Warning: Permanently added '10.128.1.107' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 60.462166][ T3543] loop0: detected capacity change from 0 to 8192 [ 60.472818][ T3543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.486473][ T3543] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 60.495959][ T3543] REISERFS (device loop0): using ordered data mode [ 60.502460][ T3543] reiserfs: using flush barriers [ 60.508785][ T3543] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.525821][ T3543] REISERFS (device loop0): checking transaction log (loop0) [ 60.535757][ T3543] REISERFS (device loop0): Using r5 hash to sort names [ 60.544655][ T3543] reiserfs: enabling write barrier flush mode [ 60.557458][ T3543] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 60.568113][ T3543] [ 60.570558][ T3543] ====================================================== [ 60.577593][ T3543] WARNING: possible circular locking dependency detected [ 60.584620][ T3543] 6.1.35-syzkaller #0 Not tainted [ 60.589650][ T3543] ------------------------------------------------------ [ 60.596656][ T3543] syz-executor396/3543 is trying to acquire lock: [ 60.603055][ T3543] ffff888018f43090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 60.612040][ T3543] [ 60.612040][ T3543] but task is already holding lock: [ 60.619392][ T3543] ffff888072f382e0 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: do_unlinkat+0x260/0x940 [ 60.629230][ T3543] [ 60.629230][ T3543] which lock already depends on the new lock. [ 60.629230][ T3543] [ 60.639618][ T3543] [ 60.639618][ T3543] the existing dependency chain (in reverse order) is: [ 60.648617][ T3543] [ 60.648617][ T3543] -> #2 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}: [ 60.657221][ T3543] lock_acquire+0x1f8/0x5a0 [ 60.662238][ T3543] down_write_nested+0x39/0x60 [ 60.667531][ T3543] do_unlinkat+0x260/0x940 [ 60.672463][ T3543] __x64_sys_unlinkat+0xca/0xf0 [ 60.677837][ T3543] do_syscall_64+0x3d/0xb0 [ 60.682792][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.689213][ T3543] [ 60.689213][ T3543] -> #1 (sb_writers#9){.+.+}-{0:0}: [ 60.696607][ T3543] lock_acquire+0x1f8/0x5a0 [ 60.701630][ T3543] sb_start_write+0x4d/0x1c0 [ 60.706747][ T3543] mnt_want_write_file+0x5a/0x1f0 [ 60.712293][ T3543] reiserfs_ioctl+0x170/0x340 [ 60.717494][ T3543] __se_sys_ioctl+0xf1/0x160 [ 60.722635][ T3543] do_syscall_64+0x3d/0xb0 [ 60.727670][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.734093][ T3543] [ 60.734093][ T3543] -> #0 (&sbi->lock){+.+.}-{3:3}: [ 60.741301][ T3543] validate_chain+0x1667/0x58e0 [ 60.746676][ T3543] __lock_acquire+0x125b/0x1f80 [ 60.752048][ T3543] lock_acquire+0x1f8/0x5a0 [ 60.757067][ T3543] __mutex_lock_common+0x1d4/0x2520 [ 60.762793][ T3543] mutex_lock_nested+0x17/0x20 [ 60.768084][ T3543] reiserfs_write_lock+0x76/0xd0 [ 60.773544][ T3543] reiserfs_lookup+0x15c/0x4b0 [ 60.778831][ T3543] __lookup_hash+0x117/0x240 [ 60.783942][ T3543] do_unlinkat+0x28e/0x940 [ 60.788880][ T3543] __x64_sys_unlinkat+0xca/0xf0 [ 60.794272][ T3543] do_syscall_64+0x3d/0xb0 [ 60.799214][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.805631][ T3543] [ 60.805631][ T3543] other info that might help us debug this: [ 60.805631][ T3543] [ 60.815860][ T3543] Chain exists of: [ 60.815860][ T3543] &sbi->lock --> sb_writers#9 --> &type->i_mutex_dir_key#6/1 [ 60.815860][ T3543] [ 60.829196][ T3543] Possible unsafe locking scenario: [ 60.829196][ T3543] [ 60.836643][ T3543] CPU0 CPU1 [ 60.842005][ T3543] ---- ---- [ 60.847369][ T3543] lock(&type->i_mutex_dir_key#6/1); [ 