program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r2 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x0, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffffff, 0xff000000, 0xf, 0xb, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x7, 0x7, 0x53, 0xa4, 0x1000, 'pim6reg0\x00', 'vxcan1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d903db6919d631bce98fa83a6adf2800e1778d44f1addbd05bee71f64002"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@rand_addr=0x64010101, @local, 0xff000000, 0x0, 0x10, 0x2, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="c07948e6a48b", {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x9a87, 0x1, 0xf497, 0x9, 0x4, 0x3, 'veth1_to_team\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @remote, @rand_addr=0x64010101, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) write(r1, &(0x7f0000000200)='1', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0x0, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x0, 0xaaaa}], 0x18}) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) (async) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f00000002c0)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @code={0xa, 0x69, {"0f01c3400f0743d8f30f01f866ba4100b800000080ef650f3066baf80cb837851d8bef66bafc0cb052ee0fc79cf200000000c744240003000000c7442402de000000c7442406000000000f011c2466660f3882a2f0ffffff"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x99, 0x4, 0x8, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x81, 0xfffffffffffffff7}}, @wrmsr={0x65, 0x20, {0x80000be9, 0x8001}}, @set_irq_handler={0xc8, 0x20, {0x39, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @wrmsr={0x65, 0x20, {0xbec, 0x10001}}, @rdmsr={0x66, 0x18, {0x258}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6402, 0xfffffffffffffff5, 0x8, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x40, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x64, 0x18, {0xe540, 0x703}}, @wrmsr={0x65, 0x20, {0x0, 0x727}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x1e, 0x6, 0x80000000, 0x2}}, @out_dx={0x6a, 0x28, {0x2151, 0x0, 0x5}}, @cpuid={0x64, 0x18, {0x3, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x2, 0x1}}], 0x301}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r7, 0x3000006, 0x80010, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) [ 95.322195][ T72] [ 95.323358][ T72] ====================================================== [ 95.326468][ T72] WARNING: possible circular locking dependency detected [ 95.329450][ T72] syzkaller #0 Not tainted [ 95.331421][ T72] ------------------------------------------------------ [ 95.334522][ T72] kswapd0/72 is trying to acquire lock: [ 95.336979][ T72] ffff888013898b60 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x62/0x390 [ 95.341264][ T72] [ 95.341264][ T72] but task is already holding lock: [ 95.344740][ T72] ffffffff8ee924c0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 95.348240][ T72] [ 95.348240][ T72] which lock already depends on the new lock. [ 95.348240][ T72] [ 95.352930][ T72] [ 95.352930][ T72] the existing dependency chain (in reverse order) is: [ 95.357813][ T72] [ 95.357813][ T72] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 95.361545][ T72] fs_reclaim_acquire+0x71/0x100 [ 95.363943][ T72] kmem_cache_alloc_noprof+0x5f/0x600 [ 95.366627][ T72] jffs2_do_read_inode+0x33f/0x6a0 [ 95.369174][ T72] jffs2_iget+0x228/0xcc0 [ 95.371394][ T72] jffs2_do_fill_super+0x59d/0xc50 [ 95.373897][ T72] mtd_get_sb+0x18a/0x410 [ 95.376112][ T72] get_tree_mtd+0x597/0x7d0 [ 95.378380][ T72] vfs_get_tree+0x92/0x2a0 [ 95.381038][ T72] do_new_mount+0x319/0xdc0 [ 95.383555][ T72] __se_sys_mount+0x31d/0x420 [ 95.385891][ T72] do_syscall_64+0x166/0x520 [ 95.388079][ T72] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.390982][ 94.377374][ T5277] Bluetooth: hci0: command tx timeout