Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. executing program syzkaller login: [ 35.691578][ T4226] loop0: detected capacity change from 0 to 8192 [ 35.696361][ T4226] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.699356][ T4226] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 35.701882][ T4226] REISERFS (device loop0): using ordered data mode [ 35.703264][ T4226] reiserfs: using flush barriers [ 35.706496][ T4226] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.710650][ T4226] REISERFS (device loop0): checking transaction log (loop0) [ 35.714094][ T4226] REISERFS (device loop0): Using r5 hash to sort names [ 35.716239][ T4226] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 35.719428][ T4226] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 35.723111][ T4226] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 35.726509][ T4226] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 35.729800][ T4226] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 35.734668][ T4226] [ 35.735233][ T4226] ====================================================== [ 35.736719][ T4226] WARNING: possible circular locking dependency detected [ 35.738203][ T4226] 6.1.83-syzkaller #0 Not tainted [ 35.739251][ T4226] ------------------------------------------------------ [ 35.740820][ T4226] syz-executor772/4226 is trying to acquire lock: [ 35.742336][ T4226] ffff0000df3f8980 (&type->i_mutex_dir_key#6/3){+.+.}-{3:3}, at: open_xa_dir+0x11c/0x578 [ 35.744699][ T4226] [ 35.744699][ T4226] but task is already holding lock: [ 35.746350][ T4226] ffff0000d3272090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x68/0xd8 [ 35.748543][ T4226] [ 35.748543][ T4226] which lock already depends on the new lock. [ 35.748543][ T4226] [ 35.750932][ T4226] [ 35.750932][ T4226] the existing dependency chain (in reverse order) is: [ 35.752920][ T4226] [ 35.752920][ T4226] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 35.754508][ T4226] __mutex_lock_common+0x190/0x21a0 [ 35.755857][ T4226] mutex_lock_nested+0x38/0x44 [ 35.757012][ T4226] reiserfs_write_lock+0x7c/0xe8 [ 35.758271][ T4226] reiserfs_mkdir+0x280/0x77c [ 35.759490][ T4226] open_xa_dir+0x288/0x578 [ 35.760592][ T4226] xattr_lookup+0x3c/0x268 [ 35.761712][ T4226] reiserfs_xattr_set_handle+0xe4/0xe90 [ 35.763074][ T4226] __reiserfs_set_acl+0x434/0x5b8 [ 35.764366][ T4226] reiserfs_set_acl+0x428/0x60c [ 35.765494][ T4226] posix_acl_xattr_set+0x2f8/0x398 [ 35.766692][ T4226] __vfs_setxattr+0x388/0x3a4 [ 35.767826][ T4226] __vfs_setxattr_noperm+0x110/0x528 [ 35.769132][ T4226] __vfs_setxattr_locked+0x1ec/0x218 [ 35.770527][ T4226] vfs_setxattr+0x1a8/0x344 [ 35.771700][ T4226] setxattr+0x230/0x294 [ 35.772761][ T4226] __arm64_sys_fsetxattr+0x1a8/0x224 [ 35.774038][ T4226] invoke_syscall+0x98/0x2c0 [ 35.775213][ T4226] el0_svc_common+0x138/0x258 [ 35.776354][ T4226] do_el0_svc+0x64/0x218 [ 35.777504][ T4226] el0_svc+0x58/0x168 [ 35.778514][ T4226] el0t_64_sync_handler+0x84/0xf0 [ 35.779764][ T4226] el0t_64_sync+0x18c/0x190 [ 35.780938][ T4226] [ 35.780938][ T4226] -> #0 (&type->i_mutex_dir_key#6/3){+.+.