Warning: Permanently added '[localhost]:60204' (ED25519) to the list of known hosts. executing program syzkaller login: [ 86.689021][ T5309] loop0: detected capacity change from 0 to 32768 [ 86.716417][ T5309] ======================================================= [ 86.716417][ T5309] WARNING: The mand mount option has been deprecated and [ 86.716417][ T5309] and is ignored by this kernel. Remove the mand [ 86.716417][ T5309] option from the mount to silence this warning. [ 86.716417][ T5309] ======================================================= [ 86.813468][ T5309] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 86.840524][ T5309] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 86.869547][ T5309] [ 86.871095][ T5309] ====================================================== [ 86.874886][ T5309] WARNING: possible circular locking dependency detected [ 86.877904][ T5309] 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 Not tainted [ 86.882087][ T5309] ------------------------------------------------------ [ 86.885534][ T5309] syz-executor277/5309 is trying to acquire lock: [ 86.889283][ T5309] ffff88804568bf60 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 86.894290][ T5309] [ 86.894290][ T5309] but task is already holding lock: [ 86.897557][ T5309] ffff88804568bff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 86.902987][ T5309] [ 86.902987][ T5309] which lock already depends on the new lock. [ 86.902987][ T5309] [ 86.908396][ T5309] [ 86.908396][ T5309] the existing dependency chain (in reverse order) is: [ 86.912321][ T5309] [ 86.912321][ T5309] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 86.915764][ T5309] lock_acquire+0x120/0x360 [ 86.918594][ T5309] down_read+0x46/0x2e0 [ 86.921129][ T5309] ocfs2_init_acl+0x2f9/0x720 [ 86.923650][ T5309] ocfs2_mknod+0x1321/0x2050 [ 86.926003][ T5309] ocfs2_create+0x1a5/0x440 [ 86.928445][ T5309] path_openat+0x14f4/0x3830 [ 86.930945][ T5309] do_filp_open+0x1fa/0x410 [ 86.933811][ T5309] do_sys_openat2+0x121/0x1c0 [ 86.936450][ T5309] __x64_sys_creat+0x8f/0xc0 [ 86.938722][ T5309] do_syscall_64+0xfa/0x3b0 [ 86.941181][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.944727][ T5309] [ 86.944727][ T5309] -> #3 (jbd2_handle){++++}-{0:0}: [ 86.948244][ T5309] lock_acquire+0x120/0x360 [ 86.950236][ T5309] start_this_handle+0x1fa7/0x21c0 [ 86.952496][ T5309] jbd2__journal_start+0x2c1/0x5b0 [ 86.954683][ T5309] jbd2_journal_start+0x2a/0x40 [ 86.957110][ T5309] ocfs2_start_trans+0x376/0x6d0 [ 86.959890][ T5309] ocfs2_mknod+0xe93/0x2050 [ 86.962030][ T5309] ocfs2_create+0x1a5/0x440 [ 86.964289][ T5309] path_openat+0x14f4/0x3830 [ 86.966617][ T5309] do_filp_open+0x1fa/0x410 [ 86.968935][ T5309] do_sys_openat2+0x121/0x1c0 [ 86.971395][ T5309] __x64_sys_creat+0x8f/0xc0 [ 86.974214][ T5309] do_syscall_64+0xfa/0x3b0 [ 86.976631][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.979529][ T5309] [ 86.979529][ T5309] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 86.983232][ T5309] lock_acquire+0x120/0x360 [ 86.985579][ T5309] down_read+0x46/0x2e0 [ 86.988576][ T5309] ocfs2_start_trans+0x36a/0x6d0 [ 86.991844][ T5309] ocfs2_mknod+0xe93/0x2050 [ 86.994609][ T5309] ocfs2_create+0x1a5/0x440 [ 86.997440][ T5309] path_openat+0x14f4/0x3830 [ 87.000039][ T5309] do_filp_open+0x1fa/0x410 [ 87.002857][ T5309] do_sys_openat2+0x121/0x1c0 [ 87.005929][ T5309] __x64_sys_creat+0x8f/0xc0 [ 87.008907][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.011239][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.014215][ T5309] [ 87.014215][ T5309] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 87.017724][ T5309] lock_acquire+0x120/0x360 [ 87.020632][ T5309] ocfs2_start_trans+0x26b/0x6d0 [ 87.023291][ T5309] ocfs2_truncate_file+0x643/0x1420 [ 87.025617][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 87.027919][ T5309] notify_change+0xb36/0xe40 [ 87.030415][ T5309] do_truncate+0x1a4/0x220 [ 87.032843][ T5309] path_openat+0x306c/0x3830 [ 87.035578][ T5309] do_filp_open+0x1fa/0x410 [ 87.037991][ T5309] do_sys_openat2+0x121/0x1c0 [ 87.040380][ T5309] __x64_sys_open+0x11e/0x150 [ 