Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. executing program [ 70.053596][ T4244] loop0: detected capacity change from 0 to 32768 [ 70.077403][ T4244] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 70.094846][ T4244] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 70.114153][ T4244] [ 70.116536][ T4244] ====================================================== [ 70.123568][ T4244] WARNING: possible circular locking dependency detected [ 70.130599][ T4244] 6.1.135-syzkaller #0 Not tainted [ 70.135714][ T4244] ------------------------------------------------------ [ 70.142731][ T4244] syz-executor173/4244 is trying to acquire lock: [ 70.149171][ T4244] ffff888074311808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 70.162541][ T4244] [ 70.162541][ T4244] but task is already holding lock: [ 70.169985][ T4244] ffff888074313ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 70.179466][ T4244] [ 70.179466][ T4244] which lock already depends on the new lock. [ 70.179466][ T4244] [ 70.189871][ T4244] [ 70.189871][ T4244] the existing dependency chain (in reverse order) is: [ 70.198889][ T4244] [ 70.198889][ T4244] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 70.206716][ T4244] down_read+0x42/0x2d0 [ 70.211400][ T4244] ocfs2_init_acl+0x2fb/0x720 [ 70.216597][ T4244] ocfs2_mknod+0x1463/0x2350 [ 70.221707][ T4244] ocfs2_create+0x1b6/0x4a0 [ 70.226727][ T4244] path_openat+0x1187/0x2e70 [ 70.231838][ T4244] do_filp_open+0x1c1/0x3c0 [ 70.236866][ T4244] do_sys_openat2+0x142/0x490 [ 70.242072][ T4244] __x64_sys_openat+0x135/0x160 [ 70.247443][ T4244] do_syscall_64+0x4c/0xa0 [ 70.252380][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.258797][ T4244] [ 70.258797][ T4244] -> #4 (jbd2_handle){++++}-{0:0}: [ 70.266090][ T4244] start_this_handle+0x1f49/0x2150 [ 70.271822][ T4244] jbd2__journal_start+0x2b7/0x5a0 [ 70.277448][ T4244] jbd2_journal_start+0x26/0x30 [ 70.282814][ T4244] ocfs2_start_trans+0x372/0x6c0 [ 70.288269][ T4244] ocfs2_mknod+0xe6a/0x2350 [ 70.293289][ T4244] ocfs2_create+0x1b6/0x4a0 [ 70.298319][ T4244] path_openat+0x1187/0x2e70 [ 70.303427][ T4244] do_filp_open+0x1c1/0x3c0 [ 70.308447][ T4244] do_sys_openat2+0x142/0x490 [ 70.313646][ T4244] __x64_sys_openat+0x135/0x160 [ 70.319018][ T4244] do_syscall_64+0x4c/0xa0 [ 70.323962][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.330377][ T4244] [ 70.330377][ T4244] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 70.338884][ T4244] down_read+0x42/0x2d0 [ 70.343563][ T4244] ocfs2_start_trans+0x366/0x6c0 [ 70.349026][ T4244] ocfs2_mknod+0xe6a/0x2350 [ 70.354046][ T4244] ocfs2_create+0x1b6/0x4a0 [ 70.359066][ T4244] path_openat+0x1187/0x2e70 [ 70.364260][ T4244] do_filp_open+0x1c1/0x3c0 [ 70.369295][ T4244] do_sys_openat2+0x142/0x490 [ 70.374495][ T4244] __x64_sys_openat+0x135/0x160 [ 70.379957][ T4244] do_syscall_64+0x4c/0xa0 [ 70.384893][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.391318][ T4244] [ 70.391318][ T4244] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 70.398789][ T4244] ocfs2_start_trans+0x267/0x6c0 [ 70.404241][ T4244] ocfs2_mknod+0xe6a/0x2350 [ 70.409265][ T4244] ocfs2_create+0x1b6/0x4a0 [ 70.414288][ T4244] path_openat+0x1187/0x2e70 [ 70.419393][ T4244] do_filp_open+0x1c1/0x3c0 [ 70.424410][ T4244] do_sys_openat2+0x142/0x490 [ 70.429609][ T4244] __x64_sys_openat+0x135/0x160 [ 70.434979][ T4244] do_syscall_64+0x4c/0xa0 [ 70.439929][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.446354][ T4244] [ 70.446354][ T4244] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 70.456865][ T4244] down_write+0x36/0x60 [ 70.461544][ T4244] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 70.468224][ T4244] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 70.475071][ T4244] ocfs2_mknod+0xe18/0x2350 [ 70.480090][ T4244] ocfs2_create+0x1b6/0x4a0 [ 70.485120][ T4244] path_openat+0x1187/0x2e70 [ 70.490229][ T4244] do_filp_open+0x1c1/0x3c0 [ 70.495246][ T4244] do_sys_openat2+0x142/0x490 [ 70.500444][ T4244] __x64_sys_openat+0x135/0x160 [ 70.505814][ T4244] do_syscall_64+0x4c/0xa0 [ 70.510750][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.517168][ T4244] [ 70.517168][ T4244] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 70.527680][ T4244] __lock_acquire+0x2cf8/0x7c50 [ 70.533052][ T4244] lock_acquire+0x1b4/0x490 [ 70.538072][ T4244] down_write+0x36/0x60 [ 70.542756][ T4244] ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 70.549164][ T4244] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 70.556017][ T4244] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 70.562181][ T4244] ocfs2_xattr_set+0xb69/0x11e0 [ 70.567561][ T4244] __vfs_setxattr+0x3e0/0x420 [ 70.572779][ T4244] __vfs_setxattr_noperm+0x129/0x5e0 [ 70.578604][ T4244] vfs_setxattr+0x168/0x2f0 [ 70.583641][ T4244] setxattr+0x2b2/0x2d0 [ 70.588440][ T4244] __se_sys_fsetxattr+0x15e/0x1d0 [ 70.593996][ T4244] do_syscall_64+0x4c/0xa0 [ 70.599018][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.605436][ T4244] [ 70.605436][ T4244] other info that might help us debug this: [ 70.605436][ T4244] [ 70.615657][ T4244] Chain exists of: [ 70.615657][ T4244] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 70.615657][ T4244] [ 70.631497][ T4244] Possible unsafe locking scenario: [ 70.631497][ T4244] [ 70.638936][ T4244] CPU0 CPU1 [ 70.644291][ T4244] ---- ---- [ 70.649646][ T4244] lock(&oi->ip_xattr_sem); [ 70.654232][ T4244] lock(jbd2_handle); [ 70.660813][ T4244] lock(&oi->ip_xattr_sem); [ 70.667921][ T4244] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 70.675217][ T4244] [ 70.675217][ T4244] *** DEADLOCK *** [ 70.675217][ T4244] [ 70.683352][ T4244] 3 locks held by syz-executor173/4244: [ 70.688896][ T4244] #0: ffff8880734d0460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 70.698564][ T4244] #1: ffff8880743142c8 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 70.709012][ T4244] #2: ffff888074313ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 70.718930][ T4244] [ 70.718930][ T4244] stack backtrace: [ 70.724824][ T4244] CPU: 1 PID: 4244 Comm: syz-executor173 Not tainted 6.1.135-syzkaller #0 [ 70.733333][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.743403][ T4244] Call Trace: [ 70.746679][ T4244] [ 70.749607][ T4244] dump_stack_lvl+0x168/0x22e [ 70.754297][ T4244] ? load_image+0x3b0/0x3b0 [ 70.758796][ T4244] ? show_regs_print_info+0x12/0x12 [ 70.763999][ T4244] ? print_circular_bug+0x12b/0x1a0 [ 70.769201][ T4244] check_noncircular+0x274/0x310 [ 70.774160][ T4244] ? add_chain_block+0x940/0x940 [ 70.779098][ T4244] ? lockdep_lock+0xdc/0x1e0 [ 70.783707][ T4244] ? verify_lock_unused+0x140/0x140 [ 70.788934][ T4244] ? _find_first_zero_bit+0xcf/0x100 [ 70.794487][ T4244] __lock_acquire+0x2cf8/0x7c50 [ 70.799363][ T4244] ? verify_lock_unused+0x140/0x140 [ 70.804663][ T4244] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 70.810301][ T4244] ? do_raw_spin_lock+0x11d/0x280 [ 70.815335][ T4244] ? mutex_unlock+0x10/0x10 [ 70.819840][ T4244] ? __rwlock_init+0x140/0x140 [ 70.824610][ T4244] ? __rwlock_init+0x140/0x140 [ 70.829393][ T4244] ? do_raw_spin_unlock+0x11d/0x230 [ 70.834614][ T4244] lock_acquire+0x1b4/0x490 [ 70.839118][ T4244] ? ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 70.845273][ T4244] ? __might_sleep+0xd0/0xd0 [ 70.849867][ T4244] ? read_lock_is_recursive+0x10/0x10 [ 70.855260][ T4244] down_write+0x36/0x60 [ 70.859418][ T4244] ? ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 70.865481][ T4244] ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 70.871385][ T4244] ? mark_lock+0x94/0x320 [ 70.875734][ T4244] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.881733][ T4244] ? lock_chain_count+0x20/0x20 [ 70.886586][ T4244] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 70.892487][ T4244] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 70.898211][ T4244] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 70.904111][ T4244] ? _raw_spin_unlock+0x40/0x40 [ 70.908968][ T4244] ? stack_trace_save+0x98/0xe0 [ 70.913821][ T4244] ? __stack_depot_save+0x421/0x460 [ 70.919028][ T4244] ? kasan_set_track+0x60/0x70 [ 70.923797][ T4244] ? kasan_set_track+0x4b/0x70 [ 70.929272][ T4244] ? __kasan_kmalloc+0x8e/0xa0 [ 70.934071][ T4244] ? ocfs2_reserve_new_metadata_blocks+0x110/0x940 [ 70.940582][ T4244] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 70.946418][ T4244] ? ocfs2_xattr_set+0xb69/0x11e0 [ 70.951459][ T4244] ? __vfs_setxattr+0x3e0/0x420 [ 70.956333][ T4244] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 70.961817][ T4244] ? vfs_setxattr+0x168/0x2f0 [ 70.966587][ T4244] ? setxattr+0x2b2/0x2d0 [ 70.970919][ T4244] ? __se_sys_fsetxattr+0x15e/0x1d0 [ 70.976125][ T4244] ? do_syscall_64+0x4c/0xa0 [ 70.980732][ T4244] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.986823][ T4244] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 70.993196][ T4244] ? ocfs2_init_steal_slots+0x150/0x150 [ 70.998761][ T4244] ? ocfs2_xattr_block_set+0x2da0/0x2da0 [ 71.004404][ T4244] ocfs2_init_xattr_set_ctxt+0x2f8/0x750 [ 71.010044][ T4244] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 71.016116][ T4244] ? ocfs2_truncate_log_needs_flush+0x131/0x2e0 [ 71.022360][ T4244] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 71.028260][ T4244] ? preempt_count_add+0x8d/0x190 [ 71.033312][ T4244] ? up_write+0x1bb/0x420 [ 71.037662][ T4244] ocfs2_xattr_set+0xb69/0x11e0 [ 71.042528][ T4244] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 71.048274][ T4244] ? verify_lock_unused+0x140/0x140 [ 71.053492][ T4244] ? posix_xattr_acl+0x8f/0xb0 [ 71.058267][ T4244] ? evm_protect_xattr+0x333/0x990 [ 71.063395][ T4244] ? ocfs2_xattr_security_get+0x40/0x40 [ 71.068943][ T4244] __vfs_setxattr+0x3e0/0x420 [ 71.073633][ T4244] __vfs_setxattr_noperm+0x129/0x5e0 [ 71.079003][ T4244] vfs_setxattr+0x168/0x2f0 [ 71.083567][ T4244] ? xattr_permission+0x500/0x500 [ 71.088611][ T4244] ? strncpy_from_user+0x1e3/0x350 [ 71.093731][ T4244] setxattr+0x2b2/0x2d0 [ 71.098896][ T4244] ? path_setxattr+0x280/0x280 [ 71.104153][ T4244] ? sb_start_write+0x110/0x1c0 [ 71.109203][ T4244] ? mnt_want_write_file+0x160/0x200 [ 71.114530][ T4244] __se_sys_fsetxattr+0x15e/0x1d0 [ 71.119577][ T4244] do_syscall_64+0x4c/0xa0 [ 71.124005][ T4244] ? clear_bhb_loop+0x45/0xa0 [ 71.128680][ T4244] ? clear_bhb_loop+0x45/0xa0 [ 71.133367][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.139354][ T4244] RIP: 0033:0x7fcf84606b39 [ 71.143896][ T4244] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.163546][ T4244] RSP: 002b:00007ffccc217d68 EFLAGS: 0