INFO: task hung in device_write

Status: upstream: reported on 2026/08/04 20:17
Reported-by: syzbot+8fdbec204fa9e28678f4@syzkaller.appspotmail.com
First crash: 12d, last: 12d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 INFO: task hung in device_write 1 2 12d 12d 0/2 upstream: reported on 2026/08/04 22:26

Sample crash report:
INFO: task syz.7.300:5491 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.300       state:D stack:0     pid:5491  ppid:5071   flags:0x00000009
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_timeout+0xc8/0x2f4 kernel/time/timer.c:2144
 do_wait_for_common+0x28c/0x3ec kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x44/0x5c kernel/sched/completion.c:138
 new_lockspace fs/dlm/lockspace.c:664 [inline]
 __dlm_new_lockspace+0x16d8/0x1bd8 fs/dlm/lockspace.c:719
 dlm_new_user_lockspace+0x64/0x80 fs/dlm/lockspace.c:750
 device_create_lockspace+0xc4/0x2fc fs/dlm/user.c:426
 device_write+0x674/0xc1c fs/dlm/user.c:618
 vfs_write+0x2a8/0x7c8 fs/read_write.c:582
 ksys_write+0x12c/0x228 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:646
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
1 lock held by klogd/3927:
 #0: ffff00019f3c8398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:538 [inline]
 #0: ffff00019f3c8398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1362 [inline]
 #0: ffff00019f3c8398 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1652 [inline]
 #0: ffff00019f3c8398 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2bc/0x1a6c kernel/sched/core.c:6479
 #0: ffff0000d6e34098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80001fa462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198
7 locks held by kworker/1:9/4962:
 #0: ffff0000c0021138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #2: ffff800016fa8ea8 (serio_mutex){+.+.}-{3:3}, at: serio_handle_event+0x34/0x7c0 drivers/input/serio/serio.c:200
 #3: ffff0000cf9e12e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
 #3: ffff0000cf9e12e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x88/0x3d8 drivers/base/dd.c:1009
 #4: ffff0000cf9e11d8 (&serio->drv_mutex){+.+.}-{3:3}, at: serio_connect_driver drivers/input/serio/serio.c:43 [inline]
 #4: ffff0000cf9e11d8 (&serio->drv_mutex){+.+.}-{3:3}, at: serio_driver_probe+0x5c/0xac drivers/input/serio/serio.c:775
 #5: ffff800016fb8028 (psmouse_mutex){+.+.}-{3:3}, at: psmouse_connect+0x90/0x10dc drivers/input/mouse/psmouse-base.c:1584
 #6: ffff0000f5632080 (&ps2dev->cmd_mutex){+.+.}-{3:3}, at: ps2_begin_command drivers/input/serio/libps2.c:106 [inline]
 #6: ffff0000f5632080 (&ps2dev->cmd_mutex){+.+.}-{3:3}, at: ps2_command+0x78/0xe4 drivers/input/serio/libps2.c:334
1 lock held by syz.7.300/5491:
 #0: ffff80001c6d3428 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xb0/0x1bd8 fs/dlm/lockspace.c:713
1 lock held by dlm_recoverd/5496:
1 lock held by syz.6.353/7190:
 #0: ffff80001c6d3428 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xb0/0x1bd8 fs/dlm/lockspace.c:713
1 lock held by syz.1.379/8455:
 #0: ffff800016fa8ea8 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x38/0x140 drivers/input/serio/serio.c:704
4 locks held by udevd/8460:
 #0: ffff0000f61502f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xc24 fs/seq_file.c:182
 #2: ffff0000d4116ae8 (kn->active#4){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff0000d4116ae8 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0xa4/0x3b8 fs/kernfs/file.c:173
 #3: ffff0000cf9e12e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
 #3: ffff0000cf9e12e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x168/0x328 drivers/base/core.c:2669
3 locks held by syz.7.386/8736:
 #0: ffff0000cd373268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c fs/file.c:1038
 #1: ffff00010d6c2460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 fs/read_write.c:580
 #2: ffff8000157e3f68 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x74/0x948 fs/nfsd/nfssvc.c:783
1 lock held by dhcpcd/8768:
1 lock held by dhcpcd/8769:
 #0: ffff0000c4092130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1805 [inline]
 #0: ffff0000c4092130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xaf4 net/packet/af_packet.c:3255

=============================================


Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/04 20:17 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in device_write
* Struck through repros no longer work on HEAD.