Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. executing program syzkaller login: [ 49.656505][ T3499] loop0: detected capacity change from 0 to 4096 [ 49.745297][ T3499] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 49.767060][ T3499] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 49.776826][ T3499] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 49.792526][ T3499] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 49.802301][ T3499] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 49.822415][ T3499] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 49.831442][ T3499] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 49.851948][ T3499] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 49.860956][ T3499] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 49.880986][ T3499] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 49.891357][ T3499] ntfs: volume version 3.1. [ 50.217667][ T3499] syz-executor122 (3499): drop_caches: 1 [ 50.301998][ T3499] syz-executor122 (3499): drop_caches: 1 [ 50.318389][ T9] [ 50.320750][ T9] ====================================================== [ 50.327755][ T9] WARNING: possible circular locking dependency detected [ 50.334757][ T9] 5.15.157-syzkaller #0 Not tainted [ 50.339948][ T9] ------------------------------------------------------ [ 50.347035][ T9] kworker/u4:0/9 is trying to acquire lock: [ 50.353085][ T9] ffff888074810940 (&rl->lock){++++}-{3:3}, at: ntfs_readpage+0x123e/0x2210 [ 50.361809][ T9] [ 50.361809][ T9] but task is already holding lock: [ 50.369159][ T9] ffff888070091210 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4a/0x850 [ 50.378114][ T9] [ 50.378114][ T9] which lock already depends on the new lock. [ 50.378114][ T9] [ 50.388510][ T9] [ 50.388510][ T9] the existing dependency chain (in reverse order) is: [ 50.397520][ T9] [ 50.397520][ T9] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 50.405074][ T9] lock_acquire+0x1db/0x4f0 [ 50.410094][ T9] __mutex_lock_common+0x1da/0x25a0 [ 50.415896][ T9] mutex_lock_nested+0x17/0x20 [ 50.421196][ T9] map_mft_record+0x4a/0x850 [ 50.426299][ T9] ntfs_attr_extend_allocation+0x535/0x4340 [ 50.432727][ T9] ntfs_file_write_iter+0x4c9/0x1fa0 [ 50.438525][ T9] vfs_write+0xacf/0xe50 [ 50.443282][ T9] ksys_write+0x1a2/0x2c0 [ 50.448124][ T9] do_syscall_64+0x3b/0xb0 [ 50.453052][ T9] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.459480][ T9] [ 50.459480][ T9] -> #0 (&rl->lock){++++}-{3:3}: [ 50.466590][ T9] validate_chain+0x1649/0x5930 [ 50.471952][ T9] __lock_acquire+0x1295/0x1ff0 [ 50.477315][ T9] lock_acquire+0x1db/0x4f0 [ 50.482433][ T9] down_read+0x45/0x2e0 [ 50.487098][ T9] ntfs_readpage+0x123e/0x2210 [ 50.492372][ T9] do_read_cache_page+0x752/0x1040 [ 50.498012][ T9] ntfs_map_page+0x25/0x390 [ 50.503024][ T9] ntfs_sync_mft_mirror+0x253/0x19e0 [ 50.508818][ T9] write_mft_record_nolock+0x1164/0x16c0 [ 50.514958][ T9] __ntfs_write_inode+0x7b4/0xdd0 [ 50.520487][ T9] __writeback_single_inode+0x644/0xe30 [ 50.526562][ T9] writeback_sb_inodes+0xbce/0x1a40 [ 50.532288][ T9] wb_writeback+0x451/0xc50 [ 50.537301][ T9] wb_workfn+0x46c/0x1130 [ 50.542141][ T9] process_one_work+0x8a1/0x10c0 [ 50.547591][ T9] worker_thread+0xaca/0x1280 [ 50.552778][ T9] kthread+0x3f6/0x4f0 [ 50.557365][ T9] ret_from_fork+0x1f/0x30 [ 50.562289][ T9] [ 50.562289][ T9] other info that might help us debug this: [ 50.562289][ T9] [ 50.572499][ T9] Possible unsafe locking scenario: [ 50.572499][ T9] [ 50.580020][ T9] CPU0 CPU1 [ 50.585375][ T9] ---- ---- [ 50.590723][ T9] lock(&ni->mrec_lock); [ 50.595075][ T9] lock(&rl->lock); [ 50.601479][ T9] lock(&ni->mrec_lock); [ 50.608324][ T9] lock(&rl->lock); [ 50.612230][ T9] [ 50.612230][ T9] *** DEADLOCK *** [ 50.612230][ T9] [ 50.620446][ T9] 3 locks held by kworker/u4:0/9: [ 50.625462][ T9] #0: ffff888014d9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 50.636170][ T9] #1: ffffc90000ce7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 50.648000][ T9] #2: ffff888070091210 