INFO: task syz.0.308:4273 blocked in I/O wait for more than 430 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.308 state:D stack:0 pid:4273 tgid:4273 ppid:3382 task_flags:0x440040 flags:0x00000011 Call trace: __switch_to+0x20c/0x520 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5520 [inline] __schedule+0xf98/0x34f4 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0xcc/0x288 kernel/sched/core.c:7362 io_schedule+0xac/0x120 kernel/sched/core.c:8190 bit_wait_io+0x18/0xb0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x64/0x1b0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x118 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x5a0/0x15c0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x158/0x1f8 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x1b8/0x280 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0xe4/0x230 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18c/0x6e4 fs/ext4/inode.c:6694 ext4_dirty_inode+0xbc/0x114 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1a4/0x122c fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] touch_atime+0x618/0x74c fs/inode.c:2328 file_accessed include/linux/fs.h:2278 [inline] ext4_file_mmap_prepare+0x2b4/0x3a4 fs/ext4/file.c:901 vfs_mmap_prepare include/linux/fs.h:2070 [inline] call_mmap_prepare mm/vma.c:2734 [inline] __mmap_region+0x7dc/0x1c20 mm/vma.c:2820 mmap_region+0x398/0x4d0 mm/vma.c:2921 do_mmap+0x9d0/0x13a0 mm/mmap.c:573 vm_mmap_pgoff+0x1f4/0x348 mm/util.c:581 ksys_mmap_pgoff+0x204/0x684 mm/mmap.c:619 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xd0/0x148 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x74/0x240 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x58/0x2a4 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 INFO: task syz.1.307:4274 blocked in I/O wait for more than 430 seconds. Tainted: G W syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.307 state:D stack:0 pid:4274 tgid:4274 ppid:3384 task_flags:0x440040 flags:0x00000001 Call trace: __switch_to+0x20c/0x520 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5520 [inline] __schedule+0xf98/0x34f4 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0xcc/0x288 kernel/sched/core.c:7362 io_schedule+0xac/0x120 kernel/sched/core.c:8190 bit_wait_io+0x18/0xb0 kernel/sched/wait_bit.c:258 __wait_on_bit+0x64/0x1b0 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x118 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:106 [inline] do_get_write_access+0x5a0/0x15c0 fs/jbd2/transaction.c:1113 jbd2_journal_get_write_access+0x158/0x1f8 fs/jbd2/transaction.c:1263 __ext4_journal_get_write_access+0x1b8/0x280 fs/ext4/ext4_jbd2.c:249 ext4_reserve_inode_write+0xe4/0x230 fs/ext4/inode.c:6509 __ext4_mark_inode_dirty+0x18c/0x6e4 fs/ext4/inode.c:6694 ext4_dirty_inode+0xbc/0x114 fs/ext4/inode.c:6731 __mark_inode_dirty+0x1a4/0x122c fs/fs-writeback.c:2729 generic_update_time fs/inode.c:2253 [inline] touch_atime+0x618/0x74c fs/inode.c:2328 file_accessed include/linux/fs.h:2278 [inline] ext4_file_mmap_prepare+0x2b4/0x3a4 fs/ext4/file.c:901 vfs_mmap_prepare include/linux/fs.h:2070 [inline] call_mmap_prepare mm/vma.c:2734 [inline] __mmap_region+0x7dc/0x1c20 mm/vma.c:2820 mmap_region+0x398/0x4d0 mm/vma.c:2921 do_mmap+0x9d0/0x13a0 mm/mmap.c:573 vm_mmap_pgoff+0x1f4/0x348 mm/util.c:581 ksys_mmap_pgoff+0x204/0x684 mm/mmap.c:619 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xd0/0x148 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x74/0x240 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x58/0x2a4 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Showing all locks held in the system: locks held by khungtaskd/32: 1, last CPU#1: #0: ffff8000879d1660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:847 [inline] #0: ffff8000879d1660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x40/0x190 kernel/locking/lockdep.c:6793 locks held by klogd/3185: 1, last CPU#1: #0: ffff800087ba21d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:304 [inline] #0: ffff800087ba21d0 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x6c/0x1ac mm/kasan/quarantine.c:259 locks held by getty/3321: 2, on CPU#1: #0: ffff0000199a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80008dcab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x420/0xec0 drivers/tty/n_tty.c:2211 locks held by syz-executor/3376: 3, on CPU#1: #0: ffff00001a524578 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:619 [inline] #0: ffff00001a524578 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/mmap_lock.c:441 [inline] #0: ffff00001a524578 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x34/0xcf4 mm/mmap_lock.c:501 #1: ffff0000173da558 (sb_pagefaults){.+.+}-{0:0}, at: percpu_down_read_freezable include/linux/percpu-rwsem.h:83 [inline] #1: ffff0000173da558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs/super.h:19 [inline] #1: ffff0000173da558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs/super.h:159 [inline] #1: ffff0000173da558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x198/0xe18 fs/ext4/inode.c:6896 #2: ffff0000173f4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xb50/0x1164 fs/jbd2/transaction.c:442 locks held by syz.0.308/4273: 3, on CPU#1: #0: ffff00001405ba78 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff00001405ba78 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x17c/0x348 mm/util.c:579 #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2278 [inline] #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x2b4/0x3a4 fs/ext4/file.c:901 #2: ffff0000173f4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xb50/0x1164 fs/jbd2/transaction.c:442 locks held by syz.1.307/4274: 3, on CPU#1: #0: ffff0000185e4578 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff0000185e4578 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x17c/0x348 mm/util.c:579 #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2278 [inline] #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x2b4/0x3a4 fs/ext4/file.c:901 #2: ffff0000173f4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xb50/0x1164 fs/jbd2/transaction.c:442 locks held by kworker/u8:1/4275: 2, last CPU#1: #0: ffff00000e04b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 kernel/workqueue.c:3362 #1: ffff8000a1947c70 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 kernel/workqueue.c:3361 locks held by dhcpcd/4277: 3, on CPU#1: #0: ffff00001748dce8 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: prepare_bprm_creds fs/exec.c:1404 [inline] #0: ffff00001748dce8 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0x98/0x1220 fs/exec.c:1827 #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2278 [inline] #1: ffff0000173da460 (sb_writers#4){.+.+}-{0:0}, at: filemap_read+0x854/0xaf4 mm/filemap.c:2896 #2: ffff0000173f4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xb50/0x1164 fs/jbd2/transaction.c:442 =============================================