program: syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = inotify_init() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0xfffffffffffffca2, {0xa, 0x0, 0x0, @mcast1}}, 0x24) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200, @vifc_lcl_ifindex=r7, @local}, 0x10) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x20000000, 0x0, @cisco=0x0}}) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4000842) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@noop={0x2a}, @generic={0x0, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @remote, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) [ 80.135159][ T5094] Bluetooth: hci0: command tx timeout [ 81.220054][ T5110] loop0: detected capacity change from 0 to 8 [ 81.257562][ T5110] SQUASHFS error: Unable to read directory block [631:26] [ 81.312813][ T5110] SQUASHFS error: Unable to read directory block [631:72] [ 81.320035][ T76] [ 81.321005][ T76] ====================================================== [ 81.323385][ T76] WARNING: possible circular locking dependency detected [ 81.325965][ T76] 6.11.0-rc5-syzkaller-00148-g3b9dfd9e5936 #0 Not tainted [ 81.328771][ T76] ------------------------------------------------------ [ 81.331727][ T76] kswapd0/76 is trying to acquire lock: [ 81.333660][ T76] ffff888011ced930 (&group->mark_mutex){+.+.}-{3:3}, at: fsnotify_destroy_mark+0x38/0x3c0 [ 81.337083][ T76] [ 81.337083][ T76] but task is already holding lock: [ 81.339788][ T76] ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3720 [ 81.342730][ T76] [ 81.342730][ T76] which lock already depends on the new lock. [ 81.342730][ T76] [ 81.347179][ T76] [ 81.347179][ T76] the existing dependency chain (in reverse order) is: [ 81.351757][ T76] [ 81.351757][ T76] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 81.355042][ T76] lock_acquire+0x1ed/0x550 [ 81.357123][ T76] fs_reclaim_acquire+0x88/0x140 [ 81.359287][ T76] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 81.361543][ T76] __se_sys_inotify_add_watch+0x72e/0x1070 [ 81.363959][ T76] do_syscall_64+0xf3/0x230 [ 81.365913][ T76] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.368384][ T76] [ 81.368384][ T76] -> #0 (&group->mark_mutex){+.+.}-{3:3}: [ 81.371333][ T76] validate_chain+0x18e0/0x5900 [ 81.373722][ T76] __lock_acquire+0x137a/0x2040 [ 81.376272][ T76] lock_acquire+0x1ed/0x550 [ 81.378588][ T76] __mutex_lock+0x136/0xd70 [ 81.380484][ T76] fsnotify_destroy_mark+0x38/0x3c0 [ 81.382615][ T76] fsnotify_destroy_marks+0x14a/0x660 [ 81.384854][ T76] dentry_unlink_inode+0x2e0/0x430 [ 81.386996][ T76] __dentry_kill+0x20d/0x630 [ 81.388795][ T76] shrink_kill+0xa9/0x2c0 [ 81.390779][ T76] shrink_dentry_list+0x2c0/0x5b0 [ 81.393378][ T76] prune_dcache_sb+0x10f/0x180 [ 81.396253][ T76] super_cache_scan+0x34f/0x4b0 [ 81.398496][ T76] do_shrink_slab+0x701/0x1160 [ 81.400546][ T76] shrink_slab+0x1093/0x14d0 [ 81.402528][ T76] shrink_one+0x43b/0x850 [ 81.404336][ T76] shrink_node+0x3799/0x3de0 [ 81.406358][ T76] kswapd+0x1cbc/0x3720 [ 81.408429][ T76] kthread+0x2f0/0x390 [ 81.410546][ T76] ret_from_fork+0x4b/0x80 [ 81.412600][ T76] ret_from_fork_asm+0x1a/0x30 [ 81.414644][ T76] [ 81.414644][ T76] other info that might help us debug this: [ 81.414644][ T76] [ 81.418484][ T76] Possible unsafe locking scenario: [ 81.418484][ T76] [ 81.421509][ T76] CPU0 CPU1 [ 81.423889][ T76] ---- ---- [ 81.425998][ T76] lock(fs_reclaim); [ 81.427637][ T76] lock(&group->mark_mutex); [ 81.430347][ T76] lock(fs_reclaim); [ 81.432819][ T76] lock(&group->mark_mutex); [ 81.434951][ T76] [ 81.434951][ T76] *** DEADLOCK *** [ 81.434951][ T76] [ 81.438668][ T76] 2 locks held by kswapd0/76: [ 81.440641][ T76] #0: ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3720 [ 81.443950][ T76] #1: ffff8880367480e0 (&type->s_umount_key#47){.