program: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x80000000, 0x0, 0x3, 0xffffffff}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x40000000) syz_open_procfs(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) [ 76.156180][ T5342] loop0: detected capacity change from 0 to 128 [ 76.164987][ T5321] Bluetooth: hci0: command tx timeout [ 76.255782][ T5342] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.282515][ T5342] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.333173][ T5342] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 76.345650][ T5342] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 76.390047][ T78] [ 76.391309][ T78] ====================================================== [ 76.394590][ T78] WARNING: possible circular locking dependency detected [ 76.397610][ T78] syzkaller #0 Not tainted [ 76.399612][ T78] ------------------------------------------------------ [ 76.402692][ T78] kswapd0/78 is trying to acquire lock: [ 76.405079][ T78] ffff8880111a3098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x240 [ 76.409322][ T78] [ 76.409322][ T78] but task is already holding lock: [ 76.412946][ T78] ffffffff8e0518a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 76.416605][ T78] [ 76.416605][ T78] which lock already depends on the new lock. [ 76.416605][ T78] [ 76.420966][ T78] [ 76.420966][ T78] the existing dependency chain (in reverse order) is: [ 76.424859][ T78] [ 76.424859][ T78] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 76.428240][ T78] fs_reclaim_acquire+0x72/0x100 [ 76.431123][ T78] __kmalloc_cache_noprof+0x40/0x700 [ 76.434403][ T78] assoc_array_insert+0x92/0x2f90 [ 76.437081][ T78] __key_link_begin+0xd6/0x1f0 [ 76.439376][ T78] __key_create_or_update+0x41a/0xa30 [ 76.441893][ T78] key_create_or_update+0x42/0x60 [ 76.444492][ T78] x509_load_certificate_list+0x145/0x280 [ 76.447416][ T78] do_one_initcall+0x1f1/0x800 [ 76.449940][ T78] do_initcall_level+0x104/0x190 [ 76.452233][ T78] do_initcalls+0x59/0xa0 [ 76.454396][ T78] kernel_init_freeable+0x2a7/0x3d0 [ 76.457171][ T78] kernel_init+0x1d/0x1d0 [ 76.459436][ T78] ret_from_fork+0x510/0xa50 [ 76.461740][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.464075][ T78] [ 76.464075][ T78] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 76.468544][ T78] __lock_acquire+0x15a6/0x2cf0 [ 76.471117][ T78] lock_acquire+0x107/0x340 [ 76.473519][ T78] down_write+0x96/0x1f0 [ 76.476013][ T78] keyring_clear+0xaf/0x240 [ 76.478709][ T78] fscrypt_put_master_key+0xca/0x190 [ 76.480984][ T78] put_crypt_info+0x26d/0x310 [ 76.483141][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 76.485899][ T78] ext4_clear_inode+0x170/0x2f0 [ 76.488214][ T78] ext4_evict_inode+0x9f6/0xe60 [ 76.490584][ T78] evict+0x5f4/0xae0 [ 76.492531][ T78] __dentry_kill+0x209/0x660 [ 76.494708][ T78] shrink_kill+0xa9/0x2c0 [ 76.497189][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 76.500526][ T78] prune_dcache_sb+0x10e/0x180 [ 76.503351][ T78] super_cache_scan+0x369/0x4b0 [ 76.505677][ T78] do_shrink_slab+0x6df/0x10d0 [ 76.507932][ T78] shrink_slab+0x7ef/0x10d0 [ 76.510161][ T78] shrink_one+0x2d9/0x720 [ 76.512274][ T78] shrink_node+0x2f7d/0x35b0 [ 76.514441][ T78] kswapd+0x145a/0x2820 [ 76.516634][ T78] kthread+0x711/0x8a0 [ 76.518811][ T78] ret_from_fork+0x510/0xa50 [ 76.521140][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.523534][ T78] [ 76.523534][ T78] other info that might help us debug this: [ 76.523534][ T78] [ 76.527973][ T78] Possible unsafe locking scenario: [ 76.527973][ T78] [ 76.531205][ T78] CPU0 CPU1 [ 76.533339][ T78] ---- ---- [ 76.535628][ T78] lock(fs_reclaim); [ 76.537293][ T78] lock(&type->lock_class); [ 76.540266][ T78] lock(fs_reclaim); [ 76.543176][ T78] lock(&type->lock_class); [ 76.545583][ T78] [ 76.545583][ T78] *** DEADLOCK *** [ 76.545583][ T78] [ 76.549446][ T78] 2 locks held by kswapd0/78: [ 76.551597][ T78] #0: ffffffff8e0518a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 