Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. executing program [ 36.470125][ T6469] loop0: detected capacity change from 0 to 32768 [ 36.473711][ T6469] ======================================================= [ 36.473711][ T6469] WARNING: The mand mount option has been deprecated and [ 36.473711][ T6469] and is ignored by this kernel. Remove the mand [ 36.473711][ T6469] option from the mount to silence this warning. [ 36.473711][ T6469] ======================================================= [ 36.516633][ T6469] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 36.527673][ T6469] [ 36.528288][ T6469] ====================================================== [ 36.530094][ T6469] WARNING: possible circular locking dependency detected [ 36.531978][ T6469] 6.14.0-rc7-syzkaller-ga2392f333575 #0 Not tainted [ 36.533676][ T6469] ------------------------------------------------------ [ 36.535624][ T6469] syz-executor288/6469 is trying to acquire lock: [ 36.537410][ T6469] ffff0000dee706f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2c8/0x764 [ 36.539902][ T6469] [ 36.539902][ T6469] but task is already holding lock: [ 36.541834][ T6469] ffff0000c7208950 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0xf0c/0x11c4 [ 36.544344][ T6469] [ 36.544344][ T6469] which lock already depends on the new lock. [ 36.544344][ T6469] [ 36.547175][ T6469] [ 36.547175][ T6469] the existing dependency chain (in reverse order) is: [ 36.549707][ T6469] [ 36.549707][ T6469] -> #5 (jbd2_handle){.+.+}-{0:0}: [ 36.551651][ T6469] start_this_handle+0xf34/0x11c4 [ 36.553131][ T6469] jbd2__journal_start+0x298/0x544 [ 36.554690][ T6469] jbd2_journal_start+0x3c/0x4c [ 36.556095][ T6469] ocfs2_start_trans+0x3d0/0x71c [ 36.557561][ T6469] ocfs2_reserve_suballoc_bits+0x840/0x4254 [ 36.559283][ T6469] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 36.561137][ T6469] ocfs2_init_xattr_set_ctxt+0x3b8/0x978 [ 36.562846][ T6469] ocfs2_xattr_set+0xbe0/0x1448 [ 36.564312][ T6469] ocfs2_set_acl+0x410/0x4b4 [ 36.565711][ T6469] ocfs2_iop_set_acl+0x230/0x374 [ 36.567156][ T6469] vfs_set_acl+0x7a0/0xa24 [ 36.568544][ T6469] do_set_acl+0xe4/0x1ac [ 36.569856][ T6469] filename_setxattr+0x2e4/0x3fc [ 36.571312][ T6469] path_setxattrat+0x370/0x41c [ 36.572740][ T6469] __arm64_sys_lsetxattr+0xc0/0xdc [ 36.574212][ T6469] invoke_syscall+0x98/0x2b8 [ 36.575569][ T6469] el0_svc_common+0x130/0x23c [ 36.576978][ T6469] do_el0_svc+0x48/0x58 [ 36.578179][ T6469] el0_svc+0x54/0x168 [ 36.579463][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.580945][ T6469] el0t_64_sync+0x198/0x19c [ 36.582261][ T6469] [ 36.582261][ T6469] -> #4 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 36.584635][ T6469] down_read+0x58/0x2fc [ 36.585888][ T6469] ocfs2_start_trans+0x3c4/0x71c [ 36.587399][ T6469] ocfs2_reserve_suballoc_bits+0x840/0x4254 [ 36.589126][ T6469] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 36.590973][ T6469] ocfs2_init_xattr_set_ctxt+0x3b8/0x978 [ 36.592620][ T6469] ocfs2_xattr_set+0xbe0/0x1448 [ 36.594143][ T6469] ocfs2_set_acl+0x410/0x4b4 [ 36.595541][ T6469] ocfs2_iop_set_acl+0x230/0x374 [ 36.597009][ T6469] vfs_set_acl+0x7a0/0xa24 [ 36.598384][ T6469] do_set_acl+0xe4/0x1ac [ 36.599692][ T6469] filename_setxattr+0x2e4/0x3fc [ 36.601157][ T6469] path_setxattrat+0x370/0x41c [ 36.602649][ T6469] __arm64_sys_lsetxattr+0xc0/0xdc [ 36.604195][ T6469] invoke_syscall+0x98/0x2b8 [ 36.605596][ T6469] el0_svc_common+0x130/0x23c [ 36.607003][ T6469] do_el0_svc+0x48/0x58 [ 36.608264][ T6469] el0_svc+0x54/0x168 [ 36.609483][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.610984][ T6469] el0t_64_sync+0x198/0x19c [ 36.612349][ T6469] [ 36.612349][ T6469] -> #3 (sb_internal#2){.