INFO: task syz.2.170:4794 blocked for more than 430 seconds. Not tainted 6.16.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.170 state:D stack:0 pid:4794 tgid:4793 ppid:4094 task_flags:0x400140 flags:0x00000001 Call trace: [<81a30258>] (__schedule) from [<81a311e0>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a30258>] (__schedule) from [<81a311e0>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:83bcd0e0 r9:dfbc5e1c r8:00000002 r7:60000013 r6:dfbc5e24 r5:84f0a400 r4:84f0a400 [<81a311b4>] (schedule) from [<81a315c8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6936) r5:84f0a400 r4:83bcd0dc [<81a315b0>] (schedule_preempt_disabled) from [<81a33cac>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81a315b0>] (schedule_preempt_disabled) from [<81a33cac>] (__mutex_lock.constprop.0+0x300/0x6f8 kernel/locking/mutex.c:747) [<81a339ac>] (__mutex_lock.constprop.0) from [<81a34178>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:00000036 r9:83bcd0dc r8:8357a640 r7:00000000 r6:83bcd000 r5:85a8c540 r4:8357a8a8 [<81a34164>] (__mutex_lock_slowpath) from [<81a341b8>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:278) [<81a3417c>] (mutex_lock) from [<8082a630>] (bdev_release+0x58/0x1a0 block/bdev.c:1128) [<8082a5d8>] (bdev_release) from [<8082ac60>] (blkdev_release+0x14/0x1c block/fops.c:684) r9:84f0a400 r8:85827d90 r7:83bca258 r6:834d1b28 r5:0c4a001d r4:85a8c540 [<8082ac4c>] (blkdev_release) from [<805569fc>] (__fput+0xd8/0x2ec fs/file_table.c:465) [<80556924>] (__fput) from [<80556ca4>] (____fput+0x14/0x18 fs/file_table.c:493) r9:84f0a400 r8:82a6e6a0 r7:84f0a400 r6:84f0ac94 r5:84f0ac64 r4:00000000 [<80556c90>] (____fput) from [<80283eb4>] (task_work_run+0x90/0xb8 kernel/task_work.c:227) [<80283e24>] (task_work_run) from [<8022bc18>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]) [<80283e24>] (task_work_run) from [<8022bc18>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631) r9:84f0a400 r8:8020029c r7:00000036 r6:8020029c r5:dfbc5fb0 r4:84f0a400 [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdfbc5fb0 to 0xdfbc5ff8) 5fa0: 00000000 0000ab03 00000000 00000000 5fc0: 00000000 00000000 002f62fc 00000036 002e0000 00000000 00006364 76b130bc 5fe0: 76b12ec0 76b12eb0 000193a4 00131f40 60000010 00000003 r10:00000036 r9:84f0a400 r8:8020029c r7:00000036 r6:002f62fc r5:00000000 r4:00000000 INFO: task syz.2.170:4794 is blocked on a mutex likely owned by task syz.2.170:4805. task:syz.2.170 state:D stack:0 pid:4805 tgid:4793 ppid:4094 task_flags:0x400040 flags:0x00000001 Call trace: [<81a30258>] (__schedule) from [<81a311e0>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a30258>] (__schedule) from [<81a311e0>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:dfb91b64 r9:84f0bc00 r8:8280556c r7:82804f00 r6:ddec4898 r5:00000000 r4:84f0bc00 [<81a311b4>] (schedule) from [<81a3131c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7724) r5:00000000 r4:84f0bc00 [<81a312e4>] (io_schedule) from [<8046f4e0>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8046f340>] (folio_wait_bit_common) from [<80473598>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8046f340>] (folio_wait_bit_common) from [<80473598>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082abc0 r6:00000000 r5:8357a9b0 r4:ddec4898 [<80473500>] (do_read_cache_folio) from [<80473764>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf0be0 r8:858fd7c0 r7:829facc3 r6:80854014 r5:00000000 r4:00000000 r3:00000000 [<80473748>] (read_cache_folio) from [<80853e04>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<80473748>] (read_cache_folio) from [<80853e04>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<80853db0>] (read_part_sector) from [<80854060>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:858fd7c0 [<80854014>] (msdos_partition) from [<8085377c>] (check_partition block/partitions/core.c:141 [inline]) [<80854014>] (msdos_partition) from [<8085377c>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<80854014>] (msdos_partition) from [<8085377c>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf0be0 r8:00000000 r7:829facc3 