60.852762][ T3543] lock(sb_writers#9); [ 60.859448][ T3543] lock(&type->i_mutex_dir_key#6/1); [ 60.867726][ T3543] lock(&sbi->lock); [ 60.871719][ T3543] [ 60.871719][ T3543] *** DEADLOCK *** [ 60.871719][ T3543] [ 60.879862][ T3543] 2 locks held by syz-executor396/3543: [ 60.885399][ T3543] #0: ffff88807aa2e460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 60.894547][ T3543] #1: ffff888072f382e0 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: do_unlinkat+0x260/0x940 [ 60.904830][ T3543] [ 60.904830][ T3543] stack backtrace: [ 60.910709][ T3543] CPU: 0 PID: 3543 Comm: syz-executor396 Not tainted 6.1.35-syzkaller #0 [ 60.919117][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 60.929177][ T3543] Call Trace: [ 60.932457][ T3543] [ 60.935390][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 60.940078][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 60.945547][ T3543] ? print_circular_bug+0x12b/0x1a0 [ 60.950764][ T3543] check_noncircular+0x2fa/0x3b0 [ 60.955707][ T3543] ? add_chain_block+0x850/0x850 [ 60.960649][ T3543] ? lockdep_lock+0x11f/0x2a0 [ 60.965373][ T3543] ? deref_stack_reg+0x17c/0x210 [ 60.970319][ T3543] ? __lock_acquire+0x1f80/0x1f80 [ 60.975340][ T3543] ? _find_first_zero_bit+0xd0/0x100 [ 60.980637][ T3543] validate_chain+0x1667/0x58e0 [ 60.985494][ T3543] ? unwind_next_frame+0x1a3f/0x2220 [ 60.990787][ T3543] ? kernel_text_address+0x9f/0xd0 [ 60.995911][ T3543] ? unwind_get_return_address+0x49/0x80 [ 61.001547][ T3543] ? reacquire_held_locks+0x660/0x660 [ 61.006921][ T3543] ? arch_stack_walk+0xf3/0x140 [ 61.011780][ T3543] ? stack_trace_save+0x113/0x1c0 [ 61.016808][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 61.022092][ T3543] ? check_noncircular+0x1e3/0x3b0 [ 61.027213][ T3543] ? mark_lock+0x9a/0x340 [ 61.031571][ T3543] __lock_acquire+0x125b/0x1f80 [ 61.036455][ T3543] lock_acquire+0x1f8/0x5a0 [ 61.041067][ T3543] ? reiserfs_write_lock+0x76/0xd0 [ 61.046198][ T3543] ? read_lock_is_recursive+0x10/0x10 [ 61.051665][ T3543] ? __might_sleep+0xb0/0xb0 [ 61.056263][ T3543] ? reacquire_held_locks+0x660/0x660 [ 61.061741][ T3543] __mutex_lock_common+0x1d4/0x2520 [ 61.066966][ T3543] ? reiserfs_write_lock+0x76/0xd0 [ 61.072085][ T3543] ? slab_post_alloc_hook+0x50/0x370 [ 61.077378][ T3543] ? d_alloc+0x48/0x1d0 [ 61.081545][ T3543] ? reiserfs_write_lock+0x76/0xd0 [ 61.086752][ T3543] ? mutex_lock_io_nested+0x60/0x60 [ 61.091964][ T3543] ? __lock_acquire+0x125b/0x1f80 [ 61.097170][ T3543] mutex_lock_nested+0x17/0x20 [ 61.102118][ T3543] reiserfs_write_lock+0x76/0xd0 [ 61.107155][ T3543] reiserfs_lookup+0x15c/0x4b0 [ 61.111928][ T3543] ? reiserfs_find_entry+0x19b0/0x19b0 [ 61.117416][ T3543] ? __lock_acquire+0x1f80/0x1f80 [ 61.122440][ T3543] ? do_raw_spin_lock+0x14a/0x370 [ 61.127479][ T3543] ? rcu_is_watching+0x11/0xb0 [ 61.132255][ T3543] ? _raw_spin_unlock+0x24/0x40 [ 61.137107][ T3543] ? d_alloc+0x194/0x1d0 [ 61.141355][ T3543] __lookup_hash+0x117/0x240 [ 61.145955][ T3543] do_unlinkat+0x28e/0x940 [ 61.150382][ T3543] ? fsnotify_link_count+0xf0/0xf0 [ 61.155505][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 61.161490][ T3543] __x64_sys_unlinkat+0xca/0xf0 [ 61.166351][ T3543] do_syscall_64+0x3d/0xb0 [ 61.170780][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.176683][ T3543] RIP: 0033:0x7f56d2edc909 [ 61.181099][ T3543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.200706][ T3543] RSP: 002b:00007ffc2ad02e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 61.209292][ T3543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: