INFO: task syz-executor.0:2234 blocked for more than 430 seconds. Not tainted 5.15.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack: 0 pid: 2234 ppid: 1 flags:0x00000001 Backtrace: [<81712440>] (__schedule) from [<81712e98>] (schedule+0x54/0xdc kernel/sched/core.c:6326) r10:8347cf2c r9:5ac3c35a r8:83104440 r7:839f9414 r6:00000001 r5:83505b08 r4:84181700 [<81712e44>] (schedule) from [<8071ac2c>] (blk_mq_freeze_queue_wait+0x6c/0xa4 block/blk-mq.c:178) r5:83505b08 r4:83505f70 [<8071abc0>] (blk_mq_freeze_queue_wait) from [<8071dba0>] (blk_freeze_queue block/blk-mq.c:205 [inline]) [<8071abc0>] (blk_mq_freeze_queue_wait) from [<8071dba0>] (blk_mq_freeze_queue+0x1c/0x20 block/blk-mq.c:214) r5:8347ce00 r4:83505b00 [<8071db84>] (blk_mq_freeze_queue) from [<809fcd7c>] (__loop_clr_fd+0x6c/0x428 drivers/block/loop.c:1122) r5:8347ce00 r4:8347ce00 [<809fcd10>] (__loop_clr_fd) from [<809fd1dc>] (lo_release+0xa4/0xa8 drivers/block/loop.c:1761) r10:8220c44c r9:5ac3c35a r8:83104440 r7:839f9414 r6:00000001 r5:8347cf2c r4:8347ce00 [<809fd138>] (lo_release) from [<80706a84>] (blkdev_put_whole block/bdev.c:694 [inline]) [<809fd138>] (lo_release) from [<80706a84>] (blkdev_put+0xd4/0x27c block/bdev.c:956) r7:839f9414 r6:839f93c0 r5:00000083 r4:83104440 [<807069b0>] (blkdev_put) from [<80484be8>] (kill_block_super+0x3c/0x74 fs/super.c:1400) r8:8220c490 r7:8220c920 r6:00000000 r5:00000083 r4:83104440 [<80484bac>] (kill_block_super) from [<8048585c>] (deactivate_locked_super+0x54/0xb4 fs/super.c:335) r5:823245b4 r4:854a2c00 [<80485808>] (deactivate_locked_super) from [<8048591c>] (deactivate_super fs/super.c:366 [inline]) [<80485808>] (deactivate_locked_super) from [<8048591c>] (deactivate_super+0x60/0x64 fs/super.c:362) r5:844d63c0 r4:854a2c00 [<804858bc>] (deactivate_super) from [<804a9770>] (cleanup_mnt+0x11c/0x180 fs/namespace.c:1137) r5:844d63c0 r4:00000002 [<804a9654>] (cleanup_mnt) from [<804a9844>] (__cleanup_mnt+0x14/0x18 fs/namespace.c:1144) r9:5ac3c35a r8:84181f54 r7:8243d600 r6:84181700 r5:84181f24 r4:00000000 [<804a9830>] (__cleanup_mnt) from [<80266e24>] (task_work_run+0x8c/0xb8 kernel/task_work.c:164) [<80266d98>] (task_work_run) from [<8020bff0>] (tracehook_notify_resume include/linux/tracehook.h:189 [inline]) [<80266d98>] (task_work_run) from [<8020bff0>] (do_work_pending+0x438/0x53c arch/arm/kernel/signal.c:630) r9:5ac3c35a r8:80200244 r7:fffffe30 r6:80200244 r5:837f3fb0 r4:84181700 [<8020bbb8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x20) Exception stack(0x837f3fb0 to 0x837f3ff8) 3fa0: 00000000 0000000a 00000000 00000000 3fc0: 00085150 7ea18510 00120000 00000034 00085150 01c80fc8 00000000 7ea184d0 3fe0: 7f0302ff 7ea18494 00014734 0004ce3c 60000010 7ea18510 r10:00000034 r9:84181700 r8:80200244 r7:00000034 r6:00120000 r5:7ea18510 r4:00085150 INFO: task udevd:20994 blocked for more than 430 seconds. Not tainted 5.15.