Warning: Permanently added '[localhost]:49813' (ED25519) to the list of known hosts. executing program [ 69.125427][ T5317] mmap: syz-executor116 (5317) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 77.855581][ T5421] [ 77.856609][ T5421] ====================================================== [ 77.859297][ T5421] WARNING: possible circular locking dependency detected [ 77.861987][ T5421] 6.12.0-rc5-syzkaller #0 Not tainted [ 77.864916][ T5421] ------------------------------------------------------ [ 77.867202][ T5421] syz-executor116/5421 is trying to acquire lock: [ 77.869277][ T5421] ffff888042eb6098 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 77.872759][ T5421] [ 77.872759][ T5421] but task is already holding lock: [ 77.875221][ T5421] ffff888040bdde38 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 77.878657][ T5421] [ 77.878657][ T5421] which lock already depends on the new lock. [ 77.878657][ T5421] [ 77.881967][ T5421] [ 77.881967][ T5421] the existing dependency chain (in reverse order) is: [ 77.885039][ T5421] [ 77.885039][ T5421] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 77.887807][ T5421] lock_acquire+0x1ed/0x550 [ 77.889403][ T5421] down_write+0x99/0x220 [ 77.890950][ T5421] process_measurement+0x439/0x1fb0 [ 77.892893][ T5421] ima_file_mmap+0x13d/0x2b0 [ 77.894577][ T5421] security_mmap_file+0x7e7/0xa40 [ 77.896325][ T5421] __se_sys_remap_file_pages+0x6e6/0xa50 [ 77.898370][ T5421] do_syscall_64+0xf3/0x230 [ 77.899975][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.902087][ T5421] [ 77.902087][ T5421] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 77.904414][ T5421] validate_chain+0x18ef/0x5920 [ 77.906385][ T5421] __lock_acquire+0x1384/0x2050 [ 77.908118][ T5421] lock_acquire+0x1ed/0x550 [ 77.909780][ T5421] down_read_killable+0xca/0xd30 [ 77.911634][ T5421] mmap_read_lock_killable+0x1d/0x70 [ 77.913637][ T5421] lock_mm_and_find_vma+0x29c/0x2f0 [ 77.915628][ T5421] exc_page_fault+0x1bf/0x8c0 [ 77.917473][ T5421] asm_exc_page_fault+0x26/0x30 [ 77.919343][ T5421] fault_in_readable+0x111/0x2d0 [ 77.921183][ T5421] fault_in_iov_iter_readable+0x229/0x280 [ 77.923191][ T5421] generic_perform_write+0x259/0x6d0 [ 77.924899][ T5421] shmem_file_write_iter+0xf9/0x120 [ 77.926759][ T5421] vfs_write+0xaeb/0xd30 [ 77.928245][ T5421] ksys_write+0x183/0x2b0 [ 77.929911][ T5421] do_syscall_64+0xf3/0x230 [ 77.931631][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.933679][ T5421] [ 77.933679][ T5421] other info that might help us debug this: [ 77.933679][ T5421] [ 77.937056][ T5421] Possible unsafe locking scenario: [ 77.937056][ T5421] [ 77.939497][ T5421] CPU0 CPU1 [ 77.941232][ T5421] ---- ---- [ 77.942885][ T5421] lock(&sb->s_type->i_mutex_key#12); [ 77.944502][ T5421] lock(&mm->mmap_lock); [ 77.946710][ T5421] lock(&sb->s_type->i_mutex_key#12); [ 77.949245][ T5421] rlock(&mm->mmap_lock); [ 77.950771][ T5421] [ 77.950771][ T5421] *** DEADLOCK *** [ 77.950771][ T5421] [ 77.953579][ T5421] 3 locks held by syz-executor116/5421: [ 77.955495][ T5421] #0: ffff88803fc49ef8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 77.958718][ T5421] #1: ffff888042f08420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 