INFO: task syz.3.20:6503 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:25320 pid:6503 tgid:6500 ppid:6346 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5264 [inline] __schedule+0x1848/0x4ec0 kernel/sched/core.c:6872 __schedule_loop kernel/sched/core.c:6954 [inline] schedule+0x165/0x360 kernel/sched/core.c:6969 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7026 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read_nested+0x9a/0x2f0 kernel/locking/rwsem.c:1663 dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 diNewExt+0x9af/0x3150 fs/jfs/jfs_imap.c:2261 diAllocExt fs/jfs/jfs_imap.c:1952 [inline] diAllocAG+0xe86/0x1df0 fs/jfs/jfs_imap.c:1669 diAlloc+0x1d5/0x1680 fs/jfs/jfs_imap.c:1590 ialloc+0x8c/0x8f0 fs/jfs/jfs_inode.c:56 jfs_mkdir+0x193/0xa70 fs/jfs/namei.c:225 vfs_mkdir+0x360/0x580 fs/namei.c:4453 do_mkdirat+0x28a/0x650 fs/namei.c:4486 __do_sys_mkdirat fs/namei.c:4503 [inline] __se_sys_mkdirat fs/namei.c:4501 [inline] __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4501 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff28738efc9 RSP: 002b:00007ff2869fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007ff2875e5fa0 RCX: 00007ff28738efc9 RDX: 0000000000000408 RSI: 0000200000000300 RDI: 0000000000000004 RBP: 00007ff287411f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff2875e6038 R14: 00007ff2875e5fa0 R15: 00007ffcf93af618 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8df3b720 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] , at: rcu_read_lock include/linux/rcupdate.h:867 [inline] , at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:2/36: #0: ffff88813fe29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 kernel/workqueue.c:3242 #1: ffffc90000ac7b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0 kernel/workqueue.c:3243 #2: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303 7 locks held by kworker/u8:3/50: 3 locks held by kworker/u8:4/60: 5 locks held by kworker/u8:5/1084: 3 locks held by kworker/u8:6/1152: 3 locks held by kworker/u8:7/3480: #0: ffff88802fad5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 kernel/workqueue.c:3242 #1: ffffc9000bdd7b80 ((work_completion)(&(&ifa->dad_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x868/0x15d0 kernel/workqueue.c:3243 #2: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194 2 locks held by getty/5584: #0: ffff8880349140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222 5 locks held by syz.3.20/6503: #0: ffff888020f58420 (sb_writers #12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888053632a18 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff888053632a18 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff888079830920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888053631cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888053631cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888053631cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888053631388 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.3.20/6522: 5 locks held by syz.4.21/6531: #0: ffff88805cdde420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff88805365aa18 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff88805365aa18 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff888053058920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888053659cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888053659cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888053659cb0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888053659388 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.4.21/6542: 5 locks held by syz.2.19/6548: #0: ffff88805c20a420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff88805365e108 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff88805365e108 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff88804f8d8920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff88805365d3a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff88805365d3a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff88805365d3a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff88805365ca78 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.2.19/6563: 5 locks held by syz.0.17/6555: #0: ffff88807d5e8420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888053636108 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff888053636108 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff88807c0f8920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff8880536353a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff8880536353a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff8880536353a0 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888053634a78 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.0.17/6572: 5 locks held by syz.1.18/6558: #0: ffff88802ed00420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff8880536620f0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff8880536620f0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff88807c4e0920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888053661388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888053661388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888053661388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888053660a60 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.1.18/6570: 5 locks held by syz.5.22/6925: #0: ffff888024910420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff8880536657e0 ( &type->i_mutex_dir_key #8 /1 ){+.+.}-{4:4} , at: inode_lock_nested include/linux/fs.h:1096 [inline] , at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff888055c00920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888053664a78 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888053664a78 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888053664a78 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888053664150 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 7 locks held by syz.5.22/6932: 5 locks held by syz.6.23/6939: #0: ffff88805e0a6420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888059de97c8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff888059de97c8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff8880579b0920 ( &(imap->im_aglock[index]) ){+.+.}-{4:4} , at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888059de8a60 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888059de8138 ( &jfs_ip->rdwrlock #2 /2 ){++++}-{4:4} , at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.6.23/6940: 5 locks held by syz.8.25/6942: #0: ffff88802cf86420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888056f0a0f0 ( &type->i_mutex_dir_key #8 /1 ){+.+.}-{4:4} , at: inode_lock_nested include/linux/fs.h:1096 [inline] , at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff88802e878920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888056f09388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888056f09388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888056f09388 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888056f08a60 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.8.25/6947: 5 locks held by syz.7.24/6944: #0: ffff88807bbe8420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888059deceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff888059deceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff88804e908920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888059dec150 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888059dec150 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888059dec150 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888059deb828 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.7.24/6948: 5 locks held by syz.9.26/6946: #0: ffff88802f8f2420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:498 #1: ffff888053650ea0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1096 [inline] #1: ffff888053650ea0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4226 #2: ffff8880602b0920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diAlloc+0x1b5/0x1680 fs/jfs/jfs_imap.c:-1 #3: ffff888053650138 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diNewIAG fs/jfs/jfs_imap.c:2617 [inline] #3: ffff888053650138 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocExt fs/jfs/jfs_imap.c:1905 [inline] #3: ffff888053650138 (&jfs_ip->rdwrlock/1){++++}-{4:4}, at: diAllocAG+0x7ad/0x1df0 fs/jfs/jfs_imap.c:1669 #4: ffff888059deef18 (&jfs_ip->rdwrlock#2/2){++++}-{4:4}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790 2 locks held by syz.9.26/6950: 1 lock held by syz-executor/6972: #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 net/ipv6/addrconf.c:5027 1 lock held by syz-executor/6977: #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 net/ipv6/addrconf.c:5027 1 lock held by syz-executor/6979: #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8f2d6688 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978 2 locks held by syz-executor/7067: