------------[ cut here ]------------ do not call blocking ops when !TASK_RUNNING; state=2 set at [<00000000333f2350>] prepare_to_wait_event+0x2e4/0x3ac kernel/sched/wait.c:-1 WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc kernel/sched/core.c:9120, CPU#1: syz.2.25/4962 Modules linked in: CPU: 1 UID: 0 PID: 4962 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __might_sleep+0xc0/0xdc kernel/sched/core.c:9120 lr : __might_sleep+0xc0/0xdc kernel/sched/core.c:9120 sp : ffff800096767930 x29: ffff800096767930 x28: ffff8000805a78e8 x27: ffff800096767a00 x26: 0000000000000000 x25: ffff800096767a08 x24: 0000000000000000 x23: ffff700012cecf3c x22: ffff0000c970ee90 x21: 0000000000000002 x20: ffff8000869ca160 x19: 000000000000026f x18: 1fffe00034bbbe28 x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 x14: ffff0001a5ddf14c x13: 0000000000000001 x12: 0000000000000000 x11: ffff800080156070 x10: 0000000000000003 x9 : 4d18e37d690cf300 x8 : 4d18e37d690cf300 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080156118 x2 : 0000000000000000 x1 : ffff0000c970d7c0 x0 : 0000000000000001 Call trace: __might_sleep+0xc0/0xdc kernel/sched/core.c:9120 (P) __mutex_lock_common kernel/locking/mutex.c:623 [inline] __mutex_lock+0xf8/0xf14 kernel/locking/mutex.c:821 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874 class_mutex_constructor include/linux/mutex.h:253 [inline] futex_pivot_pending+0x30/0xa4 kernel/futex/core.c:1789 futex_hash_allocate+0x73c/0xc20 kernel/futex/core.c:1872 futex_hash_prctl+0xd0/0x324 kernel/futex/core.c:2027 __do_sys_prctl kernel/sys.c:2885 [inline] __se_sys_prctl kernel/sys.c:2534 [inline] __arm64_sys_prctl+0x8d0/0x13d0 kernel/sys.c:2534 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 10358 hardirqs last enabled at (10357): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1673 [inline] hardirqs last enabled at (10357): [] finish_lock_switch kernel/sched/core.c:5241 [inline] hardirqs last enabled at (10357): [] finish_task_switch+0x234/0x858 kernel/sched/core.c:5359 hardirqs last disabled at (10358): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (9286): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (9286): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (9271): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---