r6:80854014 r5:83bcd000 r4:858fd7c0 [<808534c4>] (bdev_disk_changed) from [<808297b0>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83bcd0dc r9:00000000 r8:00000001 r7:00000001 r6:83bcd000 r5:00000000 r4:8357a640 [<80829708>] (blkdev_get_whole) from [<8082a204>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83bcd000 r6:00000000 r5:00000000 r4:8357a640 [<80829fcc>] (bdev_open) from [<8082c1f8>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:85a8c3c0 r9:00000000 r8:85a8c3e8 r7:00000001 r6:85a8c3c0 r5:00000000 r4:8357a640 [<8082c14c>] (blkdev_open) from [<8054f254>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082c14c r6:83bca258 r5:00000000 r4:85a8c3c0 [<8054f0e0>] (do_dentry_open) from [<8055102c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfb91e58 r7:00000000 r6:85a8c3e8 r5:82920b60 r4:85a8c3c0 [<80551000>] (vfs_open) from [<80569964>] (do_open fs/namei.c:3896 [inline]) [<80551000>] (vfs_open) from [<80569964>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dfb91f20 r5:82920b60 r4:00000100 [<80569658>] (path_openat) from [<8056a854>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:83253000 r8:00000001 r7:dfb91e58 r6:dfb91f20 r5:84f0bc00 r4:ffffff9c [<8056a7a8>] (do_filp_open) from [<80551530>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:84f0bc00 r8:8020029c r7:ffffff9c r6:dfb91f58 r5:83253000 r4:00000006 [<805514a0>] (do_sys_openat2) from [<80551958>] (do_sys_open fs/open.c:1452 [inline]) [<805514a0>] (do_sys_openat2) from [<80551958>] (__do_sys_openat fs/open.c:1468 [inline]) [<805514a0>] (do_sys_openat2) from [<80551958>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76af1ab0 r4:ffffff9c [<805518c0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfb91fa8 to 0xdfb91ff0) 1fa0: 00000100 76af1ab0 ffffff9c 76af1ab0 00000100 00000000 1fc0: 00000100 76af1ab0 00000000 00000142 00000000 00000000 00006364 76af20bc 1fe0: 81010101 76af1a68 000d7d70 0012fd38 r5:76af1ab0 r4:00000100 INFO: task syz.2.170:4805 blocked for more than 430 seconds. Not tainted 6.16.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.170 state:D stack:0 pid:4805 tgid:4793 ppid:4094 task_flags:0x400040 flags:0x00000001 Call trace: [<81a30258>] (__schedule) from [<81a311e0>] (__schedule_loop kernel/sched/core.c:6864 [inline]) [<81a30258>] (__schedule) from [<81a311e0>] (schedule+0x2c/0x130 kernel/sched/core.c:6879) r10:dfb91b64 r9:84f0bc00 r8:8280556c r7:82804f00 r6:ddec4898 r5:00000000 r4:84f0bc00 [<81a311b4>] (schedule) from [<81a3131c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7724) r5:00000000 r4:84f0bc00 [<81a312e4>] (io_schedule) from [<8046f4e0>] (folio_wait_bit_common+0x1a0/0x3ac mm/filemap.c:1317) r5:00000002 r4:00000000 [<8046f340>] (folio_wait_bit_common) from [<80473598>] (folio_put_wait_locked mm/filemap.c:1481 [inline]) [<8046f340>] (folio_wait_bit_common) from [<80473598>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3876) r10:00000400 r9:00080001 r8:00000000 r7:8082abc0 r6:00000000 r5:8357a9b0 r4:ddec4898 [<80473500>] (do_read_cache_folio) from [<80473764>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3926) r10:00000400 r9:81cf0be0 r8:858fd7c0 r7:829facc3 r6:80854014 r5:00000000 r4:00000000 r3:00000000 [<80473748>] (read_cache_folio) from [<80853e04>] (read_mapping_folio include/linux/pagemap.h:972 [inline]) [<80473748>] (read_cache_folio) from [<80853e04>] (read_part_sector+0x54/0xcc block/partitions/core.c:722) [<80853db0>] (read_part_sector) from [<80854060>] (msdos_partition+0x4c/0xa7c block/partitions/msdos.c:592) r5:00000000 r4:858fd7c0 [<80854014>] (msdos_partition) from [<8085377c>] (check_partition block/partitions/core.c:141 [inline]) [<80854014>] (msdos_partition) from [<8085377c>] (blk_add_partitions block/partitions/core.c:589 [inline]) [<80854014>] (msdos_partition) from [<8085377c>] (bdev_disk_changed+0x2b8/0x694 block/partitions/core.c:693) r10:00000000 r9:81cf0be0 r8:00000000 r7:829facc3 r6:80854014 r5:83bcd000 r4:858fd7c0 [<808534c4>] (bdev_disk_changed) from [<808297b0>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:748) r10:83bcd0dc r9:00000000 r8:00000001 