program: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) [ 77.001320][ T4636] Bluetooth: hci0: command tx timeout [ 77.005731][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.009034][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.124656][ T5303] loop0: detected capacity change from 0 to 1024 [ 77.164417][ T5303] EXT4-fs: Ignoring removed orlov option [ 77.306451][ T5303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.388767][ T5303] jffs2: notice: (5303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.445964][ T69] [ 77.447041][ T69] ====================================================== [ 77.450042][ T69] WARNING: possible circular locking dependency detected [ 77.452844][ T69] syzkaller #0 Not tainted [ 77.454755][ T69] ------------------------------------------------------ [ 77.457709][ T69] kswapd0/69 is trying to acquire lock: [ 77.460024][ T69] ffff8880136971e0 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x62/0x390 [ 77.463658][ T69] [ 77.463658][ T69] but task is already holding lock: [ 77.466755][ T69] ffffffff8ec86cc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9b6/0x31c0 [ 77.470156][ T69] [ 77.470156][ T69] which lock already depends on the new lock. [ 77.470156][ T69] [ 77.474513][ T69] [ 77.474513][ T69] the existing dependency chain (in reverse order) is: [ 77.478554][ T69] [ 77.478554][ T69] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 77.481656][ T69] fs_reclaim_acquire+0x71/0x100 [ 77.484007][ T69] kmem_cache_alloc_noprof+0x64/0x5f0 [ 77.486588][ T69] jffs2_do_read_inode+0x33f/0x6a0 [ 77.488873][ T69] jffs2_iget+0x228/0xcc0 [ 77.490904][ T69] jffs2_do_fill_super+0x59d/0xc50 [ 77.493322][ T69] mtd_get_sb+0x18a/0x410 [ 77.495414][ T69] get_tree_mtd+0x597/0x7d0 [ 77.497567][ T69] vfs_get_tree+0x92/0x2a0 [ 77.499663][ T69] do_new_mount+0x319/0xdc0 [ 77.501789][ T69] __se_sys_mount+0x31d/0x420 [ 77.504028][ T69] do_syscall_64+0x174/0x580 [ 77.506216][ T69] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.508919][ T69] [ 77.508919][ T69] -> #0 (&f->sem){+.+.}-{4:4}: [ 77.511842][ T69] __lock_acquire+0x1520/0x2cf0 [ 77.514165][ T69] lock_acquire+0x106/0x350 [ 77.516259][ T69] __mutex_lock+0x19d/0x1550 [ 77.518431][ T69] jffs2_do_clear_inode+0x62/0x390 [ 77.520689][ T69] evict+0x624/0xb50 [ 77.522599][ T69] prune_icache_sb+0x223/0x2d0 [ 77.524918][ T69] super_cache_scan+0x38d/0x4a0 [ 77.527122][ T69] do_shrink_slab+0x6d0/0x10e0 [ 77.529360][ T69] shrink_slab+0x838/0x1220 [ 77.531444][ T69] shrink_one+0x2a2/0x730 [ 77.533501][ T69] shrink_node+0x3303/0x3b60 [ 77.535712][ T69] kswapd+0x17b6/0x31c0 [ 77.537679][ T69] kthread+0x388/0x470 [ 77.539598][ T69] ret_from_fork+0x514/0xb70 [ 77.541766][ T69] ret_from_fork_asm+0x1a/0x30 [ 77.543952][ T69] [ 77.543952][ T69] other info that might help us debug this: [ 77.543952][ T69] [ 77.548300][ T69] Possible unsafe locking scenario: [ 77.548300][ T69] [ 77.551380][ T69] CPU0 CPU1 [ 77.553611][ T69] ---- ---- [ 77.555750][ T69] lock(fs_reclaim); [ 77.557317][ T69] lock(&f->sem); [ 77.559733][ T69] lock(fs_reclaim); [ 77.562192][ T69] lock(&f->sem); [ 77.563688][ T69] [ 77.563688][ T69] *** DEADLOCK *** [ 77.563688][ T69] [ 77.566817][ T69] 2 locks held by kswapd0/69: [ 77.568759][ T69] #0: ffffffff8ec86cc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9b6/0x31c0 [ 77.572261][ T69] #1: ffff8880342980d8 (&type->s_umount_key#53){.+.+}-{4:4}, at: super_cache_scan+0x91/0x4a0 [ 77.576948][ T69] [ 77.576948][ T69] stack backtrace: [ 77.579479][ T69] CPU: 0 UID: 0 PID: 69 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 77.579492][ T69] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.579498][ T69] Call Trace: [ 77.579505][ T69] [ 77.579510][ T69] dump_stack_lvl+0xe8/0x150 [ 77.579527][ T69] print_circular_bug+0x2e1/0x300 [ 77.579543][ T69] check_noncircular+0x12e/0x150 [ 77.579559][ T69] __lock_acquire+0x1520/0x2cf0 [ 77.579570][ T69] ? ret_from_fork_asm+0x1a/0x30 [ 77.579585][ T69] ? jffs2_do_clear_inode+0x62/0x390 [ 77.579597][ T69] lock_acquire+0x106/0x350 [ 77.579609][ T69] ? jffs2_do_clear_inode+0x62/0x390 [ 77.579624][ T69] __mutex_lock+0x19d/0x1550 [ 77.579637][ T69] ? jffs2_do_clear_inode+0x62/0x390 [ 77.579650][ T69] ? jffs2_do_clear_inode+0x62/0x390 [ 77.579663][ T69] ? __pfx___mutex_lock+0x10/0x10 [ 77.579673][ T69] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.579684][ T69] ? jffs2_xattr_delete_inode+0x59/0x2d0 [ 77.579696][ T69] ? lockdep_hardirqs_on+0x7a/0x110 [ 77.579714][ T69] jffs2_do_clear_inode+0x62/0x390 [ 77.579727][ T69] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 77.579739][ T69] evict+0x624/0xb50 [ 77.579752][ T69] ? __pfx_evict+0x10/0x10 [ 77.579764][ T69] ? __pfx_inode_lru_isolate+0x10/0x10 [ 77.579775][ T69] ? __pfx_inode_lru_isolate+0x10/0x10 [ 77.579785][ T69] ? list_lru_walk_one+0x3c/0x50 [ 77.579797][ T69] prune_icache_sb+0x223/0x2d0 [ 77.579808][ T69] ? __pfx_prune_icache_sb+0x10/0x10 [ 77.579818][ T69] ? list_lru_count_one+0x27/0x2c0 [ 77.579827][ T69] ? list_lru_count_one+0x27/0x2c0 [ 77.579836][ T69] ? list_lru_count_one+0x27/0x2c0 [ 77.579846][ T69] ? list_lru_count_one+0x264/0x2c0 [ 77.579856][ T69] super_cache_scan+0x38d/0x4a0 [ 77.579871][ T69] do_shrink_slab+0x6d0/0x10e0 [ 77.579886][ T69] shrink_slab+0x838/0x1220 [ 77.579897][ T69] ? shrink_slab+0x1e9/0x1220 [ 77.579908][ T69] ? __pfx_shrink_slab+0x10/0x10 [ 77.579920][ T69] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 77.579931][ T69] ? shrink_node+0x2ed4/0x3b60 [ 77.579942][ T69] shrink_one+0x2a2/0x730 [ 77.579953][ T69] ? shrink_node+0x2ed4/0x3b60 [ 77.579963][ T69] shrink_node+0x3303/0x3b60 [ 77.579975][ T69] ? shrink_node+0x2ed4/0x3b60 [ 77.579988][ T69] ? percpu_ref_put+0x19/0x180 [ 77.580000][ T69] ? percpu_ref_put+0x19/0x180 [ 77.580011][ T69] ? __pfx_shrink_node+0x10/0x10 [ 77.580021][ T69] ? percpu_ref_put+0x19/0x180 [ 77.580032][ T69] ? percpu_ref_put+0x19/0x180 [ 77.580044][ T69] ? mem_cgroup_iter+0x410/0x440 [ 77.580057][ T69] ? mem_cgroup_iter+0x3b/0x440 [ 77.580070][ T69] kswapd+0x17b6/0x31c0 [ 77.580085][ T69] ? kswapd+0x9b6/0x31c0 [ 77.580099][ T69] ? __pfx_kswapd+0x10/0x10 [ 77.580110][ T69] ? trace_contention_end+0x3d/0x140 [ 77.580120][ T69] ? __lock_acquire+0x683/0x2cf0 [ 77.580132][ T69] ? kthread_affine_node+0x2b2/0x360 [ 77.580145][ T69] ? __mutex_unlock_slowpath+0x731/0x900 [ 77.580161][ T69] ? __pfx_autoremove_wake_function+0x10/0x10 [ 77.580171][ T69] ? __kthread_parkme+0x71/0x1f0 [ 77.580182][ T69] ? __kthread_parkme+0x196/0x1f0 [ 77.580193][ T69] kthread+0x388/0x470 [ 77.580205][ T69] ? __pfx_kswapd+0x10/0x10 [ 77.580216][ T69] ? __pfx_kthread+0x10/0x10 [ 77.580228][ T69] ret_from_fork+0x514/0xb70 [ 77.580242][ T69] ? __pfx_ret_from_fork+0x10/0x10 [ 77.580254][ T69] ? __switch_to+0xc89/0x1420 [ 77.580265][ T69] ? __pfx_kthread+0x10/0x10 [ 77.580277][ T69] ret_from_fork_asm+0x1a/0x30 [ 77.580293][ T69]