program: r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80040, 0xb1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000880)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @default}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000007c0)={'syz', 0x1}, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2bdd5b46557c2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000940)={@desc={0x1, 0x0, @desc1}, 0x21, r7, '\x00', @c}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x40, &(0x7f00000009c0)={[{@errors_continue}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@resuid}, {@resuid}, {@dioread_nolock}, {@noacl}, {@discard}, {@nogrpid}], [{@measure}, {@measure}, {@subj_role={'subj_role', 0x3d, 'noauto_da_alloc'}}, {@obj_role={'obj_role', 0x3d, 'fscrypt-provisioning\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x6, 0x61, 0x52, 0x63, 0x64, 0x32, 0x38], 0x2d, [0x66, 0x36, 0x30, 0x61], 0x2d, [0x62, 0x36, 0x39, 0x30], 0x2d, [0xc, 0x38, 0x32, 0x38], 0x2d, [0x37, 0x51, 0x66, 0x31, 0x66, 0x30, 0x64, 0x31]}}}, {@subj_type={'subj_type', 0x3d, ':)[@*+'}}]}, 0x0, 0x574, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r9, 0x800c6613, 0x1000000000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000700)={{0xce, 0x3b}, 'port0\x00', 0x14, 0x20, 0xbb, 0x915, 0x7, 0x9, 0x14418d03, 0x0, 0x4, 0xb}) [ 85.163860][ T5295] Bluetooth: hci0: command tx timeout [ 85.270633][ T5316] loop0: detected capacity change from 0 to 128 [ 85.360560][ T5316] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.392942][ T5316] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.444558][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.473528][ T5316] bond0: (slave rose0): Enslaving as an active interface with an up link [ 85.513243][ T5316] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 85.546963][ T5316] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 85.567324][ T5316] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 85.685375][ T76] [ 85.686443][ T76] ====================================================== [ 85.689229][ T76] WARNING: possible circular locking dependency detected [ 85.691912][ T76] syzkaller #0 Not tainted [ 85.693714][ T76] ------------------------------------------------------ [ 85.696477][ T76] kswapd0/76 is trying to acquire lock: [ 85.698646][ T76] ffff888000c91098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x250 [ 85.702434][ T76] [ 85.702434][ T76] but task is already holding lock: [ 85.705732][ T76] ffffffff8e886800 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x935/0x2e10 [ 85.709216][ T76] [ 85.709216][ T76] which lock already depends on the new lock. [ 85.709216][ T76] [ 85.713012][ T76] [ 85.713012][ T76] the existing dependency chain (in reverse order) is: [ 85.716629][ T76] [ 85.716629][ T76] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 85.719543][ T76] fs_reclaim_acquire+0x71/0x100 [ 85.721654][ T76] __kmalloc_cache_noprof+0x40/0x660 [ 85.724082][ T76] assoc_array_insert+0x92/0x2f60 [ 85.726472][ T76] __key_link_begin+0xd6/0x1f0 [ 85.728649][ T76] __key_create_or_update+0x449/0xa80 [ 85.730894][ T76] key_create_or_update+0x42/0x60 [ 85.732813][ T76] x509_load_certificate_list+0x145/0x280 [ 85.735195][ T76] do_one_initcall+0x250/0x8d0 [ 85.737481][ T76] do_initcall_level+0x104/0x190 [ 85.739540][ T76] do_initcalls+0x59/0xa0 [ 85.741451][ T76] kernel_init_freeable+0x2a6/0x3e0 [ 85.743787][ T76] kernel_init+0x1d/0x1d0 [ 85.745941][ T76] ret_from_fork+0x51e/0xb90 [ 85.748204][ T76] ret_from_fork_asm+0x1a/0x30 [ 85.750531][ T76] [ 85.750531][ T76] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 85.753900][ T76] __lock_acquire+0x15a5/0x2cf0 [ 85.756198][ T76] lock_acquire+0xf0/0x2e0 [ 85.758268][ T76] down_write+0x96/0x200 [ 85.760382][ T76] keyring_clear+0xaf/0x250 [ 85.762625][ T76] fscrypt_put_master_key+0xca/0x190 [ 85.765103][ T76] put_crypt_info+0x26d/0x310 [ 85.767387][ T76] fscrypt_put_encryption_info+0xf6/0x140 [ 85.770059][ T76] ext4_evict_inode+0x9fb/0xeb0 [ 85.772391][ T76] evict+0x61e/0xb10 [ 85.774224][ T76] __dentry_kill+0x1a2/0x5e0 [ 85.776084][ T76] shrink_kill+0xa9/0x2c0 [ 85.778058][ T76] shrink_dentry_list+0x2e0/0x5e0 [ 85.780388][ T76] prune_dcache_sb+0x119/0x180 [ 85.782618][ T76] super_cache_scan+0x369/0x4b0 [ 85.784741][ T76] do_shrink_slab+0x6df/0x1170 [ 85.786898][ T76] shrink_slab+0x830/0x1150 [ 85.788996][ T76] shrink_one+0x2d9/0x710 [ 85.790849][ T76] shrink_node+0x3197/0x3a90 [ 85.792867][ T76] kswapd+0x1742/0x2e10 [ 85.794807][ T76] kthread+0x388/0x470 [ 85.796800][ T76] ret_from_fork+0x51e/0xb90 [ 85.799030][ T76] ret_from_fork_asm+0x1a/0x30 [ 85.801046][ T76] [ 85.801046][ T76] other info that might help us debug this: [ 85.801046][ T76] [ 85.804485][ T76] Possible unsafe locking scenario: [ 85.804485][ T76] [ 85.806977][ T76] CPU0 CPU1 [ 85.809286][ T76] ---- ---- [ 85.811400][ T76] lock(fs_reclaim); [ 85.813065][ T76] lock(&type->lock_class); [ 85.815910][ T76] lock(fs_reclaim); [ 85.818514][ T76] lock(&type->lock_class); [ 85.820316][ T76] [ 85.820316][ T76] *** DEADLOCK *** [ 85.820316][ T76] [ 85.823398][ T76] 2 locks held by kswapd0/76: [ 85.825497][ T76] #0: ffffffff8e886800 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x935/0x2e10 [ 85.829213][ T76] #1: ffff88801f6820e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 85.833409][ T76] [ 85.833409][ T76] stack backtrace: [ 85.835765][ T76] CPU: 0 UID: 0 PID: 76 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 85.835774][ T76] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.835779][ T76] Call Trace: [ 85.835785][ T76] [ 85.835789][ T76] dump_stack_lvl+0xe8/0x150 [ 85.835807][ T76] print_circular_bug+0x2e1/0x300 [ 85.835819][ T76] check_noncircular+0x12e/0x150 [ 85.835853][ T76] __lock_acquire+0x15a5/0x2cf0 [ 85.835873][ T76] ? check_noncircular+0xda/0x150 [ 85.837402][ T76] lock_acquire+0xf0/0x2e0 [ 85.837414][ T76] ? keyring_clear+0xaf/0x250 [ 85.837429][ T76] down_write+0x96/0x200 [ 85.837440][ T76] ? keyring_clear+0xaf/0x250 [ 85.837452][ T76] ? __pfx_down_write+0x10/0x10 [ 85.837463][ T76] keyring_clear+0xaf/0x250 [ 85.837476][ T76] ? __pfx_keyring_clear+0x10/0x10 [ 85.837485][ T76] ? crypto_destroy_tfm+0x36/0x320 [ 85.837497][ T76] fscrypt_put_master_key+0xca/0x190 [ 85.837510][ T76] put_crypt_info+0x26d/0x310 [ 85.837518][ T76] fscrypt_put_encryption_info+0xf6/0x140 [ 85.837525][ T76] ext4_evict_inode+0x9fb/0xeb0 [ 85.837534][ T76] ? inode_wait_for_writeback+0x16d/0x3b0 [ 85.837550][ T76] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 85.837564][ T76] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.837575][ T76] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.837587][ T76] ? do_raw_spin_unlock+0x4d/0x210 [ 85.837597][ T76] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.837609][ T76] evict+0x61e/0xb10 [ 85.837621][ T76] ? __pfx_evict+0x10/0x10 [ 85.837636][ T76] ? _raw_spin_unlock+0x28/0x50 [ 85.837648][ T76] ? iput+0xb25/0xe80 [ 85.837660][ T76] __dentry_kill+0x1a2/0x5e0 [ 85.837667][ T76] ? shrink_kill+0x8d/0x2c0 [ 85.837678][ T76] shrink_kill+0xa9/0x2c0 [ 85.837690][ T76] shrink_dentry_list+0x2e0/0x5e0 [ 85.837703][ T76] prune_dcache_sb+0x119/0x180 [ 85.837716][ T76] ? __pfx_prune_dcache_sb+0x10/0x10 [ 85.837729][ T76] ? list_lru_count_one+0x27/0x2c0 [ 85.837740][ T76] ? list_lru_count_one+0x264/0x2c0 [ 85.837749][ T76] super_cache_scan+0x369/0x4b0 [ 85.837766][ T76] do_shrink_slab+0x6df/0x1170 [ 85.837781][ T76] shrink_slab+0x830/0x1150 [ 85.837800][ T76] ? shrink_slab+0x1ef/0x1150 [ 85.837812][ T76] ? __pfx_shrink_slab+0x10/0x10 [ 85.837824][ T76] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 85.837835][ T76] ? rcu_is_watching+0x15/0xb0 [ 85.837850][ T76] shrink_one+0x2d9/0x710 [ 85.837861][ T76] ? shrink_node+0x2d6a/0x3a90 [ 85.837870][ T76] shrink_node+0x3197/0x3a90 [ 85.837880][ T76] ? finish_task_switch+0x240/0x920 [ 85.837893][ T76] ? __lock_acquire+0x6b5/0x2cf0 [ 85.837905][ T76] ? shrink_node+0x2d6a/0x3a90 [ 85.837917][ T76] ? __lock_acquire+0x6b5/0x2cf0 [ 85.837930][ T76] ? percpu_ref_put+0x19/0x180 [ 85.837940][ T76] ? __pfx_shrink_node+0x10/0x10 [ 85.837950][ T76] ? percpu_ref_put+0x19/0x180 [ 85.837959][ T76] ? percpu_ref_put+0x19/0x180 [ 85.837969][ T76] ? mem_cgroup_iter+0x420/0x450 [ 85.837980][ T76] ? mem_cgroup_iter+0x3b/0x450 [ 85.837992][ T76] kswapd+0x1742/0x2e10 [ 85.838010][ T76] ? kswapd+0x935/0x2e10 [ 85.838024][ T76] ? __pfx_kswapd+0x10/0x10 [ 85.838038][ T76] ? __lock_acquire+0x6b5/0x2cf0 [ 85.838048][ T76] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 85.838059][ T76] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.838071][ T76] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.838078][ T76] ? __kthread_parkme+0x7a/0x1f0 [ 85.838088][ T76] kthread+0x388/0x470 [ 85.838095][ T76] ? __pfx_kswapd+0x10/0x10 [ 85.838103][ T76] ? __pfx_kthread+0x10/0x10 [ 85.838113][ T76] ret_from_fork+0x51e/0xb90 [ 85.838128][ T76] ? __pfx_ret_from_fork+0x10/0x10 [ 85.838140][ T76] ? __switch_to+0xc7d/0x1450 [ 85.838152][ T76] ? __pfx_kthread+0x10/0x10 [ 85.838161][ T76] ret_from_fork_asm+0x1a/0x30 [ 85.838180][ T76]