INFO: task udevd:6307 blocked for more than 143 seconds. Not tainted 6.10.0-rc5-syzkaller-gb4a3f9b4863a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:6307 tgid:6307 ppid:5903 flags:0x00000004 Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5408 [inline] __schedule+0x14ac/0x24d8 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6837 io_schedule+0x8c/0x124 kernel/sched/core.c:9043 folio_wait_bit_common+0x65c/0xb90 mm/filemap.c:1307 folio_put_wait_locked mm/filemap.c:1471 [inline] do_read_cache_folio+0xa8/0x548 mm/filemap.c:3770 read_cache_folio+0x68/0x84 mm/filemap.c:3820 read_mapping_folio include/linux/pagemap.h:906 [inline] read_part_sector+0xc0/0x2a0 block/partitions/core.c:712 adfspart_check_ICS+0xd4/0x860 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x680/0x10f0 block/partitions/core.c:683 blkdev_get_whole+0x2a0/0x444 block/bdev.c:700 bdev_open+0x250/0xbb8 block/bdev.c:909 blkdev_open+0x1c0/0x270 block/fops.c:615 do_dentry_open+0x7b8/0x1330 fs/open.c:955 vfs_open+0x38/0x48 fs/open.c:1089 do_open fs/namei.c:3650 [inline] path_openat+0x1f98/0x285c fs/namei.c:3807 do_filp_open+0x1bc/0x3cc fs/namei.c:3834 do_sys_openat2+0x124/0x1b8 fs/open.c:1405 do_sys_open fs/open.c:1420 [inline] __do_sys_openat fs/open.c:1436 [inline] __se_sys_openat fs/open.c:1431 [inline] __arm64_sys_openat+0x1f0/0x240 fs/open.c:1431 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 INFO: task syz.3.30:6479 blocked for more than 143 seconds. Not tainted 6.10.0-rc5-syzkaller-gb4a3f9b4863a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.30 state:D stack:0 pid:6479 tgid:6479 ppid:6292 flags:0x00000009 Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5408 [inline] __schedule+0x14ac/0x24d8 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6837 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6894 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:684 __mutex_lock kernel/locking/mutex.c:752 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804 bdev_release+0x168/0x644 block/bdev.c:1080 blkdev_release+0x20/0x34 block/fops.c:623 __fput+0x334/0x760 fs/file_table.c:422 ____fput+0x20/0x30 fs/file_table.c:450 task_work_run+0x230/0x2e0 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x178/0x1f4 arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff80008f377860 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:328 2 locks held by kworker/u8:5/577: #0: ffff0001b3d8b018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:559 [inline] #0: ffff0001b3d8b018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1406 [inline] #0: ffff0001b3d8b018 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1702 [inline] #0: ffff0001b3d8b018 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2e0/0x24d8 kernel/sched/core.c:6653 #1: ffff800099427c20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 kernel/workqueue.c:3205 3 locks held by kworker/u8:6/622: 1 lock held by udevd/5903: 2 locks held by getty/6043: #0: ffff0000d88500a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800097f8b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:6/6302: #0: ffff0000e48ef948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 kernel/workqueue.c:3205 #1: ffff8000aacb7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 kernel/workqueue.c:3205 #2: ffff0000e9e24d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x194/0x34c net/bluetooth/hci_sync.c:309 1 lock held by udevd/6307: #0: ffff0000cb78f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xd0/0xbb8 block/bdev.c:897 1 lock held by syz.3.30/6479: #0: ffff0000cb78f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x168/0x644 block/bdev.c:1080 2 locks held by syz.1.188/6918: #0: ffff0000d0627748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 fs/file.c:1191 #1: ffff0000f34633c0 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: wrap_directory_iterator+0x64/0xf4 fs/readdir.c:56 1 lock held by syz-executor/7184: #0: ffff00010b08c0e0 (&type->s_umount_key#80){++++}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff00010b08c0e0 (&type->s_umount_key#80){++++}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff00010b08c0e0 (&type->s_umount_key#80){++++}-{3:3}, at: deactivate_super+0xd8/0x100 fs/super.c:505 2 locks held by syz.4.274/7324: #0: ffff0000f1ea74c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 fs/file.c:1191 #1: ffff0000eba61800 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: wrap_directory_iterator+0x64/0xf4 fs/readdir.c:56 3 locks held by syz-executor/7416: 1 lock held by syz-executor/7444: #0: ffff80008f37cbb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #0: ffff80008f37cbb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x354/0x678 kernel/rcu/tree_exp.h:939 1 lock held by udevd/7544: #0: ffff0000cb7074c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xd0/0xbb8 block/bdev.c:897 1 lock held by syz.1.394/7780: #0: ffff0000cb7074c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x168/0x644 block/bdev.c:1080 2 locks held by syz.2.307/7783: #0: ffff0000d66bc348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 fs/file.c:1191 #1: ffff0000eba66200 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: wrap_directory_iterator+0x64/0xf4 fs/readdir.c:56 1 lock held by syz.1.550/8339: #0: ffff0000cb7074c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xd0/0xbb8 block/bdev.c:897 1 lock held by syz.1.671/8726: #0: ffff0000cb7074c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xd0/0xbb8 block/bdev.c:897 =============================================