Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. executing program [ 58.904435][ T4162] loop0: detected capacity change from 0 to 8192 [ 59.010755][ T4162] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 59.020380][ T4162] REISERFS (device loop0): using ordered data mode [ 59.026949][ T4162] reiserfs: using flush barriers [ 59.033947][ T4162] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.050716][ T4162] REISERFS (device loop0): checking transaction log (loop0) [ 59.060684][ T4162] REISERFS (device loop0): Using tea hash to sort names [ 59.069691][ T4162] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 59.082886][ T4162] [ 59.085251][ T4162] ====================================================== [ 59.092276][ T4162] WARNING: possible circular locking dependency detected [ 59.099306][ T4162] 5.15.179-syzkaller #0 Not tainted [ 59.104490][ T4162] ------------------------------------------------------ [ 59.111495][ T4162] syz-executor279/4162 is trying to acquire lock: [ 59.117889][ T4162] ffff888147aee460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 59.127159][ T4162] [ 59.127159][ T4162] but task is already holding lock: [ 59.134526][ T4162] ffff88814c675090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 59.143589][ T4162] [ 59.143589][ T4162] which lock already depends on the new lock. [ 59.143589][ T4162] [ 59.154219][ T4162] [ 59.154219][ T4162] the existing dependency chain (in reverse order) is: [ 59.163538][ T4162] [ 59.163538][ T4162] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 59.170772][ T4162] lock_acquire+0x1db/0x4f0 [ 59.175787][ T4162] __mutex_lock_common+0x1da/0x25a0 [ 59.181509][ T4162] mutex_lock_nested+0x17/0x20 [ 59.186795][ T4162] reiserfs_write_lock+0x76/0xd0 [ 59.192242][ T4162] reiserfs_lookup+0x15c/0x4b0 [ 59.197539][ T4162] __lookup_slow+0x275/0x3d0 [ 59.202640][ T4162] lookup_one_len+0x187/0x2d0 [ 59.207828][ T4162] reiserfs_lookup_privroot+0x85/0x1e0 [ 59.214410][ T4162] reiserfs_fill_super+0x2224/0x2690 [ 59.220355][ T4162] mount_bdev+0x2c9/0x3f0 [ 59.225311][ T4162] legacy_get_tree+0xeb/0x180 [ 59.230521][ T4162] vfs_get_tree+0x88/0x270 [ 59.235450][ T4162] do_new_mount+0x2ba/0xb40 [ 59.240464][ T4162] __se_sys_mount+0x2d5/0x3c0 [ 59.245650][ T4162] do_syscall_64+0x3b/0xb0 [ 59.250606][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.257897][ T4162] [ 59.257897][ T4162] -> #1 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 59.266415][ T4162] lock_acquire+0x1db/0x4f0 [ 59.271449][ T4162] down_write+0x38/0x60 [ 59.276233][ T4162] path_openat+0x824/0x2f20 [ 59.281280][ T4162] do_filp_open+0x21c/0x460 [ 59.286306][ T4162] do_sys_openat2+0x13b/0x4f0 [ 59.291502][ T4162] __x64_sys_open+0x221/0x270 [ 59.296714][ T4162] do_syscall_64+0x3b/0xb0 [ 59.301642][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.308066][ T4162] [ 59.308066][ T4162] -> #0 (sb_writers#9){.+.