77.961712][ T5421] #2: ffff888040bdde38 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 77.965368][ T5421] [ 77.965368][ T5421] stack backtrace: [ 77.967307][ T5421] CPU: 0 UID: 0 PID: 5421 Comm: syz-executor116 Not tainted 6.12.0-rc5-syzkaller #0 [ 77.970826][ T5421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.974652][ T5421] Call Trace: [ 77.975811][ T5421] [ 77.976760][ T5421] dump_stack_lvl+0x241/0x360 [ 77.978463][ T5421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.980218][ T5421] ? __pfx__printk+0x10/0x10 [ 77.981788][ T5421] print_circular_bug+0x13a/0x1b0 [ 77.983437][ T5421] check_noncircular+0x36a/0x4a0 [ 77.985212][ T5421] ? __pfx_check_noncircular+0x10/0x10 [ 77.987177][ T5421] ? lockdep_lock+0x123/0x2b0 [ 77.988955][ T5421] ? __pfx_validate_chain+0x10/0x10 [ 77.990642][ T5421] validate_chain+0x18ef/0x5920 [ 77.992372][ T5421] ? __pfx_validate_chain+0x10/0x10 [ 77.994374][ T5421] ? mark_lock+0x9a/0x360 [ 77.996185][ T5421] ? post_alloc_hook+0x206/0x230 [ 77.998286][ T5421] ? __pfx_validate_chain+0x10/0x10 [ 78.000634][ T5421] ? __lock_acquire+0x1384/0x2050 [ 78.002832][ T5421] ? mark_lock+0x9a/0x360 [ 78.004612][ T5421] ? __lock_acquire+0x1384/0x2050 [ 78.006669][ T5421] ? mark_lock+0x9a/0x360 [ 78.008058][ T5421] __lock_acquire+0x1384/0x2050 [ 78.010326][ T5421] lock_acquire+0x1ed/0x550 [ 78.012248][ T5421] ? mmap_read_lock_killable+0x1d/0x70 [ 78.014499][ T5421] ? __pfx_lock_acquire+0x10/0x10 [ 78.016565][ T5421] ? __pfx_fixup_exception+0x10/0x10 [ 78.018764][ T5421] ? __pfx___might_resched+0x10/0x10 [ 78.020801][ T5421] ? __folio_batch_add_and_move+0x845/0xf00 [ 78.022941][ T5421] ? __pfx_lru_add+0x10/0x10 [ 78.024688][ T5421] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 78.026918][ T5421] down_read_killable+0xca/0xd30 [ 78.028835][ T5421] ? mmap_read_lock_killable+0x1d/0x70 [ 78.030856][ T5421] ? mark_lock+0x9a/0x360 [ 78.032435][ T5421] ? cmp_ex_search+0x74/0xa0 [ 78.034175][ T5421] ? mmap_read_lock_killable+0x1d/0x70 [ 78.036113][ T5421] ? bsearch+0x98/0xc0 [ 78.037658][ T5421] ? __pfx_down_read_killable+0x10/0x10 [ 78.039712][ T5421] ? search_extable+0xb3/0x100 [ 78.041434][ T5421] ? __pfx_search_extable+0x10/0x10 [ 78.043317][ T5421] ? fault_in_readable+0x111/0x2d0 [ 78.045213][ T5421] ? __pfx_down_read_trylock+0x10/0x10 [ 78.047311][ T5421] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.049611][ T5421] ? irqentry_exit+0x63/0x90 [ 78.051326][ T5421] mmap_read_lock_killable+0x1d/0x70 [ 78.053250][ T5421] lock_mm_and_find_vma+0x29c/0x2f0 [ 78.055164][ T5421] exc_page_fault+0x1bf/0x8c0 [ 78.056963][ T5421] asm_exc_page_fault+0x26/0x30 [ 78.058842][ T5421] RIP: 0010:fault_in_readable+0x111/0x2d0 [ 78.060813][ T5421] Code: 8b 6c 24 18 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 04 c5 b3 ff 4c 89 e8 48 25 ff 0f 00 00 74 34 49 bf 00 00 00 00 00 fc ff df <41> 8a 5d 00 e8 06 c0 b3 ff 43 0f b6 04 3e 84 c0 0f 85 61 01 00 00 [ 78.067754][ T5421] RSP: 0018:ffffc9000d0e7a40 EFLAGS: 00050202 [ 78.069864][ T5421] RAX: 0000000000000040 RBX: 0000000020700040 RCX: ffff888035624880 [ 78.072882][ T5421] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 