syzbot

INFO: task udevd:5067 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:20592 pid:5067  tgid:5067  ppid:4532   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x1796/0x49d0 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 bdev_open+0xe5/0xc60 block/bdev.c:897
 blkdev_open+0x20d/0x2e0 block/fops.c:615
 do_dentry_open+0x95a/0x1720 fs/open.c:955
 do_open fs/namei.c:3650 [inline]
 path_openat+0x289f/0x3280 fs/namei.c:3807
 do_filp_open+0x235/0x490 fs/namei.c:3834
 do_sys_openat2+0x13e/0x1d0 fs/open.c:1405
 do_sys_open fs/open.c:1420 [inline]
 __do_sys_openat fs/open.c:1436 [inline]
 __se_sys_openat fs/open.c:1431 [inline]
 __x64_sys_openat+0x247/0x2a0 fs/open.c:1431
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2022f169a4
RSP: 002b:00007fff833de980 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000055c6b1526ba0 RCX: 00007f2022f169a4
RDX: 00000000000a0800 RSI: 000055c6b15126b0 RDI: 00000000ffffff9c
RBP: 000055c6b15126b0 R08: 0000000000000001 R09: 7fffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
R13: 000055c6b1524250 R14: 0000000000000001 R15: 000055c6b1511910
 </TASK>
INFO: task syz.2.407:6856 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.407       state:D stack:24672 pid:6856  tgid:6856  ppid:6303   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x1796/0x49d0 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 bdev_release+0x184/0x700 block/bdev.c:1080
 blkdev_release+0x15/0x20 block/fops.c:623
 __fput+0x406/0x8b0 fs/file_table.c:422
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218
 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f614d975ae9
RSP: 002b:00007ffe0260ba18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f614db059a0 RCX: 00007f614d975ae9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f614db059a0 R08: 0000000000000006 R09: 0000001a0260bd2f
R10: 00000000005cdc38 R11: 0000000000000246 R12: 0000000000038176
R13: 0000000000000032 R14: 00007f614db059a0 R15: 00007f614db04140
 </TASK>
INFO: task syz.2.407:6857 blocked for more than 144 seconds.
      Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.407       state:D stack:27328 pid:6857  tgid:6856  ppid:6303   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x1796/0x49d0 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 bdev_release+0x184/0x700 block/bdev.c:1080
 blkdev_release+0x15/0x20 block/fops.c:623
 __fput+0x406/0x8b0 fs/file_table.c:422
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218
 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f614d975ae9
RSP: 002b:00007f614e67f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007f614db03fa0 RCX: 00007f614d975ae9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005
RBP: 00007f614d9f6746 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f614db03fa0 R15: 00007ffe0260b938
 </TASK>
INFO: task syz.2.407:6858 blocked for more than 144 seconds.
      Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.407       state:D stack:21472 pid:6858  tgid:6856  ppid:6303   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x1796/0x49d0 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 io_schedule+0x8d/0x110 kernel/sched/core.c:9043
 folio_wait_bit_common+0x882/0x12b0 mm/filemap.c:1307
 folio_put_wait_locked mm/filemap.c:1471 [inline]
 do_read_cache_folio+0xb9/0x820 mm/filemap.c:3770
 read_mapping_folio include/linux/pagemap.h:906 [inline]
 read_part_sector+0xb3/0x330 block/partitions/core.c:712
 adfspart_check_POWERTEC+0xc8/0x8f0 block/partitions/acorn.c:454
 check_partition block/partitions/core.c:138 [inline]
 blk_add_partitions block/partitions/core.c:579 [inline]
 bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683
 blkdev_get_whole+0x315/0x470 block/bdev.c:700
 bdev_open+0x2e9/0xc60 block/bdev.c:909
 blkdev_open+0x20d/0x2e0 block/fops.c:615
 do_dentry_open+0x95a/0x1720 fs/open.c:955
 do_open fs/namei.c:3650 [inline]
 path_openat+0x289f/0x3280 fs/namei.c:3807
 do_filp_open+0x235/0x490 fs/namei.c:3834
 do_sys_openat2+0x13e/0x1d0 fs/open.c:1405
 do_sys_open fs/open.c:1420 [inline]
 __do_sys_openat fs/open.c:1436 [inline]
 __se_sys_openat fs/open.c:1431 [inline]
 __x64_sys_openat+0x247/0x2a0 fs/open.c:1431
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f614d974550
RSP: 002b:00007f614e65db80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f614d974550
RDX: 0000000000000000 RSI: 00007f614e65dc20 RDI: 00000000ffffff9c
RBP: 00007f614e65dc20 R08: 0000000000000000 R09: 002364626e2f7665
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 000000000000006e R14: 00007f614db04070 R15: 00007ffe0260b938
 </TASK>

Showing all locks held in the system:
1 lock held by pool_workqueue_/3:
1 lock held by khungtaskd/30:
 #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
 #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
 #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
2 locks held by getty/4830:
 #0: ffff88802a58b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2211
1 lock held by udevd/5067:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
3 locks held by kworker/0:6/5129:
 #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: ffffc9000435fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 #1: ffffc9000435fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276
1 lock held by syz.2.407/6856:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
1 lock held by syz.2.407/6857:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 block/bdev.c:1080
1 lock held by syz.2.407/6858:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.639/7910:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.639/7911:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.639/7913:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.715/8259:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.715/8264:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
1 lock held by syz.2.715/8270:
 #0: ffff8880202164c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 block/bdev.c:897
2 locks held by syz-executor/8764:
 #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
 #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 net/core/rtnetlink.c:6632
 #1: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
 #1: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 kernel/rcu/tree_exp.h:939
2 locks held by syz.4.851/8823:
 #0: ffffffff8f63aef0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
 #1: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 net/wireless/nl80211.c:16405
1 lock held by syz.1.852/8825:
 #0: ffff8880773e0150 (&type->i_mutex_dir_key#17){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:801 [inline]
 #0: ffff8880773e0150 (&type->i_mutex_dir_key#17){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 fs/namei.c:1708
1 lock held by syz.1.852/8826:
 #0: ffff8880773e0150 (&type->i_mutex_dir_key#17){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:801 [inline]
 #0: ffff8880773e0150 (&type->i_mutex_dir_key#17){.+.+}-{3:3}, at: open_last_lookups fs/namei.c:3573 [inline]
 #0: ffff8880773e0150 (&type->i_mutex_dir_key#17){.+.+}-{3:3}, at: path_openat+0x7c4/0x3280 fs/namei.c:3804

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xfde/0x1020 kernel/hung_task.c:379
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline]
NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112