program: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) dup2(r2, r3) r4 = syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804c5a, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x3, 0x1f4, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x14, 0x5, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x8) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)={[{@type={'type', 0x3d, "f44a92f7"}}]}, 0x1, 0x23a, &(0x7f0000000540)="$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") r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1003, 0x7, 0x1, 0xc, 0x2, 0x310}}) creat(&(0x7f0000000300)='./file2\x00', 0xb4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x98041000) r7 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x4880, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000050a245d5cd5808000000305d58006a8a4e9c225392b9b700000002907800400000ffffff33e125deff1200907800000000"], 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r13, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000829bd700500000000000000000a000900ffffffffffff00000a0009000180c20000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 74.244134][ T4532] Bluetooth: hci0: command tx timeout [ 74.337452][ T5112] loop0: detected capacity change from 0 to 8 [ 74.347441][ T5112] ======================================================= [ 74.347441][ T5112] WARNING: The mand mount option has been deprecated and [ 74.347441][ T5112] and is ignored by this kernel. Remove the mand [ 74.347441][ T5112] option from the mount to silence this warning. [ 74.347441][ T5112] ======================================================= [ 74.413553][ T5112] SQUASHFS error: Unable to read inode 0xe3 [ 74.426962][ T5112] bridge0: port 3(syz_tun) entered blocking state [ 74.433000][ T74] [ 74.433929][ T74] ====================================================== [ 74.436485][ T74] WARNING: possible circular locking dependency detected [ 74.438815][ T74] 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 Not tainted [ 74.441272][ T74] ------------------------------------------------------ [ 74.443487][ T74] kswapd0/74 is trying to acquire lock: [ 74.445283][ T74] ffff888011fe1930 (&group->mark_mutex){+.+.}-{3:3}, at: fsnotify_destroy_mark+0x38/0x3c0 [ 74.448504][ T74] [ 74.448504][ T74] but task is already holding lock: [ 74.450901][ T74] ffffffff8ea37160 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3700 [ 74.453937][ T74] [ 74.453937][ T74] which lock already depends on the new lock. [ 74.453937][ T74] [ 74.457690][ T74] [ 74.457690][ T74] the existing dependency chain (in reverse order) is: [ 74.460991][ T74] [ 74.460991][ T74] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 74.463569][ T74] lock_acquire+0x1ed/0x550 [ 74.465563][ T74] fs_reclaim_acquire+0x88/0x140 [ 74.467335][ T74] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 74.469555][ T74] __se_sys_inotify_add_watch+0x728/0x1060 [ 74.472690][ T74] do_syscall_64+0xf3/0x230 [ 74.475544][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.478805][ T74] [ 74.478805][ T74] -> #0 (&group->mark_mutex){+.+.}-{3:3}: [ 74.482043][ T74] validate_chain+0x18ef/0x5920 [ 74.483962][ T74] __lock_acquire+0x1384/0x2050 [ 74.486045][ T74] lock_acquire+0x1ed/0x550 [ 74.488048][ T74] __mutex_lock+0x136/0xd70 [ 74.490161][ T74] fsnotify_destroy_mark+0x38/0x3c0 [ 74.492593][ T74] fsnotify_destroy_marks+0x14a/0x660 [ 74.495071][ T74] dentry_unlink_inode+0x2e0/0x430 [ 74.497404][ T74] __dentry_kill+0x20d/0x630 [ 74.499380][ T74] shrink_kill+0xa9/0x2c0 [ 74.501037][ T74] shrink_dentry_list+0x2c0/0x5b0 [ 74.503045][ T74] prune_dcache_sb+0x10f/0x180 [ 74.505133][ T74] super_cache_scan+0x34f/0x4b0 [ 74.507559][ T74] do_shrink_slab+0x701/0x1160 [ 74.510013][ T74] shrink_slab+0x1093/0x14d0 [ 74.511927][ T74] shrink_one+0x43b/0x850 [ 74.513958][ T74] shrink_node+0x3799/0x3de0 [ 74.515796][ T74] kswapd+0x1ca3/0x3700 [ 74.517718][ T74] kthread+0x2f0/0x390 [ 74.519569][ T74] ret_from_fork+0x4b/0x80 [ 74.521566][ T74] ret_from_fork_asm+0x1a/0x30 [ 74.523709][ T74] [ 74.523709][ T74] other info that might help us debug this: [ 74.523709][ T74] [ 74.528245][ T74] Possible unsafe locking scenario: [ 74.528245][ T74] [ 74.531667][ T74] CPU0 CPU1 [ 74.533834][ T74] ---- ---- [ 74.535668][ T74] lock(fs_reclaim); [ 74.537151][ T74] lock(&group->mark_mutex); [ 74.539519][ T74] lock(fs_reclaim); [ 74.542094][ T74] lock(&group->mark_mutex); [ 74.544046][ T74] [ 74.544046][ T74] *** DEADLOCK *** [ 74.544046][ T74] [ 74.547496][ T74] 2 locks held by kswapd0/74: [ 74.549165][ T74] #0: ffffffff8ea37160 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3700 [ 74.552351][ T74] #1: ffff88803f68e0e0 (&type->s_umount_key#47){.