===================================== WARNING: bad unlock balance detected! 5.6.0-rc6-syzkaller #0 Not tainted ------------------------------------- syz-executor.1/27177 is trying to release lock (rcu_callback) at: [] __write_once_size include/linux/compiler.h:226 [inline] [] rcu_do_batch kernel/rcu/tree.c:2185 [inline] [] rcu_core+0x597/0x12d0 kernel/rcu/tree.c:2410 but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor.1/27177: #0: ffff88801c09c0d8 (&type->s_umount_key#76/1){+.+.}, at: alloc_super+0x152/0x910 fs/super.c:229 stack backtrace: CPU: 2 PID: 27177 Comm: syz-executor.1 Not tainted 5.6.0-rc6-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 __lock_release kernel/locking/lockdep.c:4241 [inline] lock_release+0x586/0x7c0 kernel/locking/lockdep.c:4502 rcu_lock_release include/linux/rcupdate.h:213 [inline] rcu_do_batch kernel/rcu/tree.c:2188 [inline] rcu_core+0x5b7/0x12d0 kernel/rcu/tree.c:2410 __do_softirq+0x26c/0x99d kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x192/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1146 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:parse_options+0x4ee/0x1c60 fs/ntfs/super.c:180 Code: fc ff ff e8 c4 c3 08 ff 48 c7 c6 e0 1d 37 88 4c 89 e7 e8 65 82 4d 05 31 ff 89 c3 89 c6 e8 1a c5 08 ff 85 db 0f 84 1a 0b 00 00 9d c3 08 ff 48 c7 c6 20 1e 37 88 4c 89 e7 e8 3e 82 4d 05 31 ff RSP: 0018:ffffc900042c7b38 EFLAGS: 00010286 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000002 RBX: 00000000ffffffff RCX: ffffffff82695fc9 RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000005 RBP: ffff8880278f6000 R08: ffff888017ee9340 R09: ffffed1004f1ec03 R10: ffffed1004f1ec02 R11: ffff8880278f6017 R12: ffff8880208aa000 R13: ffff8880208aa000 R14: 0000000000000000 R15: 00000000ffffffff ntfs_fill_super+0x1cb/0x3080 fs/ntfs/super.c:2748 mount_bdev+0x305/0x3c0 fs/super.c:1417 legacy_get_tree+0x105/0x220 fs/fs_context.c:622 vfs_get_tree+0x89/0x2f0 fs/super.c:1547 do_new_mount fs/namespace.c:2822 [inline] do_mount+0x1306/0x1a60 fs/namespace.c:3107 __do_compat_sys_mount fs/compat.c:122 [inline] __se_compat_sys_mount fs/compat.c:89 [inline] __ia32_compat_sys_mount+0x608/0x710 fs/compat.c:89 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline] do_fast_syscall_32+0x270/0xe8f arch/x86/entry/common.c:408 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139