./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2684862292 <...> Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. execve("./syz-executor2684862292", ["./syz-executor2684862292"], 0x7fffc2ad5900 /* 10 vars */) = 0 brk(NULL) = 0x555556364000 brk(0x555556364d00) = 0x555556364d00 arch_prctl(ARCH_SET_FS, 0x555556364380) = 0 set_tid_address(0x555556364650) = 5053 set_robust_list(0x555556364660, 24) = 0 rseq(0x555556364ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2684862292", 4096) = 28 getrandom("\x90\x6b\x92\xda\x9b\x80\x43\x18", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556364d00 brk(0x555556385d00) = 0x555556385d00 brk(0x555556386000) = 0x555556386000 mprotect(0x7fa7d9692000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5054 attached , child_tidptr=0x555556364650) = 5054 [pid 5054] set_robust_list(0x555556364660, 24) = 0 [pid 5054] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setsid() = 1 [pid 5054] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5054] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5054] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5054] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5054] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5054] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5054] unshare(CLONE_NEWNS) = 0 [pid 5054] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5054] unshare(CLONE_NEWIPC) = 0 [pid 5054] unshare(CLONE_NEWCGROUP) = 0 [pid 5054] unshare(CLONE_NEWUTS) = 0 [pid 5054] unshare(CLONE_SYSVSEM) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "16777216", 8) = 8 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "536870912", 9) = 9 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1024", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "8192", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1024", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1024", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5054] close(3) = 0 [pid 5054] getpid() = 1 [pid 5054] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [95], 7) = 7 [pid 5054] exit_group(1) = ? [ 55.560979][ T5054] syz-executor268 (5054): drop_caches: 1 [ 55.587187][ T11] [ 55.589534][ T11] ====================================================== [ 55.596531][ T11] WARNING: possible circular locking dependency detected [ 55.603525][ T11] 6.7.0-rc1-syzkaller-00304-g23dfa043f6d5 #0 Not tainted [ 55.610543][ T11] ------------------------------------------------------ [ 55.617536][ T11] kworker/u4:0/11 is trying to acquire lock: [ 55.623486][ T11] ffff888076a08940 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x1308/0x23e0 [ 55.632352][ T11] [ 55.632352][ T11] but task is already holding lock: [ 55.639731][ T11] ffff888076a0a290 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 55.648667][ T11] [ 55.648667][ T11] which lock already depends on the new lock. [ 55.648667][ T11] [ 55.659046][ T11] [ 55.659046][ T11] the existing dependency chain (in reverse order) is: [ 55.668034][ T11] [ 55.668034][ T11] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 55.675567][ T11] lock_acquire+0x1e3/0x530 [ 55.680571][ T11] __mutex_lock+0x136/0xd60 [ 55.685670][ T11] map_mft_record+0x4c/0x630 [ 55.690758][ T11] ntfs_attr_extend_allocation+0x2d0/0x3ec0 [ 55.697169][ T11] ntfs_file_write_iter+0x37e/0x1970 [ 55.702951][ T11] vfs_write+0x792/0xb20 [ 55.707709][ T11] __x64_sys_pwrite64+0x1aa/0x230 [ 55.713240][ T11] do_syscall_64+0x45/0x110 [ 55.718244][ T11] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 55.724639][ T11] [ 55.724639][ T11] -> #0 (&rl->lock){++++}-{3:3}: [ 55.731735][ T11] validate_chain+0x18e4/0x59f0 [ 55.737086][ T11] __lock_acquire+0x1345/0x1fd0 [ 55.742435][ T11] lock_acquire+0x1e3/0x530 [ 55.747455][ T11] down_read+0xb1/0xa40 [ 55.752110][ T11] ntfs_read_folio+0x1308/0x23e0 [ 55.757563][ T11] filemap_read_folio+0x19c/0x780 [ 55.763098][ T11] do_read_cache_folio+0x134/0x810 [ 55.768720][ T11] do_read_cache_page+0x30/0x200 [ 55.774161][ T11] ntfs_sync_mft_mirror+0x25f/0x1ae0 [ 55.779955][ T11] write_mft_record_nolock+0x1155/0x18f0 [ 55.786093][ T11] write_mft_record+0x149/0x310 [ 55.791443][ T11] __ntfs_write_inode+0x703/0xbb0 [ 55.796968][ T11] __writeback_single_inode+0x69b/0xfc0 [ 55.803015][ T11] writeback_sb_inodes+0x8e3/0x1220 [ 55.808714][ T11] wb_writeback+0x44d/0xc70 [ 55.813720][ T11] wb_workfn+0x400/0xfb0 [ 55.818462][ T11] process_scheduled_works+0x90f/0x1420 [ 55.824508][ T11] worker_thread+0xa5f/0x1000 [ 55.829684][ T11] kthread+0x2d3/0x370 [ 55.834250][ T11] ret_from_fork+0x48/0x80 [ 55.839164][ T11] ret_from_fork_asm+0x11/0x20 [ 55.844428][ T11] [ 55.844428][ T11] other info that might help us debug this: [ 55.844428][ T11] [ 55.854650][ T11] Possible unsafe locking scenario: [ 55.854650][ T11] [ 55.862072][ T11] CPU0 CPU1 [ 55.867422][ T11] ---- ---- [ 55.872759][ T11] lock(&ni->mrec_lock); [ 55.877084][ T11] lock(&rl->lock); [ 55.883474][ T11] lock(&ni->mrec_lock); [ 55.890298][ T11] rlock(&rl->lock); [ 55.894259][ T11] [ 55.894259][ T11] *** DEADLOCK *** [ 55.894259][ T11] [ 55.902392][ T11] 3 locks held by kworker/u4:0/11: [ 55.907477][ T11] #0: ffff888019a59d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 55.918673][ T11] #1: ffffc90000107d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 55.931082][ T11] #2: ffff888076a0a290 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 55.940452][ T11] [ 55.940452][ T11] stack backtrace: [ 55.946315][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.7.0-rc1-syzkaller-00304-g23dfa043f6d5 #0 [ 55.956268][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 55.966329][ T11] Workqueue: writeback wb_workfn (flush-7:0) [ 55.972301][ T11] Call Trace: [ 55.975562][ T11] [ 55.978472][ T11] dump_stack_lvl+0x1e7/0x2d0 [ 55.983133][ T11] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.988572][ T11] ? print_circular_bug+0x12b/0x1a0 [ 55.993749][ T11] check_noncircular+0x366/0x490 [ 55.998667][ T11] ? noop_count+0x30/0x30 [ 56.002992][ T11] ? print_deadlock_bug+0x610/0x610 [ 56.008172][ T11] ? queued_spin_lock_slowpath+0x42/0x50 [ 56.013783][ T11] ? lockdep_lock+0x1ab/0x2b0 [ 56.018439][ T11] ? check_noncircular+0x259/0x490 [ 56.023528][ T11] ? check_path+0x21/0x40 [ 56.027856][ T11] ? _find_first_zero_bit+0xd4/0x100 [ 56.033129][ T11] validate_chain+0x18e4/0x59f0 [ 56.037965][ T11] ? validate_chain+0x15a1/0x59f0 [ 56.042972][ T11] ? reacquire_held_locks+0x690/0x690 [ 56.048327][ T11] ? reacquire_held_locks+0x690/0x690 [ 56.053680][ T11] ? look_up_lock_class+0x77/0x160 [ 