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack: 0 pid:20994 ppid: 2031 flags:0x00000001 Backtrace: [<81712440>] (__schedule) from [<81712e98>] (schedule+0x54/0xdc kernel/sched/core.c:6326) r10:839f9414 r9:4800005d r8:839f9418 r7:85471cbc r6:00000002 r5:842a5080 r4:842a5080 [<81712e44>] (schedule) from [<817134b4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6385) r5:842a5080 r4:839f9414 [<8171349c>] (schedule_preempt_disabled) from [<817147ec>] (__mutex_lock_common kernel/locking/mutex.c:680 [inline]) [<8171349c>] (schedule_preempt_disabled) from [<817147ec>] (__mutex_lock.constprop.0+0x170/0x54c kernel/locking/mutex.c:740) [<8171467c>] (__mutex_lock.constprop.0) from [<81714c9c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1028) r9:4800005d r8:00000000 r7:839f93c0 r6:844d6a80 r5:4800005d r4:83104440 [<81714c88>] (__mutex_lock_slowpath) from [<81714cdc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:283) [<81714ca0>] (mutex_lock) from [<8070700c>] (blkdev_get_by_dev.part.0+0x44/0x2dc block/bdev.c:819) [<80706fc8>] (blkdev_get_by_dev.part.0) from [<807072ec>] (blkdev_get_by_dev+0x48/0x4c block/bdev.c:803) r10:85471e50 r9:844d6a88 r8:80707920 r7:844d6a80 r6:844d6a80 r5:4800005d r4:00700000 [<807072a4>] (blkdev_get_by_dev) from [<80707978>] (blkdev_open+0x58/0x88 block/fops.c:501) r7:844d6a80 r6:00000000 r5:839d4408 r4:844d6a80 [<80707920>] (blkdev_open) from [<8047d960>] (do_dentry_open+0x148/0x3f8 fs/open.c:822) r5:839d4408 r4:844d6a80 [<8047d818>] (do_dentry_open) from [<8047f650>] (vfs_open+0x34/0x38 fs/open.c:957) r9:85471f20 r8:00000000 r7:844d6a80 r6:82225d20 r5:00000000 r4:00028800 [<8047f61c>] (vfs_open) from [<804936f0>] (do_open fs/namei.c:3426 [inline]) [<8047f61c>] (vfs_open) from [<804936f0>] (path_openat+0x544/0x102c fs/namei.c:3559) [<804931ac>] (path_openat) from [<80495a58>] (do_filp_open+0x84/0x124 fs/namei.c:3586) r10:00000142 r9:842a5080 r8:85471e50 r7:00000000 r6:842a5080 r5:85471f20 r4:85471f58 [<804959d4>] (do_filp_open) from [<8047f940>] (do_sys_openat2+0xa8/0x16c fs/open.c:1212) r8:80200244 r7:ffffff9c r6:00000008 r5:842ba000 r4:85471f58 [<8047f898>] (do_sys_openat2) from [<8047fddc>] (do_sys_open fs/open.c:1228 [inline]) [<8047f898>] (do_sys_openat2) from [<8047fddc>] (__do_sys_openat fs/open.c:1244 [inline]) [<8047f898>] (do_sys_openat2) from [<8047fddc>] (sys_openat+0xa4/0xcc fs/open.c:1239) r7:00000142 r6:01c193e8 r5:01c343e0 r4:ffffff9c [<8047fd38>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x85471fa8 to 0x85471ff0) 1fa0: 01c1e7b0 76fe2840 ffffff9c 01c343e0 000a8800 00000000 1fc0: 01c1e7b0 76fe2840 01c193e8 00000142 000563e8 01c10190 00000000 01c1e7b0 1fe0: 000561b4 7e85c438 000166d8 76cac350 r5:76fe2840 r4:01c1e7b0 NMI backtrace for cpu 0 CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816f5710>] (dump_backtrace) from [<816f58fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:237) r7:00000000 r6:00000000 r5:60000093 r4:81d60180 [<816f58e4>] (show_stack) from [<816fe354>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816f58e4>] (show_stack) from [<816fe354>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816fe30c>] (dump_stack_lvl) from [<816fe378>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000013 