I/O error, dev loop3, sector 1338 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2 loop3: writeback error on inode 33, offset 0, sector 1338 ================================ WARNING: inconsistent lock state syzkaller #0 Tainted: G L -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff88804bb982f0 (&sb->s_type->i_lock_key#39){+.?.}-{3:3}, at: spin_lock include/linux/spinlock.h:341 [inline] ffff88804bb982f0 (&sb->s_type->i_lock_key#39){+.?.}-{3:3}, at: igrab+0x2d/0x1e0 fs/inode.c:1583 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0xf0/0x2e0 kernel/locking/lockdep.c:5868 __raw_spin_lock include/linux/spinlock_api_smp.h:158 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:341 [inline] inode_insert5+0x17b/0x5e0 fs/inode.c:1343 iget5_locked+0x66/0xa0 fs/inode.c:1391 ntfs_iget5+0xc1/0x38f0 fs/ntfs3/inode.c:534 ntfs_fill_super+0x2341/0x4290 fs/ntfs3/super.c:1322 get_tree_bdev_flags+0x431/0x4f0 fs/super.c:1694 vfs_get_tree+0x92/0x2a0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3760 [inline] do_new_mount+0x341/0xd30 fs/namespace.c:3836 do_mount fs/namespace.c:4159 [inline] __do_sys_mount fs/namespace.c:4348 [inline] __se_sys_mount+0x31d/0x420 fs/namespace.c:4325 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f irq event stamp: 46427986 hardirqs last enabled at (46427986): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] hardirqs last enabled at (46427986): [] _raw_spin_unlock_irqrestore+0x30/0x80 kernel/locking/spinlock.c:194 hardirqs last disabled at (46427985): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:130 [inline] hardirqs last disabled at (46427985): [] _raw_spin_lock_irqsave+0x1a/0x60 kernel/locking/spinlock.c:162 softirqs last enabled at (46427808): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last enabled at (46427808): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last enabled at (46427808): [] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:723 softirqs last disabled at (46427951): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last disabled at (46427951): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last disabled at (46427951): [] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:723 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sb->s_type->i_lock_key#39); lock(&sb->s_type->i_lock_key#39); *** DEADLOCK *** no locks held by swapper/0/0. stack backtrace: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_usage_bug+0x28b/0x2e0 kernel/locking/lockdep.c:4042 valid_state kernel/locking/lockdep.c:4056 [inline] mark_lock_irq+0x410/0x420 kernel/locking/lockdep.c:-1 mark_lock+0x115/0x190 kernel/locking/lockdep.c:4753 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0x689/0x2cf0 kernel/locking/lockdep.c:5191 lock_acquire+0xf0/0x2e0 kernel/locking/lockdep.c:5868 __raw_spin_lock include/linux/spinlock_api_smp.h:158 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:341 [inline] igrab+0x2d/0x1e0 fs/inode.c:1583 fserror_report+0x3c5/0x740 fs/fserror.c:159 fserror_report_io include/linux/fserror.h:48 [inline] iomap_finish_ioend_buffered+0x2c7/0x6c0 fs/iomap/ioend.c:60 blk_update_request+0x57e/0xe60 block/blk-mq.c:1016 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1178 blk_complete_reqs block/blk-mq.c:1253 [inline] blk_done_softirq+0x10a/0x160 block/blk-mq.c:1258 handle_softirqs+0x22a/0x870 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline] sysvec_call_function_single+0xa3/0xc0 arch/x86/kernel/smp.c:266 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:704 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63 Code: 8e 6d 02 e9 8e 32 63 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 67 32 63 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 RAX: 0000000002c46f2d RBX: ffffffff819a80dd RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480 RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1bd/0x500 kernel/sched/idle.c:332 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:430 rest_init+0x2de/0x300 init/main.c:760 start_kernel+0x385/0x3d0 init/main.c:1210 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 ---------------- Code disassembly (best guess): 0: 8e 6d 02 mov 0x2(%rbp),%gs 3: e9 8e 32 63 f5 jmp 0xf5633296 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 43 4d 1c 00 verw 0x1c4d43(%rip) # 0x1c4d6b 28: fb sti 29: f4 hlt * 2a: e9 67 32 63 f5 jmp 0xf5633296 <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop