syzbot has found a reproducer for the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output:
https://syzkaller.appspot.com/x/log.txt?x=1280324d880000
syz repro:
https://syzkaller.appspot.com/x/repro.syz?x=139e2929880000
C reproducer:
https://syzkaller.appspot.com/x/repro.c?x=17a3fbd3880000
mounted in repro:
https://storage.googleapis.com/syzbot-assets/05047308e430/mount_2.gz
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
======================================================
WARNING: possible circular locking dependency detected
4.19.211-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor276/8774 is trying to acquire lock:
00000000117bc54e (&fs_info->qgroup_ioctl_lock){+.+.}, at: btrfs_qgroup_inherit+0xde/0x1c60 fs/btrfs/qgroup.c:2284
but task is already holding lock:
00000000480a75fd (sb_internal#2){.+.+}, at: sb_start_intwrite include/linux/fs.h:1626 [inline]
00000000480a75fd (sb_internal#2){.+.+}, at: start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #1 (sb_internal#2){.+.+}:
sb_start_intwrite include/linux/fs.h:1626 [inline]
start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528
btrfs_quota_enable+0x169/0x10b0 fs/btrfs/qgroup.c:905
btrfs_ioctl_quota_ctl fs/btrfs/ioctl.c:5233 [inline]
btrfs_ioctl+0x622c/0x76d0 fs/btrfs/ioctl.c:6021
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
lock(sb_internal#2);
lock(&fs_info->qgroup_ioctl_lock);
lock(sb_internal#2);
lock(&fs_info->qgroup_ioctl_lock);
*** DEADLOCK ***
4 locks held by syz-executor276/8774:
#0: 000000009f53b3d9 (sb_writers#11){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline]
#0: 000000009f53b3d9 (sb_writers#11){.+.+}, at: mnt_want_write_file+0x63/0x1d0 fs/namespace.c:418
#1: 0000000089fe4360 (&type->i_mutex_dir_key#7/1){+.+.}, at: btrfs_mksubvol+0x156/0x1160 fs/btrfs/ioctl.c:975
#2: 00000000ebaa511d (&fs_info->subvol_sem){++++}, at: btrfs_mksubvol+0x35b/0x1160 fs/btrfs/ioctl.c:998
#3: 00000000480a75fd (sb_internal#2){.+.+}, at: sb_start_intwrite include/linux/fs.h:1626 [inline]
#3: 00000000480a75fd (sb_internal#2){.+.+}, at: start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528
stack backtrace:
CPU: 0 PID: 8774 Comm: syz-executor276 Not tainted 4.19.211-syzkaller #0
RIP: 0033:0x7f80121ec989
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f800ad772f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f80122767b0 RCX: 00007f80121ec989
RDX: 0000000020000a80 RSI: 0000000050009418 RDI: 0000000000000004
RBP: 00007f80122431b0 R08: 00007f800ad77700 R09: 0000000000000000
R10: 00007f800ad77700 R11: 0000000000000246 R12: 73736572706d6f63
R13: 61635f65646f6e69 R14: 5f65646f6e696f6e R15: 00007f80122767b8
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS warning (device loop0): excessive commit interval 622039222
btrfs_printk: 1 callbacks suppressed
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS error (device loop0): fail to start transaction for status update: -28