================================== WARNING: Nested lock was not taken 6.2.0-rc7-syzkaller-00119-geaed33698e35 #0 Not tainted ---------------------------------- syz-executor.0/14388 is trying to lock: ffff0000d50890c0 (&sb->s_type->i_lock_key#32){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline] ffff0000d50890c0 (&sb->s_type->i_lock_key#32){+.+.}-{2:2}, at: inode_wait_for_writeback+0x38/0x10c fs/fs-writeback.c:1483 but this task is not holding: Unable to handle kernel paging request at virtual address 0000000100000017 Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000000117c79000 [0000000100000017] pgd=0800000117b9e003, p4d=0800000117b9e003, pud=0000000000000000 Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 14388 Comm: syz-executor.0 Not tainted 6.2.0-rc7-syzkaller-00119-geaed33698e35 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : print_lock_nested_lock_not_held kernel/locking/lockdep.c:4887 [inline] pc : __lock_acquire+0x7cc/0x2f48 kernel/locking/lockdep.c:5046 lr : print_lock_nested_lock_not_held kernel/locking/lockdep.c:4886 [inline] lr : __lock_acquire+0x7bc/0x2f48 kernel/locking/lockdep.c:5046 sp : ffff8000143cb7e0 x29: ffff8000143cb8c0 x28: ffff0000cce4be18 x27: 0000000000000001 x26: 0000000000000001 x25: 0000000000000001 x24: 00000000000408d1 x23: 0000000000000002 x22: ffff80000d91af13 x21: ffff80000d91aed2 x20: 0000000000000001 x19: ffff0000cce4b400 x18: ffff80000bf9e9bc x17: 69203a7461202c7d x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383833343154 x12: 5b5d353131393030 x11: ff808000081bbb4c x10: 0000000000000000 x9 : 2225dbfeb9fde900 x8 : 00000000ffffffff x7 : 545b5d3531313930 x6 : ffff80000bf62f94 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000001 x0 : ffff80000cb89133 Call trace: print_lock_nested_lock_not_held kernel/locking/lockdep.c:4887 [inline] __lock_acquire+0x7cc/0x2f48 kernel/locking/lockdep.c:5046 lock_acquire+0x164/0x334 kernel/locking/lockdep.c:5668 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x54/0x6c kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:350 [inline] inode_wait_for_writeback+0x38/0x10c fs/fs-writeback.c:1483 evict+0xdc/0x338 fs/inode.c:661 iput_final fs/inode.c:1747 [inline] iput+0x4d8/0x53c fs/inode.c:1773 ntfs_fill_super+0x12f0/0x1558 fs/ntfs3/super.c:1239 get_tree_bdev+0x1e8/0x2a0 fs/super.c:1282 ntfs_fs_get_tree+0x28/0x38 fs/ntfs3/super.c:1408 vfs_get_tree+0x40/0x140 fs/super.c:1489 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3145 path_mount+0x348/0x86c fs/namespace.c:3475 do_mount fs/namespace.c:3488 [inline] __do_sys_mount fs/namespace.c:3697 [inline] __se_sys_mount fs/namespace.c:3674 [inline] __arm64_sys_mount+0x2c4/0x3c4 fs/namespace.c:3674 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x64/0x178 arch/arm64/kernel/syscall.c:52 el0_svc_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: f94017e8 b0024f80 9104cc00 f9400108 (f9400d01) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: f94017e8 ldr x8, [sp, #40] 4: b0024f80 adrp x0, 0x49f1000 8: 9104cc00 add x0, x0, #0x133 c: f9400108 ldr x8, [x8] * 10: f9400d01 ldr x1, [x8, #24] <-- trapping instruction