Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. executing program [ 73.913856][ T4250] loop0: detected capacity change from 0 to 32768 [ 73.926210][ T4250] (syz-executor560,4250,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.941966][ T4250] (syz-executor560,4250,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.967293][ T4250] JBD2: Ignoring recovery information on journal [ 73.999521][ T4250] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.016970][ T9] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 74.059949][ T4250] [ 74.062341][ T4250] ====================================================== [ 74.069464][ T4250] WARNING: possible circular locking dependency detected [ 74.076513][ T4250] 6.1.138-syzkaller #0 Not tainted [ 74.081638][ T4250] ------------------------------------------------------ [ 74.088760][ T4250] syz-executor560/4250 is trying to acquire lock: [ 74.095188][ T4250] ffff88807e077938 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: __flush_workqueue+0x124/0x1380 [ 74.105482][ T4250] [ 74.105482][ T4250] but task is already holding lock: [ 74.112865][ T4250] ffff8880731d20e0 (&type->s_umount_key#45){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 74.122755][ T4250] [ 74.122755][ T4250] which lock already depends on the new lock. [ 74.122755][ T4250] [ 74.133182][ T4250] [ 74.133182][ T4250] the existing dependency chain (in reverse order) is: [ 74.142225][ T4250] [ 74.142225][ T4250] -> #2 (&type->s_umount_key#45){++++}-{3:3}: [ 74.150611][ T4250] down_read+0x42/0x2d0 [ 74.155355][ T4250] ocfs2_finish_quota_recovery+0x129/0x1e40 [ 74.161800][ T4250] ocfs2_complete_recovery+0x157c/0x23a0 [ 74.167959][ T4250] process_one_work+0x898/0x1160 [ 74.173425][ T4250] worker_thread+0xaa2/0x1250 [ 74.178634][ T4250] kthread+0x29d/0x330 [ 74.183233][ T4250] ret_from_fork+0x1f/0x30 [ 74.188189][ T4250] [ 74.188189][ T4250] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}: [ 74.198360][ T4250] process_one_work+0x7d9/0x1160 [ 74.203865][ T4250] worker_thread+0xaa2/0x1250 [ 74.209078][ T4250] kthread+0x29d/0x330 [ 74.213776][ T4250] ret_from_fork+0x1f/0x30 [ 74.218721][ T4250] [ 74.218721][ T4250] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}: [ 74.227068][ T4250] __lock_acquire+0x2cf8/0x7c50 [ 74.232460][ T4250] lock_acquire+0x1b4/0x490 [ 74.237501][ T4250] __flush_workqueue+0x13d/0x1380 [ 74.243063][ T4250] ocfs2_shutdown_local_alloc+0xe4/0xa10 [ 74.249256][ T4250] ocfs2_dismount_volume+0x1f4/0x920 [ 74.255062][ T4250] generic_shutdown_super+0x130/0x340 [ 74.260963][ T4250] kill_block_super+0x7c/0xe0 [ 74.266193][ T4250] deactivate_locked_super+0x93/0xf0 [ 74.272096][ T4250] cleanup_mnt+0x463/0x4f0 [ 74.277076][ T4250] task_work_run+0x1ca/0x250 [ 74.282184][ T4250] do_exit+0x936/0x2400 [ 74.286863][ T4250] do_group_exit+0x217/0x2d0 [ 74.291991][ T4250] __x64_sys_exit_group+0x3b/0x40 [ 74.297558][ T4250] do_syscall_64+0x4c/0xa0 [ 74.302503][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.308924][ T4250] [ 74.308924][ T4250] other info that might help us debug this: [ 74.308924][ T4250] [ 74.319232][ T4250] Chain exists of: [ 74.319232][ T4250] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#45 [ 74.319232][ T4250] [ 74.336091][ T4250] Possible unsafe locking scenario: [ 74.336091][ T4250] [ 74.343539][ T4250] CPU0 CPU1 [ 74.348900][ T4250] ---- ---- [ 74.354263][ T4250] lock(&type->s_umount_key#45); [ 74.359383][ T4250] lock((work_completion)(&journal->j_recovery_work)); [ 74.368843][ T4250] lock(&type->s_umount_key#45); [ 74.376393][ T4250] lock((wq_completion)ocfs2_wq); [ 74.381500][ T4250] [ 74.381500][ T4250] *** DEADLOCK *** [ 74.381500][ T4250] [ 74.389638][ T4250] 1 lock held by syz-executor560/4250: [ 74.395083][ T4250] #0: ffff8880731d20e0 (&type->s_umount_key#45){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 74.405278][ T4250] [ 74.405278][ T4250] stack backtrace: [ 74.411180][ T4250] CPU: 0 PID: 4250 Comm: syz-executor560 Not tainted 6.1.138-syzkaller #0 [ 74.419854][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 74.429923][ T4250] Call Trace: [ 74.433194][ T4250] [ 74.436139][ T4250] dump_stack_lvl+0x168/0x22e [ 74.440832][ T4250] ? load_image+0x3b0/0x3b0 [ 74.445416][ T4250] ? show_regs_print_info+0x12/0x12 [ 74.450618][ T4250] ? print_circular_bug+0x12b/0x1a0 [ 74.455845][ T4250] check_noncircular+0x274/0x310 [ 74.460802][ T4250] ? add_chain_block+0x940/0x940 [ 74.465746][ T4250] ? lockdep_lock+0xdc/0x1e0 [ 74.470360][ T4250] ? _find_first_zero_bit+0xcf/0x100 [ 74.475839][ T4250] __lock_acquire+0x2cf8/0x7c50 [ 74.480738][ T4250] ? lockdep_lock+0x1e0/0x1e0 [ 74.485434][ T4250] ? verify_lock_unused+0x140/0x140 [ 74.490642][ T4250] ? debug_object_assert_init+0x1ed/0x2f0 [ 74.496387][ T4250] ? __lock_acquire+0x7c50/0x7c50 [ 74.501412][ T4250] ? __rwlock_init+0x140/0x140 [ 74.506195][ T4250] ? debug_object_activate+0x490/0x490 [ 74.511660][ T4250] ? memset+0x1e/0x40 [ 74.515829][ T4250] lock_acquire+0x1b4/0x490 [ 74.520336][ T4250] ? __flush_workqueue+0x124/0x1380 [ 74.525541][ T4250] ? debug_object_assert_init+0x1ed/0x2f0 [ 74.531287][ T4250] ? read_lock_is_recursive+0x10/0x10 [ 74.536898][ T4250] ? __init_swait_queue_head+0xa5/0x150 [ 74.542521][ T4250] ? __flush_workqueue+0x124/0x1380 [ 74.547735][ T4250] __flush_workqueue+0x13d/0x1380 [ 74.552781][ T4250] ? __flush_workqueue+0x124/0x1380 [ 74.557993][ T4250] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.563983][ T4250] ? lock_chain_count+0x20/0x20 [ 74.568834][ T4250] ? __flush_work+0x978/0xa60 [ 74.573517][ T4250] ? rcu_work_rcufn+0x110/0x110 [ 74.578372][ T4250] ? __cancel_work+0x1f4/0x2d0 [ 74.583149][ T4250] ? cancel_work+0x20/0x20 [ 74.587572][ T4250] ? mark_lock+0x94/0x320 [ 74.591900][ T4250] ocfs2_shutdown_local_alloc+0xe4/0xa10 [ 74.597550][ T4250] ? lock_chain_count+0x20/0x20 [ 74.602409][ T4250] ? __cancel_work_timer+0x331/0x520 [ 74.607700][ T4250] ? ocfs2_local_alloc_count_bits+0x290/0x290 [ 74.613776][ T4250] ? __cancel_work_timer+0x470/0x520 [ 74.619067][ T4250] ? cancel_work_sync+0x20/0x20 [ 74.623954][ T4250] ? _atomic_dec_and_lock+0x8f/0x110 [ 74.629241][ T4250] ? _atomic_dec_and_lock+0x8f/0x110 [ 74.634532][ T4250] ? iput+0x3c0/0x980 [ 74.638534][ T4250] ? ocfs2_disable_quotas+0x1be/0x210 [ 74.643928][ T4250] ocfs2_dismount_volume+0x1f4/0x920 [ 74.649226][ T4250] ? ocfs2_enable_quotas+0x440/0x440 [ 74.654524][ T4250] ? clear_inode+0x150/0x150 [ 74.659126][ T4250] ? ocfs2_free_inode+0x20/0x20 [ 74.663988][ T4250] generic_shutdown_super+0x130/0x340 [ 74.669365][ T4250] kill_block_super+0x7c/0xe0 [ 74.674045][ T4250] deactivate_locked_super+0x93/0xf0 [ 74.679330][ T4250] cleanup_mnt+0x463/0x4f0 [ 74.683748][ T4250] ? lockdep_hardirqs_on+0x94/0x140 [ 74.688954][ T4250] task_work_run+0x1ca/0x250 [ 74.693632][ T4250] ? task_work_cancel+0x230/0x230 [ 74.698680][ T4250] ? do_exit+0x931/0x2400 [ 74.703117][ T4250] ? kmem_cache_free+0xf7/0x290 [ 74.708166][ T4250] do_exit+0x936/0x2400 [ 74.712328][ T4250] ? put_task_struct+0x80/0x80 [ 74.717100][ T4250] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.723093][ T4250] ? lock_chain_count+0x20/0x20 [ 74.727962][ T4250] ? _raw_spin_lock_irq+0xab/0xe0 [ 74.732994][ T4250] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 74.738372][ T4250] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.744357][ T4250] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.749567][ T4250] ? lockdep_hardirqs_on+0x94/0x140 [ 74.754777][ T4250] do_group_exit+0x217/0x2d0 [ 74.759382][ T4250] __x64_sys_exit_group+0x3b/0x40 [ 74.764430][ T4250] do_syscall_64+0x4c/0xa0 [ 74.768898][ T4250] ? clear_bhb_loop+0x45/0xa0 [ 74.773660][ T4250] ? clear_bhb_loop+0x45/0xa0 [ 74.778404][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.784321][ T4250] RIP: 0033:0x7f400eb89c09 [ 74.788754][ T4250] Code: Unable to access opcode bytes at 0x7f400eb89bdf. [ 74.795853][ T4250] RSP: 002b:00007ffec9f7e7d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.804289][ T4250] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f400eb89c09 [ 74.812281][ T4250] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 74.820289][ T4250] RBP: 00007f400ec0a2b0 R08: ffffffffffffffb8 R09: 0000000000004701 [ 74.828348][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f400ec0a2b0 [ 74.836404][ T4250] R13: 0000000000000000 R14: 00007f400ec0b020 R15: 00007f400eb58130 [ 74.844469][ T4250] [ 74.854858][ T4250] ocfs2: Unmounting device (7,0) on (node local)