program: syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000580)="$eJzslU9rE0EYxn+zO2kazaFnrxbbi7bZgvgN7AfwAxjStRYT/3QDmlAweunFg/glCn4KD4LePYgIXupBQQ8VTxWJzM474ywNRMVQAvPA8j7vM++fmVlm5mZxr6gDP4/2OixRQtHkvVJoYEVZ7XjB2m9ix4JP2vot0Z+L/Si2GAzfPLF0eKvd7ea7xWAKUQqmxVTISUn/cbMJ5PXjqqL4tzqzJ/3U7uzJoacVpT4pRnI59VXMgnxvQqh8/t8tasx6FeCVH83pv+ndM/s7J8akkt6gui3zR5K/yiqQ66u4+ijha+m8PdrrGHJdbjGjbdnPHYkyxjgvg5hzGkagUsa+ji5vS1gB1vq9u2vFYHhxp9fezrfz21m2cXn91Vk5ouOHsNPN11UwjcQQjYc5p41gvAZ8+D0+IoAKpmZwBpTLdSnucl49HyQ2IAlywxq27gvfvy5aSo9rXGARuD8ywxl2t5Yx1TQ3zNI2UaTitHQwTzgmYbEcuNS5093aR6Fc2gHa12gdUvNOJo5plG9c8cvfF7ssdlPsgdhDse7tcm+SLit8EW91BAs8aPf7u+XjZZnXMq9lS75zIl3da6jcTOpERERERERERMwJfgUAAP//B6hPCg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = inotify_init() r2 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r3) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4000842) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@norecovery}, {@data_err_abort}, {@dioread_nolock}, {@bh}, {@grpquota}]}, 0x1, 0x594, &(0x7f0000000bc0)="$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") r4 = creat(&(0x7f00000001c0)='./file1\x00', 0xd) write$P9_RUNLINKAT(r4, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) [ 71.500690][ T5091] Bluetooth: hci0: command tx timeout [ 72.490866][ T5105] loop0: detected capacity change from 0 to 8 [ 72.569931][ T5105] SQUASHFS error: Unable to read directory block [631:72] [ 72.607389][ T79] [ 72.608445][ T79] ====================================================== [ 72.611097][ T79] WARNING: possible circular locking dependency detected [ 72.613738][ T79] 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 Not tainted [ 72.616246][ T79] ------------------------------------------------------ [ 72.618704][ T79] kswapd0/79 is trying to acquire lock: [ 72.620650][ T79] ffff888012a21130 (&group->mark_mutex){+.+.}-{3:3}, at: fsnotify_destroy_mark+0x38/0x3c0 [ 72.624348][ T79] [ 72.624348][ T79] but task is already holding lock: [ 72.627184][ T79] ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbb4/0x35a0 [ 72.630286][ T79] [ 72.630286][ T79] which lock already depends on the new lock. [ 72.630286][ T79] [ 72.634166][ T79] [ 72.634166][ T79] the existing dependency chain (in reverse order) is: [ 72.637600][ T79] [ 72.637600][ T79] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 72.640375][ T79] lock_acquire+0x1ed/0x550 [ 72.642322][ T79] fs_reclaim_acquire+0x88/0x140 [ 72.644377][ T79] kmem_cache_alloc_noprof+0x3d/0x2a0 [ 72.646569][ T79] __se_sys_inotify_add_watch+0x72e/0x1070 [ 72.648975][ T79] do_syscall_64+0xf3/0x230 [ 72.650913][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.653317][ T79] [ 72.653317][ T79] -> #0 (&group->mark_mutex){+.+.}-{3:3}: [ 72.656257][ T79] validate_chain+0x18e0/0x5900 [ 72.658311][ T79] __lock_acquire+0x137a/0x2040 [ 72.660384][ T79] lock_acquire+0x1ed/0x550 [ 72.662325][ T79] __mutex_lock+0x136/0xd70 [ 72.664290][ T79] fsnotify_destroy_mark+0x38/0x3c0 [ 72.666523][ T79] fsnotify_destroy_marks+0x14a/0x660 [ 72.668781][ T79] dentry_unlink_inode+0x2e0/0x430 [ 72.670808][ T79] __dentry_kill+0x20d/0x630 [ 72.672627][ T79] shrink_kill+0xa9/0x2c0 [ 72.674358][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 72.676306][ T79] prune_dcache_sb+0x10f/0x180 [ 72.678187][ T79] super_cache_scan+0x34f/0x4b0 [ 72.680154][ T79] do_shrink_slab+0x701/0x1160 [ 72.682247][ T79] shrink_slab+0x1093/0x14d0 [ 72.684270][ T79] shrink_one+0x43b/0x850 [ 72.686222][ T79] shrink_node+0x3799/0x3de0 [ 72.688229][ T79] kswapd+0x1bcd/0x35a0 [ 72.690058][ T79] kthread+0x2f0/0x390 [ 72.691860][ T79] ret_from_fork+0x4b/0x80 [ 72.693697][ T79] ret_from_fork_asm+0x1a/0x30 [ 72.695761][ T79] [ 72.695761][ T79] other info that might help us debug this: [ 72.695761][ T79] [ 72.699769][ T79] Possible unsafe locking scenario: [ 72.699769][ T79] [ 72.702626][ T79] CPU0 CPU1 [ 72.704605][ T79] ---- ---- [ 72.706696][ T79] lock(fs_reclaim); [ 72.708256][ T79] lock(&group->mark_mutex); [ 72.710947][ T79] lock(fs_reclaim); [ 72.713395][ T79] lock(&group->mark_mutex); [ 72.715140][ T79] [ 72.715140][ T79] *** DEADLOCK *** [ 72.715140][ T79] [ 72.718283][ T79] 2 locks held by kswapd0/79: [ 72.720110][ T79] #0: ffffffff8ea2fd60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbb4/0x35a0 [ 72.723355][ T79] #1: ffff888000d480e0 (&type->s_umount_key#47){.