./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor918630475 <...> Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. execve("./syz-executor918630475", ["./syz-executor918630475"], 0x7ffebdfb0400 /* 10 vars */) = 0 brk(NULL) = 0x555556dde000 brk(0x555556ddec40) = 0x555556ddec40 arch_prctl(ARCH_SET_FS, 0x555556dde300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor918630475", 4096) = 27 brk(0x555556dffc40) = 0x555556dffc40 brk(0x555556e00000) = 0x555556e00000 mprotect(0x7fa2f784e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3631 attached , child_tidptr=0x555556dde5d0) = 3631 [pid 3631] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3631] setsid() = 1 [pid 3631] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3631] unshare(CLONE_NEWNS) = 0 [pid 3631] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3631] unshare(CLONE_NEWIPC) = 0 [pid 3631] unshare(CLONE_NEWCGROUP) = 0 [pid 3631] unshare(CLONE_NEWUTS) = 0 [pid 3631] unshare(CLONE_SYSVSEM) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "16777216", 8) = 8 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "536870912", 9) = 9 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "8192", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3631] close(3) = 0 [pid 3631] getpid() = 1 [pid 3631] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [640], 610) = 610 [pid 3631] exit_group(1) = ? [ 54.958957][ T3631] syz-executor918 (3631): drop_caches: 1 [ 54.981969][ T9] [ 54.984315][ T9] ====================================================== [ 54.991314][ T9] WARNING: possible circular locking dependency detected [ 54.998332][ T9] 6.1.0-rc7-syzkaller-00123-ga4412fdd49dc #0 Not tainted [ 55.005326][ T9] ------------------------------------------------------ [ 55.012328][ T9] kworker/u4:0/9 is trying to acquire lock: [ 55.018200][ T9] ffff8880700e0940 (&rl->lock){++++}-{3:3}, at: ntfs_read_block+0x91a/0x22e0 [ 55.026973][ T9] [ 55.026973][ T9] but task is already holding lock: [ 55.034319][ T9] ffff8880700e3310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x46/0x610 [ 55.043257][ T9] [ 55.043257][ T9] which lock already depends on the new lock. [ 55.043257][ T9] [ 55.053644][ T9] [ 55.053644][ T9] the existing dependency chain (in reverse order) is: [ 55.062644][ T9] [ 55.062644][ T9] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 55.070221][ T9] lock_acquire+0x182/0x3c0 [ 55.075413][ T9] __mutex_lock_common+0x1bd/0x26e0 [ 55.081136][ T9] mutex_lock_nested+0x17/0x20 [ 55.086413][ T9] map_mft_record+0x46/0x610 [ 55.091516][ T9] ntfs_truncate+0x24e/0x2720 [ 55.096709][ T9] ntfs_setattr+0x2b9/0x3a0 [ 55.101723][ T9] notify_change+0xe38/0x10f0 [ 55.106914][ T9] do_truncate+0x1fb/0x2e0 [ 55.111848][ T9] path_openat+0x2770/0x2df0 [ 55.116947][ T9] do_filp_open+0x264/0x4f0 [ 55.122046][ T9] do_sys_openat2+0x124/0x4e0 [ 55.127410][ T9] __x64_sys_creat+0x11f/0x160 [ 55.133121][ T9] do_syscall_64+0x3d/0xb0 [ 55.138050][ T9] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.144454][ T9] [ 55.144454][ T9] -> #0 (&rl->lock){++++}-{3:3}: [ 55.151566][ T9] validate_chain+0x1898/0x6ae0 [ 55.156929][ T9] __lock_acquire+0x1292/0x1f60 [ 55.162291][ T9] lock_acquire+0x182/0x3c0 [ 55.167313][ T9] down_read+0x39/0x50 [ 55.171893][ T9] ntfs_read_block+0x91a/0x22e0 [ 55.177252][ T9] filemap_read_folio+0x187/0x7d0 [ 55.182792][ T9] do_read_cache_folio+0x2d3/0x790 [ 55.188418][ T9] read_cache_page+0x56/0x270 [ 55.193608][ T9] ntfs_sync_mft_mirror+0x21a/0x1df0 [ 55.199409][ T9] write_mft_record_nolock+0x1213/0x1930 [ 55.205553][ T9] __ntfs_write_inode+0x721/0xc90 [ 55.211092][ T9] __writeback_single_inode+0x4d6/0x670 [ 55.217154][ T9] writeback_sb_inodes+0xb3b/0x18f0 [ 55.222866][ T9] wb_writeback+0x41f/0x7b0 [ 55.227884][ T9] wb_workfn+0x3cb/0xef0 [ 55.232640][ T9] process_one_work+0x877/0xdb0 [ 55.238004][ T9] worker_thread+0xb14/0x1330 [ 55.243205][ T9] kthread+0x266/0x300 [ 55.247784][ T9] ret_from_fork+0x1f/0x30 [ 55.252714][ T9] [ 55.252714][ T9] other info that