Extracting prog: 4m28.998365388s Minimizing prog: 76.152µs Simplifying prog options: 17m13.352987907s Extracting C: 5m10.015672078s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$eJzs3U9oHFUcB/Df7B9iklWiXgRBBBGRQIg3wUu8KAQkiAdBDxERL0oiaIK3XU9evHgWyclLEG9Gj+IleLEUekrbHNJLSxt6aCj0D0zZ2d2Qtttmk93MtJnPB+bf7pt5b2C+783CDhNAaU1FxFxEVCNiOiLqEZEcLPBqZ5rqbq6Nby5GpOlH15OsXGe7o7ffZES0IuLtiPi3ksRXtYjVjU93bm69/8ZPK/XXf9v4ZDzXk+za3dn+YO/XhR//nH9r9cy5qwtJzEXjvvMavaTPZ7Uk4oWTqOwJkdSKbgGD+PD7P863c/9iRLyW5f9W2hFxd3+tn7T587WzL+fdXmC00rTeHgNbKVA6lYhodG9Ss/WoVGZmOvfwF6oTla+Xv/1u+svllaUviu6pgFFpRGy/9/fYX5PZelKZ6eb/crWTf+C0anaX6xfb871qsa0BRunwQLfH/+nPmm+G/EPpHCn/z+TTJiAf3fxnyX4g/1eKahOQjyON/4/6GwDwVPL7H8rrsfmvF9MmIB/Gfygv+Yfykn8oL/mH8jqYfwCgXNKxAR8UbvV2AE6LgrsfAAAAAAAAAAAAAAAAAACgj7XxzcXelFed//0SsftuRNT61V/N3kfce/nYxI2kXWxf0tnt2J7N5sMcYXi/F/z09XOXiq3//1eKrb+5FNH6ISJma7WHr7+ke/0d3/OHfF//fMgKhvTOxyd15MZApe6sn1T9g5nfivin3f/M9ut/KvFStuzf/zRG8JqEb24PeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABycy8AAP//gwB1rA==") program crashed: INFO: task hung in block_read_full_folio extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$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") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800003, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x41, 0x25f, &(0x7f00000002c0)="$eJzs3U9oHFUcB/Df7B9iklWiXgRBBBGRQIg3wUu8KAQkiAdBDxERL0oiaIK3XU9evHgWyclLEG9Gj+IleLEUekrbHNJLSxt6aCj0D0zZ2d2Qtttmk93MtJnPB+bf7pt5b2C+783CDhNAaU1FxFxEVCNiOiLqEZEcLPBqZ5rqbq6Nby5GpOlH15OsXGe7o7ffZES0IuLtiPi3ksRXtYjVjU93bm69/8ZPK/XXf9v4ZDzXk+za3dn+YO/XhR//nH9r9cy5qwtJzEXjvvMavaTPZ7Uk4oWTqOwJkdSKbgGD+PD7P863c/9iRLyW5f9W2hFxd3+tn7T587WzL+fdXmC00rTeHgNbKVA6lYhodG9Ss/WoVGZmOvfwF6oTla+Xv/1u+svllaUviu6pgFFpRGy/9/fYX5PZelKZ6eb/crWTf+C0anaX6xfb871qsa0BRunwQLfH/+nPmm+G/EPpHCn/z+TTJiAf3fxnyX4g/1eKahOQjyON/4/6GwDwVPL7H8rrsfmvF9MmIB/Gfygv+Yfykn8oL/mH8jqYfwCgXNKxAR8UbvV2AE6LgrsfAAAAAAAAAAAAAAAAAACgj7XxzcXelFed//0SsftuRNT61V/N3kfce/nYxI2kXWxf0tnt2J7N5sMcYXi/F/z09XOXiq3//1eKrb+5FNH6ISJma7WHr7+ke/0d3/OHfF//fMgKhvTOxyd15MZApe6sn1T9g5nfivin3f/M9ut/KvFStuzf/zRG8JqEb24PeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABycy8AAP//gwB1rA==") program crashed: INFO: task hung in block_read_full_folio validation run: crashed=true reproducing took 37m14.064206932s repro crashed as (corrupted=false): INFO: task udevd:4 INFO: task udevd:4872 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4872 tgid:4872 ppid:4348 task_flags:0x400140 flags:0x00000000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 io_schedule+0x1c/0xe0 kernel/sched/core.c:8154 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:250 __wait_on_bit_lock+0xb8/0x1d0 kernel/sched/wait_bit.c:93 out_of_line_wait_on_bit_lock+0x130/0x184 kernel/sched/wait_bit.c:120 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x78/0xa8 fs/buffer.c:68 lock_buffer include/linux/buffer_head.h:434 [inline] block_read_full_folio+0x3bc/0x740 fs/buffer.c:2417 blkdev_read_folio+0x28/0x38 block/fops.c:493 filemap_read_folio+0xf0/0x2fc mm/filemap.c:2516 filemap_update_page mm/filemap.c:2603 [inline] filemap_get_pages+0x12dc/0x1ca8 mm/filemap.c:2733 filemap_read+0x388/0xd04 mm/filemap.c:2820 blkdev_read_iter+0x2a8/0x3cc block/fops.c:830 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x498/0x8c8 fs/read_write.c:574 ksys_read+0x12c/0x228 fs/read_write.c:716 __do_sys_read fs/read_write.c:725 [inline] __se_sys_read fs/read_write.c:723 [inline] __arm64_sys_read+0x84/0x98 fs/read_write.c:723 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 2 locks held by pr/ttyAMA-1/41: 2 locks held by getty/4497: #0: ffff0000c19450a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009250b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 drivers/tty/n_tty.c:2211 2 locks held by udevd/4760: #0: ffff0000c154ccf8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154ccf8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4819: #0: ffff0000c154aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4872: #0: ffff0000c154d878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154d878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4873: #0: ffff0000c1559ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1559ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.2.20/5018: 2 locks held by udevd/5029: #0: ffff0000c154b5f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154b5f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.3.21/5059: 2 locks held by udevd/5065: #0: ffff0000c154c178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154c178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.4.24/5104: 