program: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x9d98, 0x2000, 0x4, 0x1ea}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x20040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x8bff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x489820276248e085}, 0x20008000) [ 69.526695][ T5306] Bluetooth: hci0: command tx timeout [ 69.584031][ T5327] loop0: detected capacity change from 0 to 128 [ 69.623061][ T5327] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.647054][ T5327] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.679019][ T5327] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 69.744959][ T5327] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-lib)" [ 69.761090][ T5328] fscrypt: loop0: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751 [ 69.775407][ T5327] fscrypt: loop0: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 69.793354][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.813677][ T5327] bond0: (slave rose0): Enslaving as an active interface with an up link [ 69.829690][ T5327] bond0: (slave rose0): Releasing backup interface [ 69.909556][ T72] [ 69.910689][ T72] ====================================================== [ 69.913718][ T72] WARNING: possible circular locking dependency detected [ 69.917070][ T72] syzkaller #0 Not tainted [ 69.918960][ T72] ------------------------------------------------------ [ 69.921942][ T72] kswapd0/72 is trying to acquire lock: [ 69.924356][ T72] ffff88803f828098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x240 [ 69.928465][ T72] [ 69.928465][ T72] but task is already holding lock: [ 69.931546][ T72] ffffffff8de44f40 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x951/0x2800 [ 69.935047][ T72] [ 69.935047][ T72] which lock already depends on the new lock. [ 69.935047][ T72] [ 69.939794][ T72] [ 69.939794][ T72] the existing dependency chain (in reverse order) is: [ 69.943717][ T72] [ 69.943717][ T72] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 69.946910][ T72] lock_acquire+0x120/0x360 [ 69.949278][ T72] fs_reclaim_acquire+0x72/0x100 [ 69.951726][ T72] __kmalloc_cache_noprof+0x40/0x6f0 [ 69.954155][ T72] assoc_array_insert+0x92/0x2f90 [ 69.956302][ T72] __key_link_begin+0xd6/0x1f0 [ 69.958380][ T72] __key_create_or_update+0x41a/0xa30 [ 69.960819][ T72] key_create_or_update+0x42/0x60 [ 69.963168][ T72] x509_load_certificate_list+0x145/0x280 [ 69.966401][ T72] do_one_initcall+0x233/0x820 [ 69.968790][ T72] do_initcall_level+0x104/0x190 [ 69.971200][ T72] do_initcalls+0x59/0xa0 [ 69.973219][ T72] kernel_init_freeable+0x334/0x4b0 [ 69.975460][ T72] kernel_init+0x1d/0x1d0 [ 69.977489][ T72] ret_from_fork+0x436/0x7d0 [ 69.979622][ T72] ret_from_fork_asm+0x1a/0x30 [ 69.981869][ T72] [ 69.981869][ T72] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 69.984850][ T72] validate_chain+0xb9b/0x2140 [ 69.987195][ T72] __lock_acquire+0xab9/0xd20 [ 69.989569][ T72] lock_acquire+0x120/0x360 [ 69.991648][ T72] down_write+0x96/0x1f0 [ 69.993820][ T72] keyring_clear+0xaf/0x240 [ 69.996189][ T72] fscrypt_put_master_key+0xca/0x190 [ 69.998726][ T72] put_crypt_info+0x26d/0x310 [ 70.001088][ T72] fscrypt_put_encryption_info+0xf6/0x140 [ 70.003801][ T72] ext4_clear_inode+0x170/0x2f0 [ 70.006175][ T72] ext4_evict_inode+0xa67/0xee0 [ 70.008694][ T72] evict+0x501/0x9c0 [ 70.010668][ T72] __dentry_kill+0x209/0x660 [ 70.012965][ T72] shrink_kill+0xa9/0x2c0 [ 70.015049][ T72] shrink_dentry_list+0x2e0/0x5e0 [ 70.017509][ T72] prune_dcache_sb+0x10e/0x180 [ 70.020059][ T72] super_cache_scan+0x369/0x4b0 [ 70.022501][ T72] do_shrink_slab+0x6ef/0x1110 [ 70.024916][ T72] shrink_slab+0x7ef/0x10d0 [ 70.027162][ T72] shrink_one+0x28a/0x7c0 [ 70.029458][ T72] shrink_node+0x315d/0x3780 [ 70.031688][ T72] kswapd+0x147c/0x2800 [ 70.033758][ T72] kthread+0x70e/0x8a0 [ 70.035788][ T72] ret_from_fork+0x436/0x7d0 [ 70.038133][ T72] ret_from_fork_asm+0x1a/0x30 [ 70.040424][ T72] [ 70.040424][ T72] other info that might help us debug this: [ 70.040424][ T72] [ 70.044827][ T72] Possible unsafe locking scenario: [ 70.044827][ T72] [ 70.048187][ T72] CPU0 CPU1 [ 70.050548][ T72] ---- ---- [ 70.052869][ T72] lock(fs_reclaim); [ 70.054670][ T72] lock(&type->lock_class); [ 70.057761][ T72] lock(fs_reclaim); [ 70.060675][ T72] lock(&type->lock_class); [ 70.062680][ T72] [ 70.062680][ T72] *** DEADLOCK *** [ 70.062680][ T72] [ 70.066096][ T72] 2 locks held by kswapd0/72: [ 70.068196][ T72] #0: ffffffff8de44f40 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x951/0x2800 [ 70.071839][ T72] #1: ffff88801e51a0e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 70.076388][ T72] [ 70.076388][ T72] stack backtrace: [ 70.079046][ T72] CPU: 0 UID: 0 PID: 72 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 70.079060][ T72] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.079068][ T72] Call Trace: [ 70.079076][ T72] [ 70.079081][ T72] dump_stack_lvl+0x189/0x250 [ 70.079099][ T72] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.079111][ T72] ? __pfx__printk+0x10/0x10 [ 70.079127][ T72] ? print_lock_name+0xde/0x100 [ 70.079142][ T72] print_circular_bug+0x2ee/0x310 [ 70.079155][ T72] check_noncircular+0x134/0x160 [ 70.079168][ T72] validate_chain+0xb9b/0x2140 [ 70.079185][ T72] __lock_acquire+0xab9/0xd20 [ 70.079197][ T72] ? keyring_clear+0xaf/0x240 [ 70.079206][ T72] lock_acquire+0x120/0x360 [ 70.079215][ T72] ? keyring_clear+0xaf/0x240 [ 70.079227][ T72] down_write+0x96/0x1f0 [ 70.079240][ T72] ? keyring_clear+0xaf/0x240 [ 70.079249][ T72] ? __pfx_down_write+0x10/0x10 [ 70.079263][ T72] keyring_clear+0xaf/0x240 [ 70.079272][ T72] ? __pfx_keyring_clear+0x10/0x10 [ 70.079284][ T72] fscrypt_put_master_key+0xca/0x190 [ 70.079295][ T72] put_crypt_info+0x26d/0x310 [ 70.079308][ T72] fscrypt_put_encryption_info+0xf6/0x140 [ 70.079319][ T72] ext4_clear_inode+0x170/0x2f0 [ 70.079330][ T72] ext4_evict_inode+0xa67/0xee0 [ 70.079342][ T72] ? inode_wait_for_writeback+0xf9/0x290 [ 70.079358][ T72] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 70.079373][ T72] ? __pfx_ext4_evict_inode+0x10/0x10 [ 70.079385][ T72] ? do_raw_spin_unlock+0x4d/0x240 [ 70.079398][ T72] ? __pfx_ext4_evict_inode+0x10/0x10 [ 70.079408][ T72] evict+0x501/0x9c0 [ 70.079420][ T72] ? __pfx_evict+0x10/0x10 [ 70.079429][ T72] ? _raw_spin_unlock+0x28/0x50 [ 70.079442][ T72] ? iput+0x946/0xc50 [ 70.079456][ T72] __dentry_kill+0x209/0x660 [ 70.079471][ T72] ? shrink_kill+0x8d/0x2c0 [ 70.079485][ T72] shrink_kill+0xa9/0x2c0 [ 70.079498][ T72] shrink_dentry_list+0x2e0/0x5e0 [ 70.079511][ T72] prune_dcache_sb+0x10e/0x180 [ 70.079520][ T72] ? __pfx_prune_dcache_sb+0x10/0x10 [ 70.079530][ T72] ? list_lru_count_one+0x27/0x2c0 [ 70.079540][ T72] ? list_lru_count_one+0x264/0x2c0 [ 70.079550][ T72] super_cache_scan+0x369/0x4b0 [ 70.079559][ T72] do_shrink_slab+0x6ef/0x1110 [ 70.079573][ T72] shrink_slab+0x7ef/0x10d0 [ 70.079583][ T72] ? shrink_slab+0x1e8/0x10d0 [ 70.079593][ T72] ? __pfx_shrink_slab+0x10/0x10 [ 70.079605][ T72] shrink_one+0x28a/0x7c0 [ 70.079623][ T72] ? shrink_node+0x2f1f/0x3780 [ 70.079635][ T72] shrink_node+0x315d/0x3780 [ 70.079649][ T72] ? shrink_node+0x2f1f/0x3780 [ 70.079663][ T72] ? __lock_acquire+0xab9/0xd20 [ 70.079674][ T72] ? percpu_ref_put+0x19/0x180 [ 70.079689][ T72] ? __pfx_shrink_node+0x10/0x10 [ 70.079703][ T72] ? percpu_ref_put+0x19/0x180 [ 70.079717][ T72] ? mem_cgroup_iter+0x420/0x460 [ 70.079727][ T72] ? mem_cgroup_iter+0x3b/0x460 [ 70.079736][ T72] kswapd+0x147c/0x2800 [ 70.079751][ T72] ? kswapd+0x951/0x2800 [ 70.079764][ T72] ? __pfx_kswapd+0x10/0x10 [ 70.079774][ T72] ? __lock_acquire+0xab9/0xd20 [ 70.079787][ T72] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 70.079801][ T72] ? _raw_spin_unlock+0x20/0x50 [ 70.079816][ T72] ? __pfx_autoremove_wake_function+0x10/0x10 [ 70.079831][ T72] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 70.079845][ T72] ? __kthread_parkme+0x7b/0x200 [ 70.079857][ T72] ? __kthread_parkme+0x1a1/0x200 [ 70.079870][ T72] kthread+0x70e/0x8a0 [ 70.079885][ T72] ? __pfx_kswapd+0x10/0x10 [ 70.079895][ T72] ? __pfx_kthread+0x10/0x10 [ 70.079943][ T72] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.079958][ T72] ? lockdep_hardirqs_on+0x9c/0x150 [ 70.079968][ T72] ? __pfx_kthread+0x10/0x10 [ 70.079981][ T72] ret_from_fork+0x436/0x7d0 [ 70.079993][ T72] ? __pfx_ret_from_fork+0x10/0x10 [ 70.080004][ T72] ? __pfx_kthread+0x10/0x10 [ 70.080018][ T72] ret_from_fork_asm+0x1a/0x30 [ 70.080036][ T72]