Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. executing program [ 37.242481][ T3960] loop0: detected capacity change from 0 to 8192 [ 37.352711][ T3960] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 37.354965][ T3960] REISERFS (device loop0): using ordered data mode [ 37.356588][ T3960] reiserfs: using flush barriers [ 37.358841][ T3960] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.363139][ T3960] REISERFS (device loop0): checking transaction log (loop0) [ 37.366573][ T3960] REISERFS (device loop0): Using tea hash to sort names [ 37.368917][ T3960] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 37.372515][ T3960] [ 37.373051][ T3960] ====================================================== [ 37.374635][ T3960] WARNING: possible circular locking dependency detected [ 37.376177][ T3960] 5.15.156-syzkaller #0 Not tainted [ 37.377360][ T3960] ------------------------------------------------------ [ 37.378866][ T3960] syz-executor211/3960 is trying to acquire lock: [ 37.380282][ T3960] ffff80001acc90f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_begin_r+0x2e8/0xe3c [ 37.382338][ T3960] [ 37.382338][ T3960] but task is already holding lock: [ 37.383965][ T3960] ffff0000c966e460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 37.386088][ T3960] [ 37.386088][ T3960] which lock already depends on the new lock. [ 37.386088][ T3960] [ 37.388400][ T3960] [ 37.388400][ T3960] the existing dependency chain (in reverse order) is: [ 37.390364][ T3960] [ 37.390364][ T3960] -> #2 (sb_writers#8){.+.+}-{0:0}: [ 37.392111][ T3960] sb_start_write+0xf0/0x3ac [ 37.393259][ T3960] mnt_want_write_file+0x64/0x1e8 [ 37.394559][ T3960] reiserfs_ioctl+0x188/0x4b8 [ 37.395704][ T3960] __arm64_sys_ioctl+0x14c/0x1c8 [ 37.396909][ T3960] invoke_syscall+0x98/0x2b8 [ 37.398091][ T3960] el0_svc_common+0x138/0x258 [ 37.399311][ T3960] do_el0_svc+0x58/0x14c [ 37.400364][ T3960] el0_svc+0x7c/0x1f0 [ 37.401441][ T3960] el0t_64_sync_handler+0x84/0xe4 [ 37.402634][ T3960] el0t_64_sync+0x1a0/0x1a4 [ 37.403695][ T3960] [ 37.403695][ T3960] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 37.405289][ T3960] __mutex_lock_common+0x194/0x2154 [ 37.406509][ T3960] mutex_lock_nested+0xa4/0xf8 [ 37.407696][ T3960] reiserfs_write_lock_nested+0x68/0xd8 [ 37.409093][ T3960] do_journal_begin_r+0x2f4/0xe3c [ 37.410269][ T3960] journal_begin+0x110/0x2f4 [ 37.411394][ T3960] reiserfs_fill_super+0x13c0/0x1e8c [ 37.412736][ T3960] mount_bdev+0x274/0x370 [ 37.413804][ T3960] get_super_block+0x44/0x58 [ 37.414999][ T3960] legacy_get_tree+0xd4/0x16c [ 37.416145][ T3960] vfs_get_tree+0x90/0x274 [ 37.417208][ T3960] do_new_mount+0x278/0x8fc [ 37.418302][ T3960] path_mount+0x594/0x101c [ 37.419386][ T3960] __arm64_sys_mount+0x510/0x5e0 [ 37.420543][ T3960] invoke_syscall+0x98/0x2b8 [ 37.421680][ T3960] el0_svc_common+0x138/0x258 [ 37.422864][ T3960] do_el0_svc+0x58/0x14c [ 37.423911][ T3960] el0_svc+0x7c/0x1f0 [ 37.424955][ T3960] el0t_64_sync_handler+0x84/0xe4 [ 37.426201][ T3960] el0t_64_sync+0x1a0/0x1a4 [ 37.427337][ T3960] [ 37.427337][ T3960] -> #0 (&journal->j_mutex){+.