------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(!is_rwsem_reader_owned(sem)): count = 0x0, magic = 0xffff0000fdbf91f0, owner = 0x0, curr 0xffff0000ced48000, list empty
WARNING: CPU: 1 PID: 8432 at kernel/locking/rwsem.c:1345 __up_read+0x528/0x5d0 kernel/locking/rwsem.c:1345
Modules linked in:
CPU: 1 PID: 8432 Comm: syz.5.635 Not tainted 6.1.147-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __up_read+0x528/0x5d0 kernel/locking/rwsem.c:1345
lr : __up_read+0x528/0x5d0 kernel/locking/rwsem.c:1345
sp : ffff800021de76e0
x29: ffff800021de7770 x28: 1ffff00002a160b1 x27: 1ffff000043bcee0
x26: dfff800000000000 x25: ffff8000150b0000 x24: ffff800021de7700
x23: ffff0000ced48000 x22: 0000000000000000 x21: ffff0000fdbf9248
x20: ffff0000fdbf91f0 x19: ffff0000fdbf91f0 x18: ffff800011aabce0
x17: 1fffe00033eddf7e x16: ffff8000082d2374 x15: ffff8000150ad000
x14: 0000000000000100 x13: 1ffff00002a160b1 x12: 0000000000ff0100
x11: ff0080000a88c734 x10: 0000000000000003 x9 : 5c93841a208f3a00
x8 : 5c93841a208f3a00 x7 : ffff800008251ec8 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff800021de7280 x1 : ffff800011aad7e0 x0 : ffff80018a6ea000
Call trace:
 __up_read+0x528/0x5d0 kernel/locking/rwsem.c:1345
 up_read+0x38/0x48 kernel/locking/rwsem.c:1616
 inode_unlock_shared include/linux/fs.h:773 [inline]
 lookup_slow+0x68/0x80 fs/namei.c:1708
 walk_component fs/namei.c:1998 [inline]
 link_path_walk+0x76c/0xc6c fs/namei.c:2325
 path_parentat fs/namei.c:2526 [inline]
 __filename_parentat+0x1c4/0x524 fs/namei.c:2550
 filename_parentat fs/namei.c:2568 [inline]
 filename_create+0xd0/0x39c fs/namei.c:3857
 do_mkdirat+0xa8/0x3e0 fs/namei.c:4121
 __do_sys_mkdirat fs/namei.c:4146 [inline]
 __se_sys_mkdirat fs/namei.c:4144 [inline]
 __arm64_sys_mkdirat+0x90/0xa8 fs/namei.c:4144
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 126
hardirqs last  enabled at (125): [<ffff800008251f5c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline]
hardirqs last  enabled at (125): [<ffff800008251f5c>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5003
hardirqs last disabled at (126): [<ffff8000119455d8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (58): [<ffff800008030900>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (56): [<ffff8000080308cc>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(tmp < 0): count = 0xffffffffffffff00, magic = 0xffff0000fdbf91f0, owner = 0x0, curr 0xffff0000ced48000, list empty
WARNING: CPU: 0 PID: 8432 at kernel/locking/rwsem.c:1350 __up_read+0x388/0x5d0 kernel/locking/rwsem.c:1350
Modules linked in:
CPU: 0 PID: 8432 Comm: syz.5.635 Tainted: G        W          6.1.147-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __up_read+0x388/0x5d0 kernel/locking/rwsem.c:1350
lr : __up_read+0x388/0x5d0 kernel/locking/rwsem.c:1350
sp : ffff800021de76e0
x29: ffff800021de7770 x28: ffffffffffffff00 x27: 1ffff000043bcee0
x26: dfff800000000000 x25: ffff0000fdbf91f0 x24: ffff0000fdbf9248
x23: 1fffe0001fb7f23f x22: ffffffffffffff00 x21: 0000000000000000
x20: ffff0000ced48000 x19: ffff0000fdbf91f0 x18: ffff800011aabce0
x17: 0000000000000000 x16: ffff800008042c60 x15: 0000000000000002
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000
x11: 000000000007e697 x10: ffff800034411000 x9 : 5c93841a208f3a00
x8 : 5c93841a208f3a00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021de7178 x4 : ffff800015194800 x3 : ffff80000852e34c
x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 __up_read+0x388/0x5d0 kernel/locking/rwsem.c:1350
 up_read+0x38/0x48 kernel/locking/rwsem.c:1616
 inode_unlock_shared include/linux/fs.h:773 [inline]
 lookup_slow+0x68/0x80 fs/namei.c:1708
 walk_component fs/namei.c:1998 [inline]
 link_path_walk+0x76c/0xc6c fs/namei.c:2325
 path_parentat fs/namei.c:2526 [inline]
 __filename_parentat+0x1c4/0x524 fs/namei.c:2550
 filename_parentat fs/namei.c:2568 [inline]
 filename_create+0xd0/0x39c fs/namei.c:3857
 do_mkdirat+0xa8/0x3e0 fs/namei.c:4121
 __do_sys_mkdirat fs/namei.c:4146 [inline]
 __se_sys_mkdirat fs/namei.c:4144 [inline]
 __arm64_sys_mkdirat+0x90/0xa8 fs/namei.c:4144
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 279
hardirqs last  enabled at (279): [<ffff8000119476b4>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (279): [<ffff8000119476b4>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (278): [<ffff800011a1e478>] preempt_schedule_irq+0xa8/0x1b8 kernel/sched/core.c:6874
softirqs last  enabled at (274): [<ffff8000081a9670>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (274): [<ffff8000081a9670>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (129): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---