./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2272751247 <...> Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. execve("./syz-executor2272751247", ["./syz-executor2272751247"], 0x7ffc91aaee40 /* 10 vars */) = 0 brk(NULL) = 0x55555dac1000 brk(0x55555dac1d00) = 0x55555dac1d00 arch_prctl(ARCH_SET_FS, 0x55555dac1380) = 0 set_tid_address(0x55555dac1650) = 5222 set_robust_list(0x55555dac1660, 24) = 0 rseq(0x55555dac1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2272751247", 4096) = 28 getrandom("\x4a\xd6\xbd\x2a\xbb\x81\x56\x27", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555dac1d00 brk(0x55555dae2d00) = 0x55555dae2d00 brk(0x55555dae3000) = 0x55555dae3000 mprotect(0x7f052ef24000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0526a00000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\x20\x21\x6f\x11\xa9\xe0\x6c\x4c\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f0526a00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 71.270246][ T5222] loop0: detected capacity change from 0 to 4096 [ 71.296139][ T5222] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). mount("/dev/loop0", "./file0", "ntfs3", 0, "sparse,sparse,dmask=00000000000000000000005,iocharset=cp866,prealloc,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<ni_lock/4){+.+.}-{3:3}, at: ntfs_fiemap+0xff/0x180 [ 71.453051][ T5222] [ 71.453051][ T5222] which lock already depends on the new lock. [ 71.453051][ T5222] [ 71.463538][ T5222] [ 71.463538][ T5222] the existing dependency chain (in reverse order) is: [ 71.472555][ T5222] [ 71.472555][ T5222] -> #1 (&ni->ni_lock/4){+.+.}-{3:3}: [ 71.480131][ T5222] lock_acquire+0x1ed/0x550 [ 71.485176][ T5222] __mutex_lock+0x136/0xd70 [ 71.490230][ T5222] ntfs_read_folio+0xc0/0x210 [ 71.495456][ T5222] filemap_read_folio+0x14b/0x630 [ 71.501086][ T5222] filemap_fault+0x115b/0x1950 [ 71.506365][ T5222] __do_fault+0x135/0x460 [ 71.511216][ T5222] handle_pte_fault+0x1105/0x6800 [ 71.516766][ T5222] handle_mm_fault+0x1053/0x1ad0 [ 71.522227][ T5222] exc_page_fault+0x459/0x8c0 [ 71.527429][ T5222] asm_exc_page_fault+0x26/0x30 [ 71.532805][ T5222] [ 71.532805][ T5222] -> #0 (mapping.invalidate_lock#3){.+.+}-{3:3}: [ 71.541343][ T5222] validate_chain+0x18ef/0x5920 [ 71.546709][ T5222] __lock_acquire+0x1384/0x2050 [ 71.552075][ T5222] lock_acquire+0x1ed/0x550 [ 71.557093][ T5222] down_read+0xb1/0xa40 [ 71.561762][ T5222] page_cache_ra_unbounded+0x135/0x8a0 [ 71.567741][ T5222] do_sync_mmap_readahead+0x499/0x970 [ 71.573622][ T5222] filemap_fault+0x8c5/0x1950 [ 71.578811][ T5222] __do_fault+0x135/0x460 [ 71.583664][ T5222] handle_pte_fault+0x1105/0x6800 [ 71.589210][ T5222] handle_mm_fault+0x1053/0x1ad0 [ 71.594680][ T5222] exc_page_fault+0x2b9/0x8c0 [ 71.599876][ T5222] asm_exc_page_fault+0x26/0x30 [ 71.605262][ T5222] rep_movs_alternative+0x4a/0x70 [ 71.610802][ T5222] _copy_to_user+0x86/0xb0 [ 71.615751][ T5222] ni_fiemap+0x5b4/0x1910 [ 71.620592][ T5222] ntfs_fiemap+0x132/0x180 [ 71.625539][ T5222] do_vfs_ioctl+0x1bf8/0x2e40 [ 71.630750][ T5222] __se_sys_ioctl+0x81/0x170 [ 71.635854][ T5222] do_syscall_64+0xf3/0x230 [ 71.640900][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.647327][ T5222] [ 71.647327][ T5222] other info that might help us debug this: [ 71.647327][ T5222] [ 71.657554][ T5222] Possible unsafe locking scenario: [ 71.657554][ T5222] [ 71.665010][ T5222] CPU0 CPU1 [ 71.670369][ T5222] ---- ---- [ 71.675726][ T5222] lock(&ni->ni_lock/4); [ 71.680074][ T5222] lock(mapping.invalidate_lock#3); [ 71.687884][ T5222] lock(&ni->ni_lock/4); [ 71.694741][ T5222] rlock(mapping.invalidate_lock#3); [ 71.700118][ T5222] [ 71.700118][ T5222] *** DEADLOCK *** [ 71.700118][ T5222] [ 71.708251][ T5222] 1 lock held by syz-executor227/5222: [ 71.713700][ T5222] #0: ffff888075298100 (&ni->ni_lock/4){+.