r4:00000000 [<816fe360>] (dump_stack) from [<8083cdac>] (nmi_cpu_backtrace+0x114/0x180 lib/nmi_backtrace.c:105) [<8083cc98>] (nmi_cpu_backtrace) from [<8083cf2c>] (nmi_trigger_cpumask_backtrace+0x114/0x1d0 lib/nmi_backtrace.c:62) r7:00000000 r6:8220c494 r5:8220cc70 r4:00000000 [<8083ce18>] (nmi_trigger_cpumask_backtrace) from [<80210c54>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:865) r9:0003b540 r8:82204d00 r7:00007f69 r6:824839b0 r5:8220c5d4 r4:83675740 [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f84>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f84>] (check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]) [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f84>] (watchdog+0x4a0/0x58c kernel/hung_task.c:295) [<80329ae4>] (watchdog) from [<8026a518>] (kthread+0x164/0x198 kernel/kthread.c:327) r10:8294de4c r9:00000000 r8:00000000 r7:80329ae4 r6:82aa7fc0 r5:82aa7f80 r4:828f2e00 [<8026a3b4>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:146) Exception stack(0x82981fb0 to 0x82981ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026a3b4 r4:82aa7f80 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2020 Comm: klogd Not tainted 5.15.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at _compound_head include/linux/page-flags.h:200 [inline] PC is at PageSlab include/linux/page-flags.h:431 [inline] PC is at check_heap_object mm/usercopy.c:238 [inline] PC is at __check_object_size mm/usercopy.c:286 [inline] PC is at __check_object_size+0x178/0x208 mm/usercopy.c:256 LR is at kmap_to_page include/linux/highmem-internal.h:63 [inline] LR is at check_heap_object mm/usercopy.c:236 [inline] LR is at __check_object_size mm/usercopy.c:286 [inline] LR is at __check_object_size+0x14c/0x208 mm/usercopy.c:256 pc : [<8047b2d8>] lr : [<8047b2ac>] psr: 000f0013 sp : 8386bd88 ip : 8386bd88 fp : 8386bdbc r10: 843fe180 r9 : 8386beb8 r8 : 85411800 r7 : 8541187c r6 : 00000000 r5 : 0000007c r4 : 85411800 r3 : 00000000 r2 : 00000024 r1 : 8248c7b8 r0 : ddeb6240 Flags: nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8410d240 DAC: 00000000 CPU: 1 PID: 2020 Comm: klogd Not tainted 5.15.0-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816f5710>] (dump_backtrace) from [<816f58fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:237) r7:00000017 r6:8386bd38 r5:600f0193 r4:81d60180 [<816f58e4>] (show_stack) from [<816fe354>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816f58e4>] (show_stack) from [<816fe354>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816fe30c>] (dump_stack_lvl) from [<816fe378>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:000f0193 r4:00000001 [<816fe360>] (dump_stack) from [<80209080>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:199) [<8020906c>] (show_regs) from [<8083cd94>] (nmi_cpu_backtrace+0xfc/0x180 lib/nmi_backtrace.c:103) [<8083cc98>] (nmi_cpu_backtrace) from [<8020fd58>] (do_handle_IPI+0x4c/0x3b4 arch/arm/kernel/smp.c:680) r7:00000017 r6:00000001 r5:8280cb80 r4:00000007 [<8020fd0c>] (do_handle_IPI) from [<802100e0>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:708) r9:84180b80 r8:8386bca0 r7:00000017 r6:8220cc8c r5:8280cb80 r4:82885d00 [<802100c0>] (ipi_handler) from [<802b9538>] (handle_percpu_devid_irq+0x9c/0x2d4 kernel/irq/chip.c:933) [<802b949c>] (handle_percpu_devid_irq) from [<802b2ba8>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802b949c>] (handle_percpu_devid_irq) from [<802b2ba8>] (handle_irq_desc kernel/irq/irqdesc.c:646 [inline]) [<802b949c>] (handle_percpu_devid_irq) from [<802b2ba8>] (generic_handle_domain_irq+0x48/0x8c kernel/irq/irqdesc.c:680) r10:843fe180 r9:84180b80 r8:00000000 r7:df80200c r6:84180b80 r5:00000007 r4:82888000 r3:802b949c [<802b2b60>] (generic_handle_domain_irq) from [<8084fac0>] (gic_handle_irq+0x68/0x7c drivers/irqchip/irq-gic.c:372) r7:df80200c r6:820a5fc4 r5:df802000 r4:8220cc8c [<8084fa58>] (gic_handle_irq) from [<817102a4>] (generic_handle_arch_irq+0x60/0x80 kernel/irq/handle.c:243) r7:8386bd38 r6:81f092ac r5:81f092c4 r4:820a5fb8 [<81710244>] (generic_handle_arch_irq) from [<80200abc>] (__irq_svc+0x3c/0x64 arch/arm/kernel/entry-armv.S:202) Exception stack(0x8386bd38 to 0x8386bd80) bd20: ddeb6240 8248c7b8 bd40: 00000024 00000000 85411800 0000007c 00000000 8541187c 85411800 8386beb8 bd60: 843fe180 8386bdbc 8386bd88 8386bd88 8047b2ac 8047b2d8 000f0013 ffffffff r9:84180b80 r8:85411800 r7:8386bd6c r6:ffffffff r5:000f0013 r4:8047b2d8 [<8047b160>] (__check_object_size) from [<812b3eb4>] (check_object_size include/linux/thread_info.h:185 [inline]) [<8047b160>] (__check_object_size) from [<812b3eb4>] (check_copy_size include/linux/thread_info.h:218 [inline]) [<8047b160>] (__check_object_size) from [<812b3eb4>] (copy_from_iter include/linux/uio.h:161 [inline]) [<8047b160>] (__check_object_size) from [<812b3eb4>] (skb_copy_datagram_from_iter+0x60/0x238 net/core/datagram.c:559) r10:843fe180 r9:8386beb8 r8:85411800 r7:0000007c r6:00000000 r5:0000007c r4:0000007c [<812b3e54>] (skb_copy_datagram_from_iter) from [<8152566c>] (unix_dgram_sendmsg+0x360/0x8f4 net/unix/af_unix.c:1824) r10:843fe180 r9:00000000 r8:83672100 r7:83673c00 r6:0000007c r5:83092c80 r4:8386beb0 [<8152530c>] (unix_dgram_sendmsg) from [<8129dd10>] (sock_sendmsg_nosec net/socket.c:704 [inline]) [<8152530c>] (unix_dgram_sendmsg) from [<8129dd10>] (sock_sendmsg+0x3c/0x4c net/socket.c:724) r10:00000121 r9:84180b80 r8:80200244 r7:00004000 r6:00000000 r5:83092c80 r4:8386beb0 [<8129dcd4>] (sock_sendmsg) from [<8129fc5c>] (__sys_sendto+0xcc/0x118 net/socket.c:2036) r5:83092c80 r4:00000000 [<8129fb90>] (__sys_sendto) from [<8129fcec>] (__do_sys_send net/socket.c:2058 [inline]) [<8129fb90>] (__sys_sendto) from [<8129fcec>] (sys_send+0x20/0x28 net/socket.c:2055) r7:00000121 r6:00000001 r5:76f24080 r4:006dc190 [<8129fccc>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x8386bfa8 to 0x8386bff0) bfa0: 006dc190 76f24080 00000003 006e3940 0000007c 00004000 bfc0: 006dc190 76f24080 00000001 00000121 7ede9cc0 00000000 76f24080 00000000 bfe0: 00000000 7ede9bf8 76e55b88 76e5ae78