./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2998112610 <...> Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. execve("./syz-executor2998112610", ["./syz-executor2998112610"], 0x7fffef3c3560 /* 10 vars */) = 0 brk(NULL) = 0x5555563b7000 brk(0x5555563b7d00) = 0x5555563b7d00 arch_prctl(ARCH_SET_FS, 0x5555563b7380) = 0 set_tid_address(0x5555563b7650) = 5025 set_robust_list(0x5555563b7660, 24) = 0 rseq(0x5555563b7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2998112610", 4096) = 28 getrandom("\x3c\x48\x53\xf1\xc5\x65\xb1\x00", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555563b7d00 brk(0x5555563d8d00) = 0x5555563d8d00 brk(0x5555563d9000) = 0x5555563d9000 mprotect(0x7fc8556b0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5026 attached , child_tidptr=0x5555563b7650) = 5026 [pid 5026] set_robust_list(0x5555563b7660, 24) = 0 [pid 5026] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5026] setsid() = 1 [pid 5026] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5026] unshare(CLONE_NEWNS) = 0 [pid 5026] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5026] unshare(CLONE_NEWIPC) = 0 [pid 5026] unshare(CLONE_NEWCGROUP) = 0 [pid 5026] unshare(CLONE_NEWUTS) = 0 [pid 5026] unshare(CLONE_SYSVSEM) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "16777216", 8) = 8 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "536870912", 9) = 9 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "8192", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5026] close(3) = 0 [pid 5026] getpid() = 1 [pid 5026] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [671], 571) = 549 [pid 5026] exit_group(1) = ? [ 73.816604][ T5026] syz-executor299 (5026): drop_caches: 3 [ 73.849150][ T48] [ 73.851541][ T48] ====================================================== [ 73.858575][ T48] WARNING: possible circular locking dependency detected [ 73.865591][ T48] 6.6.0-rc7-syzkaller #0 Not tainted [ 73.870867][ T48] ------------------------------------------------------ [ 73.877878][ T48] kworker/u4:3/48 is trying to acquire lock: [ 73.883848][ T48] ffff8880776a8100 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x14cb/0x29c0 [ 73.892747][ T48] [ 73.892747][ T48] but task is already holding lock: [ 73.900114][ T48] ffff8880776aaad0 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 73.909099][ T48] [ 73.909099][ T48] which lock already depends on the new lock. [ 73.909099][ T48] [ 73.919489][ T48] [ 73.919489][ T48] the existing dependency chain (in reverse order) is: [ 73.928502][ T48] [ 73.928502][ T48] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 73.936058][ T48] __mutex_lock+0x136/0xd60 [ 73.941081][ T48] map_mft_record+0x4c/0x630 [ 73.946186][ T48] ntfs_attr_extend_allocation+0x539/0x4340 [ 73.952631][ T48] ntfs_file_write_iter+0x37e/0x1970 [ 73.958441][ T48] do_iter_write+0x84f/0xde0 [ 73.963581][ T48] do_pwritev+0x21a/0x360 [ 73.968424][ T48] do_syscall_64+0x41/0xc0 [ 73.973354][ T48] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.979762][ T48] [ 73.979762][ T48] -> #0 (&rl->lock){++++}-{3:3}: [ 73.986905][ T48] __lock_acquire+0x39ff/0x7f70 [ 73.992269][ T48] lock_acquire+0x1e3/0x520 [ 73.997285][ T48] down_read+0xb1/0xa40 [ 74.001962][ T48] ntfs_read_folio+0x14cb/0x29c0 [ 74.007430][ T48] filemap_read_folio+0x19c/0x770 [ 74.012974][ T48] do_read_cache_folio+0x134/0x810 [ 74.018610][ T48] do_read_cache_page+0x30/0x210 [ 74.024076][ T48] ntfs_sync_mft_mirror+0x25f/0x1ad0 [ 74.029918][ T48] write_mft_record_nolock+0x1155/0x18d0 [ 74.036064][ T48] write_mft_record+0x149/0x310 [ 74.041427][ T48] __ntfs_write_inode+0x703/0xbb0 [ 74.046966][ T48] __writeback_single_inode+0x69b/0xfa0 [ 74.053065][ T48] writeback_sb_inodes+0x8e3/0x1210 [ 74.058826][ T48] wb_writeback+0x44d/0xc60 [ 74.063857][ T48] wb_workfn+0x400/0xff0 [ 74.068625][ T48] process_scheduled_works+0x90f/0x1400 [ 74.074690][ T48] worker_thread+0xa5f/0xff0 [ 74.079796][ T48] kthread+0x2d3/0x370 [ 74.084377][ T48] ret_from_fork+0x48/0x80 [ 74.089356][ T48] ret_from_fork_asm+0x11/0x20 [ 74.094641][ T48] [ 74.094641][ T48] other info that might help us debug this: [ 74.094641][ T48] [ 74.104864][ T48] Possible unsafe locking scenario: [ 74.104864][ T48] [ 74.112302][ T48] CPU0 CPU1 [ 74.117659][ T48] ---- ---- [ 74.123025][ T48] lock(&ni->mrec_lock); [ 74.127358][ T48] lock(&rl->lock); [ 74.133787][ T48] lock(&ni->mrec_lock); [ 74.140649][ T48] rlock(&rl->lock); [ 74.144632][ T48] [ 74.144632][ T48] *** DEADLOCK *** [ 74.144632][ T48] [ 74.152790][ T48] 3 locks held by kworker/u4:3/48: [ 74.157908][ T48] #0: ffff888141a5d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 [ 74.169142][ T48] #1: ffffc90000b8fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 [ 74.181584][ T48] #2: ffff8880776aaad0 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 74.190980][ T48] [ 74.190980][ T48] stack backtrace: [ 74.196867][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted 6.6.0-rc7-syzkaller #0 [ 74.205099][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 74.215163][ T48] Workqueue: writeback wb_workfn (flush-7:0) [ 74.221159][ T48] Call Trace: [ 74.224433][ T48] [ 74.227358][ T48] dump_stack_lvl+0x1e7/0x2d0 [ 74.232034][ T48] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.237493][ T48] ? print_circular_bug+0x12b/0x1a0 [ 74.242690][ T48] check_noncircular+0x375/0x4a0 [ 74.247630][ T48] ? noop_count+0x30/0x30 [ 74.251961][ T48] ? print_deadlock_bug+0x600/0x600 [ 74.257160][ T48] ? lockdep_lock+0x123/0x2b0 [ 74.261845][ T48] ? check_noncircular+0x205/0x4a0 [ 74.266957][ T48] ? mark_lock+0x9a/0x340 [ 74.271284][ T48] ? _find_first_zero_bit+0xd4/0x100 [ 74.276616][ T48] __lock_acquire+0x39ff/0x7f70 [ 74.281475][ T48] ? verify_lock_unused+0x140/0x140 [ 74.286675][ T48] ? do_read_cache_folio+0x134/0x810 [ 74.291953][ T48] ? verify_lock_unused+0x140/0x140 [ 74.297147][ T48] ? write_mft_record+0x149/0x310 [ 74.302178][ T48] ? verify_lock_unused+0x140/0x140 [ 74.307371][ T48] ? wb_writeback+0x44d/0xc60 [ 74.312044][ T48] ? process_scheduled_works+0x90f/0x1400 [ 74.317758][ T48] ? worker_thread+0xa5f/0xff0 [ 74.322555][ T48] ? kthread+0x2d3/0x370 [ 74.326810][ T48] ? ret_from_fork_asm+0x11/0x20 [ 74.331763][ T48] lock_acquire+0x1e3/0x520 [ 74.336271][ T48] ? ntfs_read_folio+0x14cb/0x29c0 [ 74.341396][ T48] ? read_lock_is_recursive+0x20/0x20 [ 74.346770][ T48] ? __might_sleep+0xc0/0xc0 [ 74.351365][ T48] ? mark_lock+0x9a/0x340 [ 74.355694][ T48] down_read+0xb1/0xa40 [ 74.359855][ T48] ? ntfs_read_folio+0x14cb/0x29c0 [ 74.364968][ T48] ? print_irqtrace_events+0x220/0x220 [ 74.370422][ T48] ? __down_common+0x7a0/0x7a0 [ 74.375193][ T48] ? _raw_read_unlock_irqrestore+0x8f/0x140 [ 74.381081][ T48] ? lockdep_hardirqs_on+0x98/0x140 [ 74.386285][ T48] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 74.392174][ T48] ? _raw_read_unlock+0x40/0x40 [ 74.397023][ T48] ? do_raw_spin_unlock+0x13b/0x8b0 [ 74.402224][ T48] ntfs_read_folio+0x14cb/0x29c0 [ 74.407178][ T48] ? ntfs_writepage+0x1ab0/0x1ab0 [ 74.412208][ T48] ? folio_add_lru+0x9d0/0x9d0 [ 74.416966][ T48] ? folio_add_lru+0x4b2/0x9d0 [ 74.421724][ T48] ? folio_add_lru+0x27b/0x9d0 [ 74.426483][ T48] filemap_read_folio+0x19c/0x770 [ 74.431504][ T48] ? ntfs_writepage+0x1ab0/0x1ab0 [ 74.436533][ T48] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 74.442098][ T48] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 74.448339][ T48] do_read_cache_folio+0x134/0x810 [ 74.453485][ T48] ? ntfs_writepage+0x1ab0/0x1ab0 [ 74.458515][ T48] do_read_cache_page+0x30/0x210 [ 74.463449][ T48] ntfs_sync_mft_mirror+0x25f/0x1ad0 [ 74.468733][ T48] ? submit_bio_noacct_nocheck+0xa2f/0xc60 [ 74.474540][ T48] ? should_fail_request+0x80/0x80 [ 74.479674][ T48] ? __mark_mft_record_dirty+0x180/0x180 [ 74.485332][ T48] write_mft_record_nolock+0x1155/0x18d0 [ 74.490977][ T48] ? ntfs_unmap_page+0x260/0x260 [ 74.495913][ T48] ? lockdep_hardirqs_on+0x98/0x140 [ 74.501120][ T48] write_mft_record+0x149/0x310 [ 74.505968][ T48] __ntfs_write_inode+0x703/0xbb0 [ 74.510993][ T48] __writeback_single_inode+0x69b/0xfa0 [ 74.516542][ T48] writeback_sb_inodes+0x8e3/0x1210 [ 74.521752][ T48] ? queue_io+0x570/0x570 [ 74.526076][ T48] ? __writeback_inodes_wb+0x260/0x260 [ 74.531536][ T48] ? queue_io+0x3d5/0x570 [ 74.535866][ T48] wb_writeback+0x44d/0xc60 [ 74.540372][ T48] ? percpu_ref_tryget+0x260/0x260 [ 74.545513][ T48] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.551523][ T48] wb_workfn+0x400/0xff0 [ 74.555782][ T48] ? inode_wait_for_writeback+0x290/0x290 [ 74.561521][ T48] ? read_lock_is_recursive+0x20/0x20 [ 74.566914][ T48] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.572893][ T48] ? print_irqtrace_events+0x220/0x220 [ 74.578380][ T48] ? process_scheduled_works+0x825/0x1400 [ 74.584095][ T48] process_scheduled_works+0x90f/0x1400 [ 74.589652][ T48] ? assign_work+0x3d0/0x3d0 [ 74.594243][ T48] ? assign_work+0x364/0x3d0 [ 74.598832][ T48] worker_thread+0xa5f/0xff0 [ 74.603439][ T48] kthread+0x2d3/0x370 [ 74.607509][ T48] ? pr_cont_work+0x5e0/0x5e0 [ 74.612187][ T48] ? kthread_blkcg+0xd0/0xd0 [pid 5026] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5026, si_uid=0, si_status=1, si_utime=0, si_stime=109 /* 1.09 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 74.616770][ T48] ret_from_fork+