Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.970890][ T3072] loop0: detected capacity change from 0 to 256 [ 38.973585][ T3072] ======================================================= [ 38.973585][ T3072] WARNING: The mand mount option has been deprecated and [ 38.973585][ T3072] and is ignored by this kernel. Remove the mand [ 38.973585][ T3072] option from the mount to silence this warning. [ 38.973585][ T3072] ======================================================= [ 38.982902][ T3072] exfat: Deprecated parameter 'utf8' [ 38.984312][ T3072] exfat: Deprecated parameter 'utf8' [ 38.989311][ T3072] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d) [ 39.001516][ T3072] [ 39.002204][ T3072] ====================================================== [ 39.004006][ T3072] WARNING: possible circular locking dependency detected [ 39.005813][ T3072] 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0 Not tainted [ 39.007693][ T3072] ------------------------------------------------------ [ 39.009570][ T3072] syz-executor581/3072 is trying to acquire lock: [ 39.011234][ T3072] ffff0000caee1060 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: filemap_fault+0x104/0x7fc [ 39.013875][ T3072] [ 39.013875][ T3072] but task is already holding lock: [ 39.015835][ T3072] ffff0000c02520c8 (&mm->mmap_lock){++++}-{3:3}, at: do_page_fault+0x1ec/0x79c [ 39.018210][ T3072] [ 39.018210][ T3072] which lock already depends on the new lock. [ 39.018210][ T3072] [ 39.020993][ T3072] [ 39.020993][ T3072] the existing dependency chain (in reverse order) is: [ 39.023435][ T3072] [ 39.023435][ T3072] -> #2 (&mm->mmap_lock){++++}-{3:3}: [ 39.025419][ T3072] __might_fault+0x7c/0xb4 [ 39.026746][ T3072] filldir64+0x1e8/0x574 [ 39.028027][ T3072] exfat_iterate+0xd4/0xcb4 [ 39.029377][ T3072] iterate_dir+0x114/0x28c [ 39.030638][ T3072] __arm64_sys_getdents64+0x80/0x204 [ 39.032209][ T3072] el0_svc_common+0x138/0x220 [ 39.033633][ T3072] do_el0_svc+0x48/0x140 [ 39.034905][ T3072] el0_svc+0x58/0x150 [ 39.036074][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 39.037494][ T3072] el0t_64_sync+0x190/0x194 [ 39.038815][ T3072] [ 39.038815][ T3072] -> #1 (&sbi->s_lock){+.+.}-{3:3}: [ 39.040765][ T3072] __mutex_lock_common+0xd4/0xca8 [ 39.042201][ T3072] mutex_lock_nested+0x38/0x44 [ 39.043523][ T3072] exfat_get_block+0x6c/0x9ec [ 39.044901][ T3072] do_mpage_readpage+0x474/0xd38 [ 39.046285][ T3072] mpage_readahead+0xf0/0x1b8 [ 39.047628][ T3072] exfat_readahead+0x28/0x38 [ 39.048933][ T3072] read_pages+0x8c/0x4f0 [ 39.050157][ T3072] page_cache_ra_unbounded+0x374/0x400 [ 39.051793][ T3072] page_cache_ra_order+0x348/0x380 [ 39.053260][ T3072] ondemand_readahead+0x340/0x720 [ 39.054787][ T3072] page_cache_sync_ra+0xc4/0xdc [ 39.056146][ T3072] filemap_get_pages+0x118/0x598 [ 39.057558][ T3072] filemap_read+0x14c/0x6f4 [ 39.058878][ T3072] generic_file_read_iter+0x6c/0x25c [ 39.060393][ T3072] aio_read+0x170/0x254 [ 39.061736][ T3072] __io_submit_one+0x218/0x5e4 [ 39.063148][ T3072] io_submit_one+0x2c4/0x4bc [ 39.064533][ T3072] __do_sys_io_submit+0x16c/0x2ac [ 39.065971][ T3072] __arm64_sys_io_submit+0x24/0x34 [ 39.067501][ T3072] el0_svc_common+0x138/0x220 [ 39.068872][ T3072] do_el0_svc+0x48/0x140 [ 39.070098][ T3072] el0_svc+0x58/0x150 [ 39.071299][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 39.072741][ T3072] el0t_64_sync+0x190/0x194 [ 39.074092][ T3072] [ 39.074092][ T3072] -> #0 (mapping.invalidate_lock#3){.+.