program: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xe95, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x66) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) [ 79.350844][ T48] Bluetooth: hci0: command tx timeout [ 79.404950][ T5110] loop0: detected capacity change from 0 to 128 [ 79.435406][ T5110] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.453992][ T5110] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.618197][ T5110] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 79.629063][ T5111] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 79.657105][ T79] [ 79.658640][ T79] ====================================================== [ 79.662495][ T79] WARNING: possible circular locking dependency detected [ 79.665395][ T79] 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 Not tainted [ 79.668209][ T79] ------------------------------------------------------ [ 79.671034][ T79] kswapd0/79 is trying to acquire lock: [ 79.673339][ T79] ffff88803d344e98 (&type->lock_class){+.+.}-{3:3}, at: keyring_clear+0xb2/0x350 [ 79.677887][ T79] [ 79.677887][ T79] but task is already holding lock: [ 79.681314][ T79] ffffffff8ea37160 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3700 [ 79.684296][ T79] [ 79.684296][ T79] which lock already depends on the new lock. [ 79.684296][ T79] [ 79.688147][ T79] [ 79.688147][ T79] the existing dependency chain (in reverse order) is: [ 79.692717][ T79] [ 79.692717][ T79] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 79.696723][ T79] lock_acquire+0x1ed/0x550 [ 79.698936][ T79] fs_reclaim_acquire+0x88/0x130 [ 79.701132][ T79] __kmalloc_cache_noprof+0x3d/0x2c0 [ 79.703186][ T79] assoc_array_insert+0xfe/0x33e0 [ 79.705322][ T79] __key_link_begin+0xe5/0x1f0 [ 79.707479][ T79] __key_create_or_update+0x570/0xc70 [ 79.709991][ T79] key_create_or_update+0x42/0x60 [ 79.712763][ T79] x509_load_certificate_list+0x149/0x270 [ 79.716303][ T79] do_one_initcall+0x248/0x880 [ 79.718688][ T79] do_initcall_level+0x157/0x210 [ 79.720951][ T79] do_initcalls+0x3f/0x80 [ 79.722959][ T79] kernel_init_freeable+0x435/0x5d0 [ 79.725329][ T79] kernel_init+0x1d/0x2b0 [ 79.727271][ T79] ret_from_fork+0x4b/0x80 [ 79.729592][ T79] ret_from_fork_asm+0x1a/0x30 [ 79.732027][ T79] [ 79.732027][ T79] -> #0 (&type->lock_class){+.+.}-{3:3}: [ 79.735957][ T79] validate_chain+0x18ef/0x5920 [ 79.738000][ T79] __lock_acquire+0x1384/0x2050 [ 79.739787][ T79] lock_acquire+0x1ed/0x550 [ 79.741638][ T79] down_write+0x99/0x220 [ 79.743606][ T79] keyring_clear+0xb2/0x350 [ 79.745554][ T79] fscrypt_put_master_key+0xc8/0x190 [ 79.747766][ T79] put_crypt_info+0x275/0x320 [ 79.749812][ T79] fscrypt_put_encryption_info+0x40/0x60 [ 79.752341][ T79] ext4_clear_inode+0x15b/0x1c0 [ 79.754756][ T79] ext4_evict_inode+0xabc/0xf50 [ 79.757502][ T79] evict+0x4e8/0x9b0 [ 79.759531][ T79] __dentry_kill+0x20d/0x630 [ 79.761847][ T79] shrink_kill+0xa9/0x2c0 [ 79.763817][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 79.766081][ T79] prune_dcache_sb+0x10f/0x180 [ 79.768259][ T79] super_cache_scan+0x34f/0x4b0 [ 79.770518][ T79] do_shrink_slab+0x701/0x1160 [ 79.773126][ T79] shrink_slab+0x1093/0x14d0 [ 79.776256][ T79] shrink_one+0x43b/0x850 [ 79.778802][ T79] shrink_node+0x3799/0x3de0 [ 79.781357][ T79] kswapd+0x1ca3/0x3700 [ 79.783250][ T79] kthread+0x2f0/0x390 [ 79.785168][ T79] ret_from_fork+0x4b/0x80 [ 79.787211][ T79] ret_from_fork_asm+0x1a/0x30 [ 79.789398][ T79] [ 79.789398][ T79] other info that might help us debug this: [ 79.789398][ T79] [ 79.793455][ T79] Possible unsafe locking scenario: [ 79.793455][ T79] [ 79.796421][ T79] CPU0 CPU1 [ 79.798775][ T79] ---- ---- [ 79.801337][ T79] lock(fs_reclaim); [ 79.803104][ T79] lock(&type->lock_class); [ 79.805942][ T79] lock(fs_reclaim); [ 79.808410][ T79] lock(&type->lock_class); [ 79.810203][ T79] [ 79.810203][ T79] *** DEADLOCK *** [ 79.810203][ T79] [ 79.813389][ T79] 2 locks held by kswapd0/79: [ 79.815702][ T79] #0: ffffffff8ea37160 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xbf1/0x3700 [ 79.819768][ T79] #1: ffff88801ab6a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_cache_scan+0x94/0x4b0 [ 79.824053][ T79] [ 79.824053][ T79] stack backtrace: [ 79.826401][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd0 