program: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000200020000000000000000000084020000ff"], 0x0, 0x26}, 0x28) r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000680)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x321042) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000006c0)={"8dc2b9ec", 0x200, 0x9, 0x5, 0xfffffffc, 0x93b, "efb99a53e1619b0a9066af17cda925", "c7e3c0e7", "94037ff0", "0898fcc1", ["2fca7bc5b2c6d4fbb57daf49", "f28f133b6c97a6eff88ae76a", "e252715d65490765e6a0783a", "66aefc211179be7be935b7eb"]}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000780)='./file0\x00', 0x1, &(0x7f0000000000)={[{@mblk_io_submit}, {@quota}, {@i_version}]}, 0x1, 0x74d, &(0x7f00000007c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000200020000000000000000000084020000ff"], 0x0, 0x26}, 0x28) (async) io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) syz_mount_image$ext4(&(0x7f0000000680)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$eJzs3U9vI2cZAPBnHDu76QYSoIeC1D+ilbIV1N50aRtxaIuEuFUClfsSZb1RtE68ip2yiVaw+wFQJYSg4tYTFyQ+ABLqjStCqgQXThwQqMAuHCoEHTTjyQZnx43Tje3F/v2kN/N/nue1PePxzJuZAGbWMxHxekTMRcTzEbFUjK8UJW73Sjbfvbu3NrKSRJq++bckkmJcNltSlMyFYrHzvU6pzv7B9fVWq7lbDDe62zcanf2DF7a21zebm82dy5dXX157Ze2ltUslS1eHqNmdvqGsXq9+/U8/fvtn33j1V1/+7h+v/OXi97J8F4vph/UodXGIcAP0XpNa9lrcl2W/+8lX+UiZK+pTO3HOhbHkAwDAx8uO8T8bEV/Mj/+XYm6oY+ueZKSZAQAAAGclfW0x/p1EpAAAAMDUquRtYJNKvWgLsBiVSr3ea8P7eDxWabU73S9da+/tXO21lV2OWuXaVqt5ab7XpnY5akk2vJr3Hw2/eH846WsD/KOlhXx6faPdujq50x4AAAAwUy4c+/3/z6Xe7/+PcSdN03RsCQIAAABnY3nSCQAAAAAj9+Dv/3cnkgcAAAAwOq7/AwAAwFT75htvZCW9d/fWxlxEXH1rf+96+61fR7Nzvb69t1HfaO/eqG+225ut9FzE9knra7XbN74SO3s3G91mp9vo7B9c2W7v7XSvbPU9AhsAAAAYo888/d7vk4i4/dWFvGTmsz9zAxbotRWojC9DYFSG35Bt8jBtBn3NP6g60jyA8bNVw+yq9TrJyXP+yz3/YUqdtAMY2HjnNw8V1oNEAABgjFY+X379v3p0bgCYUq7qw+wqvf5vpwAzwfV/mF21U7QABKbPwhDznO9vAnDUXGDo6/+Hl/rn3QgEAAAmZDEvSaVenPZfjMqHaU8sRy25ttVqXoqIT0fE75Zq57Lh1XzJZJh/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8rtyJ5ECAAAAUy2i8uekeKDXytJzi8fPD8wnHy7l3fzpAG/+5OZ6t7u7mo3/ezE+ovtOMf7F05x58JBhAAAAGJX8d/oPiu7qpLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNrcu3tr47CMM+4HX4uI5bL41Tifd89HLSIe+0cS1cOFno5IImLuDOLfvhMRT5TFT7K0YrnIoi9+RFQiYiHPYuTxn0zTtDT+hYeODrPtvWz/83rZ9leJZ/Ju+fZfLcrDGrz/q9zf/82VxM/2PJ8aMsYX3v9Fo3zKud70avn+5zB+MiD+s2WrLHlRvvPtg4NBuaXvRqyUfv8kfbEa3e0bjc7+wQtb2+ubzc3mzuXLqy+vvbL20tqlxrWtVrP4Wxrjh0/+8qNB8fPvlgHxl/vrv368/s8druAE/3n/5t3PHYX731XEB3ciLj4bH6Xpg+//E/3x+17aufh+MVdvRSsRb/+1mLZyLP5TP//tU4Nyy+JfHVD/k97/iydXPff8t+73pkMuAgCMUGf/4Pp6q9XcPX3PwumWeidN008c65Q92RHzgEl/+Gmv4mcQKzs+OoOcHx+U6qPc89ppZk7PlX3YzuIt+P/sqT78x6Yy+BN+Rj0T3S0BAAAjcHTQP+lMAAAAAAAAAAAAAAAAAAAAYHaN44Znx2Pe7nXmJ1BdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB/hsAAP//Nj3bgA==") (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x321042) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000006c0)={"8dc2b9ec", 0x200, 0x9, 0x5, 0xfffffffc, 