Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. executing program [ 40.290087][ T4018] loop0: detected capacity change from 0 to 32768 [ 40.361004][ T4018] ======================================================= [ 40.361004][ T4018] WARNING: The mand mount option has been deprecated and [ 40.361004][ T4018] and is ignored by this kernel. Remove the mand [ 40.361004][ T4018] option from the mount to silence this warning. [ 40.361004][ T4018] ======================================================= [ 40.402261][ T4018] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 40.409145][ T4018] FAULT_INJECTION: forcing a failure. [ 40.409145][ T4018] name failslab, interval 1, probability 0, space 0, times 1 [ 40.412937][ T4018] CPU: 1 PID: 4018 Comm: syz-executor283 Not tainted 5.15.167-syzkaller #0 [ 40.415332][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.418123][ T4018] Call trace: [ 40.418925][ T4018] dump_backtrace+0x0/0x530 [ 40.420110][ T4018] show_stack+0x2c/0x3c [ 40.420954][ T4018] dump_stack_lvl+0x108/0x170 [ 40.421826][ T4018] dump_stack+0x1c/0x58 [ 40.422967][ T4018] should_fail+0x3b8/0x514 [ 40.424138][ T4018] __should_failslab+0xbc/0x110 [ 40.425392][ T4018] should_failslab+0x10/0x28 [ 40.426639][ T4018] slab_pre_alloc_hook+0x64/0xe8 [ 40.427935][ T4018] kmem_cache_alloc+0x98/0x45c [ 40.429211][ T4018] jbd2_journal_add_journal_head+0x90/0x63c [ 40.430853][ T4018] jbd2_journal_get_write_access+0x108/0x14c [ 40.432137][ T4018] __ocfs2_journal_access+0x4ac/0x8bc [ 40.433285][ T4018] ocfs2_journal_access_gd+0x44/0x58 [ 40.434620][ T4018] ocfs2_block_group_set_bits+0x220/0x6a0 [ 40.436121][ T4018] ocfs2_search_chain+0x177c/0x22f0 [ 40.437677][ T4018] ocfs2_claim_suballoc_bits+0xd38/0x1d84 [ 40.439177][ T4018] ocfs2_claim_new_inode+0x2cc/0x7a0 [ 40.440673][ T4018] ocfs2_mknod_locked+0x134/0x2e4 [ 40.441956][ T4018] ocfs2_mknod+0x10b0/0x24f8 [ 40.443209][ T4018] ocfs2_mkdir+0x184/0x4c8 [ 40.444304][ T4018] vfs_mkdir+0x334/0x4e4 [ 40.445386][ T4018] do_mkdirat+0x20c/0x610 [ 40.446497][ T4018] __arm64_sys_mkdirat+0x90/0xa8 [ 40.447765][ T4018] invoke_syscall+0x98/0x2b8 [ 40.448957][ T4018] el0_svc_common+0x138/0x258 [ 40.450131][ T4018] do_el0_svc+0x58/0x14c [ 40.451171][ T4018] el0_svc+0x7c/0x1f0 [ 40.452063][ T4018] el0t_64_sync_handler+0x84/0xe4 [ 40.453571][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.455216][ T4018] ENOMEM in journal_alloc_journal_head, retrying. [ 40.460113][ T4018] [ 40.460774][ T4018] ====================================================== [ 40.462461][ T4018] WARNING: possible circular locking dependency detected [ 40.464153][ T4018] 5.15.167-syzkaller #0 Not tainted [ 40.465341][ T4018] ------------------------------------------------------ [ 40.466937][ T4018] syz-executor283/4018 is trying to acquire lock: [ 40.468548][ T4018] ffff0000e24dcda0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 40.471359][ T4018] [ 40.471359][ T4018] but task is already holding lock: [ 40.473135][ T4018] ffff0000e24dce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2f0 [ 40.475842][ T4018] [ 40.475842][ T4018] which lock already depends on the new lock. [ 40.475842][ T4018] [ 40.478455][ T4018] [ 40.478455][ T4018] the existing dependency chain (in reverse order) is: [ 40.480655][ T4018] [ 40.480655][ T4018] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 40.482740][ T4018] down_read+0xc0/0x398 [ 40.484043][ T4018] ocfs2_init_acl+0x2d0/0x778 [ 40.485547][ T4018] ocfs2_mknod+0x1558/0x24f8 [ 40.486872][ T4018] ocfs2_mkdir+0x184/0x4c8 [ 40.488131][ T4018] vfs_mkdir+0x334/0x4e4 [ 40.489717][ T4018] do_mkdirat+0x20c/0x610 [ 40.491143][ T4018] __arm64_sys_mkdirat+0x90/0xa8 [ 40.492584][ T4018] invoke_syscall+0x98/0x2b8 [ 40.493931][ T4018] el0_svc_common+0x138/0x258 [ 40.495190][ T4018] do_el0_svc+0x58/0x14c [ 40.496418][ T4018] el0_svc+0x7c/0x1f0 [ 40.497648][ T4018] el0t_64_sync_handler+0x84/0xe4 [ 40.499080][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.500418][ T4018] [ 40.500418][ T4018] -> #3 (jbd2_handle){.+.+}-{0:0}: [ 40.502335][ T4018] start_this_handle+0xfc0/0x12a4 [ 40.503809][ T4018] jbd2__journal_start+0x29c/0x7b4 [ 40.505234][ T4018] jbd2_journal_start+0x3c/0x4c [ 40.506619][ T4018] ocfs2_start_trans+0x468/0x804 [ 40.507999][ T4018] ocfs2_mknod+0xe68/0x24f8 [ 40.509366][ T4018] ocfs2_mkdir+0x184/0x4c8 [ 40.510730][ T4018] vfs_mkdir+0x334/0x4e4 [ 40.511761][ T4018] do_mkdirat+0x20c/0x610 [ 40.512931][ T4018] __arm64_sys_mkdirat+0x90/0xa8 [ 40.514361][ T4018] invoke_syscall+0x98/0x2b8 [ 40.515725][ T4018] el0_svc_common+0x138/0x258 [ 40.517049][ T4018] do_el0_svc+0x58/0x14c [ 40.518323][ T4018] el0_svc+0x7c/0x1f0 [ 40.519544][ T4018] el0t_64_sync_handler+0x84/0xe4 [ 40.521007][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.522281][ T4018] [ 40.522281][ T4018] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 40.524455][ T4018] down_read+0xc0/0x398 [ 40.525480][ T4018] ocfs2_start_trans+0x45c/0x804 [ 40.526852][ T4018] ocfs2_mknod+0xe68/0x24f8 [ 40.528101][ T4018] ocfs2_mkdir+0x184/0x4c8 [ 40.529342][ T4018] vfs_mkdir+0x334/0x4e4 [ 40.530492][ T4018] do_mkdirat+0x20c/0x610 [ 40.531743][ T4018] __arm64_sys_mkdirat+0x90/0xa8 [ 40.533110][ T4018] invoke_syscall+0x98/0x2b8 [ 40.534464][ T4018] el0_svc_common+0x138/0x258 [ 40.535905][ T4018] do_el0_svc+0x58/0x14c [ 40.537212][ T4018] el0_svc+0x7c/0x1f0 [ 40.538380][ T4018] el0t_64_sync_handler+0x84/0xe4 [ 40.539848][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.541182][ T4018] [ 40.541182][ T4018] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 40.543122][ T4018] ocfs2_start_trans+0x2dc/0x804 [ 40.544562][ T4018] ocfs2_truncate_file+0x5f8/0x14dc [ 40.545913][ T4018] ocfs2_setattr+0x1244/0x191c [ 40.547267][ T4018] notify_change+0xa34/0xcf8 [ 40.548541][ T4018] do_truncate+0x1c0/0x28c [ 40.549867][ T4018] do_coredump+0x23b8/0x2890 [ 40.551134][ T4018] get_signal+0x3dc/0x1550 [ 40.552390][ T4018] do_notify_resume+0x320/0x32b8 [ 40.553867][ T4018] el0_da+0x118/0x20c [ 40.555048][ T4018] el0t_64_sync_handler+0xc0/0xe4 [ 