program: io_setup(0x0, &(0x7f0000000040)=0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x352, 0xa000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[]) io_destroy(r0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000780)='mnt/encrypted_dir\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1803000000001000fd21000000181000"/28, @ANYRES64=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) timer_create(0x5, &(0x7f0000000280)={0x0, 0x39, 0x1, @thr={&(0x7f00000001c0)="f6732ebeff6c72bcfb17df0023d27d6fd1b20c64c3d47e544ffa92b0d980efd3b7914f7f46afd9befe2440f1c5736400b1547fc9c35e96e4088523bd110504290bdfd3e1854bde25f96f36e17fd61d7dc3b87d4ec230e8ab14b14d1eaaef0825721124669a3532b0ccf6d67e95ae0bdd100b9da8ce986306f064011a7ee774d27b0d3e8e40b1055c04dbbb0758355e1f7c516a4ba3eb257c8c16eadea72cb8f0d686eccf", &(0x7f0000000000)="c5e7dc18940101d7daa98d678fb61a80ae1a1495fcaad6bae1881fcca84bc59c6d6bd8911abc9a55ac3f454279dfcb46"}}, &(0x7f00000002c0)) [ 85.553580][ T46] Bluetooth: hci0: command tx timeout [ 85.712140][ T5345] loop0: detected capacity change from 0 to 128 [ 85.759506][ T5345] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.775454][ T5345] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.821453][ T5345] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 85.858043][ T5345] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 85.918336][ T78] [ 85.919411][ T78] ====================================================== [ 85.922300][ T78] WARNING: possible circular locking dependency detected [ 85.925277][ T78] syzkaller #0 Not tainted [ 85.927171][ T78] ------------------------------------------------------ [ 85.930289][ T78] kswapd0/78 is trying to acquire lock: [ 85.932580][ T78] ffff88801a064098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x240 [ 85.936827][ T78] [ 85.936827][ T78] but task is already holding lock: [ 85.940054][ T78] ffffffff8e0518a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 85.943270][ T78] [ 85.943270][ T78] which lock already depends on the new lock. [ 85.943270][ T78] [ 85.947531][ T78] [ 85.947531][ T78] the existing dependency chain (in reverse order) is: [ 85.951223][ T78] [ 85.951223][ T78] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 85.954282][ T78] fs_reclaim_acquire+0x72/0x100 [ 85.956713][ T78] __kmalloc_cache_noprof+0x40/0x700 [ 85.959358][ T78] assoc_array_insert+0x92/0x2f90 [ 85.961701][ T78] __key_link_begin+0xd6/0x1f0 [ 85.964127][ T78] __key_create_or_update+0x41a/0xa30 [ 85.966805][ T78] key_create_or_update+0x42/0x60 [ 85.969374][ T78] x509_load_certificate_list+0x145/0x280 [ 85.972204][ T78] do_one_initcall+0x1f1/0x800 [ 85.974570][ T78] do_initcall_level+0x104/0x190 [ 85.976553][ T78] do_initcalls+0x59/0xa0 [ 85.978501][ T78] kernel_init_freeable+0x2a7/0x3d0 [ 85.981069][ T78] kernel_init+0x1d/0x1d0 [ 85.983217][ T78] ret_from_fork+0x510/0xa50 [ 85.985527][ T78] ret_from_fork_asm+0x1a/0x30 [ 85.987781][ T78] [ 85.987781][ T78] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 85.991101][ T78] __lock_acquire+0x15a6/0x2cf0 [ 85.993292][ T78] lock_acquire+0x107/0x340 [ 85.995331][ T78] down_write+0x96/0x1f0 [ 85.997492][ T78] keyring_clear+0xaf/0x240 [ 85.999734][ T78] fscrypt_put_master_key+0xca/0x190 [ 86.002271][ T78] put_crypt_info+0x26d/0x310 [ 86.004473][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 86.007006][ T78] ext4_clear_inode+0x170/0x2f0 [ 86.009139][ T78] ext4_evict_inode+0x9f6/0xe60 [ 86.011499][ T78] evict+0x5f4/0xae0 [ 86.013377][ T78] __dentry_kill+0x209/0x660 [ 86.015377][ T78] shrink_kill+0xa9/0x2c0 [ 86.017366][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 86.019640][ T78] prune_dcache_sb+0x10e/0x180 [ 86.021765][ T78] super_cache_scan+0x369/0x4b0 [ 86.023807][ T78] do_shrink_slab+0x6df/0x10d0 [ 86.026199][ T78] shrink_slab+0x7ef/0x10d0 [ 86.029020][ T78] shrink_one+0x2d9/0x720 [ 86.031244][ T78] shrink_node+0x2f7d/0x35b0 [ 86.033601][ T78] kswapd+0x145a/0x2820 [ 86.035692][ T78] kthread+0x711/0x8a0 [ 86.037781][ T78] ret_from_fork+0x510/0xa50 [ 86.040071][ T78] ret_from_fork_asm+0x1a/0x30 [ 86.042391][ T78] [ 86.042391][ T78] other info that might help us debug this: [ 86.042391][ T78] [ 86.046797][ T78] Possible unsafe locking scenario: [ 86.046797][ T78] [ 86.050079][ T78] CPU0 CPU1 [ 86.052516][ T78] ---- ---- [ 86.054921][ T78] lock(fs_reclaim); [ 86.056683][ T78] lock(&type->lock_class); [ 86.059773][ T78] lock(fs_reclaim); [ 86.062647][ T78] lock(&type->lock_class); [ 86.064721][ T78] [ 86.064721][ T78] *** DEADLOCK *** [ 86.064721][ T78] [ 86.068200][ T78] 2 locks held by kswapd0/78: [ 86.070402][ T78] #0: ffffffff8e0518a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 86.074106][ T78] #1: ffff888041cec0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 86.078558][ T78] [ 86.078558][ T78] stack backtrace: [ 86.081224][ T78] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 86.081239][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.081246][ T78] Call Trace: [ 86.081276][ T78] [ 86.081283][ T78] dump_stack_lvl+0xe8/0x150 [ 86.081301][ T78] print_circular_bug+0x2e2/0x300 [ 86.081316][ T78] check_noncircular+0x12e/0x150 [ 86.081330][ T78] __lock_acquire+0x15a6/0x2cf0 [ 86.081342][ T78] ? stack_trace_save+0x9c/0xe0 [ 86.081362][ T78] ? keyring_clear+0xaf/0x240 [ 86.081375][ T78] lock_acquire+0x107/0x340 [ 86.081385][ T78] ? keyring_clear+0xaf/0x240 [ 86.081400][ T78] down_write+0x96/0x1f0 [ 86.081412][ T78] ? keyring_clear+0xaf/0x240 [ 86.081423][ T78] ? __pfx_down_write+0x10/0x10 [ 86.081436][ T78] keyring_clear+0xaf/0x240 [ 86.081449][ T78] ? __pfx_keyring_clear+0x10/0x10 [ 86.081464][ T78] fscrypt_put_master_key+0xca/0x190 [ 86.081480][ T78] put_crypt_info+0x26d/0x310 [ 86.081491][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 86.081501][ T78] ext4_clear_inode+0x170/0x2f0 [ 86.081512][ T78] ext4_evict_inode+0x9f6/0xe60 [ 86.081523][ T78] ? inode_wait_for_writeback+0x14d/0x370 [ 86.081537][ T78] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 86.081550][ T78] ? do_raw_spin_lock+0x121/0x290 [ 86.081565][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.081576][ T78] ? do_raw_spin_unlock+0x4d/0x240 [ 86.081590][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.081600][ T78] evict+0x5f4/0xae0 [ 86.081617][ T78] ? __pfx_evict+0x10/0x10 [ 86.081629][ T78] ? _raw_spin_unlock+0x28/0x50 [ 86.081644][ T78] ? iput+0xcc6/0x1030 [ 86.081657][ T78] __dentry_kill+0x209/0x660 [ 86.081672][ T78] ? shrink_kill+0x8d/0x2c0 [ 86.081683][ T78] shrink_kill+0xa9/0x2c0 [ 86.081694][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 86.081707][ T78] prune_dcache_sb+0x10e/0x180 [ 86.081716][ T78] ? __pfx_prune_dcache_sb+0x10/0x10 [ 86.081728][ T78] ? list_lru_count_one+0x27/0x2c0 [ 86.081745][ T78] ? list_lru_count_one+0x264/0x2c0 [ 86.081760][ T78] super_cache_scan+0x369/0x4b0 [ 86.081778][ T78] do_shrink_slab+0x6df/0x10d0 [ 86.081792][ T78] shrink_slab+0x7ef/0x10d0 [ 86.081803][ T78] ? shrink_slab+0x1e8/0x10d0 [ 86.081814][ T78] ? __pfx_shrink_slab+0x10/0x10 [ 86.081828][ T78] shrink_one+0x2d9/0x720 [ 86.081846][ T78] ? shrink_node+0x2d3f/0x35b0 [ 86.081861][ T78] shrink_node+0x2f7d/0x35b0 [ 86.081878][ T78] ? shrink_node+0x2d3f/0x35b0 [ 86.081894][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 86.081906][ T78] ? percpu_ref_put+0x19/0x180 [ 86.081917][ T78] ? percpu_ref_put+0x19/0x180 [ 86.081929][ T78] ? __pfx_shrink_node+0x10/0x10 [ 86.081944][ T78] ? percpu_ref_put+0x19/0x180 [ 86.081955][ T78] ? mem_cgroup_iter+0x420/0x460 [ 86.081974][ T78] ? mem_cgroup_iter+0x3b/0x460 [ 86.081986][ T78] kswapd+0x145a/0x2820 [ 86.082002][ T78] ? kswapd+0x92a/0x2820 [ 86.082017][ T78] ? __pfx_kswapd+0x10/0x10 [ 86.082028][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 86.082040][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.082054][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.082073][ T78] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.082088][ T78] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.082104][ T78] ? __kthread_parkme+0x7b/0x200 [ 86.082116][ T78] ? __kthread_parkme+0x1a1/0x200 [ 86.082129][ T78] kthread+0x711/0x8a0 [ 86.082143][ T78] ? __pfx_kswapd+0x10/0x10 [ 86.082155][ T78] ? __pfx_kthread+0x10/0x10 [ 86.082168][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.082182][ T78] ? __pfx_kthread+0x10/0x10 [ 86.082194][ T78] ret_from_fork+0x510/0xa50 [ 86.082206][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 86.082215][ T78] ? __switch_to+0xc9e/0x1480 [ 86.082231][ T78] ? __pfx_kthread+0x10/0x10 [ 86.082244][ T78] ret_from_fork_asm+0x1a/0x30 [ 86.082262][ T78]