./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1393747031 <...> Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. execve("./syz-executor1393747031", ["./syz-executor1393747031"], 0x7ffe816c9cc0 /* 10 vars */) = 0 brk(NULL) = 0x555556e25000 brk(0x555556e25c40) = 0x555556e25c40 arch_prctl(ARCH_SET_FS, 0x555556e25300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1393747031", 4096) = 28 brk(0x555556e46c40) = 0x555556e46c40 brk(0x555556e47000) = 0x555556e47000 mprotect(0x7f6f680dd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f5fc05000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f6f5fc05000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 47.183629][ T4997] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4997 'syz-executor139' [ 47.212567][ T4997] loop0: detected capacity change from 0 to 4096 [ 47.222611][ T4997] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NOEXEC|MS_POSIXACL|MS_RELATIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file0", O_RDWR|O_CREAT|O_TRUNC|O_APPEND|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 47.241051][ T4997] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 47.266529][ T4997] [ 47.269017][ T4997] ============================================ [ 47.275177][ T4997] WARNING: possible recursive locking detected [ 47.281324][ T4997] 6.4.0-rc6-syzkaller-00242-g1639fae5132b #0 Not tainted [ 47.288395][ T4997] -------------------------------------------- [ 47.294528][ T4997] syz-executor139/4997 is trying to acquire lock: [ 47.300936][ T4997] ffff888076741e80 (&ni->ni_lock/4){+.+.}-{3:3}, at: mi_read+0x35b/0x5b0 [ 47.309375][ T4997] [ 47.309375][ T4997] but task is already holding lock: [ 47.316798][ T4997] ffff888076746840 (&ni->ni_lock/4){+.+.}-{3:3}, at: ntfs_lookup+0x1bb/0x2a0 [ 47.325557][ T4997] [ 47.325557][ T4997] other info that might help us debug this: [ 47.333589][ T4997] Possible unsafe locking scenario: [ 47.333589][ T4997] [ 47.341011][ T4997] CPU0 [ 47.344294][ T4997] ---- [ 47.347547][ T4997] lock(&ni->ni_lock/4); [ 47.351853][ T4997] lock(&ni->ni_lock/4); [ 47.356161][ T4997] [ 47.356161][ T4997] *** DEADLOCK *** [ 47.356161][ T4997] [ 47.364281][ T4997] May be due to missing lock nesting notation [ 47.364281][ T4997] [ 47.372574][ T4997] 2 locks held by syz-executor139/4997: [ 47.378111][ T4997] #0: ffff888076746ae0 (&type->i_mutex_dir_key#6){++++}-{3:3}, at: walk_component+0x332/0x5a0 [ 47.388439][ T4997] #1: ffff888076746840 (&ni->ni_lock/4){+.+.}-{3:3}, at: ntfs_lookup+0x1bb/0x2a0 [ 47.397637][ T4997] [ 47.397637][ T4997] stack backtrace: [ 47.403500][ T4997] CPU: 0 PID: 4997 Comm: syz-executor139 Not tainted 6.4.0-rc6-syzkaller-00242-g1639fae5132b #0 [ 47.413903][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 47.423961][ T4997] Call Trace: [ 47.427217][ T4997] [ 47.430126][ T4997] dump_stack_lvl+0xd9/0x150 [ 47.434799][ T4997] __lock_acquire+0x13eb/0x5f30 [ 47.439655][ T4997] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 47.445616][ T4997] ? __lock_acquire+0x28bf/0x5f30 [ 47.450642][ T4997] lock_acquire+0x1b1/0x520 [ 47.455123][ T4997] ? mi_read+0x35b/0x5b0 [ 47.459345][ T4997] ? lock_sync+0x190/0x190 [ 47.463741][ T4997] __mutex_lock+0x12f/0x1350 [ 47.468336][ T4997] ? mi_read+0x35b/0x5b0 [ 47.472559][ T4997] ? mi_read+0x35b/0x5b0 [ 47.476780][ T4997] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 47.482305][ T4997] ? __up_read+0x1fe/0x750 [ 47.486705][ T4997] ? down_read+0x13e/0x480 [ 47.491103][ T4997] ? up_write+0x520/0x520 [ 47.495415][ T4997] mi_read+0x35b/0x5b0 [ 47.499465][ T4997] ntfs_iget5+0x47d/0x3670 [ 47.503887][ T4997] ? indx_find+0x37c/0x980 [ 47.508313][ T4997] ? ntfs_write_end+0x980/0x980 [ 47.513141][ T4997] ? indx_free_children.isra.0+0x6c0/0x6c0 [ 47.518933][ T4997] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 47.524566][ T4997] ? dir_search_u+0x1f6/0x3f0 [ 47.529240][ T4997] ? ntfs_lookup+0x50/0x2a0 [ 47.533727][ T4997] dir_search_u+0x36e/0x3f0 [ 47.538215][ T4997] ? ntfs_nls_to_utf16+0x810/0x810 [ 47.543308][ T4997] ? rcu_is_watching+0x12/0xb0 [ 47.548056][ T4997] ? kmem_cache_alloc+0x337/0x3b0 [ 47.553063][ T4997] ntfs_lookup+0x1c8/0x2a0 [ 47.557461][ T4997] __lookup_slow+0x24c/0x460 [ 47.562036][ T4997] ? lookup_one_qstr_excl+0x180/0x180 [ 47.567390][ T4997] ? lookup_fast+0x14e/0x520 [ 47.571959][ T4997] walk_component+0x33f/0x5a0 [ 47.576615][ T4997] path_lookupat+0x1ba/0x840 [ 47.581201][ T4997] filename_lookup+0x1d2/0x590 [ 47.586028][ T4997] ? may_linkat+0x3b0/0x3b0 [ 47.590526][ T4997] ? __might_fault+0xe2/0x190 [ 47.595187][ T4997] ? __phys_addr_symbol+0x30/0x70 [ 47.600191][ T4997] ? __check_object_size+0x323/0x730 [ 47.605456][ T4997] ? strncpy_from_user+0x1f8/0x350 [ 47.610553][ T4997] ? getname_flags.part.0+0x1dd/0x4f0 [ 47.615901][ T4997] user_path_at_empty+0x46/0x60 [ 47.620736][ T4997] path_setxattr+0x92/0x1c0 [ 47.625224][ T4997] ? setxattr+0x160/0x160 [ 47.629551][ T4997] ? _raw_spin_unlock_irq+0x23/0x50 [ 47.634731][ T4997] ? lockdep_hardirqs_on+0x7d/0x100 [ 47.639909][ T4997] __x64_sys_setxattr+0xc4/0x160 [ 47.644831][ T4997] do_syscall_64+0x39/0xb0 [ 47.649224][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 47.655095][ T4997] RIP: 0033:0x7f6f680517a9 [ 47.659488][ T4997] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 47.679072][ T4997] RSP: 002b:00007ffc9ecb81b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc setxattr("./file2", NULL, NULL, 0, 0) = -1 ENOENT (No such file or directory) exit_group(0) = ? +++ exited with 0 +++ [ 47.687486][ T4997] RAX: ffffffffffffffda RBX: 0030656c69662f2e R