Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 52.525782][ T3537] loop0: detected capacity change from 0 to 8192 [ 52.536492][ T3537] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.549600][ T3537] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 52.558897][ T3537] REISERFS (device loop0): using ordered data mode [ 52.565446][ T3537] reiserfs: using flush barriers [ 52.571433][ T3537] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.588017][ T3537] REISERFS (device loop0): checking transaction log (loop0) [ 52.628872][ T3537] REISERFS (device loop0): Using r5 hash to sort names [ 52.636049][ T3537] REISERFS (device loop0): using 3.5.x disk format [ 52.643388][ T3537] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 52.655547][ T3537] [ 52.657890][ T3537] ====================================================== [ 52.664914][ T3537] WARNING: possible circular locking dependency detected [ 52.671937][ T3537] 6.1.31-syzkaller #0 Not tainted [ 52.676956][ T3537] ------------------------------------------------------ [ 52.683952][ T3537] syz-executor717/3537 is trying to acquire lock: [ 52.690341][ T3537] ffff888019fc6460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 52.699551][ T3537] [ 52.699551][ T3537] but task is already holding lock: [ 52.706894][ T3537] ffff888144354090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 52.715827][ T3537] [ 52.715827][ T3537] which lock already depends on the new lock. [ 52.715827][ T3537] [ 52.726219][ T3537] [ 52.726219][ T3537] the existing dependency chain (in reverse order) is: [ 52.735311][ T3537] [ 52.735311][ T3537] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 52.742511][ T3537] lock_acquire+0x1f8/0x5a0 [ 52.747537][ T3537] __mutex_lock_common+0x1d4/0x2520 [ 52.753268][ T3537] mutex_lock_nested+0x17/0x20 [ 52.758546][ T3537] reiserfs_write_lock+0x76/0xd0 [ 52.763995][ T3537] reiserfs_lookup+0x15c/0x4b0 [ 52.769268][ T3537] __lookup_slow+0x27e/0x3d0 [ 52.774365][ T3537] lookup_one_len+0x187/0x2d0 [ 52.779548][ T3537] reiserfs_lookup_privroot+0x85/0x1e0 [ 52.785515][ T3537] reiserfs_fill_super+0x21bd/0x2620 [ 52.791309][ T3537] mount_bdev+0x2c9/0x3f0 [ 52.796161][ T3537] legacy_get_tree+0xeb/0x180 [ 52.801367][ T3537] vfs_get_tree+0x88/0x270 [ 52.806314][ T3537] do_new_mount+0x28b/0xae0 [ 52.811348][ T3537] __se_sys_mount+0x2d5/0x3c0 [ 52.816549][ T3537] do_syscall_64+0x3d/0xb0 [ 52.821480][ T3537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.827885][ T3537] [ 52.827885][ T3537] -> #1 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 52.836302][ T3537] lock_acquire+0x1f8/0x5a0 [ 52.841311][ T3537] down_write+0x36/0x60 [ 52.845974][ T3537] path_openat+0x7b6/0x2e60 [ 52.850988][ T3537] do_filp_open+0x230/0x480 [ 52.856170][ T3537] do_sys_openat2+0x13b/0x500 [ 52.861365][ T3537] __x64_sys_openat+0x243/0x290 [ 52.866734][ T3537] do_syscall_64+0x3d/0xb0 [ 52.871657][ T3537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.878117][ T3537] [ 52.878117][ T3537] -> #0 (sb_writers#9){.+.