INFO: task syz-executor.1:11844 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11844 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:85064900 r9:00000000 r8:838ebe88 r7:00000002 r6:eac7dde4 r5:8564a400 r4:8564a400 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:8564a400 r4:838ebe84 [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:85064900 r9:8564a400 r8:851dda80 r7:838ebe84 r6:851ddaac r5:838ebe00 r4:00000000 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<80a7fe10>] (nbd_start_device_ioctl drivers/block/nbd.c:1464 [inline]) [<818c6f64>] (mutex_lock) from [<80a7fe10>] (__nbd_ioctl drivers/block/nbd.c:1524 [inline]) [<818c6f64>] (mutex_lock) from [<80a7fe10>] (nbd_ioctl+0x1d0/0x3d4 drivers/block/nbd.c:1564) [<80a7fc40>] (nbd_ioctl) from [<8078d348>] (blkdev_ioctl+0x360/0xf40 block/ioctl.c:641) r10:85064900 r9:8564a400 r8:00000001 r7:80a7fc40 r6:00000000 r5:83086a80 r4:0000ab03 [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r10:85064900 r9:8564a400 r8:00000005 r7:00000000 r6:85064901 r5:00000000 r4:0000ab03 [<8050fb9c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeac7dfa8 to 0xeac7dff0) dfa0: 00000000 00000000 00000005 0000ab03 00000000 00000000 dfc0: 00000000 00000000 0014c2c4 00000036 7ea5c32e 7ea5c32f 003d0f00 76b140fc dfe0: 76b13f08 76b13ef8 000168a0 00050c70 r10:00000036 r9:8564a400 r8:80200288 r7:00000036 r6:0014c2c4 r5:00000000 r4:00000000 INFO: task syz-executor.1:11856 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11856 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:e8ba1b74 r9:826057d8 r8:82604ec0 r7:00000000 r6:00000002 r5:00000000 r4:85648000 [<818c3778>] (schedule) from [<818c38d0>] (io_schedule+0x38/0x48 kernel/sched/core.c:9044) r5:00000000 r4:85648000 [<818c3898>] (io_schedule) from [<8042ba10>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1283) r5:85648000 r4:00000002 [<8042b880>] (folio_wait_bit_common) from [<8042efcc>] (folio_put_wait_locked mm/filemap.c:1447 [inline]) [<8042b880>] (folio_wait_bit_common) from [<8042efcc>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3729) r10:857753c0 r9:00080001 r8:00000000 r7:8076c330 r6:00000000 r5:83086df8 r4:ddebe91c [<8042ef34>] (do_read_cache_folio) from [<8042f198>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3779) r10:857753c0 r9:00000002 r8:00000000 r7:00000000 r6:80793adc r5:857753c0 r4:00000000 r3:00000000 [<8042f17c>] (read_cache_folio) from [<807938cc>] (read_mapping_folio include/linux/pagemap.h:894 [inline]) [<8042f17c>] (read_cache_folio) from [<807938cc>] (read_part_sector+0x58/0xd0 block/partitions/core.c:715) [<80793874>] (read_part_sector) from [<80793b44>] (msdos_partition+0x68/0xafc block/partitions/msdos.c:592) r5:857753c0 r4:8393ee00 [<80793adc>] (msdos_partition) from [<8079321c>] (check_partition block/partitions/core.c:138 [inline]) [<80793adc>] (msdos_partition) from [<8079321c>] (blk_add_partitions block/partitions/core.c:582 [inline]) [<80793adc>] (msdos_partition) from [<8079321c>] (bdev_disk_changed+0x2d0/0x6b8 block/partitions/core.c:686) r10:00000001 r9:81aeb73c r8:00000000 r7:8393ee30 r6:80793adc r5:857753c0 r4:8393ee00 [<80792f4c>] (bdev_disk_changed) from [<8076ad30>] (blkdev_get_whole+0xa4/0xb4 block/bdev.c:667) r10:8393ef2c r9:00000000 r8:850feaf0 r7:8393ee00 r6:8393ee00 r5:00000000 r4:83086a80 [<8076ac8c>] (blkdev_get_whole) from [<8076ba0c>] (bdev_open+0x224/0x3f0 block/bdev.c:880) r7:8393ee00 r6:00000001 r5:00000000 r4:83086a80 [<8076b7e8>] (bdev_open) from [<8076d8bc>] (blkdev_open+0x78/0x9c block/fops.c:620) r10:850fea80 r9:00000004 r8:850feaf0 r7:83086a80 r6:00000001 r5:850fea80 r4:00000000 [<8076d844>] (blkdev_open) from [<804f1cdc>] (do_dentry_open+0x1e4/0x57c fs/open.c:955) r7:8076d844 r6:00000000 r5:8384ec88 r4:850fea80 [<804f1af8>] (do_dentry_open) from [<804f3cb0>] (vfs_open+0x34/0x38 fs/open.c:1089) r8:e8ba1e58 r7:e8ba1f20 r6:00000000 r5:8271c190 r4:00000000 [<804f3c7c>] (vfs_open) from [<8050b6c0>] (do_open fs/namei.c:3642 [inline]) [<804f3c7c>] (vfs_open) from [<8050b6c0>] (path_openat+0xa88/0x10e4 fs/namei.c:3799) [<8050ac38>] (path_openat) from [<8050c4fc>] (do_filp_open+0x9c/0x138 fs/namei.c:3826) r10:00000142 r9:82fe7000 r8:00000001 r7:e8ba1e58 r6:e8ba1f20 r5:85648000 r4:ffffff9c [<8050c460>] (do_filp_open) from [<804f3f9c>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1406) r9:85648000 r8:80200288 r7:ffffff9c r6:0000000a r5:82fe7000 r4:e8ba1f58 [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (do_sys_open fs/open.c:1421 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (__do_sys_openat fs/open.c:1437 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (sys_openat+0x98/0xd4 fs/open.c:1432) r7:00000142 r6:00000000 r5:76af2af8 r4:ffffff9c [<804f430c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xe8ba1fa8 to 0xe8ba1ff0) 1fa0: 00000000 76af2af8 ffffff9c 76af2af8 00000000 00000000 1fc0: 00000000 76af2af8 00000000 00000142 00000000 7ea5c32f 003d0f00 76af30fc 1fe0: 81010103 76af2ab0 00091204 0004ef58 r5:76af2af8 r4:00000000 INFO: task syz-executor.1:11860 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11860 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:8393ef2c r9:00000000 r8:8393ef30 r7:00000002 r6:eacc9cd4 r5:8564c800 r4:8564c800 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:8564c800 r4:8393ef2c [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8393ef2c r9:00000000 r8:845d1970 r7:8393ee00 r6:00000001 r5:00000000 r4:83086a80 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<8076ba70>] (bdev_open+0x288/0x3f0 block/bdev.c:868) [<8076b7e8>] (bdev_open) from [<8076d8bc>] (blkdev_open+0x78/0x9c block/fops.c:620) r10:845d1900 r9:00000004 r8:845d1970 r7:83086a80 r6:00000001 r5:845d1900 r4:00000000 [<8076d844>] (blkdev_open) from [<804f1cdc>] (do_dentry_open+0x1e4/0x57c fs/open.c:955) r7:8076d844 r6:00000000 r5:8384ec88 r4:845d1900 [<804f1af8>] (do_dentry_open) from [<804f3cb0>] (vfs_open+0x34/0x38 fs/open.c:1089) r8:eacc9e58 r7:eacc9f20 r6:00000000 r5:8271c190 r4:00000000 [<804f3c7c>] (vfs_open) from [<8050b6c0>] (do_open fs/namei.c:3642 [inline]) [<804f3c7c>] (vfs_open) from [<8050b6c0>] (path_openat+0xa88/0x10e4 fs/namei.c:3799) [<8050ac38>] (path_openat) from [<8050c4fc>] (do_filp_open+0x9c/0x138 fs/namei.c:3826) r10:00000142 r9:82ede000 r8:00000001 r7:eacc9e58 r6:eacc9f20 r5:8564c800 r4:ffffff9c [<8050c460>] (do_filp_open) from [<804f3f9c>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1406) r9:8564c800 r8:80200288 r7:ffffff9c r6:0000000e r5:82ede000 r4:eacc9f58 [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (do_sys_open fs/open.c:1421 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (__do_sys_openat fs/open.c:1437 