Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. executing program [ 38.169083][ T3959] loop0: detected capacity change from 0 to 8192 [ 38.252982][ T3959] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 38.255687][ T3959] REISERFS (device loop0): using ordered data mode [ 38.257392][ T3959] reiserfs: using flush barriers [ 38.259701][ T3959] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.264651][ T3959] REISERFS (device loop0): checking transaction log (loop0) [ 38.270038][ T3959] REISERFS (device loop0): Using tea hash to sort names [ 38.272939][ T3959] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 38.276519][ T3959] [ 38.277150][ T3959] ====================================================== [ 38.278976][ T3959] WARNING: possible circular locking dependency detected [ 38.280849][ T3959] 5.15.151-syzkaller #0 Not tainted [ 38.282231][ T3959] ------------------------------------------------------ [ 38.284019][ T3959] syz-executor198/3959 is trying to acquire lock: [ 38.285707][ T3959] ffff80001c8690f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_begin_r+0x2e8/0xe3c [ 38.288261][ T3959] [ 38.288261][ T3959] but task is already holding lock: [ 38.290184][ T3959] ffff0000c8a28460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 38.292670][ T3959] [ 38.292670][ T3959] which lock already depends on the new lock. [ 38.292670][ T3959] [ 38.295360][ T3959] [ 38.295360][ T3959] the existing dependency chain (in reverse order) is: [ 38.297708][ T3959] [ 38.297708][ T3959] -> #2 (sb_writers#8){.+.+}-{0:0}: [ 38.299667][ T3959] sb_start_write+0xf0/0x3ac [ 38.300953][ T3959] mnt_want_write_file+0x64/0x1e8 [ 38.302388][ T3959] reiserfs_ioctl+0x188/0x4b8 [ 38.303766][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 38.305176][ T3959] invoke_syscall+0x98/0x2b8 [ 38.306481][ T3959] el0_svc_common+0x138/0x258 [ 38.307836][ T3959] do_el0_svc+0x58/0x14c [ 38.309134][ T3959] el0_svc+0x7c/0x1f0 [ 38.310295][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 38.311700][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 38.312971][ T3959] [ 38.312971][ T3959] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 38.314841][ T3959] __mutex_lock_common+0x194/0x2154 [ 38.316322][ T3959] mutex_lock_nested+0xa4/0xf8 [ 38.317709][ T3959] reiserfs_write_lock_nested+0x68/0xd8 [ 38.319278][ T3959] do_journal_begin_r+0x2f4/0xe3c [ 38.320722][ T3959] journal_begin+0x110/0x2f4 [ 38.322064][ T3959] reiserfs_fill_super+0x13c0/0x1e8c [ 38.323546][ T3959] mount_bdev+0x274/0x370 [ 38.324789][ T3959] get_super_block+0x44/0x58 [ 38.326147][ T3959] legacy_get_tree+0xd4/0x16c [ 38.327510][ T3959] vfs_get_tree+0x90/0x274 [ 38.328757][ T3959] do_new_mount+0x278/0x8fc [ 38.330112][ T3959] path_mount+0x594/0x101c [ 38.331389][ T3959] __arm64_sys_mount+0x510/0x5e0 [ 38.332755][ T3959] invoke_syscall+0x98/0x2b8 [ 38.334140][ T3959] el0_svc_common+0x138/0x258 [ 38.335523][ T3959] do_el0_svc+0x58/0x14c [ 38.336725][ T3959] el0_svc+0x7c/0x1f0 [ 38.337915][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 38.339378][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 38.340695][ T3959] [ 38.340695][ T3959] -> #0 (&journal->j_mutex){+.+.}-{3:3}: [ 38.342775][ T3959] __lock_acquire+0x32d4/0x7638 [ 38.344177][ T3959] lock_acquire+0x240/0x77c [ 38.345460][ T3959] __mutex_lock_common+0x194/0x2154 [ 38.346944][ T3959] mutex_lock_nested+0xa4/0xf8 [ 38.348244][ T3959] do_journal_begin_r+0x2e8/0xe3c [ 38.349670][ T3959] journal_begin+0x110/0x2f4 [ 38.350982][ T3959] reiserfs_dirty_inode+0x104/0x204 [ 38.352535][ T3959] __mark_inode_dirty+0x2b0/0x10f4 [ 38.354035][ T3959] reiserfs_ioctl+0x3c0/0x4b8 [ 38.355327][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 38.356762][ T3959] invoke_syscall+0x98/0x2b8 [ 38.358082][ T3959] el0_svc_common+0x138/0x258 [ 38.359433][ T3959] do_el0_svc+0x58/0x14c [ 38.360658][ T3959] el0_svc+0x7c/0x1f0 [ 38.361840][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 38.363250][ T3959] el0t_64_sync+0x1a0/0x1a4 [ 38.364534][ T3959] [ 38.364534][ T3959] other info that might help us debug this: [ 38.364534][ T3959] [ 38.367199][ T3959] Chain exists of: [ 38.367199][ T3959] &journal->j_mutex --> &sbi->lock --> sb_writers#8 [ 38.367199][ T3959] [ 38.370439][ T3959] Possible unsafe locking scenario: [ 38.370439][ T3959] [ 38.372419][ T3959] CPU0 CPU1 [ 38.373795][ T3959] ---- ---- [ 38.375199][ T3959] lock(sb_writers#8); [ 38.376319][ T3959] lock(&sbi->lock); [ 38.378004][ T3959] lock(sb_writers#8); [ 38.379725][ T3959] lock(&journal->j_mutex); [ 38.380899][ T3959] [ 38.380899][ T3959] *** DEADLOCK *** [ 38.380899][ T3959] [ 38.382989][ T3959] 1 lock held by syz-executor198/3959: [ 38.384451][ T3959] #0: ffff0000c8a28460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 38.387026][ T3959] [ 38.387026][ T3959] stack backtrace: [ 38.388553][ T3959] CPU: 0 PID: 3959 Comm: syz-executor198 Not tainted 5.15.151-syzkaller #0 [ 38.390790][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 38.393391][ T3959] Call trace: [ 38.394283][ T3959] dump_backtrace+0x0/0x530 [ 38.395496][ T3959] show_stack+0x2c/0x3c [ 38.396573][ T3959] dump_stack_lvl+0x108/0x170 [ 38.397770][ T3959] dump_stack+0x1c/0x58 [ 38.398818][ T3959] print_circular_bug+0x150/0x1b8 [ 38.400134][ T3959] check_noncircular+0x2cc/0x378 [ 38.401417][ T3959] __lock_acquire+0x32d4/0x7638 [ 38.402650][ T3959] lock_acquire+0x240/0x77c [ 38.403768][ T3959] __mutex_lock_common+0x194/0x2154 [ 38.405136][ T3959] mutex_lock_nested+0xa4/0xf8 [ 38.406380][ T3959] do_journal_begin_r+0x2e8/0xe3c [ 38.407711][ T3959] journal_begin+0x110/0x2f4 [ 38.408941][ T3959] reiserfs_dirty_inode+0x104/0x204 [ 38.410307][ T3959] __mark_inode_dirty+0x2b0/0x10f4 [ 38.411615][ T3959] reiserfs_ioctl+0x3c0/0x4b8 [ 38.412877][ T3959] __arm64_sys_ioctl+0x14c/0x1c8 [ 38.414176][ T3959] invoke_syscall+0x98/0x2b8 [ 38.415370][ T3959] el0_svc_common+0x138/0x258 [ 38.416562][ T3959] do_el0_svc+0x58/0x14c [ 38.417673][ T3959] el0_svc+0x7c/0x1f0 [ 38.418687][ T3959] el0t_64_sync_handler+0x84/0xe4 [ 38.420004][ T3959] el0t_64_sync+0x1a0/0x1a4