INFO: task syz.0.242:4862 blocked for more than 430 seconds. Not tainted 6.16.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.242 state:D stack:0 pid:4862 tgid:4861 ppid:3086 task_flags:0x400140 flags:0x00000001 Call trace: [<81a277d8>] (__schedule) from [<81a28760>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a277d8>] (__schedule) from [<81a28760>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:83b51ee0 r9:df9d9e1c r8:00000002 r7:60000013 r6:df9d9e24 r5:833ee000 r4:833ee000 [<81a28734>] (schedule) from [<81a28b48>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6935) r5:833ee000 r4:83b51edc [<81a28b30>] (schedule_preempt_disabled) from [<81a2b22c>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81a28b30>] (schedule_preempt_disabled) from [<81a2b22c>] (__mutex_lock.constprop.0+0x300/0x6f8 kernel/locking/mutex.c:747) [<81a2af2c>] (__mutex_lock.constprop.0) from [<81a2b6f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:00000036 r9:83b51edc r8:8357ccc0 r7:00000000 r6:83b51e00 r5:85800840 r4:8357cf28 [<81a2b6e4>] (__mutex_lock_slowpath) from [<81a2b738>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:278) [<81a2b6fc>] (mutex_lock) from [<8082af68>] (bdev_release+0x58/0x1a0 block/bdev.c:1128) [<8082af10>] (bdev_release) from [<8082b598>] (blkdev_release+0x14/0x1c block/fops.c:684) r9:833ee000 r8:847453d0 r7:83b56058 r6:834d3c38 r5:0c4a001d r4:85800840 [<8082b584>] (blkdev_release) from [<805577dc>] (__fput+0xd8/0x2ec fs/file_table.c:465) [<80557704>] (__fput) from [<80557a84>] (____fput+0x14/0x18 fs/file_table.c:493) r9:833ee000 r8:82a6d6a0 r7:833ee000 r6:833ee894 r5:833ee864 r4:00000000 [<80557a70>] (____fput) from [<80283ef4>] (task_work_run+0x90/0xb8 kernel/task_work.c:227) [<80283e64>] (task_work_run) from [<8022bc18>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<80283e64>] (task_work_run) from [<8022bc18>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:833ee000 r8:8020029c r7:00000036 r6:8020029c r5:df9d9fb0 r4:833ee000 [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdf9d9fb0 to 0xdf9d9ff8) 9fa0: 00000000 0000ab03 00000000 00000000 9fc0: 00000000 00000000 002e62fc 00000036 002d0000 00000000 00006364 76b610bc 9fe0: 76b60ec0 76b60eb0 00019384 00131f20 60000010 00000003 r10:00000036 r9:833ee000 r8:8020029c r7:00000036 r6:002e62fc r5:00000000 r4:00000000 INFO: task syz.0.242:4862 is blocked on a mutex likely owned by task syz.0.242:4871. task:syz.0.242 state:D stack:0 pid:4871 tgid:4861 ppid:3086 task_flags:0x400040 flags:0x00000005 Call trace: [<81a277d8>] (__schedule) from [<81a28760>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a277d8>] (__schedule) from [<81a28760>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:dff61b64 r9:841d6000 r8:8280586c r7:82804f00 r6:ddeb93e4 r5:00000000 r4:841d6000 [<81a28734>] (schedule) from [<81a2889c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7723) r5:00000000 r4:841d6000 [<81a28864>] (io_schedule) from [<804702ec>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8047014c>] (folio_wait_bit_common) from [<804743a4>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8047014c>] (folio_wait_bit_common) from [<804743a4>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082b4f8 r6:00000000 r5:8357d030 r4:ddeb93e4 [<8047430c>] (do_read_cache_folio) from [<80474570>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf09e0 r8:859a7c80 r7:829fa54a r6:80854a2c r5:00000000 r4:00000000 r3:00000000 [<80474554>] (read_cache_folio) from [<8085481c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<80474554>] (read_cache_folio) from [<8085481c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<808547c8>] (read_part_sector) from [<80854a78>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:859a7c80 [<80854a2c>] (msdos_partition) from [<80854194>] (check_partition block/partitions/core.c:141 [inline]) [<80854a2c>] (msdos_partition) from [<80854194>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<80854a2c>] (msdos_partition) from [<80854194>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf09e0 r8:00000000 r7:829fa54a r6:80854a2c r5:83b51e00 r4:859a7c80 [<80853edc>] (bdev_disk_changed) from [<8082a0e8>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83b51edc r9:00000000 r8:00000001 r7:00000001 r6:83b51e00 r5:00000000 r4:8357ccc0 [<8082a040>] (blkdev_get_whole) from [<8082ab3c>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83b51e00 r6:00000000 r5:00000000 r4:8357ccc0 [<8082a904>] (bdev_open) from [<8082cb30>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:8474ac00 r9:00000000 r8:8474ac28 r7:00000001 r6:8474ac00 r5:00000000 r4:8357ccc0 [<8082ca84>] (blkdev_open) from [<80550034>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082ca84 r6:83b56058 r5:00000000 r4:8474ac00 [<8054fec0>] (do_dentry_open) from [<80551e0c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dff61e58 r7:00000000 r6:8474ac28 r5:82920ba0 r4:8474ac00 [<80551de0>] (vfs_open) from [<8056a744>] (do_open fs/namei.c:3896 [inline]) [<80551de0>] (vfs_open) from [<8056a744>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dff61f20 r5:82920ba0 r4:00000100 [<8056a438>] (path_openat) from [<8056b634>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:832ff000 r8:00000001 r7:dff61e58 r6:dff61f20 r5:841d6000 r4:ffffff9c [<8056b588>] (do_filp_open) from [<80552310>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:841d6000 r8:8020029c r7:ffffff9c r6:dff61f58 r5:832ff000 r4:00000006 [<80552280>] (do_sys_openat2) from [<80552738>] (do_sys_open fs/open.c:1452 [inline]) [<80552280>] (do_sys_openat2) from [<80552738>] (__do_sys_openat fs/open.c:1468 [inline]) [<80552280>] (do_sys_openat2) from [<80552738>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76b3fab0 r4:ffffff9c [<805526a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdff61fa8 to 0xdff61ff0) 1fa0: 00000100 76b3fab0 ffffff9c 76b3fab0 00000100 00000000 1fc0: 00000100 76b3fab0 00000000 00000142 00000000 00000000 00006364 76b400bc 1fe0: 81010101 76b3fa68 000d7d50 0012fd18 r5:76b3fab0 r4:00000100 INFO: task syz.0.242:4871 blocked for more than 430 seconds. Not tainted 6.16.0-rc3-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.242 state:D stack:0 pid:4871 tgid:4861 ppid:3086 task_flags:0x400040 flags:0x00000005 Call trace: [<81a277d8>] (__schedule) from [<81a28760>] (__schedule_loop kernel/sched/core.c:6863 [inline]) [<81a277d8>] (__schedule) from [<81a28760>] (schedule+0x2c/0x130 kernel/sched/core.c:6878) r10:dff61b64 r9:841d6000 r8:8280586c r7:82804f00 r6:ddeb93e4 r5:00000000 r4:841d6000 [<81a28734>] (schedule) from [<81a2889c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7723) r5:00000000 r4:841d6000 [<81a28864>] (io_schedule) from [<804702ec>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8047014c>] (folio_wait_bit_common) from [<804743a4>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8047014c>] (folio_wait_bit_common) from [<804743a4>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082b4f8 r6:00000000 r5:8357d030 r4:ddeb93e4 [<8047430c>] (do_read_cache_folio) from [<80474570>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf09e0 r8:859a7c80 r7:829fa54a r6:80854a2c r5:00000000 r4:00000000 r3:00000000 [<80474554>] (read_cache_folio) from [<8085481c>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<80474554>] (read_cache_folio) from [<8085481c>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<808547c8>] (read_part_sector) from [<80854a78>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:859a7c80 [<80854a2c>] (msdos_partition) from [<80854194>] (check_partition block/partitions/core.c:141 [inline]) [<80854a2c>] (msdos_partition) from [<80854194>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<80854a2c>] (msdos_partition) from [<80854194>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf09e0 r8:00000000 r7:829fa54a r6:80854a2c r5:83b51e00 r4:859a7c80 [<80853edc>] (bdev_disk_changed) from [<8082a0e8>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83b51edc r9:00000000 r8:00000001 r7:00000001 r6:83b51e00 r5:00000000 r4:8357ccc0 [<8082a040>] (blkdev_get_whole) from [<8082ab3c>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83b51e00 r6:00000000 r5:00000000 r4:8357ccc0 [<8082a904>] (bdev_open) from [<8082cb30>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:8474ac00 r9:00000000 r8:8474ac28 r7:00000001 r6:8474ac00 r5:00000000 r4:8357ccc0 [<8082ca84>] (blkdev_open) from [<80550034>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082ca84 r6:83b56058 r5:00000000 r4:8474ac00 [<8054fec0>] (do_dentry_open) from [<80551e0c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dff61e58 r7:00000000 r6:8474ac28 r5:82920ba0 r4:8474ac00 [<80551de0>] (vfs_open) from [<8056a744>] (do_open fs/namei.c:3896 [inline]) [<80551de0>] (vfs_open) from [<8056a744>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dff61f20 r5:82920ba0 r4:00000100 [<8056a438>] (path_openat) from [<8056b634>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:832ff000 r8:00000001 r7:dff61e58 r6:dff61f20 r5:841d6000 r4:ffffff9c [<8056b588>] (do_filp_open) from [<80552310>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:841d6000 r8:8020029c r7:ffffff9c r6:dff61f58 r5:832ff000 r4:00000006 [<80552280>] (do_sys_openat2) from [<80552738>] (do_sys_open fs/open.c:1452 [inline]) [<80552280>] (do_sys_openat2) from [<80552738>] (__do_sys_openat fs/open.c:1468 [inline]) [<80552280>] (do_sys_openat2) from [<80552738>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76b3fab0 r4:ffffff9c [<805526a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdff61fa8 to 0xdff61ff0) 1fa0: 00000100 76b3fab0 ffffff9c 76b3fab0 00000100 00000000 1fc0: 00000100 76b3fab0 00000000 00000142 00000000 00000000 00006364 76b400bc 1fe0: 81010101 76b3fa68 000d7d50 0012fd18 r5:76b3fab0 r4:00000100 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:000f0013 r5:600f0093 r4:822599f8 [<80201ae4>] (show_stack) from [<8021fdf0>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021fdf0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fd80>] (dump_stack_lvl) from [<8021fe14>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000001 r4:00000001 [<8021fdfc>] (dump_stack) from [<81a116f4>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a11594>] (nmi_cpu_backtrace) from [<81a11840>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c690 r5:8281af40 r4:ffffffff [<81a11710>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8280c80c r8:82ab2564 r7:8281bb28 r6:00007f2d r5:8281b508 r4:8708510c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d9c>] (trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d9c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<80380d9c>] (watchdog+0x4a8/0x74c kernel/hung_task.c:470) [<803808f4>] (watchdog) from [<80285f5c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:00000000 r8:803808f4 r7:8329e300 r6:8329e300 r5:832dc800 r4:00000001 [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 r4:8338b180 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2806 Comm: pr/ttyAMA0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a30cd4>] lr : [<80a71850>] psr: 60070113 sp : eb9c5eb0 ip : eb9c5ec0 fp : eb9c5ebc r10: 8295a1cc r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 8295a130 r5 : 00000000 r4 : 00000001 r3 : 00000b1d r2 : 00000000 r1 : 60070113 r0 : 840f5440 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 85a35b40 DAC: fffffffd Call trace: [<81a30cac>] (_raw_spin_unlock_irqrestore) from [<80a71850>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a30cac>] (_raw_spin_unlock_irqrestore) from [<80a71850>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a30cac>] (_raw_spin_unlock_irqrestore) from [<80a71850>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a71830>] (pl011_console_device_unlock) from [<802e7e64>] (nbcon_emit_one+0x80/0xf8 kernel/printk/nbcon.c:1123) [<802e7de4>] (nbcon_emit_one) from [<802e8084>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1210) r6:8280c690 r5:8452e000 r4:8295a130 [<802e7edc>] (nbcon_kthread_func) from [<80285f5c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:8295a130 r8:802e7edc r7:845ad680 r6:845ad680 r5:8452e000 r4:00000001 [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb9c5fb0 to 0xeb9c5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 r4:838b0800