loop0: detected capacity change from 0 to 65536 XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 XFS (loop0): Ending clean mount XFS (loop0): Quotacheck needed: Please wait. XFS (loop0): Quotacheck: Done. ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.0.0/5323 is trying to acquire lock: ffffffff8e047ae0 (fs_reclaim){+.+.}-{0:0}, at: might_alloc include/linux/sched/mm.h:318 [inline] ffffffff8e047ae0 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4929 [inline] ffffffff8e047ae0 (fs_reclaim){+.+.}-{0:0}, at: slab_alloc_node mm/slub.c:5264 [inline] ffffffff8e047ae0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x6f0 mm/slub.c:5766 but task is already holding lock: ffff8880510f1798 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_ilock_for_iomap fs/xfs/xfs_iomap.c:789 [inline] ffff8880510f1798 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_buffered_write_iomap_begin+0x4d1/0x1a70 fs/xfs/xfs_iomap.c:1793 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (&xfs_nondir_ilock_class){++++}-{4:4}: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 down_write_nested+0x9d/0x200 kernel/locking/rwsem.c:1706 xfs_reclaim_inode fs/xfs/xfs_icache.c:1040 [inline] xfs_icwalk_process_inode fs/xfs/xfs_icache.c:1732 [inline] xfs_icwalk_ag+0x12c5/0x1ab0 fs/xfs/xfs_icache.c:1814 xfs_icwalk fs/xfs/xfs_icache.c:1862 [inline] xfs_reclaim_inodes_nr+0x1e3/0x260 fs/xfs/xfs_icache.c:1106 super_cache_scan+0x41b/0x4b0 fs/super.c:228 do_shrink_slab+0x6ef/0x1110 mm/shrinker.c:437 shrink_slab+0xd74/0x10d0 mm/shrinker.c:664 shrink_one+0x28a/0x7c0 mm/vmscan.c:4955 shrink_many mm/vmscan.c:5016 [inline] lru_gen_shrink_node mm/vmscan.c:5094 [inline] shrink_node+0x315d/0x3780 mm/vmscan.c:6081 kswapd_shrink_node mm/vmscan.c:6941 [inline] balance_pgdat mm/vmscan.c:7124 [inline] kswapd+0x147c/0x2800 mm/vmscan.c:7389 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 -> #0 (fs_reclaim){+.+.}-{0:0}: check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __fs_reclaim_acquire mm/page_alloc.c:4264 [inline] fs_reclaim_acquire+0x72/0x100 mm/page_alloc.c:4278 might_alloc include/linux/sched/mm.h:318 [inline] slab_pre_alloc_hook mm/slub.c:4929 [inline] slab_alloc_node mm/slub.c:5264 [inline] __kmalloc_cache_noprof+0x40/0x6f0 mm/slub.c:5766 kmalloc_noprof include/linux/slab.h:957 [inline] iomap_fill_dirty_folios+0xf4/0x260 fs/iomap/buffered-io.c:1557 xfs_buffered_write_iomap_begin+0xa23/0x1a70 fs/xfs/xfs_iomap.c:1857 iomap_iter+0x5f2/0xf10 fs/iomap/iter.c:110 iomap_zero_range+0x934/0xa50 fs/iomap/buffered-io.c:1590 xfs_zero_range+0x9a/0x100 fs/xfs/xfs_iomap.c:2289 xfs_free_file_space+0x8bd/0xce0 fs/xfs/xfs_bmap_util.c:900 xfs_falloc_zero_range fs/xfs/xfs_file.c:1281 [inline] __xfs_file_fallocate+0x932/0x1610 fs/xfs/xfs_file.c:1396 xfs_file_fallocate+0x27b/0x340 fs/xfs/xfs_file.c:1462 vfs_fallocate+0x669/0x7e0 fs/open.c:342 ksys_fallocate fs/open.c:366 [inline] __do_sys_fallocate fs/open.c:371 [inline] __se_sys_fallocate fs/open.c:369 [inline] __x64_sys_fallocate+0xc0/0x110 fs/open.c:369 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&xfs_nondir_ilock_class); lock(fs_reclaim); lock(&xfs_nondir_ilock_class); lock(fs_reclaim); *** DEADLOCK *** 4 locks held by syz.0.0/5323: #0: ffff88801e7dc420 (sb_writers#12){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3173 [inline] #0: ffff88801e7dc420 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f0/0x7e0 fs/open.c:341 #1: ffff8880510f19b0 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: xfs_ilock+0xfe/0x390 fs/xfs/xfs_inode.c:149 #2: ffff8880510f1b50 (mapping.invalidate_lock#3){+.+.}-{4:4}, at: xfs_ilock+0x17c/0x390 fs/xfs/xfs_inode.c:157 #3: ffff8880510f1798 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_ilock_for_iomap fs/xfs/xfs_iomap.c:789 [inline] #3: ffff8880510f1798 (&xfs_nondir_ilock_class){++++}-{4:4}, at: xfs_buffered_write_iomap_begin+0x4d1/0x1a70 fs/xfs/xfs_iomap.c:1793 stack backtrace: CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_circular_bug+0x2ee/0x310 kernel/locking/lockdep.c:2043 check_noncircular+0x134/0x160 kernel/locking/lockdep.c:2175 check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __fs_reclaim_acquire mm/page_alloc.c:4264 [inline] fs_reclaim_acquire+0x72/0x100 mm/page_alloc.c:4278 might_alloc include/linux/sched/mm.h:318 [inline] slab_pre_alloc_hook mm/slub.c:4929 [inline] slab_alloc_node mm/slub.c:5264 [inline] __kmalloc_cache_noprof+0x40/0x6f0 mm/slub.c:5766 kmalloc_noprof include/linux/slab.h:957 [inline] iomap_fill_dirty_folios+0xf4/0x260 fs/iomap/buffered-io.c:1557 xfs_buffered_write_iomap_begin+0xa23/0x1a70 fs/xfs/xfs_iomap.c:1857 iomap_iter+0x5f2/0xf10 fs/iomap/iter.c:110 iomap_zero_range+0x934/0xa50 fs/iomap/buffered-io.c:1590 xfs_zero_range+0x9a/0x100 fs/xfs/xfs_iomap.c:2289 xfs_free_file_space+0x8bd/0xce0 fs/xfs/xfs_bmap_util.c:900 xfs_falloc_zero_range fs/xfs/xfs_file.c:1281 [inline] __xfs_file_fallocate+0x932/0x1610 fs/xfs/xfs_file.c:1396 xfs_file_fallocate+0x27b/0x340 fs/xfs/xfs_file.c:1462 vfs_fallocate+0x669/0x7e0 fs/open.c:342 ksys_fallocate fs/open.c:366 [inline] __do_sys_fallocate fs/open.c:371 [inline] __se_sys_fallocate fs/open.c:369 [inline] __x64_sys_fallocate+0xc0/0x110 fs/open.c:369 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff678f8f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff679f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffda RBX: 00007ff6791e5fa0 RCX: 00007ff678f8f7c9 RDX: 0000000000000011 RSI: 0000000000000010 RDI: 0000000000000005 RBP: 00007ff679013f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000001000005 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff6791e6038 R14: 00007ff6791e5fa0 R15: 00007fff2be9b4c8