Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 98.659393] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 98.670193] REISERFS (device loop0): using ordered data mode [ 98.675993] reiserfs: using flush barriers [ 98.681572] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.697870] REISERFS (device loop0): checking transaction log (loop0) [ 98.706014] REISERFS (device loop0): Using rupasov hash to sort names [ 98.713406] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 98.722828] [ 98.724448] ====================================================== [ 98.730746] WARNING: possible circular locking dependency detected [ 98.737046] 4.14.298-syzkaller #0 Not tainted [ 98.741519] ------------------------------------------------------ [ 98.747826] syz-executor370/7991 is trying to acquire lock: [ 98.753506] (&journal->j_mutex){+.+.}, at: [] do_journal_begin_r+0x26b/0xde0 [ 98.762321] [ 98.762321] but task is already holding lock: [ 98.768258] (sb_writers#10){.+.+}, at: [] mnt_want_write_file+0xfd/0x3b0 [ 98.776731] [ 98.776731] which lock already depends on the new lock. [ 98.776731] [ 98.785012] [ 98.785012] the existing dependency chain (in reverse order) is: [ 98.792601] [ 98.792601] -> #2 (sb_writers#10){.+.+}: [ 98.798116] __sb_start_write+0x64/0x260 [ 98.802668] mnt_want_write_file+0xfd/0x3b0 [ 98.807480] reiserfs_ioctl+0x18e/0x8b0 [ 98.811943] do_vfs_ioctl+0x75a/0xff0 [ 98.816232] SyS_ioctl+0x7f/0xb0 [ 98.820089] do_syscall_64+0x1d5/0x640 [ 98.824468] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 98.830144] [ 98.830144] -> #1 (&sbi->lock){+.+.}: [ 98.835395] __mutex_lock+0xc4/0x1310 [ 98.839685] reiserfs_write_lock_nested+0x59/0xd0 [ 98.845020] do_journal_begin_r+0x276/0xde0 [ 98.849831] journal_begin+0x162/0x3d0 [ 98.854210] reiserfs_fill_super+0x18f4/0x2990 [ 98.859282] mount_bdev+0x2b3/0x360 [ 98.863399] mount_fs+0x92/0x2a0 [ 98.867256] vfs_kern_mount.part.0+0x5b/0x470 [ 98.872240] do_mount+0xe65/0x2a30 [ 98.876274] SyS_mount+0xa8/0x120 [ 98.880218] do_syscall_64+0x1d5/0x640 [ 98.884595] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 98.890273] [ 98.890273] -> #0 (&journal->j_mutex){+.+.}: [ 98.896131] lock_acquire+0x170/0x3f0 [ 98.900423] __mutex_lock+0xc4/0x1310 [ 98.904715] do_journal_begin_r+0x26b/0xde0 [ 98.909528] journal_begin+0x162/0x3d0 [ 98.913905] reiserfs_dirty_inode+0xd9/0x200 [ 98.918805] __mark_inode_dirty+0x11e/0xf40 [ 98.923616] reiserfs_ioctl+0x6f6/0x8b0 [ 98.928085] do_vfs_ioctl+0x75a/0xff0 [ 98.932376] SyS_ioctl+0x7f/0xb0 [ 98.936235] do_syscall_64+0x1d5/0x640 [ 98.940612] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 98.946286] [ 98.946286] other info that might help us debug this: [ 98.946286] [ 98.954393] Chain exists of: [ 98.954393] &journal->j_mutex --> &sbi->lock --> sb_writers#10 [ 98.954393] [ 98.964853] Possible unsafe locking scenario: [ 98.964853] [ 98.970878] CPU0 CPU1 [ 98.975512] ---- ---- [ 98.980146] lock(sb_writers#10); [ 98.983656] lock(&sbi->lock); [ 98.989419] lock(sb_writers#10); [ 98.995448] lock(&journal->j_mutex); [ 98.999304] [ 98.999304] *** DEADLOCK *** [ 98.999304] [ 99.005334] 1 lock held by syz-executor370/7991: [ 99.010055] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write_file+0xfd/0x3b0 [ 99.018956] [ 99.018956] stack backtrace: [ 99.023424] CPU: 1 PID: 7991 Comm: syz-executor370 Not tainted 4.14.298-syzkaller #0 [ 99.031272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.040600] Call Trace: [ 99.043168] dump_stack+0x1b2/0x281 [ 99.046769] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 99.052541] __lock_acquire+0x2e0e/0x3f20 [ 99.056663] ? trace_hardirqs_on+0x10/0x10 [ 99.060867] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 99.066734] ? unwind_next_frame+0xe54/0x17d0 [ 99.071200] ? unwind_next_frame+0xe54/0x17d0 [ 99.075664] ? deref_stack_reg+0x124/0x1a0 [ 99.079868] lock_acquire+0x170/0x3f0 [ 99.083638] ? do_journal_begin_r+0x26b/0xde0 [ 99.088101] ? do_journal_begin_r+0x26b/0xde0 [ 99.092565] __mutex_lock+0xc4/0x1310 [ 99.096336] ? do_journal_begin_r+0x26b/0xde0 [ 99.100812] ? do_journal_begin_r+0x26b/0xde0 [ 99.105293] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 99.110730] ? __mutex_unlock_slowpath+0x75/0x770 [ 99.115549] ? wait_for_completion_io+0x10/0x10 [ 99.120191] ? __lock_acquire+0x2190/0x3f20 [ 99.124483] do_journal_begin_r+0x26b/0xde0 [ 99.128778] ? do_journal_end+0x4310/0x4310 [ 99.133069] ? trace_hardirqs_on+0x10/0x10 [ 99.137274] ? reiserfs_write_lock+0x75/0xf0 [ 99.141656] ? __mutex_lock+0x360/0x1310 [ 99.145685] journal_begin+0x162/0x3d0 [ 99.149554] reiserfs_dirty_inode+0xd9/0x200 [ 99.153938] ? reiserfs_unfreeze+0xa0/0xa0 [ 99.158142] ? mark_held_locks+0xa6/0xf0 [ 99.162174] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 99.167595] ? reiserfs_unfreeze+0xa0/0xa0 [ 99.171802] __mark_inode_dirty+0x11e/0xf40 [ 99.176094] reiserfs_ioctl+0x6f6/0x8b0 [ 99.180041] ? reiserfs_unpack+0x510/0x510 [ 99.184244] do_vfs_ioctl+0x75a/0xff0 [ 99.188016] ? ioctl_preallocate+0x1a0/0x1a0 [ 99.192396] ? lock_acquire+0x170/0x3f0 [ 99.196339] ? dnotify_flush+0x19/0x2c0 [ 99.200283] ? fput_many+0xe/0x140 [ 99.203793] ? filp_close+0x102/0x140 [ 99.207565] ? security_file_ioctl+0x83/0xb0