INFO: task syz.3.19:6503 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.19        state:D stack:28152 pid:6503  tgid:6502  ppid:6343   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x16fd/0x4cb0 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6879
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6936
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x63a/0xe50 kernel/locking/mutex.c:747
 bdev_open+0xda/0xe80 block/bdev.c:945
 blkdev_open+0x3a8/0x510 block/fops.c:676
 do_dentry_open+0xde8/0x1940 fs/open.c:964
 vfs_open+0x3b/0x340 fs/open.c:1094
 do_open fs/namei.c:3896 [inline]
 path_openat+0x2ee1/0x3830 fs/namei.c:4055
 do_filp_open+0x1fa/0x410 fs/namei.c:4082
 do_sys_openat2+0x121/0x1c0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x8a/0x300 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f882038d310
RSP: 002b:00007f8821114b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f882038d310
RDX: 0000000000000000 RSI: 00007f8821114c10 RDI: 00000000ffffff9c
RBP: 00007f8821114c10 R08: 0000000000000000 R09: 002364626e2f7665
R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
R13: 0000000000000001 R14: 00007f88205b5fa0 R15: 00007ffdfd630ca8
 </TASK>
INFO: task syz.3.19:6503 is blocked on a mutex likely owned by task udevd:6247.
task:udevd           state:D stack:22272 pid:6247  tgid:6247  ppid:5168   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x16fd/0x4cb0 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6879
 io_schedule+0x81/0xe0 kernel/sched/core.c:7724
 folio_wait_bit_common+0x7ae/0xb80 mm/filemap.c:1317
 folio_wait_bit_killable mm/filemap.c:1462 [inline]
 folio_wait_locked_killable include/linux/pagemap.h:1196 [inline]
 filemap_read_folio+0x203/0x370 mm/filemap.c:2418
 do_read_cache_folio+0x350/0x590 mm/filemap.c:3894
 read_mapping_folio include/linux/pagemap.h:972 [inline]
 read_part_sector+0xb6/0x2b0 block/partitions/core.c:722
 adfspart_check_ICS+0xa4/0xa50 block/partitions/acorn.c:360
 check_partition block/partitions/core.c:141 [inline]
 blk_add_partitions block/partitions/core.c:589 [inline]
 bdev_disk_changed+0x75d/0x14b0 block/partitions/core.c:693
 blkdev_get_whole+0x380/0x510 block/bdev.c:748
 bdev_open+0x318/0xe80 block/bdev.c:957
 blkdev_open+0x3a8/0x510 block/fops.c:676
 do_dentry_open+0xde8/0x1940 fs/open.c:964
 vfs_open+0x3b/0x340 fs/open.c:1094
 do_open fs/namei.c:3896 [inline]
 path_openat+0x2ee1/0x3830 fs/namei.c:4055
 do_filp_open+0x1fa/0x410 fs/namei.c:4082
 do_sys_openat2+0x121/0x1c0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x8a/0x300 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7ff1168a7407
RSP: 002b:00007fff6fc592f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ff117084880 RCX: 00007ff1168a7407
RDX: 00000000000a0800 RSI: 00005614f3a88340 RDI: ffffffffffffff9c
RBP: 00005614f3a7d910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00005614f3ab5e90
R13: 00005614f3a95430 R14: 0000000000000000 R15: 00005614f3ab5e90
 </TASK>
INFO: task syz.1.30:6533 blocked for more than 144 seconds.
      Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.30        state:D stack:25016 pid:6533  tgid:6533  ppid:6341   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x16fd/0x4cb0 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6879
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6936
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x63a/0xe50 kernel/locking/mutex.c:747
 bdev_release+0x1a9/0x650 block/bdev.c:1128
 blkdev_release+0x15/0x20 block/fops.c:684
 __fput+0x44c/0xa70 fs/file_table.c:465
 task_work_run+0x1d4/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xec/0x110 kernel/entry/common.c:114
 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
 do_syscall_64+0x217/0x300 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f7204f8e9a9
RSP: 002b:00007ffcc8f343b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f72051b7ba0 RCX: 00007f7204f8e9a9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f72051b7ba0 R08: 0000000000000000 R09: 00000005c8f346af
R10: 000000000003fdb8 R11: 0000000000000246 R12: 0000000000027ea9
R13: 00007f72051b6080 R14: ffffffffffffffff R15: 00007ffcc8f344d0
 </TASK>
INFO: task syz.1.30:6533 is blocked on a mutex likely owned by task udevd:6537.
