INFO: task systemd-udevd:12108 blocked for more than 143 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:systemd-udevd state:D stack:27952 pid:12108 ppid: 2973 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6250
schedule+0xd2/0x260 kernel/sched/core.c:6323
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6382
__mutex_lock_common kernel/locking/mutex.c:680 [inline]
__mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740
lo_release+0x4d/0x1f0 drivers/block/loop.c:1748
blkdev_put_whole block/bdev.c:694 [inline]
blkdev_put+0x2fb/0x9e0 block/bdev.c:956
blkdev_close+0x6a/0x80 block/fops.c:515
__fput+0x286/0x9f0 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
tracehook_notify_resume include/linux/tracehook.h:189 [inline]
exit_to_user_mode_loop kernel/entry/common.c:175 [inline]
exit_to_user_mode_prepare+0x27e/0x290 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f99d9e02270
RSP: 002b:00007ffe33785a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f99d9e02270
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 00007f99dacbc710 R08: 00005625af02f370 R09: 00005625af02f100
R10: 00007f99dacbc8c0 R11: 0000000000000246 R12: 0000000000000000
R13: 00005625af03d850 R14: 0000000000000003 R15: 000000000000000e
INFO: task syz-executor.1:12122 blocked for more than 143 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:24944 pid:12122 ppid: 6615 flags:0x20004004
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6250
schedule+0xd2/0x260 kernel/sched/core.c:6323
__bio_queue_enter+0x3c5/0x6a0 block/blk-core.c:441
bio_queue_enter block/blk.h:91 [inline]
blk_mq_get_request block/blk-mq.c:2588 [inline]
blk_mq_submit_bio+0x4ae/0x22c0 block/blk-mq.c:2632
__submit_bio block/blk-core.c:849 [inline]
__submit_bio_noacct_mq block/blk-core.c:924 [inline]
submit_bio_noacct block/blk-core.c:950 [inline]
submit_bio_noacct+0x82c/0xa20 block/blk-core.c:939
submit_bio block/blk-core.c:1011 [inline]
submit_bio+0x1ea/0x430 block/blk-core.c:969
mpage_bio_submit fs/mpage.c:66 [inline]
mpage_readahead+0x589/0x750 fs/mpage.c:393
read_pages+0x1e4/0xfa0 mm/readahead.c:129
page_cache_ra_unbounded+0x64b/0x940 mm/readahead.c:238
do_page_cache_ra mm/readahead.c:268 [inline]
ondemand_readahead+0x594/0x1090 mm/readahead.c:551
page_cache_async_ra mm/readahead.c:608 [inline]
page_cache_async_ra+0x2e1/0x3f0 mm/readahead.c:583
page_cache_async_readahead include/linux/pagemap.h:1036 [inline]
filemap_readahead mm/filemap.c:2531 [inline]
filemap_get_pages+0x6f1/0x1be0 mm/filemap.c:2572
filemap_read+0x315/0xeb0 mm/filemap.c:2642
generic_file_read_iter+0x3b6/0x5a0 mm/filemap.c:2792
blkdev_read_iter+0xf8/0x1d0 block/fops.c:583
call_read_iter include/linux/fs.h:2156 [inline]
generic_file_splice_read+0x453/0x6d0 fs/splice.c:311
do_splice_to+0x1bf/0x250 fs/splice.c:796
splice_direct_to_actor+0x2c2/0x8c0 fs/splice.c:870
do_splice_direct+0x1b3/0x280 fs/splice.c:979
do_sendfile+0xaf2/0x1250 fs/read_write.c:1245
__do_compat_sys_sendfile fs/read_write.c:1331 [inline]
__se_compat_sys_sendfile fs/read_write.c:1314 [inline]
__ia32_compat_sys_sendfile+0x1dd/0x220 fs/read_write.c:1314
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf6ea1549
RSP: 002b:00000000f449b5fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004
RDX: 0000000000000000 RSI: 0000000024002da8 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor.1:12125 blocked for more than 144 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:27128 pid:12125 ppid: 6615 flags:0x20004004
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xa9a/0x4940 kernel/sched/core.c:6250
schedule+0xd2/0x260 kernel/sched/core.c:6323
blk_mq_freeze_queue_wait+0x112/0x160 block/blk-mq.c:178
loop_set_status+0x440/0x930 drivers/block/loop.c:1264
loop_set_status_compat+0xac/0x100 drivers/block/loop.c:1674
lo_compat_ioctl+0xeb/0x110 drivers/block/loop.c:1700
compat_blkdev_ioctl+0x3b8/0x810 block/ioctl.c:674
__do_compat_sys_ioctl+0x1c7/0x290 fs/ioctl.c:972
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf6ea1549
RSP: 002b:00000000f447a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c02
RDX: 0000000020000940 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/27:
#0: ffffffff8bb83b60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
2 locks held by kworker/u4:2/52:
#0: ffff8880b9c39a98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:478
#1: ffffc90001a0fdb0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2273
1 lock held by in:imklog/6234:
2 locks held by systemd-udevd/12108:
#0: ffff888019ea5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x97/0x9e0 block/bdev.c:914
#1: ffff888019ea1360 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 drivers/block/loop.c:1748
1 lock held by syz-executor.1/12122:
#0: ffff888145fb2cc8 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
#0: ffff888145fb2cc8 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1b3/0x940 mm/readahead.c:194
1 lock held by syz-executor.1/12125:
#0: ffff888019ea1360 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x930 drivers/block/loop.c:1248
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc1d/0xf50 kernel/hung_task.c:295
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2959 Comm: systemd-journal Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:pvclock_scale_delta arch/x86/include/asm/pvclock.h:68 [inline]
RIP: 0010:__pvclock_read_cycles arch/x86/include/asm/pvclock.h:85 [inline]
RIP: 0010:pvclock_clocksource_read+0x1a6/0x530 arch/x86/kernel/pvclock.c:76
Code: 84 ff 40 0f 95 c7 40 84 fe 0f 85 1a 03 00 00 85 d2 44 8b 5b 18 0f 88 54 01 00 00 80 f9 3f 0f 8f df c5 d9 07 48 d3 e0 49 f7 e3 <48> 0f ac d0 20 4c 89 fa 4c 89 fe 4c 89 d1 48 c1 ea 03 83 e6 07 48
RSP: 0018:ffffc90001a7fdf0 EFLAGS: 00000803
RAX: 4ac11c9b08ea03d0 RBX: ffffffff8f16e000 RCX: 0000000000000001
RDX: 000000000000006c RSI: 0000000000000001 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff8f16e018 R09: ffffffff8f16e00f
R10: ffffffff8f16e017 R11: 00000000e8b40fe8 R12: ffffffff8f16e003
R13: fffffbfff1e2dc01 R14: ffffffff8f16e01d R15: ffffffff8f16e010
FS: 00007fc0dabdd8c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0d80a2000 CR3: 000000007afa3000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
kvm_clock_read arch/x86/kernel/kvmclock.c:79 [inline]
kvm_sched_clock_read+0x14/0x40 arch/x86/kernel/kvmclock.c:91
vtime_delta kernel/sched/cputime.c:637 [inline]
get_vtime_delta+0x1a/0x420 kernel/sched/cputime.c:646
vtime_account_system+0x1a/0xb0 kernel/sched/cputime.c:666
vtime_user_enter+0xaa/0x170 kernel/sched/cputime.c:710
__context_tracking_enter+0xef/0x100 kernel/context_tracking.c:82
user_enter_irqoff include/linux/context_tracking.h:41 [inline]
__exit_to_user_mode kernel/entry/common.c:130 [inline]
syscall_exit_to_user_mode+0x48/0x60 kernel/entry/common.c:302
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fc0da16c210
Code: 73 01 c3 48 8b 0d 98 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d b9 c1 20 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 4e fc ff ff 48 89 04 24
RSP: 002b:00007fff58e5acc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: 0000000000000034 RBX: 00007fff58e5d740 RCX: 00007fc0da16c210
RDX: 0000000000002000 RSI: 00007fff58e5b540 RDI: 0000000000000009
RBP: 0000000000000000 R08: 0000000000000008 R09: 0000560924b287b8
R10: 0000560924b28780 R11: 0000000000000246 R12: 00007fff58e5b540
R13: 00007fff58e5d698 R14: 00005609231d2958 R15: 0005d0bed1f9cde4
----------------
Code disassembly (best guess):
0: 84 ff test %bh,%bh
2: 40 0f 95 c7 setne %dil
6: 40 84 fe test %dil,%sil
9: 0f 85 1a 03 00 00 jne 0x329
f: 85 d2 test %edx,%edx
11: 44 8b 5b 18 mov 0x18(%rbx),%r11d
15: 0f 88 54 01 00 00 js 0x16f
1b: 80 f9 3f cmp $0x3f,%cl
1e: 0f 8f df c5 d9 07 jg 0x7d9c603
24: 48 d3 e0 shl %cl,%rax
27: 49 f7 e3 mul %r11
* 2a: 48 0f ac d0 20 shrd $0x20,%rdx,%rax <-- trapping instruction
2f: 4c 89 fa mov %r15,%rdx
32: 4c 89 fe mov %r15,%rsi
35: 4c 89 d1 mov %r10,%rcx
38: 48 c1 ea 03 shr $0x3,%rdx
3c: 83 e6 07 and $0x7,%esi
3f: 48 rex.W