INFO: task syz.0.248:5191 blocked for more than 430 seconds. Not tainted 6.12.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.248 state:D stack:0 pid:5191 tgid:5191 ppid:3114 flags:0x00000001 Call trace: [<819bb8d4>] (__schedule) from [<819bc514>] (__schedule_loop kernel/sched/core.c:6759 [inline]) [<819bb8d4>] (__schedule) from [<819bc514>] (schedule+0x2c/0xfc kernel/sched/core.c:6774) r10:000001b4 r9:00000000 r8:8390d730 r7:00000002 r6:dfe35e24 r5:8461b000 r4:8461b000 [<819bc4e8>] (schedule) from [<819bc8c8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6831) r5:8461b000 r4:8390d72c [<819bc8b0>] (schedule_preempt_disabled) from [<819bf3a0>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bc8b0>] (schedule_preempt_disabled) from [<819bf3a0>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819bf0b8>] (__mutex_lock.constprop.0) from [<819bfc6c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:000001b4 r9:8390d72c r8:83178cc0 r7:00000000 r6:8390d600 r5:8417e300 r4:83178f28 [<819bfc58>] (__mutex_lock_slowpath) from [<819bfcac>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819bfc70>] (mutex_lock) from [<807b69b0>] (bdev_release+0x58/0x1a0 block/bdev.c:1087) [<807b6958>] (bdev_release) from [<807b6fa0>] (blkdev_release+0x14/0x1c block/fops.c:639) r9:8461b000 r8:85111f10 r7:8384ac58 r6:83020198 r5:084a001d r4:8417e300 [<807b6f8c>] (blkdev_release) from [<805181c4>] (__fput+0xdc/0x2e4 fs/file_table.c:431) [<805180e8>] (__fput) from [<80518454>] (____fput+0x14/0x18 fs/file_table.c:459) r9:8461b000 r8:82871694 r7:8461b000 r6:8461b884 r5:8461b854 r4:00000000 [<80518440>] (____fput) from [<8026c5cc>] (task_work_run+0x90/0xb8 kernel/task_work.c:228) [<8026c53c>] (task_work_run) from [<8020bde0>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<8026c53c>] (task_work_run) from [<8020bde0>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:8461b000 r8:8020029c r7:000001b4 r6:8020029c r5:dfe35fb0 r4:8461b000 [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfe35fb0 to 0xdfe35ff8) 5fa0: 00000000 0000001e 00000000 7ed77938 5fc0: 00000000 000000f8 00000000 000001b4 00270000 00270000 0004a4fb 00000000 5fe0: 7ed77838 7ed77828 00024234 00132ec0 20000010 00000003 r10:000001b4 r9:8461b000 r8:8020029c r7:000001b4 r6:00000000 r5:000000f8 r4:00000000 INFO: task syz.0.248:5193 blocked for more than 430 seconds. Not tainted 6.12.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.248 state:D stack:0 pid:5193 tgid:5191 ppid:3114 flags:0x00000001 Call trace: [<819bb8d4>] (__schedule) from [<819bc514>] (__schedule_loop kernel/sched/core.c:6759 [inline]) [<819bb8d4>] (__schedule) from [<819bc514>] (schedule+0x2c/0xfc kernel/sched/core.c:6774) r10:00000036 r9:00000000 r8:8390d730 r7:00000002 r6:dfe19e24 r5:8461e000 r4:8461e000 [<819bc4e8>] (schedule) from [<819bc8c8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6831) r5:8461e000 r4:8390d72c [<819bc8b0>] (schedule_preempt_disabled) from [<819bf3a0>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bc8b0>] (schedule_preempt_disabled) from [<819bf3a0>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819bf0b8>] (__mutex_lock.constprop.0) from [<819bfc6c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:00000036 r9:8390d72c r8:83178cc0 r7:00000000 r6:8390d600 r5:8417e780 r4:83178f28 [<819bfc58>] (__mutex_lock_slowpath) from [<819bfcac>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819bfc70>] (mutex_lock) from [<807b69b0>] (bdev_release+0x58/0x1a0 block/bdev.c:1087) [<807b6958>] (bdev_release) from [<807b6fa0>] (blkdev_release+0x14/0x1c block/fops.c:639) r9:8461e000 r8:85111f10 r7:8384ac58 r6:83020198 r5:084a001d r4:8417e780 [<807b6f8c>] (blkdev_release) from [<805181c4>] (__fput+0xdc/0x2e4 fs/file_table.c:431) [<805180e8>] (__fput) from [<80518454>] (____fput+0x14/0x18 fs/file_table.c:459) r9:8461e000 r8:82871694 r7:8461e000 r6:8461e884 r5:8461e854 r4:8461e9a0 [<80518440>] (____fput) from [<8026c5cc>] (task_work_run+0x90/0xb8 kernel/task_work.c:228) [<8026c53c>] (task_work_run) from [<8020bde0>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<8026c53c>] (task_work_run) from [<8020bde0>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:8461e000 r8:8020029c r7:00000036 r6:8020029c r5:dfe19fb0 r4:8461e000 [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfe19fb0 to 0xdfe19ff8) 9fa0: 00000000 0000ab03 00000000 00000000 9fc0: 00000000 00000000 002862ec 00000036 00000000 00006364 003d0f00 76b660bc 9fe0: 76b65ec0 76b65eb0 00018af8 00132ec0 60000010 00000004 r10:00000036 r9:8461e000 r8:8020029c r7:00000036 r6:002862ec r5:00000000 r4:00000000 INFO: task syz.0.248:5200 blocked for more than 430 seconds. Not tainted 6.12.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.248 state:D stack:0 pid:5200 tgid:5191 ppid:3114 flags:0x00000005 Call trace: [<819bb8d4>] (__schedule) from [<819bc514>] (__schedule_loop kernel/sched/core.c:6759 [inline]) [<819bb8d4>] (__schedule) from [<819bc514>] (schedule+0x2c/0xfc kernel/sched/core.c:6774) r10:df9fdb74 r9:8260534c r8:82604ec0 r7:00000000 r6:00000002 r5:00000000 r4:84619800 [<819bc4e8>] (schedule) from [<819bc61c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7559) r5:00000000 r4:84619800 [<819bc5e4>] (io_schedule) from [<8043d3c4>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1309) r5:84619800 r4:00000002 [<8043d234>] (folio_wait_bit_common) from [<80441058>] (folio_put_wait_locked mm/filemap.c:1473 [inline]) [<8043d234>] (folio_wait_bit_common) from [<80441058>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3807) r10:00000400 r9:00080001 r8:00000000 r7:807b6f00 r6:00000000 r5:83179030 r4:dde957f8 [<80440fc0>] (do_read_cache_folio) from [<80441224>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3857) r10:00000400 r9:81aebf58 r8:8519dd80 r7:827fb603 r6:807df6c0 r5:00000000 r4:00000000 r3:00000000 [<80441208>] (read_cache_folio) from [<807df4b0>] (read_mapping_folio include/linux/pagemap.h:1011 [inline]) [<80441208>] (read_cache_folio) from [<807df4b0>] (read_part_sector+0x54/0xcc block/partitions/core.c:714) [<807df45c>] (read_part_sector) from [<807df70c>] (msdos_partition+0x4c/0xa80 block/partitions/msdos.c:592) r5:00000000 r4:8519dd80 [<807df6c0>] (msdos_partition) from [<807dee28>] (check_partition block/partitions/core.c:138 [inline]) [<807df6c0>] (msdos_partition) from [<807dee28>] (blk_add_partitions block/partitions/core.c:581 [inline]) [<807df6c0>] (msdos_partition) from [<807dee28>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:685) r10:00000000 r9:81aebf58 r8:00000000 r7:827fb603 r6:807df6c0 r5:8390d600 r4:8519dd80 [<807deb70>] (bdev_disk_changed) from [<807b5d20>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:707) r10:8390d72c r9:00000000 r8:00000001 r7:00000001 r6:8390d600 r5:00000000 r4:83178cc0 [<807b5c78>] (blkdev_get_whole) from [<807b6588>] (bdev_open+0x238/0x3f8 block/bdev.c:916) r7:8390d600 r6:00000000 r5:00000001 r4:83178cc0 [<807b6350>] (bdev_open) from [<807b8318>] (blkdev_open+0xb0/0x108 block/fops.c:631) r10:00000000 r9:8417ed80 r8:8417eda8 r7:00000000 r6:83178cc0 r5:00000001 r4:8417ed80 [<807b8268>] (blkdev_open) from [<80510be8>] (do_dentry_open+0x144/0x4c0 fs/open.c:958) r7:807b8268 r6:8384ac58 r5:00000000 r4:8417ed80 [<80510aa4>] (do_dentry_open) from [<80512a5c>] (vfs_open+0x2c/0xec fs/open.c:1088) r9:8417ed80 r8:df9fde58 r7:00000000 r6:8417eda8 r5:8271f3f4 r4:8417ed80 [<80512a30>] (vfs_open) from [<8052b180>] (do_open fs/namei.c:3774 [inline]) [<80512a30>] (vfs_open) from [<8052b180>] (path_openat+0x770/0x11a4 fs/namei.c:3933) r6:df9fdf20 r5:8271f3f4 r4:00000000 [<8052aa10>] (path_openat) from [<8052bc50>] (do_filp_open+0x9c/0x138 fs/namei.c:3960) r10:00000142 r9:84619800 r8:00000001 r7:df9fde58 