program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffff1a000000abaaaaaaaa0008060001080006040000ffffffffffffe0000001ffffffffffffac1e0001"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aefeef64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000140)="530000002412ffa0000000b2f84302da9f670010000000000000000000400000000000009f172dc130398dc2f8c775ef3acd698f8e3ed771b2a62f8318084dd0e1548fcc0c8bea959ac1ae251d4b0edbf5ac23ee5383d267", 0x58}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040), 0x0, 0x258, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000000c0)='mnt/encrypted_dir\x00', &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r8 = io_uring_setup(0x282, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x0, 0x3}) dup3(r7, r8, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"69e97ff97c3bf2f2c29a88e8558a1384", 0x0, 0x0, {0x0, 0x4318}, {0x7, 0x401}, 0xe420, [0x8000000000000003, 0x4, 0xffffffffffffffff, 0x1, 0x17c, 0x14, 0x4, 0x5, 0x1, 0x1000000009, 0x1000, 0x5, 0x3, 0x2, 0x8, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"3c51e1d4722d83b6afdd0bd88d212541", r9, 0x0, {0xfb95, 0x2}, {0x8, 0xcd}, 0xfffffffffffffff9, [0x100, 0x9, 0x6, 0x8, 0x1, 0x9, 0x3, 0x9, 0x9, 0x0, 0x7ff, 0xd, 0x401, 0x2, 0x80000000, 0x3]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000800030001feff0ffb060200000204e20300"], 0x18) [ 85.350588][ T46] Bluetooth: hci0: command tx timeout [ 85.448920][ T5343] loop0: detected capacity change from 0 to 128 [ 85.542719][ T5343] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.561612][ T5343] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.592096][ T5343] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 85.601742][ T5343] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 85.729884][ T79] [ 85.731148][ T79] ====================================================== [ 85.734204][ T79] WARNING: possible circular locking dependency detected [ 85.737418][ T79] syzkaller #0 Not tainted [ 85.739457][ T79] ------------------------------------------------------ [ 85.742663][ T79] kswapd0/79 is trying to acquire lock: [ 85.745175][ T79] ffff88801a44d098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x250 [ 85.749440][ T79] [ 85.749440][ T79] but task is already holding lock: [ 85.752793][ T79] ffffffff8e451820 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x90d/0x2800 [ 85.756601][ T79] [ 85.756601][ T79] which lock already depends on the new lock. [ 85.756601][ T79] [ 85.761206][ T79] [ 85.761206][ T79] the existing dependency chain (in reverse order) is: [ 85.765212][ T79] [ 85.765212][ T79] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 85.768427][ T79] fs_reclaim_acquire+0x71/0x100 [ 85.770961][ T79] __kmalloc_cache_noprof+0x40/0x6e0 [ 85.773609][ T79] assoc_array_insert+0x92/0x2f60 [ 85.776188][ T79] __key_link_begin+0xd6/0x1f0 [ 85.778739][ T79] __key_create_or_update+0x449/0xa80 [ 85.781421][ T79] key_create_or_update+0x42/0x60 [ 85.783968][ T79] x509_load_certificate_list+0x145/0x280 [ 85.786892][ T79] do_one_initcall+0x250/0x840 [ 85.789340][ T79] do_initcall_level+0x104/0x190 [ 85.791991][ T79] do_initcalls+0x59/0xa0 [ 85.794290][ T79] kernel_init_freeable+0x2a6/0x3d0 [ 85.796997][ T79] kernel_init+0x1d/0x1d0 [ 85.799295][ T79] ret_from_fork+0x51b/0xa40 [ 85.801515][ T79] ret_from_fork_asm+0x1a/0x30 [ 85.803830][ T79] [ 85.803830][ T79] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 85.807215][ T79] __lock_acquire+0x15a5/0x2cf0 [ 85.809612][ T79] lock_acquire+0x106/0x330 [ 85.811844][ T79] down_write+0x96/0x200 [ 85.814003][ T79] keyring_clear+0xaf/0x250 [ 85.816289][ T79] fscrypt_put_master_key+0xca/0x190 [ 85.818921][ T79] put_crypt_info+0x26d/0x310 [ 85.821302][ T79] fscrypt_put_encryption_info+0xf6/0x140 [ 85.824243][ T79] ext4_clear_inode+0x170/0x2f0 [ 85.826827][ T79] ext4_evict_inode+0x9fb/0xe60 [ 85.829295][ T79] evict+0x61e/0xb10 [ 85.831410][ T79] __dentry_kill+0x209/0x660 [ 85.833722][ T79] shrink_kill+0xa9/0x2c0 [ 85.835938][ T79] shrink_dentry_list+0x2e0/0x5e0 [ 85.838555][ T79] prune_dcache_sb+0x119/0x180 [ 85.840864][ T79] super_cache_scan+0x369/0x4b0 [ 85.843253][ T79] do_shrink_slab+0x6df/0x10d0 [ 85.845716][ T79] shrink_slab+0x830/0x1150 [ 85.848066][ T79] shrink_one+0x2d9/0x710 [ 85.850241][ T79] shrink_node+0x2f8b/0x35f0 [ 85.852495][ T79] kswapd+0x144c/0x2800 [ 85.854581][ T79] kthread+0x726/0x8b0 [ 85.856546][ T79] ret_from_fork+0x51b/0xa40 [ 85.858933][ T79] ret_from_fork_asm+0x1a/0x30 [ 85.861239][ T79] [ 85.861239][ T79] other info that might help us debug this: [ 85.861239][ T79] [ 85.865901][ T79] Possible unsafe locking scenario: [ 85.865901][ T79] [ 85.869332][ T79] CPU0 CPU1 [ 85.871824][ T79] ---- ---- [ 85.874382][ T79] lock(fs_reclaim); [ 85.876057][ T79] lock(&type->lock_class); [ 85.879209][ T79] lock(fs_reclaim); [ 85.882091][ T79] lock(&type->lock_class); [ 85.884187][ T79] [ 85.884187][ T79] *** DEADLOCK *** [ 85.884187][ T79] [ 85.887868][ T79] 2 locks held by kswapd0/79: [ 85.890065][ T79] #0: ffffffff8e451820 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x90d/0x2800 [ 85.893612][ T79] #1: ffff88803b6c00e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 85.898293][ T79] [ 85.898293][ T79] stack backtrace: [ 85.900833][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 85.900845][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.900850][ T79] Call Trace: [ 85.900855][ T79] [ 85.900859][ T79] dump_stack_lvl+0xe8/0x150 [ 85.900872][ T79] print_circular_bug+0x2e1/0x300 [ 85.900886][ T79] check_noncircular+0x12e/0x150 [ 85.900899][ T79] __lock_acquire+0x15a5/0x2cf0 [ 85.900910][ T79] ? stack_trace_save+0xa9/0x100 [ 85.900930][ T79] ? keyring_clear+0xaf/0x250 [ 85.900943][ T79] lock_acquire+0x106/0x330 [ 85.900952][ T79] ? keyring_clear+0xaf/0x250 [ 85.900967][ T79] down_write+0x96/0x200 [ 85.900982][ T79] ? keyring_clear+0xaf/0x250 [ 85.900994][ T79] ? __pfx_down_write+0x10/0x10 [ 85.901009][ T79] keyring_clear+0xaf/0x250 [ 85.901022][ T79] ? __pfx_keyring_clear+0x10/0x10 [ 85.901037][ T79] fscrypt_put_master_key+0xca/0x190 [ 85.901054][ T79] put_crypt_info+0x26d/0x310 [ 85.901064][ T79] fscrypt_put_encryption_info+0xf6/0x140 [ 85.901075][ T79] ext4_clear_inode+0x170/0x2f0 [ 85.901091][ T79] ext4_evict_inode+0x9fb/0xe60 [ 85.901098][ T79] ? inode_wait_for_writeback+0x16d/0x3b0 [ 85.901112][ T79] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 85.901124][ T79] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.901138][ T79] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.901147][ T79] ? do_raw_spin_unlock+0x4d/0x230 [ 85.901161][ T79] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.901171][ T79] evict+0x61e/0xb10 [ 85.901186][ T79] ? __pfx_evict+0x10/0x10 [ 85.901200][ T79] ? _raw_spin_unlock+0x28/0x50 [ 85.901210][ T79] ? iput+0xcc2/0x1020 [ 85.901218][ T79] __dentry_kill+0x209/0x660 [ 85.901231][ T79] ? shrink_kill+0x8d/0x2c0 [ 85.901241][ T79] shrink_kill+0xa9/0x2c0 [ 85.901254][ T79] shrink_dentry_list+0x2e0/0x5e0 [ 85.901267][ T79] prune_dcache_sb+0x119/0x180 [ 85.901278][ T79] ? __pfx_prune_dcache_sb+0x10/0x10 [ 85.901292][ T79] ? list_lru_count_one+0x27/0x2c0 [ 85.901308][ T79] ? list_lru_count_one+0x264/0x2c0 [ 85.901325][ T79] super_cache_scan+0x369/0x4b0 [ 85.901343][ T79] do_shrink_slab+0x6df/0x10d0 [ 85.901356][ T79] shrink_slab+0x830/0x1150 [ 85.901368][ T79] ? shrink_slab+0x1ef/0x1150 [ 85.901379][ T79] ? __pfx_shrink_slab+0x10/0x10 [ 85.901392][ T79] shrink_one+0x2d9/0x710 [ 85.901407][ T79] ? shrink_node+0x2d4d/0x35f0 [ 85.901421][ T79] shrink_node+0x2f8b/0x35f0 [ 85.901439][ T79] ? shrink_node+0x2d4d/0x35f0 [ 85.901453][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 85.901464][ T79] ? percpu_ref_put+0x19/0x180 [ 85.901474][ T79] ? percpu_ref_put+0x19/0x180 [ 85.901485][ T79] ? __pfx_shrink_node+0x10/0x10 [ 85.901499][ T79] ? percpu_ref_put+0x19/0x180 [ 85.901510][ T79] ? mem_cgroup_iter+0x420/0x450 [ 85.901523][ T79] ? mem_cgroup_iter+0x3b/0x450 [ 85.901533][ T79] kswapd+0x144c/0x2800 [ 85.901543][ T79] ? kswapd+0x90d/0x2800 [ 85.901552][ T79] ? __pfx_kswapd+0x10/0x10 [ 85.901558][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 85.901565][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.901574][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.901592][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.901606][ T79] ? __kthread_parkme+0x7a/0x1f0 [ 85.901618][ T79] ? __kthread_parkme+0x19c/0x1f0 [ 85.901630][ T79] kthread+0x726/0x8b0 [ 85.901643][ T79] ? __pfx_kswapd+0x10/0x10 [ 85.901655][ T79] ? __pfx_kthread+0x10/0x10 [ 85.901668][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.901679][ T79] ? __pfx_kthread+0x10/0x10 [ 85.901691][ T79] ret_from_fork+0x51b/0xa40 [ 85.901703][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 85.901708][ T79] ? __switch_to+0xc82/0x1410 [ 85.901718][ T79] ? __pfx_kthread+0x10/0x10 [ 85.901726][ T79] ret_from_fork_asm+0x1a/0x30 [ 85.901738][ T79]