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (sys_openat+0x98/0xd4 fs/open.c:1432) r7:00000142 r6:00000000 r5:76ad1af8 r4:ffffff9c [<804f430c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeacc9fa8 to 0xeacc9ff0) 9fa0: 00000000 76ad1af8 ffffff9c 76ad1af8 00000000 00000000 9fc0: 00000000 76ad1af8 00000000 00000142 00000000 7ea5c32f 003d0f00 76ad20fc 9fe0: 81010103 76ad1ab0 00091204 0004ef58 r5:76ad1af8 r4:00000000 INFO: task syz-executor.1:11861 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11861 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:85064900 r9:00000000 r8:838ebe88 r7:00000002 r6:eadb9de4 r5:83d93c00 r4:83d93c00 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:83d93c00 r4:838ebe84 [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:85064900 r9:83d93c00 r8:851dda80 r7:838ebe84 r6:00000000 r5:838ebe00 r4:0000ab03 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<80a7fca0>] (nbd_ioctl+0x60/0x3d4 drivers/block/nbd.c:1557) [<80a7fc40>] (nbd_ioctl) from [<8078d348>] (blkdev_ioctl+0x360/0xf40 block/ioctl.c:641) r10:85064900 r9:83d93c00 r8:00000001 r7:80a7fc40 r6:00000000 r5:83086a80 r4:0000ab03 [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r10:85064900 r9:83d93c00 r8:00000005 r7:00000000 r6:85064901 r5:00000000 r4:0000ab03 [<8050fb9c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeadb9fa8 to 0xeadb9ff0) 9fa0: 00000000 00000000 00000005 0000ab03 00000000 00000000 9fc0: 00000000 00000000 0014c474 00000036 7ea5c32e 7ea5c32f 003d0f00 76ab10fc 9fe0: 76ab0f08 76ab0ef8 000168a0 00050c70 r10:00000036 r9:83d93c00 r8:80200288 r7:00000036 r6:0014c474 r5:00000000 r4:00000000 INFO: task syz-executor.1:11862 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11862 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:85064900 r9:85732400 r8:00000000 r7:838ebe84 r6:ffffff00 r5:8391d9f8 r4:85732400 [<818c3778>] (schedule) from [<8077f920>] (blk_mq_freeze_queue_wait+0x80/0xb4 block/blk-mq.c:138) r5:8391d9f8 r4:8391dbcc [<8077f8a0>] (blk_mq_freeze_queue_wait) from [<807820bc>] (blk_freeze_queue block/blk-mq.c:165 [inline]) [<8077f8a0>] (blk_mq_freeze_queue_wait) from [<807820bc>] (blk_mq_freeze_queue+0x1c/0x20 block/blk-mq.c:174) r5:838ebe00 r4:8391d9c8 [<807820a0>] (blk_mq_freeze_queue) from [<80a7fdb0>] (nbd_set_size drivers/block/nbd.c:363 [inline]) [<807820a0>] (blk_mq_freeze_queue) from [<80a7fdb0>] (__nbd_ioctl drivers/block/nbd.c:1511 [inline]) [<807820a0>] (blk_mq_freeze_queue) from [<80a7fdb0>] (nbd_ioctl+0x170/0x3d4 drivers/block/nbd.c:1564) r5:838ebe00 r4:00000400 [<80a7fc40>] (nbd_ioctl) from [<8078d348>] (blkdev_ioctl+0x360/0xf40 block/ioctl.c:641) r10:85064900 r9:85732400 r8:00000001 r7:80a7fc40 r6:ffffff00 r5:83086a80 r4:0000ab02 [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r10:85064900 r9:85732400 r8:00000005 r7:ffffff00 r6:85064901 r5:00000000 r4:0000ab02 [<8050fb9c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeadbdfa8 to 0xeadbdff0) dfa0: 00000000 00000000 00000005 0000ab02 ffffff00 00000000 dfc0: 00000000 00000000 0014c508 00000036 7ea5c32e 7ea5c32f 003d0f00 76a900fc dfe0: 76a8ff08 76a8fef8 000168a0 00050c70 r10:00000036 r9:85732400 r8:80200288 r7:00000036 r6:0014c508 r5:00000000 r4:00000000 INFO: task syz-executor.1:11863 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11863 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:8393ef2c r9:00000000 r8:8393ef30 r7:00000002 r6:eadc1cd4 r5:85730000 r4:85730000 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:85730000 r4:8393ef2c [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8393ef2c r9:00000000 r8:845d18b0 r7:8393ee00 r6:00000001 r5:00000000 r4:83086a80 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<8076ba70>] (bdev_open+0x288/0x3f0 block/bdev.c:868) [<8076b7e8>] (bdev_open) from [<8076d8bc>] (blkdev_open+0x78/0x9c block/fops.c:620) r10:845d1840 r9:00000004 r8:845d18b0 r7:83086a80 r6:00000001 r5:845d1840 r4:00000000 [<8076d844>] (blkdev_open) from [<804f1cdc>] (do_dentry_open+0x1e4/0x57c fs/open.c:955) r7:8076d844 r6:00000000 r5:8384ec88 r4:845d1840 [<804f1af8>] (do_dentry_open) from [<804f3cb0>] (vfs_open+0x34/0x38 fs/open.c:1089) r8:eadc1e58 r7:eadc1f20 r6:00000000 r5:8271c190 r4:00000000 [<804f3c7c>] (vfs_open) from [<8050b6c0>] (do_open fs/namei.c:3642 [inline]) [<804f3c7c>] (vfs_open) from [<8050b6c0>] (path_openat+0xa88/0x10e4 fs/namei.c:3799) [<8050ac38>] (path_openat) from [<8050c4fc>] (do_filp_open+0x9c/0x138 fs/namei.c:3826) r10:00000142 r9:82ed8000 r8:00000001 r7:eadc1e58 r6:eadc1f20 r5:85730000 r4:ffffff9c [<8050c460>] (do_filp_open) from [<804f3f9c>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1406) r9:85730000 r8:80200288 r7:ffffff9c r6:0000000f r5:82ed8000 r4:eadc1f58 [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (do_sys_open fs/open.c:1421 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (__do_sys_openat fs/open.c:1437 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (sys_openat+0x98/0xd4 fs/open.c:1432) r7:00000142 r6:00000000 r5:76a6eaf8 r4:ffffff9c [<804f430c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeadc1fa8 to 0xeadc1ff0) 1fa0: 00000000 76a6eaf8 ffffff9c 76a6eaf8 00000000 00000000 1fc0: 00000000 76a6eaf8 00000000 00000142 00000000 7ea5c32f 003d0f00 76a6f0fc 1fe0: 81010103 76a6eab0 00091204 0004ef58 r5:76a6eaf8 r4:00000000 INFO: task syz-executor.1:11864 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11864 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:8393ef2c r9:00000000 r8:8393ef30 r7:00000002 r6:eadb5cd4 r5:84febc00 r4:84febc00 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:84febc00 r4:8393ef2c [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8393ef2c r9:00000000 r8:845d1eb0 r7:8393ee00 r6:00000001 r5:00000000 r4:83086a80 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<8076ba70>] (bdev_open+0x288/0x3f0 block/bdev.c:868) [<8076b7e8>] (bdev_open) from [<8076d8bc>] (blkdev_open+0x78/0x9c block/fops.c:620) r10:845d1e40 r9:00000004 r8:845d1eb0 r7:83086a80 r6:00000001 r5:845d1e40 r4:00000000 [<8076d844>] (blkdev_open) from [<804f1cdc>] (do_dentry_open+0x1e4/0x57c fs/open.c:955) r7:8076d844 r6:00000000 r5:8384ec88 r4:845d1e40 [<804f1af8>] (do_dentry_open) from [<804f3cb0>] (vfs_open+0x34/0x38 fs/open.c:1089) r8:eadb5e58 r7:eadb5f20 r6:00000000 r5:8271c190 r4:00000000 [<804f3c7c>] (vfs_open) from [<8050b6c0>] (do_open fs/namei.c:3642 [inline]) [<804f3c7c>] (vfs_open) from [<8050b6c0>] (path_openat+0xa88/0x10e4 fs/namei.c:3799) [<8050ac38>] (path_openat) from [<8050c4fc>] (do_filp_open+0x9c/0x138 fs/namei.c:3826) r10:00000142 r9:82edf000 r8:00000001 r7:eadb5e58 r6:eadb5f20 r5:84febc00 r4:ffffff9c [<8050c460>] (do_filp_open) from [<804f3f9c>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1406) r9:84febc00 r8:80200288 r7:ffffff9c r6:00000012 r5:82edf000 r4:eadb5f58 [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (do_sys_open fs/open.c:1421 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (__do_sys_openat fs/open.c:1437 [inline]) [<804f3ee0>] (do_sys_openat2) from [<804f43a4>] (sys_openat+0x98/0xd4 fs/open.c:1432) r7:00000142 r6:00000000 r5:76a4daf8 r4:ffffff9c [<804f430c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeadb5fa8 to 0xeadb5ff0) 5fa0: 00000000 76a4daf8 ffffff9c 76a4daf8 00000000 00000000 5fc0: 00000000 76a4daf8 00000000 00000142 00000000 7ea5c32f 003d0f00 76a4e0fc 5fe0: 81010103 76a4dab0 00091204 0004ef58 r5:76a4daf8 r4:00000000 INFO: task syz-executor.1:11865 blocked for more than 430 seconds. Not tainted 6.9.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:0 pid:11865 tgid:11843 ppid:8877 flags:0x00000005 Call trace: [<818c2b68>] (__schedule) from [<818c37a4>] (__schedule_loop kernel/sched/core.c:6823 [inline]) [<818c2b68>] (__schedule) from [<818c37a4>] (schedule+0x2c/0xfc kernel/sched/core.c:6838) r10:85064e40 r9:00000000 r8:838ebe88 r7:00000002 r6:eadc5de4 r5:85620c00 r4:85620c00 [<818c3778>] (schedule) from [<818c3db4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895) r5:85620c00 r4:838ebe84 [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<818c3d9c>] (schedule_preempt_disabled) from [<818c6694>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818c63ac>] (__mutex_lock.constprop.0) from [<818c6f60>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:85064e40 r9:85620c00 r8:851dda80 r7:838ebe84 r6:00000008 r5:838ebe00 r4:0000ab00 [<818c6f4c>] (__mutex_lock_slowpath) from [<818c6fa0>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<818c6f64>] (mutex_lock) from [<80a7fca0>] (nbd_ioctl+0x60/0x3d4 drivers/block/nbd.c:1557) [<80a7fc40>] (nbd_ioctl) from [<8078d348>] (blkdev_ioctl+0x360/0xf40 block/ioctl.c:641) r10:85064e40 r9:85620c00 r8:00000001 r7:80a7fc40 r6:00000008 r5:83086a80 r4:0000ab00 [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (vfs_ioctl fs/ioctl.c:51 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (do_vfs_ioctl fs/ioctl.c:858 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (__do_sys_ioctl fs/ioctl.c:902 [inline]) [<8078cfe8>] (blkdev_ioctl) from [<8050fcb4>] (sys_ioctl+0x118/0xc24 fs/ioctl.c:890) r10:85064e40 r9:85620c00 r8:00000007 r7:00000008 r6:85064e41 r5:00000000 r4:0000ab00 [<8050fb9c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xeadc5fa8 to 0xeadc5ff0) 5fa0: 00000000 00000000 00000007 0000ab00 00000008 00000000 5fc0: 00000000 00000000 0014c6b8 00000036 7ea5c32e 7ea5c32f 003d0f00 76a2d0fc 5fe0: 76a2cf08 76a2cef8 000168a0 00050c70 r10:00000036 r9:85620c00 r8:80200288 r7:00000036 r6:0014c6b8 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 PID: 31 Comm: khungtaskd Not tainted 6.9.