+}-{3:3}: [ 39.076320][ T3072] __lock_acquire+0x1530/0x3084 [ 39.077744][ T3072] lock_acquire+0x100/0x1f8 [ 39.079105][ T3072] down_read+0x5c/0x78 [ 39.080268][ T3072] filemap_fault+0x104/0x7fc [ 39.081642][ T3072] __do_fault+0x60/0x358 [ 39.082912][ T3072] do_fault+0x338/0x550 [ 39.084154][ T3072] handle_mm_fault+0x78c/0xa48 [ 39.085494][ T3072] do_page_fault+0x428/0x79c [ 39.086825][ T3072] do_translation_fault+0x78/0x194 [ 39.088429][ T3072] do_mem_abort+0x54/0x130 [ 39.089825][ T3072] el1_abort+0x3c/0x5c [ 39.091149][ T3072] el1h_64_sync_handler+0x60/0xac [ 39.092596][ T3072] el1h_64_sync+0x64/0x68 [ 39.093833][ T3072] strncpy_from_user+0x1a8/0x3d8 [ 39.095253][ T3072] getname_flags+0x84/0x278 [ 39.096528][ T3072] getname+0x28/0x38 [ 39.097649][ T3072] do_sys_openat2+0x78/0x22c [ 39.099002][ T3072] __arm64_sys_openat+0xb0/0xe0 [ 39.100372][ T3072] el0_svc_common+0x138/0x220 [ 39.101764][ T3072] do_el0_svc+0x48/0x140 [ 39.103019][ T3072] el0_svc+0x58/0x150 [ 39.104179][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 39.105674][ T3072] el0t_64_sync+0x190/0x194 [ 39.107017][ T3072] [ 39.107017][ T3072] other info that might help us debug this: [ 39.107017][ T3072] [ 39.109636][ T3072] Chain exists of: [ 39.109636][ T3072] mapping.invalidate_lock#3 --> &sbi->s_lock --> &mm->mmap_lock [ 39.109636][ T3072] [ 39.113229][ T3072] Possible unsafe locking scenario: [ 39.113229][ T3072] [ 39.115205][ T3072] CPU0 CPU1 [ 39.116658][ T3072] ---- ---- [ 39.118049][ T3072] lock(&mm->mmap_lock); [ 39.119128][ T3072] lock(&sbi->s_lock); [ 39.120817][ T3072] lock(&mm->mmap_lock); [ 39.122621][ T3072] lock(mapping.invalidate_lock#3); [ 39.124034][ T3072] [ 39.124034][ T3072] *** DEADLOCK *** [ 39.124034][ T3072] [ 39.126211][ T3072] 1 lock held by syz-executor581/3072: [ 39.127570][ T3072] #0: ffff0000c02520c8 (&mm->mmap_lock){++++}-{3:3}, at: do_page_fault+0x1ec/0x79c [ 39.130027][ T3072] [ 39.130027][ T3072] stack backtrace: [ 39.131589][ T3072] CPU: 0 PID: 3072 Comm: syz-executor581 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0 [ 39.134366][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 39.137069][ T3072] Call trace: [ 39.137943][ T3072] dump_backtrace+0x1c4/0x1f0 [ 39.139131][ T3072] show_stack+0x2c/0x3c [ 39.140256][ T3072] dump_stack_lvl+0x104/0x16c [ 39.141443][ T3072] dump_stack+0x1c/0x58 [ 39.142502][ T3072] print_circular_bug+0x2c4/0x2c8 [ 39.143913][ T3072] check_noncircular+0x14c/0x154 [ 39.145164][ T3072] __lock_acquire+0x1530/0x3084 [ 39.146435][ T3072] lock_acquire+0x100/0x1f8 [ 39.147621][ T3072] down_read+0x5c/0x78 [ 39.148675][ T3072] filemap_fault+0x104/0x7fc [ 39.149912][ T3072] __do_fault+0x60/0x358 [ 39.151020][ T3072] do_fault+0x338/0x550 [ 39.152122][ T3072] handle_mm_fault+0x78c/0xa48 [ 39.153332][ T3072] do_page_fault+0x428/0x79c [ 39.154563][ T3072] do_translation_fault+0x78/0x194 [ 39.155961][ T3072] do_mem_abort+0x54/0x130 [ 39.157071][ T3072] el1_abort+0x3c/0x5c [ 39.158164][ T3072] el1h_64_sync_handler+0x60/0xac [ 39.159457][ T3072] el1h_64_sync+0x64/0x68 [ 39.160572][ T3072] strncpy_from_user+0x1a8/0x3d8 [ 39.161880][ T3072] getname_flags+0x84/0x278 [ 39.163076][ T3072] getname+0x28/0x38 [ 39.164113][ T3072] do_sys_openat2+0x78/0x22c [ 39.165312][ T3072] __arm64_sys_openat+0xb0/0xe0 [ 39.166575][ T3072] el0_svc_common+0x138/0x220 [ 39.167870][ T3072] do_el0_svc+0x48/0x140 [ 39.168970][ T3072] el0_svc+0x58/0x150 [ 39.169995][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 39.171270][ T3072] el0t_64_sync+0x190/0x194