+.+}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 72.727347][ T79] [ 72.727347][ T79] stack backtrace: [ 72.729646][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd0 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 72.733463][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.737580][ T79] Call Trace: [ 72.738881][ T79] [ 72.740068][ T79] dump_stack_lvl+0x241/0x360 [ 72.741951][ T79] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.743985][ T79] ? print_circular_bug+0x130/0x1a0 [ 72.745980][ T79] check_noncircular+0x36a/0x4a0 [ 72.747894][ T79] ? __pfx_check_noncircular+0x10/0x10 [ 72.750029][ T79] validate_chain+0x18e0/0x5900 [ 72.751923][ T79] ? __pfx_validate_chain+0x10/0x10 [ 72.753898][ T79] ? __pfx_validate_chain+0x10/0x10 [ 72.755879][ T79] ? __pfx_validate_chain+0x10/0x10 [ 72.757870][ T79] ? mark_lock+0x9a/0x350 [ 72.759520][ T79] __lock_acquire+0x137a/0x2040 [ 72.761372][ T79] lock_acquire+0x1ed/0x550 [ 72.763080][ T79] ? fsnotify_destroy_mark+0x38/0x3c0 [ 72.765178][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 72.767076][ T79] ? __pfx___might_resched+0x10/0x10 [ 72.769084][ T79] __mutex_lock+0x136/0xd70 [ 72.770821][ T79] ? fsnotify_destroy_mark+0x38/0x3c0 [ 72.772829][ T79] ? fsnotify_destroy_mark+0x38/0x3c0 [ 72.774909][ T79] ? __pfx___mutex_lock+0x10/0x10 [ 72.776814][ T79] ? __pfx_lock_release+0x10/0x10 [ 72.778714][ T79] fsnotify_destroy_mark+0x38/0x3c0 [ 72.780705][ T79] ? fsnotify_grab_connector+0x3e/0x240 [ 72.782856][ T79] fsnotify_destroy_marks+0x14a/0x660 [ 72.784681][ T79] dentry_unlink_inode+0x2e0/0x430 [ 72.786563][ T79] __dentry_kill+0x20d/0x630 [ 72.788280][ T79] ? shrink_kill+0x8d/0x2c0 [ 72.790071][ T79] shrink_kill+0xa9/0x2c0 [ 72.791740][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 72.793664][ T79] prune_dcache_sb+0x10f/0x180 [ 72.795345][ T79] ? __pfx_prune_dcache_sb+0x10/0x10 [ 72.797271][ T79] ? list_lru_count_one+0x29/0x2e0 [ 72.799159][ T79] ? list_lru_count_one+0x283/0x2e0 [ 72.801073][ T79] ? list_lru_count_one+0x29/0x2e0 [ 72.802981][ T79] super_cache_scan+0x34f/0x4b0 [ 72.804876][ T79] do_shrink_slab+0x701/0x1160 [ 72.806789][ T79] ? shrink_slab+0x12b/0x14d0 [ 72.808522][ T79] shrink_slab+0x1093/0x14d0 [ 72.810141][ T79] ? shrink_slab+0x12b/0x14d0 [ 72.811826][ T79] ? __pfx_shrink_slab+0x10/0x10 [ 72.813677][ T79] ? shrink_node+0x3547/0x3de0 [ 72.815510][ T79] ? __pfx_lock_release+0x10/0x10 [ 72.817452][ T79] shrink_one+0x43b/0x850 [ 72.819136][ T79] ? shrink_node+0x3547/0x3de0 [ 72.820942][ T79] shrink_node+0x3799/0x3de0 [ 72.822727][ T79] ? shrink_node+0x3547/0x3de0 [ 72.824480][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 72.826404][ T79] ? mem_cgroup_iter+0x3a/0x560 [ 72.828262][ T79] ? __pfx_lock_release+0x10/0x10 [ 72.830120][ T79] ? __pfx_shrink_node+0x10/0x10 [ 72.831964][ T79] ? mem_cgroup_iter+0x3a/0x560 [ 72.833805][ T79] ? mem_cgroup_iter+0x3e9/0x560 [ 72.835666][ T79] ? mem_cgroup_iter+0x3a/0x560 [ 72.837534][ T79] kswapd+0x1bcd/0x35a0 [ 72.839137][ T79] ? kswapd+0xbb4/0x35a0 [ 72.840788][ T79] ? __pfx_kswapd+0x10/0x10 [ 72.842561][ T79] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.844788][ T79] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.847068][ T79] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.849450][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 72.851715][ T79] ? __kthread_parkme+0x169/0x1d0 [ 72.853662][ T79] ? __pfx_kswapd+0x10/0x10 [ 72.855356][ T79] kthread+0x2f0/0x390 [ 72.856906][ T79] ? __pfx_kswapd+0x10/0x10 [ 72.858692][ T79] ? __pfx_kthread+0x10/0x10 [ 72.860490][ T79] ret_from_fork+0x4b/0x80 [ 72.862220][ T79] ? __pfx_kthread+0x10/0x10 [ 72.863987][ T79] ret_from_fork_asm+0x1a/0x30 [ 72.865791][ T79]