./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3035316651 <...> forked to background, child pid 4646 [ 30.299103][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.313025][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 30.760450][ T4737] sshd (4737) used greatest stack depth: 15824 bytes left OK syzkaller Warning: Permanently added '10.128.0.180' (ECDSA) to the list of known hosts. execve("./syz-executor3035316651", ["./syz-executor3035316651"], 0x7ffd84714350 /* 10 vars */) = 0 brk(NULL) = 0x555555ada000 brk(0x555555adac40) = 0x555555adac40 arch_prctl(ARCH_SET_FS, 0x555555ada300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3035316651", 4096) = 28 brk(0x555555afbc40) = 0x555555afbc40 brk(0x555555afc000) = 0x555555afc000 mprotect(0x7f2e5907e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x555555ada5d0) = 5068 [pid 5068] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setsid() = 1 [pid 5068] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5068] unshare(CLONE_NEWNS) = 0 [pid 5068] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5068] unshare(CLONE_NEWIPC) = 0 [pid 5068] unshare(CLONE_NEWCGROUP) = 0 [pid 5068] unshare(CLONE_NEWUTS) = 0 [pid 5068] unshare(CLONE_SYSVSEM) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "16777216", 8) = 8 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "536870912", 9) = 9 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "8192", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5068] close(3) = 0 [pid 5068] getpid() = 1 [pid 5068] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<ni_lock){+.+.}-{3:3}, at: ntfs_set_state+0x1da/0x680 [ 49.848170][ T3799] [ 49.848170][ T3799] but task is already holding lock: [ 49.855507][ T3799] ffff888076a46fa0 (&ni->ni_lock){+.+.}-{3:3}, at: ni_write_inode+0x14d/0x11e0 [ 49.864438][ T3799] [ 49.864438][ T3799] other info that might help us debug this: [ 49.872477][ T3799] Possible unsafe locking scenario: [ 49.872477][ T3799] [ 49.879906][ T3799] CPU0 [ 49.883170][ T3799] ---- [ 49.886435][ T3799] lock(&ni->ni_lock); [ 49.890580][ T3799] lock(&ni->ni_lock); [ 49.894722][ T3799] [ 49.894722][ T3799] *** DEADLOCK *** [ 49.894722][ T3799] [ 49.902846][ T3799] May be due to missing lock nesting notation [ 49.902846][ T3799] [ 49.911145][ T3799] 3 locks held by kworker/u4:6/3799: [ 49.916411][ T3799] #0: ffff88814514c138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 [ 49.926929][ T3799] #1: ffffc9000ecc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 [ 49.938655][ T3799] #2: ffff888076a46fa0 (&ni->ni_lock){+.+.}-{3:3}, at: ni_write_inode+0x14d/0x11e0 [ 49.948035][ T3799] [ 49.948035][ T3799] stack backtrace: [ 49.953904][ T3799] CPU: 0 PID: 3799 Comm: kworker/u4:6 Not tainted 6.1.0-syzkaller-13781-gaeba12b26c79 #0 [ 49.963688][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 49.973731][ T3799] Workqueue: writeback wb_workfn (flush-7:0) [ 49.979707][ T3799] Call Trace: [ 49.982974][ T3799] [ 49.985894][ T3799] dump_stack_lvl+0x1b1/0x290 [ 49.990574][ T3799] ? nf_tcp_handle_invalid+0x630/0x630 [ 49.996021][ T3799] ? panic+0x710/0x710 [ 50.000079][ T3799] ? lockdep_unlock+0x144/0x2e0 [ 50.004919][ T3799] ? print_tainted+0x141/0x160 [ 50.009675][ T3799] ? lockdep_print_held_locks+0x10f/0x1b0 [ 50.015382][ T3799] validate_chain+0x4843/0x6ae0 [ 50.020230][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.025595][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.030955][ T3799] ? lockdep_unlock+0x144/0x2e0 [ 50.035794][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.041154][ T3799] ? add_lock_to_list+0x1c7/0x2d0 [ 50.046167][ T3799] ? validate_chain+0x177/0x6ae0 [ 50.051093][ T3799] ? validate_chain+0x1478/0x6ae0 [ 50.056111][ T3799] ? noop_count+0x30/0x30 [ 50.060430][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.065792][ T3799] ? deref_stack_reg+0x17a/0x210 [ 50.070718][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.076080][ T3799] ? unwind_next_frame+0x1b06/0x24c0 [ 50.081352][ T3799] ? deref_stack_reg+0x17a/0x210 [ 50.086298][ T3799] ? unwind_next_frame+0x10d7/0x24c0 [ 50.091578][ T3799] ? ret_from_fork+0x1f/0x30 [ 50.096159][ T3799] ? stack_trace_save+0x1e0/0x1e0 [ 50.101176][ T3799] ? arch_stack_walk+0xb2/0xe0 [ 50.105929][ T3799] ? stack_trace_save+0x104/0x1e0 [ 50.110944][ T3799] ? stack_trace_snprint+0xf0/0xf0 [ 50.116050][ T3799] ? check_noncircular+0x1aa/0x390 [ 50.121154][ T3799] ? validate_chain+0x177/0x6ae0 [ 50.126083][ T3799] ? lockdep_lock+0x290/0x290 [ 50.130748][ T3799] ? add_lock_to_list+0x1c7/0x2d0 [ 50.135765][ T3799] ? validate_chain+0x1478/0x6ae0 [ 50.140794][ T3799] ? validate_chain+0x177/0x6ae0 [ 50.145726][ T3799] ? lockdep_lock+0x189/0x290 [ 50.150390][ T3799] ? lockdep_unlock+0x144/0x2e0 [ 50.155226][ T3799] ? validate_chain+0x177/0x6ae0 [ 50.160154][ T3799] ? _find_first_zero_bit+0xe8/0x110 [ 50.165430][ T3799] ? reacquire_held_locks+0x650/0x650 [ 50.170793][ T3799] ? validate_chain+0x1478/0x6ae0 [ 50.175815][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.181439][ T3799] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.187412][ T3799] ? try_to_wake_up+0x4e9/0xab0 [ 50.192249][ T3799] ? trace_lock_release+0x95/0x220 [ 50.197362][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.202983][ T3799] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.208954][ T3799] ? rcu_preempt_deferred_qs_irqrestore+0x228/0xc10 [ 50.215530][ T3799] ? trace_lock_release+0x95/0x220 [ 50.220636][ T3799] ? _raw_spin_unlock+0x40/0x40 [ 50.225475][ T3799] ? rcu_preempt_deferred_qs_irqrestore+0x228/0xc10 [ 50.232052][ T3799] ? __lock_acquire+0x1f60/0x1f60 [ 50.237071][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.242700][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.248322][ T3799] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.254293][ T3799] ? finish_lock_switch+0x89/0x100 [ 50.259395][ T3799] ? trace_lock_release+0x95/0x220 [ 50.264498][ T3799] ? mark_lock+0x9a/0x350 [ 50.268815][ T3799] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 50.274782][ T3799] ? print_irqtrace_events+0x220/0x220 [ 50.280230][ T3799] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.285422][ T3799] ? finish_lock_switch+0x8e/0x100 [ 50.290527][ T3799] ? lockdep_hardirqs_on+0x8d/0x130 [ 50.295715][ T3799] ? finish_lock_switch+0x8e/0x100 [ 50.300818][ T3799] ? register_lock_class+0xc2/0x930 [ 50.306005][ T3799] ? __switch_to_asm+0x34/0x60 [ 50.310763][ T3799] ? is_dynamic_key+0x1f0/0x1f0 [ 50.315603][ T3799] ? __schedule+0x99d/0xe20 [ 50.320098][ T3799] ? mark_lock+0x9a/0x350 [ 50.324419][ T3799] __lock_acquire+0x1292/0x1f60 [ 50.329269][ T3799] lock_acquire+0x182/0x3c0 [ 50.333759][ T3799] ? ntfs_set_state+0x1da/0x680 [ 50.338605][ T3799] ? read_lock_is_recursive+0x10/0x10 [ 50.343965][ T3799] ? ktime_get_coarse_real_ts64+0x45/0x140 [ 50.349761][ T3799] ? __might_sleep+0xc0/0xc0 [ 50.354344][ T3799] ? mark_lock+0x9a/0x350 [ 50.358662][ T3799] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 50.364630][ T3799] __mutex_lock_common+0x1bd/0x26e0 [ 50.369813][ T3799] ? ntfs_set_state+0x1da/0x680 [ 50.374655][ T3799] ? ktime_get_coarse_real_ts64+0x45/0x140 [ 50.380451][ T3799] ? seqcount_lockdep_reader_access+0x13a/0x1f0 [ 50.386682][ T3799] ? lockdep_hardirqs_on+0x8d/0x130 [ 50.391870][ T3799] ? seqcount_lockdep_reader_access+0x1a2/0x1f0 [ 50.398098][ T3799] ? ntfs_set_state+0x1da/0x680 [ 50.402940][ T3799] ? ktime_get_real_ts64+0x4b0/0x4b0 [ 50.408212][ T3799] ? make_bad_inode+0x5b/0x1a0 [ 50.412964][ T3799] ? mutex_lock_io_nested+0x60/0x60 [ 50.418168][ T3799] ? ktime_get_coarse_real_ts64+0x12c/0x140 [ 50.424063][ T3799] mutex_lock_nested+0x17/0x20 [ 50.428822][ T3799] ntfs_set_state+0x1da/0x680 [ 50.433492][ T3799] ? atime_needs_update+0x780/0x780 [ 50.438690][ T3799] ? make_bad_inode+0xf8/0x1a0 [ 50.443449][ T3799] ? ntfs_mark_rec_free+0x2b0/0x2b0 [ 50.448642][ T3799] ? make_bad_inode+0xf8/0x1a0 [ 50.453398][ T3799] ntfs_iget5+0x34c/0x36f0 [ 50.457810][ T3799] ? register_lock_class+0xc2/0x930 [ 50.463008][ T3799] ? mpage_writepages+0x1c0/0x1c0 [ 50.468036][ T3799] ? is_dynamic_key+0x1f0/0x1f0 [ 50.472880][ T3799] ? mi_enum_attr+0x4c8/0x6a0 [ 50.477563][ T3799] ? mi_find_attr+0x29d/0x2b0 [ 50.482235][ T3799] ? ni_find_attr+0x38d/0x8c0 [ 50.486904][ T3799] ? check_index_root+0x680/0x680 [ 50.491921][ T3799] ? ni_load_mi+0x110/0x110 [ 50.496417][ T3799] ni_update_parent+0x7ea/0xc60 [ 50.501262][ T3799] ? ni_write_inode+0x11e0/0x11e0 [ 50.506276][ T3799] ? mi_find_attr+0x29d/0x2b0 [ 50.510948][ T3799] ni_write_inode+0xe30/0x11e0 [ 50.515702][ T3799] ? ni_is_dirty+0x190/0x190 [ 50.520282][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.525907][ T3799] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.531099][ T3799] __writeback_single_inode+0x4d6/0x670 [ 50.536638][ T3799] writeback_sb_inodes+0x812/0x1050 [ 50.541826][ T3799] ? __lock_acquire+0x1f60/0x1f60 [ 50.546851][ T3799] ? queue_io+0x400/0x400 [ 50.551177][ T3799] ? queue_io+0x382/0x400 [ 50.555497][ T3799] ? trace_writeback_queue_io+0xe8/0x2d0 [ 50.561119][ T3799] wb_writeback+0x41f/0x7b0 [ 50.565617][ T3799] ? trace_writeback_exec+0x2c0/0x2c0 [ 50.570979][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.576613][ T3799] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.581805][ T3799] wb_workfn+0x3cb/0xef0 [ 50.586042][ T3799] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 50.591754][ T3799] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.597376][ T3799] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.603353][ T3799] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 50.609250][ T3799] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.614456][ T3799] process_one_work+0x877/0xdb0 [ 50.619333][ T3799] ? worker_detach_from_pool+0x260/0x260 [ 50.624966][ T3799] ? _raw_spin_lock_irq+0xba/0xf0 [ 50.629987][ T3799] ? _raw_spin_lock_irqsave+0x100/0x100 [ 50.635533][ T3799] worker_thread+0xb14/0x1330 [ 50.640213][ T3799] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 50.646103][ T3799] kthread+0x266/0x300 [pid 5068] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=1, si_utime=0, si_stime=9 /* 0.09 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 50.650162][ T3799] ? rcu_lock_release+0x2