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 79.830798][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.836279][ T79] Call Trace: [ 79.837664][ T79] [ 79.838782][ T79] dump_stack_lvl+0x241/0x360 [ 79.840591][ T79] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.842589][ T79] ? __pfx__printk+0x10/0x10 [ 79.844440][ T79] print_circular_bug+0x13a/0x1b0 [ 79.846839][ T79] check_noncircular+0x36a/0x4a0 [ 79.849045][ T79] ? __pfx_check_noncircular+0x10/0x10 [ 79.851304][ T79] validate_chain+0x18ef/0x5920 [ 79.853334][ T79] ? __pfx_validate_chain+0x10/0x10 [ 79.855477][ T79] ? validate_chain+0x15c0/0x5920 [ 79.857601][ T79] ? __pfx_validate_chain+0x10/0x10 [ 79.859622][ T79] ? mark_lock+0x9a/0x360 [ 79.861563][ T79] __lock_acquire+0x1384/0x2050 [ 79.863981][ T79] lock_acquire+0x1ed/0x550 [ 79.865878][ T79] ? keyring_clear+0xb2/0x350 [ 79.867877][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 79.869792][ T79] ? __pfx___might_resched+0x10/0x10 [ 79.871922][ T79] down_write+0x99/0x220 [ 79.873671][ T79] ? keyring_clear+0xb2/0x350 [ 79.875546][ T79] ? __pfx_down_write+0x10/0x10 [ 79.877351][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 79.879262][ T79] ? fscrypt_put_master_key_activeref+0x1a8/0x4f0 [ 79.882421][ T79] keyring_clear+0xb2/0x350 [ 79.884952][ T79] ? __pfx_keyring_clear+0x10/0x10 [ 79.887302][ T79] ? crypto_destroy_tfm+0xc3/0x2b0 [ 79.889358][ T79] ? __asan_memset+0x23/0x50 [ 79.891244][ T79] fscrypt_put_master_key+0xc8/0x190 [ 79.893446][ T79] put_crypt_info+0x275/0x320 [ 79.895190][ T79] fscrypt_put_encryption_info+0x40/0x60 [ 79.897176][ T79] ext4_clear_inode+0x15b/0x1c0 [ 79.898947][ T79] ? ext4_evict_inode+0xab4/0xf50 [ 79.900976][ T79] ext4_evict_inode+0xabc/0xf50 [ 79.902843][ T79] ? evict+0x4b8/0x9b0 [ 79.904356][ T79] ? inode_wait_for_writeback+0x111/0x2a0 [ 79.906550][ T79] ? __pfx_lock_release+0x10/0x10 [ 79.908559][ T79] ? __pfx_ext4_evict_inode+0x10/0x10 [ 79.910517][ T79] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.912283][ T79] ? __pfx_ext4_evict_inode+0x10/0x10 [ 79.914276][ T79] evict+0x4e8/0x9b0 [ 79.915779][ T79] ? __pfx_evict+0x10/0x10 [ 79.917866][ T79] ? _raw_spin_unlock+0x28/0x50 [ 79.920516][ T79] ? iput+0x713/0xa50 [ 79.922695][ T79] __dentry_kill+0x20d/0x630 [ 79.924745][ T79] ? shrink_kill+0x8d/0x2c0 [ 79.926537][ T79] shrink_kill+0xa9/0x2c0 [ 79.928134][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 79.930118][ T79] prune_dcache_sb+0x10f/0x180 [ 79.931930][ T79] ? __pfx_prune_dcache_sb+0x10/0x10 [ 79.933972][ T79] ? list_lru_count_one+0x29/0x2e0 [ 79.936013][ T79] ? list_lru_count_one+0x283/0x2e0 [ 79.938358][ T79] ? list_lru_count_one+0x29/0x2e0 [ 79.940978][ T79] super_cache_scan+0x34f/0x4b0 [ 79.943190][ T79] do_shrink_slab+0x701/0x1160 [ 79.945097][ T79] ? shrink_slab+0x12b/0x14d0 [ 79.947022][ T79] shrink_slab+0x1093/0x14d0 [ 79.948832][ T79] ? shrink_slab+0x12b/0x14d0 [ 79.950757][ T79] ? __pfx_shrink_slab+0x10/0x10 [ 79.952756][ T79] ? shrink_node+0x3547/0x3de0 [ 79.954992][ T79] ? __pfx_lock_release+0x10/0x10 [ 79.957963][ T79] shrink_one+0x43b/0x850 [ 79.960291][ T79] ? shrink_node+0x3547/0x3de0 [ 79.962551][ T79] shrink_node+0x3799/0x3de0 [ 79.964000][ T79] ? shrink_node+0x3547/0x3de0 [ 79.965641][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 79.967647][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 79.969660][ T79] ? __pfx_lock_release+0x10/0x10 [ 79.971527][ T79] ? __pfx_shrink_node+0x10/0x10 [ 79.973542][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 79.976097][ T79] kswapd+0x1ca3/0x3700 [ 79.978289][ T79] ? kswapd+0xbf1/0x3700 [ 79.980172][ T79] ? __pfx_kswapd+0x10/0x10 [ 79.982025][ T79] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.984487][ T79] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.986887][ T79] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 79.989388][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 79.991787][ T79] ? __kthread_parkme+0x169/0x1d0 [ 79.994727][ T79] ? __pfx_kswapd+0x10/0x10 [ 79.997158][ T79] kthread+0x2f0/0x390 [ 79.999131][ T79] ? __pfx_kswapd+0x10/0x10 [ 80.000910][ T79] ? __pfx_kthread+0x10/0x10 [ 80.002595][ T79] ret_from_fork+0x4b/0x80 [ 80.004253][ T79] ? __pfx_kthread+0x10/0x10 [ 80.006007][ T79] ret_from_fork_asm+0x1a/0x30