Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. executing program [ 35.404288][ T6087] syz-executor145[6087]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 35.446360][ T6087] loop0: detected capacity change from 0 to 8192 [ 35.451223][ T6087] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.454564][ T6087] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 35.456775][ T6087] REISERFS (device loop0): using ordered data mode [ 35.458402][ T6087] reiserfs: using flush barriers [ 35.460548][ T6087] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.464832][ T6087] REISERFS (device loop0): checking transaction log (loop0) [ 35.468402][ T6087] REISERFS (device loop0): Using r5 hash to sort names [ 35.470367][ T6087] REISERFS (device loop0): using 3.5.x disk format [ 35.472595][ T6087] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 35.476828][ T6087] [ 35.477322][ T6087] ====================================================== [ 35.479112][ T6087] WARNING: possible circular locking dependency detected [ 35.480899][ T6087] 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 Not tainted [ 35.482665][ T6087] ------------------------------------------------------ [ 35.484523][ T6087] syz-executor145/6087 is trying to acquire lock: [ 35.486252][ T6087] ffff0000d4daa410 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 35.488678][ T6087] [ 35.488678][ T6087] but task is already holding lock: [ 35.490740][ T6087] ffff0000db667090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 [ 35.493178][ T6087] [ 35.493178][ T6087] which lock already depends on the new lock. [ 35.493178][ T6087] [ 35.495995][ T6087] [ 35.495995][ T6087] the existing dependency chain (in reverse order) is: [ 35.498469][ T6087] [ 35.498469][ T6087] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 35.500511][ T6087] __mutex_lock_common+0x190/0x21a0 [ 35.502048][ T6087] mutex_lock_nested+0x2c/0x38 [ 35.503519][ T6087] reiserfs_write_lock+0x7c/0xe8 [ 35.504960][ T6087] reiserfs_lookup+0x128/0x45c [ 35.506339][ T6087] __lookup_slow+0x250/0x374 [ 35.507744][ T6087] lookup_one_len+0x178/0x28c [ 35.509091][ T6087] reiserfs_lookup_privroot+0x8c/0x184 [ 35.510687][ T6087] reiserfs_fill_super+0x1bc0/0x2028 [ 35.512188][ T6087] mount_bdev+0x1e8/0x2b4 [ 35.513466][ T6087] get_super_block+0x44/0x58 [ 35.514814][ T6087] legacy_get_tree+0xd4/0x16c [ 35.516177][ T6087] vfs_get_tree+0x90/0x288 [ 35.517500][ T6087] do_new_mount+0x25c/0x8c8 [ 35.518862][ T6087] path_mount+0x590/0xe04 [ 35.520142][ T6087] __arm64_sys_mount+0x45c/0x594 [ 35.521599][ T6087] invoke_syscall+0x98/0x2b8 [ 35.522971][ T6087] el0_svc_common+0x130/0x23c [ 35.524386][ T6087] do_el0_svc+0x48/0x58 [ 35.525591][ T6087] el0_svc+0x54/0x158 [ 35.526835][ T6087] el0t_64_sync_handler+0x84/0xfc [ 35.528388][ T6087] el0t_64_sync+0x190/0x194 [ 35.529754][ T6087] [ 35.529754][ T6087] -> #1 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 35.532000][ T6087] down_write+0x50/0xc0 [ 35.533256][ T6087] path_openat+0x5f0/0x27f8 [ 35.534627][ T6087] do_filp_open+0x1bc/0x3cc [ 35.535967][ T6087] do_sys_openat2+0x124/0x1b8 [ 35.537353][ T6087] __arm64_sys_openat+0x1f0/0x240 [ 35.538841][ T6087] invoke_syscall+0x98/0x2b8 [ 35.540284][ T6087] el0_svc_common+0x130/0x23c [ 35.541783][ T6087] do_el0_svc+0x48/0x58 [ 35.542986][ T6087] el0_svc+0x54/0x158 [ 35.544177][ T6087] el0t_64_sync_handler+0x84/0xfc [ 35.545628][ T6087] el0t_64_sync+0x190/0x194 [ 35.546980][ T6087] [ 35.546980][ T6087] -> #0 (sb_writers#8){.+.+}-{0:0}: [ 35.549012][ T6087] __lock_acquire+0x3370/0x75e8 [ 35.550438][ T6087] lock_acquire+0x23c/0x71c [ 35.551742][ T6087] sb_start_write+0x60/0x2ec [ 35.553082][ T6087] mnt_want_write_file+0x64/0x1e8 [ 35.554619][ T6087] reiserfs_ioctl+0x188/0x42c [ 35.556064][ T6087] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.557534][ T6087] invoke_syscall+0x98/0x2b8 [ 35.558867][ T6087] el0_svc_common+0x130/0x23c [ 35.560287][ T6087] do_el0_svc+0x48/0x58 [ 35.561470][ T6087] el0_svc+0x54/0x158 [ 35.562661][ T6087] el0t_64_sync_handler+0x84/0xfc [ 35.564111][ T6087] el0t_64_sync+0x190/0x194 [ 35.565440][ T6087] [ 35.565440][ T6087] other info that might help us debug this: [ 35.565440][ T6087] [ 35.568104][ T6087] Chain exists of: [ 35.568104][ T6087] sb_writers#8 --> &type->i_mutex_dir_key#6 --> &sbi->lock [ 35.568104][ T6087] [ 35.571733][ T6087] Possible unsafe locking scenario: [ 35.571733][ T6087] [ 35.573650][ T6087] CPU0 CPU1 [ 35.575051][ T6087] ---- ---- [ 35.576491][ T6087] lock(&sbi->lock); [ 35.577524][ T6087] lock(&type->i_mutex_dir_key#6); [ 35.579529][ T6087] lock(&sbi->lock); [ 35.581240][ T6087] rlock(sb_writers#8); [ 35.582459][ T6087] [ 35.582459][ T6087] *** DEADLOCK *** [ 35.582459][ T6087] [ 35.584658][ T6087] 1 lock held by syz-executor145/6087: [ 35.586115][ T6087] #0: ffff0000db667090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7c/0xe8 [ 35.588655][ T6087] [ 35.588655][ T6087] stack backtrace: [ 35.590212][ T6087] CPU: 0 PID: 6087 Comm: syz-executor145 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 35.592782][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 35.595472][ T6087] Call trace: [ 35.596336][ T6087] dump_backtrace+0x1b8/0x1e4 [ 35.597580][ T6087] show_stack+0x2c/0x44 [ 35.598658][ T6087] dump_stack_lvl+0xd0/0x124 [ 35.599886][ T6087] dump_stack+0x1c/0x28 [ 35.600985][ T6087] print_circular_bug+0x150/0x1b8 [ 35.602308][ T6087] check_noncircular+0x310/0x404 [ 35.603623][ T6087] __lock_acquire+0x3370/0x75e8 [ 35.604954][ T6087] lock_acquire+0x23c/0x71c [ 35.606168][ T6087] sb_start_write+0x60/0x2ec [ 35.607370][ T6087] mnt_want_write_file+0x64/0x1e8 [ 35.608723][ T6087] reiserfs_ioctl+0x188/0x42c [ 35.609968][ T6087] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.611340][ T6087] invoke_syscall+0x98/0x2b8 [ 35.612562][ T6087] el0_svc_common+0x130/0x23c [ 35.613826][ T6087] do_el0_svc+0x48/0x58 [ 35.614939][ T6087] el0_svc+0x54/0x158 [ 35.615992][ T6087] el0t_64_sync_handler+0x84/0xfc [ 35.617319][ T6087] el0t_64_sync+0x190/0x194