Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. executing program [ 40.966589][ T3959] loop0: detected capacity change from 0 to 8192 [ 41.042826][ T3959] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 41.045324][ T3959] REISERFS (device loop0): using ordered data mode [ 41.046941][ T3959] reiserfs: using flush barriers [ 41.049226][ T3959] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.054045][ T3959] REISERFS (device loop0): checking transaction log (loop0) [ 41.057994][ T3959] REISERFS (device loop0): Using tea hash to sort names [ 41.060554][ T3959] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 41.064267][ T3959] [ 41.064942][ T3959] ====================================================== [ 41.066737][ T3959] WARNING: possible circular locking dependency detected [ 41.068535][ T3959] 5.15.156-syzkaller #0 Not tainted [ 41.069824][ T3959] ------------------------------------------------------ [ 41.071651][ T3959] syz-executor355/3959 is trying to acquire lock: [ 41.073355][ T3959] ffff80001ca0c0f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_begin_r+0x2e8/0xe3c [ 41.075857][ T3959] [ 41.075857][ T3959] but task is already holding lock: [ 41.077772][ T3959] ffff0000c9a6e460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 41.080168][ T3959] [ 41.080168][ T3959] which lock already depends on the new lock. [ 41.080168][ T3959] [ 41.082902][ T3959] [ 41.082902][ T3959] the existing dependency chain (in reverse order) is: [ 41.085224][ T3959] [ 41.085224][ T3959] -> #2 (sb_writers#8){.+.+}-{0:0}: [ 41.087120][ T3959] sb_start_write+0xf0/0x3ac [ 41.088393][ T3959] mnt_want_write_file+0x64/0x1e8 [ 41.089842][ T3959] reiserfs_ioctl+0x188/0x4b8 [ 41.091217][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 41.092606][ T3959] invoke_syscall+0x98/0x2b8 [ 41.093980][ T3959] el0_svc_common+0x138/0x258 [ 41.095397][ T3959] do_el0_svc+0x58/0x14c [ 41.096689][ T3959] el0_svc+0x7c/0x1f0 [ 41.097903][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 41.099366][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 41.100676][ T3959] [ 41.100676][ T3959] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 41.102599][ T3959] __mutex_lock_common+0x194/0x2154 [ 41.104004][ T3959] mutex_lock_nested+0xa4/0xf8 [ 41.105423][ T3959] reiserfs_write_lock_nested+0x68/0xd8 [ 41.107015][ T3959] do_journal_begin_r+0x2f4/0xe3c [ 41.108495][ T3959] journal_begin+0x110/0x2f4 [ 41.109783][ T3959] reiserfs_fill_super+0x13c0/0x1e8c [ 41.111350][ T3959] mount_bdev+0x274/0x370 [ 41.112574][ T3959] get_super_block+0x44/0x58 [ 41.113908][ T3959] legacy_get_tree+0xd4/0x16c [ 41.115231][ T3959] vfs_get_tree+0x90/0x274 [ 41.116513][ T3959] do_new_mount+0x278/0x8fc [ 41.117765][ T3959] path_mount+0x594/0x101c [ 41.118986][ T3959] __arm64_sys_mount+0x510/0x5e0 [ 41.120369][ T3959] invoke_syscall+0x98/0x2b8 [ 41.121717][ T3959] el0_svc_common+0x138/0x258 [ 41.123085][ T3959] do_el0_svc+0x58/0x14c [ 41.124294][ T3959] el0_svc+0x7c/0x1f0 [ 41.125500][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 41.126985][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 41.128306][ T3959] [ 41.128306][ T3959] -> #0 (&journal->j_mutex){+.+.}-{3:3}: [ 41.130233][ T3959] __lock_acquire+0x32d4/0x7638 [ 41.131633][ T3959] lock_acquire+0x240/0x77c [ 41.132985][ T3959] __mutex_lock_common+0x194/0x2154 [ 41.134478][ T3959] mutex_lock_nested+0xa4/0xf8 [ 41.135821][ T3959] do_journal_begin_r+0x2e8/0xe3c [ 41.137266][ T3959] journal_begin+0x110/0x2f4 [ 41.138624][ T3959] reiserfs_dirty_inode+0x104/0x204 [ 41.140130][ T3959] __mark_inode_dirty+0x2b0/0x10f4 [ 41.141641][ T3959] reiserfs_ioctl+0x3c0/0x4b8 [ 41.142953][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 41.144366][ T3959] invoke_syscall+0x98/0x2b8 [ 41.145687][ T3959] el0_svc_common+0x138/0x258 [ 41.147024][ T3959] do_el0_svc+0x58/0x14c [ 41.148351][ T3959] el0_svc+0x7c/0x1f0 [ 41.149554][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 41.151023][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 41.152316][ T3959] [ 41.152316][ T3959] other info that might help us debug this: [ 41.152316][ T3959] [ 41.154911][ T3959] Chain exists of: [ 41.154911][ T3959] &journal->j_mutex --> &sbi->lock --> sb_writers#8 [ 41.154911][ T3959] [ 41.158260][ T3959] Possible unsafe locking scenario: [ 41.158260][ T3959] [ 41.160145][ T3959] CPU0 CPU1 [ 41.161607][ T3959] ---- ---- [ 41.163000][ T3959] lock(sb_writers#8); [ 41.164092][ T3959] lock(&sbi->lock); [ 41.165783][ T3959] lock(sb_writers#8); [ 41.167442][ T3959] lock(&journal->j_mutex); [ 41.168645][ T3959] [ 41.168645][ T3959] *** DEADLOCK *** [ 41.168645][ T3959] [ 41.170890][ T3959] 1 lock held by syz-executor355/3959: [ 41.172384][ T3959] #0: ffff0000c9a6e460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 41.174982][ T3959] [ 41.174982][ T3959] stack backtrace: [ 41.176577][ T3959] CPU: 1 PID: 3959 Comm: syz-executor355 Not tainted 5.15.156-syzkaller #0 [ 41.178843][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 41.181506][ T3959] Call trace: [ 41.182382][ T3959] dump_backtrace+0x0/0x530 [ 41.183579][ T3959] show_stack+0x2c/0x3c [ 41.184667][ T3959] dump_stack_lvl+0x108/0x170 [ 41.185851][ T3959] dump_stack+0x1c/0x58 [ 41.186893][ T3959] print_circular_bug+0x150/0x1b8 [ 41.188191][ T3959] check_noncircular+0x2cc/0x378 [ 41.189491][ T3959] __lock_acquire+0x32d4/0x7638 [ 41.190779][ T3959] lock_acquire+0x240/0x77c [ 41.191944][ T3959] __mutex_lock_common+0x194/0x2154 [ 41.193245][ T3959] mutex_lock_nested+0xa4/0xf8 [ 41.194519][ T3959] do_journal_begin_r+0x2e8/0xe3c [ 41.195804][ T3959] journal_begin+0x110/0x2f4 [ 41.197073][ T3959] reiserfs_dirty_inode+0x104/0x204 [ 41.198408][ T3959] __mark_inode_dirty+0x2b0/0x10f4 [ 41.199703][ T3959] reiserfs_ioctl+0x3c0/0x4b8 [ 41.200935][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 41.202205][ T3959] invoke_syscall+0x98/0x2b8 [ 41.203351][ T3959] el0_svc_common+0x138/0x258 [ 41.204590][ T3959] do_el0_svc+0x58/0x14c [ 41.205690][ T3959] el0_svc+0x7c/0x1f0 [ 41.206691][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 41.208082][ T3959] el0t_64_sync+0x1a0/0x1a4