Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. executing program [ 32.622241][ T6420] loop0: detected capacity change from 0 to 32768 [ 32.626523][ T6420] ======================================================= [ 32.626523][ T6420] WARNING: The mand mount option has been deprecated and [ 32.626523][ T6420] and is ignored by this kernel. Remove the mand [ 32.626523][ T6420] option from the mount to silence this warning. [ 32.626523][ T6420] ======================================================= [ 32.649328][ T6420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 32.659033][ T6420] [ 32.659575][ T6420] ====================================================== [ 32.661041][ T6420] WARNING: possible circular locking dependency detected [ 32.662497][ T6420] 6.12.0-syzkaller-g7b1d1d4cfac0 #0 Not tainted [ 32.663757][ T6420] ------------------------------------------------------ [ 32.665190][ T6420] syz-executor246/6420 is trying to acquire lock: [ 32.666594][ T6420] ffff0000dd213f60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 32.668805][ T6420] [ 32.668805][ T6420] but task is already holding lock: [ 32.670336][ T6420] ffff0000dd213ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2f0 [ 32.672572][ T6420] [ 32.672572][ T6420] which lock already depends on the new lock. [ 32.672572][ T6420] [ 32.674771][ T6420] [ 32.674771][ T6420] the existing dependency chain (in reverse order) is: [ 32.676719][ T6420] [ 32.676719][ T6420] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 32.678451][ T6420] down_read+0x58/0x2fc [ 32.679376][ T6420] ocfs2_init_acl+0x2c8/0x764 [ 32.680393][ T6420] ocfs2_mknod+0x1388/0x243c [ 32.681462][ T6420] ocfs2_create+0x194/0x4e0 [ 32.682571][ T6420] path_openat+0x13e4/0x2b14 [ 32.683580][ T6420] do_filp_open+0x1bc/0x3cc [ 32.684653][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.685798][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.686898][ T6420] invoke_syscall+0x98/0x2b8 [ 32.687964][ T6420] el0_svc_common+0x130/0x23c [ 32.689089][ T6420] do_el0_svc+0x48/0x58 [ 32.690113][ T6420] el0_svc+0x54/0x168 [ 32.691033][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.692192][ T6420] el0t_64_sync+0x198/0x19c [ 32.693311][ T6420] [ 32.693311][ T6420] -> #3 (jbd2_handle){.+.+}-{0:0}: [ 32.694945][ T6420] start_this_handle+0xf34/0x11c4 [ 32.696106][ T6420] jbd2__journal_start+0x298/0x544 [ 32.697284][ T6420] jbd2_journal_start+0x3c/0x4c [ 32.698444][ T6420] ocfs2_start_trans+0x3d0/0x71c [ 32.699617][ T6420] ocfs2_reserve_suballoc_bits+0x840/0x4288 [ 32.701002][ T6420] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 32.702390][ T6420] ocfs2_mknod+0xdc8/0x243c [ 32.703416][ T6420] ocfs2_create+0x194/0x4e0 [ 32.704539][ T6420] path_openat+0x13e4/0x2b14 [ 32.705694][ T6420] do_filp_open+0x1bc/0x3cc [ 32.706798][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.707882][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.709083][ T6420] invoke_syscall+0x98/0x2b8 [ 32.710153][ T6420] el0_svc_common+0x130/0x23c [ 32.711189][ T6420] do_el0_svc+0x48/0x58 [ 32.712199][ T6420] el0_svc+0x54/0x168 [ 32.713122][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.714274][ T6420] el0t_64_sync+0x198/0x19c [ 32.715331][ T6420] [ 32.715331][ T6420] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 32.717157][ T6420] down_read+0x58/0x2fc [ 32.718115][ T6420] ocfs2_start_trans+0x3c4/0x71c [ 32.719322][ T6420] ocfs2_reserve_suballoc_bits+0x840/0x4288 [ 32.720735][ T6420] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 32.722307][ T6420] ocfs2_mknod+0xdc8/0x243c [ 32.723456][ T6420] ocfs2_create+0x194/0x4e0 [ 32.724562][ T6420] path_openat+0x13e4/0x2b14 [ 32.725671][ T6420] do_filp_open+0x1bc/0x3cc [ 32.726726][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.727823][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.728918][ T6420] invoke_syscall+0x98/0x2b8 [ 32.730010][ T6420] el0_svc_common+0x130/0x23c [ 32.731137][ T6420] do_el0_svc+0x48/0x58 [ 32.732168][ T6420] el0_svc+0x54/0x168 [ 32.733068][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.734253][ T6420] el0t_64_sync+0x198/0x19c [ 32.735303][ T6420] [ 32.735303][ T6420] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 32.736935][ T6420] ocfs2_start_trans+0x244/0x71c [ 32.738111][ T6420] ocfs2_truncate_file+0x628/0x1534 [ 32.739344][ T6420] ocfs2_setattr+0x1328/0x19e8 [ 32.740475][ T6420] notify_change+0x9f0/0xca0 [ 32.741596][ T6420] do_truncate+0x1c0/0x28c [ 32.742623][ T6420] path_openat+0x2494/0x2b14 [ 32.743778][ T6420] do_filp_open+0x1bc/0x3cc [ 32.744828][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.745948][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.747173][ T6420] invoke_syscall+0x98/0x2b8 [ 32.748290][ T6420] el0_svc_common+0x130/0x23c [ 32.749439][ T6420] do_el0_svc+0x48/0x58 [ 32.750385][ T6420] el0_svc+0x54/0x168 [ 32.751314][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.752416][ T6420] el0t_64_sync+0x198/0x19c [ 32.753420][ T6420] [ 32.753420][ T6420] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 32.754961][ T6420] __lock_acquire+0x33f8/0x77c8 [ 32.756096][ T6420] lock_acquire+0x240/0x728 [ 32.757153][ T6420] down_write+0x50/0xc0 [ 32.758227][ T6420] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 32.759632][ T6420] ocfs2_truncate_file+0xd08/0x1534 [ 32.760785][ T6420] ocfs2_setattr+0x1328/0x19e8 [ 32.761806][ T6420] notify_change+0x9f0/0xca0 [ 32.762853][ T6420] do_truncate+0x1c0/0x28c [ 32.763906][ T6420] path_openat+0x2494/0x2b14 [ 32.764995][ T6420] do_filp_open+0x1bc/0x3cc [ 32.766025][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.767137][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.768294][ T6420] invoke_syscall+0x98/0x2b8 [ 32.769429][ T6420] el0_svc_common+0x130/0x23c [ 32.770503][ T6420] do_el0_svc+0x48/0x58 [ 32.771479][ T6420] el0_svc+0x54/0x168 [ 32.772416][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.773732][ T6420] el0t_64_sync+0x198/0x19c [ 32.774752][ T6420] [ 32.774752][ T6420] other info that might help us debug this: [ 32.774752][ T6420] [ 32.776959][ T6420] Chain exists of: [ 32.776959][ T6420] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 32.776959][ T6420] [ 32.779772][ T6420] Possible unsafe locking scenario: [ 32.779772][ T6420] [ 32.781303][ T6420] CPU0 CPU1 [ 32.782402][ T6420] ---- ---- [ 32.783482][ T6420] lock(&oi->ip_xattr_sem); [ 32.784581][ T6420] lock(jbd2_handle); [ 32.785858][ T6420] lock(&oi->ip_xattr_sem); [ 32.787266][ T6420] lock(&oi->ip_alloc_sem); [ 32.788099][ T6420] [ 32.788099][ T6420] *** DEADLOCK *** [ 32.788099][ T6420] [ 32.789717][ T6420] 3 locks held by syz-executor246/6420: [ 32.790969][ T6420] #0: ffff0000d9f64420 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 32.792900][ T6420] #1: ffff0000dd2142c0 (&sb->s_type->i_mutex_key#16){+.+.}-{3:3}, at: do_truncate+0x1ac/0x28c [ 32.795149][ T6420] #2: ffff0000dd213ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2f0 [ 32.797506][ T6420] [ 32.797506][ T6420] stack backtrace: [ 32.798804][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz-executor246 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 32.800905][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 32.803032][ T6420] Call trace: [ 32.803772][ T6420] show_stack+0x2c/0x3c (C) [ 32.804714][ T6420] dump_stack_lvl+0xe4/0x150 [ 32.805667][ T6420] dump_stack+0x1c/0x28 [ 32.806506][ T6420] print_circular_bug+0x154/0x1c0 [ 32.807455][ T6420] check_noncircular+0x310/0x404 [ 32.808487][ T6420] __lock_acquire+0x33f8/0x77c8 [ 32.809576][ T6420] lock_acquire+0x240/0x728 [ 32.810500][ T6420] down_write+0x50/0xc0 [ 32.811337][ T6420] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 32.812579][ T6420] ocfs2_truncate_file+0xd08/0x1534 [ 32.813667][ T6420] ocfs2_setattr+0x1328/0x19e8 [ 32.814639][ T6420] notify_change+0x9f0/0xca0 [ 32.815568][ T6420] do_truncate+0x1c0/0x28c [ 32.816459][ T6420] path_openat+0x2494/0x2b14 [ 32.817410][ T6420] do_filp_open+0x1bc/0x3cc [ 32.818370][ T6420] do_sys_openat2+0x124/0x1b8 [ 32.819383][ T6420] __arm64_sys_openat+0x1f0/0x240 [ 32.820497][ T6420] invoke_syscall+0x98/0x2b8 [ 32.821478][ T6420] el0_svc_common+0x130/0x23c [ 32.822540][ T6420] do_el0_svc+0x48/0x58 [ 32.823448][ T6420] el0_svc+0x54/0x168 [ 32.824316][ T6420] el0t_64_sync_handler+0x84/0x108 [ 32.825331][ T6420] el0t_64_sync+0x198/0x19c