+.+}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 74.556418][ T74] [ 74.556418][ T74] stack backtrace: [ 74.558818][ T74] CPU: 0 UID: 0 PID: 74 Comm: kswapd0 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 74.563656][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.568749][ T74] Call Trace: [ 74.570222][ T74] [ 74.571701][ T74] dump_stack_lvl+0x241/0x360 [ 74.573694][ T74] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.575889][ T74] ? __pfx__printk+0x10/0x10 [ 74.577957][ T74] print_circular_bug+0x13a/0x1b0 [ 74.580105][ T74] check_noncircular+0x36a/0x4a0 [ 74.582202][ T74] ? __pfx_check_noncircular+0x10/0x10 [ 74.584297][ T74] validate_chain+0x18ef/0x5920 [ 74.586130][ T74] ? __pfx_validate_chain+0x10/0x10 [ 74.588227][ T74] ? __pfx_validate_chain+0x10/0x10 [ 74.590535][ T74] ? __pfx_validate_chain+0x10/0x10 [ 74.593176][ T74] ? mark_lock+0x9a/0x360 [ 74.595033][ T74] __lock_acquire+0x1384/0x2050 [ 74.597147][ T74] lock_acquire+0x1ed/0x550 [ 74.598824][ T74] ? fsnotify_destroy_mark+0x38/0x3c0 [ 74.600892][ T74] ? __pfx_lock_acquire+0x10/0x10 [ 74.602683][ T74] ? __pfx___might_resched+0x10/0x10 [ 74.604672][ T74] __mutex_lock+0x136/0xd70 [ 74.606443][ T74] ? fsnotify_destroy_mark+0x38/0x3c0 [ 74.609317][ T74] ? fsnotify_destroy_mark+0x38/0x3c0 [ 74.612452][ T74] ? __pfx___mutex_lock+0x10/0x10 [ 74.614595][ T74] ? __pfx_lock_release+0x10/0x10 [ 74.616472][ T74] fsnotify_destroy_mark+0x38/0x3c0 [ 74.618356][ T74] ? fsnotify_grab_connector+0x3e/0x240 [ 74.620953][ T74] fsnotify_destroy_marks+0x14a/0x660 [ 74.623089][ T74] dentry_unlink_inode+0x2e0/0x430 [ 74.625091][ T74] __dentry_kill+0x20d/0x630 [ 74.626811][ T74] ? shrink_kill+0x8d/0x2c0 [ 74.628535][ T74] shrink_kill+0xa9/0x2c0 [ 74.630235][ T74] shrink_dentry_list+0x2c0/0x5b0 [ 74.632390][ T74] prune_dcache_sb+0x10f/0x180 [ 74.634377][ T74] ? __pfx_prune_dcache_sb+0x10/0x10 [ 74.636762][ T74] ? list_lru_count_one+0x29/0x2e0 [ 74.638793][ T74] ? list_lru_count_one+0x283/0x2e0 [ 74.640758][ T74] ? list_lru_count_one+0x29/0x2e0 [ 74.642737][ T74] super_cache_scan+0x34f/0x4b0 [ 74.644675][ T74] do_shrink_slab+0x701/0x1160 [ 74.646380][ T74] ? shrink_slab+0x12b/0x14d0 [ 74.648124][ T74] shrink_slab+0x1093/0x14d0 [ 74.649876][ T74] ? shrink_slab+0x12b/0x14d0 [ 74.651757][ T74] ? __pfx_shrink_slab+0x10/0x10 [ 74.654224][ T74] ? shrink_node+0x3547/0x3de0 [ 74.656436][ T74] ? __pfx_lock_release+0x10/0x10 [ 74.658459][ T74] shrink_one+0x43b/0x850 [ 74.660321][ T74] ? shrink_node+0x3547/0x3de0 [ 74.661940][ T74] shrink_node+0x3799/0x3de0 [ 74.663472][ T74] ? shrink_node+0x3547/0x3de0 [ 74.665201][ T74] ? __pfx_lock_acquire+0x10/0x10 [ 74.667078][ T74] ? mem_cgroup_iter+0x3d/0x420 [ 74.669130][ T74] ? __pfx_lock_release+0x10/0x10 [ 74.671332][ T74] ? __pfx_shrink_node+0x10/0x10 [ 74.673544][ T74] ? mem_cgroup_iter+0x3d/0x420 [ 74.675790][ T74] kswapd+0x1ca3/0x3700 [ 74.677909][ T74] ? kswapd+0xbf1/0x3700 [ 74.679734][ T74] ? __pfx_kswapd+0x10/0x10 [ 74.681398][ T74] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.683447][ T74] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.685799][ T74] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.688195][ T74] ? __pfx_autoremove_wake_function+0x10/0x10 [ 74.690568][ T74] ? __kthread_parkme+0x169/0x1d0 [ 74.692645][ T74] ? __pfx_kswapd+0x10/0x10 [ 74.694612][ T74] kthread+0x2f0/0x390 [ 74.696488][ T74] ? __pfx_kswapd+0x10/0x10 [ 74.698368][ T74] ? __pfx_kthread+0x10/0x10 [ 74.700266][ T74] ret_from_fork+0x4b/0x80 [ 74.701986][ T74] ? __pfx_kthread+0x10/0x10 [ 74.703744][ T74] ret_from_fork_asm+0x1a/0x30 [ 74.705745][ T74] [ 74.707434][ T5112] bridge0: port 3(syz_tun) entered disabled state [ 74.710453][ T5112] syz_tun: entered allmulticast mode [ 74.713346][ T5112] syz_tun: entered promiscuous mode [ 74.715484][ T5112] bridge0: port 3(syz_tun) entered blocking state [ 74.717871][ T5112] bridge0: port 3(syz_tun) entered forwarding state