program: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a00) sendto(0xffffffffffffffff, &(0x7f00000000c0)="12", 0x1, 0x0, 0x0, 0x0) (async) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000580)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x4000842) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x3, 0x3, 0x0, 0x7, 'syz0\x00', 0x3}, 0x6, 0x3, 0x8, 0x0, 0x5, 0xfffffc01, 'syz0\x00', &(0x7f0000000140)=['\x00', '\x00', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00'], 0x29}) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1a2, &(0x7f0000000280)="$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") (async) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x20, 0x0, @fd_index=0x1, 0x8001, &(0x7f0000000680)="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", 0x46e, 0x5}) [ 89.486728][ T5094] Bluetooth: hci0: command tx timeout [ 90.769770][ T5112] loop0: detected capacity change from 0 to 8 [ 90.818924][ T5111] SQUASHFS error: Unable to read directory block [631:72] [ 90.834971][ T77] [ 90.835918][ T77] ====================================================== [ 90.838497][ T77] WARNING: possible circular locking dependency detected [ 90.841598][ T77] 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 Not tainted [ 90.844676][ T77] ------------------------------------------------------ [ 90.847079][ T77] kswapd0/77 is trying to acquire lock: [ 90.849228][ T77] ffff888036de2930 (&group->mark_mutex){+.+.}-{3:3}, at: fsnotify_destroy_mark+0x38/0x3c0 [ 90.854519][ T77] [ 90.854519][ T77] but task is already holding lock: [ 90.857446][ T77] ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbb4/0x35a0 [ 90.859908][ T77] [ 90.859908][ T77] which lock already depends on the new lock. [ 90.859908][ T77] [ 90.863835][ T77] [ 90.863835][ T77] the existing dependency chain (in reverse order) is: [ 90.867745][ T77] [ 90.867745][ T77] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 90.871203][ T77] lock_acquire+0x1ed/0x550 [ 90.873474][ T77] fs_reclaim_acquire+0x88/0x140 [ 90.875580][ T77] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 90.877880][ T77] __se_sys_inotify_add_watch+0x72e/0x1070 [ 90.880242][ T77] do_syscall_64+0xf3/0x230 [ 90.882278][ T77] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.884949][ T77] [ 90.884949][ T77] -> #0 (&group->mark_mutex){+.+.}-{3:3}: [ 90.888423][ T77] validate_chain+0x18e0/0x5900 [ 90.890335][ T77] __lock_acquire+0x137a/0x2040 [ 90.891972][ T77] lock_acquire+0x1ed/0x550 [ 90.893587][ T77] __mutex_lock+0x136/0xd70 [ 90.895056][ T77] fsnotify_destroy_mark+0x38/0x3c0 [ 90.896846][ T77] fsnotify_destroy_marks+0x14a/0x660 [ 90.898727][ T77] dentry_unlink_inode+0x2e0/0x430 [ 90.900560][ T77] __dentry_kill+0x20d/0x630 [ 90.902258][ T77] shrink_kill+0xa9/0x2c0 [ 90.904204][ T77] shrink_dentry_list+0x2c0/0x5b0 [ 90.906730][ T77] prune_dcache_sb+0x10f/0x180 [ 90.908888][ T77] super_cache_scan+0x34f/0x4b0 [ 90.910920][ T77] do_shrink_slab+0x701/0x1160 [ 90.912931][ T77] shrink_slab+0x1093/0x14d0 [ 90.915028][ T77] shrink_one+0x43b/0x850 [ 90.917537][ T77] shrink_node+0x3799/0x3de0 [ 90.920105][ T77] kswapd+0x1bcd/0x35a0 [ 90.922271][ T77] kthread+0x2f0/0x390 [ 90.923952][ T77] ret_from_fork+0x4b/0x80 [ 90.925699][ T77] ret_from_fork_asm+0x1a/0x30 [ 90.927578][ T77] [ 90.927578][ T77] other info that might help us debug this: [ 90.927578][ T77] [ 90.931376][ T77] Possible unsafe locking scenario: [ 90.931376][ T77] [ 90.935090][ T77] CPU0 CPU1 [ 90.937758][ T77] ---- ---- [ 90.939722][ T77] lock(fs_reclaim); [ 90.941245][ T77] lock(&group->mark_mutex); [ 90.943891][ T77] lock(fs_reclaim); [ 90.946346][ T77] lock(&group->mark_mutex); [ 90.948103][ T77] [ 90.948103][ T77] *** DEADLOCK *** [ 90.948103][ T77] [ 90.951285][ T77] 2 locks held by kswapd0/77: [ 90.953318][ T77] #0: ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbb4/0x35a0 [ 90.956940][ T77] #1: ffff8880453d80e0 (&type->s_umount_key#47){.