+.}-{3:3}, at: ntfs_fiemap+0xff/0x180 [ 71.722855][ T5222] [ 71.722855][ T5222] stack backtrace: [ 71.728764][ T5222] CPU: 1 UID: 0 PID: 5222 Comm: syz-executor227 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 71.739534][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.749584][ T5222] Call Trace: [ 71.752857][ T5222] [ 71.755785][ T5222] dump_stack_lvl+0x241/0x360 [ 71.760482][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.765688][ T5222] ? __pfx__printk+0x10/0x10 [ 71.770387][ T5222] print_circular_bug+0x13a/0x1b0 [ 71.775408][ T5222] check_noncircular+0x36a/0x4a0 [ 71.780357][ T5222] ? __pfx_lock_release+0x10/0x10 [ 71.785386][ T5222] ? __pfx_check_noncircular+0x10/0x10 [ 71.790857][ T5222] ? lockdep_lock+0x123/0x2b0 [ 71.795552][ T5222] ? is_bpf_text_address+0x26/0x2a0 [ 71.800753][ T5222] validate_chain+0x18ef/0x5920 [ 71.805602][ T5222] ? __kernel_text_address+0xd/0x40 [ 71.810817][ T5222] ? stack_trace_save+0x118/0x1d0 [ 71.815844][ T5222] ? __pfx_validate_chain+0x10/0x10 [ 71.821057][ T5222] ? check_noncircular+0x259/0x4a0 [ 71.826170][ T5222] ? __pfx_check_noncircular+0x10/0x10 [ 71.831657][ T5222] ? lockdep_unlock+0x16a/0x300 [ 71.836507][ T5222] ? __pfx_lockdep_unlock+0x10/0x10 [ 71.841733][ T5222] ? add_lock_to_list+0x1e8/0x2f0 [ 71.846750][ T5222] ? validate_chain+0x15c0/0x5920 [ 71.851765][ T5222] ? __pfx_stack_trace_save+0x10/0x10 [ 71.857129][ T5222] ? mark_lock+0x9a/0x360 [ 71.861471][ T5222] __lock_acquire+0x1384/0x2050 [ 71.866325][ T5222] lock_acquire+0x1ed/0x550 [ 71.870828][ T5222] ? page_cache_ra_unbounded+0x135/0x8a0 [ 71.876462][ T5222] ? __pfx_lock_acquire+0x10/0x10 [ 71.881488][ T5222] ? __pfx___might_resched+0x10/0x10 [ 71.886777][ T5222] down_read+0xb1/0xa40 [ 71.891014][ T5222] ? page_cache_ra_unbounded+0x135/0x8a0 [ 71.896668][ T5222] ? __lock_acquire+0x1384/0x2050 [ 71.901691][ T5222] ? cgroup_rstat_updated+0x13b/0xc60 [ 71.907165][ T5222] ? __pfx_down_read+0x10/0x10 [ 71.911942][ T5222] ? do_sync_mmap_readahead+0x699/0x970 [ 71.917478][ T5222] page_cache_ra_unbounded+0x135/0x8a0 [ 71.922985][ T5222] do_sync_mmap_readahead+0x499/0x970 [ 71.928395][ T5222] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 71.934294][ T5222] ? count_memcg_event_mm+0x90/0x420 [ 71.939588][ T5222] ? __filemap_get_folio+0x949/0xbd0 [ 71.944890][ T5222] filemap_fault+0x8c5/0x1950 [ 71.949561][ T5222] ? __pfx_filemap_fault+0x10/0x10 [ 71.954668][ T5222] ? handle_pte_fault+0x334/0x6800 [ 71.959795][ T5222] ? __pfx_lock_release+0x10/0x10 [ 71.964837][ T5222] ? pte_offset_map_nolock+0x137/0x1f0 [ 71.970406][ T5222] __do_fault+0x135/0x460 [ 71.974744][ T5222] handle_pte_fault+0x1105/0x6800 [ 71.979782][ T5222] ? __pfx_lockdep_unlock+0x10/0x10 [ 71.984989][ T5222] ? mark_lock+0x9a/0x360 [ 71.989313][ T5222] ? __pfx_handle_pte_fault+0x10/0x10 [ 71.994701][ T5222] ? mt_find+0x2a9/0x920 [ 71.998963][ T5222] ? __pfx_lock_release+0x10/0x10 [ 72.003991][ T5222] handle_mm_fault+0x1053/0x1ad0 [ 72.008935][ T5222] ? __pfx_handle_mm_fault+0x10/0x10 [ 72.014217][ T5222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.020549][ T5222] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 72.025859][ T5222] exc_page_fault+0x2b9/0x8c0 [ 72.030553][ T5222] asm_exc_page_fault+0x26/0x30 [ 72.035405][ T5222] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 72.041204][ T5222] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 72.060818][ T5222] RSP: 0018:ffffc90003d0f6d0 EFLAGS: 00050206 [ 72.066881][ T5222] RAX: ffffffff84b32e01 RBX: 00000000200012d0 RCX: 00000000000002d0 [ 72.074858][ T5222] RDX: 0000000000000000 RSI: ffff888012984d60 RDI: 0000000020001000 [ 72.082821][ T5222] RBP: ffffc90003d0f8d0 R08: ffff88801298502f R09: 1ffff11002530a05 [ 72.090805][ T5222] R10: dffffc0000000000 R11: ffffed1002530a06 R12: 0000000000001030 [ 72.098772][ T5222] R13: 1ffff920007a1f00 R14: 00000000200002a0 R15: ffff888012984000 [ 72.106766][ T5222] ? _copy_to_user+0x1/0xb0 [ 72.111266][ T5222] _copy_to_user+0x86/0xb0 [ 72.115706][ T5222] ni_fiemap+0x5b4/0x1910 [ 72.120050][ T5222] ? __pfx_ni_fiemap+0x10/0x10 [ 72.124845][ T5222] ? __pfx___might_resched+0x10/0x10 [ 72.130139][ T5222] ? fiemap_prep+0x19e/0x240 [ 72.134740][ T5222] ntfs_fiemap+0x132/0x180 [ 72.139151][ T5222] ? __pfx_ntfs_fiemap+0x10/0x10 [ 72.144101][ T5222] ? __might_fault+0xc6/0x120 [ 72.148859][ T5222] ? __pfx_ntfs_fiemap+0x10/0x10 [ 72.153803][ T5222] do_vfs_ioctl+0x1bf8/0x2e40 [ 72.158483][ T5222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.163502][ T5222] ? mark_lock+0x9a/0x360 [ 72.167833][ T5222] ? tomoyo_path_number_perm+0x208/0x880 [ 72.173460][ T5222] ? __pfx_lock_release+0x10/0x10 [ 72.178480][ T5222] ? lockdep_hardirqs_on+0x99/0x150 [ 72.183693][ T5222] ? kfree+0x1a0/0x440 [ 72.187778][ T5222] ? tomoyo_path_number_perm+0x68d/0x880 [ 72.193435][ T5222] ? tomoyo_path_number_perm+0x71a/0x880 [ 72.199154][ T5222] ? tomoyo_path_number_perm+0x208/0x880 [ 72.204783][ T5222] ? smack_log+0x123/0x540 [ 72.209314][ T5222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.215288][ T5222] ? __pfx_smack_log+0x10/0x10 [ 72.220054][ T5222] ? smk_access+0x4ab/0x4e0 [ 72.224564][ T5222] ? smk_tskacc+0x300/0x370 [ 72.229092][ T5222] ? smack_file_ioctl+0x2f7/0x3a0 [ 72.234118][ T5222] ? __pfx_smack_file_ioctl+0x10/0x10 [ 72.239485][ T5222] ? __pfx_ptrace_notify+0x10/0x10 [ 72.244594][ T5222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.250929][ T5222] __se_sys_ioctl+0x81/0x170 [ 72.255602][ T5222] do_syscall_64+0xf3/0x230 [ 72.260098][ T5222] ? clear_bhb_loop+0x35/0x90 [ 72.264809][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.270700][ T5222] RIP: 0033:0x7f052ee927f9 [ 72.275119][ T5222] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.294763][ T5222] RSP: 002b:00007ffffe2fd5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.303272][ T5222] RAX: ffffffffffffffda RBX: 00007ffffe2fd7b8 RCX: 00007f052ee927f9 [ 72.311249][ T5222] RDX: 0000000020000280 RSI: 00000000c020660b RDI: 0000000000000005 [ 72.319225][ T5222] RBP: 00007f052ef24610 R08: 00007ffffe2fd7b8 R09: 00007ffffe2fd7b8 [ 72.327188][ T5222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.335149][ T5222] R13: 00007ffffe2fd7a8 R14: 0000000000000001 R15: 0000000000000001 ioctl(5, FS_IOC_FIEMAP, {fm_start=0, fm_length=6, fm_flags=0, fm_extent_count=74} => {fm_flags=0, fm_mapped_extents=0, ...}) = 0 exit_group(0) = ? +++ exited with 0 +++ [ 72