============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
rm/5300 is trying to acquire lock:
ffffffff8cc81038 (kernfs_rename_lock){-.-.}-{2:2}, at: kernfs_path_from_node+0x87/0xd10 fs/kernfs/dir.c:232

but task is already holding lock:
ffffffff8cc81038 (kernfs_rename_lock){-.-.}-{2:2}, at: kernfs_path_from_node+0x87/0xd10 fs/kernfs/dir.c:232

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(kernfs_rename_lock);
  lock(kernfs_rename_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by rm/5300:
 #0: ffff88807950cc58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #0: ffff88807950cc58 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15d/0x2b0 mm/util.c:518
 #1: ffffffff8cc81038 (kernfs_rename_lock){-.-.}-{2:2}, at: kernfs_path_from_node+0x87/0xd10 fs/kernfs/dir.c:232
 #2: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 #2: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
 #2: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2284 [inline]
 #2: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0 kernel/trace/bpf_trace.c:2324

stack backtrace:
CPU: 0 PID: 5300 Comm: rm Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x22e lib/dump_stack.c:106
 __lock_acquire+0x122f/0x7c50 kernel/locking/lockdep.c:-1
 lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5662
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
 kernfs_path_from_node+0x87/0xd10 fs/kernfs/dir.c:232
 kernfs_path include/linux/kernfs.h:595 [inline]
 cgroup_path include/linux/cgroup.h:674 [inline]
 get_mm_memcg_path+0xb9/0x360 mm/mmap_lock.c:82
 __mmap_lock_do_trace_acquire_returned+0x9b/0x330 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:137 [inline]
 stack_map_get_build_id_offset+0x68d/0x9c0 kernel/bpf/stackmap.c:144
 __bpf_get_stack+0x44d/0x4f0 kernel/bpf/stackmap.c:452
 ____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1880 [inline]
 bpf_get_stack_raw_tp+0x189/0x1c0 kernel/trace/bpf_trace.c:1870
 bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
 bpf_dispatcher_nop_func include/linux/bpf.h:1011 [inline]
 __bpf_prog_run include/linux/filter.h:603 [inline]
 bpf_prog_run include/linux/filter.h:610 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2285 [inline]
 bpf_trace_run2+0x1cd/0x3b0 kernel/trace/bpf_trace.c:2324
 trace_contention_end+0x13f/0x190 include/trace/events/lock.h:122
 __pv_queued_spin_lock_slowpath+0x7e8/0x9c0 kernel/locking/qspinlock.c:560
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:591 [inline]
 queued_spin_lock_slowpath+0x43/0x50 arch/x86/include/asm/qspinlock.h:51
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock+0x217/0x280 kernel/locking/spinlock_debug.c:115
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline]
 _raw_spin_lock_irqsave+0xb0/0xf0 kernel/locking/spinlock.c:162
 kernfs_path_from_node+0x87/0xd10 fs/kernfs/dir.c:232
 kernfs_path include/linux/kernfs.h:595 [inline]
 cgroup_path include/linux/cgroup.h:674 [inline]
 get_mm_memcg_path+0xb9/0x360 mm/mmap_lock.c:82
 __mmap_lock_do_trace_acquire_returned+0x9b/0x330 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_write_lock_killable include/linux/mmap_lock.h:88 [inline]
 vm_mmap_pgoff+0x28d/0x2b0 mm/util.c:518
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f4bc56af242
Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
RSP: 002b:00007ffeb2e7a0a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f4bc55bc000 RCX: 00007f4bc56af242
RDX: 0000000000000003 RSI: 000000000000ce98 RDI: 00007f4bc55bc000
RBP: 0000000000000032 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000000032 R11: 0000000000000206 R12: 00007ffeb2e7a168
R13: 00007f4bc568b5f0 R14: 00007ffeb2e7a8e0 R15: 00007f4bc55bc000
 </TASK>