Extracting prog: 4m27.967239271s Minimizing prog: 89.338µs Simplifying prog options: 16m51.922692967s Extracting C: 5m9.977433962s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$eJzs3U9oHFUcB/Df7B9iklWiXgRBBBGRQIg3wUu8KAQkiAdBDxERL0oiaIK3XU9evHgWyclLEG9Gj+IleLEUekrbHNJLSxt6aCj0D0zZ2d2Qtttmk93MtJnPB+bf7pt5b2C+783CDhNAaU1FxFxEVCNiOiLqEZEcLPBqZ5rqbq6Nby5GpOlH15OsXGe7o7ffZES0IuLtiPi3ksRXtYjVjU93bm69/8ZPK/XXf9v4ZDzXk+za3dn+YO/XhR//nH9r9cy5qwtJzEXjvvMavaTPZ7Uk4oWTqOwJkdSKbgGD+PD7P863c/9iRLyW5f9W2hFxd3+tn7T587WzL+fdXmC00rTeHgNbKVA6lYhodG9Ss/WoVGZmOvfwF6oTla+Xv/1u+svllaUviu6pgFFpRGy/9/fYX5PZelKZ6eb/crWTf+C0anaX6xfb871qsa0BRunwQLfH/+nPmm+G/EPpHCn/z+TTJiAf3fxnyX4g/1eKahOQjyON/4/6GwDwVPL7H8rrsfmvF9MmIB/Gfygv+Yfykn8oL/mH8jqYfwCgXNKxAR8UbvV2AE6LgrsfAAAAAAAAAAAAAAAAAACgj7XxzcXelFed//0SsftuRNT61V/N3kfce/nYxI2kXWxf0tnt2J7N5sMcYXi/F/z09XOXiq3//1eKrb+5FNH6ISJma7WHr7+ke/0d3/OHfF//fMgKhvTOxyd15MZApe6sn1T9g5nfivin3f/M9ut/KvFStuzf/zRG8JqEb24PeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABycy8AAP//gwB1rA==") program crashed: INFO: task hung in block_read_full_folio extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true reproducing took 37m0.508350009s repro crashed as (corrupted=false): INFO: task udevd:4755 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4755 tgid:4755 ppid:4344 task_flags:0x400140 flags:0x00000000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 io_schedule+0x1c/0xe0 kernel/sched/core.c:8154 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:250 __wait_on_bit_lock+0xb8/0x1d0 kernel/sched/wait_bit.c:93 out_of_line_wait_on_bit_lock+0x130/0x184 kernel/sched/wait_bit.c:120 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x78/0xa8 fs/buffer.c:68 lock_buffer include/linux/buffer_head.h:434 [inline] block_read_full_folio+0x3bc/0x740 fs/buffer.c:2417 blkdev_read_folio+0x28/0x38 block/fops.c:493 filemap_read_folio+0xf0/0x2fc mm/filemap.c:2510 filemap_update_page mm/filemap.c:2597 [inline] filemap_get_pages+0x12dc/0x1ca8 mm/filemap.c:2727 filemap_read+0x388/0xd04 mm/filemap.c:2814 blkdev_read_iter+0x2a8/0x3cc block/fops.c:830 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x498/0x8c8 fs/read_write.c:574 ksys_read+0x12c/0x228 fs/read_write.c:716 __do_sys_read fs/read_write.c:725 [inline] __se_sys_read fs/read_write.c:723 [inline] __arm64_sys_read+0x84/0x98 fs/read_write.c:723 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:738 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:757 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 2 locks held by getty/4492: #0: ffff0000c4c2d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff8000924fb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 drivers/tty/n_tty.c:2211 2 locks held by udevd/4751: #0: ffff0000c14b1ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b1ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4753: #0: ffff0000c14b1378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b1378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4754: #0: ffff0000c14935f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14935f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4755: #0: ffff0000c1494178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1494178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 1 lock held by syz.2.19/5014: 1 lock held by syz.3.22/5053: 2 locks held by udevd/5057: #0: ffff0000c1492a78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1492a78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/5060: #0: ffff0000c1491ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1491ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by syz.4.23/5096: 2 locks held by udevd/5099: #0: ffff0000c1491378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1491378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by syz.5.24/5202: 1 lock held by syz.6.25/5310: 1 lock held by syz.7.27/5353: 2 locks held by udevd/5355: #0: ffff0000c1495878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1495878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/5359: #0: ffff0000c14b07f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b07f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 1 lock held by syz.8.28/5462: 1 lock held by syz.9.29/5563: 1 lock held by syz.0.30/5662: ============================================= final repro crashed as (corrupted=false): INFO: task udevd:4755 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4755 tgid:4755 ppid:4344 task_flags:0x400140 flags:0x00000000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 io_schedule+0x1c/0xe0 kernel/sched/core.c:8154 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:250 __wait_on_bit_lock+0xb8/0x1d0 kernel/sched/wait_bit.c:93 out_of_line_wait_on_bit_lock+0x130/0x184 kernel/sched/wait_bit.c:120 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x78/0xa8 fs/buffer.c:68 lock_buffer include/linux/buffer_head.h:434 [inline] block_read_full_folio+0x3bc/0x740 fs/buffer.c:2417 blkdev_read_folio+0x28/0x38 block/fops.c:493 filemap_read_folio+0xf0/0x2fc mm/filemap.c:2510 filemap_update_page mm/filemap.c:2597 [inline] filemap_get_pages+0x12dc/0x1ca8 mm/filemap.c:2727 filemap_read+0x388/0xd04 mm/filemap.c:2814 blkdev_read_iter+0x2a8/0x3cc block/fops.c:830 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x498/0x8c8 fs/read_write.c:574 ksys_read+0x12c/0x228 fs/read_write.c:716 __do_sys_read fs/read_write.c:725 [inline] __se_sys_read fs/read_write.c:723 [inline] __arm64_sys_read+0x84/0x98 fs/read_write.c:723 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:738 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:757 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff800088d171e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 2 locks held by getty/4492: #0: ffff0000c4c2d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff8000924fb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 drivers/tty/n_tty.c:2211 2 locks held by udevd/4751: #0: ffff0000c14b1ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b1ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b2090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4753: #0: ffff0000c14b1378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b1378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b1510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4754: #0: ffff0000c14935f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14935f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1493790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/4755: #0: ffff0000c1494178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1494178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1494310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 1 lock held by syz.2.19/5014: 1 lock held by syz.3.22/5053: 2 locks held by udevd/5057: #0: ffff0000c1492a78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1492a78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1492c10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/5060: #0: ffff0000c1491ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1491ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1492090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by syz.4.23/5096: 2 locks held by udevd/5099: #0: ffff0000c1491378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1491378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1491510 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by syz.5.24/5202: 1 lock held by syz.6.25/5310: 1 lock held by syz.7.27/5353: 2 locks held by udevd/5355: #0: ffff0000c1495878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1495878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c1495a10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 2 locks held by udevd/5359: #0: ffff0000c14b07f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c14b07f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2563 [inline] #1: ffff0000c14b0990 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2727 1 lock held by syz.8.28/5462: 1 lock held by syz.9.29/5563: 1 lock held by syz.0.30/5662: =============================================