409582][ T4363] Bluetooth: hci0: command 0x0419 tx timeout [ 48.529935][ T263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.769909][ T263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.230893][ T263] bond0 (unregistering): Released all slaves [ 51.431519][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.433127][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.435388][ T4438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.436669][ T4438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.438127][ T4438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.439636][ T4438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.466825][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.473267][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.476814][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.477240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.477946][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.481088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.510286][ T4459] loop0: detected capacity change from 0 to 512 [ 51.519133][ T4459] [ 51.519561][ T4459] ====================================================== [ 51.520635][ T4459] WARNING: possible circular locking dependency detected [ 51.521735][ T4459] syzkaller #0 Not tainted [ 51.522503][ T4459] ------------------------------------------------------ [ 51.523542][ T4459] syz.0.17/4459 is trying to acquire lock: [ 51.524432][ T4459] ffff0000d1a10b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 51.526011][ T4459] [ 51.526011][ T4459] but task is already holding lock: [ 51.527161][ T4459] ffff0000e2355b10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 51.528629][ T4459] [ 51.528629][ T4459] which lock already depends on the new lock. [ 51.528629][ T4459] [ 51.530194][ T4459] [ 51.530194][ T4459] the existing dependency chain (in reverse order) is: [ 51.531547][ T4459] [ 51.531547][ T4459] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 51.532731][ T4459] down_read+0x64/0x304 [ 51.533455][ T4459] ext4_setattr+0x7c4/0x150c [ 51.534277][ T4459] notify_change+0xb0c/0xdcc [ 51.535060][ T4459] chown_common+0x414/0x574 [ 51.535835][ T4459] do_fchownat+0x158/0x268 [ 51.536569][ T4459] __arm64_sys_fchownat+0xb8/0xd4 [ 51.537414][ T4459] invoke_syscall+0x98/0x2bc [ 51.538169][ T4459] el0_svc_common+0x138/0x258 [ 51.538974][ T4459] do_el0_svc+0x58/0x13c [ 51.539689][ T4459] el0_svc+0x58/0x138 [ 51.540388][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 51.541228][ T4459] el0t_64_sync+0x18c/0x190 [ 51.541971][ T4459] [ 51.541971][ T4459] -> #1 (jbd2_handle){++++}-{0:0}: [ 51.543061][ T4459] start_this_handle+0xfe0/0x122c [ 51.543934][ T4459] jbd2__journal_start+0x288/0x51c [ 51.544719][ T4459] __ext4_journal_start_sb+0x2fc/0x674 [ 51.545513][ T4459] ext4_writepages+0xa28/0x284c [ 51.546278][ T4459] do_writepages+0x2c0/0x4fc [ 51.546874][ T4459] __writeback_single_inode+0x164/0x157c [ 51.547755][ T4459] writeback_sb_inodes+0x824/0x1404 [ 51.548652][ T4459] __writeback_inodes_wb+0x110/0x394 [ 51.549504][ T4459] wb_writeback+0x414/0xfb0 [ 51.550326][ T4459] wb_workfn+0xac0/0xd98 [ 51.551052][ T4459] process_one_work+0x7f4/0x13a8 [ 51.551839][ T4459] worker_thread+0x8c8/0xfbc [ 51.552607][ T4459] kthread+0x250/0x2d8 [ 51.553310][ T4459] ret_from_fork+0x10/0x20 [ 51.554049][ T4459] [ 51.554049][ T4459] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 51.555157][ T4459] __lock_acquire+0x293c/0x6544 [ 51.556028][ T4459] lock_acquire+0x20c/0x644 [ 51.556805][ T4459] percpu_down_read+0x70/0x2a8 [ 51.557571][ T4459] ext4_writepages+0x188/0x284c [ 51.558434][ T4459] do_writepages+0x2c0/0x4fc [ 51.559248][ T4459] __writeback_single_inode+0x164/0x157c [ 51.560199][ T4459] writeback_single_inode+0x1c0/0x720 [ 51.561030][ T4459] write_inode_now+0x144/0x1b0 [ 51.561840][ T4459] iput+0x5cc/0x7f4 [ 51.562520][ T4459] ext4_xattr_block_set+0x17a4/0x2810 [ 51.563405][ T4459] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 51.564371][ T4459] __ext4_expand_extra_isize+0x298/0x358 [ 51.565401][ T4459] __ext4_mark_inode_dirty+0x3e4/0x790 [ 51.566386][ T4459] ext4_evict_inode+0xb58/0x1270 [ 51.567202][ T4459] evict+0x3c8/0x810 [ 51.567909][ T4459] iput+0x764/0x7f4 [ 51.568502][ T4459] ext4_process_orphan+0x240/0x2b4 [ 51.569423][ T4459] ext4_orphan_cleanup+0x908/0x104c [ 51.570390][ T4459] ext4_fill_super+0x6440/0x68a8 [ 51.571270][ T4459] get_tree_bdev+0x358/0x544 [ 51.572058][ T4459] ext4_get_tree+0x28/0x38 [ 51.572814][ T4459] vfs_get_tree+0x90/0x274 [ 51.573587][ T4459] do_new_mount+0x228/0x810 [ 51.574389][ T4459] path_mount+0x5b4/0xe78 [ 51.575107][ T4459] __arm64_sys_mount+0x49c/0x584 [ 51.575912][ T4459] invoke_syscall+0x98/0x2bc [ 51.576716][ T4459] el0_svc_common+0x138/0x258 [ 51.577492][ T4459] do_el0_svc+0x58/0x13c [ 51.578229][ T4459] el0_svc+0x58/0x138 [ 51.578976][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 51.579870][ T4459] el0t_64_sync+0x18c/0x190 [ 51.580674][ T4459] [ 51.580674][ T4459] other info that might help us debug this: [ 51.580674][ T4459] [ 51.582195][ T4459] Chain exists of: [ 51.582195][ T4459] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 51.582195][ T4459] [ 51.584178][ T4459] Possible unsafe locking scenario: [ 51.584178][ T4459] [ 51.585294][ T4459] CPU0 CPU1 [ 51.586113][ T4459] ---- ---- [ 51.586902][ T4459] lock(&ei->xattr_sem); [ 51.587501][ T4459] lock(jbd2_handle); [ 51.588560][ T4459] lock(&ei->xattr_sem); [ 51.589591][ T4459] lock(&sbi->s_writepages_rwsem); [ 51.590431][ T4459] [ 51.590431][ T4459] *** DEADLOCK *** [ 51.590431][ T4459] [ 51.591653][ T4459] 3 locks held by syz.0.17/4459: [ 51.592333][ T4459] #0: ffff0000d302e0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 51.593928][ T4459] #1: ffff0000d302e650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 51.595449][ T4459] #2: ffff0000e2355b10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 51.596983][ T4459] [ 51.596983][ T4459] stack backtrace: [ 51.597832][ T4459] CPU: 0 PID: 4459 Comm: syz.0.17 Not tainted syzkaller #0 [ 51.598937][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 51.600456][ T4459] Call trace: [ 51.600913][ T4459] dump_backtrace+0x1c8/0x1f4 [ 51.601659][ T4459] show_stack+0x2c/0x3c [ 51.602245][ T4459] __dump_stack+0x30/0x40 [ 51.602836][ T4459] dump_stack_lvl+0xf8/0x160 [ 51.603541][ T4459] dump_stack+0x1c/0x5c [ 51.604179][ T4459] print_circular_bug+0x148/0x1b0 [ 51.604940][ T4459] check_noncircular+0x240/0x2d4 [ 51.605725][ T4459] __lock_acquire+0x293c/0x6544 [ 51.606525][ T4459] lock_acquire+0x20c/0x644 [ 51.607182][ T4459] percpu_down_read+0x70/0x2a8 [ 51.607930][ T4459] ext4_writepages+0x188/0x284c [ 51.608668][ T4459] do_writepages+0x2c0/0x4fc [ 51.609329][ T4459] __writeback_single_inode+0x164/0x157c [ 51.610180][ T4459] writeback_single_inode+0x1c0/0x720 [ 51.610971][ T4459] write_inode_now+0x144/0x1b0 [ 51.611696][ T4459] iput+0x5cc/0x7f4 [ 51.612310][ T4459] ext4_xattr_block_set+0x17a4/0x2810 [ 51.613166][ T4459] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 51.614025][ T4459] __ext4_expand_extra_isize+0x298/0x358 [ 51.614814][ T4459] __ext4_mark_inode_dirty+0x3e4/0x790 [ 51.615607][ T4459] ext4_evict_inode+0xb58/0x1270 [ 51.616315][ T4459] evict+0x3c8/0x810 [ 51.616859][ T4459] iput+0x764/0x7f4 [ 51.617434][ T4459] ext4_process_orphan+0x240/0x2b4 [ 51.618177][ T4459] ext4_orphan_cleanup+0x908/0x104c [ 51.618928][ T4459] ext4_fill_super+0x6440/0x68a8 [ 51.619711][ T4459] get_tree_bdev+0x358/0x544 [ 51.620440][ T4459] ext4_get_tree+0x28/0x38 [ 51.621088][ T4459] vfs_get_tree+0x90/0x274 [ 51.621738][ T4459] do_new_mount+0x228/0x810 [ 51.622426][ T4459] path_mount+0x5b4/0xe78 [ 51.623068][ T4459] __arm64_sys_mount+0x49c/0x584 [ 51.623810][ T4459] invoke_syscall+0x98/0x2bc [ 51.624444][ T4459] el0_svc_common+0x138/0x258 [ 51.625139][ T4459] do_el0_svc+0x58/0x13c [ 51.625748][ T4459] el0_svc+0x58/0x138 [ 51.626358][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 51.627082][ T4459] el0t_64_sync+0x18c/0x190 [ 51.628887][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 51.631124][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.632169][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 51.634251][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.635223][ T4459] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.637116][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 51.639131][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.640334][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 11 err=-117 [ 51.642340][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.643387][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 51.645523][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.646504][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 51.648487][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.649765][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 51.651911][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.652951][ T4459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 18 err=-117 [ 51.654957][ T4459] EXT4-fs (loop0): Remounting filesystem read-only [ 51.656041][ T4459] EXT4-fs (loop0): 1 orphan inode deleted [ 51.656866][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.666244][ T4438] EXT4-fs (loop0): unmounting filesystem.