+.+}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 81.447814][ T76] [ 81.447814][ T76] stack backtrace: [ 81.450313][ T76] CPU: 0 UID: 0 PID: 76 Comm: kswapd0 Not tainted 6.11.0-rc5-syzkaller-00148-g3b9dfd9e5936 #0 [ 81.454664][ T76] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.459023][ T76] Call Trace: [ 81.460359][ T76] [ 81.461492][ T76] dump_stack_lvl+0x241/0x360 [ 81.463425][ T76] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.465545][ T76] ? print_circular_bug+0x130/0x1a0 [ 81.467847][ T76] check_noncircular+0x36a/0x4a0 [ 81.470089][ T76] ? __pfx_check_noncircular+0x10/0x10 [ 81.472385][ T76] validate_chain+0x18e0/0x5900 [ 81.474376][ T76] ? __pfx_validate_chain+0x10/0x10 [ 81.476379][ T76] ? __pfx_validate_chain+0x10/0x10 [ 81.478477][ T76] ? __pfx_validate_chain+0x10/0x10 [ 81.480736][ T76] ? mark_lock+0x9a/0x350 [ 81.482777][ T76] __lock_acquire+0x137a/0x2040 [ 81.484963][ T76] lock_acquire+0x1ed/0x550 [ 81.486955][ T76] ? fsnotify_destroy_mark+0x38/0x3c0 [ 81.489059][ T76] ? __pfx_lock_acquire+0x10/0x10 [ 81.491019][ T76] ? __pfx___might_resched+0x10/0x10 [ 81.493020][ T76] __mutex_lock+0x136/0xd70 [ 81.494851][ T76] ? fsnotify_destroy_mark+0x38/0x3c0 [ 81.496944][ T76] ? fsnotify_destroy_mark+0x38/0x3c0 [ 81.499207][ T76] ? __pfx___mutex_lock+0x10/0x10 [ 81.501384][ T76] ? __pfx_lock_release+0x10/0x10 [ 81.503301][ T76] fsnotify_destroy_mark+0x38/0x3c0 [ 81.505312][ T76] ? fsnotify_grab_connector+0x3e/0x240 [ 81.507428][ T76] fsnotify_destroy_marks+0x14a/0x660 [ 81.509527][ T76] dentry_unlink_inode+0x2e0/0x430 [ 81.511916][ T76] __dentry_kill+0x20d/0x630 [ 81.514298][ T76] ? shrink_kill+0x8d/0x2c0 [ 81.516263][ T76] shrink_kill+0xa9/0x2c0 [ 81.517986][ T76] shrink_dentry_list+0x2c0/0x5b0 [ 81.519966][ T76] prune_dcache_sb+0x10f/0x180 [ 81.521890][ T76] ? __pfx_prune_dcache_sb+0x10/0x10 [ 81.523691][ T76] ? list_lru_count_one+0x29/0x2e0 [ 81.525539][ T76] ? list_lru_count_one+0x283/0x2e0 [ 81.527729][ T76] ? list_lru_count_one+0x29/0x2e0 [ 81.530052][ T76] super_cache_scan+0x34f/0x4b0 [ 81.532304][ T76] do_shrink_slab+0x701/0x1160 [ 81.534606][ T76] ? shrink_slab+0x12b/0x14d0 [ 81.536480][ T76] shrink_slab+0x1093/0x14d0 [ 81.538280][ T76] ? shrink_slab+0x12b/0x14d0 [ 81.540102][ T76] ? __pfx_shrink_slab+0x10/0x10 [ 81.542092][ T76] ? shrink_node+0x3547/0x3de0 [ 81.543928][ T76] ? __pfx_lock_release+0x10/0x10 [ 81.545811][ T76] shrink_one+0x43b/0x850 [ 81.547437][ T76] ? shrink_node+0x3547/0x3de0 [ 81.549465][ T76] shrink_node+0x3799/0x3de0 [ 81.551595][ T76] ? shrink_node+0x3547/0x3de0 [ 81.553668][ T76] ? __pfx_lock_acquire+0x10/0x10 [ 81.555708][ T76] ? mem_cgroup_iter+0x3a/0x560 [ 81.557581][ T76] ? __pfx_lock_release+0x10/0x10 [ 81.559516][ T76] ? __pfx_shrink_node+0x10/0x10 [ 81.561471][ T76] ? mem_cgroup_iter+0x3a/0x560 [ 81.563378][ T76] ? mem_cgroup_iter+0x3e9/0x560 [ 81.565368][ T76] ? mem_cgroup_iter+0x3a/0x560 [ 81.567725][ T76] kswapd+0x1cbc/0x3720 [ 81.569943][ T76] ? kswapd+0xbf1/0x3720 [ 81.571980][ T76] ? __pfx_kswapd+0x10/0x10 [ 81.573692][ T76] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.575919][ T76] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.578268][ T76] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.580643][ T76] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.582965][ T76] ? __kthread_parkme+0x169/0x1d0 [ 81.584955][ T76] ? __pfx_kswapd+0x10/0x10 [ 81.587198][ T76] kthread+0x2f0/0x390 [ 81.589168][ T76] ? __pfx_kswapd+0x10/0x10 [ 81.591234][ T76] ? __pfx_kthread+0x10/0x10 [ 81.593060][ T76] ret_from_fork+0x4b/0x80 [ 81.594795][ T76] ? __pfx_kthread+0x10/0x10 [ 81.596560][ T76] ret_from_fork_asm+0x1a/0x30 [ 81.598447][ T76]