Warning: Permanently added '10.128.1.155' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 59.394929][ T3497] loop0: detected capacity change from 0 to 512 [ 59.405661][ T3497] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.425339][ T3497] EXT4-fs (loop0): 1 truncate cleaned up [ 59.431128][ T3497] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,nogrpid,debug_want_extra_isize=0x0000000000000066,dioread_nolock,max_batch_time=0x0000000000000008,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 59.463502][ T3497] [ 59.465867][ T3497] ====================================================== [ 59.472887][ T3497] WARNING: possible circular locking dependency detected [ 59.479912][ T3497] 5.15.110-syzkaller #0 Not tainted [ 59.485118][ T3497] ------------------------------------------------------ [ 59.492130][ T3497] syz-executor307/3497 is trying to acquire lock: [ 59.498698][ T3497] ffff888074d45da8 (&ea_inode->i_rwsem#9/1){+.+.}-{3:3}, at: ext4_xattr_inode_iget+0x4a3/0x5e0 [ 59.509086][ T3497] [ 59.509086][ T3497] but task is already holding lock: [ 59.516436][ T3497] ffff888074d45238 (&ei->i_data_sem){++++}-{3:3}, at: ext4_setattr+0x1322/0x1990 [ 59.525570][ T3497] [ 59.525570][ T3497] which lock already depends on the new lock. [ 59.525570][ T3497] [ 59.535958][ T3497] [ 59.535958][ T3497] the existing dependency chain (in reverse order) is: [ 59.544956][ T3497] [ 59.544956][ T3497] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 59.552586][ T3497] lock_acquire+0x1db/0x4f0 [ 59.557606][ T3497] down_write+0x97/0x170 [ 59.562374][ T3497] ext4_xattr_set_entry+0x3187/0x3c00 [ 59.568274][ T3497] ext4_xattr_ibody_set+0x11d/0x330 [ 59.573981][ T3497] ext4_xattr_set_handle+0xc72/0x1560 [ 59.579863][ T3497] ext4_xattr_set+0x231/0x3d0 [ 59.585066][ T3497] __vfs_setxattr+0x3e7/0x420 [ 59.590257][ T3497] __vfs_setxattr_noperm+0x12a/0x5e0 [ 59.596134][ T3497] vfs_setxattr+0x21d/0x420 [ 59.601143][ T3497] setxattr+0x27e/0x2e0 [ 59.605806][ T3497] path_setxattr+0x1bc/0x2a0 [ 59.610904][ T3497] __x64_sys_setxattr+0xb7/0xd0 [ 59.616260][ T3497] do_syscall_64+0x3d/0xb0 [ 59.621183][ T3497] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.627584][ T3497] [ 59.627584][ T3497] -> #0 (&ea_inode->i_rwsem#9/1){+.+.}-{3:3}: [ 59.635850][ T3497] validate_chain+0x1646/0x58b0 [ 59.641213][ T3497] __lock_acquire+0x1295/0x1ff0 [ 59.647096][ T3497] lock_acquire+0x1db/0x4f0 [ 59.652125][ T3497] down_write+0x97/0x170 [ 59.656880][ T3497] ext4_xattr_inode_iget+0x4a3/0x5e0 [ 59.662757][ T3497] ext4_xattr_inode_get+0x17d/0x9a0 [ 59.668464][ T3497] ext4_expand_extra_isize_ea+0xe77/0x1bc0 [ 59.674778][ T3497] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 59.680922][ T3497] __ext4_mark_inode_dirty+0x539/0x860 [ 59.686888][ T3497] ext4_setattr+0x13b0/0x1990 [ 59.692077][ T3497] notify_change+0xd4d/0x1000 [ 59.697260][ T3497] do_truncate+0x21c/0x300 [ 59.702185][ T3497] path_openat+0x28a0/0x2f20 [ 59.707310][ T3497] do_filp_open+0x21c/0x460 [ 59.712322][ T3497] do_sys_openat2+0x13b/0x500 [ 59.717508][ T3497] __x64_sys_creat+0x11f/0x160 [ 59.722786][ T3497] do_syscall_64+0x3d/0xb0 [ 59.727724][ T3497] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.734155][ T3497] [ 59.734155][ T3497] other info that might help us debug this: [ 59.734155][ T3497] [ 59.744552][ T3497] Possible unsafe locking scenario: [ 59.744552][ T3497] [ 59.751995][ T3497] CPU0 CPU1 [ 59.757352][ T3497] ---- ---- [ 59.762709][ T3497] lock(&ei->i_data_sem); [ 59.767116][ T3497] lock(&ea_inode->i_rwsem#9/1); [ 59.774657][ T3497] lock(&ei->i_data_sem); [ 59.781585][ T3497] lock(&ea_inode->i_rwsem#9/1); [ 59.786606][ T3497] [ 59.786606][ T3497] *** DEADLOCK *** [ 59.786606][ T3497] [ 59.794730][ T3497] 5 locks held by syz-executor307/3497: [ 59.800271][ T3497] #0: ffff888015da6460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 59.809549][ T3497] #1: ffff888074d453b0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x208/0x300 [ 59.819844][ T3497] #2: ffff888074d45550 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdaa/0x1990 [ 59.830027][ T3497] #3: ffff888074d45238 (&ei->i_data_sem){++++}-{3:3}, at: ext4_setattr+0x1322/0x1990 [ 59.839585][ T3497] #4: ffff888074d45088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x4a0/0x860 [ 59.849835][ T3497] [ 59.849835][ T3497] stack backtrace: [ 59.855710][ T3497] CPU: 1 PID: 3497 Comm: syz-executor307 Not tainted 5.15.110-syzkaller #0 [ 59.864302][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 59.874382][ T3497] Call Trace: [ 59.877659][ T3497] [ 59.880582][ T3497] dump_stack_lvl+0x1e3/0x2cb [ 59.885277][ T3497] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 59.890908][ T3497] ? print_circular_bug+0x12b/0x1a0 [ 59.896100][ T3497] check_noncircular+0x2f8/0x3b0 [ 59.901029][ T3497] ? add_chain_block+0x850/0x850 [ 59.905959][ T3497] ? lockdep_lock+0x11f/0x2a0 [ 59.910642][ T3497] ? __lock_acquire+0x1295/0x1ff0 [ 59.915673][ T3497] validate_chain+0x1646/0x58b0 [ 59.920523][ T3497] ? find_inode_fast+0x421/0x450 [ 59.925493][ T3497] ? reacquire_held_locks+0x660/0x660 [ 59.930876][ T3497] ? do_raw_spin_lock+0x14a/0x370 [ 59.935901][ T3497] ? mark_lock+0x98/0x340 [ 59.940215][ T3497] __lock_acquire+0x1295/0x1ff0 [ 59.945169][ T3497] lock_acquire+0x1db/0x4f0 [ 59.949667][ T3497] ? ext4_xattr_inode_iget+0x4a3/0x5e0 [ 59.955129][ T3497] ? read_lock_is_recursive+0x10/0x10 [ 59.960506][ T3497] ? __lock_acquire+0x1295/0x1ff0 [ 59.965531][ T3497] ? __might_sleep+0xc0/0xc0 [ 59.970118][ T3497] ? stack_depot_save+0x3db/0x440 [ 59.975176][ T3497] down_write+0x97/0x170 [ 59.979430][ T3497] ? ext4_xattr_inode_iget+0x4a3/0x5e0 [ 59.984892][ T3497] ? down_read_killable+0x80/0x80 [ 59.989921][ T3497] ext4_xattr_inode_iget+0x4a3/0x5e0 [ 59.995301][ T3497] ext4_xattr_inode_get+0x17d/0x9a0 [ 60.000516][ T3497] ? __xattr_check_inode+0x3f0/0x3f0 [ 60.005820][ T3497] ? __kmalloc_node+0x199/0x390 [ 60.010666][ T3497] ? ext4_expand_extra_isize_ea+0xcfb/0x1bc0 [ 60.016642][ T3497] ext4_expand_extra_isize_ea+0xe77/0x1bc0 [ 60.022466][ T3497] ? ext4_xattr_set+0x3d0/0x3d0 [ 60.027308][ T3497] ? down_write_trylock+0x173/0x2d0 [ 60.032494][ T3497] ? __ext4_mark_inode_dirty+0x4a0/0x860 [ 60.038237][ T3497] ? dquot_initialize_needed+0x128/0x320 [ 60.043987][ T3497] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 60.049625][ T3497] __ext4_mark_inode_dirty+0x539/0x860 [ 60.055151][ T3497] ? ext4_blocks_for_truncate+0x270/0x270 [ 60.060895][ T3497] ? down_read_killable+0x80/0x80 [ 60.065939][ T3497] ? ext4_journal_check_start+0x17b/0x240 [ 60.071667][ T3497] ? ext4_setattr+0xf64/0x1990 [ 60.076470][ T3497] ? __ext4_journal_start_sb+0x1cb/0x370 [ 60.082197][ T3497] ext4_setattr+0x13b0/0x1990 [ 60.086877][ T3497] ? ext4_write_inode+0x730/0x730 [ 60.091910][ T3497] notify_change+0xd4d/0x1000 [ 60.096585][ T3497] do_truncate+0x21c/0x300 [ 60.101008][ T3497] ? put_page_bootmem+0x280/0x280 [ 60.106046][ T3497] ? ima_bprm_check+0x2b0/0x2b0 [ 60.110895][ T3497] ? bpf_lsm_path_truncate+0x5/0x10 [ 60.116110][ T3497] path_openat+0x28a0/0x2f20 [ 60.121150][ T3497] ? do_filp_open+0x460/0x460 [ 60.125853][ T3497] do_filp_open+0x21c/0x460 [ 60.130360][ T3497] ? vfs_tmpfile+0x2e0/0x2e0 [ 60.134953][ T3497] ? _raw_spin_unlock+0x24/0x40 [ 60.139798][ T3497] ? alloc_fd+0x594/0x630 [ 60.144120][ T3497] do_sys_openat2+0x13b/0x500 [ 60.148785][ T3497] ? read_lock_is_recursive+0x10/0x10 [ 60.154160][ T3497] ? __context_tracking_exit+0x4c/0x80 [ 60.159614][ T3497] ? do_sys_open+0x220/0x220 [ 60.164193][ T3497] ? rcu_is_watching+0x11/0xa0 [ 60.168956][ T3497] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 60.174957][ T3497] __x64_sys_creat+0x11f/0x160 [ 60.179811][ T3497] ? __x64_compat_sys_openat+0x290/0x290 [ 60.185516][ T3497] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.191534][ T3497] ? lockdep_hardirqs_on+0x94/0x130 [ 60.196748][ T3497] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.202753][ T3497] do_syscall_64+0x3d/0xb0 [ 60.207179][ T3497] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.213285][ T3497] RIP: 0033:0x7fb3256a0c29 [ 60.217710][ T3497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.237437][ T3497] RSP: 002b:00007ffc984d49d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 60.245867][ T3497] RAX: ffffffffffffffda