Extracting prog: 3m58.866564217s Minimizing prog: 30m15.464251568s Simplifying prog options: 0s Extracting C: 3m3.435108377s Simplifying C: 28m51.804345773s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program crashed: INFO: task hung in d_alloc_parallel single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb/L00AYx793SdPXFxFcHFwcLPiKvmmSqrzLO7yCoyBUUcdiY6mmrbQR2oJgcXFxdBBcXRwdHJwc/AtcdVBBcLCjm3Byl0tytmmpP7Cizwd6/ea5J3f3PCXfIQVBEP8tH95/effg7M7FkwD2o4Kyjn+y8hxu5L99dPvEw91zj5+9efKqe+DOi9n1GAAhVt/fAfByz0IMZieR7++uqEgSq+jYJXAc1/oyGNxEfhUizQRCMFzVOTcM3dunRRS613pR83o7Cj05+HII5FAz95eHmk4YmgA29FmYMT8YjW82oijsz4qSSPeZm/pRsax/6nx7HLtIuyeE/L2u3L83kde6N/DAs/754PC1roGhrvUOynBdN2+JUf9hO1/fWqX+9YqnShzc/lObps/I31D7PyxKv2UdNhuRD3QWOTRNPdDM+bj22n9eKOMCMDf1ejOKzv/Cyk5BozKR+5N09mOGP9mwM/+oxp1b1cFovN3uNFphK+wGQe2Md8rzTgdVZUTJuMT/NpQ/bRrrlxbkOszBsBHHfX8IxH0/uw6S0XDc+vPeZ3UPV/7HsXVUXSpPVWWXi/dg+sPVt1RbVnHm3YU1EQRBEARBEARBEARBEARBFHMEDMk/YYLpF6JFBBfUG8pvAQAA//9Pz2ps") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: INFO: task hung in d_alloc_parallel simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: INFO: task hung in d_alloc_parallel testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: INFO: task hung in d_alloc_parallel testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: INFO: task hung in d_alloc_parallel testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat program crashed: INFO: task hung in d_alloc_parallel testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program crashed: INFO: task hung in d_alloc_parallel validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb/L00AYx793SdPXFxFcHFwcLPiKvmmSqrzLO7yCoyBUUcdiY6mmrbQR2oJgcXFxdBBcXRwdHJwc/AtcdVBBcLCjm3Byl0tytmmpP7Cizwd6/ea5J3f3PCXfIQVBEP8tH95/effg7M7FkwD2o4Kyjn+y8hxu5L99dPvEw91zj5+9efKqe+DOi9n1GAAhVt/fAfByz0IMZieR7++uqEgSq+jYJXAc1/oyGNxEfhUizQRCMFzVOTcM3dunRRS613pR83o7Cj05+HII5FAz95eHmk4YmgA29FmYMT8YjW82oijsz4qSSPeZm/pRsax/6nx7HLtIuyeE/L2u3L83kde6N/DAs/754PC1roGhrvUOynBdN2+JUf9hO1/fWqX+9YqnShzc/lObps/I31D7PyxKv2UdNhuRD3QWOTRNPdDM+bj22n9eKOMCMDf1ejOKzv/Cyk5BozKR+5N09mOGP9mwM/+oxp1b1cFovN3uNFphK+wGQe2Md8rzTgdVZUTJuMT/NpQ/bRrrlxbkOszBsBHHfX8IxH0/uw6S0XDc+vPeZ3UPV/7HsXVUXSpPVWWXi/dg+sPVt1RbVnHm3YU1EQRBEARBEARBEARBEARBFHMEDMk/YYLpF6JFBBfUG8pvAQAA//9Pz2ps") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program crashed: INFO: task hung in d_alloc_parallel validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-mkdirat-openat detailed listing: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb/L00AYx793SdPXFxFcHFwcLPiKvmmSqrzLO7yCoyBUUcdiY6mmrbQR2oJgcXFxdBBcXRwdHJwc/AtcdVBBcLCjm3Byl0tytmmpP7Cizwd6/ea5J3f3PCXfIQVBEP8tH95/effg7M7FkwD2o4Kyjn+y8hxu5L99dPvEw91zj5+9efKqe+DOi9n1GAAhVt/fAfByz0IMZieR7++uqEgSq+jYJXAc1/oyGNxEfhUizQRCMFzVOTcM3dunRRS613pR83o7Cj05+HII5FAz95eHmk4YmgA29FmYMT8YjW82oijsz4qSSPeZm/pRsax/6nx7HLtIuyeE/L2u3L83kde6N/DAs/754PC1roGhrvUOynBdN2+JUf9hO1/fWqX+9YqnShzc/lObps/I31D7PyxKv2UdNhuRD3QWOTRNPdDM+bj22n9eKOMCMDf1ejOKzv/Cyk5BozKR+5N09mOGP9mwM/+oxp1b1cFovN3uNFphK+wGQe2Md8rzTgdVZUTJuMT/NpQ/bRrrlxbkOszBsBHHfX8IxH0/uw6S0XDc+vPeZ3UPV/7HsXVUXSpPVWWXi/dg+sPVt1RbVnHm3YU1EQRBEARBEARBEARBEARBFHMEDMk/YYLpF6JFBBfUG8pvAQAA//9Pz2ps") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) program crashed: INFO: task hung in d_alloc_parallel validation run: crashed=true reproducing took 1h21m32.013804981s repro crashed as (corrupted=false): INFO: task syz.0.17:4547 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:4547 ppid:4469 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.1.18:4550 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:0 pid:4550 ppid:4468 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.4.21:4557 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:0 pid:4557 ppid:4482 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.20:4558 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:4558 ppid:4481 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.2.19:4559 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:4559 ppid:4475 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 5 locks held by kworker/u4:0/9: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cb37c40 (net_cleanup_work){+.+.}-{0:0} , at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff8000179f85d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594 #3: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 #4: ffff0000c3ca5a80 (&caifn->caifdevs.lock){+.+.}-{3:3}, at: caif_exit_net+0x88/0x53c net/caif/caif_dev.c:528 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/u4:4/1586: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800025227c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 2 locks held by udevd/3940: 2 locks held by getty/4083: #0: ffff0000d6729098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001fa032f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 3 locks held by kworker/0:7/4463: #0: ffff0000d5d31938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800020ec7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 ( rtnl_mutex ){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 3 locks held by kworker/0:9/4515: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021077c40 (fqdir_free_work ){+.+.}-{0:0} , at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff80001555cfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5b8 kernel/rcu/tree.c:4023 1 lock held by syz.0.17/4546: 1 lock held by syz.0.17/4547: #0: ffff0000f76a8198 (&type->i_mutex_dir_key#8){.+.