+.+}-{0:0}: [ 36.614398][ T6469] ocfs2_start_trans+0x244/0x71c [ 36.615882][ T6469] ocfs2_reserve_suballoc_bits+0x840/0x4254 [ 36.617642][ T6469] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 36.619496][ T6469] ocfs2_init_xattr_set_ctxt+0x3b8/0x978 [ 36.621167][ T6469] ocfs2_xattr_set+0xbe0/0x1448 [ 36.622663][ T6469] ocfs2_set_acl+0x410/0x4b4 [ 36.624034][ T6469] ocfs2_iop_set_acl+0x230/0x374 [ 36.625511][ T6469] vfs_set_acl+0x7a0/0xa24 [ 36.626856][ T6469] do_set_acl+0xe4/0x1ac [ 36.628112][ T6469] filename_setxattr+0x2e4/0x3fc [ 36.629639][ T6469] path_setxattrat+0x370/0x41c [ 36.631041][ T6469] __arm64_sys_lsetxattr+0xc0/0xdc [ 36.632565][ T6469] invoke_syscall+0x98/0x2b8 [ 36.633948][ T6469] el0_svc_common+0x130/0x23c [ 36.635373][ T6469] do_el0_svc+0x48/0x58 [ 36.636628][ T6469] el0_svc+0x54/0x168 [ 36.637877][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.639401][ T6469] el0t_64_sync+0x198/0x19c [ 36.640761][ T6469] [ 36.640761][ T6469] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}: [ 36.643629][ T6469] down_write+0x50/0xc0 [ 36.644852][ T6469] ocfs2_reserve_suballoc_bits+0x164/0x4254 [ 36.646554][ T6469] ocfs2_reserve_clusters_with_limit+0x2ac/0xabc [ 36.648343][ T6469] ocfs2_reserve_suballoc_bits+0x820/0x4254 [ 36.650177][ T6469] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 36.652275][ T6469] ocfs2_init_xattr_set_ctxt+0x3b8/0x978 [ 36.654098][ T6469] ocfs2_xattr_set+0xbe0/0x1448 [ 36.655632][ T6469] ocfs2_set_acl+0x410/0x4b4 [ 36.657062][ T6469] ocfs2_iop_set_acl+0x230/0x374 [ 36.658587][ T6469] vfs_set_acl+0x7a0/0xa24 [ 36.659963][ T6469] do_set_acl+0xe4/0x1ac [ 36.661310][ T6469] filename_setxattr+0x2e4/0x3fc [ 36.662839][ T6469] path_setxattrat+0x370/0x41c [ 36.664310][ T6469] __arm64_sys_lsetxattr+0xc0/0xdc [ 36.665908][ T6469] invoke_syscall+0x98/0x2b8 [ 36.667380][ T6469] el0_svc_common+0x130/0x23c [ 36.668917][ T6469] do_el0_svc+0x48/0x58 [ 36.670221][ T6469] el0_svc+0x54/0x168 [ 36.671472][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.673021][ T6469] el0t_64_sync+0x198/0x19c [ 36.674405][ T6469] [ 36.674405][ T6469] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}: [ 36.677286][ T6469] down_write+0x50/0xc0 [ 36.678609][ T6469] ocfs2_reserve_suballoc_bits+0x164/0x4254 [ 36.680370][ T6469] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 36.682252][ T6469] ocfs2_init_xattr_set_ctxt+0x3b8/0x978 [ 36.683987][ T6469] ocfs2_xattr_set+0xbe0/0x1448 [ 36.685484][ T6469] ocfs2_set_acl+0x410/0x4b4 [ 36.686910][ T6469] ocfs2_iop_set_acl+0x230/0x374 [ 36.688413][ T6469] vfs_set_acl+0x7a0/0xa24 [ 36.689765][ T6469] do_set_acl+0xe4/0x1ac [ 36.691125][ T6469] filename_setxattr+0x2e4/0x3fc [ 36.692649][ T6469] path_setxattrat+0x370/0x41c [ 36.694090][ T6469] __arm64_sys_lsetxattr+0xc0/0xdc [ 36.695701][ T6469] invoke_syscall+0x98/0x2b8 [ 36.697091][ T6469] el0_svc_common+0x130/0x23c [ 36.698546][ T6469] do_el0_svc+0x48/0x58 [ 36.699782][ T6469] el0_svc+0x54/0x168 [ 36.701036][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.702624][ T6469] el0t_64_sync+0x198/0x19c [ 36.704049][ T6469] [ 36.704049][ T6469] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 