1 lock held by syz.5.25/5145: 2 locks held by udevd/5149: #0: ffff0000c1549ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1549ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.6.26/5259: 2 locks held by syz.7.27/5358: 2 locks held by udevd/5363: #0: ffff0000c155aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c155aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 3 locks held by syz.8.28/5400: 2 locks held by udevd/5402: #0: ffff0000c154ef78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154ef78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.9.30/5512: 1 lock held by syz.0.31/5678: ============================================= final repro crashed as (corrupted=false): INFO: task udevd:4 INFO: task udevd:4872 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4872 tgid:4872 ppid:4348 task_flags:0x400140 flags:0x00000000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5510 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7326 io_schedule+0x1c/0xe0 kernel/sched/core.c:8154 bit_wait_io+0x1c/0xac kernel/sched/wait_bit.c:250 __wait_on_bit_lock+0xb8/0x1d0 kernel/sched/wait_bit.c:93 out_of_line_wait_on_bit_lock+0x130/0x184 kernel/sched/wait_bit.c:120 wait_on_bit_lock_io include/linux/wait_bit.h:221 [inline] __lock_buffer+0x78/0xa8 fs/buffer.c:68 lock_buffer include/linux/buffer_head.h:434 [inline] block_read_full_folio+0x3bc/0x740 fs/buffer.c:2417 blkdev_read_folio+0x28/0x38 block/fops.c:493 filemap_read_folio+0xf0/0x2fc mm/filemap.c:2516 filemap_update_page mm/filemap.c:2603 [inline] filemap_get_pages+0x12dc/0x1ca8 mm/filemap.c:2733 filemap_read+0x388/0xd04 mm/filemap.c:2820 blkdev_read_iter+0x2a8/0x3cc block/fops.c:830 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x498/0x8c8 fs/read_write.c:574 ksys_read+0x12c/0x228 fs/read_write.c:716 __do_sys_read fs/read_write.c:725 [inline] __se_sys_read fs/read_write.c:723 [inline] __arm64_sys_read+0x84/0x98 fs/read_write.c:723 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 2 locks held by pr/ttyAMA-1/41: 2 locks held by getty/4497: #0: ffff0000c19450a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009250b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 drivers/tty/n_tty.c:2211 2 locks held by udevd/4760: #0: ffff0000c154ccf8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154ccf8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154ce90 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4819: #0: ffff0000c154aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4872: #0: ffff0000c154d878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154d878 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154da10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 2 locks held by udevd/4873: #0: ffff0000c1559ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1559ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c155a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.2.20/5018: 2 locks held by udevd/5029: #0: ffff0000c154b5f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154b5f8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154b790 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.3.21/5059: 2 locks held by udevd/5065: #0: ffff0000c154c178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154c178 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154c310 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.4.24/5104: 1 lock held by syz.5.25/5145: 2 locks held by udevd/5149: #0: ffff0000c1549ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c1549ef8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154a090 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.6.26/5259: 2 locks held by syz.7.27/5358: 2 locks held by udevd/5363: #0: ffff0000c155aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c155aa78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c155ac10 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 3 locks held by syz.8.28/5400: 2 locks held by udevd/5402: #0: ffff0000c154ef78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff0000c154ef78 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x298/0x3cc block/fops.c:829 #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1089 [inline] #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_update_page mm/filemap.c:2569 [inline] #1: ffff0000c154f110 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x6ec/0x1ca8 mm/filemap.c:2733 1 lock held by syz.9.30/5512: 1 lock held by syz.0.31/5678: =============================================