Warning: Permanently added '[localhost]:41482' (ED25519) to the list of known hosts. executing program [ 63.053150][ T5301] loop0: detected capacity change from 0 to 32768 [ 63.070620][ T5301] (syz-executor233,5301,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.083956][ T5301] (syz-executor233,5301,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.102103][ T5301] JBD2: Ignoring recovery information on journal [ 63.122892][ T5301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 63.133317][ T74] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 63.138494][ T5301] syz-executor233 (5301) used greatest stack depth: 19928 bytes left [ 63.148077][ T5300] [ 63.148993][ T5300] ====================================================== [ 63.151542][ T5300] WARNING: possible circular locking dependency detected [ 63.153994][ T5300] 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 Not tainted [ 63.160372][ T5300] ------------------------------------------------------ [ 63.162711][ T5300] syz-executor233/5300 is trying to acquire lock: [ 63.164777][ T5300] ffff8880442e8948 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb1/0x170 [ 63.168335][ T5300] [ 63.168335][ T5300] but task is already holding lock: [ 63.170904][ T5300] ffff888040cd80e0 (&type->s_umount_key#42){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 63.174375][ T5300] [ 63.174375][ T5300] which lock already depends on the new lock. [ 63.174375][ T5300] [ 63.177838][ T5300] [ 63.177838][ T5300] the existing dependency chain (in reverse order) is: [ 63.180839][ T5300] [ 63.180839][ T5300] -> #2 (&type->s_umount_key#42){++++}-{4:4}: [ 63.183846][ T5300] lock_acquire+0x1ed/0x550 [ 63.185551][ T5300] down_read+0xb1/0xa40 [ 63.187250][ T5300] ocfs2_finish_quota_recovery+0x15c/0x22a0 [ 63.189828][ T5300] ocfs2_complete_recovery+0x17c1/0x25c0 [ 63.192136][ T5300] process_scheduled_works+0xa66/0x1840 [ 63.194407][ T5300] worker_thread+0x870/0xd30 [ 63.196189][ T5300] kthread+0x7a9/0x920 [ 63.197887][ T5300] ret_from_fork+0x4b/0x80 [ 63.199685][ T5300] ret_from_fork_asm+0x1a/0x30 [ 63.201435][ T5300] [ 63.201435][ T5300] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}: [ 63.204859][ T5300] lock_acquire+0x1ed/0x550 [ 63.206569][ T5300] process_scheduled_works+0x994/0x1840 [ 63.208743][ T5300] worker_thread+0x870/0xd30 [ 63.210559][ T5300] kthread+0x7a9/0x920 [ 63.212234][ T5300] ret_from_fork+0x4b/0x80 [ 63.214084][ T5300] ret_from_fork_asm+0x1a/0x30 [ 63.215872][ T5300] [ 63.215872][ T5300] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}: [ 63.218916][ T5300] validate_chain+0x18ef/0x5920 [ 63.220793][ T5300] __lock_acquire+0x1397/0x2100 [ 63.222690][ T5300] lock_acquire+0x1ed/0x550 [ 63.224561][ T5300] touch_wq_lockdep_map+0xc7/0x170 [ 63.226562][ T5300] __flush_workqueue+0x14a/0x1280 [ 63.228525][ T5300] ocfs2_shutdown_local_alloc+0x109/0xa90 [ 63.230776][ T5300] ocfs2_dismount_volume+0x202/0x910 [ 63.233158][ T5300] generic_shutdown_super+0x139/0x2d0 [ 63.235250][ T5300] kill_block_super+0x44/0x90 [ 63.237130][ T5300] deactivate_locked_super+0xc4/0x130 [ 63.239248][ T5300] cleanup_mnt+0x41f/0x4b0 [ 63.241030][ T5300] task_work_run+0x24f/0x310 [ 63.242775][ T5300] syscall_exit_to_user_mode+0x13f/0x340 [ 63.245002][ T5300] do_syscall_64+0x100/0x230 [ 63.246972][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.249541][ T5300] [ 63.249541][ T5300] other info that might help us debug this: [ 63.249541][ T5300] [ 63.253208][ T5300] Chain exists of: [ 63.253208][ T5300] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#42 [ 63.253208][ T5300] [ 63.259257][ T5300] Possible unsafe locking scenario: [ 63.259257][ T5300] [ 63.262130][ T5300] CPU0 CPU1 [ 63.264056][ T5300] ---- ---- [ 63.265963][ T5300] lock(&type->s_umount_key#42); [ 63.267661][ T5300] lock((work_completion)(&journal->j_recovery_work)); [ 63.271130][ T5300] lock(&type->s_umount_key#42); [ 63.274064][ T5300] lock((wq_completion)ocfs2_wq); [ 63.275925][ T5300] [ 63.275925][ T5300] *** DEADLOCK *** [ 63.275925][ T5300] [ 63.278938][ T5300] 1 lock held by syz-executor233/5300: [ 63.280989][ T5300] #0: ffff888040cd80e0 (&type->s_umount_key#42){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 63.284960][ T5300] [ 63.284960][ T5300] stack backtrace: [ 63.287246][ T5300] CPU: 0 UID: 0 PID: 5300 Comm: syz-executor233 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 63.287261][ T5300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.287267][ T5300] Call Trace: [ 63.287273][ T5300] [ 63.287278][ T5300] dump_stack_lvl+0x241/0x360 [ 63.287294][ T5300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.287304][ T5300] ? __pfx__printk+0x10/0x10 [ 63.287320][ T5300] print_circular_bug+0x13a/0x1b0 [ 63.287332][ T5300] check_noncircular+0x36a/0x4a0 [ 63.287342][ T5300] ? __lock_acquire+0x1397/0x2100 [ 63.287356][ T5300] ? __pfx_check_noncircular+0x10/0x10 [ 63.287366][ T5300] ? lockdep_lock+0x123/0x2b0 [ 63.287377][ T5300] ? mark_lock+0x9a/0x360 [ 63.287391][ T5300] validate_chain+0x18ef/0x5920 [ 63.287404][ T5300] ? __pfx_validate_chain+0x10/0x10 [ 63.287418][ T5300] ? debug_object_assert_init+0x2dd/0x4b0 [ 63.287429][ T5300] ? do_raw_spin_lock+0x14f/0x370 [ 63.287440][ T5300] ? __pfx_lock_release+0x10/0x10 [ 63.287452][ T5300] ? mark_lock+0x9a/0x360 [ 63.287465][ T5300] __lock_acquire+0x1397/0x2100 [ 63.287479][ T5300] ? kfree+0x196/0x430 [ 63.287488][ T5300] ? ocfs2_dismount_volume+0x1bd/0x910 [ 63.287504][ T5300] lock_acquire+0x1ed/0x550 [ 63.287516][ T5300] ? touch_wq_lockdep_map+0xb1/0x170 [ 63.287528][ T5300] ? __pfx_lock_acquire+0x10/0x10 [ 63.287535][ T5300] ? __asan_memset+0x23/0x50 [ 63.287542][ T5300] ? lockdep_init_map_type+0xa1/0x910 [ 63.287549][ T5300] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 63.287556][ T5300] ? __lock_acquire+0x1397/0x2100 [ 63.287564][ T5300] ? touch_wq_lockdep_map+0xb1/0x170 [ 63.287571][ T5300] touch_wq_lockdep_map+0xc7/0x170 [ 63.287578][ T5300] ? touch_wq_lockdep_map+0xb1/0x170 [ 63.287585][ T5300] __flush_workqueue+0x14a/0x1280 [ 63.287594][ T5300] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 63.287607][ T5300] ? __pfx___flush_workqueue+0x10/0x10 [ 63.287622][ T5300] ? mark_lock+0x9a/0x360 [ 63.287635][ T5300] ocfs2_shutdown_local_alloc+0x109/0xa90 [ 63.287650][ T5300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.287662][ T5300] ? __pfx_ocfs2_shutdown_local_alloc+0x10/0x10 [ 63.287681][ T5300] ? lockdep_hardirqs_on+0x99/0x150 [ 63.287693][ T5300] ? enable_work+0x2e3/0x360 [ 63.287709][ T5300] ? __pfx_enable_work+0x10/0x10 [ 63.287722][ T5300] ? _atomic_dec_and_lock+0x9a/0x130 [ 63.287735][ T5300] ? iput+0x3be/0xa50 [ 63.287746][ T5300] ocfs2_dismount_volume+0x202/0x910 [ 63.287765][ T5300] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 63.287779][ T5300] ? __pfx_evict_inodes+0x10/0x10 [ 63.287789][ T5300] ? __pfx_ocfs2_put_super+0x10/0x10 [ 63.287802][ T5300] generic_shutdown_super+0x139/0x2d0 [ 63.287816][ T5300] kill_block_super+0x44/0x90 [ 63.287830][ T5300] deactivate_locked_super+0xc4/0x130 [ 63.287842][ T5300] cleanup_mnt+0x41f/0x4b0 [ 63.287853][ T5300] ? lockdep_hardirqs_on+0x99/0x150 [ 63.287864][ T5300] task_work_run+0x24f/0x310 [ 63.287879][ T5300] ? __pfx_task_work_run+0x10/0x10 [ 63.287891][ T5300] ? __x64_sys_umount+0x123/0x170 [ 63.287909][ T5300] ? syscall_exit_to_user_mode+0xa3/0x340 [ 63.287922][ T5300] syscall_exit_to_user_mode+0x13f/0x340 [ 63.287934][ T5300] do_syscall_64+0x100/0x230 [ 63.287947][ T5300] ? clear_bhb_loop+0x35/0x90 [ 63.287961][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.287974][ T5300] RIP: 0033:0x7f9f9a485407 [ 63.287985][ T5300] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 63.287993][ T5300] RSP: 002b:00007ffda3127d18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 63.288009][ T5300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9f9a485407 [ 63.288016][ T5300] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda3127dd0 [ 63.288022][ T5300] RBP: 00007ffda3127dd0 R08: 0000000000000000 R09: 0000000000000000 [ 63.288028][ T5300] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda3128e30 [ 63.288041][ T5300] R13: 0000555594d846c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 63.288050][ T5300] [ 63.443117][ T5300] ocfs2: Unmounting device (7,0) on (node local) executing program [ 63.672553][ T5305] loop0: detected capacity change from 0 to 32768 [ 63.698709][ T5305] (syz-executor233,5305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.722330][ T5305] (syz-executor233,5305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.746494][ T5305] JBD2: Ignoring recovery information on journal [ 63.761927][ T5305] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 63.766330][ T1054] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 63.784401][ T5300] ocfs2: Unmounting device (7,0) on (node local) executing program [ 63.924169][ T5308] loop0: detected capacity change from 0 to 32768 [ 63.949354][ T5308] (syz-executor233,5308,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.954319][ T5308] (syz-executor233,5308,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.961215][ T5308] JBD2: Ignoring recovery information on journal [ 63.975669][ T5308] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 63.980580][ T74] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 63.999585][ T5300] ocfs2: Unmounting device (7,0) on (node local) executing program [ 64.141168][ T5311] loop0: detected capacity change from 0 to 32768 [ 64.148640][ T5311] (syz-executor233,5311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.160634][ T5311] (syz-executor233,5311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.171748][ T5311] JBD2: Ignoring recovery information on journal [ 64.187524][ T5311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.191956][ T74] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 64.204129][ T5300] ocfs2: Unmounting device (7,0) on (node local) executing program [ 64.339241][ T5314] loop0: detected capacity change from 0 to 32768 [ 64.360776][ T5314] (syz-executor233,5314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.371861][ T5314] (syz-executor233,5314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.380636][ T5314] JBD2: Ignoring recovery information on journal [ 64.396631][ T5314] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.400983][ T74] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 64.412652][ T5300] ocfs2: Unmounting device (7,0) on (node local) executing program [ 64.558605][ T5317] loop0: detected capacity change from 0 to 32768 [ 64.577412][ T5317] (syz-executor233,5317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.589688][ T5317] (syz-executor233,5317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.597617][ T5317] JBD2: Ignoring recovery information on journal [ 64.613152][ T5317] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.619300][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0 VM DIAGNOSIS: 06:38:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000036 RBX=ffffffff9a746080 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d426a70 R8 =ffffffff8576c46b R9 =1ffff110065ce046 R10=dffffc0000000000 R11=ffffffff8576c420 R12=dffffc0000000000 R13=0000000000000036 R14=0000000000000036 R15=00000000000003f8 RIP=ffffffff8576c49e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555594d83380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555594d8c6f8 CR3=00000000425c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000601 Opmask01=0000000020000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccaf30960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f63202c39316335 373733627830203a 6465726f7400002e 65646f6d20617400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6563202633316335 3737336272302030 6465726574000024 6564656720617400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2572200000244343 4520676463736670 7041202435363263 3164643272302064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 252e200000202020 2c2030002e373733 2020202030363220 316364203a202063 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636b6c2a38394958 492a30584558584f 2a383a3e306f7e6b 6e63666b7c556169 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25782a0a00244949 4f2a6d646373667a 7a4b2a243f3c3869 3b6e6e38723a2a6e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000