program: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40037e881}) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000580)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x4000842) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) write$binfmt_elf64(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x78) creat(&(0x7f0000000200)='./file1\x00', 0x42) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x1db) fcntl$setlease(r5, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="1c0000001e005f800040000000000000020000006000000000000800", 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000140)={0x2, 'xfrm0\x00', {}, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r9 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000480)="0000000000000034ff6943b80000000800000014b28a9c68ee21c757e2152994ccca053afb1f67dd65dd530700a28f28bf86f474fad8cb594ed9fabe", 0x3c, r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r8, 0x9, 0xc01}, &(0x7f0000000100)=0xc) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sync_file_range(r11, 0x8, 0xfffffffffffffffa, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) [ 89.753920][ T5108] Bluetooth: hci0: command tx timeout [ 91.038986][ T5125] loop0: detected capacity change from 0 to 8 [ 91.090799][ T5125] SQUASHFS error: Unable to read directory block [631:72] [ 91.140924][ T80] [ 91.141937][ T80] ====================================================== [ 91.145059][ T80] WARNING: possible circular locking dependency detected [ 91.148418][ T80] 6.11.0-rc5-syzkaller-00316-g6cd90e5ea72f #0 Not tainted [ 91.151217][ T80] ------------------------------------------------------ [ 91.153772][ T80] kswapd0/80 is trying to acquire lock: [ 91.155844][ T80] ffff88804c1b5930 (&group->mark_mutex){+.+.}-{3:3}, at: fsnotify_destroy_mark+0x38/0x3c0 [ 91.159485][ T80] [ 91.159485][ T80] but task is already holding lock: [ 91.162412][ T80] ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3720 [ 91.166567][ T80] [ 91.166567][ T80] which lock already depends on the new lock. [ 91.166567][ T80] [ 91.171561][ T80] [ 91.171561][ T80] the existing dependency chain (in reverse order) is: [ 91.174940][ T80] [ 91.174940][ T80] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 91.177639][ T80] lock_acquire+0x1ed/0x550 [ 91.179515][ T80] fs_reclaim_acquire+0x88/0x140 [ 91.181551][ T80] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 91.183985][ T80] __se_sys_inotify_add_watch+0x72e/0x1070 [ 91.186563][ T80] do_syscall_64+0xf3/0x230 [ 91.188890][ T80] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.191750][ T80] [ 91.191750][ T80] -> #0 (&group->mark_mutex){+.+.}-{3:3}: [ 91.195200][ T80] validate_chain+0x18e0/0x5900 [ 91.197371][ T80] __lock_acquire+0x137a/0x2040 [ 91.199493][ T80] lock_acquire+0x1ed/0x550 [ 91.201403][ T80] __mutex_lock+0x136/0xd70 [ 91.203287][ T80] fsnotify_destroy_mark+0x38/0x3c0 [ 91.205610][ T80] fsnotify_destroy_marks+0x14a/0x660 [ 91.207971][ T80] dentry_unlink_inode+0x2e0/0x430 [ 91.210467][ T80] __dentry_kill+0x20d/0x630 [ 91.212908][ T80] shrink_kill+0xa9/0x2c0 [ 91.215148][ T80] shrink_dentry_list+0x2c0/0x5b0 [ 91.217066][ T80] prune_dcache_sb+0x10f/0x180 [ 91.219007][ T80] super_cache_scan+0x34f/0x4b0 [ 91.220869][ T80] do_shrink_slab+0x701/0x1160 [ 91.222825][ T80] shrink_slab+0x1093/0x14d0 [ 91.224770][ T80] shrink_one+0x43b/0x850 [ 91.226816][ T80] shrink_node+0x3799/0x3de0 [ 91.228895][ T80] kswapd+0x1cbc/0x3720 [ 91.230985][ T80] kthread+0x2f0/0x390 [ 91.232830][ T80] ret_from_fork+0x4b/0x80 [ 91.234806][ T80] ret_from_fork_asm+0x1a/0x30 [ 91.236626][ T80] [ 91.236626][ T80] other info that might help us debug this: [ 91.236626][ T80] [ 91.240121][ T80] Possible unsafe locking scenario: [ 91.240121][ T80] [ 91.242710][ T80] CPU0 CPU1 [ 91.244734][ T80] ---- ---- [ 91.247114][ T80] lock(fs_reclaim); [ 91.249173][ T80] lock(&group->mark_mutex); [ 91.251974][ T80] lock(fs_reclaim); [ 91.254130][ T80] lock(&group->mark_mutex); [ 91.255591][ T80] [ 91.255591][ T80] *** DEADLOCK *** [ 91.255591][ T80] [ 91.258314][ T80] 2 locks held by kswapd0/80: [ 91.259934][ T80] #0: ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3720 [ 91.262981][ T80] #1: ffff888011bb40e0 (&type->s_umount_key#47){.