87.042697][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.044886][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.048087][ T5309] [ 87.048087][ T5309] -> #0 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 87.052209][ T5309] validate_chain+0xb9b/0x2140 [ 87.054682][ T5309] __lock_acquire+0xab9/0xd20 [ 87.056979][ T5309] lock_acquire+0x120/0x360 [ 87.059322][ T5309] down_write+0x96/0x1f0 [ 87.061765][ T5309] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 87.065359][ T5309] ocfs2_truncate_file+0xda0/0x1420 [ 87.068155][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 87.070892][ T5309] notify_change+0xb36/0xe40 [ 87.073167][ T5309] do_truncate+0x1a4/0x220 [ 87.075532][ T5309] path_openat+0x306c/0x3830 [ 87.078170][ T5309] do_filp_open+0x1fa/0x410 [ 87.081102][ T5309] do_sys_openat2+0x121/0x1c0 [ 87.083862][ T5309] __x64_sys_open+0x11e/0x150 [ 87.086260][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.088535][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.091471][ T5309] [ 87.091471][ T5309] other info that might help us debug this: [ 87.091471][ T5309] [ 87.096849][ T5309] Chain exists of: [ 87.096849][ T5309] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 87.096849][ T5309] [ 87.103111][ T5309] Possible unsafe locking scenario: [ 87.103111][ T5309] [ 87.106836][ T5309] CPU0 CPU1 [ 87.109704][ T5309] ---- ---- [ 87.112244][ T5309] lock(&oi->ip_xattr_sem); [ 87.114424][ T5309] lock(jbd2_handle); [ 87.117318][ T5309] lock(&oi->ip_xattr_sem); [ 87.120770][ T5309] lock(&oi->ip_alloc_sem); [ 87.123020][ T5309] [ 87.123020][ T5309] *** DEADLOCK *** [ 87.123020][ T5309] [ 87.126637][ T5309] 3 locks held by syz-executor277/5309: [ 87.129005][ T5309] #0: ffff888031376428 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 87.133256][ T5309] #1: ffff88804568c2c0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 87.138096][ T5309] #2: ffff88804568bff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 87.142893][ T5309] [ 87.142893][ T5309] stack backtrace: [ 87.145898][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor277 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 87.145916][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.145925][ T5309] Call Trace: [ 87.145934][ T5309] [ 87.145940][ T5309] dump_stack_lvl+0x189/0x250 [ 87.145965][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.145979][ T5309] ? __pfx__printk+0x10/0x10 [ 87.145988][ T5309] ? print_lock_name+0xde/0x100 [ 87.145996][ T5309] print_circular_bug+0x2ee/0x310 [ 87.146006][ T5309] check_noncircular+0x134/0x160 [ 87.146014][ T5309] validate_chain+0xb9b/0x2140 [ 87.146027][ T5309] __lock_acquire+0xab9/0xd20 [ 87.146052][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 87.146068][ T5309] lock_acquire+0x120/0x360 [ 87.146083][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 87.146102][ T5309] down_write+0x96/0x1f0 [ 87.146117][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 87.146132][ T5309] ? __pfx_down_write+0x10/0x10 [ 87.146145][ T5309] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 87.146160][ T5309] ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10 [ 87.146176][ T5309] ? up_write+0x1c4/0x420 [ 87.146189][ T5309] ocfs2_truncate_file+0xda0/0x1420 [ 87.146212][ T5309] ? __pfx_ocfs2_truncate_file+0x10/0x10 [ 87.146227][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 87.146239][ T5309] ? _raw_spin_unlock+0x28/0x50 [ 87.146254][ T5309] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 87.146270][ T5309] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 87.146282][ T5309] ? ocfs2_rw_lock+0x13a/0x240 [ 87.146294][ T5309] ? __pfx___dquot_initialize+0x10/0x10 [ 87.146308][ T5309] ? __pfx_ocfs2_rw_lock+0x10/0x10 [ 87.146320][ T5309] ? setattr_prepare+0x1e7/0xac0 [ 87.146339][ T5309] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 87.146359][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 87.146373][ T5309] ? __pfx_ocfs2_setattr+0x10/0x10 [ 87.146383][ T5309] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 87.146397][ T5309] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 87.146414][ T5309] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 87.146430][ T5309] ? current_time+0x222/0x370 [ 87.146444][ T5309] ? evm_inode_setattr+0x1b6/0x7d0 [ 87.146461][ T5309] ? __pfx_current_time+0x10/0x10 [ 87.146476][ T5309] ? try_break_deleg+0x79/0x130 [ 87.146492][ T5309] ? __pfx_ocfs2_setattr+0x10/0x10 [ 87.146503][ T5309] notify_change+0xb36/0xe40 [ 87.146522][ T5309] do_truncate+0x1a4/0x220 [ 87.146533][ T5309] ? __pfx_do_truncate+0x10/0x10 [ 87.146543][ T5309] ? apparmor_file_truncate+0x23e/0x2d0 [ 87.146562][ T5309] path_openat+0x306c/0x3830 [ 87.146579][ T5309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.146602][ T5309] ? __pfx_path_openat+0x10/0x10 [ 87.146617][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.146634][ T5309] do_filp_open+0x1fa/0x410 [ 87.146653][ T5309] ? __lock_acquire+0xab9/0xd20 [ 87.146670][ T5309] ? __pfx_do_filp_open+0x10/0x10 [ 87.146693][ T5309] ? _raw_spin_unlock+0x28/0x50 [ 87.146708][ T5309] ? alloc_fd+0x64c/0x6c0 [ 87.146722][ T5309] do_sys_openat2+0x121/0x1c0 [ 87.146775][ T5309] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.146792][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.146811][ T5309] __x64_sys_open+0x11e/0x150 [ 87.146828][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.146840][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.146857][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.146868][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 87.146881][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.146893][ T5309] RIP: 0033:0x7f92197d8ad9 [ 87.146907][ T5309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.146917][ T5309] RSP: 002b:00007fff68274b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.146930][ T5309] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92197d8ad9 [ 87.146938][ T5309] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000180 [ 87.146946][ T5309] RBP: 00007f92198505f0 R08: 000055556b4064c0 R09: 000055556b4064c0 [ 87.146953][ T5309] R10: 000000000000443e R11: 0000000000000246 R12: 00007fff68274b90 [ 87.146961][ T5309] R13: 00007fff68274db8 R14: 431bde82d7b634db R15: 00007f921982103b [ 87.146973][ T5309] executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 92.068600][ T10] cfg80211: failed to load regulatory.db executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 04:35:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d1be850 R8 =ffff8880339b8237 R9 =1ffff11006737046 R10=dffffc0000000000 R11=ffffffff85470f70 R12=dffffc0000000000 R13=ffffffff99ac38da R14=ffffffff99dc8780 R15=0000000000000000 RIP=ffffffff85470fec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556b405380 ffffffff 00c00000 GS =0000 ffff88808d252000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd6ab909c0 CR3=0000000043c4d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000020 Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b88f6b437308f8cd 8cb8014486dfa930 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6b3bd64e92d8748 bc290ce403dc4dc7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000057cb008ad7cb 000053b421be53b4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000119700289197 000010dbf52610db ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7007a08f9f97581 7aa0e4d35e840758 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b939650e94a8dd2b 8cb8014486dfa930 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7007a08f9f97581 7aa0e4d35e840758 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b939650e94a8dd2b 8cb8014486dfa930 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3274bb7e944ebd9e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7faade0053a28122 31086e2f179ea92a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0b0a090803020100 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a9f9cb219fe45e 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b0a090803020100 ffffffffffffffff ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000327366636f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f722d746e756f6d 65723d73726f7272 652c736b636f6c66 6c61636f6c2c6c6c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49e7f85bc8be8cca df9a7fde0d1a8979 e3d298b643218504 b5a9002c6c63612c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000