------------[ cut here ]------------ DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff0000f8af61d0, owner = 0x0, curr 0xffff0000d196bd80, list empty WARNING: CPU: 1 PID: 7459 at kernel/locking/rwsem.c:1381 __up_write kernel/locking/rwsem.c:1380 [inline] WARNING: CPU: 1 PID: 7459 at kernel/locking/rwsem.c:1381 up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1643 Modules linked in: CPU: 1 UID: 0 PID: 7459 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __up_write kernel/locking/rwsem.c:1380 [inline] pc : up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1643 lr : __up_write kernel/locking/rwsem.c:1380 [inline] lr : up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1643 sp : ffff80009f0e77a0 x29: ffff80009f0e77b0 x28: ffff0000f5cab090 x27: ffff0000f5cf5a70 x26: dfff800000000000 x25: 1fffe0001f15ec47 x24: ffff0000f8af6228 x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000d196bd80 x20: ffff0000f8af61d0 x19: ffff0000f8af61d0 x18: 1fffe000337dfe90 x17: ffff80008f57e000 x16: ffff800082debb40 x15: 0000000000000001 x14: 1fffe000337e2918 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 0000000000000003 x9 : f356990408a53200 x8 : f356990408a53200 x7 : ffff800080492ec4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000007 x1 : ffff80008b3faec0 x0 : 0000000000000001 Call trace: __up_write kernel/locking/rwsem.c:1380 [inline] (P) up_write+0x47c/0x5b4 kernel/locking/rwsem.c:1643 (P) inode_unlock include/linux/fs.h:990 [inline] open_last_lookups fs/namei.c:3903 [inline] path_openat+0x152c/0x2c40 fs/namei.c:4131 do_filp_open+0x18c/0x36c fs/namei.c:4161 do_sys_openat2+0x11c/0x1b4 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __arm64_sys_openat+0x120/0x158 fs/open.c:1463 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 816 hardirqs last enabled at (815): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1559 [inline] hardirqs last enabled at (815): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5073 hardirqs last disabled at (816): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (720): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (720): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (373): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---