r6:df9fdf20 r5:84619800 r4:83412000 [<8052bbb4>] (do_filp_open) from [<80512f08>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1415) r8:8020029c r7:ffffff9c r6:00000007 r5:df9fdf58 r4:83412000 [<80512e4c>] (do_sys_openat2) from [<80513310>] (do_sys_open fs/open.c:1430 [inline]) [<80512e4c>] (do_sys_openat2) from [<80513310>] (__do_sys_openat fs/open.c:1446 [inline]) [<80512e4c>] (do_sys_openat2) from [<80513310>] (sys_openat+0x98/0xd4 fs/open.c:1441) r7:00000142 r6:00000000 r5:76b44ab0 r4:ffffff9c [<80513278>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdf9fdfa8 to 0xdf9fdff0) dfa0: 00000000 76b44ab0 ffffff9c 76b44ab0 00000000 00000000 dfc0: 00000000 76b44ab0 00000000 00000142 00000000 00006364 003d0f00 76b450bc dfe0: 81010101 76b44a68 000d8408 00130cb8 r5:76b44ab0 r4:00000000 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<81999418>] (dump_backtrace) from [<81999514>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8203d408 [<819994fc>] (show_stack) from [<819b79c0>] (__dump_stack lib/dump_stack.c:94 [inline]) [<819994fc>] (show_stack) from [<819b79c0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<819b7950>] (dump_stack_lvl) from [<819b79e4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<819b79cc>] (dump_stack) from [<819866d8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81986578>] (nmi_cpu_backtrace) from [<81986824>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c5d0 r5:8261af0c r4:ffffffff [<819866f4>] (nmi_trigger_cpumask_backtrace) from [<802103e8>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:0000ae0e r8:828b6cf8 r7:8260c730 r6:00007f1b r5:8261b4c8 r4:836a2f1c [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379) [<80357d18>] (watchdog) from [<8026fc90>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82f239c0 r7:00000000 r6:80357d18 r5:82e59800 r4:82ec93c0 [<8026fb8c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb8c r4:82ec93c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 8494 Comm: syz.0.568 Not tainted 6.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at uaccess_restore arch/arm/include/asm/uaccess.h:67 [inline] PC is at raw_copy_from_user arch/arm/include/asm/uaccess.h:543 [inline] PC is at _inline_copy_from_user include/linux/uaccess.h:170 [inline] PC is at copy_from_user include/linux/uaccess.h:201 [inline] PC is at copy_msghdr_from_user+0xb4/0x130 net/socket.c:2537 LR is at 0x0 pc : [<814868bc>] lr : [<00000000>] psr: 40000013 sp : df9b9db0 ip : 00000004 fp : df9b9dfc r10: b5403587 r9 : 85ad1800 r8 : b5403587 r7 : 20197d40 r6 : df9b9e0c r5 : df9b9e10 r4 : df9b9ee0 r3 : 00000000 r2 : 00000000 r1 : 20197d5c r0 : 00000000 Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 859ec940 DAC: 00000000 Call trace: [<81486808>] (copy_msghdr_from_user) from [<81486a6c>] (recvmsg_copy_msghdr net/socket.c:2792 [inline]) [<81486808>] (copy_msghdr_from_user) from [<81486a6c>] (___sys_recvmsg+0x64/0xbc net/socket.c:2864) r8:831a7180 r7:00000002 r6:20197d40 r5:df9b9ee0 r4:df9b9e14 [<81486a08>] (___sys_recvmsg) from [<81486bc4>] (do_recvmmsg+0x100/0x2d0 net/socket.c:2962) r8:00000000 r7:00000002 r6:0000cbe4 r5:20197d40 r4:df9b9ec0 [<81486ac4>] (do_recvmmsg) from [<814875b0>] (__sys_recvmmsg net/socket.c:3041 [inline]) [<81486ac4>] (do_recvmmsg) from [<814875b0>] (__do_sys_recvmmsg_time32 net/socket.c:3075 [inline]) [<81486ac4>] (do_recvmmsg) from [<814875b0>] (sys_recvmmsg_time32+0xc4/0xd8 net/socket.c:3068) r10:0000016d r9:85ad1800 r8:00010106 r7:00000002 r6:00000000 r5:200000c0 r4:00000003 [<814874ec>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdf9b9fa8 to 0xdf9b9ff0) 9fa0: 00000000 00000000 00000003 200000c0 00010106 00000002 9fc0: 00000000 00000000 00286388 0000016d 00000000 00006364 003d0f00 76b4f0bc 9fe0: 76b4eec0 76b4eeb0 00018af8 00132ec0 r8:8020029c r7:0000016d r6:00286388 r5:00000000 r4:00000000