program: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000035000000ffffff8595007b0000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4020c1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a0b0400f3ff000000000002000000100004800c00018007000100637400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x2000}) setuid(0xee00) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) [ 75.819072][ T5318] Bluetooth: hci0: command tx timeout [ 75.927442][ T5342] loop0: detected capacity change from 0 to 128 [ 76.020481][ T5342] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.037114][ T5342] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.053621][ T5342] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 76.057861][ T5342] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 76.068165][ T5342] fscrypt: loop0: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 76.131394][ T78] [ 76.132479][ T78] ====================================================== [ 76.135360][ T78] WARNING: possible circular locking dependency detected [ 76.138323][ T78] syzkaller #0 Not tainted [ 76.140262][ T78] ------------------------------------------------------ [ 76.143175][ T78] kswapd0/78 is trying to acquire lock: [ 76.145523][ T78] ffff8880123cd098 (&type->lock_class){+.+.}-{4:4}, at: keyring_clear+0xaf/0x240 [ 76.149418][ T78] [ 76.149418][ T78] but task is already holding lock: [ 76.152501][ T78] ffffffff8e04f800 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x8ce/0x2780 [ 76.155947][ T78] [ 76.155947][ T78] which lock already depends on the new lock. [ 76.155947][ T78] [ 76.160375][ T78] [ 76.160375][ T78] the existing dependency chain (in reverse order) is: [ 76.164291][ T78] [ 76.164291][ T78] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 76.167297][ T78] fs_reclaim_acquire+0x72/0x100 [ 76.169625][ T78] __kmalloc_cache_noprof+0x40/0x6e0 [ 76.172150][ T78] assoc_array_insert+0x92/0x2f90 [ 76.174529][ T78] __key_link_begin+0xd6/0x1f0 [ 76.176776][ T78] __key_create_or_update+0x41a/0xa30 [ 76.179227][ T78] key_create_or_update+0x42/0x60 [ 76.181611][ T78] x509_load_certificate_list+0x145/0x280 [ 76.184322][ T78] do_one_initcall+0x1fb/0x7f0 [ 76.186563][ T78] do_initcall_level+0x104/0x190 [ 76.188829][ T78] do_initcalls+0x59/0xa0 [ 76.190872][ T78] kernel_init_freeable+0x334/0x4b0 [ 76.193331][ T78] kernel_init+0x1d/0x1d0 [ 76.195456][ T78] ret_from_fork+0x599/0xb30 [ 76.197619][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.199952][ T78] [ 76.199952][ T78] -> #0 (&type->lock_class){+.+.}-{4:4}: [ 76.203234][ T78] __lock_acquire+0x15a6/0x2cf0 [ 76.205531][ T78] lock_acquire+0x117/0x340 [ 76.207687][ T78] down_write+0x96/0x1f0 [ 76.209730][ T78] keyring_clear+0xaf/0x240 [ 76.211916][ T78] fscrypt_put_master_key+0xca/0x190 [ 76.214449][ T78] put_crypt_info+0x26d/0x310 [ 76.216686][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 76.219276][ T78] ext4_clear_inode+0x170/0x2f0 [ 76.221592][ T78] ext4_evict_inode+0x9f6/0xe60 [ 76.223833][ T78] evict+0x5f4/0xae0 [ 76.225707][ T78] __dentry_kill+0x209/0x660 [ 76.227873][ T78] shrink_kill+0xa9/0x2c0 [ 76.229917][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 76.232373][ T78] prune_dcache_sb+0x10e/0x180 [ 76.234718][ T78] super_cache_scan+0x369/0x4b0 [ 76.237084][ T78] do_shrink_slab+0x6df/0x10d0 [ 76.239266][ T78] shrink_slab+0x7ef/0x10d0 [ 76.241415][ T78] shrink_one+0x28a/0x7c0 [ 76.243542][ T78] shrink_node+0x315d/0x3780 [ 76.245790][ T78] kswapd+0x13f5/0x2780 [ 76.248025][ T78] kthread+0x711/0x8a0 [ 76.250005][ T78] ret_from_fork+0x599/0xb30 [ 76.252250][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.254573][ T78] [ 76.254573][ T78] other info that might help us debug this: [ 76.254573][ T78] [ 76.258850][ T78] Possible unsafe locking scenario: [ 76.258850][ T78] [ 76.261918][ T78] CPU0 CPU1 [ 76.264279][ T78] ---- ---- [ 76.266679][ T78] lock(fs_reclaim); [ 76.268469][ T78] lock(&type->lock_class); [ 76.271600][ T78] lock(fs_reclaim); [ 76.274619][ T78] lock(&type->lock_class); [ 76.276704][ T78] [ 76.276704][ T78] *** DEADLOCK *** [ 76.276704][ T78] [ 76.280143][ T78] 2 locks held by kswapd0/78: [ 76.282221][ T78] #0: ffffffff8e04f800 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x8ce/0x2780 [ 76.285936][ T78] #1: ffff8880360c60e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_cache_scan+0x91/0x4b0 [ 76.290436][ T78] [ 76.290436][ T78] stack backtrace: [ 76.293062][ T78] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 76.293079][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.293087][ T78] Call Trace: [ 76.293095][ T78] [ 76.293100][ T78] dump_stack_lvl+0x189/0x250 [ 76.293118][ T78] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.293130][ T78] ? __pfx__printk+0x10/0x10 [ 76.293146][ T78] ? print_lock_name+0xde/0x100 [ 76.293161][ T78] print_circular_bug+0x2e2/0x300 [ 76.293176][ T78] check_noncircular+0x12e/0x150 [ 76.293192][ T78] __lock_acquire+0x15a6/0x2cf0 [ 76.293208][ T78] ? keyring_clear+0xaf/0x240 [ 76.293222][ T78] lock_acquire+0x117/0x340 [ 76.293233][ T78] ? keyring_clear+0xaf/0x240 [ 76.293250][ T78] down_write+0x96/0x1f0 [ 76.293269][ T78] ? keyring_clear+0xaf/0x240 [ 76.293283][ T78] ? __pfx_down_write+0x10/0x10 [ 76.293298][ T78] keyring_clear+0xaf/0x240 [ 76.293313][ T78] ? __pfx_keyring_clear+0x10/0x10 [ 76.293330][ T78] fscrypt_put_master_key+0xca/0x190 [ 76.293348][ T78] put_crypt_info+0x26d/0x310 [ 76.293360][ T78] fscrypt_put_encryption_info+0xf6/0x140 [ 76.293372][ T78] ext4_clear_inode+0x170/0x2f0 [ 76.293396][ T78] ext4_evict_inode+0x9f6/0xe60 [ 76.293409][ T78] ? inode_wait_for_writeback+0x14d/0x370 [ 76.293425][ T78] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 76.293441][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.293453][ T78] ? do_raw_spin_unlock+0x4d/0x240 [ 76.293467][ T78] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.293478][ T78] evict+0x5f4/0xae0 [ 76.293496][ T78] ? __pfx_evict+0x10/0x10 [ 76.293511][ T78] ? _raw_spin_unlock+0x28/0x50 [ 76.293526][ T78] ? iput+0xcc6/0x1030 [ 76.293540][ T78] __dentry_kill+0x209/0x660 [ 76.293553][ T78] ? shrink_kill+0x8d/0x2c0 [ 76.293566][ T78] shrink_kill+0xa9/0x2c0 [ 76.293578][ T78] shrink_dentry_list+0x2e0/0x5e0 [ 76.293593][ T78] prune_dcache_sb+0x10e/0x180 [ 76.293606][ T78] ? __pfx_prune_dcache_sb+0x10/0x10 [ 76.293620][ T78] ? list_lru_count_one+0x27/0x2c0 [ 76.293633][ T78] ? list_lru_count_one+0x264/0x2c0 [ 76.293644][ T78] super_cache_scan+0x369/0x4b0 [ 76.293657][ T78] do_shrink_slab+0x6df/0x10d0 [ 76.293675][ T78] shrink_slab+0x7ef/0x10d0 [ 76.293687][ T78] ? shrink_slab+0x1e8/0x10d0 [ 76.293700][ T78] ? __pfx_shrink_slab+0x10/0x10 [ 76.293718][ T78] shrink_one+0x28a/0x7c0 [ 76.293730][ T78] ? shrink_node+0x2f1f/0x3780 [ 76.293741][ T78] shrink_node+0x315d/0x3780 [ 76.293755][ T78] ? shrink_node+0x2f1f/0x3780 [ 76.293767][ T78] ? __lock_acquire+0x6b6/0x2cf0 [ 76.293781][ T78] ? percpu_ref_put+0x19/0x180 [ 76.293794][ T78] ? __pfx_shrink_node+0x10/0x10 [ 76.293805][ T78] ? percpu_ref_put+0x19/0x180 [ 76.293821][ T78] ? mem_cgroup_iter+0x420/0x460 [ 76.293836][ T78] ? mem_cgroup_iter+0x3b/0x460 [ 76.293850][ T78] kswapd+0x13f5/0x2780 [ 76.293869][ T78] ? kswapd+0x8ce/0x2780 [ 76.293885][ T78] ? __pfx_kswapd+0x10/0x10 [ 76.293900][ T78] ? do_raw_spin_lock+0x121/0x290 [ 76.293913][ T78] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 76.293925][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.293944][ T78] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.293960][ T78] ? _raw_spin_lock_bh+0x30/0x50 [ 76.293975][ T78] ? __pfx_autoremove_wake_function+0x10/0x10 [ 76.293990][ T78] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 76.294003][ T78] ? __kthread_parkme+0x7b/0x200 [ 76.294014][ T78] ? __kthread_parkme+0x1a1/0x200 [ 76.294027][ T78] kthread+0x711/0x8a0 [ 76.294041][ T78] ? __pfx_kswapd+0x10/0x10 [ 76.294055][ T78] ? __pfx_kthread+0x10/0x10 [ 76.294068][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.294083][ T78] ? lockdep_hardirqs_on+0x98/0x140 [ 76.294094][ T78] ? __pfx_kthread+0x10/0x10 [ 76.294107][ T78] ret_from_fork+0x599/0xb30 [ 76.294125][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 76.294143][ T78] ? __pfx_kthread+0x10/0x10 [ 76.294156][ T78] ret_from_fork_asm+0x1a/0x30 [ 76.294174][ T78]