INFO: task udevd:5880 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21864 pid:5880 tgid:5880 ppid:5199 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5254 [inline] __schedule+0x17c4/0x4d60 kernel/sched/core.c:6862 __schedule_loop kernel/sched/core.c:6944 [inline] schedule+0x165/0x360 kernel/sched/core.c:6959 io_schedule+0x80/0xd0 kernel/sched/core.c:7791 folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1335 folio_put_wait_locked mm/filemap.c:1499 [inline] do_read_cache_folio+0x1ad/0x590 mm/filemap.c:4021 read_mapping_folio include/linux/pagemap.h:1007 [inline] read_part_sector+0xb6/0x2b0 block/partitions/core.c:722 adfspart_check_POWERTEC+0x8c/0xf30 block/partitions/acorn.c:454 check_partition block/partitions/core.c:141 [inline] blk_add_partitions block/partitions/core.c:589 [inline] bdev_disk_changed+0x75f/0x14b0 block/partitions/core.c:693 blkdev_get_whole+0x380/0x510 block/bdev.c:748 bdev_open+0x31e/0xd30 block/bdev.c:957 blkdev_open+0x457/0x600 block/fops.c:701 do_dentry_open+0x953/0x13f0 fs/open.c:965 vfs_open+0x3b/0x340 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4134 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f44686a7407 RSP: 002b:00007ffe8e3a8fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f4468d8e880 RCX: 00007f44686a7407 RDX: 00000000000a0800 RSI: 0000556a636a2360 RDI: ffffffffffffff9c RBP: 0000556a636a1910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000556a636b9e00 R13: 0000556a636af190 R14: 0000000000000000 R15: 0000556a636b9e00 INFO: task udevd:5882 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22424 pid:5882 tgid:5882 ppid:5199 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5254 [inline] __schedule+0x17c4/0x4d60 kernel/sched/core.c:6862 __schedule_loop kernel/sched/core.c:6944 [inline] schedule+0x165/0x360 kernel/sched/core.c:6959 io_schedule+0x80/0xd0 kernel/sched/core.c:7791 folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1335 folio_put_wait_locked mm/filemap.c:1499 [inline] do_read_cache_folio+0x1ad/0x590 mm/filemap.c:4021 read_mapping_folio include/linux/pagemap.h:1007 [inline] read_part_sector+0xb6/0x2b0 block/partitions/core.c:722 adfspart_check_POWERTEC+0x8c/0xf30 block/partitions/acorn.c:454 check_partition block/partitions/core.c:141 [inline] blk_add_partitions block/partitions/core.c:589 [inline] bdev_disk_changed+0x75f/0x14b0 block/partitions/core.c:693 blkdev_get_whole+0x380/0x510 block/bdev.c:748 bdev_open+0x31e/0xd30 block/bdev.c:957 blkdev_open+0x457/0x600 block/fops.c:701 do_dentry_open+0x953/0x13f0 fs/open.c:965 vfs_open+0x3b/0x340 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4134 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f44686a7407 RSP: 002b:00007ffe8e3a8fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f4468d8e880 RCX: 00007f44686a7407 RDX: 00000000000a0800 RSI: 0000556a636ae4a0 RDI: ffffffffffffff9c RBP: 0000556a636a1910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000556a636b5ba0 R13: 0000556a636af190 R14: 0000000000000000 R15: 0000556a636b5ba0 INFO: task udevd:6261 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22536 pid:6261 tgid:6261 ppid:5199 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5254 [inline] __schedule+0x17c4/0x4d60 kernel/sched/core.c:6862 __schedule_loop kernel/sched/core.c:6944 [inline] schedule+0x165/0x360 kernel/sched/core.c:6959 io_schedule+0x80/0xd0 kernel/sched/core.c:7791 folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1335 folio_put_wait_locked mm/filemap.c:1499 [inline] do_read_cache_folio+0x1ad/0x590 mm/filemap.c:4021 read_mapping_folio include/linux/pagemap.h:1007 [inline] read_part_sector+0xb6/0x2b0 block/partitions/core.c:722 adfspart_check_POWERTEC+0x8c/0xf30 block/partitions/acorn.c:454 check_partition block/partitions/core.c:141 [inline] blk_add_partitions block/partitions/core.c:589 [inline] bdev_disk_changed+0x75f/0x14b0 block/partitions/core.c:693 blkdev_get_whole+0x380/0x510 block/bdev.c:748 bdev_open+0x31e/0xd30 block/bdev.c:957 blkdev_open+0x457/0x600 block/fops.c:701 do_dentry_open+0x953/0x13f0 fs/open.c:965 vfs_open+0x3b/0x340 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4134 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f44686a7407 RSP: 002b:00007ffe8e3a8fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f4468d8e880 RCX: 00007f44686a7407 RDX: 00000000000a0800 RSI: 0000556a636b0e40 RDI: ffffffffffffff9c RBP: 0000556a636a1910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000556a636c6b40 R13: 0000556a636af190 R14: 0000000000000000 R15: 0000556a636c6b40 INFO: task udevd:6940 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22536 pid:6940 tgid:6940 ppid:5199 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5254 [inline] __schedule+0x17c4/0x4d60 kernel/sched/core.c:6862 __schedule_loop kernel/sched/core.c:6944 [inline] schedule+0x165/0x360 kernel/sched/core.c:6959 io_schedule+0x80/0xd0 kernel/sched/core.c:7791 folio_wait_bit_common+0x6b0/0xb80 mm/filemap.c:1335 folio_put_wait_locked mm/filemap.c:1499 [inline] do_read_cache_folio+0x1ad/0x590 mm/filemap.c:4021 read_mapping_folio include/linux/pagemap.h:1007 [inline] read_part_sector+0xb6/0x2b0 block/partitions/core.c:722 adfspart_check_POWERTEC+0x8c/0xf30 block/partitions/acorn.c:454 check_partition block/partitions/core.c:141 [inline] blk_add_partitions block/partitions/core.c:589 [inline] bdev_disk_changed+0x75f/0x14b0 block/partitions/core.c:693 blkdev_get_whole+0x380/0x510 block/bdev.c:748 bdev_open+0x31e/0xd30 block/bdev.c:957 blkdev_open+0x457/0x600 block/fops.c:701 do_dentry_open+0x953/0x13f0 fs/open.c:965 vfs_open+0x3b/0x340 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x2ee5/0x3830 fs/namei.c:4134 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f44686a7407 RSP: 002b:00007ffe8e3a8fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f4468d8e880 RCX: 00007f44686a7407 RDX: 00000000000a0800 RSI: 0000556a636baa50 RDI: ffffffffffffff9c RBP: 0000556a636a1910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000556a636ce570 R13: 0000556a636af190 R14: 0000000000000000 R15: 0000556a636ce570 Showing all locks held in the system: 1 lock held by rcu_preempt/16: #0: ffff8880b873a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:638 1 lock held by khungtaskd/31: #0: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5585: #0: ffff88814da9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222 1 lock held by udevd/5880: #0: ffff888141b1b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:945 1 lock held by udevd/5882: #0: ffff88814130c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:945 1 lock held by udevd/6261: #0: ffff888141328358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:945 1 lock held by udevd/6940: #0: ffff88814130e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 block/bdev.c:945 3 locks held by kworker/u8:7/14969: #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3238 [inline] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3346 #1: ffffc90003067ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3239 [inline] #1: ffffc90003067ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3346 #2: ffffffff8f2d3ac8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303 2 locks held by syz.5.3051/17725: #0: ffffffff8f2d3ac8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8f2d3ac8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8f2d3ac8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 net/core/rtnetlink.c:4064 #1: ffffffff8df430b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #1: ffffffff8df430b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:957 3 locks held by kworker/0:11/17760: #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3238 [inline] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3346 #1: ffffc900141cfba0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3239 [inline] #1: ffffc900141cfba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3346 #2: ffffffff8f2d3ac8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 3 locks held by dhcpcd/17794: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:337 [inline] watchdog+0xfa9/0xff0 kernel/hung_task.c:500 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 17797 Comm: sed Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:mas_find+0x5/0xd30 lib/maple_tree.c:5613 Code: 71 39 da f6 eb bc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 48 89 f5 49 89 fd 49 be 00 RSP: 0018:ffffc9001298f5f0 EFLAGS: 00000293 RAX: ffffffff8216b92a RBX: ffff88801e3af8c0 RCX: ffff88804e861e40 RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffc9001298f660 RBP: ffffc9001298f730 R08: ffff88804e861e40 R09: 0000000000000004 R10: 0000000000000003 R11: 0000000000000000 R12: 00007fcb1848c000 R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888125feb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcb181bc068 CR3: 0000000025df8000 CR4: 00000000003526f0 Call Trace: vma_next include/linux/mm.h:946 [inline] validate_mm+0xd9/0x4a0 mm/vma.c:654 mmap_region+0x1951/0x1d30 mm/vma.c:2786 do_mmap+0xc45/0x10d0 mm/mmap.c:558 vm_mmap_pgoff+0x2a6/0x4d0 mm/util.c:581 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcb184b6242 Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 RSP: 002b:00007ffeed5e8438 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fcb181bd000 RCX: 00007fcb184b6242 RDX: 0000000000000003 RSI: 00000000000016d0 RDI: 00007fcb181bd000 RBP: 0000000000000032 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000000032 R11: 0000000000000206 R12: 00007ffeed5e84f8 R13: 00007fcb1848bab0 R14: 00007ffeed5e88b0 R15: 00007fcb181bd000