======================================================
WARNING: possible circular locking dependency detected
6.12.0-syzkaller-g7b1d1d4cfac0 #0 Not tainted
------------------------------------------------------
syz.2.133/7222 is trying to acquire lock:
ffff0000f0ecb148 (mapping.invalidate_lock#5){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:870 [inline]
ffff0000f0ecb148 (mapping.invalidate_lock#5){++++}-{3:3}, at: page_cache_ra_unbounded+0xf4/0x65c mm/readahead.c:226
but task is already holding lock:
ffff0000f0ecad10 (&ni->ni_lock#3/5){+.+.}-{3:3}, at: ni_lock fs/ntfs3/ntfs_fs.h:1109 [inline]
ffff0000f0ecad10 (&ni->ni_lock#3/5){+.+.}-{3:3}, at: ntfs_fiemap+0xec/0x168 fs/ntfs3/file.c:1350
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #1 (&ni->ni_lock#3/5){+.+.}-{3:3}:
__mutex_lock_common+0x190/0x21a0 kernel/locking/mutex.c:608
__mutex_lock kernel/locking/mutex.c:752 [inline]
mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804
ni_lock fs/ntfs3/ntfs_fs.h:1109 [inline]
ntfs_fallocate+0x4d4/0xfd0 fs/ntfs3/file.c:609
vfs_fallocate+0x484/0x5c0 fs/open.c:333
ksys_fallocate fs/open.c:356 [inline]
__do_sys_fallocate fs/open.c:364 [inline]
__se_sys_fallocate fs/open.c:362 [inline]
__arm64_sys_fallocate+0xc0/0x110 fs/open.c:362
__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
-> #0 (mapping.invalidate_lock#5){++++}-{3:3}:
check_prev_add kernel/locking/lockdep.c:3161 [inline]
check_prevs_add kernel/locking/lockdep.c:3280 [inline]
validate_chain kernel/locking/lockdep.c:3904 [inline]
__lock_acquire+0x33f8/0x77c8 kernel/locking/lockdep.c:5202
lock_acquire+0x240/0x728 kernel/locking/lockdep.c:5825
down_read+0x58/0x2fc kernel/locking/rwsem.c:1524
filemap_invalidate_lock_shared include/linux/fs.h:870 [inline]
page_cache_ra_unbounded+0xf4/0x65c mm/readahead.c:226
do_page_cache_ra mm/readahead.c:320 [inline]
page_cache_ra_order+0x3ec/0xa58 mm/readahead.c:520
do_sync_mmap_readahead+0x39c/0x818
filemap_fault+0x648/0x138c mm/filemap.c:3343
__do_fault+0x11c/0x374 mm/memory.c:4882
do_shared_fault mm/memory.c:5361 [inline]
do_fault mm/memory.c:5435 [inline]
do_pte_missing mm/memory.c:3965 [inline]
handle_pte_fault mm/memory.c:5766 [inline]
__handle_mm_fault+0x1d50/0x66e8 mm/memory.c:5909
handle_mm_fault+0x29c/0x8b4 mm/memory.c:6077
do_page_fault+0x570/0x10a8 arch/arm64/mm/fault.c:690
do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:783
do_mem_abort+0x74/0x200 arch/arm64/mm/fault.c:919
el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:432
el1h_64_sync_handler+0x60/0xcc arch/arm64/kernel/entry-common.c:510
el1h_64_sync+0x6c/0x70 arch/arm64/kernel/entry.S:595
__arch_copy_to_user+0x1b0/0x234 arch/arm64/lib/copy_template.S:167
_inline_copy_to_user include/linux/uaccess.h:197 [inline]
copy_to_user include/linux/uaccess.h:223 [inline]
ni_fiemap+0x11f8/0x1444 fs/ntfs3/frecord.c:2139
ntfs_fiemap+0x110/0x168 fs/ntfs3/file.c:1352
ioctl_fiemap fs/ioctl.c:220 [inline]
do_vfs_ioctl+0x1de8/0x2aa8 fs/ioctl.c:841
__do_sys_ioctl fs/ioctl.c:905 [inline]
__se_sys_ioctl fs/ioctl.c:893 [inline]
__arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:893
__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&ni->ni_lock#3/5);
lock(mapping.invalidate_lock#5);
lock(&ni->ni_lock#3/5);
rlock(mapping.invalidate_lock#5);
*** DEADLOCK ***
1 lock held by syz.2.133/7222:
#0: ffff0000f0ecad10 (&ni->ni_lock#3/5){+.+.}-{3:3}, at: ni_lock fs/ntfs3/ntfs_fs.h:1109 [inline]
#0: ffff0000f0ecad10 (&ni->ni_lock#3/5){+.+.}-{3:3}, at: ntfs_fiemap+0xec/0x168 fs/ntfs3/file.c:1350
stack backtrace:
CPU: 1 UID: 0 PID: 7222 Comm: syz.2.133 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:484 (C)
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:120
dump_stack+0x1c/0x28 lib/dump_stack.c:129
print_circular_bug+0x154/0x1c0 kernel/locking/lockdep.c:2074
check_noncircular+0x310/0x404 kernel/locking/lockdep.c:2206
check_prev_add kernel/locking/lockdep.c:3161 [inline]
check_prevs_add kernel/locking/lockdep.c:3280 [inline]
validate_chain kernel/locking/lockdep.c:3904 [inline]
__lock_acquire+0x33f8/0x77c8 kernel/locking/lockdep.c:5202
lock_acquire+0x240/0x728 kernel/locking/lockdep.c:5825
down_read+0x58/0x2fc kernel/locking/rwsem.c:1524
filemap_invalidate_lock_shared include/linux/fs.h:870 [inline]
page_cache_ra_unbounded+0xf4/0x65c mm/readahead.c:226
do_page_cache_ra mm/readahead.c:320 [inline]
page_cache_ra_order+0x3ec/0xa58 mm/readahead.c:520
do_sync_mmap_readahead+0x39c/0x818
filemap_fault+0x648/0x138c mm/filemap.c:3343
__do_fault+0x11c/0x374 mm/memory.c:4882
do_shared_fault mm/memory.c:5361 [inline]
do_fault mm/memory.c:5435 [inline]
do_pte_missing mm/memory.c:3965 [inline]
handle_pte_fault mm/memory.c:5766 [inline]
__handle_mm_fault+0x1d50/0x66e8 mm/memory.c:5909
handle_mm_fault+0x29c/0x8b4 mm/memory.c:6077
do_page_fault+0x570/0x10a8 arch/arm64/mm/fault.c:690
do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:783
do_mem_abort+0x74/0x200 arch/arm64/mm/fault.c:919
el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:432
el1h_64_sync_handler+0x60/0xcc arch/arm64/kernel/entry-common.c:510
el1h_64_sync+0x6c/0x70 arch/arm64/kernel/entry.S:595
__arch_copy_to_user+0x1b0/0x234 arch/arm64/lib/copy_template.S:167 (P)
_inline_copy_to_user include/linux/uaccess.h:197 [inline] (L)
copy_to_user include/linux/uaccess.h:223 [inline] (L)
ni_fiemap+0x11f8/0x1444 fs/ntfs3/frecord.c:2139 (L)
ntfs_fiemap+0x110/0x168 fs/ntfs3/file.c:1352
ioctl_fiemap fs/ioctl.c:220 [inline]
do_vfs_ioctl+0x1de8/0x2aa8 fs/ioctl.c:841
__do_sys_ioctl fs/ioctl.c:905 [inline]
__se_sys_ioctl fs/ioctl.c:893 [inline]
__arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:893
__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600