Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts.
executing program
[ 36.764056][ T6437] loop0: detected capacity change from 0 to 32768
[ 36.771072][ T6437] (syz-executor253,6437,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 36.776814][ T6437] (syz-executor253,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 36.801359][ T6437] JBD2: Ignoring recovery information on journal
[ 36.815378][ T6437] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 36.824585][ T43] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[ 36.833033][ T6437]
[ 36.833677][ T6437] ======================================================
[ 36.835490][ T6437] WARNING: possible circular locking dependency detected
[ 36.837184][ T6437] 6.14.0-rc3-syzkaller-ge6747d19291c #0 Not tainted
[ 36.838879][ T6437] ------------------------------------------------------
[ 36.840649][ T6437] syz-executor253/6437 is trying to acquire lock:
[ 36.842261][ T6437] ffff0000c2d1a948 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x70/0x164
[ 36.844825][ T6437]
[ 36.844825][ T6437] but task is already holding lock:
[ 36.846703][ T6437] ffff0000d90f20e0 (&type->s_umount_key#46){++++}-{4:4}, at: deactivate_super+0xd8/0x100
[ 36.849276][ T6437]
[ 36.849276][ T6437] which lock already depends on the new lock.
[ 36.849276][ T6437]
[ 36.851902][ T6437]
[ 36.851902][ T6437] the existing dependency chain (in reverse order) is:
[ 36.854309][ T6437]
[ 36.854309][ T6437] -> #2 (&type->s_umount_key#46){++++}-{4:4}:
[ 36.856512][ T6437] down_read+0x58/0x2fc
[ 36.857713][ T6437] ocfs2_finish_quota_recovery+0x198/0x1f94
[ 36.859479][ T6437] ocfs2_complete_recovery+0x1610/0x2368
[ 36.861084][ T6437] process_one_work+0x810/0x1638
[ 36.862485][ T6437] worker_thread+0x97c/0xeec
[ 36.863763][ T6437] kthread+0x65c/0x7b0
[ 36.864924][ T6437] ret_from_fork+0x10/0x20
[ 36.866234][ T6437]
[ 36.866234][ T6437] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}:
[ 36.868973][ T6437] process_one_work+0x730/0x1638
[ 36.870287][ T6437] worker_thread+0x97c/0xeec
[ 36.871714][ T6437] kthread+0x65c/0x7b0
[ 36.872935][ T6437] ret_from_fork+0x10/0x20
[ 36.874194][ T6437]
[ 36.874194][ T6437] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}:
[ 36.876438][ T6437] __lock_acquire+0x34f0/0x7904
[ 36.877900][ T6437] lock_acquire+0x23c/0x724
[ 36.879199][ T6437] touch_wq_lockdep_map+0xa8/0x164
[ 36.880664][ T6437] __flush_workqueue+0x120/0x1234
[ 36.882305][ T6437] ocfs2_shutdown_local_alloc+0x104/0x8d8
[ 36.883956][ T6437] ocfs2_dismount_volume+0x1f4/0x920
[ 36.885480][ T6437] ocfs2_put_super+0xec/0x368
[ 36.886866][ T6437] generic_shutdown_super+0x12c/0x2bc
[ 36.888457][ T6437] kill_block_super+0x44/0x90
[ 36.889838][ T6437] deactivate_locked_super+0xc4/0x12c
[ 36.891378][ T6437] deactivate_super+0xe0/0x100
[ 36.892858][ T6437] cleanup_mnt+0x34c/0x3dc
[ 36.894206][ T6437] __cleanup_mnt+0x20/0x30
[ 36.895609][ T6437] task_work_run+0x230/0x2e0
[ 36.896972][ T6437] do_exit+0x4e8/0x1acc
[ 36.898182][ T6437] do_group_exit+0x194/0x22c
[ 36.899613][ T6437] pid_child_should_wake+0x0/0x1dc
[ 36.901115][ T6437] invoke_syscall+0x98/0x2b8
[ 36.902442][ T6437] el0_svc_common+0x130/0x23c
[ 36.903691][ T6437] do_el0_svc+0x48/0x58
[ 36.904979][ T6437] el0_svc+0x54/0x168
[ 36.906223][ T6437] el0t_64_sync_handler+0x84/0x108
[ 36.907596][ T6437] el0t_64_sync+0x198/0x19c
[ 36.908802][ T6437]
[ 36.908802][ T6437] other info that might help us debug this:
[ 36.908802][ T6437]
[ 36.911351][ T6437] Chain exists of:
[ 36.911351][ T6437] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#46
[ 36.911351][ T6437]
[ 36.915669][ T6437] Possible unsafe locking scenario:
[ 36.915669][ T6437]
[ 36.917695][ T6437] CPU0 CPU1
[ 36.919133][ T6437] ---- ----
[ 36.920689][ T6437] lock(&type->s_umount_key#46);
[ 36.922022][ T6437] lock((work_completion)(&journal->j_recovery_work));
[ 36.924692][ T6437] lock(&type->s_umount_key#46);
[ 36.926636][ T6437] lock((wq_completion)ocfs2_wq);
[ 36.927938][ T6437]
[ 36.927938][ T6437] *** DEADLOCK ***
[ 36.927938][ T6437]
[ 36.930146][ T6437] 1 lock held by syz-executor253/6437:
[ 36.931588][ T6437] #0: ffff0000d90f20e0 (&type->s_umount_key#46){++++}-{4:4}, at: deactivate_super+0xd8/0x100
[ 36.934244][ T6437]
[ 36.934244][ T6437] stack backtrace:
[ 36.935743][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz-executor253 Not tainted 6.14.0-rc3-syzkaller-ge6747d19291c #0
[ 36.935758][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 36.935766][ T6437] Call trace:
[ 36.935769][ T6437] show_stack+0x2c/0x3c (C)
[ 36.935789][ T6437] dump_stack_lvl+0xe4/0x150
[ 36.935803][ T6437] dump_stack+0x1c/0x28
[ 36.935815][ T6437] print_circular_bug+0x154/0x1c0
[ 36.935829][ T6437] check_noncircular+0x310/0x404
[ 36.935840][ T6437] __lock_acquire+0x34f0/0x7904
[ 36.935851][ T6437] lock_acquire+0x23c/0x724
[ 36.935862][ T6437] touch_wq_lockdep_map+0xa8/0x164
[ 36.935873][ T6437] __flush_workqueue+0x120/0x1234
[ 36.935884][ T6437] ocfs2_shutdown_local_alloc+0x104/0x8d8
[ 36.935898][ T6437] ocfs2_dismount_volume+0x1f4/0x920
[ 36.935909][ T6437] ocfs2_put_super+0xec/0x368
[ 36.935919][ T6437] generic_shutdown_super+0x12c/0x2bc
[ 36.935932][ T6437] kill_block_super+0x44/0x90
[ 36.935945][ T6437] deactivate_locked_super+0xc4/0x12c
[ 36.935958][ T6437] deactivate_super+0xe0/0x100
[ 36.935970][ T6437] cleanup_mnt+0x34c/0x3dc
[ 36.935984][ T6437] __cleanup_mnt+0x20/0x30
[ 36.935996][ T6437] task_work_run+0x230/0x2e0
[ 36.936009][ T6437] do_exit+0x4e8/0x1acc
[ 36.936019][ T6437] do_group_exit+0x194/0x22c
[ 36.936030][ T6437] pid_child_should_wake+0x0/0x1dc
[ 36.936040][ T6437] invoke_syscall+0x98/0x2b8
[ 36.936053][ T6437] el0_svc_common+0x130/0x23c
[ 36.936065][ T6437] do_el0_svc+0x48/0x58
[ 36.936077][ T6437] el0_svc+0x54/0x168
[ 36.936088][ T6437] el0t_64_sync_handler+0x84/0x108
[ 36.936098][ T6437] el0t_64_sync+0x198/0x19c