[ 37.519197][ T26] audit: type=1400 audit(1657655527.792:81): avc: denied { setattr } for pid=2644 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.543919][ T26] audit: type=1400 audit(1657655527.822:82): avc: denied { execmem } for pid=2645 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.569793][ T26] audit: type=1400 audit(1657655527.822:83): avc: denied { mounton } for pid=2646 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 38.290285][ T2650] can: request_module (can-proto-0) failed. [ 38.391683][ T2650] can: request_module (can-proto-0) failed. [ 38.415127][ T2650] can: request_module (can-proto-0) failed. [ 48.124194][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 48.124215][ T26] audit: type=1400 audit(1657655538.562:165): avc: denied { append } for pid=2134 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.152616][ T26] audit: type=1400 audit(1657655538.562:166): avc: denied { open } for pid=2134 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.175127][ T26] audit: type=1400 audit(1657655538.562:167): avc: denied { getattr } for pid=2134 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2022/07/12 19:52:26 parsed 1 programs 2022/07/12 19:52:26 executed programs: 0 [ 55.868913][ T26] audit: type=1400 audit(1657655546.302:168): avc: denied { mounton } for pid=2712 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.894483][ T26] audit: type=1400 audit(1657655546.302:169): avc: denied { mount } for pid=2712 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.918266][ T26] audit: type=1400 audit(1657655546.332:170): avc: denied { mount } for pid=2715 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.941037][ T26] audit: type=1400 audit(1657655546.332:171): avc: denied { mounton } for pid=2715 comm="syz-executor.0" path="/syzcgroup/unified" dev="sda1" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.964471][ T26] audit: type=1400 audit(1657655546.332:172): avc: denied { mount } for pid=2715 comm="syz-executor.0" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.988916][ T2719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.992499][ T26] audit: type=1400 audit(1657655547.422:173): avc: denied { ioctl } for pid=2715 comm="syz-executor.0" path="socket:[28890]" dev="sockfs" ino=28890 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.997129][ T2719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.029457][ T2719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.037528][ T2719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.045048][ T2719] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.052279][ T2719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.124387][ T2715] chnl_net:caif_netlink_parms(): no params data found [ 57.161449][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.169341][ T2715] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.177179][ T2715] device bridge_slave_0 entered promiscuous mode [ 57.186035][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.193100][ T2715] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.200857][ T2715] device bridge_slave_1 entered promiscuous mode [ 57.219779][ T2715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.230564][ T2715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.250958][ T2715] team0: Port device team_slave_0 added [ 57.258098][ T2715] team0: Port device team_slave_1 added [ 57.273099][ T2715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.280213][ T2715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.306438][ T2715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.318855][ T2715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.325913][ T2715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.351834][ T2715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.426485][ T2715] device hsr_slave_0 entered promiscuous mode [ 57.474086][ T2715] device hsr_slave_1 entered promiscuous mode [ 57.600627][ T26] audit: type=1400 audit(1657655548.032:174): avc: denied { create } for pid=2715 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.603480][ T2715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.622483][ T26] audit: type=1400 audit(1657655548.032:175): avc: denied { write } for pid=2715 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.649175][ T26] audit: type=1400 audit(1657655548.032:176): avc: denied { read } for pid=2715 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.687624][ T2715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.746168][ T2715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.796037][ T2715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.857030][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.864384][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.872435][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.879549][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.917808][ T2715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.930863][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.940587][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.950747][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.959048][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.972365][ T2715] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.983516][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.992161][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.999480][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.026835][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.035698][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.042718][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.050781][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.059239][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.067556][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.076135][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.084821][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.093276][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.110096][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.117718][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.131215][ T2715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.155558][ T26] audit: type=1400 audit(1657655548.592:177): avc: denied { sys_module } for pid=2715 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.236801][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.245523][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.256827][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.265906][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.274761][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.282359][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.292292][ T2715] device veth0_vlan entered promiscuous mode [ 58.302806][ T2715] device veth1_vlan entered promiscuous mode [ 58.321003][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.329214][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.337504][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.346523][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.357099][ T2715] device veth0_macvtap entered promiscuous mode [ 58.366282][ T2715] device veth1_macvtap entered promiscuous mode [ 58.379229][ T2715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.386716][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.395452][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.403280][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.412384][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.422831][ T2715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.431377][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.440001][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.451121][ T2715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.460270][ T2715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.469865][ T2715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.478850][ T2715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.534102][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.542251][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.553525][ T135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.568163][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.576304][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.586711][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.727121][ T2736] nbd0: detected capacity change from 0 to 5092 [ 59.144922][ T135] Bluetooth: hci0: command 0x0409 tx timeout [ 61.234216][ T135] Bluetooth: hci0: command 0x041b tx timeout [ 61.672476][ T2736] block nbd0: shutting down sockets [ 63.304578][ T1753] Bluetooth: hci0: command 0x040f tx timeout [ 65.384110][ T6] Bluetooth: hci0: command 0x0419 tx timeout [ 88.744745][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 30 seconds [ 118.820651][ T2152] udevd[2152]: worker [2720] /devices/virtual/block/nbd0 is taking a long time [ 118.824098][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 60 seconds [ 148.903909][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 90 seconds [ 178.983936][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 120 seconds [ 180.423906][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 209.063898][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 150 seconds [ 239.034301][ T2152] udevd[2152]: worker [2720] /devices/virtual/block/nbd0 timeout; kill it [ 239.043696][ T2152] udevd[2152]: seq 5809 '/devices/virtual/block/nbd0' killed [ 239.143964][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 180 seconds [ 269.223928][ T50] block nbd0: Possible stuck request 00000000743963bf: control (read@0,4096B). Runtime 210 seconds [ 285.863991][ T27] INFO: task udevd:2720 blocked for more than 143 seconds. [ 285.871391][ T27] Not tainted 5.19.0-rc6-syzkaller #0 [ 285.878353][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.887079][ T27] task:udevd