Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. executing program [ 40.402762][ T3502] loop0: detected capacity change from 0 to 8192 [ 40.413026][ T3502] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 40.422389][ T3502] REISERFS (device loop0): using ordered data mode [ 40.428865][ T3502] reiserfs: using flush barriers [ 40.435015][ T3502] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.451399][ T3502] REISERFS (device loop0): checking transaction log (loop0) [ 40.460518][ T3502] REISERFS (device loop0): Using tea hash to sort names [ 40.468642][ T3502] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 40.483716][ T3502] [ 40.486053][ T3502] ====================================================== [ 40.493060][ T3502] WARNING: possible circular locking dependency detected [ 40.500066][ T3502] 5.15.132-syzkaller #0 Not tainted [ 40.505247][ T3502] ------------------------------------------------------ [ 40.512267][ T3502] syz-executor713/3502 is trying to acquire lock: [ 40.518652][ T3502] ffff8880790d6460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 40.527855][ T3502] [ 40.527855][ T3502] but task is already holding lock: [ 40.535190][ T3502] ffff888141381090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 40.544112][ T3502] [ 40.544112][ T3502] which lock already depends on the new lock. [ 40.544112][ T3502] [ 40.554483][ T3502] [ 40.554483][ T3502] the existing dependency chain (in reverse order) is: [ 40.563466][ T3502] [ 40.563466][ T3502] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 40.570989][ T3502] lock_acquire+0x1db/0x4f0 [ 40.575992][ T3502] __mutex_lock_common+0x1da/0x25a0 [ 40.581681][ T3502] mutex_lock_nested+0x17/0x20 [ 40.586938][ T3502] reiserfs_write_lock+0x76/0xd0 [ 40.592366][ T3502] reiserfs_lookup+0x15c/0x4b0 [ 40.597620][ T3502] __lookup_slow+0x275/0x3d0 [ 40.602702][ T3502] lookup_one_len+0x187/0x2d0 [ 40.607871][ T3502] reiserfs_lookup_privroot+0x85/0x1e0 [ 40.613822][ T3502] reiserfs_fill_super+0x2224/0x2690 [ 40.619601][ T3502] mount_bdev+0x2c9/0x3f0 [ 40.624426][ T3502] legacy_get_tree+0xeb/0x180 [ 40.629595][ T3502] vfs_get_tree+0x88/0x270 [ 40.634502][ T3502] do_new_mount+0x28b/0xae0 [ 40.639498][ T3502] __se_sys_mount+0x2d5/0x3c0 [ 40.644667][ T3502] do_syscall_64+0x3d/0xb0 [ 40.649579][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.655973][ T3502] [ 40.655973][ T3502] -> #1 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 40.664379][ T3502] lock_acquire+0x1db/0x4f0 [ 40.669384][ T3502] down_write+0x97/0x170 [ 40.674131][ T3502] path_openat+0x824/0x2f20 [ 40.679142][ T3502] do_filp_open+0x21c/0x460 [ 40.684137][ T3502] do_sys_openat2+0x13b/0x500 [ 40.689308][ T3502] __x64_sys_open+0x221/0x270 [ 40.694475][ T3502] do_syscall_64+0x3d/0xb0 [ 40.699386][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.705772][ T3502] [ 40.705772][ T3502] -> #0 (sb_writers#9){.+.+}-{0:0}: [ 40.713124][ T3502] validate_chain+0x1646/0x58b0 [ 40.718469][ T3502] __lock_acquire+0x1295/0x1ff0 [ 40.723814][ T3502] lock_acquire+0x1db/0x4f0 [ 40.728811][ T3502] sb_start_write+0x4f/0x1c0 [ 40.733894][ T3502] mnt_want_write_file+0x5a/0x1f0 [ 40.739414][ T3502] reiserfs_ioctl+0x170/0x340 [ 40.744585][ T3502] __se_sys_ioctl+0xf1/0x160 [ 40.749668][ T3502] do_syscall_64+0x3d/0xb0 [ 40.754576][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.760978][ T3502] [ 40.760978][ T3502] other info that might help us debug this: [ 40.760978][ T3502] [ 40.771179][ T3502] Chain exists of: [ 40.771179][ T3502] sb_writers#9 --> &type->i_mutex_dir_key#6 --> &sbi->lock [ 40.771179][ T3502] [ 40.784268][ T3502] Possible unsafe locking scenario: [ 40.784268][ T3502] [ 40.791689][ T3502] CPU0 CPU1 [ 40.797035][ T3502] ---- ---- [ 40.802379][ T3502] lock(&sbi->lock); [ 40.806335][ T3502] lock(&type->i_mutex_dir_key#6); [ 40.814112][ T3502] lock(&sbi->lock); [ 40.820586][ T3502] lock(sb_writers#9); [ 40.824717][ T3502] [ 40.824717][ T3502] *** DEADLOCK *** [ 40.824717][ T3502] [ 40.832831][ T3502] 1 lock held by syz-executor713/3502: [ 40.838257][ T3502] #0: ffff888141381090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 40.847623][ T3502] [ 40.847623][ T3502] stack backtrace: [ 40.853484][ T3502] CPU: 1 PID: 3502 Comm: syz-executor713 Not tainted 5.15.132-syzkaller #0 [ 40.862039][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 40.872065][ T3502] Call Trace: [ 40.875321][ T3502] [ 40.878225][ T3502] dump_stack_lvl+0x1e3/0x2cb [ 40.882880][ T3502] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 40.888490][ T3502] ? print_circular_bug+0x12b/0x1a0 [ 40.893662][ T3502] check_noncircular+0x2f8/0x3b0 [ 40.898574][ T3502] ? add_chain_block+0x850/0x850 [ 40.903482][ T3502] ? lockdep_lock+0x11f/0x2a0 [ 40.908134][ T3502] ? kasan_set_free_info+0x1f/0x40 [ 40.913216][ T3502] ? ____kasan_slab_free+0xd8/0x120 [ 40.918388][ T3502] ? slab_free_freelist_hook+0xdd/0x160 [ 40.923902][ T3502] ? kfree+0xf1/0x270 [ 40.927864][ T3502] ? tomoyo_path_number_perm+0x648/0x810 [ 40.933485][ T3502] ? reacquire_held_locks+0x660/0x660 [ 40.938827][ T3502] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.944879][ T3502] validate_chain+0x1646/0x58b0 [ 40.949707][ T3502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 40.955662][ T3502] ? reacquire_held_locks+0x660/0x660 [ 40.961008][ T3502] ? __lock_acquire+0x1295/0x1ff0 [ 40.966008][ T3502] ? mark_lock+0x98/0x340 [ 40.970307][ T3502] __lock_acquire+0x1295/0x1ff0 [ 40.975132][ T3502] lock_acquire+0x1db/0x4f0 [ 40.979609][ T3502] ? mnt_want_write_file+0x5a/0x1f0 [ 40.984780][ T3502] ? read_lock_is_recursive+0x10/0x10 [ 40.990128][ T3502] ? __might_sleep+0xc0/0xc0 [ 40.994692][ T3502] ? mutex_lock_io_nested+0x60/0x60 [ 40.999866][ T3502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 41.005819][ T3502] sb_start_write+0x4f/0x1c0 [ 41.010383][ T3502] ? mnt_want_write_file+0x5a/0x1f0 [ 41.015549][ T3502] mnt_want_write_file+0x5a/0x1f0 [ 41.020546][ T3502] reiserfs_ioctl+0x170/0x340 [ 41.025196][ T3502] ? __se_sys_ioctl+0xe6/0x160 [ 41.029932][ T3502] ? reiserfs_unpack+0x5a0/0x5a0 [ 41.034856][ T3502] __se_sys_ioctl+0xf1/0x160 [ 41.039420][ T3502] do_syscall_64+0x3d/0xb0 [ 41.043812][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.049696][ T3502] RIP: 0033:0x7f24ab737639 [ 41.054085][ T3502] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.073751][ T3502] RSP: 002b:00007ffed2599a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.082139][ T3502] RAX: ffffffffffffffda RBX: 00007ffed2599c18 RCX: 00007f24ab737639 [ 41.090104][ T3502] RDX: 0000000000000000 RSI: 0000000040087602 RDI: 0000000000000004 [ 41.098056][ T3502] RBP: 00007f24ab7ab610 R08: 0000000000000000 R09: 00007ffed2599c18