INFO: task udevd:8569 blocked for more than 430 seconds. Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:8569 tgid:8569 ppid:3104 flags:0x0000000d Call trace: __switch_to+0x1c8/0x2a4 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5188 [inline] __schedule+0xacc/0x2920 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xd0/0x304 kernel/sched/core.c:6621 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x4e8/0x840 kernel/locking/mutex.c:752 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:804 bdev_open+0x2c4/0xa84 block/bdev.c:897 blkdev_open+0x24c/0x37c block/fops.c:630 do_dentry_open+0x50c/0x1068 fs/open.c:959 vfs_open+0x5c/0x2fc fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x16dc/0x2380 fs/namei.c:3886 do_filp_open+0x16c/0x330 fs/namei.c:3913 do_sys_openat2+0x12c/0x160 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __arm64_sys_openat+0x12c/0x1b8 fs/open.c:1442 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 INFO: task syz.0.1939:8570 blocked for more than 430 seconds. Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1939 state:D stack:0 pid:8570 tgid:8570 ppid:5398 flags:0x00000001 Call trace: __switch_to+0x1c8/0x2a4 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5188 [inline] __schedule+0xacc/0x2920 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xd0/0x304 kernel/sched/core.c:6621 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x4e8/0x840 kernel/locking/mutex.c:752 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:804 bdev_release+0x104/0x510 block/bdev.c:1080 blkdev_release+0x14/0x24 block/fops.c:638 __fput+0x2c4/0x964 fs/file_table.c:422 ____fput+0x10/0x1c fs/file_table.c:450 task_work_run+0x128/0x210 kernel/task_work.c:228 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x1d4/0x25c arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0x100/0x180 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 INFO: task syz.0.1939:8571 blocked for more than 430 seconds. Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1939 state:D stack:0 pid:8571 tgid:8570 ppid:5398 flags:0x00000009 Call trace: __switch_to+0x1c8/0x2a4 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5188 [inline] __schedule+0xacc/0x2920 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xd0/0x304 kernel/sched/core.c:6621 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x4e8/0x840 kernel/locking/mutex.c:752 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:804 bdev_release+0x104/0x510 block/bdev.c:1080 blkdev_release+0x14/0x24 block/fops.c:638 __fput+0x2c4/0x964 fs/file_table.c:422 ____fput+0x10/0x1c fs/file_table.c:450 task_work_run+0x128/0x210 kernel/task_work.c:228 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x1d4/0x25c arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0x100/0x180 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 INFO: task syz.0.1939:8572 blocked for more than 430 seconds. Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1939 state:D stack:0 pid:8572 tgid:8570 ppid:5398 flags:0x00000009 Call trace: __switch_to+0x1c8/0x2a4 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5188 [inline] __schedule+0xacc/0x2920 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xd0/0x304 kernel/sched/core.c:6621 io_schedule+0xac/0x114 kernel/sched/core.c:7401 folio_wait_bit_common+0x2a8/0x6d0 mm/filemap.c:1307 folio_put_wait_locked mm/filemap.c:1471 [inline] do_read_cache_folio+0x204/0x42c mm/filemap.c:3771 read_cache_folio+0x44/0x6c mm/filemap.c:3821 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xac/0x2b0 block/partitions/core.c:712 msdos_partition+0x100/0x1eb4 block/partitions/msdos.c:592 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x504/0xec0 block/partitions/core.c:683 blkdev_get_whole+0x144/0x1e4 block/bdev.c:700 bdev_open+0x1dc/0xa84 block/bdev.c:909 blkdev_open+0x24c/0x37c block/fops.c:630 do_dentry_open+0x50c/0x1068 fs/open.c:959 vfs_open+0x5c/0x2fc fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x16dc/0x2380 fs/namei.c:3886 do_filp_open+0x16c/0x330 fs/namei.c:3913 do_sys_openat2+0x12c/0x160 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __arm64_sys_openat+0x12c/0x1b8 fs/open.c:1442 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff800086c62ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x44/0x2d4 kernel/locking/lockdep.c:6620 2 locks held by syslogd/3089: 2 locks held by getty/3223: #0: ffff000019a8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80008cc3b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x93c/0xe9c drivers/tty/n_tty.c:2211 1 lock held by syz-executor/3278: 1 lock held by udevd/8569: #0: ffff000015a8e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2c4/0xa84 block/bdev.c:897 1 lock held by syz.0.1939/8570: #0: ffff000015a8e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x104/0x510 block/bdev.c:1080 1 lock held by syz.0.1939/8571: #0: ffff000015a8e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x104/0x510 block/bdev.c:1080 1 lock held by syz.0.1939/8572: #0: ffff000015a8e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2c4/0xa84 block/bdev.c:897 1 lock held by syz.0.2677/10469: #0: ffff0000143c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 Hardware name: linux,dummy-virt (DT) Call trace: dump_backtrace+0x9c/0x11c arch/arm64/kernel/stacktrace.c:319 show_stack+0x18/0x24 arch/arm64/kernel/stacktrace.c:326 __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0xa4/0xf4 lib/dump_stack.c:119 dump_stack+0x1c/0x28 lib/dump_stack.c:128 nmi_cpu_backtrace+0x1b0/0x274 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x25c/0x300 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x18/0x24 arch/arm64/kernel/smp.c:926 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xa74/0xd40 kernel/hung_task.c:379 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 3093 Comm: klogd Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] pc : _raw_spin_unlock_irqrestore+0x40/0xac kernel/locking/spinlock.c:194 lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] lr : _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 sp : ffff8000a0d67120 x29: ffff8000a0d67120 x28: dfff800000000000 x27: 0000000000000000 x26: 0000000000002ace x25: 0000000000000000 x24: 000000000001813e x23: dead000000000122 x22: dead000000000100 x21: ffff800086686000 x20: ffff80008c9cfb78 x19: 0000000000000000 x18: 000000004cb234cd x17: 0000000000000000 x16: 0000000000000000 x15: ffff000014002880 x14: 1fffe0000280050f x13: 1fffe00002800519 x12: ffff700011939f70 x11: 1ffff00011939f6f x10: ffff800088354a40 x9 : ffff0000140028a0 x8 : 00000000f3000000 x7 : 1fffe00002800514 x6 : 00000000f3f3f3f3 x5 : 00000000f2f2f200 x4 : ffff7000141acdee x3 : 0000000000000001 x2 : 0000000000000000 x1 : 0000000000000003 x0 : 00000000000000c0 Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x40/0xac kernel/locking/spinlock.c:194 __debug_check_no_obj_freed lib/debugobjects.c:999 [inline] debug_check_no_obj_freed+0x27c/0x4f4 lib/debugobjects.c:1020 free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0x2c4/0xd24 mm/page_alloc.c:2619 __free_pages+0x12c/0x1d8 mm/page_alloc.c:4789 __free_slab+0x10c/0x1dc mm/slub.c:2558 free_slab+0x30/0x138 mm/slub.c:2581 discard_slab mm/slub.c:2587 [inline] __put_partials+0x22c/0x254 mm/slub.c:3055 put_cpu_partial+0x1c0/0x2a0 mm/slub.c:3130 __slab_free+0x1fc/0x3b4 mm/slub.c:4347 do_slab_free mm/slub.c:4429 [inline] ___cache_free+0xd0/0xe4 mm/slub.c:4508 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x7c/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x19c mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x60/0x90 mm/kasan/common.c:322 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3992 [inline] slab_alloc_node mm/slub.c:4041 [inline] kmem_cache_alloc_node_noprof+0x148/0x308 mm/slub.c:4084 __alloc_skb+0x208/0x2f0 net/core/skbuff.c:664 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xb4/0x524 net/core/skbuff.c:6526 sock_alloc_send_pskb+0x5e4/0x704 net/core/sock.c:2815 unix_dgram_sendmsg+0x2d4/0x12a4 net/unix/af_unix.c:2030 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xc8/0x168 net/socket.c:745 __sys_sendto+0x1a8/0x254 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __arm64_sys_sendto+0xc0/0x134 net/socket.c:2212 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598