might help us debug this: [ 55.252714][ T9] [ 55.262930][ T9] Possible unsafe locking scenario: [ 55.262930][ T9] [ 55.270365][ T9] CPU0 CPU1 [ 55.275718][ T9] ---- ---- [ 55.281069][ T9] lock(&ni->mrec_lock); [ 55.285391][ T9] lock(&rl->lock); [ 55.291804][ T9] lock(&ni->mrec_lock); [ 55.298639][ T9] lock(&rl->lock); [ 55.302524][ T9] [ 55.302524][ T9] *** DEADLOCK *** [ 55.302524][ T9] [ 55.310651][ T9] 3 locks held by kworker/u4:0/9: [ 55.315659][ T9] #0: ffff8881459c6138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 [ 55.326184][ T9] #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 [ 55.337913][ T9] #2: ffff8880700e3310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x46/0x610 [ 55.347297][ T9] [ 55.347297][ T9] stack backtrace: [ 55.353171][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.0-rc7-syzkaller-00123-ga4412fdd49dc #0 [ 55.363052][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.373094][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 55.379074][ T9] Call Trace: [ 55.382347][ T9] [ 55.385271][ T9] dump_stack_lvl+0x1b1/0x28e [ 55.389942][ T9] ? nf_tcp_handle_invalid+0x62e/0x62e [ 55.395395][ T9] ? print_circular_bug+0x13e/0x1c0 [ 55.400586][ T9] check_noncircular+0x2cc/0x390 [ 55.405517][ T9] ? add_chain_block+0x850/0x850 [ 55.410449][ T9] ? lockdep_lock+0x102/0x290 [ 55.415123][ T9] ? validate_chain+0x1478/0x6ae0 [ 55.420142][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.425426][ T9] validate_chain+0x1898/0x6ae0 [ 55.430279][ T9] ? add_chain_block+0x850/0x850 [ 55.435210][ T9] ? lockdep_lock+0x102/0x290 [ 55.439880][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.445259][ T9] ? lockdep_unlock+0x144/0x2e0 [ 55.450101][ T9] ? lockdep_lock+0x290/0x290 [ 55.454767][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.460133][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.465417][ T9] ? validate_chain+0x1478/0x6ae0 [ 55.470443][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.475807][ T9] ? check_noncircular+0x1aa/0x390 [ 55.480909][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.486276][ T9] ? add_chain_block+0x850/0x850 [ 55.491264][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.496629][ T9] ? lockdep_lock+0x102/0x290 [ 55.501304][ T9] ? lockdep_unlock+0x144/0x2e0 [ 55.506146][ T9] ? lockdep_lock+0x290/0x290 [ 55.510821][ T9] ? __bfs+0x369/0x700 [ 55.514883][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.520183][ T9] ? validate_chain+0x177/0x6ae0 [ 55.525123][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.530486][ T9] ? lockdep_lock+0x102/0x290 [ 55.535156][ T9] ? lockdep_unlock+0x144/0x2e0 [ 55.540006][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.545290][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.550654][ T9] ? validate_chain+0x1478/0x6ae0 [ 55.555762][ T9] ? lockdep_lock+0x290/0x290 [ 55.560429][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.565710][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.571077][ T9] ? validate_chain+0x1478/0x6ae0 [ 55.576117][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.581482][ T9] ? validate_chain+0x177/0x6ae0 [ 55.586420][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.591785][ T9] ? add_chain_block+0x850/0x850 [ 55.596716][ T9] ? lockdep_lock+0x102/0x290 [ 55.601385][ T9] ? lockdep_unlock+0x144/0x2e0 [ 55.606227][ T9] ? stack_trace_save+0x1e0/0x1e0 [ 55.611245][ T9] ? _find_first_zero_bit+0xe8/0x110 [ 55.616530][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.621894][ T9] ? validate_chain+0x177/0x6ae0 [ 55.626835][ T9] ? validate_chain+0x177/0x6ae0 [ 55.631806][ T9] ? validate_chain+0x177/0x6ae0 [ 55.636742][ T9] ? reacquire_held_locks+0x650/0x650 [ 55.642113][ T9] ? deref_stack_reg+0x17a/0x210 [ 55.647046][ T9] ? unwind_next_frame+0x1b06/0x24c0 [ 55.652337][ T9] ? deref_stack_reg+0x17a/0x210 [ 55.657290][ T9] ? deref_stack_reg+0x17a/0x210 [ 55.662240][ T9] ? unwind_next_frame+0x1b06/0x24c0 [ 55.667537][ T9] ? deref_stack_reg+0x17a/0x210 [ 55.672479][ T9] ? preempt_count_add+0x8d/0x180 [ 55.677501][ T9] ? unwind_next_frame+0x10d7/0x24c0 [ 55.682782][ T9] ? ret_from_fork+0x1f/0x30 [ 55.687368][ T9] ? stack_trace_save+0x1e0/0x1e0 [ 55.692386][ T9] ? arch_stack_walk+0xb2/0xe0 [ 55.697147][ T9] ? ret_from_fork+0x1f/0x30 [ 55.701740][ T9] ? stack_trace_save+0x104/0x1e0 [ 55.706759][ T9] ? stack_trace_snprint+0xf0/0xf0 [ 55.711864][ T9] ? kasan_set_track+0x52/0x60 [ 55.716638][ T9] ? alloc_buffer_head+0x20/0xf0 [ 55.721598][ T9] ? alloc_page_buffers+0x179/0x460 [ 55.726818][ T9] ? create_empty_buffers+0x36/0xe30 [ 55.732103][ T9] ? ntfs_read_block+0x2b0/0x22e0 [ 55.737120][ T9] ? filemap_read_folio+0x187/0x7d0 [ 55.742319][ T9] ? lockdep_unlock+0x144/0x2e0 [ 55.747163][ T9] ? lockdep_lock+0x290/0x290 [ 55.751837][ T9] ? mark_lock+0x2a1/0x350 [ 55.756272][ T9] __lock_acquire+0x1292/0x1f60 [ 55.761126][ T9] lock_acquire+0x182/0x3c0 [ 55.765621][ T9] ? ntfs_read_block+0x91a/0x22e0 [ 55.770637][ T9] ? read_lock_is_recursive+0x10/0x10 [ 55.776004][ T9] ? __might_sleep+0xc0/0xc0 [ 55.780588][ T9] ? _raw_read_unlock_irqrestore+0x8b/0x120 [ 55.786480][ T9] ? lockdep_hardirqs_on+0x8d/0x130 [ 55.791729][ T9] ? _raw_read_unlock_irqrestore+0xc1/0x120 [ 55.797625][ T9] ? _raw_read_unlock+0x40/0x40 [ 55.802470][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.807758][ T9] down_read+0x39/0x50 [ 55.811823][ T9] ? ntfs_read_block+0x91a/0x22e0 [ 55.816839][ T9] ntfs_read_block+0x91a/0x22e0 [ 55.821690][ T9] ? compound_nr+0x1b0/0x1b0 [ 55.826270][ T9] ? ntfs_read_folio+0xc23/0x1060 [ 55.831292][ T9] ? folio_add_lru+0x480/0x960 [ 55.836054][ T9] filemap_read_folio+0x187/0x7d0 [ 55.841077][ T9] ? ntfs_writepage+0x1d10/0x1d10 [ 55.846099][ T9] ? maybe_unlock_mmap_for_io+0x130/0x130 [ 55.851810][ T9] ? folio_alloc+0x47/0x50 [ 55.856218][ T9] ? filemap_alloc_folio+0x1ac/0x1c0 [ 55.861495][ T9] do_read_cache_folio+0x2d3/0x790 [ 55.866606][ T9] ? ntfs_writepage+0x1d10/0x1d10 [ 55.871628][ T9] read_cache_page+0x56/0x270 [ 55.876301][ T9] ntfs_sync_mft_mirror+0x21a/0x1df0 [ 55.881588][ T9] ? should_fail_request+0x70/0x70 [ 55.886702][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 55.892332][ T9] ? __mark_mft_record_dirty+0x170/0x170 [ 55.897960][ T9] ? submit_bio_noacct+0xf50/0x1880 [ 55.903159][ T9] write_mft_record_nolock+0x1213/0x1930 [ 55.908811][ T9] ? lock_page+0x2b0/0x2b0 [ 55.913234][ T9] ? slab_free_freelist_hook+0x12e/0x1a0 [ 55.918885][ T9] ? trace_kmem_cache_alloc+0x30/0xe0 [ 55.924267][ T9] ? __ntfs_write_inode+0x695/0xc90 [ 55.929468][ T9] __ntfs_write_inode+0x721/0xc90 [ 55.934507][ T9] __writeback_single_inode+0x4d6/0x670 [ 55.940053][ T9] writeback_sb_inodes+0xb3b/0x18f0 [ 55.945259][ T9] ? queue_io+0x400/0x400 [ 55.949592][ T9] ? queue_io+0x382/0x400 [ 55.953935][ T9] ? trace_writeback_queue_io+0xe8/0x2d0 [ 55.959578][ T9] wb_writeback+0x41f/0x7b0 [ 55.964093][ T9] ? trace_writeback_exec+0x2c0/0x2c0 [ 55.969825][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 55.975460][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.980705][ T9] wb_workfn+0x3cb/0xef0 [ 55.984954][ T9] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 55.990675][ T9] ? rcu_read_lock_sched_held+0x87/0x110 [ 55.996299][ T9] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 56.002272][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 56.008164][ T9] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.013357][ T9] process_one_work+0x877/0xdb0 [ 56.018210][ T9] ? worker_detach_from_pool+0x260/0x260 [ 56.023839][ T9] ? _raw_spin_lock_irq+0xba/0xf0 [ 56.028861][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 56.034414][ T9] worker_thread+0xb14/0x1330 [ 56.039098][ T9] kthread+0x266/0x300 [ 56.043161][ T9] ? rcu_lock_release+0x20/0x20 [ 56.048004][ T9] ? kthread_blkcg+0xd0/0xd0 [ 56.052585][ T9] ret_from_fork+0x1f/0x30 [ 56.057003][ T9] [pid 3631] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3631, si_uid=0, si_status=1, si_utime=0, si_stime=26} --- exit_group(0) = ? +++ exited with 0 +++ [