Warning: Permanently added '[localhost]:29583' (ED25519) to the list of known hosts. executing program syzkaller login: [ 80.284320][ T5309] loop0: detected capacity change from 0 to 32768 [ 80.297352][ T5309] ======================================================= [ 80.297352][ T5309] WARNING: The mand mount option has been deprecated and [ 80.297352][ T5309] and is ignored by this kernel. Remove the mand [ 80.297352][ T5309] option from the mount to silence this warning. [ 80.297352][ T5309] ======================================================= [ 80.371137][ T5309] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 80.384055][ T12] (kworker/u4:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 80.398328][ T5309] [ 80.399407][ T5309] ====================================================== [ 80.401885][ T5309] WARNING: possible circular locking dependency detected [ 80.404184][ T5309] 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 Not tainted [ 80.406568][ T5309] ------------------------------------------------------ [ 80.409941][ T5309] syz-executor386/5309 is trying to acquire lock: [ 80.412294][ T5309] ffff888044703120 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.416841][ T5309] [ 80.416841][ T5309] but task is already holding lock: [ 80.419847][ T5309] ffff8880447031b8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 80.424410][ T5309] [ 80.424410][ T5309] which lock already depends on the new lock. [ 80.424410][ T5309] [ 80.428563][ T5309] [ 80.428563][ T5309] the existing dependency chain (in reverse order) is: [ 80.432409][ T5309] [ 80.432409][ T5309] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 80.435817][ T5309] lock_acquire+0x120/0x360 [ 80.438324][ T5309] down_read+0x46/0x2e0 [ 80.440702][ T5309] ocfs2_init_acl+0x2f9/0x720 [ 80.443265][ T5309] ocfs2_mknod+0x1321/0x2050 [ 80.445668][ T5309] ocfs2_create+0x1a5/0x440 [ 80.447963][ T5309] path_openat+0x14f4/0x3830 [ 80.450428][ T5309] do_filp_open+0x1fa/0x410 [ 80.452636][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.454910][ T5309] __x64_sys_openat+0x138/0x170 [ 80.457221][ T5309] do_syscall_64+0xf6/0x210 [ 80.459490][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.462333][ T5309] [ 80.462333][ T5309] -> #3 (jbd2_handle){.+.+}-{0:0}: [ 80.465217][ T5309] lock_acquire+0x120/0x360 [ 80.467476][ T5309] start_this_handle+0x1fa7/0x21c0 [ 80.469902][ T5309] jbd2__journal_start+0x2c1/0x5b0 [ 80.472131][ T5309] jbd2_journal_start+0x2a/0x40 [ 80.474304][ T5309] ocfs2_start_trans+0x376/0x6d0 [ 80.476519][ T5309] ocfs2_mknod+0xe93/0x2050 [ 80.478633][ T5309] ocfs2_create+0x1a5/0x440 [ 80.480819][ T5309] path_openat+0x14f4/0x3830 [ 80.482923][ T5309] do_filp_open+0x1fa/0x410 [ 80.484816][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.486879][ T5309] __x64_sys_openat+0x138/0x170 [ 80.489180][ T5309] do_syscall_64+0xf6/0x210 [ 80.491206][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.493906][ T5309] [ 80.493906][ T5309] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 80.497280][ T5309] lock_acquire+0x120/0x360 [ 80.499319][ T5309] down_read+0x46/0x2e0 [ 80.500955][ T5309] ocfs2_start_trans+0x36a/0x6d0 [ 80.503139][ T5309] ocfs2_mknod+0xe93/0x2050 [ 80.505423][ T5309] ocfs2_create+0x1a5/0x440 [ 80.507662][ T5309] path_openat+0x14f4/0x3830 [ 80.509800][ T5309] do_filp_open+0x1fa/0x410 [ 80.512460][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.515290][ T5309] __x64_sys_openat+0x138/0x170 [ 80.518203][ T5309] do_syscall_64+0xf6/0x210 [ 80.520506][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.523341][ T5309] [ 80.523341][ T5309] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 80.526425][ T5309] lock_acquire+0x120/0x360 [ 80.528736][ T5309] ocfs2_start_trans+0x26b/0x6d0 [ 80.531293][ T5309] ocfs2_truncate_file+0x643/0x1420 [ 80.533565][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 80.535674][ T5309] notify_change+0xb36/0xe40 [ 80.537574][ T5309] do_truncate+0x19a/0x220 [ 80.539575][ T5309] path_openat+0x306c/0x3830 [ 80.541347][ T5309] do_filp_open+0x1fa/0x410 [ 80.543175][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.545069][ T5309] __x64_sys_open+0x11e/0x150 [ 80.547302][ T5309] do_syscall_64+0xf6/0x210 [ 80.549311][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.552115][ T5309] [ 80.552115][ T5309] -> #0 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 80.555202][ T5309] validate_chain+0xb9b/0x2140 [ 80.557468][ T5309] __lock_acquire+0xaac/0xd20 [ 80.559640][ T5309] lock_acquire+0x120/0x360 [ 80.561760][ T5309] down_write+0x96/0x1f0 [ 80.563743][ T5309] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.566299][ T5309] ocfs2_truncate_file+0xda0/0x1420 [ 80.568825][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 80.571058][ T5309] notify_change+0xb36/0xe40 [ 80.573182][ T5309] do_truncate+0x19a/0x220 [ 80.575326][ T5309] path_openat+0x306c/0x3830 [ 80.577593][ T5309] do_filp_open+0x1fa/0x410 [ 80.579711][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.582000][ T5309] __x64_sys_open+0x11e/0x150 [ 80.584250][ T5309] do_syscall_64+0xf6/0x210 [ 80.586511][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.589125][ T5309] [ 80.589125][ T5309] other info that might help us debug this: [ 80.589125][ T5309] [ 80.593606][ T5309] Chain exists of: [ 80.593606][ T5309] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 80.593606][ T5309] [ 80.599150][ T5309] Possible unsafe locking scenario: [ 80.599150][ T5309] [ 80.602410][ T5309] CPU0 CPU1 [ 80.604745][ T5309] ---- ---- [ 80.606747][ T5309] lock(&oi->ip_xattr_sem); [ 80.608480][ T5309] lock(jbd2_handle); [ 80.611284][ T5309] lock(&oi->ip_xattr_sem); [ 80.614466][ T5309] lock(&oi->ip_alloc_sem); [ 80.617069][ T5309] [ 80.617069][ T5309] *** DEADLOCK *** [ 80.617069][ T5309] [ 80.620587][ T5309] 3 locks held by syz-executor386/5309: [ 80.622856][ T5309] #0: ffff888036392420 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 80.626662][ T5309] #1: ffff888044703480 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: do_truncate+0x186/0x220 [ 80.630869][ T5309] #2: ffff8880447031b8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320 [ 80.635398][ T5309] [ 80.635398][ T5309] stack backtrace: [ 80.637828][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor386 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 80.637844][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.637851][ T5309] Call Trace: [ 80.637860][ T5309] [ 80.637866][ T5309] dump_stack_lvl+0x189/0x250 [ 80.637881][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.637890][ T5309] ? __pfx__printk+0x10/0x10 [ 80.637897][ T5309] ? print_lock_name+0xde/0x100 [ 80.637909][ T5309] print_circular_bug+0x2ee/0x310 [ 80.637918][ T5309] check_noncircular+0x134/0x160 [ 80.637925][ T5309] validate_chain+0xb9b/0x2140 [ 80.637935][ T5309] __lock_acquire+0xaac/0xd20 [ 80.637945][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.637954][ T5309] lock_acquire+0x120/0x360 [ 80.637963][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.637973][ T5309] down_write+0x96/0x1f0 [ 80.637985][ T5309] ? ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.637994][ T5309] ? __pfx_down_write+0x10/0x10 [ 80.638004][ T5309] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 80.638013][ T5309] ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10 [ 80.638022][ T5309] ? up_write+0x1c4/0x420 [ 80.638029][ T5309] ocfs2_truncate_file+0xda0/0x1420 [ 80.638039][ T5309] ? __pfx_ocfs2_truncate_file+0x10/0x10 [ 80.638045][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 80.638053][ T5309] ? _raw_spin_unlock+0x28/0x50 [ 80.638064][ T5309] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 80.638073][ T5309] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 80.638081][ T5309] ? ocfs2_rw_lock+0x13a/0x240 [ 80.638088][ T5309] ? __pfx___dquot_initialize+0x10/0x10 [ 80.638098][ T5309] ? __pfx_ocfs2_rw_lock+0x10/0x10 [ 80.638108][ T5309] ? setattr_prepare+0x1e7/0xac0 [ 80.638122][ T5309] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 80.638139][ T5309] ocfs2_setattr+0x1520/0x1b40 [ 80.638151][ T5309] ? __pfx_ocfs2_setattr+0x10/0x10 [ 80.638161][ T5309] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 80.638178][ T5309] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 80.638187][ T5309] ? __lock_acquire+0xaac/0xd20 [ 80.638195][ T5309] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 80.638206][ T5309] ? current_time+0x222/0x370 [ 80.638218][ T5309] ? evm_inode_setattr+0x1b6/0x7d0 [ 80.638231][ T5309] ? __pfx_current_time+0x10/0x10 [ 80.638246][ T5309] ? try_break_deleg+0x79/0x130 [ 80.638253][ T5309] ? __pfx_ocfs2_setattr+0x10/0x10 [ 80.638260][ T5309] notify_change+0xb36/0xe40 [ 80.638268][ T5309] do_truncate+0x19a/0x220 [ 80.638276][ T5309] ? __pfx_do_truncate+0x10/0x10 [ 80.638283][ T5309] ? apparmor_file_truncate+0x23e/0x2d0 [ 80.638291][ T5309] path_openat+0x306c/0x3830 [ 80.638298][ T5309] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.638305][ T5309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.638316][ T5309] ? __pfx_path_openat+0x10/0x10 [ 80.638321][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.638330][ T5309] do_filp_open+0x1fa/0x410 [ 80.638337][ T5309] ? __pfx_do_filp_open+0x10/0x10 [ 80.638346][ T5309] ? _raw_spin_unlock+0x28/0x50 [ 80.638356][ T5309] ? alloc_fd+0x64c/0x6c0 [ 80.638368][ T5309] do_sys_openat2+0x121/0x1c0 [ 80.638379][ T5309] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.638388][ T5309] ? rcu_is_watching+0x15/0xb0 [ 80.638398][ T5309] __x64_sys_open+0x11e/0x150 [ 80.638406][ T5309] do_syscall_64+0xf6/0x210 [ 80.638415][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 80.638422][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.638429][ T5309] RIP: 0033:0x7f63bf734ed9 [ 80.638437][ T5309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.638445][ T5309] RSP: 002b:00007ffe01da8048 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 80.638456][ T5309] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f63bf734ed9 [ 80.638462][ T5309] RDX: 0000000000000000 RSI: 0000000000060f40 RDI: 0000200000000000 [ 80.638469][ T5309] RBP: 0032656c69662f2e R08: 0000555560abd4c0 R09: 0000555560abd4c0 [ 80.638476][ T5309] R10: 000000000000442a R11: 0000000000000206 R12: 00007ffe01da8070 [ 80.638483][ T5309] R13: 00007ffe01da8298 R14: 431bde82d7b634db R15: 00007f63bf77e03b [ 80.638493][ T5309] executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 10:31:19 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d42e890 R8 =ffff8880009c8237 R9 =1ffff11000139046 R10=dffffc0000000000 R11=ffffffff853e17f0 R12=dffffc0000000000 R13=ffffffff99850c8d R14=ffffffff99b55c40 R15=0000000000000000 RIP=ffffffff853e186c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560abc380 ffffffff 00c00000 GS =0000 ffff88808d6c2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0c671909c0 CR3=0000000040319000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a2315b77b8ade7f 40dd0299a0fcbd2c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51e9f8908c31a160 21df7c32faa3160a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002875211f8875 00004461c933c461 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000081ba053281b 0000141f97a5941f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d374101f233b2cd 62eb78fdca5483cc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b32d4ec44a6d9cd 40dd0299a0fcbd2c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d374101f233b2cd 62eb78fdca5483cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b32d4ec44a6d9cd 40dd0299a0fcbd2c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4883baedaf03cbb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1a44dde03a07dc4 e52d6f8431bbbd26 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0b0a090803020100 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 210fbf35c91bfb4e 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b0a090803020100 ffffffffffffffff ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000327366636f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002c 3030303030303030 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 3030303030303030 3d6d75746e617571 5f656d6974612c73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 303030303d6c6576 656c5f767365725f 7269642c37303030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000