INFO: task syz-executor.1:31413 blocked for more than 143 seconds. Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack: 0 pid:31413 ppid: 3066 flags:0x00000009 Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:557 context_switch kernel/sched/core.c:5182 [inline] __schedule+0x414/0x5a0 kernel/sched/core.c:6494 schedule+0x64/0xa4 kernel/sched/core.c:6570 rwsem_down_read_slowpath+0x228/0x444 kernel/locking/rwsem.c:1087 __down_read_common+0x48/0x154 kernel/locking/rwsem.c:1252 __down_read kernel/locking/rwsem.c:1261 [inline] down_read+0x68/0x78 kernel/locking/rwsem.c:1501 filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] filemap_fault+0x104/0x804 mm/filemap.c:3112 __do_fault+0x60/0x358 mm/memory.c:4173 do_shared_fault mm/memory.c:4573 [inline] do_fault+0x23c/0x550 mm/memory.c:4651 handle_pte_fault mm/memory.c:4911 [inline] __handle_mm_fault mm/memory.c:5053 [inline] handle_mm_fault+0x784/0xa40 mm/memory.c:5151 __do_page_fault arch/arm64/mm/fault.c:502 [inline] do_page_fault+0x428/0x79c arch/arm64/mm/fault.c:602 do_translation_fault+0x78/0x194 arch/arm64/mm/fault.c:685 do_mem_abort+0x54/0x130 arch/arm64/mm/fault.c:821 el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:366 el1h_64_sync_handler+0x60/0xac arch/arm64/kernel/entry-common.c:426 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576 timerfd_read+0x320/0x384 do_iter_read+0x1f0/0x55c fs/read_write.c:792 vfs_readv fs/read_write.c:910 [inline] do_readv+0x124/0x228 fs/read_write.c:947 __do_sys_readv fs/read_write.c:1038 [inline] __se_sys_readv fs/read_write.c:1035 [inline] __arm64_sys_readv+0x28/0x38 fs/read_write.c:1035 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 INFO: task syz-executor.3:31440 blocked for more than 143 seconds. Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack: 0 pid:31440 ppid: 3067 flags:0x00000001 Call trace: __switch_to+0x180/0x298 arch/arm64/kernel/process.c:557 context_switch kernel/sched/core.c:5182 [inline] __schedule+0x414/0x5a0 kernel/sched/core.c:6494 schedule+0x64/0xa4 kernel/sched/core.c:6570 rwsem_down_write_slowpath+0x258/0x468 kernel/locking/rwsem.c:1182 __down_write_common kernel/locking/rwsem.c:1297 [inline] __down_write kernel/locking/rwsem.c:1306 [inline] down_write+0x88/0xcc kernel/locking/rwsem.c:1553 filemap_invalidate_lock include/linux/fs.h:801 [inline] blkdev_fallocate+0x148/0x258 block/fops.c:641 vfs_fallocate+0x328/0x38c fs/open.c:323 ksys_fallocate fs/open.c:346 [inline] __do_sys_fallocate fs/open.c:354 [inline] __se_sys_fallocate fs/open.c:352 [inline] __arm64_sys_fallocate+0x5c/0xac fs/open.c:352 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/11: #0: ffff80000d433568 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/12: #0: ffff80000d433bb8 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffff80000d433440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:279 2 locks held by getty/2720: #0: ffff0000c76a7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x28/0x58 drivers/tty/tty_ldisc.c:244 #1: ffff80000f6162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x19c/0x89c drivers/tty/n_tty.c:2177 3 locks held by kworker/u4:6/3156: 2 locks held by syz-executor.1/31413: #0: ffff000110551b58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline] #0: ffff000110551b58 (&mm->mmap_lock){++++}-{3:3}, at: do_page_fault+0x1ec/0x79c arch/arm64/mm/fault.c:583 #1: ffff0000c561e750 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #1: ffff0000c561e750 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0x104/0x804 mm/filemap.c:3112 1 lock held by syz-executor.1/31435: 1 lock held by syz-executor.3/31440: #0: ffff0000c561e750 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_invalidate_lock include/linux/fs.h:801 [inline] #0: ffff0000c561e750 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x148/0x258 block/fops.c:641 1 lock held by syz-executor.1/2744: #0: ffff00010f74a090 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline] #0: ffff00010f74a090 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: lookup_slow+0x34/0x68 fs/namei.c:1701 2 locks held by syz-executor.1/2745: #0: ffff00010f74a090 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:766 [inline] #0: ffff00010f74a090 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: lookup_slow+0x34/0x68 fs/namei.c:1701 #1: ffff00010f74a4f8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0x50/0x70 fs/fuse/inode.c:468 =============================================