56.058776][ T11] ? register_lock_class+0x102/0x970 [ 56.064040][ T11] ? is_dynamic_key+0x260/0x260 [ 56.068887][ T11] ? mark_lock+0x9a/0x350 [ 56.073193][ T11] __lock_acquire+0x1345/0x1fd0 [ 56.078027][ T11] lock_acquire+0x1e3/0x530 [ 56.082511][ T11] ? ntfs_read_folio+0x1308/0x23e0 [ 56.087605][ T11] ? read_lock_is_recursive+0x20/0x20 [ 56.092957][ T11] ? __might_sleep+0xe0/0xe0 [ 56.097534][ T11] ? mark_lock+0x9a/0x350 [ 56.101842][ T11] down_read+0xb1/0xa40 [ 56.105985][ T11] ? ntfs_read_folio+0x1308/0x23e0 [ 56.111075][ T11] ? print_irqtrace_events+0x220/0x220 [ 56.116514][ T11] ? __down_common+0x7b0/0x7b0 [ 56.121255][ T11] ? _raw_read_unlock_irqrestore+0x8f/0x140 [ 56.127130][ T11] ? lockdep_hardirqs_on+0x98/0x140 [ 56.132326][ T11] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 56.138209][ T11] ? _raw_read_unlock+0x40/0x40 [ 56.143039][ T11] ? create_empty_buffers+0x53e/0x740 [ 56.148389][ T11] ntfs_read_folio+0x1308/0x23e0 [ 56.153310][ T11] ? ntfs_writepage+0x1630/0x1630 [ 56.158316][ T11] ? folio_add_lru+0x9d0/0x9d0 [ 56.163063][ T11] ? folio_add_lru+0x4b2/0x9d0 [ 56.167807][ T11] ? folio_add_lru+0x27b/0x9d0 [ 56.172553][ T11] filemap_read_folio+0x19c/0x780 [ 56.177558][ T11] ? ntfs_writepage+0x1630/0x1630 [ 56.182577][ T11] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 56.188107][ T11] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 56.194328][ T11] do_read_cache_folio+0x134/0x810 [ 56.199424][ T11] ? ntfs_writepage+0x1630/0x1630 [ 56.204423][ T11] do_read_cache_page+0x30/0x200 [ 56.209345][ T11] ntfs_sync_mft_mirror+0x25f/0x1ae0 [ 56.214610][ T11] ? submit_bio_noacct_nocheck+0xa2f/0xc70 [ 56.220397][ T11] ? should_fail_request+0x80/0x80 [ 56.225490][ T11] ? __mark_mft_record_dirty+0x180/0x180 [ 56.231105][ T11] write_mft_record_nolock+0x1155/0x18f0 [ 56.236723][ T11] ? ntfs_unmap_page+0x260/0x260 [ 56.241639][ T11] ? lockdep_hardirqs_on+0x98/0x140 [ 56.246818][ T11] write_mft_record+0x149/0x310 [ 56.251649][ T11] __ntfs_write_inode+0x703/0xbb0 [ 56.256674][ T11] __writeback_single_inode+0x69b/0xfc0 [ 56.262202][ T11] writeback_sb_inodes+0x8e3/0x1220 [ 56.267394][ T11] ? queue_io+0x570/0x570 [ 56.271706][ T11] ? __writeback_inodes_wb+0x260/0x260 [ 56.277149][ T11] ? queue_io+0x3d5/0x570 [ 56.281459][ T11] wb_writeback+0x44d/0xc70 [ 56.285948][ T11] ? percpu_ref_tryget+0x260/0x260 [ 56.291038][ T11] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 56.297003][ T11] wb_workfn+0x400/0xfb0 [ 56.301229][ T11] ? inode_wait_for_writeback+0x290/0x290 [ 56.306930][ T11] ? read_lock_is_recursive+0x20/0x20 [ 56.312280][ T11] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 56.318239][ T11] ? print_irqtrace_events+0x220/0x220 [ 56.323681][ T11] ? process_scheduled_works+0x825/0x1420 [ 56.329381][ T11] process_scheduled_works+0x90f/0x1420 [ 56.334915][ T11] ? assign_work+0x3d0/0x3d0 [ 56.339485][ T11] ? assign_work+0x364/0x3d0 [ 56.344054][ T11] worker_thread+0xa5f/0x1000 [ 56.348713][ T11] kthread+0x2d3/0x370 [ 56.352774][ T11] ? pr_cont_work+0x5e0/0x5e0 [ 56.357429][ T11] ? kthread_blkcg+0xd0/0xd0 [pid 5054] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5054, si_uid=0, si_status=1, si_utime=0, si_stime=25 /* 0.25 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 56.361995][ T11] ret_fro