Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. executing program [ 36.857153][ T6237] loop0: detected capacity change from 0 to 4096 [ 36.886455][ T6237] ntfs3: loop0: mft corrupted [ 36.887723][ T6237] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 36.895990][ T652] [ 36.896578][ T652] ====================================================== [ 36.898145][ T652] WARNING: possible circular locking dependency detected [ 36.899846][ T652] 6.9.0-rc7-syzkaller-gfda5695d692c #0 Not tainted [ 36.901372][ T652] ------------------------------------------------------ [ 36.903115][ T652] kworker/u8:7/652 is trying to acquire lock: [ 36.904517][ T652] ffff0000d80fa128 (&wnd->rw_lock/1){+.+.}-{3:3}, at: ntfs_mark_rec_free+0x48/0x270 [ 36.906808][ T652] [ 36.906808][ T652] but task is already holding lock: [ 36.908560][ T652] ffff0000decb6fa0 (&ni->ni_lock#3){+.+.}-{3:3}, at: ni_write_inode+0x168/0xda4 [ 36.910744][ T652] [ 36.910744][ T652] which lock already depends on the new lock. [ 36.910744][ T652] [ 36.913303][ T652] [ 36.913303][ T652] the existing dependency chain (in reverse order) is: [ 36.915524][ T652] [ 36.915524][ T652] -> #1 (&ni->ni_lock#3){+.+.}-{3:3}: [ 36.917382][ T652] __mutex_lock_common+0x190/0x21a0 [ 36.918721][ T652] mutex_lock_nested+0x2c/0x38 [ 36.919877][ T652] ntfs_set_state+0x1a4/0x5c0 [ 36.921123][ T652] mi_read+0x3e0/0x4d8 [ 36.922216][ T652] mi_format_new+0x174/0x514 [ 36.923531][ T652] ni_add_subrecord+0xd0/0x3c4 [ 36.924769][ T652] ntfs_look_free_mft+0x4c8/0xd1c [ 36.926032][ T652] ni_create_attr_list+0x764/0xf54 [ 36.927405][ T652] ni_ins_attr_ext+0x300/0xa0c [ 36.928687][ T652] ni_add_name+0x658/0xc14 [ 36.929888][ T652] ni_rename+0xc8/0x1d8 [ 36.930944][ T652] ntfs_rename+0x610/0xae0 [ 36.932061][ T652] vfs_rename+0x9bc/0xc84 [ 36.933315][ T652] do_renameat2+0x9c8/0xe40 [ 36.934540][ T652] __arm64_sys_renameat2+0xe0/0xfc [ 36.935903][ T652] invoke_syscall+0x98/0x2b8 [ 36.937069][ T652] el0_svc_common+0x130/0x23c [ 36.938288][ T652] do_el0_svc+0x48/0x58 [ 36.939426][ T652] el0_svc+0x54/0x168 [ 36.940501][ T652] el0t_64_sync_handler+0x84/0xfc [ 36.941864][ T652] el0t_64_sync+0x190/0x194 [ 36.942989][ T652] [ 36.942989][ T652] -> #0 (&wnd->rw_lock/1){+.+.}-{3:3}: [ 36.944689][ T652] __lock_acquire+0x3384/0x763c [ 36.945934][ T652] lock_acquire+0x248/0x73c [ 36.947130][ T652] down_write_nested+0x58/0xcc [ 36.948376][ T652] ntfs_mark_rec_free+0x48/0x270 [ 36.949666][ T652] ni_write_inode+0xa28/0xda4 [ 36.950944][ T652] ntfs3_write_inode+0x70/0x98 [ 36.952241][ T652] __writeback_single_inode+0x5f0/0x1548 [ 36.953644][ T652] writeback_sb_inodes+0x700/0x101c [ 36.955050][ T652] wb_writeback+0x404/0x1048 [ 36.956265][ T652] wb_workfn+0x394/0x104c [ 36.957409][ T652] process_one_work+0x7b8/0x15d4 [ 36.958767][ T652] worker_thread+0x938/0xef4 [ 36.960090][ T652] kthread+0x288/0x310 [ 36.961164][ T652] ret_from_fork+0x10/0x20 [ 36.962244][ T652] [ 36.962244][ T652] other info that might help us debug this: [ 36.962244][ T652] [ 36.964620][ T652] Possible unsafe locking scenario: [ 36.964620][ T652] [ 36.966422][ T652] CPU0 CPU1 [ 36.967720][ T652] ---- ---- [ 36.968951][ T652] lock(&ni->ni_lock#3); [ 36.969884][ T652] lock(&wnd->rw_lock/1); [ 36.971605][ T652] lock(&ni->ni_lock#3); [ 36.973408][ T652] lock(&wnd->rw_lock/1); [ 36.974394][ T652] [ 36.974394][ T652] *** DEADLOCK *** [ 36.974394][ T652] [ 36.976400][ T652] 3 locks held by kworker/u8:7/652: [ 36.977609][ T652] #0: ffff0000c20c6948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 [ 36.980209][ T652] #1: ffff800098d87c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 [ 36.982971][ T652] #2: ffff0000decb6fa0 (&ni->ni_lock#3){+.+.}-{3:3}, at: ni_write_inode+0x168/0xda4 [ 36.985235][ T652] [ 36.985235][ T652] stack backtrace: [ 36.986764][ T652] CPU: 1 PID: 652 Comm: kworker/u8:7 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 [ 36.989054][ T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 36.991553][ T652] Workqueue: writeback wb_workfn (flush-7:0) [ 36.993069][ T652] Call trace: [ 36.993893][ T652] dump_backtrace+0x1b8/0x1e4 [ 36.995017][ T652] show_stack+0x2c/0x3c [ 36.996009][ T652] dump_stack_lvl+0xe4/0x150 [ 36.997131][ T652] dump_stack+0x1c/0x28 [ 36.998248][ T652] print_circular_bug+0x150/0x1b8 [ 36.999430][ T652] check_noncircular+0x310/0x404 [ 37.000588][ T652] __lock_acquire+0x3384/0x763c [ 37.001804][ T652] lock_acquire+0x248/0x73c [ 37.002890][ T652] down_write_nested+0x58/0xcc [ 37.004016][ T652] ntfs_mark_rec_free+0x48/0x270 [ 37.005195][ T652] ni_write_inode+0xa28/0xda4 [ 37.006243][ T652] ntfs3_write_inode+0x70/0x98 [ 37.007415][ T652] __writeback_single_inode+0x5f0/0x1548 [ 37.008767][ T652] writeback_sb_inodes+0x700/0x101c [ 37.009928][ T652] wb_writeback+0x404/0x1048 [ 37.010965][ T652] wb_workfn+0x394/0x104c [ 37.012015][ T652] process_one_work+0x7b8/0x15d4 [ 37.013151][ T652] worker_thread+0x938/0xef4 [ 37.014367][ T652] kthread+0x288/0x310 [ 37.015314][ T652] ret_from_fork+0x10/0x20