INFO: task syz.0.3726:17897 blocked for more than 430 seconds. Not tainted 6.16.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3726 state:D stack:0 pid:17897 tgid:17895 ppid:13920 task_flags:0x400140 flags:0x00000001 Call trace: [<81a27698>] (__schedule) from [<81a28620>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a27698>] (__schedule) from [<81a28620>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:83d24ce0 r9:dfc71e1c r8:00000002 r7:600b0013 r6:dfc71e24 r5:84e95400 r4:84e95400 [<81a285f4>] (schedule) from [<81a28a08>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6936) r5:84e95400 r4:83d24cdc [<81a289f0>] (schedule_preempt_disabled) from [<81a2b0ec>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81a289f0>] (schedule_preempt_disabled) from [<81a2b0ec>] (__mutex_lock.constprop.0+0x300/0x6f8 kernel/locking/mutex.c:747) [<81a2adec>] (__mutex_lock.constprop.0) from [<81a2b5b8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:00000036 r9:83d24cdc r8:8357aa80 r7:00000000 r6:83d24c00 r5:858d13c0 r4:8357ace8 [<81a2b5a4>] (__mutex_lock_slowpath) from [<81a2b5f8>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:278) [<81a2b5bc>] (mutex_lock) from [<80824080>] (bdev_release+0x58/0x1a0 block/bdev.c:1128) [<80824028>] (bdev_release) from [<808246b0>] (blkdev_release+0x14/0x1c block/fops.c:684) r9:84e95400 r8:84f08c10 r7:8383fc58 r6:834ceb28 r5:0c4a001d r4:858d13c0 [<8082469c>] (blkdev_release) from [<805500dc>] (__fput+0xd8/0x2ec fs/file_table.c:465) [<80550004>] (__fput) from [<80550384>] (____fput+0x14/0x18 fs/file_table.c:493) r9:84e95400 r8:82a6e6a0 r7:84e95400 r6:84e95c94 r5:84e95c64 r4:84e95db4 [<80550370>] (____fput) from [<80283eb4>] (task_work_run+0x90/0xb8 kernel/task_work.c:227) [<80283e24>] (task_work_run) from [<8022bc18>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<80283e24>] (task_work_run) from [<8022bc18>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:84e95400 r8:8020029c r7:00000036 r6:8020029c r5:dfc71fb0 r4:84e95400 [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfc71fb0 to 0xdfc71ff8) 1fa0: 00000000 0000ab03 00000000 00000000 1fc0: 00000000 00000000 002f62fc 00000036 002e0000 00000000 00006364 76b2a0bc 1fe0: 76b29ec0 76b29eb0 000193a4 00131fc0 60000010 00000003 r10:00000036 r9:84e95400 r8:8020029c r7:00000036 r6:002f62fc r5:00000000 r4:00000000 INFO: task syz.0.3726:17897 is blocked on a mutex likely owned by task syz.0.3726:17902. task:syz.0.3726 state:D stack:0 pid:17902 tgid:17895 ppid:13920 task_flags:0x400040 flags:0x00000001 Call trace: [<81a27698>] (__schedule) from [<81a28620>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a27698>] (__schedule) from [<81a28620>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:dfc85b64 r9:83ccd400 r8:82805308 r7:82804f00 r6:ddebf774 r5:00000000 r4:83ccd400 [<81a285f4>] (schedule) from [<81a2875c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7724) r5:00000000 r4:83ccd400 [<81a28724>] (io_schedule) from [<80468bc0>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<80468a20>] (folio_wait_bit_common) from [<8046cc78>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<80468a20>] (folio_wait_bit_common) from [<8046cc78>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:80824610 r6:00000000 r5:8357adf0 r4:ddebf774 [<8046cbe0>] (do_read_cache_folio) from [<8046ce44>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf0860 r8:858ac340 r7:829fac9a r6:8084da6c r5:00000000 r4:00000000 r3:00000000 [<8046ce28>] (read_cache_folio) from [<8084d85c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<8046ce28>] (read_cache_folio) from [<8084d85c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<8084d808>] (read_part_sector) from [<8084dab8>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:858ac340 [<8084da6c>] (msdos_partition) from [<8084d1d4>] (check_partition block/partitions/core.c:141 [inline]) [<8084da6c>] (msdos_partition) from [<8084d1d4>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<8084da6c>] (msdos_partition) from [<8084d1d4>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf0860 r8:00000000 r7:829fac9a r6:8084da6c r5:83d24c00 r4:858ac340 [<8084cf1c>] (bdev_disk_changed) from [<80823200>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83d24cdc r9:00000000 r8:00000001 r7:00000001 r6:83d24c00 r5:00000000 r4:8357aa80 [<80823158>] (blkdev_get_whole) from [<80823c54>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83d24c00 r6:00000000 r5:00000000 r4:8357aa80 [<80823a1c>] (bdev_open) from [<80825c48>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:858d1540 r9:00000000 r8:858d1568 r7:00000001 r6:858d1540 r5:00000000 r4:8357aa80 [<80825b9c>] (blkdev_open) from [<80548934>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:80825b9c r6:8383fc58 r5:00000000 r4:858d1540 [<805487c0>] (do_dentry_open) from [<8054a70c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfc85e58 r7:00000000 r6:858d1568 r5:829209e0 r4:858d1540 [<8054a6e0>] (vfs_open) from [<80563044>] (do_open fs/namei.c:3896 [inline]) [<8054a6e0>] (vfs_open) from [<80563044>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dfc85f20 r5:829209e0 r4:00000100 [<80562d38>] (path_openat) from [<80563f34>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:832dd000 r8:00000001 r7:dfc85e58 r6:dfc85f20 r5:83ccd400 r4:ffffff9c [<80563e88>] (do_filp_open) from [<8054ac10>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:83ccd400 r8:8020029c r7:ffffff9c r6:dfc85f58 r5:832dd000 r4:00000006 [<8054ab80>] (do_sys_openat2) from [<8054b038>] (do_sys_open fs/open.c:1452 [inline]) [<8054ab80>] (do_sys_openat2) from [<8054b038>] (__do_sys_openat fs/open.c:1468 [inline]) [<8054ab80>] (do_sys_openat2) from [<8054b038>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76ae7ab0 r4:ffffff9c [<8054afa0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfc85fa8 to 0xdfc85ff0) 5fa0: 00000100 76ae7ab0 ffffff9c 76ae7ab0 00000100 00000000 5fc0: 00000100 76ae7ab0 00000000 00000142 00000000 00000000 00006364 76ae80bc 5fe0: 81010101 76ae7a68 000d7df0 0012fdb8 r5:76ae7ab0 r4:00000100 INFO: task syz.0.3726:17902 blocked for more than 430 seconds. Not tainted 6.16.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3726 state:D stack:0 pid:17902 tgid:17895 ppid:13920 task_flags:0x400040 flags:0x00000001 Call trace: [<81a27698>] (__schedule) from [<81a28620>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a27698>] (__schedule) from [<81a28620>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:dfc85b64 r9:83ccd400 r8:82805308 r7:82804f00 r6:ddebf774 r5:00000000 r4:83ccd400 [<81a285f4>] (schedule) from [<81a2875c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7724) r5:00000000 r4:83ccd400 [<81a28724>] (io_schedule) from [<80468bc0>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<80468a20>] (folio_wait_bit_common) from [<8046cc78>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<80468a20>] (folio_wait_bit_common) from [<8046cc78>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:80824610 r6:00000000 r5:8357adf0 r4:ddebf774 [<8046cbe0>] (do_read_cache_folio) from [<8046ce44>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf0860 r8:858ac340 r7:829fac9a r6:8084da6c r5:00000000 r4:00000000 r3:00000000 [<8046ce28>] (read_cache_folio) from [<8084d85c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<8046ce28>] (read_cache_folio) from [<8084d85c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<8084d808>] (read_part_sector) from [<8084dab8>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:858ac340 [<8084da6c>] (msdos_partition) from [<8084d1d4>] (check_partition block/partitions/core.c:141 [inline]) [<8084da6c>] (msdos_partition) from [<8084d1d4>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<8084da6c>] (msdos_partition) from [<8084d1d4>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf0860 r8:00000000 r7:829fac9a r6:8084da6c r5:83d24c00 r4:858ac340 [<8084cf1c>] (bdev_disk_changed) from [<80823200>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83d24cdc r9:00000000 r8:00000001 r7:00000001 r6:83d24c00 r5:00000000 r4:8357aa80 [<80823158>] (blkdev_get_whole) from [<80823c54>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83d24c00 r6:00000000 r5:00000000 r4:8357aa80 [<80823a1c>] (bdev_open) from [<80825c48>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:858d1540 r9:00000000 r8:858d1568 r7:00000001 r6:858d1540 r5:00000000 r4:8357aa80 [<80825b9c>] (blkdev_open) from [<80548934>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:80825b9c r6:8383fc58 r5:00000000 r4:858d1540 [<805487c0>] (do_dentry_open) from [<8054a70c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfc85e58 r7:00000000 r6:858d1568 r5:829209e0 r4:858d1540 [<8054a6e0>] (vfs_open) from [<80563044>] (do_open fs/namei.c:3896 [inline]) [<8054a6e0>] (vfs_open) from [<80563044>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dfc85f20 r5:829209e0 r4:00000100 [<80562d38>] (path_openat) from [<80563f34>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:832dd000 r8:00000001 r7:dfc85e58 r6:dfc85f20 r5:83ccd400 r4:ffffff9c [<80563e88>] (do_filp_open) from [<8054ac10>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:83ccd400 r8:8020029c r7:ffffff9c r6:dfc85f58 r5:832dd000 r4:00000006 [<8054ab80>] (do_sys_openat2) from [<8054b038>] (do_sys_open fs/open.c:1452 [inline]) [<8054ab80>] (do_sys_openat2) from [<8054b038>] (__do_sys_openat fs/open.c:1468 [inline]) [<8054ab80>] (do_sys_openat2) from [<8054b038>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76ae7ab0 r4:ffffff9c [<8054afa0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfc85fa8 to 0xdfc85ff0) 5fa0: 00000100 76ae7ab0 ffffff9c 76ae7ab0 00000100 00000000 5fc0: 00000100 76ae7ab0 00000000 00000142 00000000 00000000 00006364 76ae80bc 5fe0: 81010101 76ae7a68 000d7df0 0012fdb8 r5:76ae7ab0 r4:00000100 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000013 r5:60000093 r4:8225b4e0 [<80201ae4>] (show_stack) from [<8021fe10>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fe1c>] (dump_stack) from [<81a115b8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a11458>] (nmi_cpu_backtrace) from [<81a11704>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281af40 r4:ffffffff [<81a115d4>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8280c80c r8:82ab3564 r7:8281bb28 r6:00007ea6 r5:8281b508 r4:86c1d40c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037fdc0>] (trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037fdc0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037fdc0>] (watchdog+0x4a8/0x74c kernel/hung_task.c:470) [<8037f918>] (watchdog) from [<80285f1c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:00000000 r8:8037f918 r7:83349780 r6:83349780 r5:83259800 r4:00000001 [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 r4:8334c580 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2821 Comm: pr/ttyAMA0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a30b94>] lr : [<80a6aa04>] psr: 60000013 sp : eb849eb0 ip : eb849ec0 fp : eb849ebc r10: 8295a34c r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 8295a2b0 r5 : 00000000 r4 : 00000001 r3 : 00001c9a r2 : 00000000 r1 : 60000013 r0 : 8404f840 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86e41800 DAC: fffffffd Call trace: [<81a30b6c>] (_raw_spin_unlock_irqrestore) from [<80a6aa04>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a30b6c>] (_raw_spin_unlock_irqrestore) from [<80a6aa04>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a30b6c>] (_raw_spin_unlock_irqrestore) from [<80a6aa04>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a6a9e4>] (pl011_console_device_unlock) from [<802e7e0c>] (nbcon_emit_one+0x80/0xf8 kernel/printk/nbcon.c:1123) [<802e7d8c>] (nbcon_emit_one) from [<802e802c>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1210) r6:8280c690 r5:83a18c00 r4:8295a2b0 [<802e7e84>] (nbcon_kthread_func) from [<80285f1c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:8295a2b0 r8:802e7e84 r7:8422a580 r6:8422a580 r5:83a18c00 r4:00000001 [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb849fb0 to 0xeb849ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 r4:8414e400