program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) [ 75.497131][ T5299] Bluetooth: hci0: command tx timeout [ 75.586350][ T5319] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 75.590846][ T5319] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5319, name: syz.0.0 [ 75.594561][ T5319] preempt_count: 1, expected: 0 [ 75.597179][ T5319] RCU nest depth: 0, expected: 0 [ 75.599813][ T5319] 2 locks held by syz.0.0/5319: [ 75.602025][ T5319] #0: ffff8880434880e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 75.606087][ T5319] #1: ffff888043488998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0 [ 75.610160][ T5319] Preemption disabled at: [ 75.610170][ T5319] [<0000000000000000>] 0x0 [ 75.613282][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.613294][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.613299][ T5319] Call Trace: [ 75.613304][ T5319] [ 75.613308][ T5319] dump_stack_lvl+0x189/0x250 [ 75.613326][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.613337][ T5319] ? __pfx__printk+0x10/0x10 [ 75.613347][ T5319] ? print_lock_name+0xde/0x100 [ 75.613356][ T5319] __might_resched+0x495/0x610 [ 75.613367][ T5319] ? __pfx___might_resched+0x10/0x10 [ 75.613374][ T5319] ? __lock_acquire+0xab9/0xd20 [ 75.613388][ T5319] iput+0x2b/0xc50 [ 75.613400][ T5319] ? hook_sb_delete+0x1a8/0xbd0 [ 75.613410][ T5319] hook_sb_delete+0x6b5/0xbd0 [ 75.613419][ T5319] ? hook_sb_delete+0x1a8/0xbd0 [ 75.613428][ T5319] ? __pfx_hook_sb_delete+0x10/0x10 [ 75.613436][ T5319] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 75.613447][ T5319] ? evict_inodes+0x684/0x6d0 [ 75.613458][ T5319] ? __pfx_evict_inodes+0x10/0x10 [ 75.613477][ T5319] security_sb_delete+0x80/0x150 [ 75.613489][ T5319] generic_shutdown_super+0xaa/0x2c0 [ 75.613503][ T5319] kill_litter_super+0x76/0xb0 [ 75.613516][ T5319] deactivate_locked_super+0xbc/0x130 [ 75.613530][ T5319] cleanup_mnt+0x425/0x4c0 [ 75.613544][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.613604][ T5319] task_work_run+0x1d4/0x260 [ 75.613625][ T5319] ? __pfx_task_work_run+0x10/0x10 [ 75.613641][ T5319] ? __x64_sys_umount+0x122/0x160 [ 75.613658][ T5319] ? exit_to_user_mode_loop+0x40/0x130 [ 75.613672][ T5319] exit_to_user_mode_loop+0xe9/0x130 [ 75.613684][ T5319] do_syscall_64+0x2bd/0xfa0 [ 75.613701][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.613717][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.613729][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.613744][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.613754][ T5319] RIP: 0033:0x7fdcb658f6c9 [ 75.613766][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.613776][ T5319] RSP: 002b:00007fdcb749e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.613790][ T5319] RAX: 0000000000000000 RBX: 00007fdcb67e5fa0 RCX: 00007fdcb658f6c9 [ 75.613798][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 75.613805][ T5319] RBP: 00007fdcb6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.613812][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.613819][ T5319] R13: 00007fdcb67e6038 R14: 00007fdcb67e5fa0 R15: 00007ffee74e85c8 [ 75.613839][ T5319]