INFO: task udevd:5102 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:24416 pid:5102 ppid:4434 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0x17d8/0x4990 kernel/sched/core.c:6622 schedule+0xc3/0x180 kernel/sched/core.c:6698 io_schedule+0x8c/0x100 kernel/sched/core.c:8884 folio_wait_bit_common+0x86c/0x12b0 mm/filemap.c:1301 __filemap_get_folio+0x44e/0xe50 mm/filemap.c:1936 truncate_inode_pages_range+0x554/0x11d0 mm/truncate.c:377 kill_bdev block/bdev.c:76 [inline] blkdev_flush_mapping+0x154/0x2b0 block/bdev.c:584 blkdev_put_whole block/bdev.c:615 [inline] blkdev_put+0x4c4/0x760 block/bdev.c:875 blkdev_close+0x5a/0x80 block/fops.c:507 __fput+0x3b7/0x890 fs/file_table.c:321 task_work_run+0x24a/0x300 kernel/task_work.c:179 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0x68f/0x2290 kernel/exit.c:869 do_group_exit+0x206/0x2c0 kernel/exit.c:1019 get_signal+0x1701/0x17e0 kernel/signal.c:2859 arch_do_signal_or_restart+0x91/0x670 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:168 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x64/0x2e0 kernel/entry/common.c:296 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe419325697 RSP: 002b:00007ffd41264ad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: 0000000000000008 RBX: 000055747a7b1b70 RCX: 00007fe419325697 RDX: 00000000000a0800 RSI: 000055747a7a7e80 RDI: 00000000ffffff9c RBP: 000055747a7a7e80 R08: 0000000000000001 R09: 0000000000000010 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055747a790c80 R14: 0000000000000001 R15: 000055747a787910 INFO: task syz-executor100:5119 blocked for more than 143 seconds. Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor100 state:D stack:27560 pid:5119 ppid:5098 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5304 [inline] __schedule+0x17d8/0x4990 kernel/sched/core.c:6622 schedule+0xc3/0x180 kernel/sched/core.c:6698 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757 __mutex_lock_common+0xe33/0x2530 kernel/locking/mutex.c:679 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x1b/0x20 kernel/locking/mutex.c:799 blkdev_get_by_dev+0x148/0xa30 block/bdev.c:735 blkdev_open+0x132/0x2f0 block/fops.c:493 do_dentry_open+0x7f9/0x10f0 fs/open.c:884 do_open fs/namei.c:3560 [inline] path_openat+0x27b3/0x3170 fs/namei.c:3715 do_filp_open+0x234/0x490 fs/namei.c:3742 do_sys_openat2+0x13f/0x500 fs/open.c:1312 do_sys_open fs/open.c:1328 [inline] __do_sys_openat fs/open.c:1344 [inline] __se_sys_openat fs/open.c:1339 [inline] __x64_sys_openat+0x247/0x290 fs/open.c:1339 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7faecd08dc34 RSP: 002b:00007faecd07de70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faecd08dc34 RDX: 0000000000000000 RSI: 00007faecd07def0 RDI: 00000000ffffff9c RBP: 00007faecd07def0 R08: 0000000000000000 R09: 00007faecd07e700 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007faecd1221a4 R14: 64626e2f7665642f R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8d127c70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:510 1 lock held by rcu_tasks_trace/13: #0: ffffffff8d128470 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 kernel/rcu/tasks.h:510 1 lock held by khungtaskd/28: #0: ffffffff8d127aa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 2 locks held by getty/4751: #0: ffff88802cb94098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ab/0x1db0 drivers/tty/n_tty.c:2177 1 lock held by udevd/5102: #0: ffff88801ea9a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x104/0x760 block/bdev.c:833 1 lock held by syz-executor100/5119: #0: ffff88801ea9a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa30 block/bdev.c:735 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x4e5/0x560 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1b4/0x410 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0x1024/0x1070 kernel/hung_task.c:379 kthread+0x270/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 74 Comm: kworker/u4:4 Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:__lock_acquire+0x6d/0x1f80 kernel/locking/lockdep.c:4926 Code: 10 84 c0 0f 85 fb 15 00 00 83 3d 81 bf 08 0d 00 0f 84 a8 14 00 00 83 3d f0 5c 93 0b 00 74 2b 4c 89 f0 48 c1 e8 03 80 3c 10 00 <74> 12 4c 89 f7 e8 a9 68 77 00 48 ba 00 00 00 00 00 fc ff df 48 c7 RSP: 0018:ffffc90001597620 EFLAGS: 00000046 RAX: 1ffff110173052b3 RBX: 0000000000000001 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8880b9829598 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 R13: ffff888018ca1d40 R14: ffff8880b9829598 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005564a1097600 CR3: 000000000cf30000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x23e/0x630 kernel/locking/lockdep.c:5669 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 lock_timer_base+0x120/0x260 kernel/time/timer.c:999 __mod_timer+0x1b8/0xf40 kernel/time/timer.c:1080 queue_delayed_work_on+0x15a/0x260 kernel/workqueue.c:1708 queue_delayed_work include/linux/workqueue.h:519 [inline] toggle_allocation_gate+0x1ff/0x250 mm/kfence/core.c:806 process_one_work+0x915/0x13a0 kernel/workqueue.c:2390 worker_thread+0xa63/0x1210 kernel/workqueue.c:2537 kthread+0x270/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308