task:udevd           state:D stack:22456 pid:6537  tgid:6537  ppid:5168   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x16fd/0x4cb0 kernel/sched/core.c:6786
 __schedule_loop kernel/sched/core.c:6864 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6879
 io_schedule+0x81/0xe0 kernel/sched/core.c:7724
 folio_wait_bit_common+0x7ae/0xb80 mm/filemap.c:1317
 folio_wait_bit_killable mm/filemap.c:1462 [inline]
 folio_wait_locked_killable include/linux/pagemap.h:1196 [inline]
 filemap_read_folio+0x203/0x370 mm/filemap.c:2418
 do_read_cache_folio+0x350/0x590 mm/filemap.c:3894
 read_mapping_folio include/linux/pagemap.h:972 [inline]
 read_part_sector+0xb6/0x2b0 block/partitions/core.c:722
 adfspart_check_ICS+0xa4/0xa50 block/partitions/acorn.c:360
 check_partition block/partitions/core.c:141 [inline]
 blk_add_partitions block/partitions/core.c:589 [inline]
 bdev_disk_changed+0x75d/0x14b0 block/partitions/core.c:693
 blkdev_get_whole+0x380/0x510 block/bdev.c:748
 bdev_open+0x318/0xe80 block/bdev.c:957
 blkdev_open+0x3a8/0x510 block/fops.c:676
 do_dentry_open+0xde8/0x1940 fs/open.c:964
 vfs_open+0x3b/0x340 fs/open.c:1094
 do_open fs/namei.c:3896 [inline]
 path_openat+0x2ee1/0x3830 fs/namei.c:4055
 do_filp_open+0x1fa/0x410 fs/namei.c:4082
 do_sys_openat2+0x121/0x1c0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x8a/0x300 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7ff1168a7407
RSP: 002b:00007fff6fc592f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ff117084880 RCX: 00007ff1168a7407
RDX: 00000000000a0800 RSI: 00005614f3a7e4f0 RDI: ffffffffffffff9c
RBP: 00005614f3a7d910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00005614f3a92850
R13: 00005614f3a95430 R14: 0000000000000000 R15: 00005614f3a92850
 </TASK>

Showing all locks held in the system:
2 locks held by kworker/u8:0/12:
1 lock held by khungtaskd/31:
 #0: ffffffff8db3d160 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8db3d160 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8db3d160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
2 locks held by getty/5557:
 #0: ffff88803458a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by udevd/6247:
 #0: ffff888024e99358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6280:
 #0: ffff888024ec3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6312:
 #0: ffff888027dc1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6351:
 #0: ffff888024d0f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6352:
 #0: ffff888024f0f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by syz.3.19/6503:
 #0: ffff888024e99358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6510:
 #0: ffff888024ec7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by syz.1.30/6533:
 #0: ffff888024d0b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 block/bdev.c:1128
1 lock held by udevd/6537:
 #0: ffff888024d0b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6543:
 #0: ffff88802392d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6548:
 #0: ffff888030624358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6553:
 #0: ffff888025507358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6572:
 #0: ffff88807961b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by udevd/6598:
 #0: ffff88807bc32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
1 lock held by syz.4.124/7336:
 #0: ffff888024d0f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xda/0xe80 block/bdev.c:945
6 locks held by syz.5.1564/12196:
 #0: ffffffff8eed6f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 net/netlink/genetlink.c:1209
 #2: ffff88806965f230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 drivers/block/nbd.c:2111
 #3: ffff8880582e2458 (&q->limits_lock){+.+.}-{4:4}, at: queue_limits_start_update include/linux/blkdev.h:1007 [inline]
 #3: ffff8880582e2458 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a2/0x6c0 drivers/block/nbd.c:354
 #4: ffff8880582e1e00 (&q->q_usage_counter(io)#649){++++}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #4: ffff8880582e1e00 (&q->q_usage_counter(io)#649){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 block/blk-settings.c:482
 #5: ffff8880582e1e38 (&q->q_usage_counter(queue)#599){+.+.}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #5: ffff8880582e1e38 (&q->q_usage_counter(queue)#599){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 block/blk-settings.c:482
2 locks held by syz.0.1565/12201:
 #0: ffffffff8eed6f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 net/netlink/genetlink.c:1209
2 locks held by syz.6.1567/12205:
 #0: ffffffff8eed6f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 net/netlink/genetlink.c:1209
2 locks held by syz.2.1568/12210:
 #0: ffffffff8eed6f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline]
 #1: ffffffff8eed6d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 net/netlink/genetlink.c:1209

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:307 [inline]
 watchdog+0x13f0/0x1430 kernel/hung_task.c:470
 kthread+0x711/0x890 kernel/kthread.c:464
 ret_from_fork+0x3f5/0x760 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5168 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0033:0x7ff116976bbd
Code: 07 fe ff ff 66 0f 1f 84 00 00 00 00 00 83 fa 01 76 7b 89 f8 09 f0 25 ff 0f 00 00 3d e0 0f 00 00 7f 2b c5 fe 6f 16 c5 ed 74 17 <c5> fd d7 c2 ff c0 c4 e2 68 f5 d0 0f 85 c2 fd ff ff 31 c0 e9 c9 fd
RSP: 002b:00007fff6fc59548 EFLAGS: 00000283
RAX: 0000000000000f74 RBX: 00005614f44b0370 RCX: 0000000000000033
RDX: 000000000000001c RSI: 00005614f44afe34 RDI: 00005614f42b1d64
RBP: 00005614f42b2320 R08: 0000000000000010 R09: 00005614f3a85900
R10: 000000000000001c R11: 000000000000001d R12: 0000000002a02b40
R13: 00005614eb593100 R14: 0000000000000000 R15: 0000000000003e3f
FS:  00007ff117084880 GS:  0000000000000000