program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) [ 75.983510][ T5301] Bluetooth: hci0: command tx timeout [ 76.076813][ T5322] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 76.080846][ T5322] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5322, name: syz.0.0 [ 76.085022][ T5322] preempt_count: 1, expected: 0 [ 76.087010][ T5322] RCU nest depth: 0, expected: 0 [ 76.088980][ T5322] 2 locks held by syz.0.0/5322: [ 76.090942][ T5322] #0: ffff8880115fa0e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 76.095455][ T5322] #1: ffff8880115fa998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0 [ 76.099325][ T5322] Preemption disabled at: [ 76.099332][ T5322] [<0000000000000000>] 0x0 [ 76.103368][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.103384][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.103391][ T5322] Call Trace: [ 76.103394][ T5322] [ 76.103397][ T5322] dump_stack_lvl+0x189/0x250 [ 76.103414][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.103428][ T5322] ? __pfx__printk+0x10/0x10 [ 76.103441][ T5322] ? print_lock_name+0xde/0x100 [ 76.103456][ T5322] __might_resched+0x495/0x610 [ 76.103474][ T5322] ? __pfx___might_resched+0x10/0x10 [ 76.103485][ T5322] ? __lock_acquire+0xab9/0xd20 [ 76.103507][ T5322] iput+0x2b/0xc50 [ 76.103524][ T5322] ? hook_sb_delete+0x1a8/0xbd0 [ 76.103541][ T5322] hook_sb_delete+0x6b5/0xbd0 [ 76.103552][ T5322] ? hook_sb_delete+0x1a8/0xbd0 [ 76.103567][ T5322] ? __pfx_hook_sb_delete+0x10/0x10 [ 76.103581][ T5322] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 76.103596][ T5322] ? evict_inodes+0x684/0x6d0 [ 76.103612][ T5322] ? __pfx_evict_inodes+0x10/0x10 [ 76.103632][ T5322] security_sb_delete+0x80/0x150 [ 76.103647][ T5322] generic_shutdown_super+0xaa/0x2c0 [ 76.103661][ T5322] kill_litter_super+0x76/0xb0 [ 76.103675][ T5322] deactivate_locked_super+0xbc/0x130 [ 76.103689][ T5322] cleanup_mnt+0x425/0x4c0 [ 76.103700][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.103762][ T5322] task_work_run+0x1d4/0x260 [ 76.103779][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 76.103793][ T5322] ? __x64_sys_umount+0x122/0x160 [ 76.103809][ T5322] ? exit_to_user_mode_loop+0x40/0x130 [ 76.103823][ T5322] exit_to_user_mode_loop+0xe9/0x130 [ 76.103834][ T5322] do_syscall_64+0x2bd/0xfa0 [ 76.103848][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.103862][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.103872][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 76.103885][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.103896][ T5322] RIP: 0033:0x7f2216b8f6c9 [ 76.103908][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.103917][ T5322] RSP: 002b:00007f2217b0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.103929][ T5322] RAX: 0000000000000000 RBX: 00007f2216de5fa0 RCX: 00007f2216b8f6c9 [ 76.103936][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 76.103944][ T5322] RBP: 00007f2216c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.103951][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.103958][ T5322] R13: 00007f2216de6038 R14: 00007f2216de5fa0 R15: 00007fff03876848 [ 76.103977][ T5322]