Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. [ 33.147430] IPVS: ftp: loaded support on port[0] = 21 executing program [ 33.246546] IPVS: ftp: loaded support on port[0] = 21 executing program [ 33.270311] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 33.283615] REISERFS (device loop1): using ordered data mode [ 33.293689] reiserfs: using flush barriers [ 33.305919] REISERFS (device loop1): journal params: device loop1, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 33.325597] IPVS: ftp: loaded support on port[0] = 21 [ 33.336219] REISERFS (device loop1): checking transaction log (loop1) [ 33.383481] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 33.397419] REISERFS (device loop4): using ordered data mode executing program [ 33.432916] reiserfs: using flush barriers [ 33.444341] REISERFS (device loop4): journal params: device loop4, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 33.481477] IPVS: ftp: loaded support on port[0] = 21 [ 33.505154] REISERFS (device loop4): checking transaction log (loop4) [ 33.516299] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 33.547884] REISERFS (device loop5): using ordered data mode [ 33.577199] reiserfs: using flush barriers [ 33.606760] REISERFS (device loop5): journal params: device loop5, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 executing program [ 33.672775] REISERFS (device loop5): checking transaction log (loop5) [ 33.687910] IPVS: ftp: loaded support on port[0] = 21 [ 33.745557] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 33.810831] REISERFS (device loop2): using ordered data mode [ 33.839186] reiserfs: using flush barriers [ 33.868700] REISERFS (device loop2): journal params: device loop2, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 executing program [ 33.966355] IPVS: ftp: loaded support on port[0] = 21 [ 33.993244] REISERFS (device loop2): checking transaction log (loop2) [ 34.019613] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 34.076264] REISERFS (device loop3): using ordered data mode [ 34.123784] reiserfs: using flush barriers [ 34.164642] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 executing program [ 34.293258] REISERFS (device loop3): checking transaction log (loop3) [ 34.401497] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 34.461373] REISERFS (device loop0): using ordered data mode [ 34.517824] reiserfs: using flush barriers [ 34.568215] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.718889] REISERFS (device loop0): checking transaction log (loop0) [ 35.190977] Bluetooth: hci5 command 0x0409 tx timeout [ 35.196610] Bluetooth: hci3 command 0x0409 tx timeout [ 35.248724] Bluetooth: hci2 command 0x0409 tx timeout [ 35.299072] Bluetooth: hci4 command 0x0409 tx timeout [ 35.349960] Bluetooth: hci1 command 0x0409 tx timeout [ 35.393470] Bluetooth: hci0 command 0x0409 tx timeout [ 36.548138] REISERFS (device loop1): Using r5 hash to sort names [ 36.584009] REISERFS (device loop1): using 3.5.x disk format [ 36.613579] REISERFS (device loop5): Using r5 hash to sort names [ 36.622902] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 36.643895] REISERFS (device loop5): using 3.5.x disk format [ 36.672914] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 36.896395] REISERFS (device loop4): Using r5 hash to sort names [ 36.931402] REISERFS (device loop4): using 3.5.x disk format [ 36.962866] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 37.259488] Bluetooth: hci3 command 0x041b tx timeout [ 37.266004] Bluetooth: hci5 command 0x041b tx timeout [ 37.277894] REISERFS (device loop3): Using r5 hash to sort names [ 37.285273] REISERFS (device loop3): using 3.5.x disk format [ 37.291845] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 37.349425] Bluetooth: hci2 command 0x041b tx timeout [ 37.429388] Bluetooth: hci1 command 0x041b tx timeout [ 37.429475] Bluetooth: hci4 command 0x041b tx timeout [ 37.509398] Bluetooth: hci0 command 0x041b tx timeout [ 37.542920] REISERFS (device loop2): Using r5 hash to sort names [ 37.570520] REISERFS (device loop2): using 3.5.x disk format executing program [ 37.617985] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. executing program [ 37.740137] [ 37.741780] ====================================================== [ 37.748107] WARNING: possible circular locking dependency detected [ 37.754444] 4.14.204-syzkaller #0 Not tainted [ 37.758921] ------------------------------------------------------ [ 37.765229] syz-executor923/8221 is trying to acquire lock: [ 37.771879] (&type->s_umount_key#46){++++}, at: [] __get_super.part.0+0x271/0x390 [ 37.781183] [ 37.781183] but task is already holding lock: [ 37.787170] (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 37.795663] [ 37.795663] which lock already depends on the new lock. [ 37.795663] [ 37.801594] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 37.803988] [ 37.803988] the existing dependency chain (in reverse order) is: [ 37.803991] [ 37.803991] -> #1 (&bdev->bd_mutex){+.