INFO: task hung in sdio_reset

Status: upstream: reported on 2026/08/27 05:59
Subsystems: mmc
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+e8678cd3d8b65d1f2c74@syzkaller.appspotmail.com
First crash: 60d, last: 2h19m
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
86b3fb5f repro-c 💥 INFO: task hung in sdio_reset 2026/08/31 20:53 2026/08/31 20:56 2026/08/31 23:26 2f52988a
433d4921 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ INFO: task hung in sdio_reset 2026/08/18 00:15 2026/08/18 00:15 2026/08/18 01:01 1e72964b
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly mmc report (Oct 2026) 0 (1) 2026/10/04 04:33
[syzbot] [kernel?] INFO: task hung in sdio_reset 0 (1) 2026/08/27 05:59
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in sdio_reset 1 4 40d 72d 0/3 upstream: reported on 2026/08/05 01:45
linux-6.6 INFO: task hung in sdio_reset 1 2 30d 43d 0/2 upstream: reported on 2026/09/02 22:08
linux-5.15 INFO: task hung in sdio_reset 1 1 14d 14d 0/3 upstream: reported on 2026/10/01 10:34

Sample crash report:
INFO: task kworker/1:1:44 blocked for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:20928 pid:44    tgid:44    ppid:2      task_flags:0x4208160 flags:0x00080000
Workqueue: events_freezable mmc_rescan
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common kernel/sched/completion.c:121 [inline]
 wait_for_common kernel/sched/completion.c:132 [inline]
 wait_for_completion+0x2ca/0x5e0 kernel/sched/completion.c:153
 mmc_wait_for_req_done+0x37/0x490 drivers/mmc/core/core.c:408
 mmc_wait_for_cmd+0x183/0x2a0 drivers/mmc/core/core.c:645
 mmc_io_rw_direct_host drivers/mmc/core/sdio_ops.c:83 [inline]
 sdio_reset+0xf4/0x3a0 drivers/mmc/core/sdio_ops.c:209
 mmc_rescan_try_freq drivers/mmc/core/core.c:2121 [inline]
 mmc_rescan+0x6eb/0x1040 drivers/mmc/core/core.c:2316
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/1:2:990 blocked for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:2     state:D stack:21552 pid:990   tgid:990   ppid:2      task_flags:0x4288160 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common kernel/sched/completion.c:121 [inline]
 wait_for_common kernel/sched/completion.c:132 [inline]
 wait_for_completion+0x2ca/0x5e0 kernel/sched/completion.c:153
 __flush_work+0xa63/0xca0 kernel/workqueue.c:4448
 __cancel_work_sync+0xbf/0x110 kernel/workqueue.c:4568
 __mmc_stop_host drivers/mmc/core/core.c:2368 [inline]
 mmc_stop_host+0xd9/0x460 drivers/mmc/core/core.c:2373
 mmc_remove_host+0x15/0x60 drivers/mmc/core/host.c:681
 vub300_disconnect+0x154/0x2f0 drivers/mmc/host/vub300.c:2387
 usb_unbind_interface+0x295/0x9f0 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:618 [inline]
 __device_release_driver drivers/base/dd.c:1349 [inline]
 device_release_driver_internal+0x4f5/0x880 drivers/base/dd.c:1372
 bus_remove_device+0x444/0x560 drivers/base/bus.c:664
 device_del+0x524/0x8f0 drivers/base/core.c:3965
 usb_disable_device+0x3d4/0x8d0 drivers/usb/core/message.c:1484
 usb_disconnect+0x346/0x9a0 drivers/usb/core/hub.c:2355
 hub_port_connect drivers/usb/core/hub.c:5425 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5725 [inline]
 port_event drivers/usb/core/hub.c:5889 [inline]
 hub_event+0x1bbb/0x4d30 drivers/usb/core/hub.c:5971
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
locks held by pr/ttyS0/16: 2, last CPU#1:
 #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:314 [inline]
 #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:439 [inline]
 #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 kernel/printk/printk.c:291
 #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: __uart_port_lock_irqsave include/linux/serial_core.h:613 [inline]
 #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 drivers/tty/serial/8250/8250_core.c:413
locks held by khungtaskd/31: 1, last CPU#0:
 #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/1:1/44: 2, on CPU#1:
 #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000b47c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000b47c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000b47c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000b47c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:6/203: 5, last CPU#0:
 #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003027c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003027c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003027c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003027c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 kernel/jump_label.c:222
 #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline]
 #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 kernel/jump_label.c:207
 #4: ffffffff8fbff760 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145
locks held by kworker/1:2/990: 5, on CPU#1:
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000490fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000490fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000490fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000490fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff88802b4cc1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff88802b4cc1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 drivers/usb/core/hub.c:2346
 #4: ffff88801d3331a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88801d3331a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline]
 #4: ffff88801d3331a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369
locks held by udevd/4985: 2, last CPU#0:
 #0: ffff888031db2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:527
 #1: ffff88802e257b28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1069 [inline]
 #1: ffff88802e257b28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2947 [inline]
 #1: ffff88802e257b28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2971 [inline]
 #1: ffff88802e257b28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 fs/namei.c:5729
locks held by getty/5372: 2, on CPU#0:
 #0: ffff888032eb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-executor/5602: 1, last CPU#0:
 #0: ffff888036add900 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:600 [inline]
 #0: ffff888036add900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 mm/mmap.c:1299
locks held by syz.4.2472/15792: 1, on CPU#0:
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 drivers/usb/core/devio.c:1054
locks held by syz.6.2551/16103: 1, on CPU#1:
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 drivers/usb/core/devio.c:1054
locks held by syz.9.2708/16945: 1, on CPU#1:
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 drivers/usb/core/devio.c:1054
locks held by kworker/0:10/17129: 5, on CPU#0:
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888023ed1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90005a9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90005a9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90005a9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90005a9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802a6901d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff88802a6901d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 drivers/usb/core/hub.c:5917
 #3: ffff8880242a51d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #3: ffff8880242a51d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
 #4: ffff88802b5931a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #4: ffff88802b5931a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 drivers/base/dd.c:1073
locks held by syz.7.2755/17147: 1, on CPU#0:
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 drivers/usb/core/devio.c:1054
locks held by syz.2.2834/17667: 1, on CPU#1:
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #0: ffff88802a91b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 drivers/usb/core/devio.c:1054
locks held by syz.5.2873/17961: 4, last CPU#0:
 #0: ffff8880487accc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:619 [inline]
 #0: ffff8880487accc0 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/mmap_lock.c:441 [inline]
 #0: ffff8880487accc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 mm/mmap_lock.c:501
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_fault_around mm/memory.c:5957 [inline]
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_read_fault mm/memory.c:5991 [inline]
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_fault mm/memory.c:6134 [inline]
 #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 mm/memory.c:4700
 #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 mm/filemap.c:3921
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 mm/pgtable-generic.c:290
locks held by syz-executor/17959: 4, last CPU#0:
 #0: ffffffff8fe36570 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1542 [inline]
 #0: ffffffff8fe36570 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 kernel/fork.c:1595
 #1: ffff88807b63c080 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline]
 #1: ffff88807b63c080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 mm/mmap.c:1716
 #2: ffff88807b639bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:552 [inline]
 #2: ffff88807b639bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 mm/mmap.c:1723
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 mm/pgtable-generic.c:290
locks held by syz.1.2875/17962: 1, on CPU#0:
 #0: ffff88802d875e10 (&dev->mutex#3){+.+.}-{4:4}, at: vb2_fop_write+0x11a/0x340 drivers/media/common/videobuf2/videobuf2-v4l2.c:1173

