ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor1642244613 <...> Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor1642244613", ["ci-upstream-linux-next-kasan-gce-root/syz-executor1642244613"], 0x7ffdc7aab260 /* 10 vars */) = 0 brk(NULL) = 0x55556b803000 brk(0x55556b803d80) = 0x55556b803d80 arch_prctl(ARCH_SET_FS, 0x55556b803400) = 0 set_tid_address(0x55556b8036d0) = 5622 set_robust_list(0x55556b8036e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor1642244613", 4096) = 66 getrandom("\x99\x89\x0b\x13\xd2\x17\x17\x45", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556b803d80 brk(0x55556b824d80) = 0x55556b824d80 brk(0x55556b825000) = 0x55556b825000 mprotect(0x7f08f487d000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f08f47e7010, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f08f47d9920}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f08f478e000 mprotect(0x7f08f478f000, 131072, PROT_READ|PROT_WRITE) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f08f47ae990, parent_tid=0x7f08f47ae990, exit_signal=0, stack=0x7f08f478e000, stack_size=0x202c0, tls=0x7f08f47ae6c0}ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5623 attached => {parent_tid=[5623]}, 88) = 5623 [pid 5623] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5623] <... rseq resumed>) = 0 [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5622] futex(0x7f08f4883b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] set_robust_list(0x7f08f47ae9a0, 24 [pid 5622] <... futex resumed>) = 0 [pid 5623] <... set_robust_list resumed>) = 0 [pid 5622] futex(0x7f08f4883b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5623] mkdirat(AT_FDCWD, "./file0", 000) = 0 [pid 5623] futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] futex(0x7f08f4883b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f08f4883b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] <... futex resumed>) = 0 [pid 5622] futex(0x7f08f4883b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] mount(NULL, "./file0", "sysfs", MS_MANDLOCK|MS_REC|MS_POSIXACL|MS_RELATIME|MS_STRICTATIME, NULL) = 0 [pid 5623] futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f08f4883b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... futex resumed>) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5623] mount(NULL, "./file0", "overlay", 0, "xino=on,lowerdir=./file0:/" [pid 5622] futex(0x7f08f4883b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... mount resumed>) = 0 [pid 5623] futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5623] futex(0x7f08f4883b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] futex(0x7f08f4883b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] <... futex resumed>) = 0 [pid 5622] futex(0x7f08f4883b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_EXCL) = 3 [pid 5623] futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f08f4883b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7f08f4883b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 1 [ 88.181653][ T5623] ======================================================= [ 88.181653][ T5623] WARNING: The mand mount option has been deprecated and [ 88.181653][ T5623] and is ignored by this kernel. Remove the mand [ 88.181653][ T5623] option from the mount to silence this warning. [ 88.181653][ T5623] ======================================================= [ 88.186507][ T5623] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.247703][ T5623] [ 88.250103][ T5623] ====================================================== [ 88.257142][ T5623] WARNING: possible circular locking dependency detected [ 88.264215][ T5623] syzkaller #0 Not tainted [ 88.268664][ T5623] ------------------------------------------------------ [ 88.275694][ T5623] syz-executor164/5623 is trying to acquire lock: [ 88.282208][ T5623] ffff888026f18600 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 88.291761][ T5623] [ 88.291761][ T5623] but task is already holding lock: [ 88.299153][ T5623] ffff88807786fe40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 88.308936][ T5623] [ 88.308936][ T5623] which lock already depends on the new lock. [ 88.308936][ T5623] [ 88.319363][ T5623] [ 88.319363][ T5623] the existing dependency chain (in reverse order) is: [ 88.328411][ T5623] [ 88.328411][ T5623] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 88.336254][ T5623] __d_alloc_parallel+0xc32/0x1700 [ 88.341910][ T5623] __lookup_slow+0x82/0x2f0 [ 88.347041][ T5623] lookup_slow+0x59/0x80 [ 88.351823][ T5623] path_lookupat+0x3f5/0x8c0 [ 88.356952][ T5623] filename_lookup+0x265/0x5d0 [ 88.362248][ T5623] vfs_statx+0xfc/0x200 [ 88.366937][ T5623] vfs_fstatat+0x11b/0x170 [ 88.371888][ T5623] __se_sys_newfstatat+0x118/0x3a0 [ 88.377537][ T5623] do_syscall_64+0x166/0x520 [ 88.382682][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.389202][ T5623] [ 88.389202][ T5623] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 88.397657][ T5623] __lock_acquire+0x164c/0x2de0 [ 88.403045][ T5623] lock_acquire+0x115/0x350 [ 88.408087][ T5623] down_read+0x45/0x320 [ 88.412799][ T5623] lookup_slow+0x46/0x80 [ 88.417604][ T5623] ovl_lookup_single+0x323/0xe90 [ 88.423095][ T5623] ovl_lookup_layer+0x377/0x440 [ 88.428489][ T5623] ovl_lookup+0x9ae/0x1c80 [ 88.433525][ T5623] __lookup_slow+0x1fb/0x2f0 [ 88.438648][ T5623] ovl_cache_update+0x2fc/0xb70 [ 88.444032][ T5623] ovl_iterate+0x66e/0x2160 [ 88.449074][ T5623] wrap_directory_iterator+0x96/0xe0 [ 88.454919][ T5623] iterate_dir+0x3db/0x880 [ 88.459867][ T5623] __se_sys_getdents64+0xf1/0x280 [ 88.465426][ T5623] do_syscall_64+0x166/0x520 [ 88.470553][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.476990][ T5623] [ 88.476990][ T5623] other info that might help us debug this: [ 88.476990][ T5623] [ 88.487235][ T5623] Possible unsafe locking scenario: [ 88.487235][ T5623] [ 88.494704][ T5623] CPU0 CPU1 [ 88.500080][ T5623] ---- ---- [ 88.505479][ T5623] lock(DCACHE_PAR_LOOKUP); [ 88.510087][ T5623] lock(&type->i_mutex_dir_key#4); [ 88.517853][ T5623] lock(DCACHE_PAR_LOOKUP); [ 88.524980][ T5623] rlock(&type->i_mutex_dir_key#4); [ 88.530285][ T5623] [ 88.530285][ T5623] *** DEADLOCK *** [ 88.530285][ T5623] [ 88.538441][ T5623] locks held by syz-executor164/5623: 3, last CPU#1: [ 88.545142][ T5623] #0: ffff8880355b7270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 88.554220][ T5623] #1: ffff888077b2b298 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 88.565480][ T5623] #2: ffff88807786fe40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 88.575679][ T5623] [ 88.575679][ T5623] stack backtrace: [ 88.581629][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor164 Not tainted syzkaller #0 PREEMPT(full) [ 88.591382][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.601473][ T5623] Call Trace: [ 88.604770][ T5623] [ 88.607715][ T5623] dump_stack_lvl+0xe8/0x150 [ 88.612331][ T5623] print_circular_bug+0x2e2/0x300 [ 88.617381][ T5623] check_noncircular+0x12f/0x150 [ 88.622332][ T5623] __lock_acquire+0x164c/0x2de0 [ 88.627204][ T5623] ? lock_acquire+0x115/0x350 [ 