INFO: task syz.9.294:6610 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.9.294 state:D stack:0 pid:6610 tgid:6609 ppid:6140 task_flags:0x400140 flags:0x00000011 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7383 rwsem_down_write_slowpath+0x6ec/0x1174 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1632 filemap_invalidate_lock include/linux/fs.h:1079 [inline] blk_ioctl_zeroout block/ioctl.c:238 [inline] blkdev_common_ioctl+0x11d0/0x1fe0 block/ioctl.c:666 blkdev_ioctl+0x4ec/0x904 block/ioctl.c:791 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task syz.8.371:6983 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.371 state:D stack:0 pid:6983 tgid:6983 ppid:5935 task_flags:0x440040 flags:0x00800001 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7383 rwsem_down_read_slowpath+0x530/0x7b0 kernel/locking/rwsem.c:1114 __down_read_common kernel/locking/rwsem.c:1291 [inline] __down_read kernel/locking/rwsem.c:1304 [inline] down_read+0xa0/0x2bc kernel/locking/rwsem.c:1576 filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 do_sync_mmap_readahead+0x740/0xaa8 mm/filemap.c:-1 filemap_fault+0x6b4/0x1498 mm/filemap.c:3582 __do_fault+0xf4/0x4a8 mm/memory.c:5425 do_shared_fault mm/memory.c:5924 [inline] do_fault mm/memory.c:5998 [inline] do_pte_missing+0x4f0/0x2a24 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x15a4/0x253c mm/memory.c:6686 do_page_fault+0x77c/0xb88 arch/arm64/mm/fault.c:708 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:844 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:984 el0_da+0x78/0x254 arch/arm64/kernel/entry-common.c:552 el0t_64_sync_handler+0x10c/0x148 arch/arm64/kernel/entry-common.c:758 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task syz.8.371:6984 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.371 state:D stack:0 pid:6984 tgid:6983 ppid:5935 task_flags:0x440140 flags:0x04000001 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7383 rwsem_down_read_slowpath+0x530/0x7b0 kernel/locking/rwsem.c:1114 __down_read_common kernel/locking/rwsem.c:1291 [inline] __down_read kernel/locking/rwsem.c:1304 [inline] down_read+0xa0/0x2bc kernel/locking/rwsem.c:1576 filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 do_sync_mmap_readahead+0x740/0xaa8 mm/filemap.c:-1 filemap_fault+0x6b4/0x1498 mm/filemap.c:3582 __do_fault+0xf4/0x4a8 mm/memory.c:5425 do_read_fault mm/memory.c:5860 [inline] do_fault mm/memory.c:5994 [inline] do_pte_missing+0x1760/0x2a24 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x15a4/0x253c mm/memory.c:6686 do_page_fault+0x4b0/0xb88 arch/arm64/mm/fault.c:751 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:844 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:984 el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:322 el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:449 el1h_64_sync+0x6c/0x70 arch/arm64/kernel/entry.S:589 __arch_copy_from_user+0x98/0x23c arch/arm64/lib/copy_template.S:99 (P) copy_from_user include/linux/uaccess.h:222 [inline] copy_msghdr_from_user+0xb8/0x194 net/socket.c:2614 recvmsg_copy_msghdr net/socket.c:2870 [inline] ___sys_recvmsg+0x11c/0x1f4 net/socket.c:2942 do_recvmmsg+0x288/0x7d4 net/socket.c:3041 __sys_recvmmsg+0x1e0/0x270 net/socket.c:3115 __do_sys_recvmmsg net/socket.c:3138 [inline] __se_sys_recvmmsg net/socket.c:3131 [inline] __arm64_sys_recvmmsg+0xdc/0x104 net/socket.c:3131 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task syz.8.371:6988 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.8.371 state:D stack:0 pid:6988 tgid:6983 ppid:5935 task_flags:0x440140 flags:0x00000001 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7383 rwsem_down_read_slowpath+0x530/0x7b0 kernel/locking/rwsem.c:1114 __down_read_common kernel/locking/rwsem.c:1291 [inline] __down_read kernel/locking/rwsem.c:1304 [inline] down_read+0xa0/0x2bc kernel/locking/rwsem.c:1576 filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 do_sync_mmap_readahead+0x740/0xaa8 mm/filemap.c:-1 filemap_fault+0x6b4/0x1498 mm/filemap.c:3582 __do_fault+0xf4/0x4a8 mm/memory.c:5425 do_read_fault mm/memory.c:5860 [inline] do_fault mm/memory.c:5994 [inline] do_pte_missing+0x1760/0x2a24 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x15a4/0x253c mm/memory.c:6686 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x8ec/0x2134 mm/gup.c:1428 __get_user_pages_locked mm/gup.c:1692 [inline] __gup_longterm_locked+0xa14/0xffc