./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor809858121
<...>
Warning: Permanently added '10.128.0.182' (ED25519) to the list of known hosts.
execve("./syz-executor809858121", ["./syz-executor809858121"], 0x7ffee31700c0 /* 10 vars */) = 0
brk(NULL) = 0x55558a0f2000
brk(0x55558a0f2d00) = 0x55558a0f2d00
arch_prctl(ARCH_SET_FS, 0x55558a0f2380) = 0
set_tid_address(0x55558a0f2650) = 5827
set_robust_list(0x55558a0f2660, 24) = 0
rseq(0x55558a0f2ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor809858121", 4096) = 27
getrandom("\x2e\x29\x19\xd7\xec\x99\x89\xd5", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558a0f2d00
brk(0x55558a113d00) = 0x55558a113d00
brk(0x55558a114000) = 0x55558a114000
mprotect(0x7f8a4f178000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a46c00000
write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
munmap(0x7f8a46c00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file1", 0777) = 0
[ 76.517502][ T5827] loop0: detected capacity change from 0 to 32768
[ 76.552753][ T5827] =======================================================
[ 76.552753][ T5827] WARNING: The mand mount option has been deprecated and
[ 76.552753][ T5827] and is ignored by this kernel. Remove the mand
[ 76.552753][ T5827] option from the mount to silence this warning.
[ 76.552753][ T5827] =======================================================
[ 76.602104][ T5827] JBD2: Ignoring recovery information on journal
mount("/dev/loop0", "./file1", "ocfs2", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME, "acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=00000000000000000006,coherency=ful"...) = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 76.627318][ T5827] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
mkdirat(AT_FDCWD, "./file0", 000) = 0
mkdirat(AT_FDCWD, "./file1", 000) = 0
mkdir("./bus", 000) = 0
[ 76.727982][ T5827] overlayfs: upper fs does not support tmpfile.
[ 76.737269][ T5827] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 76.744918][ T5827]
[ 76.747269][ T5827] ======================================================
[ 76.754290][ T5827] WARNING: possible circular locking dependency detected
[ 76.761305][ T5827] 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 Not tainted
[ 76.768419][ T5827] ------------------------------------------------------
[ 76.775423][ T5827] syz-executor809/5827 is trying to acquire lock:
[ 76.781835][ T5827] ffff88807310c2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x135/0x28d0
[ 76.795358][ T5827]
[ 76.795358][ T5827] but task is already holding lock:
[ 76.802712][ T5827] ffff88807310eab8 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[ 76.812207][ T5827]
[ 76.812207][ T5827] which lock already depends on the new lock.
[ 76.812207][ T5827]
[ 76.822617][ T5827]
[ 76.822617][ T5827] the existing dependency chain (in reverse order) is:
[ 76.831620][ T5827]
[ 76.831620][ T5827] -> #4 (&oi->ip_xattr_sem){+.+.}-{4:4}:
[ 76.839433][ T5827] lock_acquire+0x1ed/0x550
[ 76.844458][ T5827] down_write+0x99/0x220
[ 76.849226][ T5827] ocfs2_xattr_set_handle+0x539/0xa10
[ 76.855121][ T5827] ocfs2_init_security_set+0xbd/0xd0
[ 76.860931][ T5827] ocfs2_mknod+0x1ccf/0x2b30
[ 76.866054][ T5827] ocfs2_mkdir+0x1ab/0x470
[ 76.870997][ T5827] vfs_mkdir+0x2f9/0x4f0
[ 76.875774][ T5827] do_mkdirat+0x264/0x3a0
