Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. executing program [ 72.033262][ T4247] mmap: syz-executor858 (4247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.112407][ T4246] [ 72.114781][ T4246] ====================================================== [ 72.121796][ T4246] WARNING: possible circular locking dependency detected [ 72.128854][ T4246] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G W [ 72.137532][ T4246] ------------------------------------------------------ [ 72.144557][ T4246] syz-executor858/4246 is trying to acquire lock: [ 72.150956][ T4246] ffff88807b2d17d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 72.160643][ T4246] [ 72.160643][ T4246] but task is already holding lock: [ 72.167995][ T4246] ffff88802e5b8f30 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 72.178877][ T4246] [ 72.178877][ T4246] which lock already depends on the new lock. [ 72.178877][ T4246] [ 72.189269][ T4246] [ 72.189269][ T4246] the existing dependency chain (in reverse order) is: [ 72.198272][ T4246] [ 72.198272][ T4246] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 72.206965][ T4246] lock_acquire+0x1f8/0x5a0 [ 72.211998][ T4246] down_write+0x36/0x60 [ 72.216688][ T4246] process_measurement+0x446/0x21b0 [ 72.222419][ T4246] ima_file_mmap+0x121/0x1c0 [ 72.227553][ T4246] __se_sys_remap_file_pages+0x67a/0x8b0 [ 72.233705][ T4246] do_syscall_64+0x3b/0xb0 [ 72.238706][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.245129][ T4246] [ 72.245129][ T4246] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 72.252688][ T4246] validate_chain+0x1661/0x5950 [ 72.258080][ T4246] __lock_acquire+0x125b/0x1f80 [ 72.263543][ T4246] lock_acquire+0x1f8/0x5a0 [ 72.268573][ T4246] down_read_killable+0xc6/0xd10 [ 72.274041][ T4246] mmap_read_lock_killable+0x1d/0x60 [ 72.279848][ T4246] lock_mm_and_find_vma+0x2a7/0x2e0 [ 72.285576][ T4246] exc_page_fault+0x169/0x620 [ 72.290775][ T4246] asm_exc_page_fault+0x22/0x30 [ 72.296159][ T4246] fault_in_readable+0x1c8/0x340 [ 72.301790][ T4246] fault_in_iov_iter_readable+0xdb/0x270 [ 72.307942][ T4246] generic_perform_write+0x207/0x5e0 [ 72.313747][ T4246] __generic_file_write_iter+0x176/0x400 [ 72.319910][ T4246] generic_file_write_iter+0xab/0x310 [ 72.325798][ T4246] vfs_write+0x857/0xbc0 [ 72.330556][ T4246] ksys_write+0x19c/0x2c0 [ 72.335431][ T4246] do_syscall_64+0x3b/0xb0 [ 72.340372][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.346895][ T4246] [ 72.346895][ T4246] other info that might help us debug this: [ 72.346895][ T4246] [ 72.357113][ T4246] Possible unsafe locking scenario: [ 72.357113][ T4246] [ 72.364554][ T4246] CPU0 CPU1 [ 72.369911][ T4246] ---- ---- [ 72.375268][ T4246] lock(&sb->s_type->i_mutex_key#12); [ 72.380730][ T4246] lock(&mm->mmap_lock); [ 72.387581][ T4246] lock(&sb->s_type->i_mutex_key#12); [ 72.395555][ T4246] lock(&mm->mmap_lock); [ 72.399882][ T4246] [ 72.399882][ T4246] *** DEADLOCK *** [ 72.399882][ T4246] [ 72.408017][ T4246] 3 locks held by syz-executor858/4246: [ 72.413562][ T4246] #0: ffff88807bd920e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 72.422793][ T4246] #1: ffff88807465c460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 72.431688][ T4246] #2: ffff88802e5b8f30 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 72.442995][ T4246] [ 72.442995][ T4246] stack backtrace: [ 72.448888][ T4246] CPU: 0 PID: 4246 Comm: syz-executor858 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 72.460596][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.470654][ T4246] Call Trace: [ 72.473933][ T4246] [ 72.476861][ T4246] dump_stack_lvl+0x1e3/0x2cb [ 72.481551][ T4246] ? nf_tcp_handle_invalid+0x642/0x642 [ 72.487020][ T4246] ? print_circular_bug+0x12b/0x1a0 [ 72.492220][ T4246] check_noncircular+0x2fa/0x3b0 [ 72.497361][ T4246] ? page_ext_get+0x1d2/0x2a0 [ 72.502045][ T4246] ? add_chain_block+0x850/0x850 [ 72.507000][ T4246] ? lockdep_lock+0x11f/0x2a0 [ 72.511702][ T4246] ? _find_first_zero_bit+0xd0/0x100 [ 72.516996][ T4246] validate_chain+0x1661/0x5950 [ 72.521843][ T4246] ? reacquire_held_locks+0x660/0x660 [ 72.527230][ T4246] ? reacquire_held_locks+0x660/0x660 [ 72.532617][ T4246] ? mark_lock+0x9a/0x340 [ 72.536951][ T4246] ? reacquire_held_locks+0x660/0x660 [ 72.542318][ T4246] ? mark_lock+0x9a/0x340 [ 72.546672][ T4246] ? reacquire_held_locks+0x660/0x660 [ 72.552037][ T4246] ? __lock_acquire+0x125b/0x1f80 [ 72.557082][ T4246] ? mark_lock+0x9a/0x340 [ 72.561417][ T4246] __lock_acquire+0x125b/0x1f80 [ 72.566277][ T4246] lock_acquire+0x1f8/0x5a0 [ 72.570785][ T4246] ? mmap_read_lock_killable+0x1d/0x60 [ 72.576254][ T4246] ? read_lock_is_recursive+0x10/0x10 [ 72.581631][ T4246] ? __might_sleep+0xb0/0xb0 [ 72.586226][ T4246] down_read_killable+0xc6/0xd10 [ 72.591164][ T4246] ? mmap_read_lock_killable+0x1d/0x60 [ 72.596670][ T4246] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.602670][ T4246] ? cmp_ex_search+0x70/0x90 [ 72.607265][ T4246] ? mmap_read_lock_killable+0x1d/0x60 [ 72.612735][ T4246] ? bsearch+0x8e/0xb0 [ 72.616820][ T4246] ? down_read_interruptible+0xc40/0xc40 [ 72.622459][ T4246] ? search_extable+0xaf/0xf0 [ 72.627139][ T4246] ? trim_init_extable+0x3c0/0x3c0 [ 72.632268][ T4246] ? fault_in_readable+0x1c8/0x340 [ 72.637385][ T4246] ? __init_rwsem+0x160/0x160 [ 72.642078][ T4246] ? print_irqtrace_events+0x210/0x210 [ 72.647547][ T4246] mmap_read_lock_killable+0x1d/0x60 [ 72.652852][ T4246] lock_mm_and_find_vma+0x2a7/0x2e0 [ 72.658091][ T4246] exc_page_fault+0x169/0x620 [ 72.662790][ T4246] asm_exc_page_fault+0x22/0x30 [ 72.667663][ T4246] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 72.673497][ T4246] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 d2 b1 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 72.693121][ T4246] RSP: 0018:ffffc90003cb79e0 EFLAGS: 00050287 [ 72.699190][ T4246] RAX: ffffffff81caea9e RBX: 00000000209a7000 RCX: ffff8880196c5940 [ 72.707162][ T4246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.715142][ T4246] RBP: ffffc90003cb7a98 R08: ffffffff81caea36 R09: ffffffff844210c5 [ 72.723113][ T4246] R10: 0000000000000002 R11: ffff8880196c5940 R12: 0000000000001000 [ 72.731170][ T4246] R13: dffffc0000000000 R14: 00000000209a8000 R15: 1ffff92000796f44 [ 72.739144][ T4246] ? fault_in_iov_iter_readable+0x45/0x270 [ 72.744955][ T4246] ? fault_in_readable+0x156/0x340 [ 72.751194][ T4246] ? fault_in_readable+0x1be/0x340 [ 72.756321][ T4246] ? fault_in_safe_writeable+0x250/0x250 [ 72.762220][ T4246] ? inode_to_bdi+0x65/0xd0 [ 72.766739][ T4246] fault_in_iov_iter_readable+0xdb/0x270 [ 72.772549][ T4246] generic_perform_write+0x207/0x5e0 [ 72.777841][ T4246] ? generic_file_direct_write+0x460/0x460 [ 72.783649][ T4246] ? __file_remove_privs+0x640/0x640 [ 72.788942][ T4246] ? generic_write_checks+0x15c/0x1c0 [ 72.794317][ T4246] ? clear_nonspinnable+0x60/0x60 [ 72.799350][ T4246] __generic_file_write_iter+0x176/0x400 [ 72.804992][ T4246] generic_file_write_iter+0xab/0x310 [ 72.810364][ T4246] vfs_write+0x857/0xbc0 [ 72.814622][ T4246] ? file_end_write+0x250/0x250 [ 72.819474][ T4246] ? __fget_files+0x28/0x4a0 [ 72.824065][ T4246] ? __fget_files+0x435/0x4a0 [ 72.828749][ T4246] ? __fdget_pos+0x2ba/0x360 [ 72.833337][ T4246] ? ksys_write+0x77/0x2c0 [ 72.837755][ T4246] ksys_write+0x19c/0x2c0 [ 72.842084][ T4246] ? print_irqtrace_events+0x210/0x210 [ 72.847555][ T4246] ? __ia32_sys_read+0x80/0x80 [ 72.852323][ T4246] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.858308][ T4246] ? lockdep_hardirqs_on+0x94/0x130 [ 72.863506][ T4246] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.869495][ T4246] do_syscall_64+0x3b/0xb0 [ 72.873924][ T4246] ? clear_bhb_loop+0x45/0xa0 [ 72.878607][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.884512][ T4246] RIP: 0033:0x7f6a5cde4309 [ 72.888938][ T4246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 72.908633][ T4246] RSP: 002b:00007f6a5cda5228 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.917136][ T4246] RAX: ffffffffffffffda RBX: 00007f6a5ce6e308 RCX: 00007f6a5cde4309 [ 72.925107][ T4246] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000003 [ 72.933078][ T4246] RBP: 00007f6a5ce6e300 R08: 00007f6a5cda56c0 R09: 00007f6a5cda56c0 [ 72.941047][ T4246] R10: 00007f6a5cda56c0 R11: 0000000000000246 R12: 00007f6a5ce6e30c [ 72.949017][ T4246] R13: 00007f6a5ce3b004 R14: b635773f06ebbeee R15: 00007ffede2ab288 [ 72.956994][ T4246]