INFO: task udevd:10585 blocked in I/O wait for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:25320 pid:10585 tgid:10585 ppid:5145 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6740 kernel/sched/core.c:7239 __schedule_loop kernel/sched/core.c:7316 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7331 io_schedule+0x8a/0xf0 kernel/sched/core.c:8159 folio_wait_bit_common+0x414/0xa70 mm/filemap.c:1329 folio_put_wait_locked mm/filemap.c:1498 [inline] do_read_cache_folio+0x3bc/0x6b0 mm/filemap.c:4128 read_mapping_folio include/linux/pagemap.h:1015 [inline] read_part_sector+0xd1/0x370 block/partitions/core.c:724 adfspart_check_POWERTEC+0x8a/0x630 block/partitions/acorn.c:451 check_partition block/partitions/core.c:143 [inline] blk_add_partitions block/partitions/core.c:591 [inline] bdev_disk_changed+0x7b1/0x1260 block/partitions/core.c:695 blkdev_get_whole+0x187/0x290 block/bdev.c:794 bdev_open+0x2c7/0xe40 block/bdev.c:1003 blkdev_open+0x34e/0x4f0 block/fops.c:674 do_dentry_open+0x6ab/0x14d0 fs/open.c:996 vfs_open+0x82/0x3f0 fs/open.c:1101 do_open fs/namei.c:4837 [inline] path_openat+0x19fa/0x2440 fs/namei.c:5000 do_file_open+0x20e/0x430 fs/namei.c:5029 do_sys_openat2+0x10f/0x1e0 fs/open.c:1417 do_sys_open fs/open.c:1423 [inline] __do_sys_openat fs/open.c:1439 [inline] __se_sys_openat fs/open.c:1434 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1434 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa2cf2a7407 RSP: 002b:00007ffd80248810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa2cf96d880 RCX: 00007fa2cf2a7407 RDX: 00000000000a0800 RSI: 0000562057c58a10 RDI: ffffffffffffff9c RBP: 0000562057c3f910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000562057c69360 R13: 0000562057c4d190 R14: 0000000000000000 R15: 0000562057c69360 Showing all locks held in the system: locks held by khungtaskd/43: 1, last CPU#2: #0: ffffffff8ede9440 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8ede9440 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8ede9440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6793 locks held by kworker/u33:9/1155: 2, on CPU#2: #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc90005f87d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 locks held by getty/5539: 2, on CPU#0: #0: ffff888022d900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211 locks held by kworker/0:4/8446: 3, on CPU#0: #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc900045bfd08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 locks held by udevd/10585: 1, on CPU#2: #0: ffff888027aeb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:991 locks held by udevd/11072: 1, on CPU#2: #0: ffff888025c7d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:991 locks held by udevd/13175: 1, on CPU#2: #0: ffff888027aec350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:991 locks held by udevd/13180: 1, on CPU#2: #0: ffff888027bff350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:991 locks held by udevd/13181: 1, on CPU#0: #0: ffff888027aef350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:991 locks held by kworker/u33:0/14195: 3, on CPU#0: #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc900039c7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:313 locks held by kworker/0:2H/15027: 2, last CPU#0: #0: ffff88801c0aa540 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc900032c7d08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 locks held by syz.1.2693/18072: 2, on CPU#2: #0: ffffffff90c6f280 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ca/0x6b0 net/socket.c:1408 #1: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xcf/0xa70 net/8021q/vlan.c:519 locks held by syz.3.2695/18080: 3, on CPU#2: #0: ffffffff900244e8 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline] #0: ffffffff900244e8 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline] #0: ffffffff900244e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 net/core/rtnetlink.c:574 #1: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff90c9f400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 net/core/rtnetlink.c:4158 #2: ffffffff8edf4ee8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311 locks held by syz.2.2696/18087: 0, last CPU#0 ============================================= NMI backtrace for cpu 2 CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 2 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 18087 Comm: syz.2.2696 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__trace_hardirqs_on_caller kernel/locking/lockdep.c:4367 [inline] RIP: 0010:lockdep_hardirqs_on_prepare kernel/locking/lockdep.c:4426 [inline] RIP: 0010:lockdep_hardirqs_on_prepare+0xf8/0x1c0 kernel/locking/lockdep.c:4378 Code: e8 8d de d6 09 b8 ff ff ff ff 65 0f c1 05 a8 3b 9f 12 83 f8 01 75 15 5b c3 cc cc cc cc be 06 00 00 00 48 89 df e8 88 fe ff ff cd 90 0f 0b 90 48 c7 c7 d4 bb 3a 8e e8 56 de d6 09 65 c7 05 73 RSP: 0000:ffffc900033178b8 EFLAGS: 00000046 RAX: 0000000000000001 RBX: ffff8880213e2580 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000006 RDI: ffff8880213e2580 RBP: 0000000000000283 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b226280 R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88802b2262c8 FS: 0000000000000000(0000) GS:ffff8880969db000(0063) knlGS:00000000f5436b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 0000000080001000 CR3: 000000004ce33000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: trace_hardirqs_on+0x36/0x40 kernel/trace/trace_preemptirq.c:78 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] _raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:221 __mod_timer+0x409/0xca0 kernel/time/timer.c:1139 add_timer+0x62/0x90 kernel/time/timer.c:1249 schedule_timeout+0x122/0x280 kernel/time/sleep_timeout.c:98 snd_rawmidi_write+0x492/0xc60 sound/core/rawmidi.c:1616 do_loop_readv_writev fs/read_write.c:851 [inline] do_loop_readv_writev fs/read_write.c:836 [inline] vfs_writev+0x5ed/0xdd0 fs/read_write.c:1060 do_writev+0x28a/0x340 fs/read_write.c:1104 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline] __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf7f73fec Code: Unable to access opcode bytes at 0xf7f73fc2. RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000