syzbot


possible deadlock in __mm_populate

Status: upstream: reported on 2023/02/16 14:58
Reported-by: syzbot+28ffa2e350d43b03996d@syzkaller.appspotmail.com
First crash: 667d, last: 667d

Sample crash report:
REISERFS (device loop2): checking transaction log (loop2)
======================================================
WARNING: possible circular locking dependency detected
4.19.211-syzkaller #0 Not tainted
------------------------------------------------------
reiserfs: using flush barriers
syz-executor.1/29734 is trying to acquire lock:
00000000c8e80ecc (&sbi->lock){+.+.}, at: reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27

but task is already holding lock:
00000000d9906243 (&mm->mmap_sem){++++}, at: __mm_populate+0x24e/0x350 mm/gup.c:1277
REISERFS (device loop2): Using r5 hash to sort names

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&mm->mmap_sem){++++}:
       reiserfs_ioctl+0xbb/0x9a0 fs/reiserfs/ioctl.c:103
       vfs_ioctl fs/ioctl.c:46 [inline]
       file_ioctl fs/ioctl.c:501 [inline]
       do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
REISERFS (device loop2): using 3.5.x disk format
       ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
REISERFS warning (device loop4): journal-1393 journal_init: journal 1st super block is invalid: 1st reserved block 18, but actual 1st block is 1
       __do_sys_ioctl fs/ioctl.c:712 [inline]
       __se_sys_ioctl fs/ioctl.c:710 [inline]
       __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
       do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&sbi->lock){+.+.}:
REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space
       __mutex_lock_common kernel/locking/mutex.c:937 [inline]
       __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078
       reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27
       reiserfs_get_block+0x1c2/0x3e40 fs/reiserfs/inode.c:688
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
       do_mpage_readpage+0x8fb/0x1ca0 fs/mpage.c:231
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
       mpage_readpages+0x33a/0x630 fs/mpage.c:404
       read_pages.isra.0+0xf6/0x5d0 mm/readahead.c:123
       __do_page_cache_readahead+0x5c6/0x6c0 mm/readahead.c:211
       ra_submit mm/internal.h:66 [inline]
       do_sync_mmap_readahead mm/filemap.c:2467 [inline]
       filemap_fault+0xce3/0x2180 mm/filemap.c:2543
       __do_fault+0x10b/0x4b0 mm/memory.c:3403
       do_read_fault mm/memory.c:3815 [inline]
       do_fault mm/memory.c:3944 [inline]
       handle_pte_fault mm/memory.c:4175 [inline]
       __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
       handle_mm_fault+0x436/0xb10 mm/memory.c:4336
       faultin_page mm/gup.c:539 [inline]
       __get_user_pages+0x6f0/0x1710 mm/gup.c:745
       populate_vma_page_range+0x200/0x290 mm/gup.c:1249
       __mm_populate+0x1ea/0x350 mm/gup.c:1297
       mm_populate include/linux/mm.h:2338 [inline]
       vm_mmap_pgoff+0x1e2/0x200 mm/util.c:362
       ksys_mmap_pgoff+0x298/0x5a0 mm/mmap.c:1580
       do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&mm->mmap_sem);
                               lock(&sbi->lock);
                               lock(&mm->mmap_sem);
REISERFS (device loop3): using ordered data mode
  lock(&sbi->lock);

 *** DEADLOCK ***

1 lock held by syz-executor.1/29734:
 #0: 00000000d9906243 (&mm->mmap_sem){++++}, at: __mm_populate+0x24e/0x350 mm/gup.c:1277