78.075739][ T5421] RBP: ffffc9000d0e7af8 R08: ffffffff81e1186c R09: ffffffff84ba85c9 [ 78.078638][ T5421] R10: 0000000000000002 R11: ffff888035624880 R12: 0000000000085000 [ 78.081633][ T5421] R13: 000000002067b040 R14: 1ffff92001a1cf50 R15: dffffc0000000000 [ 78.084576][ T5421] ? fault_in_iov_iter_readable+0x49/0x280 [ 78.086798][ T5421] ? fault_in_readable+0xfc/0x2d0 [ 78.088734][ T5421] ? __pfx_fault_in_readable+0x10/0x10 [ 78.090833][ T5421] ? folio_unlock+0x126/0x2f0 [ 78.092574][ T5421] ? inode_to_bdi+0x69/0xf0 [ 78.094366][ T5421] fault_in_iov_iter_readable+0x229/0x280 [ 78.096509][ T5421] generic_perform_write+0x259/0x6d0 [ 78.098436][ T5421] ? __pfx_generic_perform_write+0x10/0x10 [ 78.100531][ T5421] ? __pfx_generic_write_checks+0x10/0x10 [ 78.102825][ T5421] ? rcu_read_lock_any_held+0xb7/0x160 [ 78.105152][ T5421] ? file_update_time+0x2a0/0x430 [ 78.107226][ T5421] shmem_file_write_iter+0xf9/0x120 [ 78.109204][ T5421] vfs_write+0xaeb/0xd30 [ 78.110713][ T5421] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 78.112878][ T5421] ? __pfx_vfs_write+0x10/0x10 [ 78.114692][ T5421] ? fdget_pos+0x24e/0x320 [ 78.116355][ T5421] ksys_write+0x183/0x2b0 [ 78.117969][ T5421] ? __pfx_ksys_write+0x10/0x10 [ 78.119615][ T5421] ? do_syscall_64+0x100/0x230 [ 78.121255][ T5421] ? do_syscall_64+0xb6/0x230 [ 78.122843][ T5421] do_syscall_64+0xf3/0x230 [ 78.124425][ T5421] ? clear_bhb_loop+0x35/0x90 [ 78.126015][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.127960][ T5421] RIP: 0033:0x7f900eb7a039 [ 78.129630][ T5421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 78.136657][ T5421] RSP: 002b:00007f900eb34168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.139686][ T5421] RAX: ffffffffffffffda RBX: 00007f900ec04308 RCX: 00007f900eb7a039 [ 78.142585][ T5421] RDX: 00000000018a3c85 RSI: 0000000020000040 RDI: 0000000000000003 [ 78.145621][ T5421] RBP: 00007f900ec04300 R08: 00007f900eb346c0 R09: 0000000000000000 [ 78.148701][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f900ec0430c [ 78.151713][ T5421] R13: 0000000000000010 R14: 00007ffe4de767b0 R15: 00007ffe4de76898 [ 78.154600][ T5421] executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 86.514225][ T9] cfg80211: failed to load regulatory.db executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 15:04:50 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff34e2d60 RBX=ffffffff9a716e80 RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d0e6978 R8 =ffffffff854aab66 R9 =1ffff11003dc3046 R10=dffffc0000000000 R11=ffffffff854aab20 R12=dffffc0000000000 R13=ffffffff9a411f00 R14=00000000000003fd R15=dffffc0000000000 RIP=ffffffff854aab96 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f900eb346c0 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002067b040 CR3=0000000040bc6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffe000c0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4de76980 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e0078616d2d74 6e756f6d2f73662f 7379732f636f7270 2f00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b005d44480851 4b504a480a56430a 565c560a464a5755 0a00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000