r7:00000001 r6:83bcd000 r5:00000000 r4:8357a640 [<80829708>] (blkdev_get_whole) from [<8082a204>] (bdev_open+0x238/0x3f8 block/bdev.c:957) r7:83bcd000 r6:00000000 r5:00000000 r4:8357a640 [<80829fcc>] (bdev_open) from [<8082c1f8>] (blkdev_open+0xac/0x108 block/fops.c:676) r10:85a8c3c0 r9:00000000 r8:85a8c3e8 r7:00000001 r6:85a8c3c0 r5:00000000 r4:8357a640 [<8082c14c>] (blkdev_open) from [<8054f254>] (do_dentry_open+0x174/0x630 fs/open.c:964) r7:8082c14c r6:83bca258 r5:00000000 r4:85a8c3c0 [<8054f0e0>] (do_dentry_open) from [<8055102c>] (vfs_open+0x2c/0xe8 fs/open.c:1094) r8:dfb91e58 r7:00000000 r6:85a8c3e8 r5:82920b60 r4:85a8c3c0 [<80551000>] (vfs_open) from [<80569964>] (do_open fs/namei.c:3896 [inline]) [<80551000>] (vfs_open) from [<80569964>] (path_openat+0x30c/0x1150 fs/namei.c:4055) r6:dfb91f20 r5:82920b60 r4:00000100 [<80569658>] (path_openat) from [<8056a854>] (do_filp_open+0xac/0x148 fs/namei.c:4082) r10:00000142 r9:83253000 r8:00000001 r7:dfb91e58 r6:dfb91f20 r5:84f0bc00 r4:ffffff9c [<8056a7a8>] (do_filp_open) from [<80551530>] (do_sys_openat2+0x90/0xe0 fs/open.c:1437) r9:84f0bc00 r8:8020029c r7:ffffff9c r6:dfb91f58 r5:83253000 r4:00000006 [<805514a0>] (do_sys_openat2) from [<80551958>] (do_sys_open fs/open.c:1452 [inline]) [<805514a0>] (do_sys_openat2) from [<80551958>] (__do_sys_openat fs/open.c:1468 [inline]) [<805514a0>] (do_sys_openat2) from [<80551958>] (sys_openat+0x98/0xd4 fs/open.c:1463) r7:00000142 r6:00000000 r5:76af1ab0 r4:ffffff9c [<805518c0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfb91fa8 to 0xdfb91ff0) 1fa0: 00000100 76af1ab0 ffffff9c 76af1ab0 00000100 00000000 1fc0: 00000100 76af1ab0 00000000 00000142 00000000 00000000 00006364 76af20bc 1fe0: 81010101 76af1a68 000d7d70 0012fd38 r5:76af1ab0 r4:00000100 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8225c260 [<80201ae4>] (show_stack) from [<8021fe00>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<8021fe0c>] (dump_stack) from [<81a1a178>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a1a018>] (nmi_cpu_backtrace) from [<81a1a2c4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8280c690 r5:8281af40 r4:ffffffff [<81a1a194>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8280c80c r8:82ab3564 r7:8281bb28 r6:00007f17 r5:8281b508 r4:85c6ff0c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037ff64>] (trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037ff64>] (check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037ff64>] (watchdog+0x4a8/0x74c kernel/hung_task.c:470) [<8037fabc>] (watchdog) from [<80285f1c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:00000000 r8:8037fabc r7:83387600 r6:83387600 r5:8324e000 r4:00000001 [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 r4:8338a340 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2822 Comm: pr/ttyAMA0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603 pc : [<81a39754>] lr : [<80a70e8c>] psr: 60000013 sp : eb81deb0 ip : eb81dec0 fp : eb81debc r10: 8295a38c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 8295a2f0 r5 : 00000000 r4 : 00000001 r3 : 0000071e r2 : 00000000 r1 : 60000013 r0 : 84218040 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 85607a00 DAC: 00000000 Call trace: [<81a3972c>] (_raw_spin_unlock_irqrestore) from [<80a70e8c>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<81a3972c>] (_raw_spin_unlock_irqrestore) from [<80a70e8c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81a3972c>] (_raw_spin_unlock_irqrestore) from [<80a70e8c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80a70e6c>] (pl011_console_device_unlock) from [<802e7e24>] (nbcon_emit_one+0x80/0xf8 kernel/printk/nbcon.c:1123) [<802e7da4>] (nbcon_emit_one) from [<802e8044>] (nbcon_kthread_func+0x1a8/0x2a4 kernel/printk/nbcon.c:1210) r6:8280c690 r5:83aaec00 r4:8295a2f0 [<802e7e9c>] (nbcon_kthread_func) from [<80285f1c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:8295a2f0 r8:802e7e9c r7:84739f80 r6:84739f80 r5:83aaec00 r4:00000001 [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb81dfb0 to 0xeb81dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 r4:83facc80