INFO: task syz.3.18:5776 blocked for more than 143 seconds.
Not tainted 5.15.184-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.18 state:D stack:14800 pid: 5776 ppid: 3902 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5030 [inline]
__schedule+0x38a/0x1420 kernel/sched/core.c:6376
schedule+0x68/0xb0 kernel/sched/core.c:6459
rwsem_down_write_slowpath+0x2c0/0x610 kernel/locking/rwsem.c:1165
inode_lock_nested include/linux/fs.h:822 [inline]
filename_create+0xe4/0x240 fs/namei.c:3835
do_mkdirat+0x54/0x1e0 fs/namei.c:4080
__do_sys_mkdirat fs/namei.c:4105 [inline]
__se_sys_mkdirat fs/namei.c:4103 [inline]
__x64_sys_mkdirat+0x6b/0x90 fs/namei.c:4103
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f295f2700b7
RSP: 002b:00007f295ecd0e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007f295ecd0ef0 RCX: 00007f295f2700b7
RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
RBP: 0000000020000180 R08: 0000000020000000 R09: 0000000000000000
R10: 0000000020000180 R11: 0000000000000246 R12: 0000000020000100
R13: 00007f295ecd0eb0 R14: 0000000000000000 R15: 0000000020000300
Showing all locks held in the system:
1 lock held by khungtaskd/26:
#0: ffffffff845a1d40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x15/0xf7 kernel/locking/lockdep.c:6472
2 locks held by getty/1934:
#0: ffff888145e8d898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x60 drivers/tty/tty_ldisc.c:252
#1: ffffc90003fbf2e8 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x899/0xa20 drivers/tty/n_tty.c:2158
2 locks held by syz.3.18/5758:
2 locks held by syz.3.18/5776:
#0: ffff888116ef1448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88810eb0c188 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88810eb0c188 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
3 locks held by syz.1.16/5933:
2 locks held by syz.1.16/5962:
#0: ffff8881174a9448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88810eb0c638 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88810eb0c638 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
3 locks held by syz.6.17/6060:
2 locks held by syz.6.17/6076:
#0: ffff8881190bc448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88810eb0cae8 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88810eb0cae8 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
2 locks held by syz.0.15/6075:
2 locks held by syz.0.15/6083:
#0: ffff888118a76448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88811b968188 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88811b968188 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
2 locks held by syz.5.19/6096:
2 locks held by syz.5.19/6102:
#0: ffff888116e22448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88811b968638 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88811b968638 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
2 locks held by syz.7.20/8116:
2 locks held by syz.7.20/8135:
#0: ffff88810c0c0448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88811b968ae8 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88811b968ae8 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
3 locks held by syz.8.21/8281:
2 locks held by syz.8.21/8294:
#0: ffff88810c0c1448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88811b968f98 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88811b968f98 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
2 locks held by syz.2.24/8307:
2 locks held by syz.2.24/8311:
#0: ffff888117f2a448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88810eb0cf98 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88810eb0cf98 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
3 locks held by syz.9.22/8326:
2 locks held by syz.9.22/8334:
#0: ffff888117f28448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88810eb0d448 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88810eb0d448 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
2 locks held by syz.4.23/8343:
2 locks held by syz.4.23/8344:
#0: ffff888110b9a448 (sb_writers#13){....}-{0:0}, at: filename_create+0x91/0x240 fs/namei.c:3828
#1: ffff88811b969448 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: inode_lock_nested include/linux/fs.h:822 [inline]
#1: ffff88811b969448 (&type->i_mutex_dir_key#8/1){....}-{3:3}, at: filename_create+0xe4/0x240 fs/namei.c:3835
1 lock held by syz.3.2600/15338:
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8e/0xdd lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x46/0xde lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x139/0x170 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
watchdog+0x7c6/0x810 kernel/hung_task.c:369
kthread+0x16c/0x1a0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6060 Comm: syz.6.17 Not tainted 5.15.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:205
Code: 89 0c ed 00 64 3a 89 48 89 70 18 5b 5d 41 5c 41 5d c3 48 c7 c0 f4 ff ff ff eb 9a 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <65> 48 8b 14 25 80 af 01 00 65 8b 05 e0 5a d7 7e a9 00 01 ff 00 48
RSP: 0018:ffffc90002563a50 EFLAGS: 00000082
RAX: 0000000000000000 RBX: 0000000000000009 RCX: ffffffff814e7370
RDX: ffff88803ff8edc8 RSI: ffff888110923800 RDI: 0000000000000007
RBP: ffff88803ff8edc8 R08: ffffc90002563ba4 R09: ffff8880198cc800
R10: 0000000000000000 R11: 0000000000000d6e R12: 0000000000000009
R13: 00000000003186d1 R14: ffff888092d68888 R15: 0000000000020175
FS: 00007f48c3f046c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200004a9 CR3: 0000000107700000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lookup_bh_lru fs/buffer.c:1277 [inline]
__find_get_block+0x8a/0x590 fs/buffer.c:1306
__getblk_gfp fs/buffer.c:1332 [inline]
__bread_gfp+0x29/0x220 fs/buffer.c:1381
sb_bread include/linux/buffer_head.h:337 [inline]
get_branch+0xf3/0x200 fs/sysv/itree.c:101
get_block+0xb6/0x980 fs/sysv/itree.c:221
block_read_full_page+0xf8/0x7f0 fs/buffer.c:2290
do_read_cache_page+0x5cd/0xa60 mm/filemap.c:3473
read_mapping_page include/linux/pagemap.h:515 [inline]
dir_get_page fs/sysv/dir.c:58 [inline]
sysv_find_entry+0x99/0x2c0 fs/sysv/dir.c:146
sysv_inode_by_name+0x2d/0x140 fs/sysv/dir.c:360
sysv_lookup fs/sysv/namei.c:38 [inline]
sysv_lookup+0x4e/0xa0 fs/sysv/namei.c:31
lookup_one_qstr_excl+0x93/0xd0 fs/namei.c:1563
filename_create+0xf5/0x240 fs/namei.c:3836
do_mkdirat+0x54/0x1e0 fs/namei.c:4080
__do_sys_mkdirat fs/namei.c:4105 [inline]
__se_sys_mkdirat fs/namei.c:4103 [inline]
__x64_sys_mkdirat+0x6b/0x90 fs/namei.c:4103
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f48c4483819
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f48c3f04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007f48c463afa0 RCX: 00007f48c4483819
RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007f48c44f675e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f48c463afa0 R15: 00007ffcfa91b7a8