}-{3:3}: [ 35.782978][ T4226] __lock_acquire+0x3338/0x7680 [ 35.784144][ T4226] lock_acquire+0x26c/0x7cc [ 35.785227][ T4226] down_write_nested+0x64/0x94 [ 35.786399][ T4226] open_xa_dir+0x11c/0x578 [ 35.787479][ T4226] reiserfs_for_each_xattr+0x16c/0x8d8 [ 35.788771][ T4226] reiserfs_delete_xattrs+0x2c/0xa4 [ 35.790039][ T4226] reiserfs_evict_inode+0x1dc/0x3f0 [ 35.791340][ T4226] evict+0x260/0x68c [ 35.792326][ T4226] iput+0x7c0/0x8a4 [ 35.793275][ T4226] reiserfs_new_inode+0xc24/0x1724 [ 35.794527][ T4226] reiserfs_create+0x33c/0x5a4 [ 35.795673][ T4226] path_openat+0xeac/0x2548 [ 35.796867][ T4226] do_filp_open+0x1bc/0x3cc [ 35.797994][ T4226] do_sys_openat2+0x128/0x3d8 [ 35.799147][ T4226] __arm64_sys_openat+0x1f0/0x240 [ 35.800357][ T4226] invoke_syscall+0x98/0x2c0 [ 35.801532][ T4226] el0_svc_common+0x138/0x258 [ 35.802659][ T4226] do_el0_svc+0x64/0x218 [ 35.803682][ T4226] el0_svc+0x58/0x168 [ 35.804696][ T4226] el0t_64_sync_handler+0x84/0xf0 [ 35.805929][ T4226] el0t_64_sync+0x18c/0x190 [ 35.807062][ T4226] [ 35.807062][ T4226] other info that might help us debug this: [ 35.807062][ T4226] [ 35.809321][ T4226] Possible unsafe locking scenario: [ 35.809321][ T4226] [ 35.810855][ T4226] CPU0 CPU1 [ 35.812054][ T4226] ---- ---- [ 35.813275][ T4226] lock(&sbi->lock); [ 35.814200][ T4226] lock(&type->i_mutex_dir_key#6/3); [ 35.816013][ T4226] lock(&sbi->lock); [ 35.817493][ T4226] lock(&type->i_mutex_dir_key#6/3); [ 35.818752][ T4226] [ 35.818752][ T4226] *** DEADLOCK *** [ 35.818752][ T4226] [ 35.820624][ T4226] 3 locks held by syz-executor772/4226: [ 35.821844][ T4226] #0: ffff0000d8170460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 35.823840][ T4226] #1: ffff0000df3f82e0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x5ec/0x2548 [ 35.826160][ T4226] #2: ffff0000d3272090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x68/0xd8 [ 35.828434][ T4226] [ 35.828434][ T4226] stack backtrace: [ 35.829792][ T4226] CPU: 1 PID: 4226 Comm: syz-executor772 Not tainted 6.1.83-syzkaller #0 [ 35.831552][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 35.833736][ T4226] Call trace: [ 35.834511][ T4226] dump_backtrace+0x1c8/0x1f4 [ 35.835534][ T4226] show_stack+0x2c/0x3c [ 35.836475][ T4226] dump_stack_lvl+0x108/0x170 [ 35.837503][ T4226] dump_stack+0x1c/0x5c [ 35.838491][ T4226] print_circular_bug+0x150/0x1b8 [ 35.839759][ T4226] check_noncircular+0x2cc/0x378 [ 35.840949][ T4226] __lock_acquire+0x3338/0x7680 [ 35.842048][ T4226] lock_acquire+0x26c/0x7cc [ 35.843104][ T4226] down_write_nested+0x64/0x94 [ 35.844197][ T4226] open_xa_dir+0x11c/0x578 [ 35.845178][ T4226] reiserfs_for_each_xattr+0x16c/0x8d8 [ 35.846457][ T4226] reiserfs_delete_xattrs+0x2c/0xa4 [ 35.847637][ T4226] reiserfs_evict_inode+0x1dc/0x3f0 [ 35.848833][ T4226] evict+0x260/0x68c [ 35.849664][ T4226] iput+0x7c0/0x8a4 [ 35.850477][ T4226] reiserfs_new_inode+0xc24/0x1724 [ 35.851568][ T4226] reiserfs_create+0x33c/0x5a4 [ 35.852638][ T4226] path_openat+0xeac/0x2548 [ 35.853632][ T4226] do_filp_open+0x1bc/0x3cc [ 35.854665][ T4226] do_sys_openat2+0x128/0x3d8 [ 35.855726][ T4226] __arm64_sys_openat+0x1f0/0x240 [ 35.856935][ T4226] invoke_syscall+0x98/0x2c0 [ 35.857968][ T4226] el0_svc_common+0x138/0x258 [ 35.859063][ T4226] do_el0_svc+0x64/0x218 [ 35.860011][ T4226] el0_svc+0x58/0x168 [ 35.860902][ T4226] el0t_64_sync_handler+0x84/0xf0 [ 35.861983][ T4226] el0t_64_sync+0x18c/0x190