+.+}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 90.961200][ T77] [ 90.961200][ T77] stack backtrace: [ 90.963425][ T77] CPU: 0 UID: 0 PID: 77 Comm: kswapd0 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 90.967328][ T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.971746][ T77] Call Trace: [ 90.973323][ T77] [ 90.974653][ T77] dump_stack_lvl+0x241/0x360 [ 90.976486][ T77] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.978499][ T77] ? print_circular_bug+0x130/0x1a0 [ 90.980303][ T77] check_noncircular+0x36a/0x4a0 [ 90.983024][ T77] ? __pfx_check_noncircular+0x10/0x10 [ 90.985029][ T77] validate_chain+0x18e0/0x5900 [ 90.986891][ T77] ? __pfx_validate_chain+0x10/0x10 [ 90.989074][ T77] ? __pfx_validate_chain+0x10/0x10 [ 90.991139][ T77] ? __pfx_validate_chain+0x10/0x10 [ 90.993384][ T77] ? mark_lock+0x9a/0x350 [ 90.995107][ T77] __lock_acquire+0x137a/0x2040 [ 90.996892][ T77] lock_acquire+0x1ed/0x550 [ 90.998386][ T77] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.000270][ T77] ? __pfx_lock_acquire+0x10/0x10 [ 91.001911][ T77] ? __pfx___might_resched+0x10/0x10 [ 91.003812][ T77] __mutex_lock+0x136/0xd70 [ 91.005533][ T77] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.007727][ T77] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.010473][ T77] ? __pfx___mutex_lock+0x10/0x10 [ 91.012889][ T77] ? __pfx_lock_release+0x10/0x10 [ 91.014912][ T77] fsnotify_destroy_mark+0x38/0x3c0 [ 91.016756][ T77] ? fsnotify_grab_connector+0x3e/0x240 [ 91.018764][ T77] fsnotify_destroy_marks+0x14a/0x660 [ 91.020543][ T77] dentry_unlink_inode+0x2e0/0x430 [ 91.022235][ T77] __dentry_kill+0x20d/0x630 [ 91.023746][ T77] ? shrink_kill+0x8d/0x2c0 [ 91.025329][ T77] shrink_kill+0xa9/0x2c0 [ 91.026818][ T77] shrink_dentry_list+0x2c0/0x5b0 [ 91.028801][ T77] prune_dcache_sb+0x10f/0x180 [ 91.030667][ T77] ? __pfx_prune_dcache_sb+0x10/0x10 [ 91.032689][ T77] ? list_lru_count_one+0x29/0x2e0 [ 91.034532][ T77] ? list_lru_count_one+0x283/0x2e0 [ 91.036219][ T77] ? list_lru_count_one+0x29/0x2e0 [ 91.037914][ T77] super_cache_scan+0x34f/0x4b0 [ 91.039689][ T77] do_shrink_slab+0x701/0x1160 [ 91.041448][ T77] ? shrink_slab+0x12b/0x14d0 [ 91.043128][ T77] shrink_slab+0x1093/0x14d0 [ 91.044894][ T77] ? shrink_slab+0x12b/0x14d0 [ 91.046607][ T77] ? __pfx_shrink_slab+0x10/0x10 [ 91.048768][ T77] ? shrink_node+0x3547/0x3de0 [ 91.051080][ T77] ? __pfx_lock_release+0x10/0x10 [ 91.053274][ T77] shrink_one+0x43b/0x850 [ 91.054882][ T77] ? shrink_node+0x3547/0x3de0 [ 91.056626][ T77] shrink_node+0x3799/0x3de0 [ 91.058304][ T77] ? shrink_node+0x3547/0x3de0 [ 91.059984][ T77] ? __pfx_lock_acquire+0x10/0x10 [ 91.061877][ T77] ? mem_cgroup_iter+0x3a/0x560 [ 91.063767][ T77] ? __pfx_lock_release+0x10/0x10 [ 91.065632][ T77] ? __pfx_shrink_node+0x10/0x10 [ 91.067495][ T77] ? mem_cgroup_iter+0x3a/0x560 [ 91.069577][ T77] ? mem_cgroup_iter+0x3e9/0x560 [ 91.071859][ T77] ? mem_cgroup_iter+0x3a/0x560 [ 91.073974][ T77] kswapd+0x1bcd/0x35a0 [ 91.075707][ T77] ? kswapd+0xbb4/0x35a0 [ 91.077356][ T77] ? __pfx_kswapd+0x10/0x10 [ 91.078999][ T77] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.081079][ T77] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.083265][ T77] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.085582][ T77] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.088033][ T77] ? __kthread_parkme+0x169/0x1d0 [ 91.090166][ T77] ? __pfx_kswapd+0x10/0x10 [ 91.091973][ T77] kthread+0x2f0/0x390 [ 91.093370][ T77] ? __pfx_kswapd+0x10/0x10 [ 91.094862][ T77] ? __pfx_kthread+0x10/0x10 [ 91.096658][ T77] ret_from_fork+0x4b/0x80 [ 91.098394][ T77] ? __pfx_kthread+0x10/0x10 [ 91.100129][ T77] ret_from_fork_asm+0x1a/0x30 [ 91.101980][ T77]