------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 0 PID: 12556 at kernel/locking/mutex.c:582 __mutex_lock_common+0x4c4/0xca8 kernel/locking/mutex.c:582 Modules linked in: CPU: 0 PID: 12556 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mutex_lock_common+0x4c4/0xca8 kernel/locking/mutex.c:582 lr : __mutex_lock_common+0x4c4/0xca8 kernel/locking/mutex.c:582 sp : ffff800014533900 x29: ffff800014533970 x28: ffff80000ee2b000 x27: ffff800014533c79 x26: 0000000000000000 x25: ffff000116b80190 x24: 0000000000000002 x23: ffff800008d63770 x22: 0000000000000000 x21: 0000000000000000 x20: 0000000000000000 x19: ffff000116b7fec0 x18: 0000000000000262 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000012 x12: 0000000000040000 x11: 0000000000004077 x10: ffff80001baf0000 x9 : b4a2cdef8be47a00 x8 : b4a2cdef8be47a00 x7 : 4e5241575f534b43 x6 : ffff80000819545c x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000028 Call trace: __mutex_lock_common+0x4c4/0xca8 kernel/locking/mutex.c:582 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 __jfs_xattr_set+0x68/0x108 fs/jfs/xattr.c:916 jfs_xattr_set+0x58/0x70 fs/jfs/xattr.c:941 __vfs_setxattr+0x250/0x260 fs/xattr.c:182 __vfs_setxattr_noperm+0xcc/0x320 fs/xattr.c:216 __vfs_setxattr_locked+0x16c/0x194 fs/xattr.c:277 vfs_setxattr+0x174/0x280 fs/xattr.c:313 do_setxattr fs/xattr.c:600 [inline] setxattr fs/xattr.c:623 [inline] path_setxattr+0x354/0x414 fs/xattr.c:642 __do_sys_setxattr fs/xattr.c:658 [inline] __se_sys_setxattr fs/xattr.c:654 [inline] __arm64_sys_setxattr+0x2c/0x40 fs/xattr.c:654 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 67 hardirqs last enabled at (67): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (67): [] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194 hardirqs last disabled at (66): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (66): [] _raw_spin_lock_irqsave+0xa4/0xb4 kernel/locking/spinlock.c:162 softirqs last enabled at (8): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (6): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff000128644f80, curr 0xffff000128644f80, list not empty WARNING: CPU: 0 PID: 12556 at kernel/locking/rwsem.c:1347 __up_write+0xf8/0x184 kernel/locking/rwsem.c:1347 Modules linked in: CPU: 0 PID: 12556 Comm: syz-executor.3 Tainted: G W 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __up_write+0xf8/0x184 kernel/locking/rwsem.c:1347 lr : __up_write+0xf8/0x184 kernel/locking/rwsem.c:1347 sp : ffff8000145338a0 x29: ffff8000145338a0 x28: ffff00013b0e0000 x27: 000000000000000c x26: 000000000000000c x25: 0000000000000000 x24: ffff800014533c70 x23: ffff000116b7ff50 x22: ffff00013b0e0004 x21: ffff80000d30c000 x20: 0000000000000000 x19: ffff000116b7ff50 x18: 0000000000000038 x17: 0000000000000000 x16: 000000000000012b x15: 00000000000000f3 x14: 00000000024885fb x13: 000000000000012b x12: 0000000000040000 x11: 000000000001851e x10: ffff80001baf0000 x9 : b4a2cdef8be47a00 x8 : b4a2cdef8be47a00 x7 : 0000000000000000 x6 : ffff800008161d1c x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0001fefbecd0 x1 : 0000000100000000 x0 : 0000000000000086 Call trace: __up_write+0xf8/0x184 kernel/locking/rwsem.c:1347 up_write+0x38/0x48 kernel/locking/rwsem.c:1605 __jfs_setxattr+0x544/0x5f4 fs/jfs/xattr.c:789 __jfs_xattr_set+0x84/0x108 fs/jfs/xattr.c:917 jfs_xattr_set+0x58/0x70 fs/jfs/xattr.c:941 __vfs_setxattr+0x250/0x260 fs/xattr.c:182 __vfs_setxattr_noperm+0xcc/0x320 fs/xattr.c:216 __vfs_setxattr_locked+0x16c/0x194 fs/xattr.c:277 vfs_setxattr+0x174/0x280 fs/xattr.c:313 do_setxattr fs/xattr.c:600 [inline] setxattr fs/xattr.c:623 [inline] path_setxattr+0x354/0x414 fs/xattr.c:642 __do_sys_setxattr fs/xattr.c:658 [inline] __se_sys_setxattr fs/xattr.c:654 [inline] __arm64_sys_setxattr+0x2c/0x40 fs/xattr.c:654 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 67 hardirqs last enabled at (67): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (67): [] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194 hardirqs last disabled at (66): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (66): [] _raw_spin_lock_irqsave+0xa4/0xb4 kernel/locking/spinlock.c:162 softirqs last enabled at (8): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (6): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ERROR: (device loop3): diWrite: ixpxd invalid ERROR: (device loop3): remounting filesystem as read-only ERROR: (device loop3): txAbort: