./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1627303643 <...> forked to background, child pid 3184 no interfaces have a carri[ 22.572706][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 22.584293][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.77' (ECDSA) to the list of known hosts. execve("./syz-executor1627303643", ["./syz-executor1627303643"], 0x7ffdfb031550 /* 10 vars */) = 0 brk(NULL) = 0x555556038000 brk(0x555556038c40) = 0x555556038c40 arch_prctl(ARCH_SET_FS, 0x555556038300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1627303643", 4096) = 28 brk(0x555556059c40) = 0x555556059c40 brk(0x55555605a000) = 0x55555605a000 mprotect(0x7fd843f63000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3606 attached , child_tidptr=0x5555560385d0) = 3606 [pid 3606] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3606] setsid() = 1 [pid 3606] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3606] unshare(CLONE_NEWNS) = 0 [pid 3606] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3606] unshare(CLONE_NEWIPC) = 0 [pid 3606] unshare(CLONE_NEWCGROUP) = 0 [pid 3606] unshare(CLONE_NEWUTS) = 0 [pid 3606] unshare(CLONE_SYSVSEM) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "16777216", 8) = 8 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "536870912", 9) = 9 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "8192", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3606] close(3) = 0 [pid 3606] getpid() = 1 [pid 3606] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [671], 2085) = 583 [pid 3606] exit_group(1) = ? [ 41.363308][ T3606] syz-executor162 (3606): drop_caches: 1 [ 41.380321][ T1081] [ 41.382653][ T1081] ====================================================== [ 41.389649][ T1081] WARNING: possible circular locking dependency detected [ 41.396642][ T1081] 6.0.0-rc7-syzkaller-00068-g49c13ed0316d #0 Not tainted [ 41.403635][ T1081] ------------------------------------------------------ [ 41.410628][ T1081] kworker/u4:5/1081 is trying to acquire lock: [ 41.416754][ T1081] ffff888075ab8940 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x1bd3/0x2e10 [ 41.425613][ T1081] [ 41.425613][ T1081] but task is already holding lock: [ 41.432951][ T1081] ffff888075abb310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x3c/0x6b0 [ 41.441881][ T1081] [ 41.441881][ T1081] which lock already depends on the new lock. [ 41.441881][ T1081] [ 41.452257][ T1081] [ 41.452257][ T1081] the existing dependency chain (in reverse order) is: [ 41.461248][ T1081] [ 41.461248][ T1081] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 41.468804][ T1081] __mutex_lock+0x12f/0x1350 [ 41.473920][ T1081] map_mft_record+0x3c/0x6b0 [ 41.479022][ T1081] ntfs_map_runlist_nolock+0xb5a/0x16f0 [ 41.485175][ T1081] ntfs_map_runlist+0x77/0xa0 [ 41.490368][ T1081] ntfs_read_folio+0x1c2d/0x2e10 [ 41.495815][ T1081] read_pages+0xb5e/0xfc0 [ 41.500656][ T1081] page_cache_ra_unbounded+0x3f5/0x550 [ 41.506713][ T1081] page_cache_ra_order+0x69a/0x970 [ 41.512334][ T1081] ondemand_readahead+0x6fc/0x1160 [ 41.517955][ T1081] page_cache_sync_ra+0x1c5/0x200 [ 41.523492][ T1081] filemap_get_pages+0x2a1/0x1790 [ 41.529020][ T1081] filemap_read+0x314/0xe10 [ 41.534028][ T1081] generic_file_read_iter+0x3b0/0x5a0 [ 41.539907][ T1081] __kernel_read+0x2c6/0x7c0 [ 41.545005][ T1081] integrity_kernel_read+0x7b/0xb0 [ 41.550627][ T1081] ima_calc_file_hash_tfm+0x2aa/0x3b0 [ 41.556510][ T1081] ima_calc_file_hash+0x191/0x4a0 [ 41.562043][ T1081] ima_collect_measurement+0x5ca/0x710 [ 41.568012][ T1081] process_measurement+0xd1e/0x18b0 [ 41.573720][ T1081] ima_file_check+0xac/0x100 [ 41.578822][ T1081] path_openat+0x1611/0x28f0 [ 41.583926][ T1081] do_filp_open+0x1b6/0x400 [ 41.588943][ T1081] do_sys_openat2+0x16d/0x4c0 [ 41.594127][ T1081] __x64_sys_openat+0x13f/0x1f0 [ 41.599488][ T1081] do_syscall_64+0x35/0xb0 [ 41.604415][ T1081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.610825][ T1081] [ 41.610825][ T1081] -> #0 (&rl->lock){++++}-{3:3}: [ 41.617932][ T1081] __lock_acquire+0x2a43/0x56d0 [ 41.623291][ T1081] lock_acquire+0x1ab/0x570 [ 41.628300][ T1081] down_read+0x98/0x450 [ 41.632964][ T1081] ntfs_read_folio+0x1bd3/0x2e10 [ 41.638415][ T1081] filemap_read_folio+0x3c/0x1d0 [ 41.644041][ T1081] do_read_cache_folio+0x1df/0x510 [ 41.649659][ T1081] read_cache_page+0x59/0x2b0 [ 41.654843][ T1081] ntfs_sync_mft_mirror+0x24b/0x1ea0 [ 41.660636][ T1081] write_mft_record_nolock+0x198a/0x1cc0 [ 41.666779][ T1081] write_mft_record+0x14e/0x3b0 [ 41.672139][ T1081] __ntfs_write_inode+0x911/0xc40 [ 41.677670][ T1081] __writeback_single_inode+0xb5c/0x10b0 [ 41.683809][ T1081] writeback_sb_inodes+0x54d/0xf10 [ 41.689431][ T1081] wb_writeback+0x294/0xc20 [ 41.694442][ T1081] wb_workfn+0x2a1/0x1170 [ 41.699280][ T1081] process_one_work+0x991/0x1610 [ 41.704727][ T1081] worker_thread+0x665/0x1080 [ 41.709918][ T1081] kthread+0x2e4/0x3a0 [ 41.714497][ T1081] ret_from_fork+0x1f/0x30 [ 41.719430][ T1081] [ 41.719430][ T1081] other info that might help us debug this: [ 41.719430][ T1081] [ 41.729640][ T1081] Possible unsafe locking scenario: [ 41.729640][ T1081] [ 41.737070][ T1081] CPU0 CPU1 [ 41.742421][ T1081] ---- ---- [ 41.747772][ T1081] lock(&ni->mrec_lock); [ 41.752086][ T1081] lock(&rl->lock); [ 41.758485][ T1081] lock(&ni->mrec_lock); [ 41.765406][ T1081] lock(&rl->lock); [ 41.769297][ T1081] [ 41.769297][ T1081] *** DEADLOCK *** [ 41.769297][ T1081] [ 41.777427][ T1081] 3 locks held by kworker/u4:5/1081: [ 41.782695][ T1081] #0: ffff888144b0e138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 41.793588][ T1081] #1: ffffc900045cfda8 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 41.805752][ T1081] #2: ffff888075abb310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x3c/0x6b0 [ 41.815134][ T1081] [ 41.815134][ T1081] stack backtrace: [ 41.821002][ T1081] CPU: 0 PID: 1081 Comm: kworker/u4:5 Not tainted 6.0.0-rc7-syzkaller-00068-g49c13ed0316d #0 [ 41.831137][ T1081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 41.841183][ T1081] Workqueue: writeback wb_workfn (flush-7:0) [ 41.847166][ T1081] Call Trace: [ 41.850439][ T1081] [ 41.853358][ T1081] dump_stack_lvl+0xcd/0x134 [ 41.857943][ T1081] check_noncircular+0x25f/0x2e0 [ 41.862871][ T1081] ? print_circular_bug+0x1e0/0x1e0 [ 41.868056][ T1081] ? __pv_queued_spin_lock_slowpath+0x264/0xb50 [ 41.874292][ T1081] ? __pv_queued_spin_lock_slowpath+0x264/0xb50 [ 41.880525][ T1081] __lock_acquire+0x2a43/0x56d0 [ 41.885457][ T1081] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 41.891433][ T1081] lock_acquire+0x1ab/0x570 [ 41.895927][ T1081] ? ntfs_read_folio+0x1bd3/0x2e10 [ 41.901034][ T1081] ? lock_release+0x780/0x780 [ 41.905707][ T1081] down_read+0x98/0x450 [ 41.909858][ T1081] ? ntfs_read_folio+0x1bd3/0x2e10 [ 41.914957][ T1081] ? rwsem_down_read_slowpath+0xb10/0xb10 [ 41.920669][ T1081] ? _raw_read_unlock_irqrestore+0x50/0x70 [ 41.926466][ T1081] ? _raw_read_unlock_irqrestore+0x50/0x70 [ 41.932266][ T1081] ntfs_read_folio+0x1bd3/0x2e10 [ 41.937202][ T1081] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 41.943265][ T1081] ? folio_add_lru+0x377/0x680 [ 41.948026][ T1081] ? filemap_add_folio+0x138/0x1d0 [ 41.953124][ T1081] ? __filemap_add_folio+0x1620/0x1620 [ 41.958655][ T1081] ? folio_alloc+0x3f/0x70 [ 41.963061][ T1081] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 41.969123][ T1081] filemap_read_folio+0x3c/0x1d0 [ 41.974060][ T1081] do_read_cache_folio+0x1df/0x510 [ 41.979945][ T1081] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 41.986005][ T1081] read_cache_page+0x59/0x2b0 [ 41.990672][ T1081] ntfs_sync_mft_mirror+0x24b/0x1ea0 [ 41.995952][ T1081] ? submit_bio+0xdc/0x300 [ 42.000358][ T1081] ? ntfs_mft_bitmap_extend_allocation_nolock+0x1ea0/0x1ea0 [ 42.007631][ T1081] ? lock_chain_count+0x20/0x20 [ 42.012471][ T1081] ? submit_bh_wbc+0x4cc/0x650 [ 42.017228][ T1081] write_mft_record_nolock+0x198a/0x1cc0 [ 42.022854][ T1081] ? mark_held_locks+0x9f/0xe0 [ 42.027607][ T1081] ? kasan_quarantine_put+0xf5/0x210 [ 42.032927][ T1081] ? ntfs_sync_mft_mirror+0x1ea0/0x1ea0 [ 42.038460][ T1081] ? lockdep_hardirqs_on+0x79/0x100 [ 42.043656][ T1081] write_mft_record+0x14e/0x3b0 [ 42.048501][ T1081] __ntfs_write_inode+0x911/0xc40 [ 42.053514][ T1081] __writeback_single_inode+0xb5c/0x10b0 [ 42.059140][ T1081] writeback_sb_inodes+0x54d/0xf10 [pid 3606] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3606, si_uid=0, si_status=1, si_utime=0, si_stime=23} --- exit_group(0) = ? +++ exited with 0 +++ [ 42.064244][ T1081] ? s