program: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_clone(0x80080100, &(0x7f0000000700)="4437432f7f4c411656c90efc8267f4a41cbc7a98ec23f3b8603a7e92b392d95a7550cb5c26c7f063d17f47fd6b08aeb13953fbdeb999dc29ed427972935d1eb4d84acb6058a75bd8a1af07c88a4b86b55af29acf6dab68462b9e32a9691a3cd37622f4f2a765b61eef8af29a45", 0x6d, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000780)="605f543a224cb9c591ce4b6701b481d2f145de1b8fd9f509530004f94ae6") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x80, &(0x7f00000001c0)={[{@grpquota}, {@oldalloc}, {@nodioread_nolock}]}, 0x0, 0x4b3, &(0x7f0000000540)="$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") r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x3222000, 0x1000, 0x2, 0x7}, 0x20) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) [ 86.945100][ T5300] Bluetooth: hci0: command tx timeout [ 87.112638][ T5322] loop0: detected capacity change from 0 to 128 [ 87.243265][ T5322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.265720][ T5322] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.335281][ T5322] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 87.358560][ T5322] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 87.451627][ T78] [ 87.452782][ T78] ====================================================== [ 87.455778][ T78] WARNING: possible circular locking dependency detected [ 87.458654][ T78] syzkaller #0 Not tainted [ 87.460585][ T78] ------------------------------------------------------ [ 87.463822][ T78] kswapd0/78 is trying to acquire lock: [ 87.466310][ T78] ffff88801cb62098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x250 [ 87.470547][ T78] [ 87.470547][ T78] but task is already holding lock: [ 87.473717][ T78] ffffffff8e67e8a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x90d/0x2800 [ 87.477645][ T78] [ 87.477645][ T78] which lock already depends on the new lock. [ 87.477645][ T78] [ 87.482305][ T78] [ 87.482305][ T78] the existing dependency chain (in reverse order) is: [ 87.486045][ T78] [ 87.486045][ T78] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 87.489197][ T78] fs_reclaim_acquire+0x71/0x100 [ 87.491657][ T78] __kmalloc_cache_noprof+0x40/0x6e0 [ 87.494186][ T78] assoc_array_insert+0x92/0x2f60 [ 87.496594][ T78] __key_link_begin+0xd6/0x1f0 [ 87.498957][ T78] __key_create_or_update+0x449/0xa80 [ 87.501561][ T78] key_create_or_update+0x42/0x60 [ 87.503968][ T78] x509_load_certificate_list+0x145/0x280 [ 87.506601][ T78] do_one_initcall+0x250/0x840 [ 87.508806][ T78] do_initcall_level+0x104/0x190 [ 87.511172][ T78] do_initcalls+0x59/0xa0 [ 87.513347][ T78] kernel_init_freeable+0x2a6/0x3d0 [ 87.515901][ T78] kernel_init+0x1d/0x1d0 [ 87.518131][ T78] ret_from_fork+0x51b/0xa40 [ 87.520313][ T78] ret_from_fork_asm+0x1a/0x30 [ 87.522579][ T78] [ 87.522579][ T78] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 87.526259][ T78] __lock_acquire+0x15a5/0x2cf0 [ 87.528828][ T78] lock_acquire+0x106/0x330 [ 87.531288][ T78] down_write+0x96/0x200 [ 87.533348][ T78] keyring_clear+0xaf/0x250 [ 87.535909][ T78] fscrypt_put_master_key+0xca/0x190 [ 87.538995][ T78] put_crypt_info+0x26d/0x310 [ 87.541601][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 87.544273][ T78] ext4_clear_inode+0x170/0x2f0 [ 87.546599][ T78] ext4_evict_inode+0x9fb/0xe60 [ 87.548875][ T78] evict+0x61e/0xb10 [ 87.550807][ T78] __dentry_kill+0x1a2/0x5e0 [ 87.553033][ T78] shrink_kill+0xa9/0x2c0 [ 87.555176][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 87.557460][ T78] prune_dcache_sb+0x119/0x180 [ 87.559673][ T78] super_cache_scan+0x369/0x4b0 [ 87.561916][ T78] do_shrink_slab+0x6df/0x10d0 [ 87.564121][ T78] shrink_slab+0x830/0x1150 [ 87.566324][ T78] shrink_one+0x2d9/0x710 [ 87.568320][ T78] shrink_node+0x2f8b/0x35f0 [ 87.570592][ T78] kswapd+0x144c/0x2800 [ 87.572604][ T78] kthread+0x726/0x8b0 [ 87.574563][ T78] ret_from_fork+0x51b/0xa40 [ 87.576780][ T78] ret_from_fork_asm+0x1a/0x30 [ 87.578991][ T78] [ 87.578991][ T78] other info that might help us debug this: [ 87.578991][ T78] [ 87.584267][ T78] Possible unsafe locking scenario: [ 87.584267][ T78] [ 87.587465][ T78] CPU0 CPU1 [ 87.589701][ T78] ---- ---- [ 87.591868][ T78] lock(fs_reclaim); [ 