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4a/0x850 [ 50.657405][ T9] [ 50.657405][ T9] stack backtrace: [ 50.663631][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.157-syzkaller #0 [ 50.671955][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 50.682013][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 50.688006][ T9] Call Trace: [ 50.691276][ T9] [ 50.694215][ T9] dump_stack_lvl+0x1e3/0x2d0 [ 50.698899][ T9] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 50.704548][ T9] ? print_circular_bug+0x12b/0x1a0 [ 50.709741][ T9] check_noncircular+0x2f8/0x3b0 [ 50.714675][ T9] ? add_chain_block+0x850/0x850 [ 50.719689][ T9] ? lockdep_lock+0x11f/0x2a0 [ 50.724356][ T9] ? validate_chain+0x13bd/0x5930 [ 50.729502][ T9] validate_chain+0x1649/0x5930 [ 50.734397][ T9] ? reacquire_held_locks+0x660/0x660 [ 50.739764][ T9] ? reacquire_held_locks+0x660/0x660 [ 50.745126][ T9] ? reacquire_held_locks+0x660/0x660 [ 50.750491][ T9] ? __kasan_slab_alloc+0xa5/0xc0 [ 50.755514][ T9] ? look_up_lock_class+0x77/0x120 [ 50.760633][ T9] ? register_lock_class+0x100/0x9a0 [ 50.765935][ T9] ? writeback_sb_inodes+0xbce/0x1a40 [ 50.771309][ T9] ? mark_lock+0x98/0x340 [ 50.775626][ T9] ? is_dynamic_key+0x1f0/0x1f0 [ 50.780557][ T9] ? mark_lock+0x98/0x340 [ 50.784887][ T9] __lock_acquire+0x1295/0x1ff0 [ 50.789733][ T9] lock_acquire+0x1db/0x4f0 [ 50.794224][ T9] ? ntfs_readpage+0x123e/0x2210 [ 50.799174][ T9] ? read_lock_is_recursive+0x10/0x10 [ 50.804533][ T9] ? __might_sleep+0xc0/0xc0 [ 50.809118][ T9] ? _raw_read_unlock_irqrestore+0x8b/0x130 [ 50.815017][ T9] ? lockdep_hardirqs_on+0x94/0x130 [ 50.820933][ T9] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 50.826836][ T9] ? _raw_read_unlock+0x40/0x40 [ 50.831693][ T9] down_read+0x45/0x2e0 [ 50.835945][ T9] ? ntfs_readpage+0x123e/0x2210 [ 50.840885][ T9] ntfs_readpage+0x123e/0x2210 [ 50.845653][ T9] ? ntfs_writepage+0x12c0/0x12c0 [ 50.850678][ T9] ? submit_bio_noacct+0xa83/0xb30 [ 50.855782][ T9] ? ntfs_writepage+0x12c0/0x12c0 [ 50.860798][ T9] do_read_cache_page+0x752/0x1040 [ 50.865901][ T9] ntfs_map_page+0x25/0x390 [ 50.870394][ T9] ? ntfs_sync_mft_mirror+0x241/0x19e0 [ 50.875839][ T9] ntfs_sync_mft_mirror+0x253/0x19e0 [ 50.881116][ T9] ? __bio_add_page+0x30f/0x510 [ 50.885962][ T9] ? bio_add_page+0x2b3/0x450 [ 50.890630][ T9] ? submit_bio+0x2dd/0x560 [ 50.895125][ T9] ? __mark_mft_record_dirty+0x170/0x170 [ 50.900757][ T9] write_mft_record_nolock+0x1164/0x16c0 [ 50.906411][ T9] ? ntfs_unmap_page+0x1e0/0x1e0 [ 50.911339][ T9] ? slab_free_freelist_hook+0xdd/0x160 [ 50.916880][ T9] ? kmem_cache_free+0x146/0x1f0 [ 50.921810][ T9] __ntfs_write_inode+0x7b4/0xdd0 [ 50.926831][ T9] __writeback_single_inode+0x644/0xe30 [ 50.932379][ T9] writeback_sb_inodes+0xbce/0x1a40 [ 50.937591][ T9] ? queue_io+0x560/0x560 [ 50.941969][ T9] ? __writeback_inodes_wb+0x400/0x400 [ 50.947455][ T9] ? queue_io+0x3d3/0x560 [ 50.951890][ T9] wb_writeback+0x451/0xc50 [ 50.956408][ T9] ? rcu_lock_release+0x20/0x20 [ 50.961252][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 50.967230][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 50.972424][ T9] wb_workfn+0x46c/0x1130 [ 50.976759][ T9] ? mark_lock+0x98/0x340 [ 50.981090][ T9] ? inode_wait_for_writeback+0x280/0x280 [ 50.986833][ T9] ? read_lock_is_recursive+0x10/0x10 [ 50.992281][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 50.998254][ T9] ? print_irqtrace_events+0x210/0x210 [ 51.003709][ T9] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.009601][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 51.014816][ T9] process_one_work+0x8a1/0x10c0 [ 51.019752][ T9] ? worker_detach_from_pool+0x260/0x260 [ 51.025376][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 51.030918][ T9] ? kthread_data+0x4e/0xc0 [ 51.035429][ T9] ? wq_worker_running+0x97/0x170 [ 51.040443][ T9] worker_thread+0xaca/0x1280 [ 51.045122][ T9] kthread+0x3f6/0x4f0 [ 51.049232][ T9] ? rcu_lock_release+0x20/0x20 [ 51.054089][ T9] ? kthread_blkcg+0xd0/0xd0 [ 51.058672][ T9] ret_from_fork+0x1f/0x30 [ 51.063155][ T9]