+}-{3:3} , at: inode_lock_shared include/linux/fs.h:768 [inline] , at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.1.18/4549: 1 lock held by syz.1.18/4550: #0: ffff0000f76a8c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76a8c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.4.21/4552: 1 lock held by syz.4.21/4557: #0: ffff0000f7648198 ( &type->i_mutex_dir_key #8 ){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] ){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.3.20/4554: 1 lock held by syz.3.20/4558: #0: ffff0000f76a96f8 (&type->i_mutex_dir_key #8 ){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] ){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.2.19/4556: 1 lock held by syz.2.19/4559: #0: ffff0000f76aa1a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76aa1a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.6.23/4681: 1 lock held by syz.6.23/4682: #0: ffff0000f7648c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f7648c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.8.25/4685: 1 lock held by syz.8.25/4688: #0: ffff0000f76496f8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76496f8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 4 locks held by syz.5.22/4687: 1 lock held by syz.5.22/4691: #0: ffff0000f764a1a8 (&type->i_mutex_dir_key #8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.9.26/4690: 1 lock held by syz.9.26/4692: #0: ffff0000f764ac58 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f764ac58 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.7.24/4695: 1 lock held by syz.7.24/4696: #0: ffff0000f764b708 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f764b708 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz-executor/10132: #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163 ============================================= final repro crashed as (corrupted=false): INFO: task syz.0.17:4547 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:4547 ppid:4469 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.1.18:4550 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:0 pid:4550 ppid:4468 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.4.21:4557 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:0 pid:4557 ppid:4482 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.20:4558 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:0 pid:4558 ppid:4481 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.2.19:4559 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:4559 ppid:4475 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5246 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 d_wait_lookup+0x168/0x240 fs/dcache.c:2634 d_alloc_parallel+0x9cc/0x1178 fs/dcache.c:2716 __lookup_slow+0x114/0x38c fs/namei.c:1683 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component fs/namei.c:2006 [inline] link_path_walk+0x818/0xcd8 fs/namei.c:2333 path_openat+0x1c0/0x27a0 fs/namei.c:3787 do_filp_open+0x198/0x38c fs/namei.c:3818 do_sys_openat2+0x134/0x3fc fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x11c/0x150 fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 5 locks held by kworker/u4:0/9: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cb37c40 (net_cleanup_work){+.+.}-{0:0} , at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff8000179f85d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594 #3: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 #4: ffff0000c3ca5a80 (&caifn->caifdevs.lock){+.+.}-{3:3}, at: caif_exit_net+0x88/0x53c net/caif/caif_dev.c:528 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 3 locks held by kworker/u4:4/1586: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800025227c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3} , at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 2 locks held by udevd/3940: 2 locks held by getty/4083: #0: ffff0000d6729098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80001fa032f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 3 locks held by kworker/0:7/4463: #0: ffff0000d5d31938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800020ec7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a04e48 ( rtnl_mutex ){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 3 locks held by kworker/0:9/4515: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021077c40 (fqdir_free_work ){+.+.}-{0:0} , at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff80001555cfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5b8 kernel/rcu/tree.c:4023 1 lock held by syz.0.17/4546: 1 lock held by syz.0.17/4547: #0: ffff0000f76a8198 (&type->i_mutex_dir_key#8){.+.+}-{3:3} , at: inode_lock_shared include/linux/fs.h:768 [inline] , at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.1.18/4549: 1 lock held by syz.1.18/4550: #0: ffff0000f76a8c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76a8c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.4.21/4552: 1 lock held by syz.4.21/4557: #0: ffff0000f7648198 ( &type->i_mutex_dir_key #8 ){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] ){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.3.20/4554: 1 lock held by syz.3.20/4558: #0: ffff0000f76a96f8 (&type->i_mutex_dir_key #8 ){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] ){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.2.19/4556: 1 lock held by syz.2.19/4559: #0: ffff0000f76aa1a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76aa1a8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.6.23/4681: 1 lock held by syz.6.23/4682: #0: ffff0000f7648c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f7648c48 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.8.25/4685: 1 lock held by syz.8.25/4688: #0: ffff0000f76496f8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f76496f8 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 4 locks held by syz.5.22/4687: 1 lock held by syz.5.22/4691: #0: ffff0000f764a1a8 (&type->i_mutex_dir_key #8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.9.26/4690: 1 lock held by syz.9.26/4692: #0: ffff0000f764ac58 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f764ac58 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz.7.24/4695: 1 lock held by syz.7.24/4696: #0: ffff0000f764b708 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000f764b708 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 1 lock held by syz-executor/10132: #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017a04e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163 =============================================