Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. executing program syzkaller login: [ 52.144680][ T3500] loop0: detected capacity change from 0 to 8192 [ 52.228470][ T3500] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.238532][ T3500] REISERFS (device loop0): using ordered data mode [ 52.245146][ T3500] reiserfs: using flush barriers [ 52.253821][ T3500] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.270914][ T3500] REISERFS (device loop0): checking transaction log (loop0) [ 52.280559][ T3500] REISERFS (device loop0): Using tea hash to sort names [ 52.288600][ T3500] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 52.303823][ T3500] [ 52.306171][ T3500] ====================================================== [ 52.313189][ T3500] WARNING: possible circular locking dependency detected [ 52.320201][ T3500] 5.15.149-syzkaller #0 Not tainted [ 52.325470][ T3500] ------------------------------------------------------ [ 52.332485][ T3500] syz-executor119/3500 is trying to acquire lock: [ 52.338894][ T3500] ffff8880736882e0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 52.348643][ T3500] [ 52.348643][ T3500] but task is already holding lock: [ 52.355994][ T3500] ffff88801598e460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 52.364682][ T3500] [ 52.364682][ T3500] which lock already depends on the new lock. [ 52.364682][ T3500] [ 52.375062][ T3500] [ 52.375062][ T3500] the existing dependency chain (in reverse order) is: [ 52.384075][ T3500] [ 52.384075][ T3500] -> #2 (sb_writers#9){.+.+}-{0:0}: [ 52.391445][ T3500] lock_acquire+0x1db/0x4f0 [ 52.396459][ T3500] sb_start_write+0x4f/0x1c0 [ 52.401558][ T3500] mnt_want_write_file+0x5a/0x1f0 [ 52.407089][ T3500] reiserfs_ioctl+0x170/0x340 [ 52.412274][ T3500] __se_sys_ioctl+0xf1/0x160 [ 52.417392][ T3500] do_syscall_64+0x3d/0xb0 [ 52.422315][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.428722][ T3500] [ 52.428722][ T3500] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 52.435917][ T3500] lock_acquire+0x1db/0x4f0 [ 52.440926][ T3500] __mutex_lock_common+0x1da/0x25a0 [ 52.446630][ T3500] mutex_lock_nested+0x17/0x20 [ 52.451898][ T3500] reiserfs_write_lock+0x76/0xd0 [ 52.457343][ T3500] reiserfs_lookup+0x15c/0x4b0 [ 52.462617][ T3500] __lookup_slow+0x275/0x3d0 [ 52.467714][ T3500] lookup_one_len+0x187/0x2d0 [ 52.472897][ T3500] reiserfs_lookup_privroot+0x85/0x1e0 [ 52.478869][ T3500] reiserfs_fill_super+0x2224/0x2690 [ 52.484662][ T3500] mount_bdev+0x2c9/0x3f0 [ 52.489501][ T3500] legacy_get_tree+0xeb/0x180 [ 52.494943][ T3500] vfs_get_tree+0x88/0x270 [ 52.499861][ T3500] do_new_mount+0x2ba/0xb40 [ 52.504867][ T3500] __se_sys_mount+0x2d5/0x3c0 [ 52.510048][ T3500] do_syscall_64+0x3d/0xb0 [ 52.514968][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.521369][ T3500] [ 52.521369][ T3500] -> #0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 52.529782][ T3500] validate_chain+0x1649/0x5930 [ 52.535149][ T3500] __lock_acquire+0x1295/0x1ff0 [ 52.540505][ T3500] lock_acquire+0x1db/0x4f0 [ 52.545513][ T3500] down_write+0x97/0x170 [ 52.550263][ T3500] vfs_setxattr+0x1dd/0x420 [ 52.555272][ T3500] setxattr+0x27e/0x2e0 [ 52.559936][ T3500] path_setxattr+0x1bc/0x2a0 [ 52.565035][ T3500] __x64_sys_setxattr+0xb7/0xd0 [ 52.570393][ T3500] do_syscall_64+0x3d/0xb0 [ 52.575318][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.581721][ T3500] [ 52.581721][ T3500] other info that might help us debug this: [ 52.581721][ T3500] [ 52.591932][ T3500] Chain exists of: [ 52.591932][ T3500] &type->i_mutex_dir_key#6 --> &sbi->lock --> sb_writers#9 [ 52.591932][ T3500] [ 52.605047][ T3500] Possible unsafe locking scenario: [ 52.605047][ T3500] [ 52.612563][ T3500] CPU0 CPU1 [ 52.617953][ T3500] ---- ---- [ 52.623386][ T3500] lock(sb_writers#9); [ 52.627536][ T3500] lock(&sbi->lock); [ 52.634190][ T3500] lock(sb_writers#9); [ 52.640852][ T3500] lock(&type->i_mutex_dir_key#6); [ 52.646057][ T3500] [ 52.646057][ T3500] *** DEADLOCK *** [ 52.646057][ T3500] [ 52.654183][ T3500] 1 lock held by syz-executor119/3500: [ 52.659621][ T3500] #0: ffff88801598e460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 52.668750][ T3500] [ 52.668750][ T3500] stack backtrace: [ 52.674618][ T3500] CPU: 0 PID: 3500 Comm: syz-executor119 Not tainted 5.15.149-syzkaller #0 [ 52.683451][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 52.693489][ T3500] Call Trace: [ 52.696753][ T3500] [ 52.699671][ T3500] dump_stack_lvl+0x1e3/0x2cb [ 52.704357][ T3500] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.709992][ T3500] ? print_circular_bug+0x12b/0x1a0 [ 52.715537][ T3500] check_noncircular+0x2f8/0x3b0 [ 52.720552][ T3500] ? hlock_conflict+0x53/0x1f0 [ 52.725305][ T3500] ? add_chain_block+0x850/0x850 [ 52.730227][ T3500] ? lockdep_lock+0x11f/0x2a0 [ 52.734908][ T3500] ? validate_chain+0x112/0x5930 [ 52.739835][ T3500] validate_chain+0x1649/0x5930 [ 52.744680][ T3500] ? lockdep_lock+0x2a0/0x2a0 [ 52.749347][ T3500] ? reacquire_held_locks+0x660/0x660 [ 52.754727][ T3500] ? validate_chain+0x13bd/0x5930 [ 52.759754][ T3500] ? mark_lock+0x98/0x340 [ 52.764157][ T3500] __lock_acquire+0x1295/0x1ff0 [ 52.769008][ T3500] lock_acquire+0x1db/0x4f0 [ 52.773586][ T3500] ? vfs_setxattr+0x1dd/0x420 [ 52.778252][ T3500] ? read_lock_is_recursive+0x10/0x10 [ 52.783612][ T3500] ? __lock_acquire+0x1295/0x1ff0 [ 52.788715][ T3500] ? __might_sleep+0xc0/0xc0 [ 52.793303][ T3500] down_write+0x97/0x170 [ 52.797565][ T3500] ? vfs_setxattr+0x1dd/0x420 [ 52.802229][ T3500] ? down_read_killable+0x350/0x350 [ 52.807421][ T3500] vfs_setxattr+0x1dd/0x420 [ 52.811968][ T3500] ? xattr_permission+0x4f0/0x4f0 [ 52.816987][ T3500] ? __might_fault+0xb4/0x110 [ 52.821657][ T3500] ? strncpy_from_user+0x209/0x370 [ 52.826850][ T3500] setxattr+0x27e/0x2e0 [ 52.831008][ T3500] ? path_setxattr+0x2a0/0x2a0 [ 52.835799][ T3500] ? preempt_count_add+0x8f/0x180 [ 52.840813][ T3500] ? __mnt_want_write+0x1e6/0x260 [ 52.845831][ T3500] path_setxattr+0x1bc/0x2a0 [ 52.850411][ T3500] ? simple_xattr_list_add+0xf0/0xf0 [ 52.855681][ T3500] ? syscall_enter_from_user_mode+0x2e/0x230 [ 52.861650][ T3500] __x64_sys_setxattr+0xb7/0xd0 [ 52.866490][ T3500] do_syscall_64+0x3d/0xb0 [ 52.870908][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.876787][ T3500] RIP: 0033:0x7f5dffa2e649 [ 52.881185][ T3500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.900776][ T3500] RSP: 002b:00007ffec44b1498 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 52.909178][ T3500] RAX: ffffffffffffffda RBX: 00007ffec44b1668 RCX: 00007f5dffa2e649 [ 52.917132][ T3500] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000020000080 [ 52.925101][ T3500] RBP: 00007f5dffaa2610 R08: 0000000000000001 R09: 00007ffec44b1668 [ 52