INFO: task syz.3.18:5220 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.18 state:D stack: 0 pid: 5220 ppid: 4928 flags:0x00000001 Call trace: __switch_to+0x2f4/0x540 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xdfc/0x1bc4 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x47c/0x8d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x100/0x38c kernel/locking/rwsem.c:1500 inode_lock_shared include/linux/fs.h:797 [inline] lookup_slow+0x4c/0x80 fs/namei.c:1687 walk_component+0x2b0/0x3a8 fs/namei.c:1984 lookup_last fs/namei.c:2439 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2463 filename_lookup+0x1b4/0x464 fs/namei.c:2492 user_path_at_empty+0x5c/0x1a0 fs/namei.c:2891 user_path_at include/linux/namei.h:57 [inline] do_mount fs/namespace.c:3374 [inline] __do_sys_mount fs/namespace.c:3585 [inline] __se_sys_mount fs/namespace.c:3562 [inline] __arm64_sys_mount+0x4e0/0x5f0 fs/namespace.c:3562 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.1.16:5222 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.16 state:D stack: 0 pid: 5222 ppid: 4921 flags:0x00000001 Call trace: __switch_to+0x2f4/0x540 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xdfc/0x1bc4 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x47c/0x8d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x100/0x38c kernel/locking/rwsem.c:1500 inode_lock_shared include/linux/fs.h:797 [inline] lookup_slow+0x4c/0x80 fs/namei.c:1687 walk_component+0x2b0/0x3a8 fs/namei.c:1984 lookup_last fs/namei.c:2439 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2463 filename_lookup+0x1b4/0x464 fs/namei.c:2492 user_path_at_empty+0x5c/0x1a0 fs/namei.c:2891 user_path_at include/linux/namei.h:57 [inline] do_mount fs/namespace.c:3374 [inline] __do_sys_mount fs/namespace.c:3585 [inline] __se_sys_mount fs/namespace.c:3562 [inline] __arm64_sys_mount+0x4e0/0x5f0 fs/namespace.c:3562 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.0.15:5539 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.15 state:D stack: 0 pid: 5539 ppid: 4917 flags:0x00000001 Call trace: __switch_to+0x2f4/0x540 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xdfc/0x1bc4 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x47c/0x8d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x100/0x38c kernel/locking/rwsem.c:1500 inode_lock_shared include/linux/fs.h:797 [inline] lookup_slow+0x4c/0x80 fs/namei.c:1687 walk_component+0x2b0/0x3a8 fs/namei.c:1984 lookup_last fs/namei.c:2439 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2463 filename_lookup+0x1b4/0x464 fs/namei.c:2492 user_path_at_empty+0x5c/0x1a0 fs/namei.c:2891 user_path_at include/linux/namei.h:57 [inline] do_mount fs/namespace.c:3374 [inline] __do_sys_mount fs/namespace.c:3585 [inline] __se_sys_mount fs/namespace.c:3562 [inline] __arm64_sys_mount+0x4e0/0x5f0 fs/namespace.c:3562 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.2.17:5538 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.17 state:D stack: 0 pid: 5538 ppid: 4922 flags:0x00000001 Call trace: __switch_to+0x2f4/0x540 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xdfc/0x1bc4 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x47c/0x8d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x100/0x38c kernel/locking/rwsem.c:1500 inode_lock_shared include/linux/fs.h:797 [inline] lookup_slow+0x4c/0x80 fs/namei.c:1687 walk_component+0x2b0/0x3a8 fs/namei.c:1984 lookup_last fs/namei.c:2439 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2463 filename_lookup+0x1b4/0x464 fs/namei.c:2492 user_path_at_empty+0x5c/0x1a0 fs/namei.c:2891 user_path_at include/linux/namei.h:57 [inline] do_mount fs/namespace.c:3374 [inline] __do_sys_mount fs/namespace.c:3585 [inline] __se_sys_mount fs/namespace.c:3562 [inline] __arm64_sys_mount+0x4e0/0x5f0 fs/namespace.c:3562 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.4.19:5542 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.19 state:D stack: 0 pid: 5542 ppid: 4936 flags:0x00000001 Call trace: __switch_to+0x2f4/0x540 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xdfc/0x1bc4 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6537 rwsem_down_read_slowpath+0x47c/0x8d0 kernel/locking/rwsem.c:1055 __down_read_common kernel/locking/rwsem.c:1239 [inline] __down_read kernel/locking/rwsem.c:1252 [inline] down_read+0x100/0x38c kernel/locking/rwsem.c:1500 inode_lock_shared include/linux/fs.h:797 [inline] lookup_slow+0x4c/0x80 fs/namei.c:1687 walk_component+0x2b0/0x3a8 fs/namei.c:1984 lookup_last fs/namei.c:2439 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2463 filename_lookup+0x1b4/0x464 fs/namei.c:2492 user_path_at_empty+0x5c/0x1a0 fs/namei.c:2891 user_path_at include/linux/namei.h:57 [inline] do_mount fs/namespace.c:3374 [inline] __do_sys_mount fs/namespace.c:3585 [inline] __se_sys_mount fs/namespace.c:3562 [inline] __arm64_sys_mount+0x4e0/0x5f0 fs/namespace.c:3562 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Showing all locks held in the system: 1 lock held by ksoftirqd/0/14: 1 lock held by khungtaskd/27: #0: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:312 2 locks held by kworker/u4:2/148: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x678/0x1138 kernel/workqueue.c:2283 #1: ffff80001bfb7c00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1138 kernel/workqueue.c:2285 2 locks held by kworker/u4:3/381: 1 lock held by udevd/3660: 2 locks held by getty/3802: #0: ffff0000d33df098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bd1e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 3 locks held by syz.3.18/5206: 1 lock held by syz.3.18/5220: #0: ffff0000ee04c188 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0000ee04c188 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 2 locks held by syz.1.16/5211: 1 lock held by syz.1.16/5222: #0: ffff0000ee04c6d0 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0000ee04c6d0 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.0.15/5535: 1 lock held by syz.0.15/5539: #0: ffff0001136ec6d0 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0001136ec6d0 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.2.17/5537: 1 lock held by syz.2.17/5538: #0: ffff0001136ec188 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0001136ec188 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 2 locks held by syz.4.19/5541: 1 lock held by syz.4.19/5542: #0: ffff0001136ecc18 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0001136ecc18 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.5.20/5592: 1 lock held by syz.5.20/5593: #0: ffff0001136ed160 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0001136ed160 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.6.21/5595: 1 lock held by syz.6.21/5596: #0: ffff0000ee04cc18 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0000ee04cc18 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.7.22/5664: 1 lock held by syz.7.22/5665: #0: ffff0000ee04d160 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0000ee04d160 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.9.24/5667: 1 lock held by syz.9.24/5670: #0: ffff0000ee04d6a8 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0000ee04d6a8 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 3 locks held by syz.8.23/5669: 1 lock held by syz.8.23/5671: #0: ffff0001136ed6a8 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:797 [inline] #0: ffff0001136ed6a8 (&type->i_mutex_dir_key#9){.+.+}-{3:3}, at: lookup_slow+0x4c/0x80 fs/namei.c:1687 1 lock held by syz.3.2140/12124: #0: ffff8000149ef158 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c include/linux/rcupdate.h:312 =============================================