INFO: task udevd:5233 blocked for more than 430 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack: 0 pid: 5233 ppid: 2030 flags:0x00000001 Backtrace: [<81712400>] (__schedule) from [<81712e58>] (schedule+0x54/0xdc kernel/sched/core.c:6326) r10:8220c44c r9:5ac3c35a r8:840ebe50 r7:83952f54 r6:00000001 r5:83625b08 r4:84168b80 [<81712e04>] (schedule) from [<8071abf4>] (blk_mq_freeze_queue_wait+0x6c/0xa4 block/blk-mq.c:178) r5:83625b08 r4:83625f70 [<8071ab88>] (blk_mq_freeze_queue_wait) from [<8071db68>] (blk_freeze_queue block/blk-mq.c:205 [inline]) [<8071ab88>] (blk_mq_freeze_queue_wait) from [<8071db68>] (blk_mq_freeze_queue+0x1c/0x20 block/blk-mq.c:214) r5:838e192c r4:83625b00 [<8071db4c>] (blk_mq_freeze_queue) from [<809fd174>] (lo_release+0x7c/0xa8 drivers/block/loop.c:1768) r5:838e192c r4:838e1800 [<809fd0f8>] (lo_release) from [<80706a4c>] (blkdev_put_whole block/bdev.c:694 [inline]) [<809fd0f8>] (lo_release) from [<80706a4c>] (blkdev_put+0xd4/0x27c block/bdev.c:956) r7:83952f54 r6:83952f00 r5:480a005d r4:830c4440 [<80706978>] (blkdev_put) from [<807078e0>] (blkdev_close+0x18/0x20 block/fops.c:515) r8:840ebe50 r7:82cc6110 r6:838f4f78 r5:480a005d r4:8359f000 [<807078c8>] (blkdev_close) from [<8048414c>] (__fput+0x84/0x258 fs/file_table.c:280) [<804840c8>] (__fput) from [<8048439c>] (____fput+0x10/0x14 fs/file_table.c:313) r9:5ac3c35a r8:841693d4 r7:8243d600 r6:84168b80 r5:841693a4 r4:00000000 [<8048438c>] (____fput) from [<80266e24>] (task_work_run+0x8c/0xb8 kernel/task_work.c:164) [<80266d98>] (task_work_run) from [<8020bff0>] (tracehook_notify_resume include/linux/tracehook.h:189 [inline]) [<80266d98>] (task_work_run) from [<8020bff0>] (do_work_pending+0x438/0x53c arch/arm/kernel/signal.c:630) r9:5ac3c35a r8:80200244 r7:fffffe30 r6:80200244 r5:83727fb0 r4:84168b80 [<8020bbb8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x20) Exception stack(0x83727fb0 to 0x83727ff8) 7fa0: 00000000 7e8a0c48 00000003 00000000 7fc0: 76f9e87c 76f9e840 00000002 00000006 000563e8 0024c190 00000008 000563f8 7fe0: 000561f4 7e8a1448 0002d6d0 76c69380 60070010 00000008 r10:00000006 r9:84168b80 r8:80200244 r7:00000006 r6:00000002 r5:76f9e840 r4:76f9e87c INFO: task syz-executor.1:5426 blocked for more than 430 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack: 0 pid: 5426 ppid: 2264 flags:0x00000001 Backtrace: [<81712400>] (__schedule) from [<81712e58>] (schedule+0x54/0xdc kernel/sched/core.c:6326) r10:83952f54 r9:4800001d r8:83952f58 r7:84d29cbc r6:00000002 r5:84169700 r4:84169700 [<81712e04>] (schedule) from [<81713474>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6385) r5:84169700 r4:83952f54 [<8171345c>] (schedule_preempt_disabled) from [<817147ac>] (__mutex_lock_common kernel/locking/mutex.c:680 [inline]) [<8171345c>] (schedule_preempt_disabled) from [<817147ac>] (__mutex_lock.constprop.0+0x170/0x54c kernel/locking/mutex.c:740) [<8171463c>] (__mutex_lock.constprop.0) from [<81714c5c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1028) r9:4800001d r8:00000000 r7:83952f00 r6:848d23c0 r5:4800001d r4:830c4440 [<81714c48>] (__mutex_lock_slowpath) from [<81714c9c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:283) [<81714c60>] (mutex_lock) from [<80706fd4>] (blkdev_get_by_dev.part.0+0x44/0x2dc block/bdev.c:819) [<80706f90>] (blkdev_get_by_dev.part.0) from [<807072b4>] (blkdev_get_by_dev+0x48/0x4c block/bdev.c:803) r10:84d29e50 r9:848d23c8 r8:807078e8 r7:848d23c0 r6:848d23c0 r5:4800001d r4:00700000 [<8070726c>] (blkdev_get_by_dev) from [<80707940>] (blkdev_open+0x58/0x88 block/fops.c:501) r7:848d23c0 r6:00000000 r5:838f4f78 r4:848d23c0 [<807078e8>] (blkdev_open) from [<8047d928>] (do_dentry_open+0x148/0x3f8 fs/open.c:822) r5:838f4f78 r4:848d23c0 [<8047d7e0>] (do_dentry_open) from [<8047f618>] (vfs_open+0x34/0x38 fs/open.c:957) r9:84d29f20 r8:00000000 r7:848d23c0 r6:82225d20 r5:00000000 r4:00000000 [<8047f5e4>] (vfs_open) from [<804936b8>] (do_open fs/namei.c:3426 [inline]) [<8047f5e4>] (vfs_open) from [<804936b8>] (path_openat+0x544/0x102c fs/namei.c:3559) [<80493174>] (path_openat) from [<80495a20>] (do_filp_open+0x84/0x124 fs/namei.c:3586) r10:00000142 r9:84169700 r8:84d29e50 r7:00000001 r6:84169700 r5:84d29f20 r4:84d29f58 [<8049599c>] (do_filp_open) from [<8047f908>] (do_sys_openat2+0xa8/0x16c fs/open.c:1212) r8:80200244 r7:ffffff9c r6:00000003 r5:84290000 r4:84d29f58 [<8047f860>] (do_sys_openat2) from [<8047fda4>] (do_sys_open fs/open.c:1228 [inline]) [<8047f860>] (do_sys_openat2) from [<8047fda4>] (__do_sys_openat fs/open.c:1244 [inline]) [<8047f860>] (do_sys_openat2) from [<8047fda4>] (sys_openat+0xa4/0xcc fs/open.c:1239) r7:00000142 r6:00000000 r5:76fd0c38 r4:ffffff9c [<8047fd00>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x84d29fa8 to 0x84d29ff0) 9fa0: 66666667 76fd1b90 ffffff9c 76fd0c38 00000000 00000000 9fc0: 66666667 76fd1b90 00000000 00000142 7ecf531a 76fd16d0 7ecf54a4 76fd120c 9fe0: 00000000 76fd0bf0 00028e6c 00029680 r5:76fd1b90 r4:66666667 NMI backtrace for cpu 1 CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816f56d0>] (dump_backtrace) from [<816f58bc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:237) r7:00000001 r6:00000000 r5:60070093 r4:81d6017c [<816f58a4>] (show_stack) from [<816fe314>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816f58a4>] (show_stack) from [<816fe314>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816fe2cc>] (dump_stack_lvl) from [<816fe338>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00070013 r4:00000001 [<816fe320>] (dump_stack) from [<8083cd6c>] (nmi_cpu_backtrace+0x114/0x180 lib/nmi_backtrace.c:105) [<8083cc58>] (nmi_cpu_backtrace) from [<8083ceec>] (nmi_trigger_cpumask_backtrace+0x114/0x1d0 lib/nmi_backtrace.c:62) r7:00000001 r6:8220c494 r5:8220cc70 r4:00000000 [<8083cdd8>] (nmi_trigger_cpumask_backtrace) from [<80210c54>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:865) r9:00013d80 r8:82204d00 r7:00007f66 r6:824839b0 r5:8220c5d4 r4:82bf0e40 [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f7c>] (trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]) [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f7c>] (check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]) [<80210c3c>] (arch_trigger_cpumask_backtrace) from [<80329f7c>] (watchdog+0x4a0/0x58c kernel/hung_task.c:295) [<80329adc>] (watchdog) from [<8026a518>] (kthread+0x164/0x198 kernel/kthread.c:327) r10:8294de4c r9:00000000 r8:00000000 r7:80329adc r6:828cf180 r5:82a89240 r4:828f2e00 [<8026a3b4>] (kthread) from [<80200100>] (ret_from_fork+0x14/0x34 arch/arm/kernel/entry-common.S:146) Exception stack(0x82a25fb0 to 0x82a25ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026a3b4 r4:82a89240 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2015 Comm: syslogd Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __kmap_to_page+0x24/0x78 mm/highmem.c:153 LR is at kmap_to_page include/linux/highmem-internal.h:63 [inline] LR is at check_heap_object mm/usercopy.c:236 [inline] LR is at __check_object_size mm/usercopy.c:286 [inline] LR is at __check_object_size+0x14c/0x208 mm/usercopy.c:256 pc : [<8041c12c>] lr : [<8047b274>] psr: 00080013 sp : 841dbcd0 ip : 841dbce0 fp : 841dbcdc r10: 843c9540 r9 : 00000079 r8 : 00000079 r7 : 8374a079 r6 : 00000001 r5 : 00000079 r4 : 8374a000 r3 : dddf9000 r2 : 0394a000 r1 : 8248c7b8 r0 : 0374a000 Flags: nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 840f4500 DAC: fffffffd CPU: 0 PID: 2015 Comm: syslogd Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<816f56d0>] (dump_backtrace) from [<816f58bc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:237) r7:00000017 r6:841dbc80 r5:60080193 r4:81d6017c [<816f58a4>] (show_stack) from [<816fe314>] (__dump_stack lib/dump_stack.c:88 [inline]) [<816f58a4>] (show_stack) from [<816fe314>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<816fe2cc>] (dump_stack_lvl) from [<816fe338>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00080193 r4:00000000 [<816fe320>] (dump_stack) from [<80209080>] (show_regs+0x14/0x18 arch/arm/kernel/process.c:199) [<8020906c>] (show_regs) from [<8083cd54>] (nmi_cpu_backtrace+0xfc/0x180 lib/nmi_backtrace.c:103) [<8083cc58>] (nmi_cpu_backtrace) from [<8020fd58>] (do_handle_IPI+0x4c/0x3b4 arch/arm/kernel/smp.c:680) r7:00000017 r6:00000000 r5:8280cb80 r4:00000007 [<8020fd0c>] (do_handle_IPI) from [<802100e0>] (ipi_handler+0x20/0x28 arch/arm/kernel/smp.c:708) r9:83fd2e00 r8:841dbbe8 r7:00000017 r6:8220cc8c r5:8280cb80 r4:82885d00 [<802100c0>] (ipi_handler) from [<802b9530>] (handle_percpu_devid_irq+0x9c/0x2d4 kernel/irq/chip.c:933) [<802b9494>] (handle_percpu_devid_irq) from [<802b2ba0>] (generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]) [<802b9494>] (handle_percpu_devid_irq) from [<802b2ba0>] (handle_irq_desc kernel/irq/irqdesc.c:646 [inline]) [<802b9494>] (handle_percpu_devid_irq) from [<802b2ba0>] (generic_handle_domain_irq+0x48/0x8c kernel/irq/irqdesc.c:680) r10:843c9540 r9:83fd2e00 r8:00000000 r7:df80200c r6:83fd2e00 r5:00000007 r4:82888000 r3:802b9494 [<802b2b58>] (generic_handle_domain_irq) from [<8084fa80>] (gic_handle_irq+0x68/0x7c drivers/irqchip/irq-gic.c:372) r7:df80200c r6:820a5fc4 r5:df802000 r4:8220cc8c [<8084fa18>] (gic_handle_irq) from [<81710264>] (generic_handle_arch_irq+0x60/0x80 kernel/irq/handle.c:243) r7:841dbc80 r6:81f092c0 r5:81f092d8 r4:820a5fb8 [<81710204>] (generic_handle_arch_irq) from [<80200abc>] (__irq_svc+0x3c/0x64 arch/arm/kernel/entry-armv.S:202) Exception stack(0x841dbc80 to 0x841dbcc8) bc80: 0374a000 8248c7b8 0394a000 dddf9000 8374a000 00000079 00000001 8374a079 bca0: 00000079 00000079 843c9540 841dbcdc 841dbce0 841dbcd0 8047b274 8041c12c bcc0: 00080013 ffffffff r9:83fd2e00 r8:00000079 r7:841dbcb4 r6:ffffffff r5:00080013 r4:8041c12c [<8041c108>] (__kmap_to_page) from [<8047b274>] (kmap_to_page include/linux/highmem-internal.h:63 [inline]) [<8041c108>] (__kmap_to_page) from [<8047b274>] (check_heap_object mm/usercopy.c:236 [inline]) [<8041c108>] (__kmap_to_page) from [<8047b274>] (__check_object_size mm/usercopy.c:286 [inline]) [<8041c108>] (__kmap_to_page) from [<8047b274>] (__check_object_size+0x14c/0x208 mm/usercopy.c:256) [<8047b128>] (__check_object_size) from [<812b4908>] (check_object_size include/linux/thread_info.h:185 [inline]) [<8047b128>] (__check_object_size) from [<812b4908>] (check_copy_size include/linux/thread_info.h:218 [inline]) [<8047b128>] (__check_object_size) from [<812b4908>] (copy_to_iter include/linux/uio.h:152 [inline]) [<8047b128>] (__check_object_size) from [<812b4908>] (simple_copy_to_iter+0x24/0x7c net/core/datagram.c:519) r10:843c9540 r9:00000079 r8:00000079 r7:00000000 r6:841dbe78 r5:8374a000 r4:00000079 [<812b48e4>] (simple_copy_to_iter) from [<812b4294>] (__skb_datagram_iter+0x68/0x2ec net/core/datagram.c:425) r7:00000000 r6:00000079 r5:00000079 r4:00000079 [<812b422c>] (__skb_datagram_iter) from [<812b4598>] (skb_copy_datagram_iter+0x4c/0xfc net/core/datagram.c:533) r10:00000000 r9:00000079 r8:00000079 r7:841dbe78 r6:00000000 r5:00000079 r4:843c9540 [<812b454c>] (skb_copy_datagram_iter) from [<81525dc0>] (skb_copy_datagram_msg include/linux/skbuff.h:3657 [inline]) [<812b454c>] (skb_copy_datagram_iter) from [<81525dc0>] (__unix_dgram_recvmsg+0x17c/0x3b0 net/unix/af_unix.c:2342) r9:00000079 r8:00000079 r7:00000000 r6:83cd203c r5:83cd1e00 r4:843c9540 [<81525c44>] (__unix_dgram_recvmsg) from [<81526048>] (unix_dgram_recvmsg+0x54/0x5c net/unix/af_unix.c:2401) r10:00000000 r9:83fd2e00 r8:00000000 r7:00000000 r6:82c45180 r5:81525ff4 r4:823bf3a0 [<81525ff4>] (unix_dgram_recvmsg) from [<8129e5c8>] (sock_recvmsg_nosec net/socket.c:944 [inline]) [<81525ff4>] (unix_dgram_recvmsg) from [<8129e5c8>] (sock_recvmsg net/socket.c:962 [inline]) [<81525ff4>] (unix_dgram_recvmsg) from [<8129e5c8>] (sock_recvmsg net/socket.c:958 [inline]) [<81525ff4>] (unix_dgram_recvmsg) from [<8129e5c8>] (sock_read_iter+0xfc/0x12c net/socket.c:1035) r4:841dbef0 [<8129e4cc>] (sock_read_iter) from [<8048274c>] (call_read_iter include/linux/fs.h:2156 [inline]) [<8129e4cc>] (sock_read_iter) from [<8048274c>] (new_sync_read fs/read_write.c:400 [inline]) [<8129e4cc>] (sock_read_iter) from [<8048274c>] (vfs_read+0x2e8/0x314 fs/read_write.c:481) r7:00004004 r6:83cab6c0 r5:00000000 r4:000000ff [<80482464>] (vfs_read) from [<80482c70>] (ksys_read+0xb4/0xec fs/read_write.c:619) r10:00000003 r9:83fd2e00 r8:80200244 r7:000000ff r6:020761b8 r5:83cab6c0 r4:83cab6c0 [<80482bbc>] (ksys_read) from [<80482cb8>] (__do_sys_read fs/read_write.c:629 [inline]) [<80482bbc>] (ksys_read) from [<80482cb8>] (sys_read+0x10/0x14 fs/read_write.c:627) r7:00000003 r6:76f4b080 r5:02076190 r4:fffffc00 [<80482ca8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:64) Exception stack(0x841dbfa8 to 0x841dbff0) bfa0: fffffc00 02076190 00000000 020761b8 000000ff 00000000 bfc0: fffffc00 02076190 76f4b080 00000003 00000000 000d6c90 000d6c90 00000000 bfe0: 000d609c 7eb4ec88 000579b8 76e6f6f8