+.}: [ 37.804009] __mutex_lock+0xc4/0x1310 [ 37.804021] blkdev_put+0x27/0x4c0 [ 37.832423] REISERFS (device loop3): using ordered data mode [ 37.834267] free_journal_ram+0x41a/0x5c0 [ 37.834273] journal_release+0x1cf/0x450 [ 37.834282] reiserfs_put_super+0xbb/0x560 [ 37.834291] generic_shutdown_super+0x144/0x370 [ 37.840159] reiserfs: using flush barriers [ 37.844738] kill_block_super+0x95/0xe0 [ 37.844743] deactivate_locked_super+0x6c/0xd0 [ 37.844748] deactivate_super+0x7f/0xa0 [ 37.844754] cleanup_mnt+0x186/0x2c0 [ 37.844761] task_work_run+0x11f/0x190 [ 37.844771] exit_to_usermode_loop+0x1ad/0x200 [ 37.850286] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.854066] do_syscall_64+0x4a3/0x640 [ 37.854075] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 37.854078] [ 37.854078] -> #0 (&type->s_umount_key#46 [ 37.860306] REISERFS (device loop3): checking transaction log (loop3) [ 37.863468] ){++++}: [ 37.863480] lock_acquire+0x170/0x3f0 [ 37.863487] down_read+0x36/0x80 [ 37.863492] __get_super.part.0+0x271/0x390 [ 37.863500] get_super+0x2b/0x50 [ 37.948976] fsync_bdev+0x14/0xc0 [ 37.952947] invalidate_partition+0x74/0xb0 [ 37.957777] drop_partitions.isra.0+0x83/0x150 [ 37.962889] rescan_partitions+0xa9/0x800 [ 37.967548] __blkdev_reread_part+0x140/0x1d0 [ 37.972555] blkdev_reread_part+0x23/0x40 [ 37.977216] loop_set_status+0xeeb/0x12b0 [ 37.982570] loop_set_status_old+0x18a/0x200 [ 37.987487] lo_ioctl+0x5ae/0x1cd0 [ 37.991572] blkdev_ioctl+0x540/0x1830 [ 37.995998] block_ioctl+0xd9/0x120 [ 38.000145] do_vfs_ioctl+0x75a/0xff0 [ 38.004455] SyS_ioctl+0x7f/0xb0 [ 38.008336] do_syscall_64+0x1d5/0x640 [ 38.012740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 38.018437] [ 38.018437] other info that might help us debug this: [ 38.018437] [ 38.026571] Possible unsafe locking scenario: [ 38.026571] [ 38.032616] CPU0 CPU1 [ 38.037267] ---- ---- [ 38.041917] lock(&bdev->bd_mutex); [ 38.045623] lock(&type->s_umount_key#46); [ 38.052451] lock(&bdev->bd_mutex); [ 38.058669] lock(&type->s_umount_key#46); [ 38.062988] [ 38.062988] *** DEADLOCK *** [ 38.062988] [ 38.069035] 2 locks held by syz-executor923/8221: [ 38.073878] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 [ 38.082470] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 38.091421] [ 38.091421] stack backtrace: [ 38.095933] CPU: 0 PID: 8221 Comm: syz-executor923 Not tainted 4.14.204-syzkaller #0 [ 38.103803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.104859] REISERFS warning (device loop4): reiserfs_fill_super: Cannot allocate commit workqueue [ 38.113152] Call Trace: [ 38.113166] dump_stack+0x1b2/0x283 [ 38.113177] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 38.113186] __lock_acquire+0x2e0e/0x3f20 [ 38.138980] ? trace_hardirqs_on+0x10/0x10 [ 38.143213] ? __get_super.part.0+0x110/0x390 [ 38.147708] lock_acquire+0x170/0x3f0 [ 38.151523] ? __get_super.part.0+0x271/0x390 [ 38.156012] down_read+0x36/0x80 [ 38.159362] ? __get_super.part.0+0x271/0x390 [ 38.163838] __get_super.part.0+0x271/0x390 [ 38.168159] get_super+0x2b/0x50 [ 38.171780] fsync_bdev+0x14/0xc0 [ 38.175219] invalidate_partition+0x74/0xb0 [ 38.179524] drop_partitions.isra.0+0x83/0x150 [ 38.184093] ? delete_partition+0x180/0x180 [ 38.188400] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 38.193485] ? blkdev_reread_part+0x1b/0x40 [ 38.197789] rescan_partitions+0xa9/0x800 [ 38.201946] __blkdev_reread_part+0x140/0x1d0 [ 38.206440] blkdev_reread_part+0x23/0x40 [ 38.210574] loop_set_status+0xeeb/0x12b0 [ 38.214705] loop_set_status_old+0x18a/0x200 [ 38.219095] ? loop_set_status_compat+0xd0/0xd0 [ 38.223771] ? lo_ioctl+0x87/0x1cd0 [ 38.227379] ? __mutex_lock+0x360/0x1310 [ 38.231430] ? security_capable+0x88/0xb0 [ 38.235575] ? ns_capable_common+0x127/0x150 [ 