program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r8}}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x3c, r10, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x57d}]}, 0x3c}}, 0x0) [ 73.937626][ T4689] Bluetooth: hci0: command tx timeout [ 74.020418][ T5342] loop0: detected capacity change from 0 to 128 [ 74.051818][ T5342] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.068376][ T5342] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.083415][ T5342] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 74.092085][ T5342] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 74.143878][ T78] [ 74.144904][ T78] ====================================================== [ 74.147821][ T78] WARNING: possible circular locking dependency detected [ 74.150799][ T78] syzkaller #0 Not tainted [ 74.152551][ T78] ------------------------------------------------------ [ 74.155237][ T78] kswapd0/78 is trying to acquire lock: [ 74.157308][ T78] ffff88801fc4d098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x240 [ 74.160833][ T78] [ 74.160833][ T78] but task is already holding lock: [ 74.163764][ T78] ffffffff8e051900 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 74.166988][ T78] [ 74.166988][ T78] which lock already depends on the new lock. [ 74.166988][ T78] [ 74.171229][ T78] [ 74.171229][ T78] the existing dependency chain (in reverse order) is: [ 74.175113][ T78] [ 74.175113][ T78] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 74.178187][ T78] fs_reclaim_acquire+0x72/0x100 [ 74.180552][ T78] __kmalloc_cache_noprof+0x40/0x700 [ 74.182968][ T78] assoc_array_insert+0x92/0x2f90 [ 74.185257][ T78] __key_link_begin+0xd6/0x1f0 [ 74.187510][ T78] __key_create_or_update+0x41a/0xa30 [ 74.190102][ T78] key_create_or_update+0x42/0x60 [ 74.192547][ T78] x509_load_certificate_list+0x145/0x280 [ 74.195097][ T78] do_one_initcall+0x1f1/0x800 [ 74.197203][ T78] do_initcall_level+0x104/0x190 [ 74.199266][ T78] do_initcalls+0x59/0xa0 [ 74.201289][ T78] kernel_init_freeable+0x2a7/0x3d0 [ 74.203780][ T78] kernel_init+0x1d/0x1d0 [ 74.205943][ T78] ret_from_fork+0x510/0xa50 [ 74.208172][ T78] ret_from_fork_asm+0x1a/0x30 [ 74.210386][ T78] [ 74.210386][ T78] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 74.213738][ T78] __lock_acquire+0x15a6/0x2cf0 [ 74.216099][ T78] lock_acquire+0x107/0x340 [ 74.218354][ T78] down_write+0x96/0x1f0 [ 74.220485][ T78] keyring_clear+0xaf/0x240 [ 74.222745][ T78] fscrypt_put_master_key+0xca/0x190 [ 74.225581][ T78] put_crypt_info+0x26d/0x310 [ 74.227635][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 74.230264][ T78] ext4_clear_inode+0x170/0x2f0 [ 74.232614][ T78] ext4_evict_inode+0x9f6/0xe60 [ 74.234958][ T78] evict+0x5f4/0xae0 [ 74.236861][ T78] __dentry_kill+0x209/0x660 [ 74.238616][ T78] shrink_kill+0xa9/0x2c0 [ 74.240382][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 74.242415][ T78] prune_dcache_sb+0x10e/0x180 [ 74.244562][ T78] super_cache_scan+0x369/0x4b0 [ 74.247024][ T78] do_shrink_slab+0x6df/0x10d0 [ 74.249173][ T78] shrink_slab+0x7ef/0x10d0 [ 74.251432][ T78] shrink_one+0x2d9/0x720 [ 74.253448][ T78] shrink_node+0x2f7d/0x35b0 [ 74.255617][ T78] kswapd+0x145a/0x2820 [ 74.257668][ T78] kthread+0x711/0x8a0 [ 74.259633][ T78] ret_from_fork+0x510/0xa50 [ 74.261751][ T78] ret_from_fork_asm+0x1a/0x30 [ 74.264005][ T78] [ 74.264005][ T78] other info that might help us debug this: [ 74.264005][ T78] [ 74.267863][ T78] Possible unsafe locking scenario: [ 74.267863][ T78] [ 74.270685][ T78] CPU0 CPU1 [ 74.273126][ T78] ---- ---- [ 74.275517][ T78] lock(fs_reclaim); [ 74.277290][ T78] lock(&type->lock_class); [ 74.280451][ T78] lock(fs_reclaim); [ 74.283413][ T78] lock(&type->lock_class); [ 74.285607][ T78] [ 74.285607][ T78] *** DEADLOCK *** [ 74.285607][ T78] [ 74.289205][ T78] 2 locks held by kswapd0/78: [ 74.291231][ T78] #0: ffffffff8e051900 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x92a/0x2820 [ 74.294945][ T78] #1: ffff8880330b80e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 74.299428][ T78] [ 74.299428][ T78] stack backtrace: [ 74.302081][ T78] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 74.302095][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.302100][ T78] Call Trace: [ 74.302104][ T78] [ 74.302108][ T78] dump_stack_lvl+0xe8/0x150 [ 74.302123][ T78] print_circular_bug+0x2e2/0x300 [ 74.302135][ T78] check_noncircular+0x12e/0x150 [ 74.302147][ T78] __lock_acquire+0x15a6/0x2cf0 [ 74.302158][ T78] ? stack_trace_save+0x9c/0xe0 [ 74.302176][ T78] ? keyring_clear+0xaf/0x240 [ 74.302188][ T78] lock_acquire+0x107/0x340 [ 74.302197][ T78] ? keyring_clear+0xaf/0x240 [ 74.302209][ T78] down_write+0x96/0x1f0 [ 74.302216][ T78] ? keyring_clear+0xaf/0x240 [ 74.302223][ T78] ? __pfx_down_write+0x10/0x10 [ 74.302231][ T78] keyring_clear+0xaf/0x240 [ 74.302239][ T78] ? __pfx_keyring_clear+0x10/0x10 [ 74.302247][ T78] fscrypt_put_master_key+0xca/0x190 [ 74.302257][ T78] put_crypt_info+0x26d/0x310 [ 74.302263][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 74.302270][ T78] ext4_clear_inode+0x170/0x2f0 [ 74.302283][ T78] ext4_evict_inode+0x9f6/0xe60 [ 74.302293][ T78] ? inode_wait_for_writeback+0x14d/0x370 [ 74.302304][ T78] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 74.302315][ T78] ? do_raw_spin_lock+0x121/0x290 [ 74.302328][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 74.302338][ T78] ? do_raw_spin_unlock+0x4d/0x240 [ 74.302350][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 74.302359][ T78] evict+0x5f4/0xae0 [ 74.302373][ T78] ? __pfx_evict+0x10/0x10 [ 74.302385][ T78] ? _raw_spin_unlock+0x28/0x50 [ 74.302396][ T78] ? iput+0xcc6/0x1030 [ 74.302406][ T78] __dentry_kill+0x209/0x660 [ 74.302420][ T78] ? shrink_kill+0x8d/0x2c0 [ 74.302430][ T78] shrink_kill+0xa9/0x2c0 [ 74.302439][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 74.302450][ T78] prune_dcache_sb+0x10e/0x180 [ 74.302460][ T78] ? __pfx_prune_dcache_sb+0x10/0x10 [ 74.302471][ T78] ? list_lru_count_one+0x27/0x2c0 [ 74.302485][ T78] ? list_lru_count_one+0x264/0x2c0 [ 74.302499][ T78] super_cache_scan+0x369/0x4b0 [ 74.302513][ T78] do_shrink_slab+0x6df/0x10d0 [ 74.302521][ T78] shrink_slab+0x7ef/0x10d0 [ 74.302527][ T78] ? shrink_slab+0x1e8/0x10d0 [ 74.302533][ T78] ? __pfx_shrink_slab+0x10/0x10 [ 74.302541][ T78] shrink_one+0x2d9/0x720 [ 74.302551][ T78] ? shrink_node+0x2d3f/0x35b0 [ 74.302560][ T78] shrink_node+0x2f7d/0x35b0 [ 74.302580][ T78] ? shrink_node+0x2d3f/0x35b0 [ 74.302592][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 74.302603][ T78] ? percpu_ref_put+0x19/0x180 [ 74.302613][ T78] ? percpu_ref_put+0x19/0x180 [ 74.302623][ T78] ? __pfx_shrink_node+0x10/0x10 [ 74.302636][ T78] ? percpu_ref_put+0x19/0x180 [ 74.302646][ T78] ? mem_cgroup_iter+0x420/0x460 [ 74.302655][ T78] ? mem_cgroup_iter+0x3b/0x460 [ 74.302662][ T78] kswapd+0x145a/0x2820 [ 74.302671][ T78] ? kswapd+0x92a/0x2820 [ 74.302680][ T78] ? __pfx_kswapd+0x10/0x10 [ 74.302687][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 74.302693][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.302701][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.302712][ T78] ? __pfx_autoremove_wake_function+0x10/0x10 [ 74.302720][ T78] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 74.302730][ T78] ? __kthread_parkme+0x7b/0x200 [ 74.302740][ T78] ? __kthread_parkme+0x1a1/0x200 [ 74.302750][ T78] kthread+0x711/0x8a0 [ 74.302762][ T78] ? __pfx_kswapd+0x10/0x10 [ 74.302771][ T78] ? __pfx_kthread+0x10/0x10 [ 74.302783][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.302796][ T78] ? __pfx_kthread+0x10/0x10 [ 74.302807][ T78] ret_from_fork+0x510/0xa50 [ 74.302818][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 74.302825][ T78] ? __switch_to+0xc9e/0x1480 [ 74.302834][ T78] ? __pfx_kthread+0x10/0x10 [ 74.302842][ T78] ret_from_fork_asm+0x1a/0x30 [ 74.302853][ T78]