[ 76.880624][ T5827] __x64_sys_mkdirat+0x87/0xa0
[ 76.885913][ T5827] do_syscall_64+0xf3/0x230
[ 76.890946][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.897358][ T5827]
[ 76.897358][ T5827] -> #3 (jbd2_handle){.+.+}-{0:0}:
[ 76.904659][ T5827] lock_acquire+0x1ed/0x550
[ 76.909701][ T5827] start_this_handle+0x1eb4/0x2110
[ 76.915427][ T5827] jbd2__journal_start+0x2da/0x5d0
[ 76.921058][ T5827] jbd2_journal_start+0x29/0x40
[ 76.926429][ T5827] ocfs2_start_trans+0x3c9/0x700
[ 76.931882][ T5827] ocfs2_reserve_suballoc_bits+0x9f6/0x4e70
[ 76.938302][ T5827] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[ 76.945162][ T5827] ocfs2_mknod+0x143a/0x2b30
[ 76.950280][ T5827] ocfs2_mkdir+0x1ab/0x470
[ 76.955241][ T5827] vfs_mkdir+0x2f9/0x4f0
[ 76.960010][ T5827] do_mkdirat+0x264/0x3a0
[ 76.964859][ T5827] __x64_sys_mkdirat+0x87/0xa0
[ 76.970136][ T5827] do_syscall_64+0xf3/0x230
[ 76.975157][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.981582][ T5827]
[ 76.981582][ T5827] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[ 76.990110][ T5827] lock_acquire+0x1ed/0x550
[ 76.995162][ T5827] down_read+0xb1/0xa40
[ 76.999842][ T5827] ocfs2_start_trans+0x3be/0x700
[ 77.005299][ T5827] ocfs2_reserve_suballoc_bits+0x9f6/0x4e70
[ 77.011708][ T5827] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[ 77.018568][ T5827] ocfs2_mknod+0x143a/0x2b30
[ 77.023682][ T5827] ocfs2_mkdir+0x1ab/0x470
[ 77.028620][ T5827] vfs_mkdir+0x2f9/0x4f0
[ 77.033381][ T5827] do_mkdirat+0x264/0x3a0
[ 77.038228][ T5827] __x64_sys_mkdirat+0x87/0xa0
[ 77.043529][ T5827] do_syscall_64+0xf3/0x230
[ 77.048571][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.055007][ T5827]
[ 77.055007][ T5827] -> #1 (sb_internal#2){.+.+}-{0:0}:
[ 77.062503][ T5827] lock_acquire+0x1ed/0x550
[ 77.067533][ T5827] ocfs2_start_trans+0x2b9/0x700
[ 77.072988][ T5827] ocfs2_mknod+0x150c/0x2b30
[ 77.078120][ T5827] ocfs2_mkdir+0x1ab/0x470
[ 77.083070][ T5827] vfs_mkdir+0x2f9/0x4f0
[ 77.087838][ T5827] do_mkdirat+0x264/0x3a0
[ 77.092692][ T5827] __x64_sys_mkdirat+0x87/0xa0
[ 77.097980][ T5827] do_syscall_64+0xf3/0x230
[ 77.103005][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.109427][ T5827]
[ 77.109427][ T5827] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}:
[ 77.119954][ T5827] validate_chain+0x18ef/0x5920
[ 77.125339][ T5827] __lock_acquire+0x1397/0x2100
[ 77.130729][ T5827] lock_acquire+0x1ed/0x550
[ 77.135760][ T5827] down_write+0x99/0x220
[ 77.140542][ T5827] ocfs2_reserve_local_alloc_bits+0x135/0x28d0
[ 77.147233][ T5827] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60
[ 77.154090][ T5827] ocfs2_init_xattr_set_ctxt+0x433/0x8f0
[ 77.160257][ T5827] ocfs2_xattr_set+0xf4e/0x1930
[ 77.165624][ T5827] __vfs_setxattr+0x468/0x4a0
[ 77.170823][ T5827] __vfs_setxattr_noperm+0x12e/0x660
[ 77.176630][ T5827] vfs_setxattr+0x221/0x430
[ 77.181651][ T5827] ovl_get_workdir+0xda0/0x1930
[ 77.187018][ T5827] ovl_fill_super+0x12b3/0x3640
[ 77.192383][ T5827] get_tree_nodev+0xb7/0x140
[ 77.197485][ T5827] vfs_get_tree+0x90/0x2b0
[ 77.202418][ T5827] do_new_mount+0x2be/0xb40
[ 77.207498][ T5827] __se_sys_mount+0x2d6/0x3c0
[ 77.212692][ T5827] do_syscall_64+0xf3/0x230
[ 77.217715][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.224129][ T5827]
[ 77.224129][ T5827] other info that might help us debug this:
