Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs [ 33.508254][ T4326] cgroup: Unknown subsys name 'net' [ 33.804206][ T4326] cgroup: Unknown subsys name 'rlimit' [ 34.065904][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.826943][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 38.844751][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.846010][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.847561][ T4347] device bridge_slave_0 entered promiscuous mode [ 38.849870][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.851062][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.852981][ T4347] device bridge_slave_1 entered promiscuous mode [ 38.862906][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.865257][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.872471][ T4347] team0: Port device team_slave_0 added [ 38.874074][ T4347] team0: Port device team_slave_1 added [ 38.880201][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.881264][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.885542][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.888182][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.889422][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.894112][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.953329][ T4347] device hsr_slave_0 entered promiscuous mode [ 39.001691][ T4347] device hsr_slave_1 entered promiscuous mode [ 39.077210][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.134175][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.174929][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.213858][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.270308][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.271479][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.272860][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.274023][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.291694][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.295509][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.297953][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.299898][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.301850][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.307263][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.310661][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.314033][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.315159][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.319366][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.320849][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.321965][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.329082][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.330928][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.334647][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.337398][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.340690][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.346822][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.446531][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.452441][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.453697][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.454926][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.462408][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.464135][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.465472][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.468214][ T4347] device veth0_vlan entered promiscuous mode [ 39.471452][ T4347] device veth1_vlan entered promiscuous mode [ 39.479803][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.481373][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.483395][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.485793][ T4347] device veth0_macvtap entered promiscuous mode [ 39.488086][ T4347] device veth1_macvtap entered promiscuous mode [ 39.495464][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.496694][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.498541][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.501233][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.502715][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.505523][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.506843][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.508137][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.509398][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.654836][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.656147][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.657802][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.667187][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.668504][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.670180][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.386468][ T4413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.388095][ T4413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.389473][ T4413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.391047][ T4413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.393248][ T4413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.394527][ T4413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.895225][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 0 [ 