INFO: task syz-executor.4:27475 blocked for more than 143 seconds. Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack: 0 pid:27475 ppid: 3068 flags:0x00000009 Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:557 context_switch kernel/sched/core.c:5182 [inline] __schedule+0x414/0x5a0 kernel/sched/core.c:6494 schedule+0x64/0xa4 kernel/sched/core.c:6570 rwsem_down_read_slowpath+0x228/0x444 kernel/locking/rwsem.c:1087 __down_read_common+0x48/0x154 kernel/locking/rwsem.c:1252 __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x68/0x78 kernel/locking/rwsem.c:1501 filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] filemap_fault+0x104/0x804 mm/filemap.c:3112 __do_fault+0x60/0x358 mm/memory.c:4173 do_shared_fault mm/memory.c:4573 [inline] do_fault+0x23c/0x550 mm/memory.c:4651 handle_pte_fault mm/memory.c:4911 [inline] __handle_mm_fault mm/memory.c:5053 [inline] handle_mm_fault+0x784/0xa40 mm/memory.c:5151 __do_page_fault arch/arm64/mm/fault.c:502 [inline] do_page_fault+0x428/0x79c arch/arm64/mm/fault.c:602 do_translation_fault+0x78/0x194 arch/arm64/mm/fault.c:685 do_mem_abort+0x54/0x130 arch/arm64/mm/fault.c:821 el0_da+0x70/0x16c arch/arm64/kernel/entry-common.c:514 el0t_64_sync_handler+0xcc/0xf0 arch/arm64/kernel/entry-common.c:657 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 INFO: task syz-executor.3:27482 blocked for more than 143 seconds. Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack: 0 pid:27482 ppid: 3070 flags:0x00000001 Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:557 context_switch kernel/sched/core.c:5182 [inline] __schedule+0x414/0x5a0 kernel/sched/core.c:6494 schedule+0x64/0xa4 kernel/sched/core.c:6570 rwsem_down_write_slowpath+0x258/0x468 kernel/locking/rwsem.c:1182 __down_write_common kernel/locking/rwsem.c:1297 [inline] __down_write kernel/locking/rwsem.c:1306 [inline] down_write+0x88/0xcc kernel/locking/rwsem.c:1553 filemap_invalidate_lock include/linux/fs.h:801 [inline] blkdev_fallocate+0x148/0x258 block/fops.c:641 vfs_fallocate+0x328/0x38c fs/open.c:323 ksys_fallocate fs/open.c:346 [inline] __do_sys_fallocate fs/open.c:354 [inline] __se_sys_fallocate fs/open.c:352 [inline] __arm64_sys_fallocate+0x5c/0xac fs/open.c:352 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/11: #0: ffff80000d433568 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/12: #0: ffff80000d433bb8 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffff80000d433440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:279 2 locks held by getty/2715: #0: ffff0000c6ca8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x28/0x58 drivers/tty/tty_ldisc.c:244 #1: ffff80000f6162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x19c/0x89c drivers/tty/n_tty.c:2177 2 locks held by kworker/u4:13/11649: 1 lock held by syz-executor.0/27444: 2 locks held by syz-executor.4/27475: #0: ffff0001182bd0d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff0001182bd0d8 (&mm->mmap_lock){++++}-{3:3}, at: do_page_fault+0x1ec/0x79c arch/arm64/mm/fault.c:583 #1: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #1: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0x104/0x804 mm/filemap.c:3112 1 lock held by syz-executor.4/27480: 1 lock held by syz-executor.3/27482: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:801 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x148/0x258 block/fops.c:641 1 lock held by syz-executor.3/27685: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x5c/0x338 mm/readahead.c:220 1 lock held by syz-executor.3/27686: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x5c/0x338 mm/readahead.c:220 1 lock held by syz-executor.3/27687: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:801 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x148/0x258 block/fops.c:641 1 lock held by syz-executor.4/27699: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x5c/0x338 mm/readahead.c:220 1 lock held by syz-executor.0/27721: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x5c/0x338 mm/readahead.c:220 1 lock held by syz-executor.4/27759: #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff0000c048b2d0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x5c/0x338 mm/readahead.c:220 =============================================