40.556495][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.557845][ T4018] [ 40.557845][ T4018] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 40.559874][ T4018] __lock_acquire+0x32d4/0x7638 [ 40.561282][ T4018] lock_acquire+0x240/0x77c [ 40.562609][ T4018] down_write+0xbc/0x12c [ 40.563880][ T4018] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 40.565618][ T4018] ocfs2_truncate_file+0xd0c/0x14dc [ 40.567046][ T4018] ocfs2_setattr+0x1244/0x191c [ 40.568437][ T4018] notify_change+0xa34/0xcf8 [ 40.569738][ T4018] do_truncate+0x1c0/0x28c [ 40.571014][ T4018] do_coredump+0x23b8/0x2890 [ 40.572266][ T4018] get_signal+0x3dc/0x1550 [ 40.573517][ T4018] do_notify_resume+0x320/0x32b8 [ 40.574872][ T4018] el0_da+0x118/0x20c [ 40.575930][ T4018] el0t_64_sync_handler+0xc0/0xe4 [ 40.577314][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.578549][ T4018] [ 40.578549][ T4018] other info that might help us debug this: [ 40.578549][ T4018] [ 40.581197][ T4018] Chain exists of: [ 40.581197][ T4018] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 40.581197][ T4018] [ 40.584594][ T4018] Possible unsafe locking scenario: [ 40.584594][ T4018] [ 40.586387][ T4018] CPU0 CPU1 [ 40.587853][ T4018] ---- ---- [ 40.589138][ T4018] lock(&oi->ip_xattr_sem); [ 40.590237][ T4018] lock(jbd2_handle); [ 40.591860][ T4018] lock(&oi->ip_xattr_sem); [ 40.593678][ T4018] lock(&oi->ip_alloc_sem); [ 40.594882][ T4018] [ 40.594882][ T4018] *** DEADLOCK *** [ 40.594882][ T4018] [ 40.596919][ T4018] 2 locks held by syz-executor283/4018: [ 40.598268][ T4018] #0: ffff0000e24dd108 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: do_truncate+0x1ac/0x28c [ 40.600954][ T4018] #1: ffff0000e24dce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2f0 [ 40.603825][ T4018] [ 40.603825][ T4018] stack backtrace: [ 40.605384][ T4018] CPU: 1 PID: 4018 Comm: syz-executor283 Not tainted 5.15.167-syzkaller #0 [ 40.607762][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.610317][ T4018] Call trace: [ 40.611140][ T4018] dump_backtrace+0x0/0x530 [ 40.612205][ T4018] show_stack+0x2c/0x3c [ 40.613333][ T4018] dump_stack_lvl+0x108/0x170 [ 40.614619][ T4018] dump_stack+0x1c/0x58 [ 40.615618][ T4018] print_circular_bug+0x150/0x1b8 [ 40.616893][ T4018] check_noncircular+0x2cc/0x378 [ 40.618092][ T4018] __lock_acquire+0x32d4/0x7638 [ 40.619380][ T4018] lock_acquire+0x240/0x77c [ 40.620481][ T4018] down_write+0xbc/0x12c [ 40.621424][ T4018] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 40.622951][ T4018] ocfs2_truncate_file+0xd0c/0x14dc [ 40.624356][ T4018] ocfs2_setattr+0x1244/0x191c [ 40.625549][ T4018] notify_change+0xa34/0xcf8 [ 40.626722][ T4018] do_truncate+0x1c0/0x28c [ 40.627834][ T4018] do_coredump+0x23b8/0x2890 [ 40.629004][ T4018] get_signal+0x3dc/0x1550 [ 40.630160][ T4018] do_notify_resume+0x320/0x32b8 [ 40.631410][ T4018] el0_da+0x118/0x20c [ 40.632334][ T4018] el0t_64_sync_handler+0xc0/0xe4 [ 40.633576][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 40.663928][ T4018] ocfs2: Unmounting device (7,0) on (node local)