36.706146][ T6469] __lock_acquire+0x34f0/0x7904 [ 36.707624][ T6469] lock_acquire+0x23c/0x724 [ 36.709044][ T6469] down_read+0x58/0x2fc [ 36.710318][ T6469] ocfs2_init_acl+0x2c8/0x764 [ 36.711819][ T6469] ocfs2_mknod+0x1388/0x2438 [ 36.713281][ T6469] ocfs2_mkdir+0x194/0x4d4 [ 36.714756][ T6469] vfs_mkdir+0x27c/0x410 [ 36.716148][ T6469] do_mkdirat+0x250/0x584 [ 36.717560][ T6469] __arm64_sys_mkdirat+0x8c/0xa4 [ 36.719059][ T6469] invoke_syscall+0x98/0x2b8 [ 36.720493][ T6469] el0_svc_common+0x130/0x23c [ 36.721974][ T6469] do_el0_svc+0x48/0x58 [ 36.723301][ T6469] el0_svc+0x54/0x168 [ 36.724522][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.726123][ T6469] el0t_64_sync+0x198/0x19c [ 36.727497][ T6469] [ 36.727497][ T6469] other info that might help us debug this: [ 36.727497][ T6469] [ 36.730413][ T6469] Chain exists of: [ 36.730413][ T6469] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 36.730413][ T6469] [ 36.734259][ T6469] Possible unsafe locking scenario: [ 36.734259][ T6469] [ 36.736348][ T6469] CPU0 CPU1 [ 36.737883][ T6469] ---- ---- [ 36.739452][ T6469] rlock(jbd2_handle); [ 36.740626][ T6469] lock(&journal->j_trans_barrier); [ 36.742863][ T6469] lock(jbd2_handle); [ 36.744730][ T6469] rlock(&oi->ip_xattr_sem); [ 36.746024][ T6469] [ 36.746024][ T6469] *** DEADLOCK *** [ 36.746024][ T6469] [ 36.748287][ T6469] 8 locks held by syz-executor288/6469: [ 36.749829][ T6469] #0: ffff0000c75e2420 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 36.752392][ T6469] #1: ffff0000dee709c0 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_create+0x204/0x468 [ 36.755435][ T6469] #2: ffff0000deff09c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x164/0x4254 [ 36.759309][ T6469] #3: ffff0000dee76d80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x164/0x4254 [ 36.763278][ T6469] #4: ffff0000deff2640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x108/0x24f8 [ 36.767102][ T6469] #5: ffff0000c75e2610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe58/0x2438 [ 36.769700][ T6469] #6: ffff0000d6ac7ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3c4/0x71c [ 36.772739][ T6469] #7: ffff0000c7208950 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0xf0c/0x11c4 [ 36.775363][ T6469] [ 36.775363][ T6469] stack backtrace: [ 36.777067][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz-executor288 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0 [ 36.777081][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.777088][ T6469] Call trace: [ 36.777092][ T6469] show_stack+0x2c/0x3c (C) [ 36.777111][ T6469] dump_stack_lvl+0xe4/0x150 [ 36.777123][ T6469] dump_stack+0x1c/0x28 [ 36.777135][ T6469] print_circular_bug+0x154/0x1c0 [ 36.777150][ T6469] check_noncircular+0x310/0x404 [ 36.777163][ T6469] __lock_acquire+0x34f0/0x7904 [ 36.777175][ T6469] lock_acquire+0x23c/0x724 [ 36.777187][ T6469] down_read+0x58/0x2fc [ 36.777198][ T6469] ocfs2_init_acl+0x2c8/0x764 [ 36.777212][ T6469] ocfs2_mknod+0x1388/0x2438 [ 36.777222][ T6469] ocfs2_mkdir+0x194/0x4d4 [ 36.777232][ T6469] vfs_mkdir+0x27c/0x410 [ 36.777243][ T6469] do_mkdirat+0x250/0x584 [ 36.777253][ T6469] __arm64_sys_mkdirat+0x8c/0xa4 [ 36.777263][ T6469] invoke_syscall+0x98/0x2b8 [ 36.777274][ T6469] el0_svc_common+0x130/0x23c [ 36.777284][ T6469] do_el0_svc+0x48/0x58 [ 36.777293][ T6469] el0_svc+0x54/0x168 [ 36.777305][ T6469] el0t_64_sync_handler+0x84/0x108 [ 36.777316][ T6469] el0t_64_sync+0x198/0x19c