+}-{0:0}: [ 59.315446][ T4162] validate_chain+0x1649/0x5930 [ 59.320806][ T4162] __lock_acquire+0x1295/0x1ff0 [ 59.326184][ T4162] lock_acquire+0x1db/0x4f0 [ 59.331192][ T4162] sb_start_write+0x4f/0x1c0 [ 59.336293][ T4162] mnt_want_write_file+0x5a/0x1f0 [ 59.341829][ T4162] reiserfs_ioctl+0x170/0x340 [ 59.347022][ T4162] __se_sys_ioctl+0xf1/0x160 [ 59.352126][ T4162] do_syscall_64+0x3b/0xb0 [ 59.357072][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.363571][ T4162] [ 59.363571][ T4162] other info that might help us debug this: [ 59.363571][ T4162] [ 59.373799][ T4162] Chain exists of: [ 59.373799][ T4162] sb_writers#9 --> &type->i_mutex_dir_key#6 --> &sbi->lock [ 59.373799][ T4162] [ 59.386927][ T4162] Possible unsafe locking scenario: [ 59.386927][ T4162] [ 59.394382][ T4162] CPU0 CPU1 [ 59.399733][ T4162] ---- ---- [ 59.405079][ T4162] lock(&sbi->lock); [ 59.409048][ T4162] lock(&type->i_mutex_dir_key#6); [ 59.416759][ T4162] lock(&sbi->lock); [ 59.423248][ T4162] lock(sb_writers#9); [ 59.427399][ T4162] [ 59.427399][ T4162] *** DEADLOCK *** [ 59.427399][ T4162] [ 59.435542][ T4162] 1 lock held by syz-executor279/4162: [ 59.440985][ T4162] #0: ffff88814c675090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 59.450378][ T4162] [ 59.450378][ T4162] stack backtrace: [ 59.456258][ T4162] CPU: 0 PID: 4162 Comm: syz-executor279 Not tainted 5.15.179-syzkaller #0 [ 59.464848][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.474901][ T4162] Call Trace: [ 59.478174][ T4162] [ 59.481093][ T4162] dump_stack_lvl+0x1e3/0x2d0 [ 59.485762][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 59.491387][ T4162] ? print_circular_bug+0x12b/0x1a0 [ 59.496605][ T4162] check_noncircular+0x2f8/0x3b0 [ 59.501536][ T4162] ? add_chain_block+0x850/0x850 [ 59.506460][ T4162] ? lockdep_lock+0x11f/0x2a0 [ 59.511124][ T4162] ? kasan_set_free_info+0x1f/0x40 [ 59.516244][ T4162] ? ____kasan_slab_free+0xd8/0x120 [ 59.521431][ T4162] ? slab_free_freelist_hook+0xdd/0x160 [ 59.526991][ T4162] ? kfree+0xf1/0x270 [ 59.530957][ T4162] ? tomoyo_path_number_perm+0x648/0x810 [ 59.536600][ T4162] ? reacquire_held_locks+0x660/0x660 [ 59.541961][ T4162] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.548024][ T4162] validate_chain+0x1649/0x5930 [ 59.552889][ T4162] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.558858][ T4162] ? reacquire_held_locks+0x660/0x660 [ 59.564238][ T4162] ? __lock_acquire+0x1295/0x1ff0 [ 59.569258][ T4162] ? mark_lock+0x98/0x340 [ 59.573591][ T4162] __lock_acquire+0x1295/0x1ff0 [ 59.578436][ T4162] lock_acquire+0x1db/0x4f0 [ 59.582923][ T4162] ? mnt_want_write_file+0x5a/0x1f0 [ 59.588135][ T4162] ? read_lock_is_recursive+0x10/0x10 [ 59.593497][ T4162] ? __might_sleep+0xc0/0xc0 [ 59.598098][ T4162] ? mutex_lock_io_nested+0x60/0x60 [ 59.603292][ T4162] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.609279][ T4162] sb_start_write+0x4f/0x1c0 [ 59.613862][ T4162] ? mnt_want_write_file+0x5a/0x1f0 [ 59.619068][ T4162] mnt_want_write_file+0x5a/0x1f0 [ 59.624381][ T4162] reiserfs_ioctl+0x170/0x340 [ 59.629062][ T4162] ? __se_sys_ioctl+0xe6/0x160 [ 59.633844][ T4162] ? reiserfs_unpack+0x5a0/0x5a0 [ 59.638782][ T4162] __se_sys_ioctl+0xf1/0x160 [ 59.643370][ T4162] do_syscall_64+0x3b/0xb0 [ 59.647785][ T4162] ? clear_bhb_loop+0x15/0x70 [ 59.652469][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.658362][ T4162] RIP: 0033:0x7f832bf156b9 [ 59.662778][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.682471][ T4162] RSP: 002b:00007ffc52858df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.690883][ T4162] RAX: ffffffffffffffda RBX: 00007ffc52858fc8 RCX: 00007f832bf156b9 [ 59.698845][ T4162] RDX: 0000000000000000 RSI: 0000000040087602 RDI: 0000000000000004 [ 59.706806][ T4162] RBP: 00007f832bf89610 R08: 0000000000000000 R09: 00007ffc52858f