INFO: task udevd:11690 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:23472 pid:11690 ppid:3642 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5245 [inline] __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562 schedule+0xb9/0x180 kernel/sched/core.c:6638 io_schedule+0x7c/0xd0 kernel/sched/core.c:8798 folio_wait_bit_common+0x70a/0xfa0 mm/filemap.c:1324 folio_put_wait_locked mm/filemap.c:1493 [inline] do_read_cache_folio+0x1a9/0x760 mm/filemap.c:3641 read_mapping_folio include/linux/pagemap.h:799 [inline] read_part_sector+0xce/0x350 block/partitions/core.c:724 adfspart_check_POWERTEC+0xc0/0x890 block/partitions/acorn.c:454 check_partition block/partitions/core.c:146 [inline] blk_add_partitions block/partitions/core.c:609 [inline] bdev_disk_changed+0x7d9/0x14a0 block/partitions/core.c:695 blkdev_get_whole+0x2e8/0x370 block/bdev.c:704 blkdev_get_by_dev+0x32e/0xa60 block/bdev.c:841 blkdev_open+0x11e/0x2e0 block/fops.c:500 do_dentry_open+0x7e9/0x10d0 fs/open.c:882 do_open fs/namei.c:3634 [inline] path_openat+0x2635/0x2ee0 fs/namei.c:3791 do_filp_open+0x1f1/0x430 fs/namei.c:3818 do_sys_openat2+0x150/0x4b0 fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1347 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f59d37d5407 RSP: 002b:00007ffd05f43d20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f59d3749880 RCX: 00007f59d37d5407 RDX: 00000000000a0800 RSI: 0000557957aff2d0 RDI: ffffffffffffff9c RBP: 0000557957afe910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000557957b460f0 R13: 0000557957b16410 R14: 0000000000000000 R15: 0000557957b460f0 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8cb2e7f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffffffff8cb2f010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6513 2 locks held by getty/4030: #0: ffff88814ce3d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 drivers/tty/n_tty.c:2198 3 locks held by kworker/0:14/4514: #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 kernel/sched/core.c:546 #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 kernel/sched/psi.c:999 #2: ffff8880559ecee0 (&r->consumer_lock#2){+.+.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline] #2: ffff8880559ecee0 (&r->consumer_lock#2){+.+.}-{2:2}, at: ptr_ring_consume_bh include/linux/ptr_ring.h:365 [inline] #2: ffff8880559ecee0 (&r->consumer_lock#2){+.+.}-{2:2}, at: wg_packet_decrypt_worker+0x980/0xe00 drivers/net/wireguard/receive.c:499 3 locks held by kworker/1:3/8523: #0: ffff88814cb50938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 #1: ffffc90003207d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x14f0 net/ipv6/addrconf.c:4131 2 locks held by kworker/1:18/10100: #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 #1: ffffc90003cbfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 3 locks held by kworker/u4:34/11261: #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 #1: ffffc90003f17d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267 #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263 1 lock held by udevd/11690: #0: ffff888024d884c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 block/bdev.c:832 3 locks held by syz-executor/14263: 2 locks held by syz.0.1984/14559: 2 locks held by dhcpcd/14567: #0: ffff888067b2c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1805 [inline] #0: ffff888067b2c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249 #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 kernel/rcu/tree_exp.h:962 2 locks held by dhcpcd/14568: #0: ffff888067b2a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1805 [inline] #0: ffff888067b2a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249 #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline] #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 kernel/rcu/tree_exp.h:962 1 lock held by dhcpcd/14569: #0: ffff8880196dc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1805 [inline] #0: ffff8880196dc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 net/packet/af_packet.c:3249 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106 nmi_cpu_backtrace+0x3e6/0x460 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1d4/0x450 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xeee/0xf30 kernel/hung_task.c:377 kthread+0x29d/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 14574 Comm: dhcpcd-run-hook Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:get_current kernel/rcu/tree_plugin.h:401 [inline] RIP: 0010:rcu_preempt_read_enter kernel/rcu/tree_plugin.h:379 [inline] RIP: 0010:__rcu_read_lock+0x0/0x50 kernel/rcu/tree_plugin.h:402 Code: fb ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 0f fb ff ff 4c 89 f7 e8 51 46 66 00 e9 02 fb ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 <53> 65 48 8b 1d 07 32 95 7e 48 81 c3 3c 04 00 00 48 89 d8 48 c1 e8 RSP: 0018:ffffc9000414f268 EFLAGS: 00000293 RAX: ffffffff818f1ba6 RBX: 00007fa4b7f4b636 RCX: ffff888044f23c00 RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: 00007fa4b7f4b636 RBP: 0000000000000001 R08: 0000000000000004 R09: 000000000000000b R10: dffffc0000000000 R11: fffff52000829e6d R12: ffff888044f23c00 R13: ffff888140008280 R14: 00007fa4b7f4b636 R15: 1ffff92000829e6a FS: 00007fa4b7db1c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa4b80157e8 CR3: 000000005d85f000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_lock include/linux/rcupdate.h:789 [inline] is_bpf_text_address+0x1b/0x2a0 kernel/bpf/core.c:735 kernel_text_address+0x9c/0xd0 kernel/extable.c:125 __kernel_text_address+0x9/0x30 kernel/extable.c:79 unwind_get_return_address+0x49/0x80 arch/x86/kernel/unwind_orc.c:323 arch_stack_walk+0xf2/0x140 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0xa6/0xf0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 __kasan_slab_alloc+0x6b/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook+0x4b/0x480 mm/slab.h:737 slab_alloc_node mm/slub.c:3359 [inline] slab_alloc mm/slub.c:3367 [inline] __kmem_cache_alloc_lru mm/slub.c:3374 [inline] kmem_cache_alloc+0x123/0x2f0 mm/slub.c:3383 anon_vma_chain_alloc mm/rmap.c:141 [inline] anon_vma_clone+0xb4/0x4e0 mm/rmap.c:287 anon_vma_fork+0x75/0x4f0 mm/rmap.c:350 dup_mmap kernel/fork.c:669 [inline] dup_mm kernel/fork.c:1547 [inline] copy_mm+0xc32/0x1690 kernel/fork.c:1596 copy_process+0x1979/0x4080 kernel/fork.c:2357 kernel_clone+0x24b/0x900 kernel/fork.c:2764 __do_sys_clone kernel/fork.c:2905 [inline] __se_sys_clone kernel/fork.c:2889 [inline] __x64_sys_clone+0x1a7/0x220 kernel/fork.c:2889 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fa4b7f4b636 Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 RSP: 002b:00007ffc00172650 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007ffc00172658 RCX: 00007fa4b7f4b636 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000558280527e60 R08: 0000000000000000 R09: 0000000000000000 R10: 00007fa4b7db1f50 R11: 0000000000000246 R12: 000055828052a060 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000