Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. executing program [ 41.826943][ T3964] loop0: detected capacity change from 0 to 8192 [ 41.910617][ T3964] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.913148][ T3964] REISERFS (device loop0): using ordered data mode [ 41.914617][ T3964] reiserfs: using flush barriers [ 41.919222][ T3964] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.923054][ T3964] REISERFS (device loop0): checking transaction log (loop0) [ 41.926781][ T3964] REISERFS (device loop0): Using r5 hash to sort names [ 41.929529][ T3964] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 41.932625][ T3964] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 41.936728][ T3964] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 41.940712][ T3964] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 41.944215][ T3964] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 41.949970][ T3964] [ 41.950499][ T3964] ====================================================== [ 41.952119][ T3964] WARNING: possible circular locking dependency detected [ 41.953649][ T3964] 5.15.153-syzkaller #0 Not tainted [ 41.954748][ T3964] ------------------------------------------------------ [ 41.956267][ T3964] syz-executor297/3964 is trying to acquire lock: [ 41.957707][ T3964] ffff0000df0a8980 (&type->i_mutex_dir_key#6/3){+.+.}-{3:3}, at: open_xa_dir+0x11c/0x578 [ 41.959889][ T3964] [ 41.959889][ T3964] but task is already holding lock: [ 41.961601][ T3964] ffff0000d844f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x68/0xd8 [ 41.963756][ T3964] [ 41.963756][ T3964] which lock already depends on the new lock. [ 41.963756][ T3964] [ 41.966128][ T3964] [ 41.966128][ T3964] the existing dependency chain (in reverse order) is: [ 41.968134][ T3964] [ 41.968134][ T3964] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 41.969805][ T3964] __mutex_lock_common+0x194/0x2154 [ 41.971127][ T3964] mutex_lock_nested+0xa4/0xf8 [ 41.972323][ T3964] reiserfs_write_lock+0x7c/0xe8 [ 41.973572][ T3964] reiserfs_mkdir+0x280/0x77c [ 41.974724][ T3964] open_xa_dir+0x288/0x578 [ 41.975784][ T3964] xattr_lookup+0x3c/0x268 [ 41.976915][ T3964] reiserfs_xattr_set_handle+0xe4/0xc10 [ 41.978310][ T3964] __reiserfs_set_acl+0x434/0x5b8 [ 41.979564][ T3964] reiserfs_set_acl+0x428/0x60c [ 41.980723][ T3964] posix_acl_xattr_set+0x2cc/0x378 [ 41.982028][ T3964] __vfs_setxattr+0x388/0x3a4 [ 41.983228][ T3964] __vfs_setxattr_noperm+0x110/0x528 [ 41.984547][ T3964] __vfs_setxattr_locked+0x1ec/0x218 [ 41.985792][ T3964] vfs_setxattr+0x1a8/0x344 [ 41.986953][ T3964] setxattr+0x250/0x2b4 [ 41.987942][ T3964] __arm64_sys_fsetxattr+0x1a8/0x224 [ 41.989287][ T3964] invoke_syscall+0x98/0x2b8 [ 41.990466][ T3964] el0_svc_common+0x138/0x258 [ 41.991663][ T3964] do_el0_svc+0x58/0x14c [ 41.992702][ T3964] el0_svc+0x7c/0x1f0 [ 41.993768][ T3964] el0t_64_sync_handler+0x84/0xe4 [ 41.994939][ T3964] el0t_64_sync+0x1a0/0x1a4 [ 41.996056][ T3964] [ 41.996056][ T3964] -> #0 (&type->i_mutex_dir_key#6/3){+.+.