[ 15.688673][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.695877][ T5648] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.744336][ T1755] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.748340][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.32' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.059018][ T5972] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5972 'syz-executor399' [ 35.101152][ T5972] loop0: detected capacity change from 0 to 8192 [ 35.106638][ T5972] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.109293][ T5972] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 35.111287][ T5972] REISERFS (device loop0): using ordered data mode [ 35.112692][ T5972] reiserfs: using flush barriers [ 35.115000][ T5972] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.118414][ T5972] REISERFS (device loop0): checking transaction log (loop0) [ 35.122154][ T5972] REISERFS (device loop0): Using tea hash to sort names [ 35.124309][ T5972] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 35.127322][ T5972] [ 35.127823][ T5972] ====================================================== [ 35.129225][ T5972] WARNING: possible circular locking dependency detected [ 35.130600][ T5972] 6.4.0-rc7-syzkaller-ge40939bbfc68 #0 Not tainted [ 35.131981][ T5972] ------------------------------------------------------ [ 35.133437][ T5972] syz-executor399/5972 is trying to acquire lock: [ 35.134813][ T5972] ffff0000c62f4460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 35.136853][ T5972] [ 35.136853][ T5972] but task is already holding lock: [ 35.138395][ T5972] ffff0000d8b92090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 [ 35.140308][ T5972] [ 35.140308][ T5972] which lock already depends on the new lock. [ 35.140308][ T5972] [ 35.142428][ T5972] [ 35.142428][ T5972] the existing dependency chain (in reverse order) is: [ 35.144379][ T5972] [ 35.144379][ T5972] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 35.145838][ T5972] __mutex_lock_common+0x190/0x21a0 [ 35.147033][ T5972] mutex_lock_nested+0x2c/0x38 [ 35.148086][ T5972] reiserfs_write_lock+0x7c/0xe8 [ 35.149232][ T5972] reiserfs_lookup+0x128/0x45c [ 35.150329][ T5972] __lookup_slow+0x250/0x374 [ 35.151427][ T5972] lookup_one_len+0x178/0x28c [ 35.152563][ T5972] reiserfs_lookup_privroot+0x8c/0x184 [ 35.153828][ T5972] reiserfs_fill_super+0x1bc0/0x2028 [ 35.154994][ T5972] mount_bdev+0x274/0x370 [ 35.156120][ T5972] get_super_block+0x44/0x58 [ 35.157198][ T5972] legacy_get_tree+0xd4/0x16c [ 35.158291][ T5972] vfs_get_tree+0x90/0x274 [ 35.159384][ T5972] do_new_mount+0x25c/0x8c4 [ 35.160418][ T5972] path_mount+0x590/0xe04 [ 35.161533][ T5972] __arm64_sys_mount+0x45c/0x594 [ 35.162638][ T5972] invoke_syscall+0x98/0x2c0 [ 35.163781][ T5972] el0_svc_common+0x138/0x244 [ 35.164846][ T5972] do_el0_svc+0x64/0x198 [ 35.165869][ T5972] el0_svc+0x4c/0x160 [ 35.166848][ T5972] el0t_64_sync_handler+0x84/0xfc [ 35.167936][ T5972] el0t_64_sync+0x190/0x194 [ 35.169003][ T5972] [ 35.169003][ T5972] -> #1 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 