stack backtrace:
CPU: 1 PID: 29734 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222
 check_prev_add kernel/locking/lockdep.c:1866 [inline]
 check_prevs_add kernel/locking/lockdep.c:1979 [inline]
 validate_chain kernel/locking/lockdep.c:2420 [inline]
 __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
 __mutex_lock_common kernel/locking/mutex.c:937 [inline]
 __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078
 reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27
 reiserfs_get_block+0x1c2/0x3e40 fs/reiserfs/inode.c:688
 do_mpage_readpage+0x8fb/0x1ca0 fs/mpage.c:231
 mpage_readpages+0x33a/0x630 fs/mpage.c:404
 read_pages.isra.0+0xf6/0x5d0 mm/readahead.c:123
 __do_page_cache_readahead+0x5c6/0x6c0 mm/readahead.c:211
 ra_submit mm/internal.h:66 [inline]
 do_sync_mmap_readahead mm/filemap.c:2467 [inline]
 filemap_fault+0xce3/0x2180 mm/filemap.c:2543
 __do_fault+0x10b/0x4b0 mm/memory.c:3403
 do_read_fault mm/memory.c:3815 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 faultin_page mm/gup.c:539 [inline]
 __get_user_pages+0x6f0/0x1710 mm/gup.c:745
 populate_vma_page_range+0x200/0x290 mm/gup.c:1249
 __mm_populate+0x1ea/0x350 mm/gup.c:1297
 mm_populate include/linux/mm.h:2338 [inline]
 vm_mmap_pgoff+0x1e2/0x200 mm/util.c:362
 ksys_mmap_pgoff+0x298/0x5a0 mm/mmap.c:1580
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fd7faee90f9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd7f945b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fd7fb008f80 RCX: 00007fd7faee90f9
RDX: 00000000007ffffe RSI: 0000000000600000 RDI: 0000000020000000
RBP: 00007fd7faf44ae9 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe92eede5f R14: 00007fd7f945b300 R15: 0000000000022000
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
ieee80211 phy575: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): checking transaction log (loop2)
ieee80211 phy576: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop3): using ordered data mode
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
reiserfs: using flush barriers
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): using ordered data mode
REISERFS (device loop2): using ordered data mode
audit: type=1804 audit(1676559460.086:195): pid=29846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/297/file0/bus" dev="loop3" ino=2 res=1
REISERFS (device loop1): Using r5 hash to sort names
reiserfs: using flush barriers
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
audit: type=1804 audit(1676559460.106:196): pid=29846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/297/file0/bus" dev="loop3" ino=2 res=1
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
ieee80211 phy577: Selected rate control algorithm 'minstrel_ht'
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
ieee80211 phy578: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
audit: type=1804 audit(1676559460.916:197): pid=29906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/298/file0/bus" dev="loop3" ino=2 res=1
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
audit: type=1804 audit(1676559460.916:198): pid=29962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/298/file0/bus" dev="loop3" ino=2 res=1
audit: type=1804 audit(1676559460.916:199): pid=29906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/298/file0/bus" dev="loop3" ino=2 res=1
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
audit: type=1804 audit(1676559461.236:200): pid=29987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/299/bus" dev="sda1" ino=15081 res=1
audit: type=1804 audit(1676559461.276:201): pid=29987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2345759790/syzkaller.339HOe/299/bus" dev="sda1" ino=15081 res=1
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): using ordered data mode
REISERFS (device loop1): Using r5 hash to sort names
reiserfs: using flush barriers
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop4): checking transaction log (loop4)
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop5): using ordered data mode
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop4): using 3.5.x disk format
reiserfs: using flush barriers
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
ieee80211 phy579: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
ieee80211 phy580: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
REISERFS (device loop4): using ordered data mode
reiserfs: using flush barriers
reiserfs: using flush barriers
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): using ordered data mode
REISERFS (device loop4): checking transaction log (loop4)
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
reiserfs: using flush barriers
REISERFS (device loop1): using ordered data mode
REISERFS (device loop2): Using r5 hash to sort names
reiserfs: using flush barriers
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop4): using 3.5.x disk format
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
ieee80211 phy581: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): checking transaction log (loop5)
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop2): using ordered data mode
REISERFS (device loop4): using ordered data mode
reiserfs: using flush barriers
ieee80211 phy582: Selected rate control algorithm 'minstrel_ht'
reiserfs: using flush barriers
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop3): using ordered data mode
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop4): checking transaction log (loop4)
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop1): using 3.5.x disk format
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop4): using 3.5.x disk format
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): using ordered data mode
REISERFS (device loop2): checking transaction log (loop2)
reiserfs: using flush barriers
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop4): using ordered data mode
REISERFS (device loop2): using 3.5.x disk format
reiserfs: using flush barriers
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop5): using ordered data mode
REISERFS (device loop1): Using r5 hash to sort names
reiserfs: using flush barriers
REISERFS (device loop4): checking transaction log (loop4)
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
ieee80211 phy583: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop4): using 3.5.x disk format
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
ieee80211 phy584: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): using ordered data mode
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): using 3.5.x disk format
reiserfs: using flush barriers
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop4): checking transaction log (loop4)
REISERFS (device loop3): using ordered data mode
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop4): Using r5 hash to sort names
REISERFS (device loop4): using 3.5.x disk format
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
reiserfs: using flush barriers
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
ieee80211 phy585: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
ieee80211 phy586: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop4): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
reiserfs: using flush barriers
REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop4): checking transaction log (loop4)
REISERFS (device loop1): using ordered data mode
REISERFS (device loop4): Using r5 hash to sort names
reiserfs: using flush barriers
REISERFS (device loop2): Using r5 hash to sort names
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop4): using 3.5.x disk format
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option ""
REISERFS (device loop3): using ordered data mode
REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): checking transaction log (loop1)
reiserfs: using flush barriers
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "./file0"
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): using ordered data mode
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
reiserfs: using flush barriers
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop1): checking transaction log (loop1)
ieee80211 phy587: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "./file0"
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
ieee80211 phy588: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop5): using 3.5.x disk format
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): using ordered data mode
REISERFS (device loop3): checking transaction log (loop3)
reiserfs: using flush barriers
ieee80211 phy589: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop3): Using r5 hash to sort names
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "./file0"
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): using ordered data mode
REISERFS (device loop3): using ordered data mode
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
reiserfs: using flush barriers
reiserfs: using flush barriers
ieee80211 phy590: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop2): using ordered data mode
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop1): using ordered data mode
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop3): Using r5 hash to sort names
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop5): using 3.5.x disk format
reiserfs: using flush barriers
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop5): using ordered data mode
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop2): using 3.5.x disk format
REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
REISERFS (device loop3): using ordered data mode
REISERFS (device loop1): using ordered data mode
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096)
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
ieee80211 phy591: Selected rate control algorithm 'minstrel_ht'
reiserfs: using flush barriers
REISERFS (device loop3): using 3.5.x disk format
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Using r5 hash to sort names
REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4
REISERFS (device loop5): using 3.5.x disk format
netlink: 'syz-executor.0': attribute type 12 has an invalid length.
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
ieee80211 phy592: Selected rate control algorithm 'minstrel_ht'
REISERFS (device loop1): checking transaction log (loop1)
REISERFS (device loop1): Using r5 hash to sort names
REISERFS (device loop1): using 3.5.x disk format
REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096)
REISERFS (device loop2): using ordered data mode
REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "iso9660"
REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4
reiserfs: using flush barriers
ieee80211 phy593: Selected rate control algorithm 'minstrel_ht'
netlink: 'syz-executor.0': attribute type 12 has an invalid length.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/16 14:57 linux-4.19.y 3f8a27f9e27b 38b317a7 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 possible deadlock in __mm_populate
* Struck through repros no longer work on HEAD.