}-{3:3}: [ 41.998019][ T3964] __lock_acquire+0x32d4/0x7638 [ 41.999230][ T3964] lock_acquire+0x240/0x77c [ 42.000402][ T3964] down_write_nested+0x118/0x26c [ 42.001655][ T3964] open_xa_dir+0x11c/0x578 [ 42.002820][ T3964] reiserfs_for_each_xattr+0x16c/0x8d8 [ 42.004295][ T3964] reiserfs_delete_xattrs+0x2c/0xa4 [ 42.005659][ T3964] reiserfs_evict_inode+0x1dc/0x3f0 [ 42.006916][ T3964] evict+0x260/0x68c [ 42.007893][ T3964] iput+0x744/0x824 [ 42.008850][ T3964] reiserfs_new_inode+0xc24/0x1724 [ 42.010075][ T3964] reiserfs_mkdir+0x4ac/0x77c [ 42.011202][ T3964] vfs_mkdir+0x350/0x514 [ 42.012249][ T3964] do_mkdirat+0x20c/0x610 [ 42.013353][ T3964] __arm64_sys_mkdirat+0x90/0xa8 [ 42.014601][ T3964] invoke_syscall+0x98/0x2b8 [ 42.015729][ T3964] el0_svc_common+0x138/0x258 [ 42.016843][ T3964] do_el0_svc+0x58/0x14c [ 42.017922][ T3964] el0_svc+0x7c/0x1f0 [ 42.018977][ T3964] el0t_64_sync_handler+0x84/0xe4 [ 42.020183][ T3964] el0t_64_sync+0x1a0/0x1a4 [ 42.021294][ T3964] [ 42.021294][ T3964] other info that might help us debug this: [ 42.021294][ T3964] [ 42.023577][ T3964] Possible unsafe locking scenario: [ 42.023577][ T3964] [ 42.025206][ T3964] CPU0 CPU1 [ 42.026464][ T3964] ---- ---- [ 42.027720][ T3964] lock(&sbi->lock); [ 42.028596][ T3964] lock(&type->i_mutex_dir_key#6/3); [ 42.030454][ T3964] lock(&sbi->lock); [ 42.032025][ T3964] lock(&type->i_mutex_dir_key#6/3); [ 42.033232][ T3964] [ 42.033232][ T3964] *** DEADLOCK *** [ 42.033232][ T3964] [ 42.035114][ T3964] 3 locks held by syz-executor297/3964: [ 42.036306][ T3964] #0: ffff0000c90a0460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 42.038421][ T3964] #1: ffff0000df0a82e0 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: filename_create+0x204/0x468 [ 42.040787][ T3964] #2: ffff0000d844f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x68/0xd8 [ 42.043016][ T3964] [ 42.043016][ T3964] stack backtrace: [ 42.044257][ T3964] CPU: 0 PID: 3964 Comm: syz-executor297 Not tainted 5.15.153-syzkaller #0 [ 42.046199][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.048423][ T3964] Call trace: [ 42.049146][ T3964] dump_backtrace+0x0/0x530 [ 42.050108][ T3964] show_stack+0x2c/0x3c [ 42.051108][ T3964] dump_stack_lvl+0x108/0x170 [ 42.052142][ T3964] dump_stack+0x1c/0x58 [ 42.053046][ T3964] print_circular_bug+0x150/0x1b8 [ 42.054282][ T3964] check_noncircular+0x2cc/0x378 [ 42.055372][ T3964] __lock_acquire+0x32d4/0x7638 [ 42.056549][ T3964] lock_acquire+0x240/0x77c [ 42.057610][ T3964] down_write_nested+0x118/0x26c [ 42.058749][ T3964] open_xa_dir+0x11c/0x578 [ 42.059768][ T3964] reiserfs_for_each_xattr+0x16c/0x8d8 [ 42.061011][ T3964] reiserfs_delete_xattrs+0x2c/0xa4 [ 42.062135][ T3964] reiserfs_evict_inode+0x1dc/0x3f0 [ 42.063221][ T3964] evict+0x260/0x68c [ 42.064137][ T3964] iput+0x744/0x824 [ 42.065073][ T3964] reiserfs_new_inode+0xc24/0x1724 [ 42.066261][ T3964] reiserfs_mkdir+0x4ac/0x77c [ 42.067419][ T3964] vfs_mkdir+0x350/0x514 [ 42.068352][ T3964] do_mkdirat+0x20c/0x610 [ 42.069382][ T3964] __arm64_sys_mkdirat+0x90/0xa8 [ 42.070500][ T3964] invoke_syscall+0x98/0x2b8 [ 42.071732][ T3964] el0_svc_common+0x138/0x258 [ 42.072849][ T3964] do_el0_svc+0x58/0x14c [ 42.073734][ T3964] el0_svc+0x7c/0x1f0 [ 42.074604][ T3964] el0t_64_sync_handler+0x84/0xe4 [ 42.075815][ T3964] el0t_64_sync+0x1a0/0x1a4