state:D stack:26624 pid: 2720 ppid: 2152 flags:0x00004004 [ 285.896594][ T27] Call Trace: [ 285.899884][ T27] [ 285.902800][ T27] __schedule+0xd95/0x2820 [ 285.908067][ T27] ? io_schedule_timeout+0x140/0x140 [ 285.913479][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 285.918963][ T27] ? preempt_schedule_common+0x59/0xc0 [ 285.924459][ T27] schedule+0xd2/0x1f0 [ 285.928507][ T27] io_schedule+0xba/0x130 [ 285.932807][ T27] folio_wait_bit_common+0x387/0x7d0 [ 285.938133][ T27] ? filemap_range_has_page+0x220/0x220 [ 285.943697][ T27] ? end_buffer_async_read_io+0x2f0/0x2f0 [ 285.949497][ T27] ? folio_unlock+0x80/0x80 [ 285.954053][ T27] ? __zone_watermark_ok+0x450/0x450 [ 285.959338][ T27] do_read_cache_folio+0x3be/0x5b0 [ 285.964492][ T27] ? blkdev_writepages+0x10/0x10 [ 285.969427][ T27] read_cache_page+0x48/0x1f0 [ 285.974132][ T27] read_part_sector+0xe0/0x690 [ 285.978893][ T27] adfspart_check_ICS+0x96/0x610 [ 285.983891][ T27] ? pointer+0x750/0x750 [ 285.988234][ T27] ? bdev_disk_changed+0x26e/0xd20 [ 285.993370][ T27] ? adfspart_check_ADFS+0x3c0/0x3c0 [ 285.998808][ T27] ? snprintf+0x9e/0xd0 [ 286.002961][ T27] ? vsprintf+0x10/0x10 [ 286.007253][ T27] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 286.012830][ T27] ? bdev_disk_changed+0x26e/0xd20 [ 286.018464][ T27] ? adfspart_check_ADFS+0x3c0/0x3c0 [ 286.023834][ T27] bdev_disk_changed+0x497/0xd20 [ 286.028924][ T27] blkdev_get_whole+0x141/0x270 [ 286.033930][ T27] blkdev_get_by_dev.part.0+0x4fa/0xa50 [ 286.039515][ T27] blkdev_open+0xde/0x240 [ 286.043890][ T27] do_dentry_open+0x414/0xfe0 [ 286.048579][ T27] ? blkdev_close+0x90/0x90 [ 286.053058][ T27] ? may_open+0xce/0x330 [ 286.057625][ T27] path_openat+0x9cf/0x2360 [ 286.062144][ T27] ? lookup_open.isra.0+0x1760/0x1760 [ 286.067588][ T27] ? lockdep_hardirqs_on_prepare+0x440/0x440 [ 286.073832][ T27] ? lockdep_hardirqs_on_prepare+0x440/0x440 [ 286.079825][ T27] ? lock_is_held_type+0xfc/0x170 [ 286.084953][ T27] ? lock_is_held_type+0xfc/0x170 [ 286.089981][ T27] do_filp_open+0x199/0x3d0 [ 286.094567][ T27] ? may_open_dev+0xd0/0xd0 [ 286.099112][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 286.104173][ T27] ? _raw_spin_unlock+0x24/0x40 [ 286.109029][ T27] ? alloc_fd+0x1fe/0x560 [ 286.113342][ T27] ? getname_flags.part.0+0x89/0x440 [ 286.118807][ T27] do_sys_openat2+0x11e/0x3f0 [ 286.123488][ T27] ? __fget_light+0x4c/0x210 [ 286.128179][ T27] ? build_open_flags+0x490/0x490 [ 286.133226][ T27] ? __sys_recvmsg+0xb6/0x140 [ 286.137965][ T27] ? __sys_recvmsg_sock+0x10/0x10 [ 286.143010][ T27] __x64_sys_openat+0x11b/0x1d0 [ 286.147934][ T27] ? __ia32_sys_open+0x190/0x190 [ 286.152894][ T27] ? lock_is_held_type+0xfc/0x170 [ 286.157986][ T27] ? lockdep_hardirqs_on_prepare+0x23e/0x440 [ 286.164011][ T27] ? syscall_enter_from_user_mode+0x1d/0x60 [ 286.169887][ T27] ? lockdep_hardirqs_on+0x8b/0x110 [ 286.175126][ T27] do_syscall_64+0x35/0x80 [ 286.179530][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.185504][ T27] RIP: 0033:0x7f5b39925697 [ 286.190001][ T27] RSP: 002b:00007fff4b9d50d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.198451][ T27] RAX: ffffffffffffffda RBX: 000055db1b27d360 RCX: 00007f5b39925697 [ 286.206460][ T27] RDX: 00000000000a0800 RSI: 000055db1b260ab0 RDI: 00000000ffffff9c [ 286.214472][ T27] RBP: 000055db1b260ab0 R08: 0000000000000001 R09: 00007fff4b9e4080 [ 286.222627][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 286.230662][ T27] R13: 000055db1b2661e0 R14: 0000000000000001 R15: 000055db1b22f2c0 [ 286.238658][ T27] [ 286.241681][ T27] INFO: task syz-executor.0:2735 blocked for more than 143 seconds. [ 286.249699][ T27] Not tainted 5.19.0-rc6-syzkaller #0 [ 286.255593][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.264446][ T27] task:syz-executor.0 state:D stack:27224 pid: 2735 ppid: 2715 flags:0x00000004 [ 286.273810][ T27] Call Trace: [ 286.277080][ T27] [ 286.279987][ T27] __schedule+0xd95/0x2820 [ 286.284473][ T27] ? io_schedule_timeout+0x140/0x140 [ 286.289746][ T27] ? lock_is_held_type+0xfc/0x170 [ 286.294808][ T27] schedule+0xd2/0x1f0 [ 286.298863][ T27] schedule_preempt_disabled+0xf/0x20 [ 286.304261][ T27] __mutex_lock+0xa70/0x1350 [ 286.308930][ T27] ? blkdev_put+0x9a/0x670 [ 286.313322][ T27] ? mutex_lock_io_nested+0x1190/0x1190 [ 286.319027][ T27] ? do_raw_spin_unlock+0x171/0x230 [ 286.324398][ T27] ? _raw_spin_unlock+0x24/0x40 [ 286.329243][ T27] ? locks_remove_file+0x2fc/0x4a0 [ 286.334377][ T27] blkdev_put+0x9a/0x670 [ 286.338608][ T27] blkdev_close+0x5f/0x90 [ 286.342917][ T27] __fput+0x1f5/0x8c0 [ 286.346956][ T27] task_work_run+0xc0/0x160 [ 286.351450][ T27] exit_to_user_mode_prepare+0x1e0/0x1f0 [ 286.357128][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 286.362614][ T27] do_syscall_64+0x42/0x80 [ 286.367098][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.373011][ T27] RIP: 0033:0x418c1b [ 286.377204][ T27] RSP: 002b:00007ffc30c200e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.385656][ T27] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000418c1b [ 286.393842][ T27] RDX: 00000000000003e7 RSI: 0000001b2d6200bc RDI: 0000000000000004 [ 286.401916][ T27] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000001b2d6200c4 [ 286.409985][ T27] R10: 00007ffc30d3d090 R11: 0000000000000293 R12: 000000000055d9a0 [ 286.417995][ T27] R13: 000000000055d9a0 R14: 000000000055cf20 R15: 000000000055cf20 [ 286.426223][ T27] [ 286.429260][ T27] INFO: task syz-executor.0:2736 blocked for more than 143 seconds. [ 286.437295][ T27] Not tainted 5.19.0-rc6-syzkaller #0 [ 286.443198][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.451959][ T27] task:syz-executor.0 state:D stack:26888 pid: 2736 ppid: 2715 flags:0x00004006 [ 286.461236][ T27] Call Trace: [ 286.464594][ T27] [ 286.467523][ T27] __schedule+0xd95/0x2820 [ 286.471925][ T27] ? io_schedule_timeout+0x140/0x140 [ 286.477251][ T27] ? lock_is_held_type+0xfc/0x170 [ 286.482283][ T27] schedule+0xd2/0x1f0 [ 286.486466][ T27] schedule_preempt_disabled+0xf/0x20 [ 286.491833][ T27] __mutex_lock+0xa70/0x1350 [ 286.496473][ T27] ? blkdev_put+0x9a/0x670 [ 286.500899][ T27] ? mutex_lock_io_nested+0x1190/0x1190 [ 286.506511][ T27] ? do_raw_spin_unlock+0x171/0x230 [ 286.511701][ T27] ? _raw_spin_unlock+0x24/0x40 [ 286.516573][ T27] ? locks_remove_file+0x2fc/0x4a0 [ 286.521673][ T27] blkdev_put+0x9a/0x670 [ 286.525971][ T27] blkdev_close+0x5f/0x90 [ 286.530391][ T27] __fput+0x1f5/0x8c0 [ 286.534436][ T27] task_work_run+0xc0/0x160 [ 286.538933][ T27] get_signal+0x19b/0x2060 [ 286.543321][ T27] ? kasan_save_stack+0x2e/0x40 [ 286.548225][ T27] ? task_work_add+0x36/0x160 [ 286.552895][ T27] ? fput+0xa0/0x120 [ 286.556819][ T27] ? __x64_sys_ioctl+0x13e/0x190 [ 286.561746][ T27] ? do_syscall_64+0x35/0x80 [ 286.566371][ T27] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.572432][ T27] ? exit_signals+0x720/0x720 [ 286.577343][ T27] ? sock_shutdown+0x138/0x1b0 [ 286.582120][ T27] arch_do_signal_or_restart+0x88/0x1b90 [ 286.587887][ T27] ? nbd_start_device+0xac0/0xac0 [ 286.592934][ T27] ? get_sigframe_size+0x10/0x10 [ 286.597924][ T27] ? selinux_bprm_creds_for_exec+0xad0/0xad0 [ 286.603952][ T27] ? xfd_validate_state+0x1f/0x120 [ 286.609054][ T27] ? blkdev_ioctl+0x2ff/0x6c0 [ 286.613706][ T27] ? kick_process+0xf2/0x190 [ 286.618371][ T27] exit_to_user_mode_prepare+0x14a/0x1f0 [ 286.624027][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 286.629811][ T27] do_syscall_64+0x42/0x80 [ 286.634377][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.640262][ T27] RIP: 0033:0x465ad9 [ 286.644186][ T27] RSP: 002b:00007efd9429b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.652590][ T27] RAX: fffffffffffffe00 RBX: 000000000055cf20 RCX: 0000000000465ad9 [ 286.660614][ T27] RDX: ffffffffffffffff RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.668627][ T27] RBP: 00000000004af756 R08: 0000000000000000 R09: 0000000000000000 [ 286.676703][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055cf20 [ 286.684706][ T27] R13: 00007ffc30c2007f R14: 00007efd9429b300 R15: 0000000000022000 [ 286.692753][ T27] [ 286.695813][ T27] [ 286.695813][ T27] Showing all locks held in the system: [ 286.703518][ T27] 1 lock held by khungtaskd/27: [ 286.708409][ T27] #0: ffffffff8a1bc620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x28c [ 286.718289][ T27] 2 locks held by getty/2307: [ 286.722938][ T27] #0: ffff8881034f4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 [ 286.732833][ T27] #1: ffffc900016c32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb21/0x1050 [ 286.743015][ T27] 1 lock held by udevd/2720: [ 286.747681][ T27] #0: ffff888108e77918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x78/0xa50 [ 286.758237][ T27] 1 lock held by syz-executor.0/2735: [ 286.763579][ T27] #0: ffff888108e77918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x9a/0x670 [ 286.773079][ T27] 1 lock held by syz-executor.0/2736: [ 286.778472][ T27] #0: ffff888108e77918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x9a/0x670 [ 286.787991][ T27] [ 286.790319][ T27] ============================================= [ 286.790319][ T27] [ 286.798786][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 286.805621][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.19.0-rc6-syzkaller #0 [ 286.813746][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 286.824780][ T27] Call Trace: [ 286.828043][ T27] [ 286.830956][ T27] dump_stack_lvl+0xe9/0x139 [ 286.835527][ T27] panic+0x2b7/0x52b [ 286.839394][ T27] ? panic_print_sys_info.part.0+0x69/0x69 [ 286.845212][ T27] watchdog.cold+0x205/0x230 [ 286.849787][ T27] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 286.855863][ T27] kthread+0x299/0x340 [ 286.859913][ T27] ? kthread_complete_and_exit+0x20/0x20 [ 286.865519][ T27] ret_from_fork+0x1f/0x30 [ 286.869918][ T27] [ 286.873529][ T27] Kernel Offset: disabled [ 286.877842][ T27] Rebooting in 86400 seconds..