Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 1970/01/01 00:01:23 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:23 ignoring optional flag "type"="gce" 1970/01/01 00:01:23 parsed 1 programs [ 86.655633][ T4454] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 95.059927][ T4498] chnl_net:caif_netlink_parms(): no params data found [ 95.096220][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.098226][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.100823][ T4498] device bridge_slave_0 entered promiscuous mode [ 95.104370][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.106454][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.109006][ T4498] device bridge_slave_1 entered promiscuous mode [ 95.179118][ T4498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.183508][ T4498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.201405][ T4498] team0: Port device team_slave_0 added [ 95.204846][ T4498] team0: Port device team_slave_1 added [ 95.219063][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.221018][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.228453][ T4498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.232661][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.234511][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.243298][ T4498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.307111][ T4498] device hsr_slave_0 entered promiscuous mode [ 95.346383][ T4498] device hsr_slave_1 entered promiscuous mode [ 96.091225][ T4498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.136856][ T4498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.208241][ T4498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.229500][ T4498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.357663][ T4498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.370169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.372497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.378273][ T4498] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.382583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.385376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.387853][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.389668][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.392274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.424832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.428700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.432424][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.434428][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.437481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.440322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.443099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.447082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.449788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.452469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.455980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.458553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.461085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.463658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.469059][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.486423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.581858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.584074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.591242][ T4498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.604099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.607045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.642200][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.645629][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.648848][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.651547][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.657774][ T4498] device veth0_vlan entered promiscuous mode [ 96.663453][ T4498] device veth1_vlan entered promiscuous mode [ 96.681777][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.684663][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.689843][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.692998][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.698503][ T4498] device veth0_macvtap entered promiscuous mode [ 96.702409][ T4498] device veth1_macvtap entered promiscuous mode [ 96.714693][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.718166][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.720713][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.723445][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.728599][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.736409][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.741338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.744134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.749810][ T4498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.752227][ T4498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754472][ T4498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.759496][ T4498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.015296][ T378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.017496][ T378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.020331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.038623][ T378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.041152][ T378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.045626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:37 executed programs: 0 [ 97.525608][ T4640] chnl_net:caif_netlink_parms(): no params data found [ 97.592403][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.594480][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.598183][ T4640] device bridge_slave_0 entered promiscuous mode [ 97.601912][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.604021][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.609340][ T4640] device bridge_slave_1 entered promiscuous mode [ 97.643784][ T4640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.650231][ T4640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.669680][ T4640] team0: Port device team_slave_0 added [ 97.672926][ T4640] team0: Port device team_slave_1 added [ 97.685533][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.687566][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.694500][ T4640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.698779][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.700639][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.707610][ T4640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.817034][ T4640] device hsr_slave_0 entered promiscuous mode [ 97.845675][ T4640] device hsr_slave_1 entered promiscuous mode [ 97.905925][ T4640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.908010][ T4640] Cannot create hsr debugfs directory [ 97.987837][ T4640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.485654][ T4056] Bluetooth: hci0: command 0x0409 tx timeout [ 101.293086][ T4640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.565524][ T4163] Bluetooth: hci0: command 0x041b tx timeout [ 102.500548][ T4640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.593868][ T4640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.761720][ T4640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.796952][ T4640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.847412][ T4640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.890283][ T4640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.988924][ T4640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.996966][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.999578][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.004944][ T4640] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.010242][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.013020][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.018328][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.020276][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.022606][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.028977][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.031760][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.034309][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.036297][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.040904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.050018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.053986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.058274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.062215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.067448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.070283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.075895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.078663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.083539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.086546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.091063][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.186834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.188939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.194607][ T4640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.208904][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.211687][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.222124][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.224867][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.228714][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.231396][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.253901][ T4640] device veth0_vlan entered promiscuous mode [ 103.261317][ T4640] device veth1_vlan entered promiscuous mode [ 103.286079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.289203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.291796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.294542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.298626][ T4640] device veth0_macvtap entered promiscuous mode [ 103.303839][ T4640] device veth1_macvtap entered promiscuous mode [ 103.327699][ T4640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.330600][ T4640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.334638][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.339833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.342442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.345480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.348284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.353653][ T4640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.357111][ T4640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.361442][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.363577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.367517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.372358][ T4640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.374773][ T4640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.378018][ T4640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.380377][ T4640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.423742][ T1626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.426294][ T1626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.433179][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.441077][ T1626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.443318][ T1626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.447780][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:43 executed programs: 2 [ 103.595421][ T4894] [ 103.596176][ T4894] ====================================================== [ 103.598009][ T4894] WARNING: possible circular locking dependency detected [ 103.599819][ T4894] 5.15.186-syzkaller #0 Not tainted [ 103.601160][ T4894] ------------------------------------------------------ [ 103.602946][ T4894] syz.0.15/4894 is trying to acquire lock: [ 103.604556][ T4894] ffff0000d42f4170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x250/0x310 [ 103.607441][ T4894] [ 103.607441][ T4894] but task is already holding lock: [ 103.609426][ T4894] ffff0000d42f0bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x150/0x640 [ 103.612459][ T4894] [ 103.612459][ T4894] which lock already depends on the new lock. [ 103.612459][ T4894] [ 103.615197][ T4894] [ 103.615197][ T4894] the existing dependency chain (in reverse order) is: [ 103.617530][ T4894] [ 103.617530][ T4894] -> #4 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 103.619767][ T4894] percpu_down_read+0xe8/0x354 [ 103.621237][ T4894] ext4_writepages+0x184/0x2c14 [ 103.622653][ T4894] do_writepages+0x36c/0x578 [ 103.624051][ T4894] filemap_fdatawrite_wbc+0x1d4/0x234 [ 103.625559][ T4894] filemap_write_and_wait_range+0xe0/0x19c [ 103.627313][ T4894] ext4_change_inode_journal_flag+0x110/0x640 [ 103.629052][ T4894] ext4_fileattr_set+0xb94/0x12e4 [ 103.630482][ T4894] vfs_fileattr_set+0x674/0x8fc [ 103.631923][ T4894] do_vfs_ioctl+0x1c18/0x2370 [ 103.633346][ T4894] __arm64_sys_ioctl+0xe4/0x1c8 [ 103.634737][ T4894] invoke_syscall+0x98/0x2b8 [ 103.636085][ T4894] el0_svc_common+0x138/0x258 [ 103.637642][ T4894] do_el0_svc+0x58/0x14c [ 103.639047][ T4894] el0_svc+0x78/0x1e0 [ 103.640244][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.641753][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.643136][ T4894] [ 103.643136][ T4894] -> #3 (mapping.invalidate_lock){++++}-{3:3}: [ 103.645457][ T4894] down_write+0xbc/0x12c [ 103.646749][ T4894] ext4_setattr+0xa34/0x142c [ 103.648201][ T4894] notify_change+0xa08/0xcd8 [ 103.649615][ T4894] do_truncate+0x178/0x1f0 [ 103.651057][ T4894] do_sys_ftruncate+0x284/0x31c [ 103.652586][ T4894] __arm64_sys_ftruncate+0x60/0x74 [ 103.654199][ T4894] invoke_syscall+0x98/0x2b8 [ 103.655660][ T4894] el0_svc_common+0x138/0x258 [ 103.657055][ T4894] do_el0_svc+0x58/0x14c [ 103.658347][ T4894] el0_svc+0x78/0x1e0 [ 103.659710][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.661278][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.662796][ T4894] [ 103.662796][ T4894] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 103.665205][ T4894] down_read+0xc0/0x390 [ 103.666515][ T4894] ext4_bmap+0x54/0x368 [ 103.667864][ T4894] bmap+0xa8/0xe8 [ 103.669049][ T4894] jbd2_journal_flush+0x5e8/0x9f0 [ 103.670626][ T4894] ext4_ioctl+0x2cb4/0x3614 [ 103.672066][ T4894] __arm64_sys_ioctl+0x14c/0x1c8 [ 103.673616][ T4894] invoke_syscall+0x98/0x2b8 [ 103.675095][ T4894] el0_svc_common+0x138/0x258 [ 103.676566][ T4894] do_el0_svc+0x58/0x14c [ 103.677933][ T4894] el0_svc+0x78/0x1e0 [ 103.679255][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.680794][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.682199][ T4894] [ 103.682199][ T4894] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 103.684650][ T4894] __mutex_lock_common+0x194/0x1edc [ 103.686243][ T4894] mutex_lock_io_nested+0xcc/0x12c [ 103.687813][ T4894] jbd2_journal_flush+0x1e8/0x9f0 [ 103.689370][ T4894] ext4_ioctl+0x2cb4/0x3614 [ 103.690722][ T4894] __arm64_sys_ioctl+0x14c/0x1c8 [ 103.692241][ T4894] invoke_syscall+0x98/0x2b8 [ 103.693636][ T4894] el0_svc_common+0x138/0x258 [ 103.695203][ T4894] do_el0_svc+0x58/0x14c [ 103.696628][ T4894] el0_svc+0x78/0x1e0 [ 103.697948][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.699502][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.700912][ T4894] [ 103.700912][ T4894] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 103.703165][ T4894] __lock_acquire+0x2928/0x651c [ 103.704657][ T4894] lock_acquire+0x1f4/0x620 [ 103.706171][ T4894] __mutex_lock_common+0x194/0x1edc [ 103.707720][ T4894] mutex_lock_nested+0xac/0x11c [ 103.709203][ T4894] jbd2_journal_lock_updates+0x250/0x310 [ 103.711029][ T4894] ext4_change_inode_journal_flag+0x158/0x640 [ 103.712884][ T4894] ext4_fileattr_set+0xb94/0x12e4 [ 103.714446][ T4894] vfs_fileattr_set+0x674/0x8fc [ 103.715890][ T4894] do_vfs_ioctl+0x1c18/0x2370 [ 103.717265][ T4894] __arm64_sys_ioctl+0xe4/0x1c8 [ 103.718797][ T4894] invoke_syscall+0x98/0x2b8 [ 103.720276][ T4894] el0_svc_common+0x138/0x258 [ 103.721725][ T4894] do_el0_svc+0x58/0x14c [ 103.723069][ T4894] el0_svc+0x78/0x1e0 [ 103.724325][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.725961][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.727405][ T4894] [ 103.727405][ T4894] other info that might help us debug this: [ 103.727405][ T4894] [ 103.730252][ T4894] Chain exists of: [ 103.730252][ T4894] &journal->j_barrier --> mapping.invalidate_lock --> &sbi->s_writepages_rwsem [ 103.730252][ T4894] [ 103.734650][ T4894] Possible unsafe locking scenario: [ 103.734650][ T4894] [ 103.736628][ T4894] CPU0 CPU1 [ 103.738196][ T4894] ---- ---- [ 103.739713][ T4894] lock(&sbi->s_writepages_rwsem); [ 103.741296][ T4894] lock(mapping.invalidate_lock); [ 103.743525][ T4894] lock(&sbi->s_writepages_rwsem); [ 103.745662][ T4894] lock(&journal->j_barrier); [ 103.746990][ T4894] [ 103.746990][ T4894] *** DEADLOCK *** [ 103.746990][ T4894] [ 103.749274][ T4894] 4 locks held by syz.0.15/4894: [ 103.750681][ T4894] #0: ffff0000d42ee460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 103.753467][ T4894] #1: ffff0000e1d27198 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x108/0x8fc [ 103.756453][ T4894] #2: ffff0000e1d27338 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0xf0/0x640 [ 103.759897][ T4894] #3: ffff0000d42f0bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x150/0x640 [ 103.763232][ T4894] [ 103.763232][ T4894] stack backtrace: [ 103.764934][ T4894] CPU: 1 PID: 4894 Comm: syz.0.15 Not tainted 5.15.186-syzkaller #0 [ 103.767192][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.770160][ T4894] Call trace: [ 103.771144][ T4894] dump_backtrace+0x0/0x43c [ 103.772377][ T4894] show_stack+0x2c/0x3c [ 103.773645][ T4894] __dump_stack+0x30/0x40 [ 103.774863][ T4894] dump_stack_lvl+0xf8/0x160 [ 103.776125][ T4894] dump_stack+0x1c/0x5c [ 103.777301][ T4894] print_circular_bug+0x148/0x1b0 [ 103.778777][ T4894] check_noncircular+0x240/0x2d4 [ 103.780209][ T4894] __lock_acquire+0x2928/0x651c [ 103.781590][ T4894] lock_acquire+0x1f4/0x620 [ 103.782787][ T4894] __mutex_lock_common+0x194/0x1edc [ 103.784243][ T4894] mutex_lock_nested+0xac/0x11c [ 103.785537][ T4894] jbd2_journal_lock_updates+0x250/0x310 [ 103.787111][ T4894] ext4_change_inode_journal_flag+0x158/0x640 [ 103.788774][ T4894] ext4_fileattr_set+0xb94/0x12e4 [ 103.790192][ T4894] vfs_fileattr_set+0x674/0x8fc [ 103.791521][ T4894] do_vfs_ioctl+0x1c18/0x2370 [ 103.792794][ T4894] __arm64_sys_ioctl+0xe4/0x1c8 [ 103.794194][ T4894] invoke_syscall+0x98/0x2b8 [ 103.795498][ T4894] el0_svc_common+0x138/0x258 [ 103.796876][ T4894] do_el0_svc+0x58/0x14c [ 103.798162][ T4894] el0_svc+0x78/0x1e0 [ 103.799313][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 103.800691][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 103.803627][ T4131] Bluetooth: hci0: command 0x040f tx timeout [ 105.152016][ T148] device hsr_slave_0 left promiscuous mode [ 105.195554][ T148] device hsr_slave_1 left promiscuous mode [ 105.245278][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.247328][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.249687][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.251789][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.254223][ T148] device bridge_slave_1 left promiscuous mode [ 105.255994][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.296932][ T148] device bridge_slave_0 left promiscuous mode [ 105.298715][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.397359][ T148] device veth1_macvtap left promiscuous mode [ 105.399096][ T148] device veth0_macvtap left promiscuous mode [ 105.400726][ T148] device veth1_vlan left promiscuous mode [ 105.402250][ T148] device veth0_vlan left promiscuous mode [ 105.593682][ T148] team0 (unregistering): Port device team_slave_1 removed [ 105.601163][ T148] team0 (unregistering): Port device team_slave_0 removed [ 105.609649][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.672486][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.791868][ T148] bond0 (unregistering): Released all slaves [ 105.885201][ T4130] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:48 executed programs: 85 1970/01/01 00:01:53 executed programs: 188