87.593602][ T78] lock(&type->lock_class); [ 87.596639][ T78] lock(fs_reclaim); [ 87.599411][ T78] lock(&type->lock_class); [ 87.601428][ T78] [ 87.601428][ T78] *** DEADLOCK *** [ 87.601428][ T78] [ 87.605210][ T78] 2 locks held by kswapd0/78: [ 87.607621][ T78] #0: ffffffff8e67e8a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x90d/0x2800 [ 87.612001][ T78] #1: ffff88801f86e0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 87.616499][ T78] [ 87.616499][ T78] stack backtrace: [ 87.618995][ T78] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 87.619011][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.619019][ T78] Call Trace: [ 87.619027][ T78] [ 87.619033][ T78] dump_stack_lvl+0xe8/0x150 [ 87.619051][ T78] print_circular_bug+0x2e1/0x300 [ 87.619065][ T78] check_noncircular+0x12e/0x150 [ 87.619077][ T78] __lock_acquire+0x15a5/0x2cf0 [ 87.619093][ T78] ? stack_trace_save+0xa9/0x100 [ 87.619109][ T78] ? keyring_clear+0xaf/0x250 [ 87.619122][ T78] lock_acquire+0x106/0x330 [ 87.619136][ T78] ? keyring_clear+0xaf/0x250 [ 87.619151][ T78] down_write+0x96/0x200 [ 87.619165][ T78] ? keyring_clear+0xaf/0x250 [ 87.619176][ T78] ? __pfx_down_write+0x10/0x10 [ 87.619190][ T78] keyring_clear+0xaf/0x250 [ 87.619204][ T78] ? __pfx_keyring_clear+0x10/0x10 [ 87.619217][ T78] fscrypt_put_master_key+0xca/0x190 [ 87.619233][ T78] put_crypt_info+0x26d/0x310 [ 87.619248][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 87.619263][ T78] ext4_clear_inode+0x170/0x2f0 [ 87.619278][ T78] ext4_evict_inode+0x9fb/0xe60 [ 87.619293][ T78] ? inode_wait_for_writeback+0x16d/0x3b0 [ 87.619307][ T78] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 87.619317][ T78] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.619330][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.619344][ T78] ? do_raw_spin_unlock+0x4d/0x210 [ 87.619354][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.619368][ T78] evict+0x61e/0xb10 [ 87.619382][ T78] ? __pfx_evict+0x10/0x10 [ 87.619395][ T78] ? _raw_spin_unlock+0x28/0x50 [ 87.619410][ T78] ? iput+0xcc2/0x1020 [ 87.619420][ T78] __dentry_kill+0x1a2/0x5e0 [ 87.619435][ T78] ? shrink_kill+0x8d/0x2c0 [ 87.619445][ T78] shrink_kill+0xa9/0x2c0 [ 87.619455][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 87.619467][ T78] prune_dcache_sb+0x119/0x180 [ 87.619477][ T78] ? __pfx_prune_dcache_sb+0x10/0x10 [ 87.619488][ T78] ? list_lru_count_one+0x27/0x2c0 [ 87.619499][ T78] ? list_lru_count_one+0x264/0x2c0 [ 87.619518][ T78] super_cache_scan+0x369/0x4b0 [ 87.619534][ T78] do_shrink_slab+0x6df/0x10d0 [ 87.619549][ T78] shrink_slab+0x830/0x1150 [ 87.619560][ T78] ? shrink_slab+0x1ef/0x1150 [ 87.619571][ T78] ? __pfx_shrink_slab+0x10/0x10 [ 87.619585][ T78] shrink_one+0x2d9/0x710 [ 87.619596][ T78] ? shrink_node+0x2d4d/0x35f0 [ 87.619605][ T78] shrink_node+0x2f8b/0x35f0 [ 87.619616][ T78] ? shrink_node+0x2d4d/0x35f0 [ 87.619626][ T78] ? __lock_acquire+0x6b5/0x2cf0 [ 87.619641][ T78] ? percpu_ref_put+0x19/0x180 [ 87.619650][ T78] ? percpu_ref_put+0x19/0x180 [ 87.619660][ T78] ? __pfx_shrink_node+0x10/0x10 [ 87.619669][ T78] ? percpu_ref_put+0x19/0x180 [ 87.619679][ T78] ? mem_cgroup_iter+0x420/0x450 [ 87.619691][ T78] ? mem_cgroup_iter+0x3b/0x450 [ 87.619702][ T78] kswapd+0x144c/0x2800 [ 87.619719][ T78] ? kswapd+0x90d/0x2800 [ 87.619733][ T78] ? __pfx_kswapd+0x10/0x10 [ 87.619743][ T78] ? __lock_acquire+0x6b5/0x2cf0 [ 87.619758][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.619769][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.619785][ T78] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.619798][ T78] ? __kthread_parkme+0x7a/0x1f0 [ 87.619809][ T78] ? __kthread_parkme+0x19c/0x1f0 [ 87.619820][ T78] kthread+0x726/0x8b0 [ 87.619832][ T78] ? __pfx_kswapd+0x10/0x10 [ 87.619844][ T78] ? __pfx_kthread+0x10/0x10 [ 87.619855][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.619869][ T78] ? __pfx_kthread+0x10/0x10 [ 87.619880][ T78] ret_from_fork+0x51b/0xa40 [ 87.619890][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 87.619898][ T78] ? __switch_to+0xc82/0x1410 [ 87.619913][ T78] ? __pfx_kthread+0x10/0x10 [ 87.619924][ T78] ret_from_fork_asm+0x1a/0x30 [ 87.619942][ T78]