Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. executing program [ 45.867207][ T4021] loop0: detected capacity change from 0 to 32768 [ 45.903073][ T4021] ======================================================= [ 45.903073][ T4021] WARNING: The mand mount option has been deprecated and [ 45.903073][ T4021] and is ignored by this kernel. Remove the mand [ 45.903073][ T4021] option from the mount to silence this warning. [ 45.903073][ T4021] ======================================================= [ 45.953196][ T4021] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 45.965730][ T4021] [ 45.966344][ T4021] ====================================================== [ 45.967840][ T4021] WARNING: possible circular locking dependency detected [ 45.969351][ T4021] 5.15.167-syzkaller #0 Not tainted [ 45.970386][ T4021] ------------------------------------------------------ [ 45.971849][ T4021] syz-executor685/4021 is trying to acquire lock: [ 45.973268][ T4021] ffff0000cd6d2650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0x94c/0x191c [ 45.975149][ T4021] [ 45.975149][ T4021] but task is already holding lock: [ 45.976685][ T4021] ffff0000e1c85be0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x940/0x191c [ 45.978699][ T4021] [ 45.978699][ T4021] which lock already depends on the new lock. [ 45.978699][ T4021] [ 45.980887][ T4021] [ 45.980887][ T4021] the existing dependency chain (in reverse order) is: [ 45.982876][ T4021] [ 45.982876][ T4021] -> #4 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 45.984625][ T4021] down_write+0xbc/0x12c [ 45.985782][ T4021] ocfs2_try_remove_refcount_tree+0xb4/0x2f0 [ 45.987229][ T4021] ocfs2_xattr_set+0x7b8/0x1478 [ 45.988402][ T4021] ocfs2_set_acl+0x410/0x4b4 [ 45.989472][ T4021] ocfs2_iop_set_acl+0x214/0x358 [ 45.990692][ T4021] posix_acl_xattr_set+0x2cc/0x378 [ 45.991850][ T4021] __vfs_removexattr+0x370/0x38c [ 45.993077][ T4021] __vfs_removexattr_locked+0x1d8/0x380 [ 45.994442][ T4021] vfs_removexattr+0xe0/0x23c [ 45.995653][ T4021] ovl_workdir_create+0x360/0x624 [ 45.996843][ T4021] ovl_get_workdir+0x344/0x1110 [ 45.997981][ T4021] ovl_fill_super+0x15b4/0x2254 [ 45.999248][ T4021] mount_nodev+0x68/0x104 [ 46.000344][ T4021] ovl_mount+0x3c/0x50 [ 46.001256][ T4021] legacy_get_tree+0xd4/0x16c [ 46.002345][ T4021] vfs_get_tree+0x90/0x274 [ 46.003388][ T4021] do_new_mount+0x278/0x8fc [ 46.004466][ T4021] path_mount+0x594/0x101c [ 46.005544][ T4021] __arm64_sys_mount+0x510/0x5e0 [ 46.006720][ T4021] invoke_syscall+0x98/0x2b8 [ 46.007868][ T4021] el0_svc_common+0x138/0x258 [ 46.008919][ T4021] do_el0_svc+0x58/0x14c [ 46.009959][ T4021] el0_svc+0x7c/0x1f0 [ 46.010852][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.012002][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.012975][ T4021] [ 46.012975][ T4021] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 46.014550][ T4021] down_read+0xc0/0x398 [ 46.015477][ T4021] ocfs2_init_acl+0x2d0/0x778 [ 46.016619][ T4021] ocfs2_mknod+0x1558/0x24f8 [ 46.017675][ T4021] ocfs2_mkdir+0x184/0x4c8 [ 46.018620][ T4021] vfs_mkdir+0x334/0x4e4 [ 46.019586][ T4021] do_mkdirat+0x20c/0x610 [ 46.020627][ T4021] __arm64_sys_mkdirat+0x90/0xa8 [ 46.021750][ T4021] invoke_syscall+0x98/0x2b8 [ 46.022833][ T4021] el0_svc_common+0x138/0x258 [ 46.023917][ T4021] do_el0_svc+0x58/0x14c [ 46.024901][ T4021] el0_svc+0x7c/0x1f0 [ 46.025853][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.027082][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.028198][ T4021] [ 46.028198][ T4021] -> #2 (jbd2_handle){.+.+}-{0:0}: [ 46.029735][ T4021] start_this_handle+0xfc0/0x12a4 [ 46.030886][ T4021] jbd2__journal_start+0x29c/0x7b4 [ 46.032082][ T4021] jbd2_journal_start+0x3c/0x4c [ 46.033171][ T4021] ocfs2_start_trans+0x468/0x804 [ 46.034203][ T4021] ocfs2_mknod+0xe68/0x24f8 [ 46.035190][ T4021] ocfs2_mkdir+0x184/0x4c8 [ 46.036208][ T4021] vfs_mkdir+0x334/0x4e4 [ 46.037130][ T4021] do_mkdirat+0x20c/0x610 [ 46.038123][ T4021] __arm64_sys_mkdirat+0x90/0xa8 [ 46.039304][ T4021] invoke_syscall+0x98/0x2b8 [ 46.040355][ T4021] el0_svc_common+0x138/0x258 [ 46.041512][ T4021] do_el0_svc+0x58/0x14c [ 46.042546][ T4021] el0_svc+0x7c/0x1f0 [ 46.043547][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.044712][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.045836][ T4021] [ 46.045836][ T4021] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 46.047568][ T4021] down_read+0xc0/0x398 [ 46.048583][ T4021] ocfs2_start_trans+0x45c/0x804 [ 46.049681][ T4021] ocfs2_mknod+0xe68/0x24f8 [ 46.050685][ T4021] ocfs2_mkdir+0x184/0x4c8 [ 46.051664][ T4021] vfs_mkdir+0x334/0x4e4 [ 46.052655][ T4021] do_mkdirat+0x20c/0x610 [ 46.053729][ T4021] __arm64_sys_mkdirat+0x90/0xa8 [ 46.054843][ T4021] invoke_syscall+0x98/0x2b8 [ 46.055877][ T4021] el0_svc_common+0x138/0x258 [ 46.057000][ T4021] do_el0_svc+0x58/0x14c [ 46.058101][ T4021] el0_svc+0x7c/0x1f0 [ 46.059070][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.060267][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.061327][ T4021] [ 46.061327][ T4021] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 46.062851][ T4021] __lock_acquire+0x32d4/0x7638 [ 46.063946][ T4021] lock_acquire+0x240/0x77c [ 46.065038][ T4021] ocfs2_start_trans+0x2dc/0x804 [ 46.066169][ T4021] ocfs2_setattr+0x94c/0x191c [ 46.067327][ T4021] notify_change+0xa34/0xcf8 [ 46.068489][ T4021] ovl_workdir_create+0x498/0x624 [ 46.069631][ T4021] ovl_get_workdir+0x344/0x1110 [ 46.070819][ T4021] ovl_fill_super+0x15b4/0x2254 [ 46.071929][ T4021] mount_nodev+0x68/0x104 [ 46.072907][ T4021] ovl_mount+0x3c/0x50 [ 46.073804][ T4021] legacy_get_tree+0xd4/0x16c [ 46.074793][ T4021] vfs_get_tree+0x90/0x274 [ 46.075839][ T4021] do_new_mount+0x278/0x8fc [ 46.076884][ T4021] path_mount+0x594/0x101c [ 46.077999][ T4021] __arm64_sys_mount+0x510/0x5e0 [ 46.079166][ T4021] invoke_syscall+0x98/0x2b8 [ 46.080246][ T4021] el0_svc_common+0x138/0x258 [ 46.081432][ T4021] do_el0_svc+0x58/0x14c [ 46.082410][ T4021] el0_svc+0x7c/0x1f0 [ 