38.239966] lo_ioctl+0x5ae/0x1cd0 [ 38.243924] ? loop_set_status64+0xe0/0xe0 [ 38.248159] blkdev_ioctl+0x540/0x1830 [ 38.252045] ? up_read+0x17/0x30 [ 38.255408] ? blkpg_ioctl+0x8d0/0x8d0 [ 38.259300] ? trace_hardirqs_on+0x10/0x10 [ 38.263522] ? futex_exit_release+0x220/0x220 [ 38.268008] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 38.273011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.277765] block_ioctl+0xd9/0x120 [ 38.281378] ? blkdev_fallocate+0x3a0/0x3a0 [ 38.285690] do_vfs_ioctl+0x75a/0xff0 [ 38.289477] ? ioctl_preallocate+0x1a0/0x1a0 [ 38.293881] ? lock_downgrade+0x740/0x740 [ 38.298015] ? __fget+0x225/0x360 [ 38.301450] ? do_vfs_ioctl+0xff0/0xff0 [ 38.305409] ? security_file_ioctl+0x83/0xb0 [ 38.309798] SyS_ioctl+0x7f/0xb0 [ 38.313163] ? do_vfs_ioctl+0xff0/0xff0 [ 38.317137] do_syscall_64+0x1d5/0x640 [ 38.321014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 38.326879] RIP: 0033:0x44c5b9 [ 38.330069] RSP: 002b:00007f44b5cefce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 executing program executing program [ 38.337779] RAX: ffffffffffffffda RBX: 00000000006dec28 RCX: 000000000044c5b9 [ 38.345056] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000003 [ 38.352308] RBP: 00000000006dec20 R08: 0000000000000000 R09: 0000000000000000 [ 38.359558] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dec2c [ 38.366829] R13: 00007ffca83cd6df R14: 00007f44b5cf09c0 R15: 0000000000000000 [ 38.395018] REISERFS warning: reiserfs-5090 is_tree_node: node level 17491 does not match to the expected one 1 [ 38.428203] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 38.438304] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 38.452214] REISERFS (device loop5): using ordered data mode [ 38.462286] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 38.470975] reiserfs: using flush barriers [ 38.475302] REISERFS (device loop0): Remounting filesystem read-only [ 38.488006] REISERFS (device loop5): journal params: device loop5, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.508131] REISERFS (device loop1): using ordered data mode [ 38.515172] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 38.535350] reiserfs: using flush barriers [ 38.541810] REISERFS (device loop1): journal params: device loop1, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.558500] REISERFS (device loop0): Using r5 hash to sort names [ 38.565114] REISERFS (device loop5): checking transaction log (loop5) [ 38.574765] REISERFS (device loop0): using 3.5.x disk format [ 38.591917] REISERFS (device loop1): checking transaction log (loop1) executing program [ 38.923304] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 38.949112] REISERFS (device loop2): using ordered data mode [ 38.969093] reiserfs: using flush barriers [ 38.985940] REISERFS (device loop2): journal params: device loop2, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 39.034102] REISERFS (device loop2): checking transaction log (loop2) [ 39.229349] REISERFS (device loop3): Using r5 hash to sort names [ 39.247836] REISERFS (device loop3): using 3.5.x disk format [ 39.265424] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 39.338539] Bluetooth: hci5 command 0x040f tx timeout [ 39.343840] Bluetooth: hci3 command 0x040f tx timeout [ 39.418507] Bluetooth: hci2 command 0x040f tx timeout [ 39.498479] Bluetooth: hci4 command 0x040f tx timeout [ 39.503791] Bluetooth: hci1 command 0x040f tx timeout [ 39.578426] Bluetooth: hci0 command 0x040f tx timeout [ 39.763665] REISERFS (device loop5): Using r5 hash to sort names [ 39.769919] REISERFS (device loop5): using 3.5.x disk format [ 39.775977] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 39.979496] REISERFS (device loop1): Using r5 hash to sort names [ 39.986449] REISERFS (device loop1): using 3.5.x disk format [ 40.000815] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 40.070489] REISERFS (device loop2): Using r5 hash to sort names [ 40.076664] REISERFS (device loop2): using 3.5.x disk format [ 40.082791] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 41.417891] Bluetooth: hci3 command 0x0419 tx timeout [ 41.423160] Bluetooth: hci5 command 0x0419 tx timeout [ 41.497772] Bluetooth: hci2 command 0x0419 tx timeout [ 41.577760] Bluetooth: hci1 command 0x0419 tx timeout [ 41.583031] Bluetooth: hci4 command 0x0419 tx timeout [ 41.657713] Bluetooth: hci0 command 0x0419 tx timeout