41.040757][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.042755][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.044128][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.045615][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.047069][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.048328][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.096400][ T4425] chnl_net:caif_netlink_parms(): no params data found [ 41.113293][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.114523][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.115846][ T4425] device bridge_slave_0 entered promiscuous mode [ 41.117932][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.119010][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.120367][ T4425] device bridge_slave_1 entered promiscuous mode [ 41.127607][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.129898][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.137773][ T4425] team0: Port device team_slave_0 added [ 41.139710][ T4425] team0: Port device team_slave_1 added [ 41.146165][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.147218][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.150994][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.153325][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.154317][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.158145][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.192539][ T4425] device hsr_slave_0 entered promiscuous mode [ 41.231697][ T4425] device hsr_slave_1 entered promiscuous mode [ 41.271658][ T4425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.272981][ T4425] Cannot create hsr debugfs directory [ 43.131909][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 43.512818][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.053059][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.143840][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.211828][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 46.186194][ T4425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.222752][ T4425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.343462][ T4425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.393187][ T4425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.483315][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.486781][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.488274][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.490687][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.493502][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.495023][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.496409][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.497467][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.499166][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.502889][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.504537][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.505901][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.507047][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.555478][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.558839][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.561393][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.564099][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.565697][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.568175][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.569814][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.572532][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.574039][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.576483][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.578068][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.580342][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.658893][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.660133][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.663783][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.669618][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.671160][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.676866][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.678410][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.679934][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.681353][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.684609][ T4425] device veth0_vlan entered promiscuous mode [ 46.687693][ T4425] device veth1_vlan entered promiscuous mode [ 46.756804][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.758279][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.759713][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.761217][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.763882][ T4425] device veth0_macvtap entered promiscuous mode [ 46.766157][ T4425] device veth1_macvtap entered promiscuous mode [ 46.771123][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.773045][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.775118][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.776504][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.778049][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.779395][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.780871][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.783288][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.784891][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.786859][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.787945][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.789525][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.792216][ T4425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.793604][ T4425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.794952][ T4425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.796339][ T4425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.855990][ T1690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.858113][ T1690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.860626][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.866059][ T1690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.867287][ T1690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.868939][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.906974][ T4509] loop0: detected capacity change from 0 to 512 [ 46.919262][ T4509] [ 46.919673][ T4509] ====================================================== [ 46.920706][ T4509] WARNING: possible circular locking dependency detected [ 46.921779][ T4509] syzkaller #0 Not tainted [ 46.922428][ T4509] ------------------------------------------------------ [ 46.923479][ T4509] syz.0.17/4509 is trying to acquire lock: [ 46.924389][ T4509] ffff0000dd85eb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 46.925989][ T4509] [ 46.925989][ T4509] but task is already holding lock: [ 46.927064][ T4509] ffff0000e50628e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.928587][ T4509] [ 46.928587][ T4509] which lock already depends on the new lock. [ 46.928587][ T4509] [ 46.930106][ T4509] [ 46.930106][ T4509] the existing dependency chain (in reverse order) is: [ 46.931535][ T4509] [ 46.931535][ T4509] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 46.932811][ T4509] down_read+0x64/0x304 [ 46.933515][ T4509] ext4_setattr+0x7c4/0x150c [ 46.934284][ T4509] notify_change+0xb0c/0xdcc [ 46.935055][ T4509] chown_common+0x414/0x574 [ 46.935780][ T4509] do_fchownat+0x158/0x268 [ 46.936503][ T4509] __arm64_sys_fchownat+0xb8/0xd4 [ 46.937341][ T4509] invoke_syscall+0x98/0x2bc [ 46.938099][ T4509] el0_svc_common+0x138/0x258 [ 46.938891][ T4509] do_el0_svc+0x58/0x13c [ 46.939581][ T4509] el0_svc+0x58/0x138 [ 46.940359][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 46.941201][ T4509] el0t_64_sync+0x18c/0x190 [ 46.941985][ T4509] [ 46.941985][ T4509] -> #1 (jbd2_handle){++++}-{0:0}: [ 46.943077][ T4509] start_this_handle+0xfe0/0x122c [ 46.943890][ T4509] jbd2__journal_start+0x288/0x51c [ 46.944807][ T4509] __ext4_journal_start_sb+0x2fc/0x674 [ 46.945709][ T4509] ext4_writepages+0xa28/0x284c [ 46.946537][ T4509] do_writepages+0x2c0/0x4fc [ 46.947370][ T4509] __writeback_single_inode+0x164/0x157c [ 46.948318][ T4509] writeback_sb_inodes+0x824/0x1404 [ 46.949139][ T4509] __writeback_inodes_wb+0x110/0x394 [ 46.950024][ T4509] wb_writeback+0x414/0xfb0 [ 46.950801][ T4509] wb_workfn+0xac0/0xd98 [ 46.951499][ T4509] process_one_work+0x7f4/0x13a8 [ 46.952332][ T4509] worker_thread+0x8c8/0xfbc [ 46.953093][ T4509] kthread+0x250/0x2d8 [ 46.953780][ T4509] ret_from_fork+0x10/0x20 [ 46.954518][ T4509] [ 46.954518][ T4509] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 46.955825][ T4509] __lock_acquire+0x293c/0x6544 [ 46.956653][ T4509] lock_acquire+0x20c/0x644 [ 46.957419][ T4509] percpu_down_read+0x70/0x2a8 [ 46.958243][ T4509] ext4_writepages+0x188/0x284c [ 46.959090][ T4509] do_writepages+0x2c0/0x4fc [ 46.959867][ T4509] __writeback_single_inode+0x164/0x157c [ 46.960807][ T4509] writeback_single_inode+0x1c0/0x720 [ 46.961767][ T4509] write_inode_now+0x144/0x1b0 [ 46.962511][ T4509] iput+0x5cc/0x7f4 [ 46.963178][ T4509] ext4_xattr_block_set+0x17a4/0x2810 [ 46.964068][ T4509] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 46.965127][ T4509] __ext4_expand_extra_isize+0x298/0x358 [ 46.966019][ T4509] __ext4_mark_inode_dirty+0x3e4/0x790 [ 46.966903][ T4509] ext4_evict_inode+0xb58/0x1270 [ 46.967693][ T4509] evict+0x3c8/0x810 [ 46.968415][ T4509] iput+0x764/0x7f4 [ 46.969072][ T4509] ext4_process_orphan+0x240/0x2b4 [ 46.970001][ T4509] ext4_orphan_cleanup+0x908/0x104c [ 46.970887][ T4509] ext4_fill_super+0x6920/0x6e34 [ 46.971697][ T4509] get_tree_bdev+0x358/0x544 [ 46.972446][ T4509] ext4_get_tree+0x28/0x38 [ 46.973263][ T4509] vfs_get_tree+0x90/0x274 [ 46.974063][ T4509] do_new_mount+0x228/0x810 [ 46.974854][ T4509] path_mount+0x5b4/0xe78 [ 46.975589][ T4509] __arm64_sys_mount+0x49c/0x584 [ 46.976386][ T4509] invoke_syscall+0x98/0x2bc [ 46.977214][ T4509] el0_svc_common+0x138/0x258 [ 46.978002][ T4509] do_el0_svc+0x58/0x13c [ 46.978726][ T4509] el0_svc+0x58/0x138 [ 46.979369][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 46.980239][ T4509] el0t_64_sync+0x18c/0x190 [ 46.980989][ T4509] [ 46.980989][ T4509] other info that might help us debug this: [ 46.980989][ T4509] [ 46.982573][ T4509] Chain exists of: [ 46.982573][ T4509] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 46.982573][ T4509] [ 46.984527][ T4509] Possible unsafe locking scenario: [ 46.984527][ T4509] [ 46.985644][ T4509] CPU0 CPU1 [ 46.986435][ T4509] ---- ---- [ 46.987279][ T4509] lock(&ei->xattr_sem); [ 46.987948][ T4509] lock(jbd2_handle); [ 46.988941][ T4509] lock(&ei->xattr_sem); [ 46.989967][ T4509] lock(&sbi->s_writepages_rwsem); [ 46.990834][ T4509] [ 46.990834][ T4509] *** DEADLOCK *** [ 46.990834][ T4509] [ 46.992118][ T4509] 3 locks held by syz.0.17/4509: [ 46.992961][ T4509] #0: ffff0000dd85c0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 46.994542][ T4509] #1: ffff0000dd85c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 46.995948][ T4509] #2: ffff0000e50628e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 46.997610][ T4509] [ 46.997610][ T4509] stack backtrace: [ 46.998547][ T4509] CPU: 0 PID: 4509 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.999617][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.001166][ T4509] Call trace: [ 47.001642][ T4509] dump_backtrace+0x1c8/0x1f4 [ 47.002384][ T4509] show_stack+0x2c/0x3c [ 47.003056][ T4509] __dump_stack+0x30/0x40 [ 47.003804][ T4509] dump_stack_lvl+0xf8/0x160 [ 47.004422][ T4509] dump_stack+0x1c/0x5c [ 47.005060][ T4509] print_circular_bug+0x148/0x1b0 [ 47.005804][ T4509] check_noncircular+0x240/0x2d4 [ 47.006593][ T4509] __lock_acquire+0x293c/0x6544 [ 47.007405][ T4509] lock_acquire+0x20c/0x644 [ 47.008082][ T4509] percpu_down_read+0x70/0x2a8 [ 47.008787][ T4509] ext4_writepages+0x188/0x284c [ 47.009512][ T4509] do_writepages+0x2c0/0x4fc [ 47.010220][ T4509] __writeback_single_inode+0x164/0x157c [ 47.011107][ T4509] writeback_single_inode+0x1c0/0x720 [ 47.011969][ T4509] write_inode_now+0x144/0x1b0 [ 47.012690][ T4509] iput+0x5cc/0x7f4 [ 47.013287][ T4509] ext4_xattr_block_set+0x17a4/0x2810 [ 47.014087][ T4509] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 47.014865][ T4509] __ext4_expand_extra_isize+0x298/0x358 [ 47.015634][ T4509] __ext4_mark_inode_dirty+0x3e4/0x790 [ 47.016441][ T4509] ext4_evict_inode+0xb58/0x1270 [ 47.017161][ T4509] evict+0x3c8/0x810 [ 47.017778][ T4509] iput+0x764/0x7f4 [ 47.018335][ T4509] ext4_process_orphan+0x240/0x2b4 [ 47.019124][ T4509] ext4_orphan_cleanup+0x908/0x104c [ 47.019912][ T4509] ext4_fill_super+0x6920/0x6e34 [ 47.020674][ T4509] get_tree_bdev+0x358/0x544 [ 47.021358][ T4509] ext4_get_tree+0x28/0x38 [ 47.022026][ T4509] vfs_get_tree+0x90/0x274 [ 47.022733][ T4509] do_new_mount+0x228/0x810 [ 47.023392][ T4509] path_mount+0x5b4/0xe78 [ 47.024052][ T4509] __arm64_sys_mount+0x49c/0x584 [ 47.024882][ T4509] invoke_syscall+0x98/0x2bc [ 47.025677][ T4509] el0_svc_common+0x138/0x258 [ 47.026390][ T4509] do_el0_svc+0x58/0x13c [ 47.027048][ T4509] el0_svc+0x58/0x138 [ 47.027653][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.028350][ T4509] el0t_64_sync+0x18c/0x190 [ 47.030551][ T4509] ------------[ cut here ]------------ [ 47.031377][ T4509] EA inode 11 i_nlink=2 [ 47.031455][ T4509] WARNING: CPU: 1 PID: 4509 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 47.033624][ T4509] Modules linked in: [ 47.034292][ T4509] CPU: 1 PID: 4509 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.035323][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.036968][ T4509] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.038165][ T4509] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 47.039177][ T4509] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 47.040181][ T4509] sp : ffff800021536e60 [ 47.040830][ T4509] x29: ffff800021536f00 x28: 0000000000000000 x27: dfff800000000000 [ 47.042107][ T4509] x26: 1fffe0001ca4d6da x25: ffff7000042a6dd0 x24: 0000000000000000 [ 47.043404][ T4509] x23: ffff800017a8a000 x22: ffff0000e526b518 x21: 0000000000000002 [ 47.044616][ T4509] x20: 0000000000000001 x19: ffff0000e526b4d8 x18: ffff800011abbcc0 [ 47.045908][ T4509] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000000 [ 47.047146][ T4509] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 47.048407][ T4509] x11: ff00800008191ca8 x10: 0000000000000000 x9 : 551bb6dfd4866700 [ 47.049645][ T4509] x8 : 551bb6dfd4866700 x7 : 0000000000000001 x6 : 0000000000000001 [ 47.050812][ T4509] x5 : ffff8000215368f8 x4 : ffff8000151a4920 x3 : ffff800008311fd8 [ 47.052119][ T4509] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.053497][ T4509] Call trace: [ 47.053967][ T4509] ext4_xattr_inode_update_ref+0x42c/0x470 [ 47.054831][ T4509] ext4_xattr_set_entry+0x918/0x15ac [ 47.055644][ T4509] ext4_xattr_ibody_set+0x204/0x600 [ 47.056437][ T4509] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 47.057269][ T4509] __ext4_expand_extra_isize+0x298/0x358 [ 47.058088][ T4509] __ext4_mark_inode_dirty+0x3e4/0x790 [ 47.058854][ T4509] ext4_evict_inode+0xb58/0x1270 [ 47.059622][ T4509] evict+0x3c8/0x810 [ 47.060262][ T4509] iput+0x764/0x7f4 [ 47.060912][ T4509] ext4_process_orphan+0x240/0x2b4 [ 47.061699][ T4509] ext4_orphan_cleanup+0x908/0x104c [ 47.062520][ T4509] ext4_fill_super+0x6920/0x6e34 [ 47.063349][ T4509] get_tree_bdev+0x358/0x544 [ 47.064010][ T4509] ext4_get_tree+0x28/0x38 [ 47.064754][ T4509] vfs_get_tree+0x90/0x274 [ 47.065415][ T4509] do_new_mount+0x228/0x810 [ 47.066140][ T4509] path_mount+0x5b4/0xe78 [ 47.066825][ T4509] __arm64_sys_mount+0x49c/0x584 [ 47.067567][ T4509] invoke_syscall+0x98/0x2bc [ 47.068243][ T4509] el0_svc_common+0x138/0x258 [ 47.068964][ T4509] do_el0_svc+0x58/0x13c [ 47.069579][ T4509] el0_svc+0x58/0x138 [ 47.070175][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 47.070922][ T4509] el0t_64_sync+0x18c/0x190 [ 47.071608][ T4509] irq event stamp: 4179 [ 47.072267][ T4509] hardirqs last enabled at (4179): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 47.073820][ T4509] hardirqs last disabled at (4178): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 47.075351][ T4509] softirqs last enabled at (1316): [] local_bh_enable+0x10/0x34 [ 47.076739][ T4509] softirqs last disabled at (1314): [] local_bh_disable+0x10/0x34 [ 47.078141][ T4509] ---[ end trace 0000000000000000 ]--- [ 47.080725][ T4509] EXT4-fs (loop0): 1 orphan inode deleted [ 47.082406][ T4509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.086407][ T4425] EXT4-fs (loop0): unmounting filesystem.