INFO: task syz.2.708:6774 blocked for more than 430 seconds. Not tainted 6.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.708 state:D stack:0 pid:6774 tgid:6773 ppid:5269 task_flags:0x400140 flags:0x00000001 Call trace: [<81a274d8>] (__schedule) from [<81a28460>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a274d8>] (__schedule) from [<81a28460>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:83bff8e0 r9:dfa49e1c r8:00000002 r7:60000013 r6:dfa49e24 r5:841bc800 r4:841bc800 [<81a28434>] (schedule) from [<81a28848>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6935) r5:841bc800 r4:83bff8dc [<81a28830>] (schedule_preempt_disabled) from [<81a2af2c>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81a28830>] (schedule_preempt_disabled) from [<81a2af2c>] (__mutex_lock.constprop.0+0x300/0x6f8 kernel/locking/mutex.c:747) [<81a2ac2c>] (__mutex_lock.constprop.0) from [<81a2b3f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:00000036 r9:83bff8dc r8:83481dc0 r7:00000000 r6:83bff800 r5:8614c3c0 r4:83482028 [<81a2b3e4>] (__mutex_lock_slowpath) from [<81a2b438>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:278) [<81a2b3fc>] (mutex_lock) from [<8082a8e0>] (bdev_release+0x58/0x1a0 block/bdev.c:1128) [<8082a888>] (bdev_release) from [<8082af10>] (blkdev_release+0x14/0x1c block/fops.c:684) r9:841bc800 r8:8541db50 r7:83c02258 r6:8341f2a8 r5:0c4a001d r4:8614c3c0 [<8082aefc>] (blkdev_release) from [<805573dc>] (__fput+0xd8/0x2ec fs/file_table.c:465) [<80557304>] (__fput) from [<80557684>] (____fput+0x14/0x18 fs/file_table.c:493) r9:841bc800 r8:82a6d6a0 r7:841bc800 r6:841bd094 r5:841bd064 r4:00000000 [<80557670>] (____fput) from [<80283ef4>] (task_work_run+0x90/0xb8 kernel/task_work.c:227) [<80283e64>] (task_work_run) from [<8022bc18>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<80283e64>] (task_work_run) from [<8022bc18>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:841bc800 r8:8020029c r7:00000036 r6:8020029c r5:dfa49fb0 r4:841bc800 [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfa49fb0 to 0xdfa49ff8) 9fa0: 00000000 0000ab03 00000000 00000000 9fc0: 00000000 00000000 002e62fc 00000036 002d0000 00000000 00006364 76be30bc 9fe0: 76be2ec0 76be2eb0 00019384 00131f20 60000010 00000003 r10:00000036 r9:841bc800 r8:8020029c r7:00000036 r6:002e62fc r5:00000000 r4:00000000 INFO: task syz.2.708:6774 is blocked on a mutex likely owned by task syz.2.708:6776. task:syz.2.708 state:D stack:0 pid:6776 tgid:6773 ppid:5269 task_flags:0x400040 flags:0x00000001 Call trace: [<81a274d8>] (__schedule) from [<81a28460>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a274d8>] (__schedule) from [<81a28460>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:dfa9db64 r9:84180000 r8:8280517c r7:82804f00 r6:ddeb5868 r5:00000000 r4:84180000 [<81a28434>] (schedule) from [<81a2859c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7723) r5:00000000 r4:84180000 [<81a28564>] (io_schedule) from [<8047017c>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8046ffdc>] (folio_wait_bit_common) from [<80474234>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8046ffdc>] (folio_wait_bit_common) from [<80474234>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082ae70 r6:00000000 r5:83482130 r4:ddeb5868 [<8047419c>] (do_read_cache_folio) from [<80474400>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf09a0 r8:853e87c0 r7:829fa44b r6:8085437c r5:00000000 r4:00000000 r3:00000000 [<804743e4>] (read_cache_folio) from [<8085416c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<804743e4>] (read_cache_folio) from [<8085416c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<80854118>] (read_part_sector) from [<808543c8>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:853e87c0 [<8085437c>] (msdos_partition) from [<80853ae4>] (check_partition block/partitions/core.c:141 [inline]) [<8085437c>] (msdos_partition) from [<80853ae4>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<8085437c>] (msdos_partition) from [<80853ae4>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf09a0 r8:00000000 r7:829fa44b r6:8085437c r5:83bff800 r4:853e87c0 [<8085382c>] (bdev_disk_changed) from [<80829a60>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83bff8dc r9:00000000 r8:00000001 r7:00000001 r6:83bff800 r5:00000000 r4:83481dc0 [<808299b8>] (blkdev_get_whole) from [<8082a4b4>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83bff800 r6:00000000 r5:00000000 r4:83481dc0 [<8082a27c>] (bdev_open) from [<8082c4a8>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:8614c840 r9:00000000 r8:8614c868 r7:00000001 r6:8614c840 r5:00000000 r4:83481dc0 [<8082c3fc>] (blkdev_open) from [<8054fc34>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082c3fc r6:83c02258 r5:00000000 r4:8614c840 [<8054fac0>] (do_dentry_open) from [<80551a0c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfa9de58 r7:00000000 r6:8614c868 r5:82920ba0 r4:8614c840 [<805519e0>] (vfs_open) from [<8056a348>] (do_open fs/namei.c:3887 [inline]) [<805519e0>] (vfs_open) from [<8056a348>] (path_openat+0x30c/0x1150 fs/namei.c:4046) r6:dfa9df20 r5:82920ba0 r4:00000100 [<8056a03c>] (path_openat) from [<8056b238>] (do_filp_open+0xac/0x148 fs/namei.c:4073) r10:00000142 r9:8335a000 r8:00000001 r7:dfa9de58 r6:dfa9df20 r5:84180000 r4:ffffff9c [<8056b18c>] (do_filp_open) from [<80551f10>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:84180000 r8:8020029c r7:ffffff9c r6:dfa9df58 r5:8335a000 r4:00000006 [<80551e80>] (do_sys_openat2) from [<80552338>] (do_sys_open fs/open.c:1452 [inline]) [<80551e80>] (do_sys_openat2) from [<80552338>] (__do_sys_openat fs/open.c:1468 [inline]) [<80551e80>] (do_sys_openat2) from [<80552338>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76bc1ab0 r4:ffffff9c [<805522a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfa9dfa8 to 0xdfa9dff0) dfa0: 00000100 76bc1ab0 ffffff9c 76bc1ab0 00000100 00000000 dfc0: 00000100 76bc1ab0 00000000 00000142 00000000 00000000 00006364 76bc20bc dfe0: 81010101 76bc1a68 000d7d50 0012fd18 r5:76bc1ab0 r4:00000100 INFO: task syz.2.708:6776 blocked for more than 430 seconds. Not tainted 6.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.708 state:D stack:0 pid:6776 tgid:6773 ppid:5269 task_flags:0x400040 flags:0x00000001 Call trace: [<81a274d8>] (__schedule) from [<81a28460>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a274d8>] (__schedule) from [<81a28460>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:dfa9db64 r9:84180000 r8:8280517c r7:82804f00 r6:ddeb5868 r5:00000000 r4:84180000 [<81a28434>] (schedule) from [<81a2859c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7723) r5:00000000 r4:84180000 [<81a28564>] (io_schedule) from [<8047017c>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8046ffdc>] (folio_wait_bit_common) from [<80474234>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8046ffdc>] (folio_wait_bit_common) from [<80474234>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082ae70 r6:00000000 r5:83482130 r4:ddeb5868 [<8047419c>] (do_read_cache_folio) from [<80474400>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf09a0 r8:853e87c0 r7:829fa44b r6:8085437c r5:00000000 r4:00000000 r3:00000000 [<804743e4>] (read_cache_folio) from [<8085416c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<804743e4>] (read_cache_folio) from [<8085416c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<80854118>] (read_part_sector) from [<808543c8>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:853e87c0 [<8085437c>] (msdos_partition) from [<80853ae4>] (check_partition block/partitions/core.c:141 [inline]) [<8085437c>] (msdos_partition) from [<80853ae4>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<8085437c>] (msdos_partition) from [<80853ae4>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf09a0 r8:00000000 r7:829fa44b r6:8085437c r5:83bff800 r4:853e87c0 [<8085382c>] (bdev_disk_changed) from [<80829a60>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83bff8dc r9:00000000 r8:00000001 r7:00000001 r6:83bff800 r5:00000000 r4:83481dc0 [<808299b8>] (blkdev_get_whole) from [<8082a4b4>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83bff800 