35.170819][ T5972] down_write+0x50/0xc0 [ 35.171858][ T5972] vfs_setxattr+0x17c/0x344 [ 35.172919][ T5972] setxattr+0x208/0x29c [ 35.173891][ T5972] path_setxattr+0x17c/0x258 [ 35.174972][ T5972] __arm64_sys_setxattr+0xbc/0xd8 [ 35.176169][ T5972] invoke_syscall+0x98/0x2c0 [ 35.177258][ T5972] el0_svc_common+0x138/0x244 [ 35.178336][ T5972] do_el0_svc+0x64/0x198 [ 35.179384][ T5972] el0_svc+0x4c/0x160 [ 35.180349][ T5972] el0t_64_sync_handler+0x84/0xfc [ 35.181465][ T5972] el0t_64_sync+0x190/0x194 [ 35.182542][ T5972] [ 35.182542][ T5972] -> #0 (sb_writers#8){.+.+}-{0:0}: [ 35.184095][ T5972] __lock_acquire+0x3308/0x7604 [ 35.185254][ T5972] lock_acquire+0x23c/0x71c [ 35.186284][ T5972] sb_start_write+0x60/0x2ec [ 35.187351][ T5972] mnt_want_write_file+0x64/0x1e8 [ 35.188509][ T5972] reiserfs_ioctl+0x184/0x454 [ 35.189645][ T5972] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.190880][ T5972] invoke_syscall+0x98/0x2c0 [ 35.191921][ T5972] el0_svc_common+0x138/0x244 [ 35.193025][ T5972] do_el0_svc+0x64/0x198 [ 35.193995][ T5972] el0_svc+0x4c/0x160 [ 35.194964][ T5972] el0t_64_sync_handler+0x84/0xfc [ 35.196087][ T5972] el0t_64_sync+0x190/0x194 [ 35.197081][ T5972] [ 35.197081][ T5972] other info that might help us debug this: [ 35.197081][ T5972] [ 35.199255][ T5972] Chain exists of: [ 35.199255][ T5972] sb_writers#8 --> &type->i_mutex_dir_key#6 --> &sbi->lock [ 35.199255][ T5972] [ 35.202028][ T5972] Possible unsafe locking scenario: [ 35.202028][ T5972] [ 35.203639][ T5972] CPU0 CPU1 [ 35.204820][ T5972] ---- ---- [ 35.205998][ T5972] lock(&sbi->lock); [ 35.206825][ T5972] lock(&type->i_mutex_dir_key#6); [ 35.208546][ T5972] lock(&sbi->lock); [ 35.209992][ T5972] rlock(sb_writers#8); [ 35.210883][ T5972] [ 35.210883][ T5972] *** DEADLOCK *** [ 35.210883][ T5972] [ 35.212726][ T5972] 1 lock held by syz-executor399/5972: [ 35.213864][ T5972] #0: ffff0000d8b92090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 [ 35.215889][ T5972] [ 35.215889][ T5972] stack backtrace: [ 35.217133][ T5972] CPU: 0 PID: 5972 Comm: syz-executor399 Not tainted 6.4.0-rc7-syzkaller-ge40939bbfc68 #0 [ 35.219344][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 35.221479][ T5972] Call trace: [ 35.222196][ T5972] dump_backtrace+0x1b8/0x1e4 [ 35.223170][ T5972] show_stack+0x2c/0x44 [ 35.224088][ T5972] dump_stack_lvl+0xd0/0x124 [ 35.225036][ T5972] dump_stack+0x1c/0x28 [ 35.226000][ T5972] print_circular_bug+0x150/0x1b8 [ 35.227052][ T5972] check_noncircular+0x2cc/0x378 [ 35.228128][ T5972] __lock_acquire+0x3308/0x7604 [ 35.229140][ T5972] lock_acquire+0x23c/0x71c [ 35.230117][ T5972] sb_start_write+0x60/0x2ec [ 35.231154][ T5972] mnt_want_write_file+0x64/0x1e8 [ 35.232189][ T5972] reiserfs_ioctl+0x184/0x454 [ 35.233158][ T5972] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.234225][ T5972] invoke_syscall+0x98/0x2c0 [ 35.235214][ T5972] el0_svc_common+0x138/0x244 [ 35.236229][ T5972] do_el0_svc+0x64/0x198 [ 35.237129][ T5972] el0_svc+0x4c/0x160 [ 35.238010][ T5972] el0t_64_sync_handler+0x84/0xfc [ 35.239039][ T5972] el0t_64_sync+0x190/0x194