DUID 00:04:17:4d:40:87:6e:bf:2d:0e:65:92:c1:2a:fb:91:5f:79 forked to background, child pid 3171 [ 28.344781][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.354758][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 46.830614][ T3491] sshd (3491) used greatest stack depth: 19576 bytes left Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. executing program [ 52.275108][ T3496] loop0: detected capacity change from 0 to 512 [ 52.285038][ T3496] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.304006][ T3496] EXT4-fs (loop0): 1 truncate cleaned up [ 52.309680][ T3496] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,nogrpid,debug_want_extra_isize=0x0000000000000066,dioread_nolock,max_batch_time=0x0000000000000008,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 52.346217][ T3496] [ 52.348575][ T3496] ====================================================== [ 52.355595][ T3496] WARNING: possible circular locking dependency detected [ 52.362619][ T3496] 5.15.114-syzkaller #0 Not tainted [ 52.367798][ T3496] ------------------------------------------------------ [ 52.374797][ T3496] syz-executor330/3496 is trying to acquire lock: [ 52.381191][ T3496] ffff8880748917e0 (&ea_inode->i_rwsem#9/1){+.+.}-{3:3}, at: ext4_xattr_inode_iget+0x4a3/0x5e0 [ 52.391554][ T3496] [ 52.391554][ T3496] but task is already holding lock: [ 52.398904][ T3496] ffff888074890c70 (&ei->i_data_sem){++++}-{3:3}, at: ext4_setattr+0x12e8/0x1990 [ 52.408023][ T3496] [ 52.408023][ T3496] which lock already depends on the new lock. [ 52.408023][ T3496] [ 52.418468][ T3496] [ 52.418468][ T3496] the existing dependency chain (in reverse order) is: [ 52.427463][ T3496] [ 52.427463][ T3496] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 52.435092][ T3496] lock_acquire+0x1db/0x4f0 [ 52.440298][ T3496] down_write+0x97/0x170 [ 52.445084][ T3496] ext4_xattr_set_entry+0x3187/0x3c00 [ 52.450963][ T3496] ext4_xattr_ibody_set+0x11d/0x330 [ 52.456681][ T3496] ext4_xattr_set_handle+0xc72/0x1560 [ 52.462589][ T3496] ext4_xattr_set+0x231/0x3d0 [ 52.467788][ T3496] __vfs_setxattr+0x3e7/0x420 [ 52.472978][ T3496] __vfs_setxattr_noperm+0x12a/0x5e0 [ 52.478780][ T3496] vfs_setxattr+0x21d/0x420 [ 52.483888][ T3496] setxattr+0x27e/0x2e0 [ 52.488553][ T3496] path_setxattr+0x1bc/0x2a0 [ 52.493655][ T3496] __x64_sys_setxattr+0xb7/0xd0 [ 52.499015][ T3496] do_syscall_64+0x3d/0xb0 [ 52.503941][ T3496] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.510342][ T3496] [ 52.510342][ T3496] -> #0 (&ea_inode->i_rwsem#9/1){+.+.}-{3:3}: [ 52.518587][ T3496] validate_chain+0x1646/0x58b0 [ 52.523952][ T3496] __lock_acquire+0x1295/0x1ff0 [ 52.529314][ T3496] lock_acquire+0x1db/0x4f0 [ 52.534326][ T3496] down_write+0x97/0x170 [ 52.539077][ T3496] ext4_xattr_inode_iget+0x4a3/0x5e0 [ 52.544958][ T3496] ext4_xattr_inode_get+0x17d/0x9a0 [ 52.550663][ T3496] ext4_expand_extra_isize_ea+0xe70/0x1bb0 [ 52.556982][ T3496] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 52.563124][ T3496] __ext4_mark_inode_dirty+0x539/0x860 [ 52.569090][ T3496] ext4_setattr+0x1374/0x1990 [ 52.574362][ T3496] notify_change+0xd4d/0x1000 [ 52.579545][ T3496] do_truncate+0x21c/0x300 [ 52.584481][ T3496] path_openat+0x28a0/0x2f20 [ 52.589599][ T3496] do_filp_open+0x21c/0x460 [ 52.594624][ T3496] do_sys_openat2+0x13b/0x500 [ 52.599823][ T3496] __x64_sys_creat+0x11f/0x160 [ 52.605097][ T3496] do_syscall_64+0x3d/0xb0 [ 52.610030][ T3496] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.616437][ T3496] [ 52.616437][ T3496] other info that might help us debug this: [ 52.616437][ T3496] [ 52.626657][ T3496] Possible unsafe locking scenario: [ 52.626657][ T3496] [ 52.634095][ T3496] CPU0 CPU1 [ 52.639447][ T3496] ---- ---- [ 52.644798][ T3496] lock(&ei->i_data_sem); [ 52.649214][ T3496] lock(&ea_inode->i_rwsem#9/1); [ 52.656766][ T3496] lock(&ei->i_data_sem); [ 52.663700][ T3496] lock(&ea_inode->i_rwsem#9/1); [ 52.668731][ T3496] [ 52.668731][ T3496] *** DEADLOCK *** [ 52.668731][ T3496] [ 52.676863][ T3496] 5 locks held by syz-executor330/3496: [ 52.682391][ T3496] #0: ffff8880793f0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 52.691521][ T3496] #1: ffff888074890de8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x208/0x300 [ 52.701780][ T3496] #2: ffff888074890f88 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xd6c/0x1990 [ 52.711963][ T3496] #3: ffff888074890c70 (&ei->i_data_sem){++++}-{3:3}, at: ext4_setattr+0x12e8/0x1990 [ 52.721607][ T3496] #4: ffff888074890ac0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x4a0/0x860 [ 52.731856][ T3496] [ 52.731856][ T3496] stack backtrace: [ 52.737729][ T3496] CPU: 1 PID: 3496 Comm: syz-executor330 Not tainted 5.15.114-syzkaller #0 [ 52.746303][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 52.756470][ T3496] Call Trace: [ 52.759740][ T3496] [ 52.762747][ T3496] dump_stack_lvl+0x1e3/0x2cb [ 52.767438][ T3496] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.773067][ T3496] ? print_circular_bug+0x12b/0x1a0 [ 52.778258][ T3496] check_noncircular+0x2f8/0x3b0 [ 52.783187][ T3496] ? add_chain_block+0x850/0x850 [ 52.788114][ T3496] ? lockdep_lock+0x11f/0x2a0 [ 52.792787][ T3496] ? __lock_acquire+0x1295/0x1ff0 [ 52.797803][ T3496] validate_chain+0x1646/0x58b0 [ 52.802651][ T3496] ? find_inode_fast+0x421/0x450 [ 52.807579][ T3496] ? reacquire_held_locks+0x660/0x660 [ 52.812958][ T3496] ? do_raw_spin_lock+0x14a/0x370 [ 52.817980][ T3496] ? mark_lock+0x98/0x340 [ 52.822295][ T3496] __lock_acquire+0x1295/0x1ff0 [ 52.827141][ T3496] lock_acquire+0x1db/0x4f0 [ 52.831633][ T3496] ? ext4_xattr_inode_iget+0x4a3/0x5e0 [ 52.837082][ T3496] ? read_lock_is_recursive+0x10/0x10 [ 52.842446][ T3496] ? __might_sleep+0xc0/0xc0 [ 52.847113][ T3496] ? stack_depot_save+0x3db/0x440 [ 52.852133][ T3496] down_write+0x97/0x170 [ 52.856365][ T3496] ? ext4_xattr_inode_iget+0x4a3/0x5e0 [ 52.861815][ T3496] ? down_read_killable+0x350/0x350 [ 52.867019][ T3496] ext4_xattr_inode_iget+0x4a3/0x5e0 [ 52.872298][ T3496] ext4_xattr_inode_get+0x17d/0x9a0 [ 52.877486][ T3496] ? __xattr_check_inode+0x3f0/0x3f0 [ 52.882756][ T3496] ? __kmalloc_node+0x199/0x390 [ 52.887604][ T3496] ? ext4_expand_extra_isize_ea+0xd11/0x1bb0 [ 52.893587][ T3496] ext4_expand_extra_isize_ea+0xe70/0x1bb0 [ 52.899401][ T3496] ? ext4_xattr_set+0x3d0/0x3d0 [ 52.904423][ T3496] ? down_write_trylock+0x173/0x2d0 [ 52.909652][ T3496] ? __ext4_mark_inode_dirty+0x4a0/0x860 [ 52.915291][ T3496] ? dquot_initialize_needed+0x128/0x320 [ 52.920915][ T3496] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 52.926540][ T3496] __ext4_mark_inode_dirty+0x539/0x860 [ 52.932078][ T3496] ? ext4_blocks_for_truncate+0x270/0x270 [ 52.937787][ T3496] ? down_read_killable+0x350/0x350 [ 52.942974][ T3496] ? ext4_journal_check_start+0x17b/0x240 [ 52.948684][ T3496] ? ext4_setattr+0xf05/0x1990 [ 52.953434][ T3496] ? __ext4_journal_start_sb+0x1cb/0x370 [ 52.959054][ T3496] ext4_setattr+0x1374/0x1990 [ 52.963724][ T3496] ? bpf_lsm_inode_setattr+0x5/0x10 [ 52.968913][ T3496] ? ext4_write_inode+0x730/0x730 [ 52.973928][ T3496] notify_change+0xd4d/0x1000 [ 52.978591][ T3496] do_truncate+0x21c/0x300 [ 52.983003][ T3496] ? put_page_bootmem+0x280/0x280 [ 52.988028][ T3496] ? ima_bprm_check+0x2b0/0x2b0 [ 52.992867][ T3496] ? bpf_lsm_path_truncate+0x5/0x10 [ 52.998060][ T3496] path_openat+0x28a0/0x2f20 [ 53.002648][ T3496] ? do_filp_open+0x460/0x460 [ 53.007318][ T3496] do_filp_open+0x21c/0x460 [ 53.011813][ T3496] ? vfs_tmpfile+0x2e0/0x2e0 [ 53.016429][ T3496] ? _raw_spin_unlock+0x24/0x40 [ 53.021265][ T3496] ? alloc_fd+0x594/0x630 [ 53.025584][ T3496] do_sys_openat2+0x13b/0x500 [ 53.030247][ T3496] ? read_lock_is_recursive+0x10/0x10 [ 53.035618][ T3496] ? __context_tracking_exit+0x4c/0x80 [ 53.041065][ T3496] ? do_sys_open+0x220/0x220 [ 53.045640][ T3496] ? rcu_is_watching+0x11/0xa0 [ 53.050393][ T3496] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.056361][ T3496] __x64_sys_creat+0x11f/0x160 [ 53.061119][ T3496] ? __x64_compat_sys_openat+0x290/0x290 [ 53.066779][ T3496] ? syscall_enter_from_user_mode+0x2e/0x230 [ 53.072759][ T3496] ? lockdep_hardirqs_on+0x94/0x130 [ 53.077947][ T3496] ? syscall_enter_from_user_mode+0x2e/0x230 [ 53.083917][ T3496] do_syscall_64+0x3d/0xb0 [ 53.088324][ T3496] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.094209][ T3496] RIP: 0033:0x7efe798c7c29 [ 53.098615][ T3496] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.118209][ T3496] RSP: 002b:00007ffe07cbf458 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 53.126615][ T3496] RAX: