./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2278787509 <...> Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. execve("./syz-executor2278787509", ["./syz-executor2278787509"], 0x7fff9ae55800 /* 10 vars */) = 0 brk(NULL) = 0x555556e44000 brk(0x555556e44d00) = 0x555556e44d00 arch_prctl(ARCH_SET_FS, 0x555556e44380) = 0 set_tid_address(0x555556e44650) = 5057 set_robust_list(0x555556e44660, 24) = 0 rseq(0x555556e44ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2278787509", 4096) = 28 getrandom("\x6c\xfb\x97\x23\xab\x7f\xee\xda", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556e44d00 brk(0x555556e65d00) = 0x555556e65d00 brk(0x555556e66000) = 0x555556e66000 mprotect(0x7fe144d2a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5058 attached , child_tidptr=0x555556e44650) = 5058 [pid 5058] set_robust_list(0x555556e44660, 24) = 0 [pid 5058] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] setsid() = 1 [pid 5058] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5058] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5058] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5058] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5058] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5058] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5058] unshare(CLONE_NEWNS) = 0 [pid 5058] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5058] unshare(CLONE_NEWIPC) = 0 [pid 5058] unshare(CLONE_NEWCGROUP) = 0 [pid 5058] unshare(CLONE_NEWUTS) = 0 [pid 5058] unshare(CLONE_SYSVSEM) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "16777216", 8) = 8 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "536870912", 9) = 9 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1024", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "8192", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1024", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1024", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5058] close(3) = 0 [pid 5058] getpid() = 1 [pid 5058] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [97], 9) = 9 [pid 5058] exit_group(1) = ? [ 56.124099][ T5058] syz-executor227 (5058): drop_caches: 1 [ 56.151938][ T42] [ 56.154294][ T42] ====================================================== [ 56.161332][ T42] WARNING: possible circular locking dependency detected [ 56.168338][ T42] 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 Not tainted [ 56.175354][ T42] ------------------------------------------------------ [ 56.182782][ T42] kworker/u4:2/42 is trying to acquire lock: [ 56.188740][ T42] ffff888076a90940 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x1308/0x23e0 [ 56.197608][ T42] [ 56.197608][ T42] but task is already holding lock: [ 56.204946][ T42] ffff888076a92290 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 56.213891][ T42] [ 56.213891][ T42] which lock already depends on the new lock. [ 56.213891][ T42] [ 56.224284][ T42] [ 56.224284][ T42] the existing dependency chain (in reverse order) is: [ 56.233283][ T42] [ 56.233283][ T42] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 56.240818][ T42] lock_acquire+0x1e3/0x530 [ 56.245830][ T42] __mutex_lock+0x136/0xd60 [ 56.250853][ T42] map_mft_record+0x4c/0x630 [ 