INFO: task syz-executor.0:9680 blocked for more than 430 seconds. Not tainted 6.9.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:9680 tgid:9679 ppid:4921 flags:0x00000005 Call trace: [<81903f08>] (__schedule) from [<81904b0c>] (__schedule_loop kernel/sched/core.c:6822 [inline]) [<81903f08>] (__schedule) from [<81904b0c>] (schedule+0x2c/0xfc kernel/sched/core.c:6837) r10:85437660 r9:00000000 r8:827c7048 r7:00000002 r6:e02dda9c r5:85128c00 r4:85128c00 [<81904ae0>] (schedule) from [<8190511c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6894) r5:85128c00 r4:827c7044 [<81905104>] (schedule_preempt_disabled) from [<81907a04>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<81905104>] (schedule_preempt_disabled) from [<81907a04>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<8190771c>] (__mutex_lock.constprop.0) from [<819082d0>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:85437660 r9:00000000 r8:827c7044 r7:85437660 r6:854376c4 r5:851ea000 r4:85437400 [<819082bc>] (__mutex_lock_slowpath) from [<81908310>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819082d4>] (mutex_lock) from [<814f4830>] (netlink_dump+0x33c/0x3f0 net/netlink/af_netlink.c:2336) [<814f44f4>] (netlink_dump) from [<814f6740>] (__netlink_dump_start+0x180/0x230 net/netlink/af_netlink.c:2454) r10:85437660 r9:00000000 r8:854376c4 r7:e02ddbfc r6:851eae40 r5:82e60b40 r4:85437400 [<814f65c0>] (__netlink_dump_start) from [<81421560>] (netlink_dump_start include/linux/netlink.h:340 [inline]) [<814f65c0>] (__netlink_dump_start) from [<81421560>] (rtnetlink_rcv_msg+0x240/0x31c net/core/rtnetlink.c:6551) r10:00000000 r9:840d8000 r8:00000000 r7:851eae40 r6:80c721d4 r5:00000000 r4:82e60b40 r3:e02ddbfc [<81421320>] (rtnetlink_rcv_msg) from [<814f7c80>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2564) r10:00000000 r9:00000000 r8:840d8000 r7:0000005c r6:82e60b40 r5:81421320 r4:851eae40 [<814f7bc0>] (netlink_rcv_skb) from [<8141f8f0>] (rtnetlink_rcv+0x18/0x1c net/core/rtnetlink.c:6613) r7:851eae40 r6:84508a40 r5:0000005c r4:8546d400 [<8141f8d8>] (rtnetlink_rcv) from [<814f7478>] (netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]) [<8141f8d8>] (rtnetlink_rcv) from [<814f7478>] (netlink_unicast+0x198/0x294 net/netlink/af_netlink.c:1361) [<814f72e0>] (netlink_unicast) from [<814f7750>] (netlink_sendmsg+0x1dc/0x434 net/netlink/af_netlink.c:1905) r9:00000000 r8:00000000 r7:85437400 r6:0000005c r5:851eae40 r4:e02ddf38 [<814f7574>] (netlink_sendmsg) from [<813d9adc>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<814f7574>] (netlink_sendmsg) from [<813d9adc>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00000000 r9:e02dddd4 r8:e02dddd4 r7:00000000 r6:833bca00 r5:e02ddf38 r4:00000000 [<813d9a98>] (__sock_sendmsg) from [<813da9f0>] (____sys_sendmsg+0x250/0x2cc net/socket.c:2585) r7:00000000 r6:00000000 r5:833bca00 r4:e02ddf38 [<813da7a0>] (____sys_sendmsg) from [<813dc884>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2639) r10:e02dde34 r9:20000040 r8:00000000 r7:00000000 r6:833bca00 r5:e02ddf38 r4:00000000 [<813dc7e8>] (___sys_sendmsg) from [<813dcd9c>] (__sys_sendmsg net/socket.c:2668 [inline]) [<813dc7e8>] (___sys_sendmsg) from [<813dcd9c>] (__do_sys_sendmsg net/socket.c:2677 [inline]) [<813dc7e8>] (___sys_sendmsg) from [<813dcd9c>] (sys_sendmsg+0x78/0xbc net/socket.c:2675) r10:00000128 r9:85128c00 r8:8020029c r7:00000000 r6:20000040 r5:833bca00 r4:00000000 [<813dcd24>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xe02ddfa8 to 0xe02ddff0) dfa0: 00000000 00000000 00000003 20000040 00000000 00000000 dfc0: 00000000 00000000 0014c2c8 00000128 7ef6b32e 7ef6b32f 003d0f00 76bd90fc dfe0: 76bd8f08 76bd8ef8 00016d28 00051560 r7:00000128 r6:0014c2c8 r5:00000000 r4:00000000 NMI backtrace for cpu 1 CPU: 1 PID: 32 Comm: khungtaskd Not tainted 6.9.0-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<818e27ec>] (dump_backtrace) from [<818e28e8>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000013 r5:60000093 r4:81fe2b4c [<818e28d0>] (show_stack) from [<818fff10>] (__dump_stack lib/dump_stack.c:88 [inline]) [<818e28d0>] (show_stack) from [<818fff10>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114) [<818ffea0>] (dump_stack_lvl) from [<818fff34>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000001 r4:00000001 [<818fff1c>] (dump_stack) from [<818cfb18>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<818cf9b8>] (nmi_cpu_backtrace) from [<818cfc64>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c5d0 r5:8261a7cc r4:ffffffff [<818cfb34>] (nmi_trigger_cpumask_backtrace) from [<80210408>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:827e5e67 r8:828a4fa0 r7:8260c734 r6:00007f4a r5:8261ad88 r4:83d9051c [<802103f0>] (arch_trigger_cpumask_backtrace) from [<803532c0>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103f0>] (arch_trigger_cpumask_backtrace) from [<803532c0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103f0>] (arch_trigger_cpumask_backtrace) from [<803532c0>] (watchdog+0x48c/0x59c kernel/hung_task.c:379) [<80352e34>] (watchdog) from [<8027151c>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82f1aec0 r7:00000000 r6:80352e34 r5:82e51800 r4:82ec2900 [<80271418>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271418 r4:82ec2900 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 3015 Comm: syz-fuzzer Not tainted 6.9.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at generic_test_bit include/asm-generic/bitops/generic-non-atomic.h:128 [inline] PC is at folio_test_head include/linux/page-flags.h:836 [inline] PC is at folio_test_large include/linux/page-flags.h:857 [inline] PC is at zap_present_ptes mm/memory.c:1561 [inline] PC is at zap_pte_range mm/memory.c:1612 [inline] PC is at zap_pmd_range mm/memory.c:1730 [inline] PC is at zap_pud_range mm/memory.c:1759 [inline] PC is at zap_p4d_range mm/memory.c:1780 [inline] PC is at unmap_page_range+0x4b8/0xf2c mm/memory.c:1801 LR is at folio_test_head include/linux/page-flags.h:836 [inline] LR is at folio_test_large include/linux/page-flags.h:857 [inline] LR is at zap_present_ptes mm/memory.c:1561 [inline] LR is at zap_pte_range mm/memory.c:1612 [inline] LR is at zap_pmd_range mm/memory.c:1730 [inline] LR is at zap_pud_range mm/memory.c:1759 [inline] LR is at zap_p4d_range mm/memory.c:1780 [inline] LR is at unmap_page_range+0x4b8/0xf2c mm/memory.c:1801 pc : [<80486384>] lr : [<80486384>] psr: 60000013 sp : ec4cdce0 ip : ec4cdce0 fp : ec4cddf4 r10: 821cc000 r9 : 00e00000 r8 : fbd26f5f r7 : ffefd248 r6 : 01449000 r5 : def62958 r4 : 00072000 r3 : def62938 r2 : 01449000 r1 : 00000024 r0 : def62958 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 846f2d40 DAC: fffffffd Call trace: [<80485ecc>] (unmap_page_range) from [<80486ee4>] (unmap_single_vma mm/memory.c:1847 [inline]) [<80485ecc>] (unmap_page_range) from [<80486ee4>] (unmap_vmas+0xec/0x158 mm/memory.c:1891) r10:00000000 r9:00000406 r8:ec4cde80 r7:fffffffe r6:ffffffff r5:00f50000 r4:846f72a0 [<80486df8>] (unmap_vmas) from [<80496a68>] (exit_mmap+0xe8/0x4f0 mm/mmap.c:3312) r10:000000f8 r9:00000000 r8:84120378 r7:83f3a080 r6:00000000 r5:84120300 r4:846f7360 [<80496980>] (exit_mmap) from [<8023f50c>] (__mmput+0x3c/0x120 kernel/fork.c:1346) r10:000000f8 r9:00000000 r8:ec4cdf50 r7:83f3a080 r6:84120378 r5:84120300 r4:84120300 [<8023f4d0>] (__mmput) from [<8023f62c>] (mmput+0x3c/0x40 kernel/fork.c:1368) r5:84120300 r4:83f39800 [<8023f5f0>] (mmput) from [<8024a704>] (exit_mm kernel/exit.c:568 [inline]) [<8023f5f0>] (mmput) from [<8024a704>] (do_exit+0x2c0/0xaa8 kernel/exit.c:864) [<8024a444>] (do_exit) from [<8024b0b0>] (do_group_exit+0x40/0x8c kernel/exit.c:1026) r7:84107480 [<8024b070>] (do_group_exit) from [<8024b114>] (__do_sys_exit_group kernel/exit.c:1037 [inline]) [<8024b070>] (do_group_exit) from [<8024b114>] (pid_child_should_wake+0x0/0x6c kernel/exit.c:1035) r7:000000f8 r4:02482060 [<8024b0fc>] (sys_exit_group) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xec4cdfa8 to 0xec4cdff0) dfa0: 02482060 00000000 00000001 02c5a3a0 00000000 00000001 dfc0: 02482060 00000000 00000000 000000f8 00000007 0000004a 02402100 014bbfb4 dfe0: 00000046 02c5bbe8 0008cf64 000919ec