================================== WARNING: Nested lock was not taken 6.0.0-rc6-syzkaller-17739-g16c9f284e746 #0 Not tainted ---------------------------------- syz-executor.1/28169 is trying to lock: ffff0000e57ee9d8 (&s->s_inode_list_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:349 [inline] ffff0000e57ee9d8 (&s->s_inode_list_lock){+.+.}-{2:2}, at: inode_sb_list_del fs/inode.c:503 [inline] ffff0000e57ee9d8 (&s->s_inode_list_lock){+.+.}-{2:2}, at: evict+0x90/0x334 fs/inode.c:654 but this task is not holding: Unable to handle kernel paging request at virtual address 0000000100000017 Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000013ab71000 [0000000100000017] pgd=080000013ab06003, p4d=080000013ab06003, pud=0000000000000000 Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 28169 Comm: syz-executor.1 Not tainted 6.0.0-rc6-syzkaller-17739-g16c9f284e746 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : print_lock_nested_lock_not_held kernel/locking/lockdep.c:4885 [inline] pc : __lock_acquire+0x7cc/0x30a4 kernel/locking/lockdep.c:5044 lr : print_lock_nested_lock_not_held kernel/locking/lockdep.c:4884 [inline] lr : __lock_acquire+0x7c0/0x30a4 kernel/locking/lockdep.c:5044 sp : ffff80001e2a38b0 x29: ffff80001e2a3990 x28: 0000000000000001 x27: ffff80000d31c000 x26: ffff0000e3f53f38 x25: ffff0000e3f53f58 x24: 0000000000000002 x23: ffff0000e3f53f50 x22: ffff80000d33a753 x21: ffff80000d33a712 x20: 0000000000040067 x19: ffff0000e3f53500 x18: 000000000000026f x17: 2b7463697665203a x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d393631383254 x12: 0000000000040000 x11: 00000000000285ae x10: ffff80001854c000 x9 : d40b0ddaa992b100 x8 : 00000000ffffffff x7 : 545b5d3530383331 x6 : ffff8000081976e4 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000001 x0 : ffff80000cb65519 Call trace: print_lock_nested_lock_not_held kernel/locking/lockdep.c:4885 [inline] __lock_acquire+0x7cc/0x30a4 kernel/locking/lockdep.c:5044 lock_acquire+0x100/0x1f8 kernel/locking/lockdep.c:5666 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x54/0x6c kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] inode_sb_list_del fs/inode.c:503 [inline] evict+0x90/0x334 fs/inode.c:654 iput_final fs/inode.c:1748 [inline] iput+0x2c4/0x324 fs/inode.c:1774 ntfs_fill_super+0x1254/0x14a4 fs/ntfs/super.c:188 get_tree_bdev+0x1e8/0x2a0 fs/super.c:1323 ntfs_fs_get_tree+0x28/0x38 fs/ntfs3/super.c:1358 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 Code: 94f86e3b f94002e8 90024e40 91146400 (f9400d01) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 94f86e3b bl 0x3e1b8ec 4: f94002e8 ldr x8, [x23] 8: 90024e40 adrp x0, 0x49c8000 c: 91146400 add x0, x0, #0x519 * 10: f9400d01 ldr x1, [x8, #24] <-- trapping instruction