r6:00000000 r5:00000000 r4:83481dc0 [<8082a27c>] (bdev_open) from [<8082c4a8>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:8614c840 r9:00000000 r8:8614c868 r7:00000001 r6:8614c840 r5:00000000 r4:83481dc0 [<8082c3fc>] (blkdev_open) from [<8054fc34>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082c3fc r6:83c02258 r5:00000000 r4:8614c840 [<8054fac0>] (do_dentry_open) from [<80551a0c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfa9de58 r7:00000000 r6:8614c868 r5:82920ba0 r4:8614c840 [<805519e0>] (vfs_open) from [<8056a348>] (do_open fs/namei.c:3887 [inline]) [<805519e0>] (vfs_open) from [<8056a348>] (path_openat+0x30c/0x1150 fs/namei.c:4046) r6:dfa9df20 r5:82920ba0 r4:00000100 [<8056a03c>] (path_openat) from [<8056b238>] (do_filp_open+0xac/0x148 fs/namei.c:4073) r10:00000142 r9:8335a000 r8:00000001 r7:dfa9de58 r6:dfa9df20 r5:84180000 r4:ffffff9c [<8056b18c>] (do_filp_open) from [<80551f10>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:84180000 r8:8020029c r7:ffffff9c r6:dfa9df58 r5:8335a000 r4:00000006 [<80551e80>] (do_sys_openat2) from [<80552338>] (do_sys_open fs/open.c:1452 [inline]) [<80551e80>] (do_sys_openat2) from [<80552338>] (__do_sys_openat fs/open.c:1468 [inline]) [<80551e80>] (do_sys_openat2) from [<80552338>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76bc1ab0 r4:ffffff9c [<805522a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfa9dfa8 to 0xdfa9dff0) dfa0: 00000100 76bc1ab0 ffffff9c 76bc1ab0 00000100 00000000 dfc0: 00000100 76bc1ab0 00000000 00000142 00000000 00000000 00006364 76bc20bc dfe0: 81010101 76bc1a68 000d7d50 0012fd18 r5:76bc1ab0 r4:00000100 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:82259bc8 [<80201ae4>] (show_stack) from [<8021fdb0>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021fdb0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fd40>] (dump_stack_lvl) from [<8021fdd4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fdbc>] (dump_stack) from [<81a113f8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a11298>] (nmi_cpu_backtrace) from [<81a11544>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281af40 r4:ffffffff [<81a11414>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8280c80c r8:82ab2564 r7:8281bb28 r6:00007efb r5:8281b508 r4:857e020c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d34>] (trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d34>] (check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d34>] (watchdog+0x4a8/0x74c kernel/hung_task.c:470) [<8038088c>] (watchdog) from [<80285f5c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:00000000 r8:8038088c r7:830cd680 r6:830cd680 r5:83251800 r4:00000001 [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 r4:833a6700 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2814 Comm: pr/ttyAMA0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a309d4>] lr : [<80a71068>] psr: 600f0013 sp : eb78deb0 ip : eb78dec0 fp : eb78debc r10: 8295a0cc r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 8295a030 r5 : 00000000 r4 : 00000001 r3 : 00000a33 r2 : 00000000 r1 : 600f0013 r0 : 841ca440 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84698580 DAC: fffffffd Call trace: [<81a309ac>] (_raw_spin_unlock_irqrestore) from [<80a71068>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a309ac>] (_raw_spin_unlock_irqrestore) from [<80a71068>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a309ac>] (_raw_spin_unlock_irqrestore) from [<80a71068>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a71048>] (pl011_console_device_unlock) from [<802e7e64>] (nbcon_emit_one+0x80/0xf8 kernel/printk/nbcon.c:1123) [<802e7de4>] (nbcon_emit_one) from [<802e8084>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1210) r6:8280c690 r5:841be000 r4:8295a030 [<802e7edc>] (nbcon_kthread_func) from [<80285f5c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:8295a030 r8:802e7edc r7:842fdd00 r6:842fdd00 r5:841be000 r4:00000001 [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb78dfb0 to 0xeb78dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 r4:83faf340