+}-{0:0}: [ 52.885602][ T3537] validate_chain+0x1667/0x58e0 [ 52.891032][ T3537] __lock_acquire+0x125b/0x1f80 [ 52.896419][ T3537] lock_acquire+0x1f8/0x5a0 [ 52.901438][ T3537] sb_start_write+0x4d/0x1c0 [ 52.906543][ T3537] mnt_want_write_file+0x5a/0x1f0 [ 52.912087][ T3537] reiserfs_ioctl+0x170/0x340 [ 52.917287][ T3537] __se_sys_ioctl+0xf1/0x160 [ 52.922388][ T3537] do_syscall_64+0x3d/0xb0 [ 52.927353][ T3537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.933775][ T3537] [ 52.933775][ T3537] other info that might help us debug this: [ 52.933775][ T3537] [ 52.943991][ T3537] Chain exists of: [ 52.943991][ T3537] sb_writers#9 --> &type->i_mutex_dir_key#6 --> &sbi->lock [ 52.943991][ T3537] [ 52.957368][ T3537] Possible unsafe locking scenario: [ 52.957368][ T3537] [ 52.964798][ T3537] CPU0 CPU1 [ 52.970142][ T3537] ---- ---- [ 52.975488][ T3537] lock(&sbi->lock); [ 52.979551][ T3537] lock(&type->i_mutex_dir_key#6); [ 52.987259][ T3537] lock(&sbi->lock); [ 52.993747][ T3537] lock(sb_writers#9); [ 52.997900][ T3537] [ 52.997900][ T3537] *** DEADLOCK *** [ 52.997900][ T3537] [ 53.006025][ T3537] 1 lock held by syz-executor717/3537: [ 53.011465][ T3537] #0: ffff888144354090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 53.020853][ T3537] [ 53.020853][ T3537] stack backtrace: [ 53.026724][ T3537] CPU: 1 PID: 3537 Comm: syz-executor717 Not tainted 6.1.31-syzkaller #0 [ 53.035117][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 53.045156][ T3537] Call Trace: [ 53.048421][ T3537] [ 53.051337][ T3537] dump_stack_lvl+0x1e3/0x2cb [ 53.056016][ T3537] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.061472][ T3537] ? print_circular_bug+0x12b/0x1a0 [ 53.066664][ T3537] check_noncircular+0x2fa/0x3b0 [ 53.071593][ T3537] ? add_chain_block+0x850/0x850 [ 53.076524][ T3537] ? lockdep_lock+0x11f/0x2a0 [ 53.081195][ T3537] ? tomoyo_path_number_perm+0x5f4/0x7b0 [ 53.086816][ T3537] ? reacquire_held_locks+0x660/0x660 [ 53.092175][ T3537] ? _find_first_zero_bit+0xd0/0x100 [ 53.097449][ T3537] validate_chain+0x1667/0x58e0 [ 53.102286][ T3537] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.108363][ T3537] ? reacquire_held_locks+0x660/0x660 [ 53.113722][ T3537] ? __lock_acquire+0x125b/0x1f80 [ 53.118742][ T3537] ? mark_lock+0x9a/0x340 [ 53.123058][ T3537] __lock_acquire+0x125b/0x1f80 [ 53.127899][ T3537] lock_acquire+0x1f8/0x5a0 [ 53.132386][ T3537] ? mnt_want_write_file+0x5a/0x1f0 [ 53.137575][ T3537] ? read_lock_is_recursive+0x10/0x10 [ 53.142935][ T3537] ? __might_sleep+0xb0/0xb0 [ 53.147515][ T3537] ? mutex_lock_io_nested+0x60/0x60 [ 53.152705][ T3537] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.158668][ T3537] sb_start_write+0x4d/0x1c0 [ 53.163357][ T3537] ? mnt_want_write_file+0x5a/0x1f0 [ 53.168559][ T3537] mnt_want_write_file+0x5a/0x1f0 [ 53.173593][ T3537] reiserfs_ioctl+0x170/0x340 [ 53.178273][ T3537] ? __se_sys_ioctl+0xe6/0x160 [ 53.183033][ T3537] ? reiserfs_unpack+0x610/0x610 [ 53.187965][ T3537] __se_sys_ioctl+0xf1/0x160 [ 53.192543][ T3537] do_syscall_64+0x3d/0xb0 [ 53.196951][ T3537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.202834][ T3537] RIP: 0033:0x7fcce5f1b809 [ 53.207236][ T3537] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.226828][ T3537] RSP: 002b:00007ffe6389c028 EFLAGS: