INFO: task udevd:4035 blocked for more than 143 seconds.
Not tainted 5.19.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:23584 pid: 4035 ppid: 2977 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5146 [inline]
__schedule+0x957/0xe20 kernel/sched/core.c:6458
schedule+0xeb/0x1b0 kernel/sched/core.c:6530
io_schedule+0x83/0x100 kernel/sched/core.c:8645
folio_wait_bit_common+0x97a/0x1490 mm/filemap.c:1324
folio_wait_bit mm/filemap.c:1473 [inline]
folio_wait_locked include/linux/pagemap.h:1028 [inline]
do_read_cache_folio+0x634/0xd10 mm/filemap.c:3530
do_read_cache_page mm/filemap.c:3602 [inline]
read_cache_page+0x57/0x250 mm/filemap.c:3611
read_mapping_page include/linux/pagemap.h:759 [inline]
read_part_sector+0xd5/0x450 block/partitions/core.c:715
adfspart_check_ICS+0xd4/0x750 block/partitions/acorn.c:360
check_partition block/partitions/core.c:147 [inline]
blk_add_partitions block/partitions/core.c:600 [inline]
bdev_disk_changed+0x75d/0x13e0 block/partitions/core.c:686
blkdev_get_whole+0x329/0x3b0 block/bdev.c:686
blkdev_get_by_dev+0x30b/0xa40 block/bdev.c:823
blkdev_open+0x128/0x2e0 block/fops.c:481
do_dentry_open+0x789/0x1040 fs/open.c:848
do_open fs/namei.c:3520 [inline]
path_openat+0x26c0/0x2ec0 fs/namei.c:3653
do_filp_open+0x277/0x4f0 fs/namei.c:3680
do_sys_openat2+0x13b/0x500 fs/open.c:1278
do_sys_open fs/open.c:1294 [inline]
__do_sys_openat fs/open.c:1310 [inline]
__se_sys_openat fs/open.c:1305 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1305
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f8ddcf25697
RSP: 002b:00007ffd29507ea0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000562fb010b0a0 RCX: 00007f8ddcf25697
RDX: 00000000000a0800 RSI: 0000562fb010b290 RDI: 00000000ffffff9c
RBP: 0000562fb010b290 R08: 0000000000000001 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
R13: 0000562fb0103780 R14: 0000000000000001 R15: 0000562fb00e9910
INFO: task syz-executor.3:25674 blocked for more than 143 seconds.
Not tainted 5.19.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27040 pid:25674 ppid: 3643 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5146 [inline]
__schedule+0x957/0xe20 kernel/sched/core.c:6458
schedule+0xeb/0x1b0 kernel/sched/core.c:6530
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6589
__mutex_lock_common+0xecf/0x26c0 kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:799
blkdev_put+0x100/0x730 block/bdev.c:912
blkdev_close+0x55/0x80 block/fops.c:495
__fput+0x3b9/0x820 fs/file_table.c:317
task_work_run+0x146/0x1c0 kernel/task_work.c:177
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0x134/0x160 kernel/entry/common.c:169
exit_to_user_mode_prepare+0xad/0x110 kernel/entry/common.c:201
__syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
syscall_exit_to_user_mode+0x2e/0x60 kernel/entry/common.c:294
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fcd9583be4b
RSP: 002b:00007ffe45ef1a30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fcd9583be4b
RDX: 0000001b2ea20000 RSI: 0000001b2ea22168 RDI: 0000000000000003
RBP: 00007fcd9599d960 R08: 0000000000000000 R09: 000000000ac65cb7
R10: 00007ffe45fb10b8 R11: 0000000000000293 R12: 000000000013f122
R13: 00007ffe45ef1b30 R14: 00007ffe45ef1b50 R15: 0000000000000032
INFO: task syz-executor.3:25678 blocked for more than 143 seconds.
Not tainted 5.19.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27328 pid:25678 ppid: 3643 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5146 [inline]
__schedule+0x957/0xe20 kernel/sched/core.c:6458
schedule+0xeb/0x1b0 kernel/sched/core.c:6530
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6589
__mutex_lock_common+0xecf/0x26c0 kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:799
blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
blkdev_open+0x128/0x2e0 block/fops.c:481
do_dentry_open+0x789/0x1040 fs/open.c:848
do_open fs/namei.c:3520 [inline]
path_openat+0x26c0/0x2ec0 fs/namei.c:3653
do_filp_open+0x277/0x4f0 fs/namei.c:3680
do_sys_openat2+0x13b/0x500 fs/open.c:1278
do_sys_open fs/open.c:1294 [inline]
__do_sys_openat fs/open.c:1310 [inline]
__se_sys_openat fs/open.c:1305 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1305
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fcd9583c124
RSP: 002b:00007fcd969f0ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fcd9583c124
RDX: 0000000000022402 RSI: 00007fcd969f0d40 RDI: 00000000ffffff9c
RBP: 00007fcd969f0d40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000022402
R13: 00007ffe45ef19cf R14: 00007fcd969f1300 R15: 0000000000022000
INFO: task syz-executor.3:25679 blocked for more than 144 seconds.
Not tainted 5.19.0-rc8-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27328 pid:25679 ppid: 3643 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5146 [inline]
__schedule+0x957/0xe20 kernel/sched/core.c:6458
schedule+0xeb/0x1b0 kernel/sched/core.c:6530
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6589
__mutex_lock_common+0xecf/0x26c0 kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:799
blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
blkdev_open+0x128/0x2e0 block/fops.c:481
do_dentry_open+0x789/0x1040 fs/open.c:848
do_open fs/namei.c:3520 [inline]
path_openat+0x26c0/0x2ec0 fs/namei.c:3653
do_filp_open+0x277/0x4f0 fs/namei.c:3680
do_sys_openat2+0x13b/0x500 fs/open.c:1278
do_sys_open fs/open.c:1294 [inline]
__do_sys_openat fs/open.c:1310 [inline]
__se_sys_openat fs/open.c:1305 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1305
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fcd9583c124
RSP: 002b:00007fcd969cfca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fcd9583c124
RDX: 0000000000000400 RSI: 00007fcd969cfd40 RDI: 00000000ffffff9c
RBP: 00007fcd969cfd40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000400
R13: 00007ffe45ef19cf R14: 00007fcd969d0300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by khungtaskd/28:
#0: ffffffff8cb1ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by getty/3294:
#0: ffff8880271af098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc90002d162e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 drivers/tty/n_tty.c:2124
1 lock held by udevd/4035:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25674:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 block/bdev.c:912
1 lock held by syz-executor.3/25678:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25679:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25783:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25784:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25785:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
1 lock held by syz-executor.3/25850:
#0: ffff88801e3b5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 block/bdev.c:814
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
nmi_cpu_backtrace+0x473/0x4a0 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x168/0x280 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
watchdog+0xcf9/0xd40 kernel/hung_task.c:369
kthread+0x266/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 24626 Comm: kworker/u4:4 Not tainted 5.19.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
Workqueue: phy13 ieee80211_iface_work
RIP: 0010:cfg80211_get_ies_channel_number+0x68e/0x8c0
Code: 07 84 c0 0f 85 6f 01 00 00 41 0f b6 1e bf 15 00 00 00 89 de e8 73 a6 ef f7 83 fb 15 76 3c e8 89 a3 ef f7 49 83 c5 02 4d 89 ef <4c> 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 8a 04 08 84 c0
RSP: 0018:ffffc900104e7568 EFLAGS: 00000286
RAX: ffffffff8997ef26 RBX: 0000000000000001 RCX: ffff888024298000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: 0000000000000003 R08: ffffffff8997ef18 R09: ffffffff8997eb1c
R10: 0000000000000002 R11: ffff888024298000 R12: 0000000000000028
R13: ffff88807a171c74 R14: 1ffff1100f42e390 R15: ffff88807a171c88
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c01669c000 CR3: 000000000c88e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
cfg80211_get_bss_channel net/wireless/scan.c:1870 [inline]
cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2419 [inline]
cfg80211_inform_bss_frame_data+0x366/0x20e0 net/wireless/scan.c:2506
ieee80211_bss_info_update+0x78a/0xc30 net/mac80211/scan.c:190
ieee80211_rx_bss_info net/mac80211/ibss.c:1119 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1610 [inline]
ieee80211_ibss_rx_queued_mgmt+0x1659/0x28c0 net/mac80211/ibss.c:1639
ieee80211_iface_process_skb net/mac80211/iface.c:1529 [inline]
ieee80211_iface_work+0x757/0xcd0 net/mac80211/iface.c:1583
process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
kthread+0x266/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30