./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4285140857 <...> DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4 forked to background, child pid 3186 [ 25.623939][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.634378][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. execve("./syz-executor4285140857", ["./syz-executor4285140857"], 0x7ffcf0580500 /* 10 vars */) = 0 brk(NULL) = 0x555555fec000 brk(0x555555fecc40) = 0x555555fecc40 arch_prctl(ARCH_SET_FS, 0x555555fec300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4285140857", 4096) = 28 brk(0x55555600dc40) = 0x55555600dc40 brk(0x55555600e000) = 0x55555600e000 mprotect(0x7f205c641000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3608 attached , child_tidptr=0x555555fec5d0) = 3608 [pid 3608] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3608] setsid() = 1 [pid 3608] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3608] unshare(CLONE_NEWNS) = 0 [pid 3608] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3608] unshare(CLONE_NEWIPC) = 0 [pid 3608] unshare(CLONE_NEWCGROUP) = 0 [pid 3608] unshare(CLONE_NEWUTS) = 0 [pid 3608] unshare(CLONE_SYSVSEM) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "16777216", 8) = 8 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "536870912", 9) = 9 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "8192", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3608] close(3) = 0 [pid 3608] getpid() = 1 [pid 3608] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [80], 22) = 22 [pid 3608] exit_group(1) = ? [ 51.774176][ T3608] syz-executor428 (3608): drop_caches: 1 [ 51.792264][ T56] [ 51.794628][ T56] ====================================================== [ 51.801625][ T56] WARNING: possible circular locking dependency detected [ 51.808618][ T56] 6.0.0-rc7-syzkaller-00180-g70575e77839f #0 Not tainted [ 51.815612][ T56] ------------------------------------------------------ [ 51.822603][ T56] kworker/u4:4/56 is trying to acquire lock: [ 51.828553][ T56] ffff888070c78940 (&rl->lock){++++}-{3:3}, at: ntfs_read_block+0x91a/0x22e0 [ 51.837322][ T56] [ 51.837322][ T56] but task is already holding lock: [ 51.844670][ T56] ffff888070c7b310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x46/0x610 [ 51.853599][ T56] [ 51.853599][ T56] which lock already depends on the new lock. [ 51.853599][ T56] [ 51.863974][ T56] [ 51.863974][ T56] the existing dependency chain (in reverse order) is: [ 51.872962][ T56] [ 51.872962][ T56] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 51.880493][ T56] lock_acquire+0x182/0x3c0 [ 51.885500][ T56] __mutex_lock_common+0x1bd/0x26e0 [ 51.891208][ T56] mutex_lock_nested+0x17/0x20 [ 51.896472][ T56] map_mft_record+0x46/0x610 [ 51.901559][ T56] ntfs_truncate+0x24e/0x2720 [ 51.906734][ T56] ntfs_setattr+0x2b9/0x3a0 [ 51.911734][ T56] notify_change+0xe38/0x10f0 [ 51.916910][ T56] do_truncate+0x1fb/0x2e0 [ 51.921829][ T56] vfs_truncate+0x2af/0x380 [ 51.926829][ T56] do_sys_truncate+0xcb/0x180 [ 51.932003][ T56] do_syscall_64+0x3d/0xb0 [ 51.936918][ T56] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.943316][ T56] [ 51.943316][ T56] -> #0 (&rl->lock){++++}-{3:3}: [ 51.950423][ T56] validate_chain+0x1873/0x6c00 [ 51.955783][ T56] __lock_acquire+0x1292/0x1f60 [ 51.961139][ T56] lock_acquire+0x182/0x3c0 [ 51.966149][ T56] down_read+0x39/0x50 [ 51.970723][ T56] ntfs_read_block+0x91a/0x22e0 [ 51.976081][ T56] filemap_read_folio+0x8b/0x540 [ 51.981526][ T56] do_read_cache_folio+0x2d3/0x790 [ 51.987144][ T56] read_cache_page+0x57/0x250 [ 51.992340][ T56] ntfs_sync_mft_mirror+0x21a/0x1df0 [ 51.998152][ T56] write_mft_record_nolock+0x1213/0x1930 [ 52.004300][ T56] __ntfs_write_inode+0x721/0xc90 [ 52.009834][ T56] __writeback_single_inode+0x4d6/0x670 [ 52.015891][ T56] writeback_sb_inodes+0xb3b/0x18f0 [ 52.021594][ T56] wb_writeback+0x41f/0x7b0 [ 52.026601][ T56] wb_workfn+0x3cb/0xef0 [ 52.031351][ T56] process_one_work+0x877/0xdb0 [ 52.036707][ T56] worker_thread+0xb14/0x1330 [ 52.041884][ T56] kthread+0x266/0x300 [ 52.046458][ T56] ret_from_fork+0x1f/0x30 [ 52.051386][ T56] [ 52.051386][ T56] other info that might help us debug this: [ 52.051386][ T56] [ 52.061595][ T56] Possible unsafe locking scenario: [ 52.061595][ T56] [ 52.069027][ T56] CPU0 CPU1 [ 52.074375][ T56] ---- ---- [ 52.079721][ T56] lock(&ni->mrec_lock); [ 52.084034][ T56] lock(&rl->lock); [ 52.090433][ T56] lock(&ni->mrec_lock); [ 52.097262][ T56] lock(&rl->lock); [ 52.101143][ T56] [ 52.101143][ T56] *** DEADLOCK *** [ 52.101143][ T56] [ 52.109266][ T56] 3 locks held by kworker/u4:4/56: [ 52.114357][ T56] #0: ffff888017dec938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 [ 52.124867][ T56] #1: ffffc90001577d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 [ 52.136584][ T56] #2: ffff888070c7b310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x46/0x610 [ 52.145958][ T56] [ 52.145958][ T56] stack backtrace: [ 52.151827][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.0.0-rc7-syzkaller-00180-g70575e77839f #0 [ 52.161782][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 52.171819][ T56] Workqueue: writeback wb_workfn (flush-7:0) [ 52.177791][ T56] Call Trace: [ 52.181055][ T56] [ 52.183974][ T56] dump_stack_lvl+0x1b1/0x28e [ 52.188639][ T56] ? fortify_panic+0x13/0x13 [ 52.193214][ T56] ? print_circular_bug+0x13e/0x1c0 [ 52.198400][ T56] check_noncircular+0x2cc/0x390 [ 52.203324][ T56] ? add_chain_block+0x850/0x850 [ 52.208244][ T56] ? queued_spin_lock_slowpath+0x42/0x50 [ 52.213863][ T56] ? lockdep_lock+0x189/0x290 [ 52.218530][ T56] ? validate_chain+0x143a/0x6c00 [ 52.223543][ T56] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 52.229944][ T56] validate_chain+0x1873/0x6c00 [ 52.234783][ T56] ? reacquire_held_locks+0x650/0x650 [ 52.240145][ T56] ? validate_chain+0x143a/0x6c00 [ 52.245155][ T56] ? reacquire_held_locks+0x650/0x650 [ 52.250517][ T56] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.256138][ T56] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.262105][ T56] ? reacquire_held_locks+0x650/0x650 [ 52.267471][ T56] ? deref_stack_reg+0x17a/0x210 [ 52.272395][ T56] ? unwind_next_frame+0x1b06/0x24c0 [ 52.277668][ T56] ? deref_stack_reg+0x17a/0x210 [ 52.282592][ T56] ? deref_stack_reg+0x17a/0x210 [ 52.287521][ T56] ? unwind_next_frame+0x1b06/0x24c0 [ 52.292791][ T56] ? deref_stack_reg+0x17a/0x210 [ 52.297715][ T56] ? preempt_count_add+0x8d/0x180 [ 52.302725][ T56] ? unwind_next_frame+0x10d7/0x24c0 [ 52.308000][ T56] ? ret_from_fork+0x1f/0x30 [ 52.312592][ T56] ? stack_trace_save+0x1e0/0x1e0 [ 52.317634][ T56] ? arch_stack_walk+0xb2/0xe0 [ 52.322403][ T56] ? ret_from_fork+0x1f/0x30 [ 52.326983][ T56] ? stack_trace_save+0x104/0x1e0 [ 52.331993][ T56] ? stack_trace_snprint+0xf0/0xf0 [ 52.337091][ T56] ? __kasan_slab_alloc+0xb5/0xd0 [ 52.342186][ T56] ? __kasan_slab_alloc+0xa3/0xd0 [ 52.347196][ T56] ? lockdep_unlock+0x144/0x2e0 [ 52.352035][ T56] ? lockdep_lock+0x290/0x290 [ 52.356699][ T56] ? mark_lock+0x2a1/0x350 [ 52.361104][ T56] __lock_acquire+0x1292/0x1f60 [ 52.365948][ T56] lock_acquire+0x182/0x3c0 [ 52.370439][ T56] ? ntfs_read_block+0x91a/0x22e0 [ 52.375451][ T56] ? read_lock_is_recursive+0x10/0x10 [ 52.380830][ T56] ? __might_sleep+0xc0/0xc0 [ 52.385500][ T56] ? _raw_read_unlock_irqrestore+0x8b/0x120 [ 52.391389][ T56] ? lockdep_hardirqs_on+0x8d/0x130 [ 52.396575][ T56] ? _raw_read_unlock_irqrestore+0xc1/0x120 [ 52.402462][ T56] ? _raw_read_unlock+0x40/0x40 [ 52.407302][ T56] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.412484][ T56] down_read+0x39/0x50 [ 52.416539][ T56] ? ntfs_read_block+0x91a/0x22e0 [ 52.421550][ T56] ntfs_read_block+0x91a/0x22e0 [ 52.426393][ T56] ? folio_add_lru+0x480/0x960 [ 52.431147][ T56] ? compound_nr+0x1b0/0x1b0 [ 52.435720][ T56] ? ntfs_read_folio+0xc23/0x1060 [ 52.440731][ T56] ? trace_mm_filemap_add_to_page_cache+0x220/0x220 [ 52.447304][ T56] ? ntfs_writepage+0x1d10/0x1d10 [ 52.452316][ T56] filemap_read_folio+0x8b/0x540 [ 52.457237][ T56] ? do_read_cache_folio+0x2c1/0x790 [ 52.462506][ T56] do_read_cache_folio+0x2d3/0x790 [ 52.467604][ T56] ? ntfs_writepage+0x1d10/0x1d10 [ 52.472616][ T56] read_cache_page+0x57/0x250 [ 52.477318][ T56] ntfs_sync_mft_mirror+0x21a/0x1df0 [ 52.482594][ T56] ? submit_bio+0x23c/0x380 [ 52.487084][ T56] ? __mark_mft_record_dirty+0x170/0x170 [ 52.492701][ T56] ? trace_block_bio_queue+0x220/0x220 [ 52.498142][ T56] ? guard_bio_eod+0xc0/0x110 [ 52.502803][ T56] ? submit_bh_wbc+0x41b/0x4c0 [ 52.507556][ T56] write_mft_record_nolock+0x1213/0x1930 [ 52.513181][ T56] ? lock_page+0x2b0/0x2b0 [ 52.517582][ T56] ? slab_free_freelist_hook+0x12e/0x1a0 [ 52.523195][ T56] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 52.528551][ T56] ? __ntfs_write_inode+0x695/0xc90 [ 52.533735][ T56] __ntfs_write_inode+0x721/0xc90 [ 52.538749][ T56] __writeback_single_inode+0x4d6/0x670 [ 52.544284][ T56] writeback_sb_inodes+0xb3b/0x18f0 [ 52.549510][ T56] ? queue_io+0x400/0x400 [ 52.553829][ T56] ? queue_io+0x382/0x400 [ 52.558144][ T56] wb_writeback+0x41f/0x7b0 [ 52.562639][ T56] ? trace_writeback_exec+0x220/0x220 [ 52.567998][ T56] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.573625][ T56] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.578810][ T56] wb_workfn+0x3cb/0xef0 [ 52.583048][ T56] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 52.588757][ T56] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.594375][ T56] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.600344][ T56] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 52.606226][ T56] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.611408][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.616589][ T56] process_one_work+0x877/0xdb0 [ 52.621428][ T56] ? worker_detach_from_pool+0x260/0x260 [pid 3608] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3608, si_uid=0, si_status=1, si_utime=0, si_stime=32} --- exit_group(0) = ? +++ exited with 0 +++ [ 52.62704