INFO: task syz.0.1818:15280 blocked for more than 430 seconds. Not tainted 6.12.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1818 state:D stack:0 pid:15280 tgid:15277 ppid:11852 flags:0x00000001 Call trace: [<819bb914>] (__schedule) from [<819bc554>] (__schedule_loop kernel/sched/core.c:6759 [inline]) [<819bb914>] (__schedule) from [<819bc554>] (schedule+0x2c/0xfc kernel/sched/core.c:6774) r10:ecbd9c64 r9:82605718 r8:82604ec0 r7:00000000 r6:00000000 r5:00000000 r4:83491800 [<819bc528>] (schedule) from [<819bc65c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7559) r5:00000000 r4:83491800 [<819bc624>] (io_schedule) from [<8043d3ec>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1309) r5:83491800 r4:00000002 [<8043d25c>] (folio_wait_bit_common) from [<80440da8>] (__folio_lock mm/filemap.c:1647 [inline]) [<8043d25c>] (folio_wait_bit_common) from [<80440da8>] (folio_lock include/linux/pagemap.h:1148 [inline]) [<8043d25c>] (folio_wait_bit_common) from [<80440da8>] (folio_lock include/linux/pagemap.h:1144 [inline]) [<8043d25c>] (folio_wait_bit_common) from [<80440da8>] (__filemap_get_folio+0x198/0x3d8 mm/filemap.c:1900) r10:ffffffff r9:00000000 r8:83089030 r7:00000000 r6:00000000 r5:00000002 r4:ddeace74 [<80440c10>] (__filemap_get_folio) from [<804531e0>] (truncate_inode_pages_range+0x1c0/0x570 mm/truncate.c:351) r9:00000000 r8:ffffffff r7:00000000 r6:00000000 r5:ecbd9cf0 r4:83089030 [<80453020>] (truncate_inode_pages_range) from [<804535b0>] (truncate_inode_pages+0x20/0x28 mm/truncate.c:423) r10:000000b4 r9:838aa12c r8:83088cc0 r7:00000000 r6:83088cc0 r5:ffffffff r4:ffffffff [<80453590>] (truncate_inode_pages) from [<807b5780>] (kill_bdev block/bdev.c:91 [inline]) [<80453590>] (truncate_inode_pages) from [<807b5780>] (blkdev_flush_mapping+0x68/0x138 block/bdev.c:671) r5:7fffffff r4:83089030 [<807b5718>] (blkdev_flush_mapping) from [<807b58ac>] (blkdev_put_whole+0x5c/0x60 block/bdev.c:678) r9:838aa12c r8:83088cc0 r7:00000000 r6:838aa000 r5:8500a9c0 r4:83088cc0 [<807b5850>] (blkdev_put_whole) from [<807b6a8c>] (bdev_release+0x10c/0x1a0 block/bdev.c:1103) r5:8500a9c0 r4:83088f28 [<807b6980>] (bdev_release) from [<807b6fc8>] (blkdev_release+0x14/0x1c block/fops.c:639) r9:83491800 r8:850abc10 r7:8389ce58 r6:8302cf68 r5:084a001d r4:8500a9c0 [<807b6fb4>] (blkdev_release) from [<805181ec>] (__fput+0xdc/0x2e4 fs/file_table.c:431) [<80518110>] (__fput) from [<8051847c>] (____fput+0x14/0x18 fs/file_table.c:459) r9:83491800 r8:82871694 r7:83491800 r6:83492084 r5:83492054 r4:00000000 [<80518468>] (____fput) from [<8026c5cc>] (task_work_run+0x90/0xb8 kernel/task_work.c:228) [<8026c53c>] (task_work_run) from [<8020bde0>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<8026c53c>] (task_work_run) from [<8020bde0>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:83491800 r8:8020029c r7:000000b4 r6:8020029c r5:ecbd9fb0 r4:83491800 [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xecbd9fb0 to 0xecbd9ff8) 9fa0: fffffffc 20000240 00000046 0000052c 9fc0: 00000000 00000000 00286384 000000b4 00000000 00006364 003d0f00 76bb40bc 9fe0: 76bb3ec0 76bb3eb0 00018af8 00132ec0 60000010 00000004 r10:000000b4 r9:83491800 r8:8020029c r7:000000b4 r6:00286384 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8203d3f8 [<8199953c>] (show_stack) from [<819b7a00>] (__dump_stack lib/dump_stack.c:94 [inline]) [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<819b7a0c>] (dump_stack) from [<81986718>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<819865b8>] (nmi_cpu_backtrace) from [<81986864>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c5d0 r5:8261af0c r4:ffffffff [<81986734>] (nmi_trigger_cpumask_backtrace) from [<802103e8>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:00039844 r8:828b6cf8 r7:8260c730 r6:00007f2d r5:8261b4c8 r4:84535d1c [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379) [<80357d18>] (watchdog) from [<8026fc90>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82f23ac0 r7:00000000 r6:80357d18 r5:82e59800 r4:82ec92c0 [<8026fb8c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb8c r4:82ec92c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2927 Comm: syslogd Not tainted 6.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at do_slab_free mm/slub.c:4524 [inline] PC is at slab_free mm/slub.c:4580 [inline] PC is at kmem_cache_free+0x9c/0x494 mm/slub.c:4681 LR is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] LR is at _raw_spin_unlock_irqrestore+0x30/0x54 kernel/locking/spinlock.c:194 pc : [<804ca670>] lr : [<819c4d70>] psr: 60000113 sp : ec391d10 ip : 828dd084 fp : ec391d5c r10: 00000000 r9 : 83d53000 r8 : 000b5ecc r7 : 81492320 r6 : ddeaeecc r5 : 850db540 r4 : 82ea1000 r3 : 83d53000 r2 : 00000000 r1 : 00000000 r0 : 00000001 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8439f180 DAC: 00000000 Call trace: [<804ca5d4>] (kmem_cache_free) from [<81492320>] (kfree_skbmem+0x94/0xa8 net/core/skbuff.c:1148) r10:00000000 r9:00000070 r8:00000070 r7:83071b80 r6:82e1b23c r5:8149f404 r4:850db540 [<8149228c>] (kfree_skbmem) from [<81499ea8>] (__kfree_skb net/core/skbuff.c:1205 [inline]) [<8149228c>] (kfree_skbmem) from [<81499ea8>] (consume_skb net/core/skbuff.c:1436 [inline]) [<8149228c>] (kfree_skbmem) from [<81499ea8>] (consume_skb+0x84/0x130 net/core/skbuff.c:1430) [<81499e24>] (consume_skb) from [<8149f404>] (skb_free_datagram+0x14/0x18 net/core/datagram.c:323) r7:83071b80 r6:82e1b23c r5:82e1b000 r4:850db540 [<8149f3f0>] (skb_free_datagram) from [<81748ff8>] (__unix_dgram_recvmsg+0x2c4/0x4c8 net/unix/af_unix.c:2520) [<81748d34>] (__unix_dgram_recvmsg) from [<81749240>] (unix_dgram_recvmsg+0x44/0x4c net/unix/af_unix.c:2537) r10:00000001 r9:00000000 r8:01fa41d0 r7:00000000 r6:83071b80 r5:ec391e68 r4:817491fc [<817491fc>] (unix_dgram_recvmsg) from [<814836d4>] (sock_recvmsg_nosec net/socket.c:1051 [inline]) [<817491fc>] (unix_dgram_recvmsg) from [<814836d4>] (sock_recvmsg+0x50/0x78 net/socket.c:1073) r4:817491fc [<81483684>] (sock_recvmsg) from [<814837a0>] (sock_read_iter+0xa4/0xfc net/socket.c:1143) r7:83071b80 r6:82f6de40 r5:ec391f08 r4:ec391ef0 [<814836fc>] (sock_read_iter) from [<805160f0>] (new_sync_read fs/read_write.c:488 [inline]) [<814836fc>] (sock_read_iter) from [<805160f0>] (vfs_read+0x2f4/0x324 fs/read_write.c:569) r7:00000000 r6:83d53000 r5:000000ff r4:82f6de40 [<80515dfc>] (vfs_read) from [<80516b90>] (ksys_read+0xc4/0xf8 fs/read_write.c:712) r10:00000003 r9:83d53000 r8:8020029c r7:000000ff r6:01fa41d0 r5:82f6de40 r4:82f6de40 [<80516acc>] (ksys_read) from [<80516bd4>] (__do_sys_read fs/read_write.c:722 [inline]) [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14 fs/read_write.c:720) r7:00000003 r6:01fa42d0 r5:76f265a0 r4:fffffc00 [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xec391fa8 to 0xec391ff0) 1fa0: fffffc00 76f265a0 00000000 01fa41d0 000000ff 00000000 1fc0: fffffc00 76f265a0 01fa42d0 00000003 00000000 01fa41c8 76ee854c 76ee8548 1fe0: 76ee79f8 7eb35c70 76e5d2ec 76d6b2fc