Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. executing program [ 33.763263][ T6238] loop0: detected capacity change from 0 to 4096 [ 33.803138][ T6238] ntfs3: loop0: mft corrupted [ 33.804488][ T6238] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 33.812481][ T273] [ 33.813138][ T273] ====================================================== [ 33.814888][ T273] WARNING: possible circular locking dependency detected [ 33.816624][ T273] 6.9.0-rc7-syzkaller-gfda5695d692c #0 Not tainted [ 33.818264][ T273] ------------------------------------------------------ [ 33.820010][ T273] kworker/u8:5/273 is trying to acquire lock: [ 33.821544][ T273] ffff0000dca1e128 (&wnd->rw_lock/1){+.+.}-{3:3}, at: ntfs_mark_rec_free+0x48/0x270 [ 33.823955][ T273] [ 33.823955][ T273] but task is already holding lock: [ 33.825845][ T273] ffff0000decacac0 (&ni->ni_lock#3){+.+.}-{3:3}, at: ni_write_inode+0x168/0xda4 [ 33.828194][ T273] [ 33.828194][ T273] which lock already depends on the new lock. [ 33.828194][ T273] [ 33.830875][ T273] [ 33.830875][ T273] the existing dependency chain (in reverse order) is: [ 33.833255][ T273] [ 33.833255][ T273] -> #1 (&ni->ni_lock#3){+.+.}-{3:3}: [ 33.835240][ T273] __mutex_lock_common+0x190/0x21a0 [ 33.836712][ T273] mutex_lock_nested+0x2c/0x38 [ 33.838097][ T273] ntfs_set_state+0x1a4/0x5c0 [ 33.839462][ T273] mi_read+0x3e0/0x4d8 [ 33.840671][ T273] mi_format_new+0x174/0x514 [ 33.841902][ T273] ni_add_subrecord+0xd0/0x3c4 [ 33.843322][ T273] ntfs_look_free_mft+0x4c8/0xd1c [ 33.844757][ T273] ni_create_attr_list+0x764/0xf54 [ 33.846232][ T273] ni_ins_attr_ext+0x300/0xa0c [ 33.847591][ T273] ni_add_name+0x658/0xc14 [ 33.849013][ T273] ni_rename+0xc8/0x1d8 [ 33.850288][ T273] ntfs_rename+0x610/0xae0 [ 33.851612][ T273] vfs_rename+0x9bc/0xc84 [ 33.852876][ T273] do_renameat2+0x9c8/0xe40 [ 33.854240][ T273] __arm64_sys_renameat2+0xe0/0xfc [ 33.855678][ T273] invoke_syscall+0x98/0x2b8 [ 33.857024][ T273] el0_svc_common+0x130/0x23c [ 33.858336][ T273] do_el0_svc+0x48/0x58 [ 33.859618][ T273] el0_svc+0x54/0x168 [ 33.860827][ T273] el0t_64_sync_handler+0x84/0xfc [ 33.862277][ T273] el0t_64_sync+0x190/0x194 [ 33.863598][ T273] [ 33.863598][ T273] -> #0 (&wnd->rw_lock/1){+.+.}-{3:3}: [ 33.865642][ T273] __lock_acquire+0x3384/0x763c [ 33.867217][ T273] lock_acquire+0x248/0x73c [ 33.868633][ T273] down_write_nested+0x58/0xcc [ 33.870122][ T273] ntfs_mark_rec_free+0x48/0x270 [ 33.871568][ T273] ni_write_inode+0xa28/0xda4 [ 33.872951][ T273] ntfs3_write_inode+0x70/0x98 [ 33.874387][ T273] __writeback_single_inode+0x5f0/0x1548 [ 33.876078][ T273] writeback_sb_inodes+0x700/0x101c [ 33.877696][ T273] wb_writeback+0x404/0x1048 [ 33.879028][ T273] wb_workfn+0x394/0x104c [ 33.880313][ T273] process_one_work+0x7b8/0x15d4 [ 33.881757][ T273] worker_thread+0x938/0xef4 [ 33.883157][ T273] kthread+0x288/0x310 [ 33.884447][ T273] ret_from_fork+0x10/0x20 [ 33.885744][ T273] [ 33.885744][ T273] other info that might help us debug this: [ 33.885744][ T273] [ 33.888658][ T273] Possible unsafe locking scenario: [ 33.888658][ T273] [ 33.890599][ T273] CPU0 CPU1 [ 33.892008][ T273] ---- ---- [ 33.893383][ T273] lock(&ni->ni_lock#3); [ 33.894488][ T273] lock(&wnd->rw_lock/1); [ 33.896412][ T273] lock(&ni->ni_lock#3); [ 33.898253][ T273] lock(&wnd->rw_lock/1); [ 33.899435][ T273] [ 33.899435][ T273] *** DEADLOCK *** [ 33.899435][ T273] [ 33.901532][ T273] 3 locks held by kworker/u8:5/273: [ 33.902924][ T273] #0: ffff0000c234a148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 [ 33.905784][ T273] #1: ffff800098307c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 [ 33.908922][ T273] #2: ffff0000decacac0 (&ni->ni_lock#3){+.+.}-{3:3}, at: ni_write_inode+0x168/0xda4 [ 33.911409][ T273] [ 33.911409][ T273] stack backtrace: [ 33.912974][ T273] CPU: 1 PID: 273 Comm: kworker/u8:5 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 [ 33.915559][ T273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 33.918229][ T273] Workqueue: writeback wb_workfn (flush-7:0) [ 33.919881][ T273] Call trace: [ 33.920759][ T273] dump_backtrace+0x1b8/0x1e4 [ 33.922025][ T273] show_stack+0x2c/0x3c [ 33.923190][ T273] dump_stack_lvl+0xe4/0x150 [ 33.924388][ T273] dump_stack+0x1c/0x28 [ 33.925497][ T273] print_circular_bug+0x150/0x1b8 [ 33.926792][ T273] check_noncircular+0x310/0x404 [ 33.928092][ T273] __lock_acquire+0x3384/0x763c [ 33.929396][ T273] lock_acquire+0x248/0x73c [ 33.930216][ T273] down_write_nested+0x58/0xcc [ 33.931515][ T273] ntfs_mark_rec_free+0x48/0x270 [ 33.932833][ T273] ni_write_inode+0xa28/0xda4 [ 33.934037][ T273] ntfs3_write_inode+0x70/0x98 [ 33.935267][ T273] __writeback_single_inode+0x5f0/0x1548 [ 33.936737][ T273] writeback_sb_inodes+0x700/0x101c [ 33.938083][ T273] wb_writeback+0x404/0x1048 [ 33.939275][ T273] wb_workfn+0x394/0x104c [ 33.940345][ T273] process_one_work+0x7b8/0x15d4 [ 33.941583][ T273] worker_thread+0x938/0xef4 [ 33.942714][ T273] kthread+0x288/0x310 [ 33.943755][ T273] ret_from_fork+0x10/0x20