mm/gup.c:2476 gup_fast_fallback+0x1d54/0x204c mm/gup.c:3209 get_user_pages_fast+0x6c/0xa8 mm/gup.c:3287 madvise_inject_error mm/madvise.c:1462 [inline] madvise_do_behavior+0x16c/0x7c0 mm/madvise.c:1898 do_madvise+0x28c/0x2f0 mm/madvise.c:2006 __do_sys_madvise mm/madvise.c:2015 [inline] __se_sys_madvise mm/madvise.c:2013 [inline] __arm64_sys_madvise+0xa4/0xc0 mm/madvise.c:2013 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800088cb6f20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088cb6f20 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff800088cb6f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 2 locks held by pr/ttyAMA-1/41: 2 locks held by getty/4490: #0: ffff0000d07fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009248b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:1/4713: #0: ffff0000c5326940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff0000c5326940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3405 #1: ffff800093d07c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffff800093d07c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3405 #2: ffff000103080ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x178/0x374 net/bluetooth/hci_sync.c:331 1 lock held by syz.1.103/5318: 1 lock held by syz.1.103/5319: 2 locks held by syz.9.294/6610: #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:1024 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blk_ioctl_zeroout block/ioctl.c:237 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_common_ioctl+0x11b4/0x1fe0 block/ioctl.c:666 #1: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock include/linux/fs.h:1079 [inline] #1: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: blk_ioctl_zeroout block/ioctl.c:238 [inline] #1: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_common_ioctl+0x11d0/0x1fe0 block/ioctl.c:666 1 lock held by syz.8.371/6983: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.8.371/6984: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.8.371/6988: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.3.396/7127: #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x458/0x630 block/fops.c:775 1 lock held by syz.0.423/7388: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.0.423/7390: #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x458/0x630 block/fops.c:775 1 lock held by syz.0.423/7393: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 4 locks held by kworker/u8:15/8007: 1 lock held by syz.6.490/8110: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.1.793/9722: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.1.793/9724: #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #0: ffff0000c14b8990 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x334/0xe20 mm/readahead.c:517 1 lock held by syz.5.875/10289: #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:1024 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blk_ioctl_zeroout block/ioctl.c:237 [inline] #0: ffff0000c14b87f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_common_ioctl+0x11b4/0x1fe0 block/ioctl.c:666 1 lock held by syz.2.1006/10783: #0: ffff0000dcecf140 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #0: ffff0000dcecf140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x64/0x284 net/nfc/core.c:1166 4 locks held by syz.2.1006/10784: #0: ffff800089df98c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1217 #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620 net/netlink/genetlink.c:1208 #2: ffff0000dcecf140 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #2: ffff0000dcecf140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x40/0x308 net/nfc/core.c:95 #3: ffff0000facb8348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_open_device net/nfc/nci/core.c:478 [inline] #3: ffff0000facb8348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa4/0x588 net/nfc/nci/core.c:643 2 locks held by syz.8.1016/10823: #0: ffff800089df98c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1217 #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620 net/netlink/genetlink.c:1208 2 locks held by syz.9.1020/10839: #0: ffff800089df98c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1217 #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff800089df9700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xec/0x620 net/netlink/genetlink.c:1208 =============================================