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<818a145c>] (dump_backtrace) from [<818a1558>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fceaa8 [<818a1540>] (show_stack) from [<818bec9c>] (__dump_stack lib/dump_stack.c:88 [inline]) [<818a1540>] (show_stack) from [<818bec9c>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114) [<818bec2c>] (dump_stack_lvl) from [<818becc0>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000000 r4:00000001 [<818beca8>] (dump_stack) from [<8188e834>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8188e6d4>] (nmi_cpu_backtrace) from [<8188e980>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c590 r5:8261a88c r4:ffffffff [<8188e850>] (nmi_trigger_cpumask_backtrace) from [<802105b4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c6f4 r8:00012040 r7:8289ffe0 r6:00007ed3 r5:858dca04 r4:841b8824 [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eb30>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eb30>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eb30>] (watchdog+0x480/0x594 kernel/hung_task.c:380) [<8034e6b0>] (watchdog) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82e981c0 r7:00000000 r6:8034e6b0 r5:82ee0c00 r4:82f424c0 [<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:82f424c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2820 Comm: klogd Not tainted 6.9.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __phys_to_virt arch/arm/include/asm/memory.h:275 [inline] PC is at check_kernel_text_object mm/usercopy.c:138 [inline] PC is at __check_object_size mm/usercopy.c:254 [inline] PC is at __check_object_size+0xc8/0x30c mm/usercopy.c:213 LR is at check_kernel_text_object mm/usercopy.c:138 [inline] LR is at __check_object_size mm/usercopy.c:254 [inline] LR is at __check_object_size+0xc8/0x30c mm/usercopy.c:213 pc : [<804eef6c>] lr : [<804eef6c>] psr: 80000013 sp : ec855d88 ip : ec855d88 fp : ec855dbc r10: 80200000 r9 : ec855ea8 r8 : 81a00000 r7 : 85ccc63e r6 : 00000000 r5 : 0000003e r4 : 85ccc600 r3 : 80200000 r2 : 829150a0 r1 : 00000000 r0 : 80200000 Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 836bea40 DAC: 00000000 Call trace: [<804eeea4>] (__check_object_size) from [<813bcca4>] (check_object_size include/linux/thread_info.h:215 [inline]) [<804eeea4>] (__check_object_size) from [<813bcca4>] (check_copy_size include/linux/thread_info.h:251 [inline]) [<804eeea4>] (__check_object_size) from [<813bcca4>] (copy_from_iter include/linux/uio.h:203 [inline]) [<804eeea4>] (__check_object_size) from [<813bcca4>] (skb_copy_datagram_from_iter+0x60/0x228 net/core/datagram.c:572) r10:858b3cc0 r9:ec855ea8 r8:85ccc600 r7:0000003e r6:00000000 r5:0000003e r4:0000003e [<813bcc44>] (skb_copy_datagram_from_iter) from [<81653eb0>] (unix_dgram_sendmsg+0x174/0x910 net/unix/af_unix.c:2032) r10:00000000 r9:836d9800 r8:8341c300 r7:0000003e r6:0000003e r5:83043180 r4:ec855e98 [<81653d3c>] (unix_dgram_sendmsg) from [<813a29d0>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<81653d3c>] (unix_dgram_sendmsg) from [<813a29d0>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00000121 r9:836d9800 r8:00000003 r7:83043180 r6:83043180 r5:ec855e98 r4:00000000 [<813a298c>] (__sock_sendmsg) from [<813a4d04>] (__sys_sendto+0x108/0x14c net/socket.c:2191) r7:83043180 r6:00000000 r5:00004000 r4:00000000 [<813a4bfc>] (__sys_sendto) from [<813a4d8c>] (__do_sys_send net/socket.c:2213 [inline]) [<813a4bfc>] (__sys_sendto) from [<813a4d8c>] (sys_send+0x20/0x28 net/socket.c:2210) r8:80200288 r7:00000121 r6:76f935a0 r5:76f935a0 r4:01969a80 [<813a4d6c>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xec855fa8 to 0xec855ff0) 5fa0: 01969a80 76f935a0 00000003 0196aa18 0000003e 00004000 5fc0: 01969a80 76f935a0 76f935a0 00000121 00000000 00000013 76e60e60 0196aa1b 5fe0: 00000000 7ec85bc8 76de8460 76ded918