INFO: task systemd-udevd:13209 blocked for more than 143 seconds. Not tainted 5.15.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-udevd state:D stack:24816 pid:13209 ppid: 2971 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 io_schedule+0x83/0x100 kernel/sched/core.c:8389 wait_on_page_bit_common+0x90f/0x10f0 mm/filemap.c:1356 wait_on_page_bit mm/filemap.c:1417 [inline] wait_on_page_locked include/linux/pagemap.h:688 [inline] wait_on_page_read+0x19d/0x430 mm/filemap.c:3422 do_read_cache_page+0xb1b/0xe10 mm/filemap.c:3465 read_mapping_page include/linux/pagemap.h:515 [inline] read_part_sector+0xd8/0x4e0 block/partitions/core.c:725 adfspart_check_ICS+0xc0/0xa70 block/partitions/acorn.c:360 check_partition block/partitions/core.c:147 [inline] blk_add_partitions block/partitions/core.c:610 [inline] bdev_disk_changed+0x78a/0x16b0 block/partitions/core.c:696 blkdev_get_whole+0x34f/0x3e0 block/bdev.c:681 blkdev_get_by_dev+0x28d/0xb90 block/bdev.c:823 blkdev_open+0x132/0x2c0 block/fops.c:447 do_dentry_open+0x7cb/0x1020 fs/open.c:822 do_open fs/namei.c:3428 [inline] path_openat+0x28b4/0x3670 fs/namei.c:3561 do_filp_open+0x277/0x4f0 fs/namei.c:3588 do_sys_openat2+0x13b/0x500 fs/open.c:1200 do_sys_open fs/open.c:1216 [inline] __do_sys_open fs/open.c:1224 [inline] __se_sys_open fs/open.c:1220 [inline] __x64_sys_open+0x221/0x270 fs/open.c:1220 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f60ef169840 RSP: 002b:00007ffe9ea16d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055754f91f0e0 RCX: 00007f60ef169840 RDX: 000055754e122fe3 RSI: 00000000000a0800 RDI: 000055754f909d20 RBP: 00007ffe9ea16eb0 R08: 000055754e122670 R09: 0000000000000010 R10: 000055754e122d0c R11: 0000000000000246 R12: 00007ffe9ea16e00 R13: 000055754f90a880 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.4:16188 blocked for more than 143 seconds. Not tainted 5.15.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26480 pid:16188 ppid: 6613 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 blkdev_put+0xfa/0x7b0 block/bdev.c:911 blkdev_close+0x7b/0xa0 block/fops.c:459 __fput+0x3fe/0x870 fs/file_table.c:280 task_work_run+0x146/0x1c0 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop kernel/entry/common.c:175 [inline] exit_to_user_mode_prepare+0x209/0x220 kernel/entry/common.c:209 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline] syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:302 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665f9 RSP: 002b:00007f53891d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 000000000056bf80 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007fff56d6371f R14: 00007f53891d4300 R15: 0000000000022000 INFO: task syz-executor.4:16199 blocked for more than 143 seconds. Not tainted 5.15.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:25424 pid:16199 ppid: 6613 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xc8d/0x1270 kernel/sched/core.c:6287 schedule+0x14b/0x210 kernel/sched/core.c:6366 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425 __mutex_lock_common+0xdff/0x2550 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x1a/0x20 kernel/locking/mutex.c:743 blkdev_get_by_dev+0xf6/0xb90 block/bdev.c:816 blkdev_open+0x132/0x2c0 block/fops.c:447 do_dentry_open+0x7cb/0x1020 fs/open.c:822 do_open fs/namei.c:3428 [inline] path_openat+0x28b4/0x3670 fs/namei.c:3561 do_filp_open+0x277/0x4f0 fs/namei.c:3588 do_sys_openat2+0x13b/0x500 fs/open.c:1200 do_sys_open fs/open.c:1216 [inline] __do_sys_openat fs/open.c:1232 [inline] __se_sys_openat fs/open.c:1227 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1227 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4196e4 RSP: 002b:00007f53891b2cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196e4 RDX: 0000000000000000 RSI: 00007f53891b2d60 RDI: 00000000ffffff9c RBP: 00007f53891b2d60 R08: 0000000000000000 R09: 002364626e2f7665 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fff56d6371f R14: 00007f53891b3300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8c91c180 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 1 lock held by in:imklog/6224: 1 lock held by systemd-udevd/13209: #0: ffff88801bea2118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xf6/0xb90 block/bdev.c:816 1 lock held by syz-executor.4/16188: #0: ffff88801bea2118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfa/0x7b0 block/bdev.c:911 1 lock held by syz-executor.4/16199: #0: ffff88801bea2118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xf6/0xb90 block/bdev.c:816 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xc54/0xca0 kernel/hung_task.c:295 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9720 Comm: kworker/u4:8 Not tainted 5.15.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker RIP: 0010:rcu_read_lock_sched_held+0x21/0x130 kernel/rcu/update.c:120 Code: 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 65 48 8b 04 25 28 00 00 00 48 89 44 24 48 <49> be 00 00 00 00 00 fc ff df 48 c7 04 24 b3 8a b5 41 48 c7 44 24 RSP: 0018:ffffc90004bbfa00 EFLAGS: 00000286 RAX: 1a83ca5e0e738d00 RBX: 0000000000000001 RCX: ffffffff816435a1 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ddbea68 RBP: ffffc90004bbfa90 R08: dffffc0000000000 R09: fffffbfff1bb7d4e R10: fffffbfff1bb7d4e R11: 0000000000000000 R12: dffffc0000000000 R13: 1ffff92000977f64 R14: ffffffff89d6aee5 R15: 00000000000003e1 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1392444000 CR3: 000000007028b000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: trace_lock_release+0x4f/0x150 include/trace/events/lock.h:58 lock_release+0x82/0x810 kernel/locking/lockdep.c:5636 rcu_read_unlock include/linux/rcupdate.h:720 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:414 [inline] batadv_nc_worker+0x251/0x5b0 net/batman-adv/network-coding.c:721 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 ---------------- Code disassembly (best guess): 0: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1) 7: 00 8: 90 nop 9: 55 push %rbp a: 48 89 e5 mov %rsp,%rbp d: 41 57 push %r15 f: 41 56 push %r14 11: 41 54 push %r12 13: 53 push %rbx 14: 48 83 e4 e0 and $0xffffffffffffffe0,%rsp 18: 48 83 ec 60 sub $0x60,%rsp 1c: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 23: 00 00 25: 48 89 44 24 48 mov %rax,0x48(%rsp) * 2a: 49 be 00 00 00 00 00 movabs $0xdffffc0000000000,%r14 <-- trapping instruction 31: fc ff df 34: 48 c7 04 24 b3 8a b5 movq $0x41b58ab3,(%rsp) 3b: 41 3c: 48 rex.W 3d: c7 .byte 0xc7 3e: 44 rex.R 3f: 24 .byte 0x24