0x93b, "efb99a53e1619b0a9066af17cda925", "c7e3c0e7", "94037ff0", "0898fcc1", ["2fca7bc5b2c6d4fbb57daf49", "f28f133b6c97a6eff88ae76a", "e252715d65490765e6a0783a", "66aefc211179be7be935b7eb"]}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00'}) (async) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async) chmod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe9) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) (async) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000780)='./file0\x00', 0x1, &(0x7f0000000000)={[{@mblk_io_submit}, {@quota}, {@i_version}]}, 0x1, 0x74d, &(0x7f00000007c0)="$eJzs3c1rXFUbAPDnTpNOP97XpOCmIjjQhYXSiU1rqSBS0YUUK0XduWinmWkomemUzKQ0oWIrguBKpLj2Y+XOf0B0ozuXgmtXUihS6kYQRu5kJk4zd5qkzWTU+f3gDufce5Nzn/txzknO4U4AY6uQfuQiDkbEx0nEVGd9EhGT7dRExOnV/e7fuzGXLkm0Wm/9lrT3SfPR8zOp/auZ3d31R3L95TaWVxZK1WplsZOfadauzjSWV45erpXmK/OVK7MnXzg+e2r2+VOz2xJncjPijw/euHjm61e/vP3+j7+8+e6ZZ5I4vRr/uji2SyEKnXMymZ7CB7yy3YWNWDLqA+CRpI/mrtWnPA7GVOxqpwCA/7L3IqIFAIyZRPsPAGOm+3+A7tjeMMbB/snuvhwRe7Lin+iM2e1pj4Puu588MDKSRMT0NpRfiIjr73z4TbrEkMYhAbLcvBX5uDBd6K//kr45C1v1XPqRf/g+hXV59R/snO/S/s+prP5Pbq3/Exn9n3zGs/soNn7+c3e2oZiB0v7fi5n937VJa9O7Orn/t/t8k8mly9VKWrc9ERGHYzKf5o89pIwTn7z0w6Bte3v6f+mSlt/tC3aO487Eujq0XGqWHifmXndvRTw1kRV/snb9kwH933ObLKP5/dNfDNpW2DD+4Wp9HvFs5vX/e0Zb0jM/MR998xNn2vfDTPeu6Ff8aOrAoPJHHX96/fc9PP7ppHe+ZmPrZfz06Z+vDdq2cfzZ9//u5O12ujvJ9Hqp2Vw8FrE7eb1/fc8U0m6+u38a/+FDEfcvTg2s/7Lu//RvwgubjH/hs68uPnr8w5XGX97S9d964tDP32bH0+rMNt7w+p9opw531mym/tvsAT7OuQMAAAAAAAAAAAAAAAAAAAAAAACAzcpFxP8iyRXX0rlcsbj68r8nY1+uWm80j1yqL10pp9va7z/Ndd90OdXzPtRjnffhd/Oz6/LHI+JARNzO723ni3P1annUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAx/7s7/9v+zU/6qMDAIZmz6gPAADYcdp/ABg/2n8AGD/afwAYP9p/ABg/2n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG7NzZs+nS+v3ejbk0X762vLRQv3a0XGksFGtLc8W5+uLV4ny9Pl+tFOfqtY1+X7Vevzp7MpauzzQrjeZMY3nlfK2+dKV5/nKtNF85X5nckagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGsayysLpWq1sighISGxlhh1zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7/BXAAAA//8Ycx0V") (async) [ 86.615441][ T5309] loop0: detected capacity change from 0 to 512 [ 86.621098][ T4637] Bluetooth: hci0: command tx timeout [ 86.705237][ T5309] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 86.718159][ T5309] jffs2: notice: (5309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.776679][ T75] [ 86.777813][ T75] ====================================================== [ 86.780648][ T75] WARNING: possible circular locking dependency detected [ 86.783504][ T75] syzkaller #0 Not tainted [ 86.785411][ T75] ------------------------------------------------------ [ 86.788414][ T75] kswapd0/75 is trying to acquire lock: [ 86.790909][ T75] ffff888013377760 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x62/0x390 [ 86.794954][ T75] [ 86.794954][ T75] but task is already holding lock: [ 86.798216][ T75] ffffffff8ec86cc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9b6/0x31c0 [ 86.801781][ T75] [ 86.801781][ T75] which lock already depends on the new lock. [ 86.801781][ T75] [ 86.806119][ T75] [ 86.806119][ T75] the existing dependency chain (in reverse order) is: [ 86.809491][ T75] [ 86.809491][ T75] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 86.812602][ T75] fs_reclaim_acquire+0x71/0x100 [ 86.815043][ T75] kmem_cache_alloc_noprof+0x64/0x5f0 [ 86.817630][ T75] jffs2_do_read_inode+0x33f/0x6a0 [ 86.820064][ T75] jffs2_iget+0x228/0xcc0 [ 86.822186][ T75] jffs2_do_fill_super+0x59d/0xc50 [ 86.824550][ T75] mtd_get_sb+0x18a/0x410 [ 86.826552][ T75] get_tree_mtd+0x597/0x7d0 [ 86.828680][ T75] vfs_get_tree+0x92/0x2a0 [ 86.830820][ T75] do_new_mount+0x319/0xdc0 [ 86.832968][ T75] __se_sys_mount+0x31d/0x420 [ 86.835097][ T75] do_syscall_64+0x174/0x580 [ 86.837343][ T75] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.840090][ T75] [ 86.840090][ T75] -> #0 (&f->sem){+.+.}-{4:4}: [ 86.843065][ T75] __lock_acquire+0x1520/0x2cf0 [ 86.845343][ T75] lock_acquire+0x106/0x350 [ 86.847376][ T75] __mutex_lock+0x19d/0x1550 [ 86.849402][ T75] jffs2_do_clear_inode+0x62/0x390 [ 86.851598][ T75] evict+0x624/0xb50 [ 86.853367][ T75] prune_icache_sb+0x223/0x2d0 [ 86.855509][ T75] super_cache_scan+0x38d/0x4a0 [ 86.857724][ T75] do_shrink_slab+0x6d0/0x10e0 [ 86.860013][ T75] shrink_slab+0x838/0x1220 [ 86.862131][ T75] shrink_one+0x2a2/0x730 [ 86.864131][ T75] shrink_node+0x3303/0x3b60 [ 86.866125][ T75] kswapd+0x17b6/0x31c0 [ 86.867875][ T75] kthread+0x388/0x470 [ 86.869819][ T75] ret_from_fork+0x514/0xb70 [ 86.872037][ T75] ret_from_fork_asm+0x1a/0x30 [ 86.874341][ T75] [ 86.874341][ T75] other info that might help us debug this: [ 86.874341][ T75] [ 86.878475][ T75] Possible unsafe locking scenario: [ 86.878475][ T75] [ 86.881527][ T75] CPU0 CPU1 [ 86.883770][ T75] ---- ---- [ 86.886031][ T75] lock(fs_reclaim); [ 86.887714][ T75] lock(&f->sem); [ 86.890425][ T75] lock(fs_reclaim); [ 86.893114][ T75] lock(&f->sem); [ 86.894752][ T75] [ 86.894752][ T75] *** DEADLOCK *** [ 86.894752][ T75] [ 86.897956][ T75] 2 locks held by kswapd0/75: [ 86.899758][ T75] #0: ffffffff8ec86cc0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9b6/0x31c0 [ 86.903020][ T75] #1: ffff8880381de0d8 (&type->s_umount_key#52){.+.+}-{4:4}, at: super_cache_scan+0x91/0x4a0 [ 86.907118][ T75] [ 86.907118][ T75] stack backtrace: [ 86.909426][ T75] CPU: 0 UID: 0 PID: 75 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 86.909440][ T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.909446][ T75] Call Trace: [ 86.909453][ T75] [ 86.909458][ T75] dump_stack_lvl+0xe8/0x150 [ 86.909475][ T75] print_circular_bug+0x2e1/0x300 [ 86.909491][ T75] check_noncircular+0x12e/0x150 [ 86.909506][ T75] __lock_acquire+0x1520/0x2cf0 [ 86.909519][ T75] ? ret_from_fork_asm+0x1a/0x30 [ 86.909536][ T75] ? jffs2_do_clear_inode+0x62/0x390 [ 86.909550][ T75] lock_acquire+0x106/0x350 [ 86.909561][ T75] ? jffs2_do_clear_inode+0x62/0x390 [ 86.909572][ T75] __mutex_lock+0x19d/0x1550 [ 86.909580][ T75] ? jffs2_do_clear_inode+0x62/0x390 [ 86.909589][ T75] ? jffs2_do_clear_inode+0x62/0x390 [ 86.909597][ T75] ? __pfx___mutex_lock+0x10/0x10 [ 86.909606][ T75] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.909616][ T75] ? jffs2_xattr_delete_inode+0x59/0x2d0 [ 86.909626][ T75] ? lockdep_hardirqs_on+0x7a/0x110 [ 86.909637][ T75] jffs2_do_clear_inode+0x62/0x390 [ 86.909651][ T75] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 86.909664][ T75] evict+0x624/0xb50 [ 86.909679][ T75] ? __pfx_evict+0x10/0x10 [ 86.909692][ T75] ? __pfx_inode_lru_isolate+0x10/0x10 [ 86.909700][ T75] ? __pfx_inode_lru_isolate+0x10/0x10 [ 86.909706][ T75] ? list_lru_walk_one+0x3c/0x50 [ 86.909715][ T75] prune_icache_sb+0x223/0x2d0 [ 86.909722][ T75] ? __pfx_prune_icache_sb+0x10/0x10 [ 86.909728][ T75] ? list_lru_count_one+0x27/0x2c0 [ 86.909735][ T75] ? list_lru_count_one+0x27/0x2c0 [ 86.909741][ T75] ? list_lru_count_one+0x27/0x2c0 [ 86.909751][ T75] ? list_lru_count_one+0x264/0x2c0 [ 86.909761][ T75] super_cache_scan+0x38d/0x4a0 [ 86.909776][ T75] do_shrink_slab+0x6d0/0x10e0 [ 86.909789][ T75] shrink_slab+0x838/0x1220 [ 86.909799][ T75] ? shrink_slab+0x1e9/0x1220 [ 86.909810][ T75] ? __pfx_shrink_slab+0x10/0x10 [ 86.909822][ T75] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 86.909833][ T75] ? shrink_node+0x2ed4/0x3b60 [ 86.909843][ T75] shrink_one+0x2a2/0x730 [ 86.909879][ T75] ? shrink_node+0x2ed4/0x3b60 [ 86.909890][ T75] shrink_node+0x3303/0x3b60 [ 86.909901][ T75] ? __lock_acquire+0x683/0x2cf0 [ 86.909912][ T75] ? shrink_node+0x2ed4/0x3b60 [ 86.909923][ T75] ? percpu_ref_put+0x19/0x180 [ 86.909934][ T75] ? percpu_ref_put+0x19/0x180 [ 86.909945][ T75] ? __pfx_shrink_node+0x10/0x10 [ 86.909955][ T75] ? percpu_ref_put+0x19/0x180 [ 86.909966][ T75] ? percpu_ref_put+0x19/0x180 [ 86.909979][ T75] ? mem_cgroup_iter+0x410/0x440 [ 86.909992][ T75] ? mem_cgroup_iter+0x3b/0x440 [ 86.910006][ T75] kswapd+0x17b6/0x31c0 [ 86.910018][ T75] ? kswapd+0x9b6/0x31c0 [ 86.910027][ T75] ? __pfx_kswapd+0x10/0x10 [ 86.910035][ T75] ? trace_contention_end+0x3d/0x140 [ 86.910045][ T75] ? __lock_acquire+0x683/0x2cf0 [ 86.910056][ T75] ? kthread_affine_node+0x2b2/0x360 [ 86.910068][ T75] ? __mutex_unlock_slowpath+0x731/0x900 [ 86.910083][ T75] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.910093][ T75] ? __kthread_parkme+0x71/0x1f0 [ 86.910105][ T75] ? __kthread_parkme+0x196/0x1f0 [ 86.910116][ T75] kthread+0x388/0x470 [ 86.910130][ T75] ? __pfx_kswapd+0x10/0x10 [ 86.910141][ T75] ? __pfx_kthread+0x10/0x10 [ 86.910151][ T75] ret_from_fork+0x514/0xb70 [ 86.910160][ T75] ? __pfx_ret_from_fork+0x10/0x10 [ 86.910168][ T75] ? __switch_to+0xc89/0x1420 [ 86.910176][ T75] ? __pfx_kthread+0x10/0x10 [ 86.910183][ T75] ret_from_fork_asm+0x1a/0x30 [ 86.910194][ T75]