[ 77.224129][ T5827]
[ 77.234348][ T5827] Chain exists of:
[ 77.234348][ T5827] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[ 77.234348][ T5827]
[ 77.250095][ T5827] Possible unsafe locking scenario:
[ 77.250095][ T5827]
[ 77.257537][ T5827] CPU0 CPU1
[ 77.262916][ T5827] ---- ----
[ 77.268278][ T5827] lock(&oi->ip_xattr_sem);
[ 77.272870][ T5827] lock(jbd2_handle);
[ 77.279462][ T5827] lock(&oi->ip_xattr_sem);
[ 77.286584][ T5827] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[ 77.293894][ T5827]
[ 77.293894][ T5827] *** DEADLOCK ***
[ 77.293894][ T5827]
[ 77.302037][ T5827] 4 locks held by syz-executor809/5827:
[ 77.307574][ T5827] #0: ffff88807d2ec0e0 (&type->s_umount_key#43/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0
[ 77.317694][ T5827] #1: ffff88807ca90420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[ 77.326887][ T5827] #2: ffff88807310ed80 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: vfs_setxattr+0x1e1/0x430
[ 77.337376][ T5827] #3: ffff88807310eab8 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[ 77.347302][ T5827]
[ 77.347302][ T5827] stack backtrace:
[ 77.353195][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor809 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0
[ 77.353212][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 77.353224][ T5827] Call Trace:
[ 77.353231][ T5827] <TASK>
[ 77.353238][ T5827] dump_stack_lvl+0x241/0x360
[ 77.353255][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.353269][ T5827] ? __pfx__printk+0x10/0x10
[ 77.353293][ T5827] print_circular_bug+0x13a/0x1b0
[ 77.353310][ T5827] check_noncircular+0x36a/0x4a0
[ 77.353327][ T5827] ? __pfx_check_noncircular+0x10/0x10
[ 77.353343][ T5827] ? lockdep_lock+0x123/0x2b0
[ 77.353366][ T5827] validate_chain+0x18ef/0x5920
[ 77.353380][ T5827] ? __pfx_validate_chain+0x10/0x10
[ 77.353400][ T5827] ? __pfx_validate_chain+0x10/0x10
[ 77.353417][ T5827] ? mark_lock+0x9a/0x360
[ 77.353442][ T5827] ? ocfs2_get_system_file_inode+0x1e3/0x840
[ 77.353466][ T5827] ? __pfx_lock_release+0x10/0x10
[ 77.353492][ T5827] ? mark_lock+0x9a/0x360
[ 77.353514][ T5827] __lock_acquire+0x1397/0x2100
[ 77.353539][ T5827] lock_acquire+0x1ed/0x550
[ 77.353558][ T5827] ? ocfs2_reserve_local_alloc_bits+0x135/0x28d0
[ 77.353583][ T5827] ? __pfx_lock_acquire+0x10/0x10
[ 77.353603][ T5827] ? __pfx___might_resched+0x10/0x10
[ 77.353621][ T5827] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10
[ 77.353644][ T5827] ? __pfx_validate_chain+0x10/0x10
[ 77.353658][ T5827] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 77.353679][ T5827] down_write+0x99/0x220
[ 77.353701][ T5827] ? ocfs2_reserve_local_alloc_bits+0x135/0x28d0
[ 77.353722][ T5827] ? __pfx_down_write+0x10/0x10
[ 77.353748][ T5827] ocfs2_reserve_local_alloc_bits+0x135/0x28d0
[ 77.353774][ T5827] ? mark_lock+0x9a/0x360
[ 77.353796][ T5827] ? __lock_acquire+0x1397/0x2100
[ 77.353817][ T5827] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10
[ 77.353845][ T5827] ? __pfx_lock_acquire+0x10/0x10
[ 77.353865][ T5827] ? ocfs2_alloc_should_use_local+0x155/0x320
[ 77.353886][ T5827] ? __pfx_lock_release+0x10/0x10
[ 77.353904][ T5827] ? do_raw_spin_lock+0x14f/0x370
[ 77.353924][ T5827] ? do_raw_spin_unlock+0x13c/0x8b0
[ 77.353947][ T5827] ? _raw_spin_unlock+0x28/0x50
[ 77.353967][ T5827] ? ocfs2_alloc_should_use_local+0x155/0x320
[ 77.353996][ T5827] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60
[ 77.354020][ T5827] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10
[ 77.354045][ T5827] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[ 77.354076][ T5827] ? ocfs2_xattr_set+0xf00/0x1930
[ 77.354103][ T5827] ocfs2_init_xattr_set_ctxt+0x433/0x8f0
[ 77.354125][ T5827] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[ 77.354144][ T5827] ? up_write+0x1a9/0x590
[ 77.354159][ T5827] ? __pfx_ocfs2_truncate_log_needs_flush+0x10/0x10
[ 77.354177][ T5827] ? __pfx_up_write+0x10/0x10
[ 77.354192][ T5827] ? __kmalloc_cache_noprof+0x243/0x390
[ 77.354206][ T5827] ? ocfs2_xattr_set+0x4d5/0x1930
[ 77.354224][ T5827] ocfs2_xattr_set+0xf4e/0x1930
[ 77.354248][ T5827] ? __pfx_ocfs2_xattr_set+0x10/0x10
[ 77.354265][ T5827] ? _prb_read_valid+0xa4c/0xad0
[ 77.354287][ T5827] ? mark_lock+0x9a/0x360
[ 77.354315][ T5827] ? smk_tskacc+0x300/0x370
[ 77.354334][ T5827] ? posix_xattr_acl+0xa9/0xd0
[ 77.354350][ T5827] ? evm_protect_xattr+0x4be/0xb40
[ 77.354365][ T5827] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[ 77.354384][ T5827] __vfs_setxattr+0x468/0x4a0
[ 77.354410][ T5827] __vfs_setxattr_noperm+0x12e/0x660
[ 77.354435][ T5827] vfs_setxattr+0x221/0x430
[ 77.354460][ T5827] ? __pfx_vfs_setxattr+0x10/0x10
[ 77.354488][ T5827] ? _raw_spin_unlock+0x28/0x50
[ 77.354505][ T5827] ? dput+0x37/0x2b0
[ 77.354519][ T5827] ovl_get_workdir+0xda0/0x1930
[ 77.354543][ T5827] ? __pfx_ovl_get_workdir+0x10/0x10
[ 77.354564][ T5827] ? ovl_inuse_trylock+0xab/0xf0
[ 77.354581][ T5827] ? do_raw_spin_lock+0x14f/0x370
[ 77.354603][ T5827] ? _raw_spin_unlock+0x28/0x50
[ 77.354618][ T5827] ? ovl_inuse_trylock+0xab/0xf0
[ 77.354637][ T5827] ovl_fill_super+0x12b3/0x3640
[ 77.354665][ T5827] ? __pfx_ovl_fill_super+0x10/0x10
[ 77.354684][ T5827] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 77.354705][ T5827] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 77.354734][ T5827] ? sget_fc+0x960/0xa50
[ 77.354751][ T5827] ? __pfx_set_anon_super_fc+0x10/0x10
[ 77.354769][ T5827] ? __pfx_ovl_fill_super+0x10/0x10
[ 77.354787][ T5827] get_tree_nodev+0xb7/0x140
[ 77.354806][ T5827] vfs_get_tree+0x90/0x2b0
[ 77.354826][ T5827] do_new_mount+0x2be/0xb40
[ 77.354851][ T5827] ? __pfx_do_new_mount+0x10/0x10
[ 77.354876][ T5827] __se_sys_mount+0x2d6/0x3c0
[ 77.354892][ T5827] ? __pfx___se_sys_mount+0x10/0x10
[ 77.354906][ T5827] ? do_syscall_64+0x100/0x230
[ 77.354927][ T5827] ? __x64_sys_mount+0x20/0xc0
[ 77.354941][ T5827] do_syscall_64+0xf3/0x230
[ 77.354961][ T5827] ? clear_bhb_loop+0x35/0x90
[ 77.354982][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.355007][ T5827] RIP: 0033:0x7f8a4f101779
[ 77.355024][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.355036][ T5827] RSP: 002b:00007ffdd42fe4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 77.355050][ T5827] RAX: ffffffffffffffda RBX: 0000400000000000 RCX: 00007f8a4f101779
[ 77.355061][ T5827] RDX: 0000400000000000 RSI: 00004000000000c0 RDI: 0000000000000000
[ 77.355071][ T5827] RBP: 0031656c69662f2e R08: 0000400000000400 R09: 0000000000000000
[ 77.355080][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 EINVAL (Invalid argument)
exit_group(0) = ?
+++ exited with 0 +++
[ 77.355