76.555363][ T78] #1: ffff888035f260e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 76.559941][ T78] [ 76.559941][ T78] stack backtrace: [ 76.562606][ T78] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 76.562623][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.562630][ T78] Call Trace: [ 76.562637][ T78] [ 76.562642][ T78] dump_stack_lvl+0xe8/0x150 [ 76.562655][ T78] print_circular_bug+0x2e2/0x300 [ 76.562666][ T78] check_noncircular+0x12e/0x150 [ 76.562676][ T78] __lock_acquire+0x15a6/0x2cf0 [ 76.562684][ T78] ? stack_trace_save+0x9c/0xe0 [ 76.562696][ T78] ? keyring_clear+0xaf/0x240 [ 76.562705][ T78] lock_acquire+0x107/0x340 [ 76.562711][ T78] ? keyring_clear+0xaf/0x240 [ 76.562720][ T78] down_write+0x96/0x1f0 [ 76.562730][ T78] ? keyring_clear+0xaf/0x240 [ 76.562740][ T78] ? __pfx_down_write+0x10/0x10 [ 76.562752][ T78] keyring_clear+0xaf/0x240 [ 76.562765][ T78] ? __pfx_keyring_clear+0x10/0x10 [ 76.562779][ T78] fscrypt_put_master_key+0xca/0x190 [ 76.562795][ T78] put_crypt_info+0x26d/0x310 [ 76.562805][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 76.562815][ T78] ext4_clear_inode+0x170/0x2f0 [ 76.562824][ T78] ext4_evict_inode+0x9f6/0xe60 [ 76.562836][ T78] ? inode_wait_for_writeback+0x14d/0x370 [ 76.562849][ T78] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 76.562861][ T78] ? do_raw_spin_lock+0x121/0x290 [ 76.562874][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.562884][ T78] ? do_raw_spin_unlock+0x4d/0x240 [ 76.562897][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.562907][ T78] evict+0x5f4/0xae0 [ 76.562917][ T78] ? __pfx_evict+0x10/0x10 [ 76.562932][ T78] ? _raw_spin_unlock+0x28/0x50 [ 76.562941][ T78] ? iput+0xcc6/0x1030 [ 76.562948][ T78] __dentry_kill+0x209/0x660 [ 76.562959][ T78] ? shrink_kill+0x8d/0x2c0 [ 76.562966][ T78] shrink_kill+0xa9/0x2c0 [ 76.562973][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 76.562982][ T78] prune_dcache_sb+0x10e/0x180 [ 76.562992][ T78] ? __pfx_prune_dcache_sb+0x10/0x10 [ 76.563002][ T78] ? list_lru_count_one+0x27/0x2c0 [ 76.563018][ T78] ? list_lru_count_one+0x264/0x2c0 [ 76.563032][ T78] super_cache_scan+0x369/0x4b0 [ 76.563049][ T78] do_shrink_slab+0x6df/0x10d0 [ 76.563063][ T78] shrink_slab+0x7ef/0x10d0 [ 76.563073][ T78] ? shrink_slab+0x1e8/0x10d0 [ 76.563081][ T78] ? __pfx_shrink_slab+0x10/0x10 [ 76.563089][ T78] shrink_one+0x2d9/0x720 [ 76.563099][ T78] ? shrink_node+0x2d3f/0x35b0 [ 76.563108][ T78] shrink_node+0x2f7d/0x35b0 [ 76.563118][ T78] ? shrink_node+0x2d3f/0x35b0 [ 76.563127][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 76.563135][ T78] ? percpu_ref_put+0x19/0x180 [ 76.563145][ T78] ? percpu_ref_put+0x19/0x180 [ 76.563154][ T78] ? __pfx_shrink_node+0x10/0x10 [ 76.563167][ T78] ? percpu_ref_put+0x19/0x180 [ 76.563177][ T78] ? mem_cgroup_iter+0x420/0x460 [ 76.563188][ T78] ? mem_cgroup_iter+0x3b/0x460 [ 76.563198][ T78] kswapd+0x145a/0x2820 [ 76.563213][ T78] ? kswapd+0x92a/0x2820 [ 76.563225][ T78] ? __pfx_kswapd+0x10/0x10 [ 76.563235][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 76.563244][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.563258][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.563275][ T78] ? __pfx_autoremove_wake_function+0x10/0x10 [ 76.563288][ T78] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 76.563304][ T78] ? __kthread_parkme+0x7b/0x200 [ 76.563314][ T78] ? __kthread_parkme+0x1a1/0x200 [ 76.563326][ T78] kthread+0x711/0x8a0 [ 76.563341][ T78] ? __pfx_kswapd+0x10/0x10 [ 76.563351][ T78] ? __pfx_kthread+0x10/0x10 [ 76.563364][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.563377][ T78] ? __pfx_kthread+0x10/0x10 [ 76.563389][ T78] ret_from_fork+0x510/0xa50 [ 76.563400][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 76.563411][ T78] ? __switch_to+0xc9e/0x1480 [ 76.563427][ T78] ? __pfx_kthread+0x10/0x10 [ 76.563473][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.563491][ T78]