Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. executing program [ 49.797189][ T4024] loop0: detected capacity change from 0 to 8192 [ 49.895032][ T4024] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 49.897770][ T4024] REISERFS (device loop0): using ordered data mode [ 49.899588][ T4024] reiserfs: using flush barriers [ 49.902099][ T4024] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.907210][ T4024] REISERFS (device loop0): checking transaction log (loop0) [ 49.911506][ T4024] REISERFS (device loop0): Using rupasov hash to sort names [ 49.913934][ T4024] REISERFS (device loop0): using 3.5.x disk format [ 49.916201][ T4024] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 49.919478][ T4024] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 49.923164][ T4024] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 49.926255][ T4024] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 49.930278][ T4024] [ 49.930937][ T4024] ====================================================== [ 49.932886][ T4024] WARNING: possible circular locking dependency detected [ 49.934874][ T4024] 5.15.185-syzkaller #0 Not tainted [ 49.936301][ T4024] ------------------------------------------------------ [ 49.938194][ T4024] syz-executor373/4024 is trying to acquire lock: [ 49.939967][ T4024] ffff0000de6e02e0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: vfs_fileattr_set+0x108/0x8fc [ 49.942824][ T4024] [ 49.942824][ T4024] but task is already holding lock: [ 49.944834][ T4024] ffff0000ddde4460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 49.947459][ T4024] [ 49.947459][ T4024] which lock already depends on the new lock. [ 49.947459][ T4024] [ 49.950293][ T4024] [ 49.950293][ T4024] the existing dependency chain (in reverse order) is: [ 49.952735][ T4024] [ 49.952735][ T4024] -> #2 (sb_writers#8){.+.+}-{0:0}: [ 49.954780][ T4024] sb_start_write+0xec/0x358 [ 49.956135][ T4024] mnt_want_write_file+0x64/0x1e8 [ 49.957620][ T4024] reiserfs_ioctl+0x118/0x4b4 [ 49.959073][ T4024] __arm64_sys_ioctl+0x14c/0x1c8 [ 49.960613][ T4024] invoke_syscall+0x98/0x2b8 [ 49.962020][ T4024] el0_svc_common+0x138/0x258 [ 49.963460][ T4024] do_el0_svc+0x58/0x14c [ 49.964820][ T4024] el0_svc+0x78/0x1e0 [ 49.966053][ T4024] el0t_64_sync_handler+0xcc/0xe4 [ 49.967592][ T4024] el0t_64_sync+0x1a0/0x1a4 [ 49.968989][ T4024] [ 49.968989][ T4024] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 49.970990][ T4024] __mutex_lock_common+0x194/0x1edc [ 49.972555][ T4024] mutex_lock_nested+0xac/0x11c [ 49.974059][ T4024] reiserfs_write_lock+0x7c/0xe8 [ 49.975550][ T4024] reiserfs_lookup+0x11c/0x378 [ 49.977062][ T4024] __lookup_slow+0x24c/0x380 [ 49.978473][ T4024] lookup_one_len+0x178/0x28c [ 49.979919][ T4024] reiserfs_lookup_privroot+0x8c/0x204 [ 49.981575][ T4024] reiserfs_fill_super+0x17b0/0x1bb4 [ 49.983208][ T4024] mount_bdev+0x264/0x358 [ 49.984515][ T4024] get_super_block+0x44/0x58 [ 49.985971][ T4024] legacy_get_tree+0xd4/0x16c [ 49.987414][ T4024] vfs_get_tree+0x90/0x274 [ 49.988858][ T4024] do_new_mount+0x228/0x810 [ 49.990228][ T4024] path_mount+0x5b4/0x1000 [ 49.991566][ T4024] __arm64_sys_mount+0x514/0x5e4 [ 49.993171][ T4024] invoke_syscall+0x98/0x2b8 [ 49.994573][ T4024] el0_svc_common+0x138/0x258 [ 49.996049][ T4024] do_el0_svc+0x58/0x14c [ 49.997361][ T4024] el0_svc+0x78/0x1e0 [ 49.998629][ T4024] el0t_64_sync_handler+0xcc/0xe4 [ 50.000183][ T4024] el0t_64_sync+0x1a0/0x1a4 [ 50.001616][ T4024] [ 50.001616][ T4024] -> #0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}: [ 50.003946][ T4024] __lock_acquire+0x2928/0x651c [ 50.005493][ T4024] lock_acquire+0x1f4/0x620 [ 50.006923][ T4024] down_write+0xbc/0x12c [ 50.008223][ T4024] vfs_fileattr_set+0x108/0x8fc [ 50.009741][ T4024] do_vfs_ioctl+0x1c18/0x2370 [ 50.011225][ T4024] __arm64_sys_ioctl+0xe4/0x1c8 [ 50.012724][ T4024] invoke_syscall+0x98/0x2b8 [ 50.014215][ T4024] el0_svc_common+0x138/0x258 [ 50.015660][ T4024] do_el0_svc+0x58/0x14c [ 50.016982][ T4024] el0_svc+0x78/0x1e0 [ 50.018204][ T4024] el0t_64_sync_handler+0xcc/0xe4 [ 50.019713][ T4024] el0t_64_sync+0x1a0/0x1a4 [ 50.021155][ T4024] [ 50.021155][ T4024] other info that might help us debug this: [ 50.021155][ T4024] [ 50.024022][ T4024] Chain exists of: [ 50.024022][ T4024] &type->i_mutex_dir_key#6 --> &sbi->lock --> sb_writers#8 [ 50.024022][ T4024] [ 50.027693][ T4024] Possible unsafe locking scenario: [ 50.027693][ T4024] [ 50.029747][ T4024] CPU0 CPU1 [ 50.031342][ T4024] ---- ---- [ 50.032836][ T4024] lock(sb_writers#8); [ 50.033975][ T4024] lock(&sbi->lock); [ 50.035776][ T4024] lock(sb_writers#8); [ 50.037590][ T4024] lock(&type->i_mutex_dir_key#6); [ 50.039061][ T4024] [ 50.039061][ T4024] *** DEADLOCK *** [ 50.039061][ T4024] [ 50.041272][ T4024] 1 lock held by syz-executor373/4024: [ 50.042775][ T4024] #0: ffff0000ddde4460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 50.045469][ T4024] [ 50.045469][ T4024] stack backtrace: [ 50.047089][ T4024] CPU: 1 PID: 4024 Comm: syz-executor373 Not tainted 5.15.185-syzkaller #0 [ 50.049434][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.052228][ T4024] Call trace: [ 50.053181][ T4024] dump_backtrace+0x0/0x43c [ 50.054444][ T4024] show_stack+0x2c/0x3c [ 50.055585][ T4024] __dump_stack+0x30/0x40 [ 50.056745][ T4024] dump_stack_lvl+0xf8/0x160 [ 50.058018][ T4024] dump_stack+0x1c/0x5c [ 50.059169][ T4024] print_circular_bug+0x148/0x1b0 [ 50.060507][ T4024] check_noncircular+0x240/0x2d4 [ 50.061914][ T4024] __lock_acquire+0x2928/0x651c [ 50.063210][ T4024] lock_acquire+0x1f4/0x620 [ 50.064461][ T4024] down_write+0xbc/0x12c [ 50.065647][ T4024] vfs_fileattr_set+0x108/0x8fc [ 50.066961][ T4024] do_vfs_ioctl+0x1c18/0x2370 [ 50.068270][ T4024] __arm64_sys_ioctl+0xe4/0x1c8 [ 50.069590][ T4024] invoke_syscall+0x98/0x2b8 [ 50.070821][ T4024] el0_svc_common+0x138/0x258 [ 50.072076][ T4024] do_el0_svc+0x58/0x14c [ 50.073192][ T4024] el0_svc+0x78/0x1e0 [ 50.074322][ T4024] el0t_64_sync_handler+0xcc/0xe4 [ 50.075643][ T4024] el0t_64_sync+0x1a0/0x1a4