Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. executing program [ 36.800477][ T4290] loop0: detected capacity change from 0 to 32768 [ 36.804548][ T4290] ======================================================= [ 36.804548][ T4290] WARNING: The mand mount option has been deprecated and [ 36.804548][ T4290] and is ignored by this kernel. Remove the mand [ 36.804548][ T4290] option from the mount to silence this warning. [ 36.804548][ T4290] ======================================================= [ 36.823863][ T4290] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 36.836727][ T4290] [ 36.837302][ T4290] ====================================================== [ 36.838723][ T4290] WARNING: possible circular locking dependency detected [ 36.840113][ T4290] 6.1.114-syzkaller #0 Not tainted [ 36.841107][ T4290] ------------------------------------------------------ [ 36.842476][ T4290] syz-executor605/4290 is trying to acquire lock: [ 36.843909][ T4290] ffff0000d5f28650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xb14/0x1b3c [ 36.845707][ T4290] [ 36.845707][ T4290] but task is already holding lock: [ 36.847376][ T4290] ffff0000e221ea20 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xb08/0x1b3c [ 36.849388][ T4290] [ 36.849388][ T4290] which lock already depends on the new lock. [ 36.849388][ T4290] [ 36.851634][ T4290] [ 36.851634][ T4290] the existing dependency chain (in reverse order) is: [ 36.853523][ T4290] [ 36.853523][ T4290] -> #4 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 36.855146][ T4290] down_write+0x5c/0x88 [ 36.856124][ T4290] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 36.857582][ T4290] ocfs2_xattr_set+0x7b8/0x1478 [ 36.858651][ T4290] ocfs2_set_acl+0x410/0x4b4 [ 36.859690][ T4290] ocfs2_iop_set_acl+0x214/0x358 [ 36.860930][ T4290] posix_acl_xattr_set+0x2f8/0x398 [ 36.862075][ T4290] __vfs_removexattr+0x370/0x38c [ 36.863208][ T4290] __vfs_removexattr_locked+0x1d8/0x380 [ 36.864507][ T4290] vfs_removexattr+0xe0/0x23c [ 36.865582][ T4290] ovl_workdir_create+0x400/0x7c8 [ 36.866711][ T4290] ovl_get_workdir+0x354/0x13d4 [ 36.867878][ T4290] ovl_fill_super+0x15b4/0x2254 [ 36.869044][ T4290] mount_nodev+0x68/0x104 [ 36.870102][ T4290] ovl_mount+0x3c/0x50 [ 36.871069][ T4290] legacy_get_tree+0xd4/0x16c [ 36.872172][ T4290] vfs_get_tree+0x90/0x274 [ 36.873232][ T4290] do_new_mount+0x278/0x8fc [ 36.874253][ T4290] path_mount+0x590/0xe5c [ 36.875311][ T4290] __arm64_sys_mount+0x45c/0x594 [ 36.876443][ T4290] invoke_syscall+0x98/0x2c0 [ 36.877498][ T4290] el0_svc_common+0x138/0x258 [ 36.878598][ T4290] do_el0_svc+0x64/0x218 [ 36.879651][ T4290] el0_svc+0x58/0x168 [ 36.880634][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.881831][ T4290] el0t_64_sync+0x18c/0x190 [ 36.882932][ T4290] [ 36.882932][ T4290] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 36.884721][ T4290] down_read+0x64/0x308 [ 36.885665][ T4290] ocfs2_init_acl+0x2c8/0x764 [ 36.886793][ T4290] ocfs2_mknod+0x1574/0x2560 [ 36.887926][ T4290] ocfs2_mkdir+0x1a8/0x560 [ 36.888973][ T4290] vfs_mkdir+0x334/0x4e4 [ 36.890024][ T4290] do_mkdirat+0x220/0x510 [ 36.891146][ T4290] __arm64_sys_mkdirat+0x90/0xa8 [ 36.892352][ T4290] invoke_syscall+0x98/0x2c0 [ 36.893497][ T4290] el0_svc_common+0x138/0x258 [ 36.894666][ T4290] do_el0_svc+0x64/0x218 [ 36.895713][ T4290] el0_svc+0x58/0x168 [ 36.896686][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.897885][ T4290] el0t_64_sync+0x18c/0x190 [ 36.899031][ T4290] [ 36.899031][ T4290] -> #2 (jbd2_handle){.+.+}-{0:0}: [ 36.900624][ T4290] start_this_handle+0x1140/0x13ac [ 36.901928][ T4290] jbd2__journal_start+0x298/0x544 [ 36.903160][ T4290] jbd2_journal_start+0x3c/0x4c [ 36.904263][ T4290] ocfs2_start_trans+0x3e8/0x73c [ 36.905446][ T4290] ocfs2_mknod+0xe64/0x2560 [ 36.906548][ T4290] ocfs2_mkdir+0x1a8/0x560 [ 36.907588][ T4290] vfs_mkdir+0x334/0x4e4 [ 36.908599][ T4290] do_mkdirat+0x220/0x510 [ 36.909671][ T4290] __arm64_sys_mkdirat+0x90/0xa8 [ 36.910872][ T4290] invoke_syscall+0x98/0x2c0 [ 36.911954][ T4290] el0_svc_common+0x138/0x258 [ 36.913099][ T4290] do_el0_svc+0x64/0x218 [ 36.914130][ T4290] el0_svc+0x58/0x168 [ 36.915138][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.916356][ T4290] el0t_64_sync+0x18c/0x190 [ 36.917452][ T4290] [ 36.917452][ T4290] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 36.919204][ T4290] down_read+0x64/0x308 [ 36.920213][ T4290] ocfs2_start_trans+0x3dc/0x73c [ 36.921352][ T4290] ocfs2_mknod+0xe64/0x2560 [ 36.922449][ T4290] ocfs2_mkdir+0x1a8/0x560 [ 36.923530][ T4290] vfs_mkdir+0x334/0x4e4 [ 36.924561][ T4290] do_mkdirat+0x220/0x510 [ 36.925584][ T4290] __arm64_sys_mkdirat+0x90/0xa8 [ 36.926796][ T4290] invoke_syscall+0x98/0x2c0 [ 36.927897][ T4290] el0_svc_common+0x138/0x258 [ 36.929039][ T4290] do_el0_svc+0x64/0x218 [ 36.930072][ T4290] el0_svc+0x58/0x168 [ 36.930978][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.932174][ T4290] el0t_64_sync+0x18c/0x190 [ 36.933262][ T4290] [ 36.933262][ T4290] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 36.934923][ T4290] __lock_acquire+0x3338/0x7680 [ 36.936145][ T4290] lock_acquire+0x26c/0x7cc [ 36.937179][ T4290] ocfs2_start_trans+0x260/0x73c [ 36.938381][ T4290] ocfs2_setattr+0xb14/0x1b3c [ 36.939452][ T4290] notify_change+0xb58/0xe1c [ 36.940513][ T4290] ovl_workdir_create+0x5d0/0x7c8 [ 36.941742][ T4290] ovl_get_workdir+0x354/0x13d4 [ 36.942888][ T4290] ovl_fill_super+0x15b4/0x2254 [ 36.944094][ T4290] mount_nodev+0x68/0x104 [ 36.945190][ T4290] ovl_mount+0x3c/0x50 [ 36.946226][ T4290] legacy_get_tree+0xd4/0x16c [ 36.947365][ T4290] vfs_get_tree+0x90/0x274 [ 36.948423][ T4290] do_new_mount+0x278/0x8fc [ 36.949515][ T4290] path_mount+0x590/0xe5c [ 36.950571][ T4290] __arm64_sys_mount+0x45c/0x594 [ 36.951742][ T4290] invoke_syscall+0x98/0x2c0 [ 36.952794][ T4290] el0_svc_common+0x138/0x258 [ 36.953939][ T4290] do_el0_svc+0x64/0x218 [ 36.955076][ T4290] el0_svc+0x58/0x168 [ 36.956104][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.957275][ T4290] el0t_64_sync+0x18c/0x190 [ 36.958412][ T4290] [ 36.958412][ T4290] other info that might help us debug this: [ 36.958412][ T4290] [ 36.960684][ T4290] Chain exists of: [ 36.960684][ T4290] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 36.960684][ T4290] [ 36.963303][ T4290] Possible unsafe locking scenario: [ 36.963303][ T4290] [ 36.964846][ T4290] CPU0 CPU1 [ 36.966064][ T4290] ---- ---- [ 36.967170][ T4290] lock(&oi->ip_alloc_sem); [ 36.968144][ T4290] lock(&oi->ip_xattr_sem); [ 36.969518][ T4290] lock(&oi->ip_alloc_sem); [ 36.970981][ T4290] lock(sb_internal#2); [ 36.971875][ T4290] [ 36.971875][ T4290] *** DEADLOCK *** [ 36.971875][ T4290] [ 36.973539][ T4290] 5 locks held by syz-executor605/4290: [ 36.974613][ T4290] #0: ffff0000d5a620e0 (&type->s_umount_key#40/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824 [ 36.976703][ T4290] #1: ffff0000d5f28460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 36.978469][ T4290] #2: ffff0000e221d108 (&sb->s_type->i_mutex_key#17/1){+.+.}-{3:3}, at: ovl_workdir_create+0x13c/0x7c8 [ 36.980672][ T4290] #3: ffff0000e221ed88 (&sb->s_type->i_mutex_key#19){+.+.}-{3:3}, at: ovl_workdir_create+0x564/0x7c8 [ 36.982948][ T4290] #4: ffff0000e221ea20 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xb08/0x1b3c [ 36.984918][ T4290] [ 36.984918][ T4290] stack backtrace: [ 36.986191][ T4290] CPU: 1 PID: 4290 Comm: syz-executor605 Not tainted 6.1.114-syzkaller #0 [ 36.987937][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.989983][ T4290] Call trace: [ 36.990626][ T4290] dump_backtrace+0x1c8/0x1f4 [ 36.991600][ T4290] show_stack+0x2c/0x3c [ 36.992558][ T4290] dump_stack_lvl+0x108/0x170 [ 36.993479][ T4290] dump_stack+0x1c/0x58 [ 36.994363][ T4290] print_circular_bug+0x150/0x1b8 [ 36.995418][ T4290] check_noncircular+0x2cc/0x378 [ 36.996479][ T4290] __lock_acquire+0x3338/0x7680 [ 36.997723][ T4290] lock_acquire+0x26c/0x7cc [ 36.998661][ T4290] ocfs2_start_trans+0x260/0x73c [ 36.999675][ T4290] ocfs2_setattr+0xb14/0x1b3c [ 37.000730][ T4290] notify_change+0xb58/0xe1c [ 37.001741][ T4290] ovl_workdir_create+0x5d0/0x7c8 [ 37.002923][ T4290] ovl_get_workdir+0x354/0x13d4 [ 37.004019][ T4290] ovl_fill_super+0x15b4/0x2254 [ 37.004927][ T4290] mount_nodev+0x68/0x104 [ 37.005780][ T4290] ovl_mount+0x3c/0x50 [ 37.006668][ T4290] legacy_get_tree+0xd4/0x16c [ 37.007619][ T4290] vfs_get_tree+0x90/0x274 [ 37.008477][ T4290] do_new_mount+0x278/0x8fc [ 37.009406][ T4290] path_mount+0x590/0xe5c [ 37.010390][ T4290] __arm64_sys_mount+0x45c/0x594 [ 37.011372][ T4290] invoke_syscall+0x98/0x2c0 [ 37.012312][ T4290] el0_svc_common+0x138/0x258 [ 37.013260][ T4290] do_el0_svc+0x64/0x218 [ 37.014132][ T4290] el0_svc+0x58/0x168 [ 37.014943][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 37.015936][ T4290] el0t_64_sync+0x18c/0x190 [ 37.017624][ T4290] overlayfs: upper fs does not support tmpfile. [ 37.019406][ T4290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 37.021415][ T4290] overlayfs: upper fs missing required features.