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:409
Code: e8 3e 6d 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f 4d c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
RSP: 0000:ffffc900001578b8 EFLAGS: 00000002
RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000
RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: ffffffff8574a2e0 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff403bebc40 CR3: 0000000063538000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000005 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 serial_in drivers/tty/serial/8250/8250.h:128 [inline]
 serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline]
 wait_for_lsr+0x184/0x2f0 drivers/tty/serial/8250/8250_port.c:2013
 serial8250_fifo_wait_for_lsr_thre drivers/tty/serial/8250/8250_port.c:3270 [inline]
 __serial8250_console_fifo_write+0xcd/0x3e0 drivers/tty/serial/8250/8250_port.c:3345
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline]
 __serial8250_console_write drivers/tty/serial/8250/8250_port.c:3432 [inline]
 serial8250_console_write+0xa7e/0x1200 drivers/tty/serial/8250/8250_port.c:3496
 nbcon_emit_next_record+0xef5/0x1a90 kernel/printk/nbcon.c:-1
 nbcon_emit_one kernel/printk/nbcon.c:1157 [inline]
 nbcon_kthread_func+0x679/0x880 kernel/printk/nbcon.c:1271
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (462):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/16 01:44 upstream 0fcb05b72344 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/15 08:34 upstream 4056b3c9d3c9 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in sdio_reset
2026/10/15 07:31 upstream 4056b3c9d3c9 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in sdio_reset
2026/10/15 04:18 upstream 4056b3c9d3c9 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in sdio_reset
2026/10/13 08:12 upstream 24a19b953e2a 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/12 04:46 upstream b88c841d1164 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/10 23:52 upstream 3857c2fe5449 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/08 17:55 upstream 7b63ef2d55f2 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/07 07:01 upstream 69f80fef3153 f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/06 20:54 upstream 69f80fef3153 f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in sdio_reset
2026/10/06 04:27 upstream 67f0943b394d f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/04 20:19 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/04 00:36 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/10/03 03:19 upstream ce1e0223d8ad 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in sdio_reset
2026/08/31 15:21 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/08/26 22:32 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in sdio_reset
2026/08/23 05:53 upstream 66fb95a52111 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sdio_reset
2026/08/17 21:55 upstream 8d3ae59288f1 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in sdio_reset
2026/10/10 00:11 upstream af32da41b032 a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in sdio_reset
2026/10/16 05:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04ac7b445880 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/16 00:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04ac7b445880 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/15 21:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 04ac7b445880 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/15 10:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/14 17:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/14 07:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/13 17:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/13 14:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/13 09:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/12 14:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/12 10:10 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/12 06:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/12 02:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bbf6b99a57b2 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/11 18:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8f0d16174102 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/11 02:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 21:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 18:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 16:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 11:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 10:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 08:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/10 06:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/09 22:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 648b08aa37c1 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/09 07:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/08 23:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/08 13:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/08 01:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/07 18:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/07 11:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 42bcac323cc3 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/05 21:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5926a7da8789 af63e995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/05 14:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5926a7da8789 af63e995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/04 22:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 639df5d23876 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/10/04 12:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 639df5d23876 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
2026/09/18 21:48 linux-next 9d80aa4617b3 8d7d05f1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce INFO: task hung in sdio_reset
2026/09/09 06:27 linux-next a9d7ced84989 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in sdio_reset
2026/08/16 13:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bdab5605259b 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in sdio_reset
* Struck through repros no longer work on HEAD.