88.631925][ T5623] lock_acquire+0x115/0x350 [ 88.636441][ T5623] ? lookup_slow+0x46/0x80 [ 88.640889][ T5623] down_read+0x45/0x320 [ 88.645066][ T5623] ? lookup_slow+0x46/0x80 [ 88.649491][ T5623] ? d_lookup+0x8a/0xa0 [ 88.653657][ T5623] lookup_slow+0x46/0x80 [ 88.657912][ T5623] ovl_lookup_single+0x323/0xe90 [ 88.662879][ T5623] ? __pfx_ovl_lookup_single+0x10/0x10 [ 88.668363][ T5623] ? rcu_is_watching+0x16/0xb0 [ 88.673151][ T5623] ovl_lookup_layer+0x377/0x440 [ 88.678050][ T5623] ? __kmalloc_noprof+0x387/0x710 [ 88.683108][ T5623] ? ovl_lookup+0x762/0x1c80 [ 88.687723][ T5623] ovl_lookup+0x9ae/0x1c80 [ 88.692158][ T5623] ? lock_acquire+0x115/0x350 [ 88.696866][ T5623] ? __pfx_ovl_lookup+0x10/0x10 [ 88.701728][ T5623] ? __d_lookup+0x66/0x790 [ 88.706161][ T5623] ? __pfx___d_alloc_parallel+0x10/0x10 [ 88.711731][ T5623] ? d_lookup+0x1f/0xa0 [ 88.715914][ T5623] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 88.722085][ T5623] __lookup_slow+0x1fb/0x2f0 [ 88.726692][ T5623] ovl_cache_update+0x2fc/0xb70 [ 88.731562][ T5623] ? __pfx_ovl_dir_read+0x10/0x10 [ 88.736628][ T5623] ? __pfx_ovl_cache_update+0x10/0x10 [ 88.742013][ T5623] ? ovl_dir_read_merged+0x416/0x520 [ 88.747316][ T5623] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 88.752964][ T5623] ? __pfx_ovl_fill_merge+0x10/0x10 [ 88.758195][ T5623] ? __kasan_kmalloc+0x93/0xb0 [ 88.762981][ T5623] ? __kmalloc_cache_noprof+0x148/0x600 [ 88.768544][ T5623] ? ovl_iterate+0xcbc/0x2160 [ 88.773236][ T5623] ? ovl_iterate+0xcbc/0x2160 [ 88.778025][ T5623] ovl_iterate+0x66e/0x2160 [ 88.782541][ T5623] ? __pfx_stack_trace_save+0x10/0x10 [ 88.787937][ T5623] ? check_path+0x21/0x40 [ 88.792311][ T5623] ? check_noncircular+0xdb/0x150 [ 88.797377][ T5623] ? __pfx_ovl_iterate+0x10/0x10 [ 88.802342][ T5623] ? lockdep_unlock+0x5c/0xd0 [ 88.807036][ T5623] ? __lock_acquire+0x1511/0x2de0 [ 88.812195][ T5623] ? lock_acquire+0x115/0x350 [ 88.816909][ T5623] ? down_write+0x166/0x200 [ 88.821536][ T5623] ? __pfx_down_write+0x10/0x10 [ 88.826425][ T5623] ? wrap_directory_iterator+0x52/0xe0 [ 88.831906][ T5623] ? __pfx_ovl_iterate+0x10/0x10 [ 88.836862][ T5623] wrap_directory_iterator+0x96/0xe0 [ 88.842187][ T5623] iterate_dir+0x3db/0x880 [ 88.846627][ T5623] __se_sys_getdents64+0xf1/0x280 [ 88.851665][ T5623] ? __pfx___se_sys_getdents64+0x10/0x10 [ 88.857330][ T5623] ? __pfx_filldir64+0x10/0x10 [ 88.862116][ T5623] do_syscall_64+0x166/0x520 [ 88.866721][ T5623] ? trace_irq_disable+0x3b/0x140 [ 88.871770][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.877865][ T5623] ? clear_bhb_loop+0x70/0xc0 [ 88.882566][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.888572][ T5623] RIP: 0033:0x7f08f47d4799 [ 88.893068][ T5623] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 88.912701][ T5623] RSP: 002b:00007f08f47ae1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 88.921138][ T5623] RAX: ffffffffffffffda RBX: 00007f08f4883b48 RCX: 00007f08f47d4799 [ 88.929128][ T5623] RDX: 000000000000ff56 RSI: 0000200000000580 RDI: 0000000000000003 [ 88.937113][ T5623] RBP: 00007f08f4883b40 R08: 35203a6b63617473 R09: 35203a6b63617473 [pid 5623] getdents64(3 [pid 5622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5623] <... getdents64 resumed>, 0x200000000580 /* 32 entries */, 65366) = 872 [pid 5623] futex(0x7f08f4883b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] exit_group(0) = ? [pid 5623] <... futex resumed>) = ? [pid 5623] +++ exited with 0 +++ +++ exited with 0 +++ [ 88.945105][ T5623] R10: 35203a6b63617473 R11: 0000000000000246