+.+}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 91.267303][ T80] [ 91.267303][ T80] stack backtrace: [ 91.269879][ T80] CPU: 0 UID: 0 PID: 80 Comm: kswapd0 Not tainted 6.11.0-rc5-syzkaller-00316-g6cd90e5ea72f #0 [ 91.273563][ T80] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.277419][ T80] Call Trace: [ 91.278673][ T80] [ 91.279690][ T80] dump_stack_lvl+0x241/0x360 [ 91.281710][ T80] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.284073][ T80] ? print_circular_bug+0x130/0x1a0 [ 91.286389][ T80] check_noncircular+0x36a/0x4a0 [ 91.288231][ T80] ? __pfx_check_noncircular+0x10/0x10 [ 91.289983][ T80] validate_chain+0x18e0/0x5900 [ 91.291568][ T80] ? __pfx_validate_chain+0x10/0x10 [ 91.293384][ T80] ? __pfx_validate_chain+0x10/0x10 [ 91.295542][ T80] ? __pfx_validate_chain+0x10/0x10 [ 91.297701][ T80] ? mark_lock+0x9a/0x350 [ 91.299577][ T80] __lock_acquire+0x137a/0x2040 [ 91.301656][ T80] lock_acquire+0x1ed/0x550 [ 91.303569][ T80] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.305683][ T80] ? __pfx_lock_acquire+0x10/0x10 [ 91.307595][ T80] ? __pfx___might_resched+0x10/0x10 [ 91.309306][ T80] __mutex_lock+0x136/0xd70 [ 91.310915][ T80] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.312793][ T80] ? fsnotify_destroy_mark+0x38/0x3c0 [ 91.314781][ T80] ? __pfx___mutex_lock+0x10/0x10 [ 91.316679][ T80] ? __pfx_lock_release+0x10/0x10 [ 91.318640][ T80] fsnotify_destroy_mark+0x38/0x3c0 [ 91.320627][ T80] ? fsnotify_grab_connector+0x3e/0x240 [ 91.322713][ T80] fsnotify_destroy_marks+0x14a/0x660 [ 91.324789][ T80] dentry_unlink_inode+0x2e0/0x430 [ 91.326644][ T80] __dentry_kill+0x20d/0x630 [ 91.328332][ T80] ? shrink_kill+0x8d/0x2c0 [ 91.330157][ T80] shrink_kill+0xa9/0x2c0 [ 91.332107][ T80] shrink_dentry_list+0x2c0/0x5b0 [ 91.334563][ T80] prune_dcache_sb+0x10f/0x180 [ 91.336719][ T80] ? __pfx_prune_dcache_sb+0x10/0x10 [ 91.338748][ T80] ? list_lru_count_one+0x29/0x2e0 [ 91.340633][ T80] ? list_lru_count_one+0x283/0x2e0 [ 91.342586][ T80] ? list_lru_count_one+0x29/0x2e0 [ 91.344444][ T80] super_cache_scan+0x34f/0x4b0 [ 91.346165][ T80] do_shrink_slab+0x701/0x1160 [ 91.347925][ T80] ? shrink_slab+0x12b/0x14d0 [ 91.349729][ T80] shrink_slab+0x1093/0x14d0 [ 91.351409][ T80] ? shrink_slab+0x12b/0x14d0 [ 91.353343][ T80] ? __pfx_shrink_slab+0x10/0x10 [ 91.355443][ T80] ? shrink_node+0x3547/0x3de0 [ 91.357510][ T80] ? __pfx_lock_release+0x10/0x10 [ 91.359554][ T80] shrink_one+0x43b/0x850 [ 91.361399][ T80] ? shrink_node+0x3547/0x3de0 [ 91.363441][ T80] shrink_node+0x3799/0x3de0 [ 91.365361][ T80] ? shrink_node+0x3547/0x3de0 [ 91.367362][ T80] ? __pfx_lock_acquire+0x10/0x10 [ 91.369535][ T80] ? mem_cgroup_iter+0x3a/0x560 [ 91.371985][ T80] ? __pfx_lock_release+0x10/0x10 [ 91.374584][ T80] ? __pfx_shrink_node+0x10/0x10 [ 91.376470][ T80] ? mem_cgroup_iter+0x3a/0x560 [ 91.378256][ T80] ? mem_cgroup_iter+0x3e9/0x560 [ 91.379849][ T80] ? mem_cgroup_iter+0x3a/0x560 [ 91.381542][ T80] kswapd+0x1cbc/0x3720 [ 91.383057][ T80] ? kswapd+0xbf1/0x3720 [ 91.384644][ T80] ? __pfx_kswapd+0x10/0x10 [ 91.386397][ T80] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.388937][ T80] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.391453][ T80] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.393680][ T80] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.395796][ T80] ? __kthread_parkme+0x169/0x1d0 [ 91.397458][ T80] ? __pfx_kswapd+0x10/0x10 [ 91.399394][ T80] kthread+0x2f0/0x390 [ 91.401191][ T80] ? __pfx_kswapd+0x10/0x10 [ 91.403061][ T80] ? __pfx_kthread+0x10/0x10 [ 91.404761][ T80] ret_from_fork+0x4b/0x80 [ 91.406498][ T80] ? __pfx_kthread+0x10/0x10 [ 91.408100][ T80] ret_from_fork_asm+0x1a/0x30 [ 91.409673][ T80]