46.083427][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.084583][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.085603][ T4021] [ 46.085603][ T4021] other info that might help us debug this: [ 46.085603][ T4021] [ 46.087789][ T4021] Chain exists of: [ 46.087789][ T4021] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 46.087789][ T4021] [ 46.090680][ T4021] Possible unsafe locking scenario: [ 46.090680][ T4021] [ 46.092176][ T4021] CPU0 CPU1 [ 46.093265][ T4021] ---- ---- [ 46.094323][ T4021] lock(&oi->ip_alloc_sem); [ 46.095213][ T4021] lock(&oi->ip_xattr_sem); [ 46.096853][ T4021] lock(&oi->ip_alloc_sem); [ 46.098278][ T4021] lock(sb_internal#2); [ 46.099164][ T4021] [ 46.099164][ T4021] *** DEADLOCK *** [ 46.099164][ T4021] [ 46.100849][ T4021] 5 locks held by syz-executor685/4021: [ 46.101914][ T4021] #0: ffff0000c5f520e0 (&type->s_umount_key#41/1){+.+.}-{3:3}, at: alloc_super+0x1b8/0x844 [ 46.104071][ T4021] #1: ffff0000cd6d2460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 46.106314][ T4021] #2: ffff0000e1c85108 (&sb->s_type->i_mutex_key#17/1){+.+.}-{3:3}, at: ovl_workdir_create+0x130/0x624 [ 46.108789][ T4021] #3: ffff0000e1c85f48 (&sb->s_type->i_mutex_key#19){+.+.}-{3:3}, at: ovl_workdir_create+0x46c/0x624 [ 46.111154][ T4021] #4: ffff0000e1c85be0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x940/0x191c [ 46.113274][ T4021] [ 46.113274][ T4021] stack backtrace: [ 46.114592][ T4021] CPU: 1 PID: 4021 Comm: syz-executor685 Not tainted 5.15.167-syzkaller #0 [ 46.116320][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.118363][ T4021] Call trace: [ 46.119013][ T4021] dump_backtrace+0x0/0x530 [ 46.119983][ T4021] show_stack+0x2c/0x3c [ 46.120806][ T4021] dump_stack_lvl+0x108/0x170 [ 46.121981][ T4021] dump_stack+0x1c/0x58 [ 46.122858][ T4021] print_circular_bug+0x150/0x1b8 [ 46.123882][ T4021] check_noncircular+0x2cc/0x378 [ 46.124904][ T4021] __lock_acquire+0x32d4/0x7638 [ 46.125929][ T4021] lock_acquire+0x240/0x77c [ 46.126898][ T4021] ocfs2_start_trans+0x2dc/0x804 [ 46.127927][ T4021] ocfs2_setattr+0x94c/0x191c [ 46.128868][ T4021] notify_change+0xa34/0xcf8 [ 46.129840][ T4021] ovl_workdir_create+0x498/0x624 [ 46.130892][ T4021] ovl_get_workdir+0x344/0x1110 [ 46.131973][ T4021] ovl_fill_super+0x15b4/0x2254 [ 46.132976][ T4021] mount_nodev+0x68/0x104 [ 46.133899][ T4021] ovl_mount+0x3c/0x50 [ 46.134824][ T4021] legacy_get_tree+0xd4/0x16c [ 46.135916][ T4021] vfs_get_tree+0x90/0x274 [ 46.136855][ T4021] do_new_mount+0x278/0x8fc [ 46.137835][ T4021] path_mount+0x594/0x101c [ 46.138767][ T4021] __arm64_sys_mount+0x510/0x5e0 [ 46.139747][ T4021] invoke_syscall+0x98/0x2b8 [ 46.140760][ T4021] el0_svc_common+0x138/0x258 [ 46.141605][ T4021] do_el0_svc+0x58/0x14c [ 46.142478][ T4021] el0_svc+0x7c/0x1f0 [ 46.143381][ T4021] el0t_64_sync_handler+0x84/0xe4 [ 46.144610][ T4021] el0t_64_sync+0x1a0/0x1a4 [ 46.146305][ T4021] overlayfs: upper fs does not support tmpfile. [ 46.148246][ T4021] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.150458][ T4021] overlayfs: upper fs missing required features.