====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-06619-ge5e038b7ae9d #0 Not tainted ------------------------------------------------------ kswapd0/112 is trying to acquire lock: ffff88801d8ec950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1125/0x1620 fs/jbd2/transaction.c:463 but task is already holding lock: ffffffff8d928ce0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x15f/0x1a90 mm/vmscan.c:6774 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (fs_reclaim){+.+.}-{0:0}: __fs_reclaim_acquire mm/page_alloc.c:3692 [inline] fs_reclaim_acquire+0x102/0x150 mm/page_alloc.c:3706 might_alloc include/linux/sched/mm.h:303 [inline] slab_pre_alloc_hook mm/slub.c:3746 [inline] slab_alloc_node mm/slub.c:3827 [inline] kmalloc_trace+0x51/0x330 mm/slub.c:3992 kmalloc include/linux/slab.h:628 [inline] kzalloc include/linux/slab.h:749 [inline] assoc_array_insert+0x10a/0x3140 lib/assoc_array.c:980 __key_link_begin+0xf5/0x260 security/keys/keyring.c:1314 __key_create_or_update+0x4e5/0xe10 security/keys/key.c:861 key_create_or_update+0x42/0x60 security/keys/key.c:1005 x509_load_certificate_list+0x1dd/0x280 crypto/asymmetric_keys/x509_loader.c:31 do_one_initcall+0x128/0x690 init/main.c:1241 do_initcall_level init/main.c:1303 [inline] do_initcalls init/main.c:1319 [inline] do_basic_setup init/main.c:1338 [inline] kernel_init_freeable+0x69d/0xc40 init/main.c:1550 kernel_init+0x1c/0x2a0 init/main.c:1439 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 -> #1 (&type->lock_class){++++}-{3:3}: down_write+0x3a/0x50 kernel/locking/rwsem.c:1579 keyring_clear+0xa0/0x270 security/keys/keyring.c:1655 fscrypt_put_master_key fs/crypto/keyring.c:79 [inline] fscrypt_put_master_key+0x111/0x1e0 fs/crypto/keyring.c:67 fscrypt_put_master_key_activeref.part.0+0x259/0x340 fs/crypto/keyring.c:125 fscrypt_put_master_key_activeref+0x86/0xb0 include/linux/refcount.h:271 put_crypt_info+0x1ff/0x380 fs/crypto/keysetup.c:548 fscrypt_put_encryption_info+0x38/0x80 fs/crypto/keysetup.c:753 ext4_clear_inode+0x17d/0x230 fs/ext4/super.c:1536 ext4_free_inode+0x259/0x1430 fs/ext4/ialloc.c:278 ext4_evict_inode+0xd8e/0x1a30 fs/ext4/inode.c:303 evict+0x2ed/0x6c0 fs/inode.c:667 iput_final fs/inode.c:1741 [inline] iput.part.0+0x573/0x7c0 fs/inode.c:1767 iput+0x5c/0x80 fs/inode.c:1757 d_delete_notify include/linux/fsnotify.h:307 [inline] vfs_rmdir fs/namei.c:4222 [inline] vfs_rmdir+0x45a/0x660 fs/namei.c:4186 do_rmdir+0x3a2/0x410 fs/namei.c:4268 __do_sys_unlinkat fs/namei.c:4444 [inline] __se_sys_unlinkat fs/namei.c:4438 [inline] __x64_sys_unlinkat+0xf3/0x130 fs/namei.c:4438 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6d/0x75 -> #0 (jbd2_handle){++++}-{0:0}: check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x2478/0x3b30 kernel/locking/lockdep.c:5137 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1b1/0x540 kernel/locking/lockdep.c:5719 start_this_handle+0x114b/0x1620 fs/jbd2/transaction.c:463 jbd2__journal_start+0x2a6/0x8f0 fs/jbd2/transaction.c:520 __ext4_journal_start_sb+0x358/0x600 fs/ext4/ext4_jbd2.c:112 __ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline] ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:5939 __mark_inode_dirty+0x1f0/0xda0 fs/fs-writeback.c:2477 mark_inode_dirty_sync include/linux/fs.h:2408 [inline] iput.part.0+0x5b/0x7c0 fs/inode.c:1764 iput+0x5c/0x80 fs/inode.c:1757 dentry_unlink_inode+0x295/0x440 fs/dcache.c:400 __dentry_kill+0x1d0/0x600 fs/dcache.c:603 shrink_kill fs/dcache.c:1048 [inline] shrink_dentry_list+0x140/0x5d0 fs/dcache.c:1075 prune_dcache_sb+0xeb/0x150 fs/dcache.c:1156 super_cache_scan+0x32a/0x550 fs/super.c:221 do_shrink_slab+0x44f/0x1160 mm/shrinker.c:435 shrink_slab+0x18a/0x1310 mm/shrinker.c:662 shrink_one+0x493/0x7b0 mm/vmscan.c:4767 shrink_many mm/vmscan.c:4828 [inline] lru_gen_shrink_node mm/vmscan.c:4929 [inline] shrink_node+0x2123/0x3750 mm/vmscan.c:5888 kswapd_shrink_node mm/vmscan.c:6696 [inline] balance_pgdat+0x9d0/0x1a90 mm/vmscan.c:6886 kswapd+0x5c1/0xc10 mm/vmscan.c:7146 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 other info that might help us debug this: Chain exists of: jbd2_handle --> &type->lock_class --> fs_reclaim Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(fs_reclaim); lock(&type->lock_class); lock(fs_reclaim); rlock(jbd2_handle); *** DEADLOCK *** 2 locks held by kswapd0/112: #0: ffffffff8d928ce0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x15f/0x1a90 mm/vmscan.c:6774 #1: ffff88801d8e80e0 (&type->s_umount_key#52){++++}-{3:3}, at: super_trylock_shared fs/super.c:561 [inline] #1: ffff88801d8e80e0 (&type->s_umount_key#52){++++}-{3:3}, at: super_cache_scan+0x96/0x550 fs/super.c:196 stack backtrace: CPU: 1 PID: 112 Comm: kswapd0 Not tainted 6.8.0-syzkaller-06619-ge5e038b7ae9d #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 check_noncircular+0x31a/0x400 kernel/locking/lockdep.c:2187 check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x2478/0x3b30 kernel/locking/lockdep.c:5137 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1b1/0x540 kernel/locking/lockdep.c:5719 start_this_handle+0x114b/0x1620 fs/jbd2/transaction.c:463 jbd2__journal_start+0x2a6/0x8f0 fs/jbd2/transaction.c:520 __ext4_journal_start_sb+0x358/0x600 fs/ext4/ext4_jbd2.c:112 __ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline] ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:5939 __mark_inode_dirty+0x1f0/0xda0 fs/fs-writeback.c:2477 mark_inode_dirty_sync include/linux/fs.h:2408 [inline] iput.part.0+0x5b/0x7c0 fs/inode.c:1764 iput+0x5c/0x80 fs/inode.c:1757 dentry_unlink_inode+0x295/0x440 fs/dcache.c:400 __dentry_kill+0x1d0/0x600 fs/dcache.c:603 shrink_kill fs/dcache.c:1048 [inline] shrink_dentry_list+0x140/0x5d0 fs/dcache.c:1075 prune_dcache_sb+0xeb/0x150 fs/dcache.c:1156 super_cache_scan+0x32a/0x550 fs/super.c:221 do_shrink_slab+0x44f/0x1160 mm/shrinker.c:435 shrink_slab+0x18a/0x1310 mm/shrinker.c:662 shrink_one+0x493/0x7b0 mm/vmscan.c:4767 shrink_many mm/vmscan.c:4828 [inline] lru_gen_shrink_node mm/vmscan.c:4929 [inline] shrink_node+0x2123/0x3750 mm/vmscan.c:5888 kswapd_shrink_node mm/vmscan.c:6696 [inline] balance_pgdat+0x9d0/0x1a90 mm/vmscan.c:6886 kswapd+0x5c1/0xc10 mm/vmscan.c:7146 kthread+0x2c1/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243