INFO: task syz.0.632:8264 blocked for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.632 state:D stack:28184 pid:8264 tgid:8263 ppid:5807 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061
__mutex_lock_common kernel/locking/mutex.c:692 [inline]
__mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
bdev_open+0x41a/0xe40 block/bdev.c:961
blkdev_open+0x34e/0x4f0 block/fops.c:698
do_dentry_open+0x6d8/0x1660 fs/open.c:949
vfs_open+0x82/0x3f0 fs/open.c:1081
do_open fs/namei.c:4671 [inline]
path_openat+0x208c/0x31a0 fs/namei.c:4830
do_file_open+0x20e/0x430 fs/namei.c:4859
do_sys_openat2+0x10d/0x1e0 fs/open.c:1366
do_sys_open fs/open.c:1372 [inline]
__do_sys_openat fs/open.c:1388 [inline]
__se_sys_openat fs/open.c:1383 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1383
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f420a75c84e
RSP: 002b:00007f420b580b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f420b5816c0 RCX: 00007f420a75c84e
RDX: 0000000000000000 RSI: 00007f420b580c00 RDI: ffffffffffffff9c
RBP: 00007f420b580c00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007f420aa16038 R14: 00007f420aa15fa0 R15: 00007ffeb8ff8e68
Showing all locks held in the system:
1 lock held by ksoftirqd/1/23:
1 lock held by khungtaskd/31:
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:4/58:
#0: ffff88801caca148 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250
#1: ffffc900015f7d08 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251
#2: ffff88802b8ea220 (&dev->power.lock){-...}-{3:3}, at: spin_lock_irq include/linux/spinlock.h:371 [inline]
#2: ffff88802b8ea220 (&dev->power.lock){-...}-{3:3}, at: rpm_idle+0x6e7/0x7c0 drivers/base/power/runtime.c:555
2 locks held by getty/5560:
#0: ffff8880379e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211
1 lock held by udevd/6003:
#0: ffff888028164358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:961
1 lock held by syz.0.632/8264:
#0: ffff888028164358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:961
1 lock held by sed/10648:
#0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:655 [inline]
#0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:639
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xd25/0x1050 kernel/hung_task.c:515
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 10653 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:mark_held_locks+0x44/0x70 kernel/locking/lockdep.c:4313
Code: 9f 18 0b 00 00 0f b6 43 22 89 c2 83 e2 03 80 fa 01 44 89 e2 83 da ff a8 04 74 0f 48 89 de 4c 89 ef e8 90 f5 ff ff 85 c0 74 15 <83> c5 01 48 83 c3 28 41 39 ad 10 0b 00 00 7f cb b8 01 00 00 00 5b
RSP: 0018:ffffc90004f8f6c8 EFLAGS: 00000002
RAX: 0000000000000001 RBX: ffff8880226c2fc0 RCX: 0000000000000040
RDX: 0000000000000000 RSI: ffff8880226c2fc0 RDI: ffff8880226c2480
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000006
R13: ffff8880226c2480 R14: 0000000000000000 R15: ffff88807adf63c0
FS: 0000000000000000(0000) GS:ffff88812444d000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0d64cad286 CR3: 00000000455e6000 CR4: 00000000003526f0
DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004
DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
__trace_hardirqs_on_caller kernel/locking/lockdep.c:4351 [inline]
lockdep_hardirqs_on_prepare kernel/locking/lockdep.c:4410 [inline]
lockdep_hardirqs_on_prepare+0xf3/0x1b0 kernel/locking/lockdep.c:4362
trace_hardirqs_on+0x36/0x40 kernel/trace/trace_preemptirq.c:78
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline]
_raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:194
__debug_check_no_obj_freed lib/debugobjects.c:1108 [inline]
debug_check_no_obj_freed+0x31f/0x630 lib/debugobjects.c:1129
slab_free_hook mm/slub.c:2618 [inline]
slab_free mm/slub.c:6124 [inline]
kmem_cache_free+0x3c8/0x6a0 mm/slub.c:6254
exit_mmap+0x58e/0xdd0 mm/mmap.c:1302
__mmput+0x12a/0x410 kernel/fork.c:1174
mmput+0x67/0x80 kernel/fork.c:1197
exec_mmap fs/exec.c:893 [inline]
begin_new_exec+0x10f0/0x38a0 fs/exec.c:1148
load_elf_binary+0x8f1/0x51b0 fs/binfmt_elf.c:1010
search_binary_handler fs/exec.c:1664 [inline]
exec_binprm fs/exec.c:1696 [inline]
bprm_execve fs/exec.c:1748 [inline]
bprm_execve+0x8fb/0x1680 fs/exec.c:1724
do_execveat_common.isra.0+0x4a5/0x580 fs/exec.c:1846
__do_sys_execve fs/exec.c:1930 [inline]
__se_sys_execve fs/exec.c:1924 [inline]
__x64_sys_execve+0x93/0xd0 fs/exec.c:1924
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0d64bf3107
Code: Unable to access opcode bytes at 0x7f0d64bf30dd.
RSP: 002b:00007ffd1ef00bb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 0000558db27cbf50 RCX: 00007f0d64bf3107
RDX: 0000558db27cbf78 RSI: 0000558db27cbf50 RDI: 0000558db27cc030
RBP: 0000558db27cc030 R08: 00007ffd1ef06e16 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 0000558db27cbf78
R13: 00007f0d64db8e8b R14: 0000558db27cbf78 R15: 0000000000000000