+.}-{3:3}: [ 37.429098][ T3960] __lock_acquire+0x32d4/0x7638 [ 37.430182][ T3960] lock_acquire+0x240/0x77c [ 37.431362][ T3960] __mutex_lock_common+0x194/0x2154 [ 37.432662][ T3960] mutex_lock_nested+0xa4/0xf8 [ 37.433847][ T3960] do_journal_begin_r+0x2e8/0xe3c [ 37.435105][ T3960] journal_begin+0x110/0x2f4 [ 37.436190][ T3960] reiserfs_dirty_inode+0x104/0x204 [ 37.437384][ T3960] __mark_inode_dirty+0x2b0/0x10f4 [ 37.438574][ T3960] reiserfs_ioctl+0x3c0/0x4b8 [ 37.439802][ T3960] __arm64_sys_ioctl+0x14c/0x1c8 [ 37.441025][ T3960] invoke_syscall+0x98/0x2b8 [ 37.442151][ T3960] el0_svc_common+0x138/0x258 [ 37.443326][ T3960] do_el0_svc+0x58/0x14c [ 37.444408][ T3960] el0_svc+0x7c/0x1f0 [ 37.445410][ T3960] el0t_64_sync_handler+0x84/0xe4 [ 37.446712][ T3960] el0t_64_sync+0x1a0/0x1a4 [ 37.447857][ T3960] [ 37.447857][ T3960] other info that might help us debug this: [ 37.447857][ T3960] [ 37.450110][ T3960] Chain exists of: [ 37.450110][ T3960] &journal->j_mutex --> &sbi->lock --> sb_writers#8 [ 37.450110][ T3960] [ 37.452961][ T3960] Possible unsafe locking scenario: [ 37.452961][ T3960] [ 37.454625][ T3960] CPU0 CPU1 [ 37.455900][ T3960] ---- ---- [ 37.457058][ T3960] lock(sb_writers#8); [ 37.457942][ T3960] lock(&sbi->lock); [ 37.459398][ T3960] lock(sb_writers#8); [ 37.460871][ T3960] lock(&journal->j_mutex); [ 37.461813][ T3960] [ 37.461813][ T3960] *** DEADLOCK *** [ 37.461813][ T3960] [ 37.463632][ T3960] 1 lock held by syz-executor211/3960: [ 37.464789][ T3960] #0: ffff0000c966e460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 37.466951][ T3960] [ 37.466951][ T3960] stack backtrace: [ 37.468270][ T3960] CPU: 0 PID: 3960 Comm: syz-executor211 Not tainted 5.15.156-syzkaller #0 [ 37.470233][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 37.472431][ T3960] Call trace: [ 37.473059][ T3960] dump_backtrace+0x0/0x530 [ 37.473988][ T3960] show_stack+0x2c/0x3c [ 37.474899][ T3960] dump_stack_lvl+0x108/0x170 [ 37.475912][ T3960] dump_stack+0x1c/0x58 [ 37.476798][ T3960] print_circular_bug+0x150/0x1b8 [ 37.477925][ T3960] check_noncircular+0x2cc/0x378 [ 37.479054][ T3960] __lock_acquire+0x32d4/0x7638 [ 37.480107][ T3960] lock_acquire+0x240/0x77c [ 37.481193][ T3960] __mutex_lock_common+0x194/0x2154 [ 37.482381][ T3960] mutex_lock_nested+0xa4/0xf8 [ 37.483404][ T3960] do_journal_begin_r+0x2e8/0xe3c [ 37.484577][ T3960] journal_begin+0x110/0x2f4 [ 37.485583][ T3960] reiserfs_dirty_inode+0x104/0x204 [ 37.486830][ T3960] __mark_inode_dirty+0x2b0/0x10f4 [ 37.487914][ T3960] reiserfs_ioctl+0x3c0/0x4b8 [ 37.488895][ T3960] __arm64_sys_ioctl+0x14c/0x1c8 [ 37.489922][ T3960] invoke_syscall+0x98/0x2b8 [ 37.490884][ T3960] el0_svc_common+0x138/0x258 [ 37.491935][ T3960] do_el0_svc+0x58/0x14c [ 37.492879][ T3960] el0_svc+0x7c/0x1f0 [ 37.493762][ T3960] el0t_64_sync_handler+0x84/0xe4 [ 37.494931][ T3960] el0t_64_sync+0x1a0/0x1a4