Warning: Permanently added '10.128.1.16' (ECDSA) to the list of known hosts. [ 39.085518] IPVS: ftp: loaded support on port[0] = 21 executing program [ 39.188445] ntfs: volume version 3.1. [ 39.222839] [ 39.224576] ====================================================== [ 39.230875] WARNING: possible circular locking dependency detected [ 39.237193] 4.19.211-syzkaller #0 Not tainted [ 39.241665] ------------------------------------------------------ [ 39.248049] syz-executor339/8134 is trying to acquire lock: [ 39.253742] 00000000e032c785 (&lcnbmp_mrec_lock_key){+.+.}, at: map_mft_record+0x3c/0xc70 [ 39.262145] [ 39.262145] but task is already holding lock: [ 39.268105] 000000008e8ded6c (&vol->lcnbmp_lock){+.+.}, at: ntfs_put_super+0x398/0x16f0 [ 39.276513] [ 39.276513] which lock already depends on the new lock. [ 39.276513] [ 39.284993] [ 39.284993] the existing dependency chain (in reverse order) is: [ 39.292768] [ 39.292768] -> #1 (&vol->lcnbmp_lock){+.+.}: [ 39.298739] __ntfs_cluster_free+0x129/0xbd0 [ 39.304023] ntfs_truncate+0x157c/0x2820 [ 39.308701] ntfs_setattr+0x1b6/0x620 [ 39.313110] notify_change+0x70b/0xfc0 [ 39.317597] do_truncate+0x134/0x1f0 [ 39.321829] path_openat+0x2308/0x2df0 [ 39.326309] do_file_open_root+0x265/0x4f0 [ 39.331058] file_open_root+0x279/0x390 [ 39.335535] do_handle_open+0x368/0x650 [ 39.340016] do_syscall_64+0xf9/0x620 [ 39.344409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.350114] [ 39.350114] -> #0 (&lcnbmp_mrec_lock_key){+.+.}: [ 39.356342] __mutex_lock+0xd7/0x1190 [ 39.360652] map_mft_record+0x3c/0xc70 [ 39.365085] __ntfs_write_inode+0xa4/0xe10 [ 39.369834] ntfs_put_super+0x117b/0x16f0 [ 39.374507] generic_shutdown_super+0x144/0x370 [ 39.379702] kill_block_super+0x97/0xf0 [ 39.384185] deactivate_locked_super+0x94/0x160 [ 39.389356] deactivate_super+0x174/0x1a0 [ 39.394093] cleanup_mnt+0x1a8/0x290 [ 39.398312] task_work_run+0x148/0x1c0 [ 39.402699] do_exit+0xbf3/0x2be0 [ 39.406659] do_group_exit+0x125/0x310 [ 39.411141] __x64_sys_exit_group+0x3a/0x50 [ 39.415981] do_syscall_64+0xf9/0x620 [ 39.420313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.426093] [ 39.426093] other info that might help us debug this: [ 39.426093] [ 39.434214] Possible unsafe locking scenario: [ 39.434214] [ 39.440264] CPU0 CPU1 [ 39.444919] ---- ---- [ 39.449561] lock(&vol->lcnbmp_lock); [ 39.453426] lock(&lcnbmp_mrec_lock_key); [ 39.460175] lock(&vol->lcnbmp_lock); [ 39.466651] lock(&lcnbmp_mrec_lock_key); [ 39.470870] [ 39.470870] *** DEADLOCK *** [ 39.470870] [ 39.476918] 2 locks held by syz-executor339/8134: [ 39.481822] #0: 00000000fcff927b (&type->s_umount_key#47){+.+.}, at: deactivate_super+0x16c/0x1a0 [ 39.491109] #1: 000000008e8ded6c (&vol->lcnbmp_lock){+.+.}, at: ntfs_put_super+0x398/0x16f0 [ 39.499762] [ 39.499762] stack backtrace: [ 39.504245] CPU: 0 PID: 8134 Comm: syz-executor339 Not tainted 4.19.211-syzkaller #0 [ 39.512108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 39.521447] Call Trace: [ 39.524027] dump_stack+0x1fc/0x2ef [ 39.527652] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 39.533448] __lock_acquire+0x30c9/0x3ff0 [ 39.537591] ? lock_downgrade+0x720/0x720 [ 39.541727] ? mark_held_locks+0xf0/0xf0 [ 39.545773] ? is_bpf_text_address+0xfc/0x1b0 [ 39.550254] ? kernel_text_address+0xbd/0xf0 [ 39.554648] ? unwind_get_return_address+0x51/0x90 [ 39.559649] ? __save_stack_trace+0xaf/0x190 [ 39.564044] lock_acquire+0x170/0x3c0 [ 39.567830] ? map_mft_record+0x3c/0xc70 [ 39.571876] ? map_mft_record+0x3c/0xc70 [ 39.575926] __mutex_lock+0xd7/0x1190 [ 39.579708] ? map_mft_record+0x3c/0xc70 [ 39.583837] ? map_mft_record+0x3c/0xc70 [ 39.587880] ? mutex_trylock+0x1a0/0x1a0 [ 39.591924] ? lock_downgrade+0x720/0x720 [ 39.596059] ? mark_held_locks+0xf0/0xf0 [ 39.600111] ? __mutex_unlock_slowpath+0xea/0x610 [ 39.604936] map_mft_record+0x3c/0xc70 [ 39.608811] __ntfs_write_inode+0xa4/0xe10 [ 39.613033] ntfs_put_super+0x117b/0x16f0 [ 39.617165] ? load_and_init_quota+0x3d0/0x3d0 [ 39.621743] generic_shutdown_super+0x144/0x370 [ 39.626395] kill_block_super+0x97/0xf0 [ 39.630444] deactivate_locked_super+0x94/0x160 [ 39.635094] deactivate_super+0x174/0x1a0 [ 39.639228] ? deactivate_locked_super+0x160/0x160 [ 39.644146] ? dput+0x31/0x640 [ 39.647320] cleanup_mnt+0x1a8/0x290 [ 39.651021] task_work_run+0x148/0x1c0 [ 39.654904] do_exit+0xbf3/0x2be0 [ 39.658341] ? lock_downgrade+0x720/0x720 [ 39.662469] ? mm_update_next_owner+0x650/0x650 [ 39.667122] ? up_read+0x17/0x110 [ 39.670574] ? __do_page_fault+0x180/0xd60 [ 39.674889] do_group_exit+0x125/0x310 [ 39.678858] __x64_sys_exit_group+0x3a/0x50 [ 39.683348] do_syscall_64+0xf9/0x620 [ 39.687138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.692309] RIP: 0033:0x7ff633870a49 [ 39.696018] Code: Bad RIP value. [ 39.699362] RSP: 002b:00007ffc6b2983d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 39.707052] RAX: ffffffffffffffda RBX: 00007ff633905330 RCX: 00007ff633870a49 [ 39.714303] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 39.721562] RBP: 0000000000000001 R08: f