56.255957][ T42] ntfs_attr_extend_allocation+0x2d0/0x3ec0 [ 56.262434][ T42] ntfs_file_write_iter+0x37e/0x1970 [ 56.268255][ T42] do_iter_readv_writev+0x330/0x4a0 [ 56.274000][ T42] do_iter_write+0x1f6/0x8d0 [ 56.279128][ T42] do_pwritev+0x21a/0x360 [ 56.283982][ T42] do_syscall_64+0x45/0x110 [ 56.289016][ T42] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.295426][ T42] [ 56.295426][ T42] -> #0 (&rl->lock){++++}-{3:3}: [ 56.302539][ T42] validate_chain+0x1909/0x5ab0 [ 56.307904][ T42] __lock_acquire+0x1345/0x1fd0 [ 56.313264][ T42] lock_acquire+0x1e3/0x530 [ 56.318276][ T42] down_read+0xb1/0xa40 [ 56.322940][ T42] ntfs_read_folio+0x1308/0x23e0 [ 56.328401][ T42] filemap_read_folio+0x19c/0x780 [ 56.333935][ T42] do_read_cache_folio+0x134/0x810 [ 56.339559][ T42] do_read_cache_page+0x30/0x200 [ 56.345022][ T42] ntfs_sync_mft_mirror+0x25f/0x1ae0 [ 56.350817][ T42] write_mft_record_nolock+0x1155/0x18f0 [ 56.356967][ T42] write_mft_record+0x149/0x310 [ 56.362325][ T42] __ntfs_write_inode+0x703/0xbb0 [ 56.367869][ T42] __writeback_single_inode+0x69b/0xfc0 [ 56.373925][ T42] writeback_sb_inodes+0x8e3/0x1220 [ 56.379660][ T42] wb_writeback+0x44d/0xc70 [ 56.384687][ T42] wb_workfn+0x400/0xfb0 [ 56.389461][ T42] process_scheduled_works+0x90f/0x1420 [ 56.395521][ T42] worker_thread+0xa5f/0x1000 [ 56.400711][ T42] kthread+0x2d3/0x370 [ 56.405285][ T42] ret_from_fork+0x48/0x80 [ 56.410226][ T42] ret_from_fork_asm+0x11/0x20 [ 56.415511][ T42] [ 56.415511][ T42] other info that might help us debug this: [ 56.415511][ T42] [ 56.425743][ T42] Possible unsafe locking scenario: [ 56.425743][ T42] [ 56.433186][ T42] CPU0 CPU1 [ 56.438555][ T42] ---- ---- [ 56.443920][ T42] lock(&ni->mrec_lock); [ 56.448250][ T42] lock(&rl->lock); [ 56.454659][ T42] lock(&ni->mrec_lock); [ 56.461512][ T42] rlock(&rl->lock); [ 56.465495][ T42] [ 56.465495][ T42] *** DEADLOCK *** [ 56.465495][ T42] [ 56.473634][ T42] 3 locks held by kworker/u4:2/42: [ 56.478733][ T42] #0: ffff888143241d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 56.489957][ T42] #1: ffffc90000b2fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 56.502387][ T42] #2: ffff888076a92290 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 56.512046][ T42] [ 56.512046][ T42] stack backtrace: [ 56.517917][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 56.527878][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 56.537921][ T42] Workqueue: writeback wb_workfn (flush-7:0) [ 56.543904][ T42] Call Trace: [ 56.547172][ T42] [ 56.550093][ T42] dump_stack_lvl+0x1e7/0x2d0 [ 56.554764][ T42] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.560214][ T42] ? print_circular_bug+0x12b/0x1a0 [ 56.565411][ T42] check_noncircular+0x366/0x490 [ 56.570341][ T42] ? noop_count+0x30/0x30 [ 56.574664][ T42] ? print_deadlock_bug+0x610/0x610 [ 56.579854][ T42] ? lockdep_lock+0x123/0x2b0 [ 56.584523][ T42] ? check_noncircular+0x259/0x490 [ 56.589625][ T42] ? check_path+0x21/0x40 [ 56.593949][ T42] ? _find_first_zero_bit+0xd4/0x100 [ 56.599238][ T42] validate_chain+0x1909/0x5ab0 [ 56.604087][ T42] ? validate_chain+0x15c6/0x5ab0 [ 56.609104][ T42] ? reacquire_held_locks+0x690/0x690 [ 56.614471][ T42] ? reacquire_held_locks+0x690/0x690 [ 56.619833][ T42] ? look_up_lock_class+0x77/0x160 [ 56.624940][ T42] ? register_lock_class+0x102/0x970 [ 56.630217][ T42] ? is_dynamic_key+0x260/0x260 [ 56.635145][ T42] ? mark_lock+0x9a/0x350 [ 56.639469][ T42] __lock_acquire+0x1345/0x1fd0 [ 56.644315][ T42] lock_acquire+0x1e3/0x530 [ 56.648808][ T42] ? ntfs_read_folio+0x1308/0x23e0 [ 56.653908][ T42] ? read_lock_is_recursive+0x20/0x20 [ 56.659273][ T42] ? __might_sleep+0xe0/0xe0 [ 56.663859][ T42] ? mark_lock+0x9a/0x350 [ 56.668187][ T42] down_read+0xb1/0xa40 [ 56.672344][ T42] ? ntfs_read_folio+0x1308/0x23e0 [ 56.677446][ T42] ? print_irqtrace_events+0x220/0x220 [ 56.682894][ T42] ? __down_common+0x7b0/0x7b0 [ 56.687649][ T42] ? _raw_read_unlock_irqrestore+0x8f/0x140 [ 56.693549][ T42] ? lockdep_hardirqs_on+0x98/0x140 [ 56.698739][ T42] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 56.704628][ T42] ? _raw_read_unlock+0x40/0x40 [ 56.709468][ T42] ? create_empty_buffers+0x53e/0x740 [ 56.714830][ T42] ntfs_read_folio+0x1308/0x23e0 [ 56.719767][ T42] ? ntfs_writepage+0x1630/0x1630 [ 56.724780][ T42] ? folio_add_lru+0x9d0/0x9d0 [ 56.729537][ T42] ? folio_add_lru+0x4b2/0x9d0 [ 56.734290][ T42] ? folio_add_lru+0x27b/0x9d0 [ 56.739046][ T42] filemap_read_folio+0x19c/0x780 [ 56.744063][ T42] ? ntfs_writepage+0x1630/0x1630 [ 56.749075][ T42] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 56.754613][ T42] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 56.760848][ T42] do_read_cache_folio+0x134/0x810 [ 56.765955][ T42] ? ntfs_writepage+0x1630/0x1630 [ 56.771052][ T42] do_read_cache_page+0x30/0x200 [ 56.775979][ T42] ntfs_sync_mft_mirror+0x25f/0x1ae0 [ 56.781251][ T42] ? submit_bio_noacct_nocheck+0xa2f/0xc70 [ 56.787056][ T42] ? should_fail_request+0x80/0x80 [ 56.792158][ T42] ? __mark_mft_record_dirty+0x180/0x180 [ 56.797783][ T42] write_mft_record_nolock+0x1155/0x18f0 [ 56.803414][ T42] ? ntfs_unmap_page+0x260/0x260 [ 56.808348][ T42] ? lockdep_hardirqs_on+0x98/0x140 [ 56.813543][ T42] write_mft_record+0x149/0x310 [ 56.818381][ T42] __ntfs_write_inode+0x703/0xbb0 [ 56.823567][ T42] __writeback_single_inode+0x69b/0xfc0 [ 56.829106][ T42] writeback_sb_inodes+0x8e3/0x1220 [ 56.834303][ T42] ? queue_io+0x570/0x570 [ 56.838626][ T42] ? __writeback_inodes_wb+0x260/0x260 [ 56.844078][ T42] ? queue_io+0x3d5/0x570 [ 56.848400][ T42] wb_writeback+0x44d/0xc70 [ 56.852901][ T42] ? percpu_ref_tryget+0x260/0x260 [ 56.858002][ T42] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 56.863978][ T42] wb_workfn+0x400/0xfb0 [ 56.868392][ T42] ? inode_wait_for_writeback+0x290/0x290 [ 56.874108][ T42] ? read_lock_is_recursive+0x20/0x20 [ 56.879466][ T42] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 56.885618][ T42] ? print_irqtrace_events+0x220/0x220 [ 56.891072][ T42] ? process_scheduled_works+0x825/0x1420 [ 56.896780][ T42] process_scheduled_works+0x90f/0x1420 [ 56.902321][ T42] ? assign_work+0x3d0/0x3d0 [ 56.906912][ T42] ? assign_work+0x364/0x3d0 [ 56.911491][ T42] worker_thread+0xa5f/0x1000 [ 56.916166][ T42] kthread+0x2d3/0x370 [ 56.920219][ T42] ? pr_cont_work+0x5e0/0x5e0 [pid 5058] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=1, si_utime=0, si_stime=23 /* 0.23 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 56.924884][ T42] ? kthre