[ 45.419227][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.451151][ T8] device veth1_macvtap left promiscuous mode [ 45.451279][ T8] device veth0_macvtap left promiscuous mode [ 45.451394][ T8] device veth1_vlan left promiscuous mode [ 45.451537][ T8] device veth0_vlan left promiscuous mode [ 45.694188][ T8] team0 (unregistering): Port device team_slave_1 removed [ 45.706646][ T8] team0 (unregistering): Port device team_slave_0 removed [ 45.721455][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.727624][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.807015][ T8] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2022/06/15 23:04:15 parsed 1 programs 2022/06/15 23:04:15 executed programs: 0 [ 58.318572][ T28] audit: type=1400 audit(1655334255.805:188): avc: denied { mounton } for pid=4038 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.320709][ T4038] cgroup: Unknown subsys name 'net' [ 58.324320][ T4038] cgroup: Unknown subsys name 'rlimit' [ 58.347437][ T28] audit: type=1400 audit(1655334255.835:189): avc: denied { mounton } for pid=4038 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.347460][ T28] audit: type=1400 audit(1655334255.835:190): avc: denied { mount } for pid=4038 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.353177][ T28] audit: type=1400 audit(1655334255.835:191): avc: denied { create } for pid=4038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.353202][ T28] audit: type=1400 audit(1655334255.835:192): avc: denied { write } for pid=4038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.353218][ T28] audit: type=1400 audit(1655334255.835:193): avc: denied { read } for pid=4038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.387076][ T28] audit: type=1400 audit(1655334255.875:194): avc: denied { read } for pid=3189 comm="dhcpcd" name="n79" dev="tmpfs" ino=1534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.387210][ T28] audit: type=1400 audit(1655334255.875:195): avc: denied { open } for pid=3189 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.387418][ T28] audit: type=1400 audit(1655334255.875:196): avc: denied { getattr } for pid=3189 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.407016][ T28] audit: type=1400 audit(1655334255.895:197): avc: denied { create } for pid=4044 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.548854][ T3612] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 65.708772][ T3612] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 66.031626][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.031659][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.868817][ T3612] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.154245][ T23] cfg80211: failed to load regulatory.db [ 74.028776][ T3612] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 78.188790][ T3612] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 80.273199][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 80.273207][ T28] audit: type=1400 audit(1655334277.765:202): avc: denied { ioctl } for pid=4079 comm="syz-executor.0" path="socket:[29537]" dev="sockfs" ino=29537 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.273816][ T3610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.274683][ T3610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.275456][ T3610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.276101][ T3610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.276559][ T3610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.276982][ T3610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.286461][ T28] audit: type=1400 audit(1655334277.775:203): avc: denied { read } for pid=4079 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.286482][ T28] audit: type=1400 audit(1655334277.775:204): avc: denied { open } for pid=4079 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.286496][ T28] audit: type=1400 audit(1655334277.775:205): avc: denied { mounton } for pid=4079 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.371890][ T4079] chnl_net:caif_netlink_parms(): no params data found [ 80.431685][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.431748][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.432251][ T4079] device bridge_slave_0 entered promiscuous mode [ 80.434156][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.434213][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.434695][ T4079] device bridge_slave_1 entered promiscuous mode [ 80.464119][ T4079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.466117][ T4079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.506240][ T4079] team0: Port device team_slave_0 added [ 80.507586][ T4079] team0: Port device team_slave_1 added [ 80.526824][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.526830][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.526837][ T4079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.527818][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.527822][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.527828][ T4079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.611732][ T4079] device hsr_slave_0 entered promiscuous mode [ 80.620682][ T4079] device hsr_slave_1 entered promiscuous mode [ 80.678194][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.678224][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.678306][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.678337][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.716818][ T4079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.723074][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.725505][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.732897][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.748308][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.760668][ T4079] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.776814][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.777120][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.777147][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.777306][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.777566][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.777590][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.783174][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.783731][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.789266][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.792619][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.796390][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.800726][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.810641][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.810730][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.816111][ T4079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.998995][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.999675][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.000215][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.000604][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.004753][ T4079] device veth0_vlan entered promiscuous mode [ 81.007947][ T4079] device veth1_vlan entered promiscuous mode [ 81.022663][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.023091][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.023652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.027535][ T4079] device veth0_macvtap entered promiscuous mode [ 81.032198][ T4079] device veth1_macvtap entered promiscuous mode [ 81.044476][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.044545][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.064072][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.067859][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.069624][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.133067][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.133077][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.134682][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.162115][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.162124][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.163668][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.173318][ T28] audit: type=1400 audit(1655334278.655:206): avc: denied { mounton } for pid=4079 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.260488][ T28] audit: type=1400 audit(1655334278.755:207): avc: denied { mounton } for pid=4098 comm="syz-executor.0" path="/root/syzkaller-testdir978149852/syzkaller.EsUL6x/0/file0" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 82.350056][ T14] Bluetooth: hci0: command 0x0409 tx timeout [ 84.429308][ T27] Bluetooth: hci0: command 0x041b tx timeout [ 86.508874][ T1135] Bluetooth: hci0: command 0x040f tx timeout [ 88.598756][ T27] Bluetooth: hci0: command 0x0419 tx timeout [ 111.469610][ T9] block nbd0: Possible stuck request ffff88801c9a0000: control (read@0,512B). Runtime 30 seconds [ 127.470307][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.470334][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.548940][ T9] block nbd0: Possible stuck request ffff88801c9a0000: control (read@0,512B). Runtime 60 seconds [ 171.628830][ T9] block nbd0: Possible stuck request ffff88801c9a0000: control (read@0,512B). Runtime 90 seconds [ 188.911262][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.911282][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.708791][ T9] block nbd0: Possible stuck request ffff88801c9a0000: control (read@0,512B). Runtime 120 seconds [ 206.348810][ T27] Bluetooth: hci0: command 0x0406 tx timeout [ 231.788787][ T9] block nbd0: Possible stuck request ffff88801c9a0000: control (read@0,512B). Runtime 150 seconds [ 241.388787][ T29] INFO: task syz-executor.0:4099 blocked for more than 143 seconds. [ 241.397255][ T29] Not tainted 5.19.0-rc2-syzkaller #0 [ 241.403378][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.412726][ T29] task:syz-executor.0 state:D stack:27400 pid: 4099 ppid: 4079 flags:0x00004004 [ 241.422157][ T29] Call Trace: [ 241.425448][ T29] [ 241.428466][ T29] __schedule+0x9cd/0x4af0 [ 241.433261][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 241.439447][ T29] ? io_schedule_timeout+0x140/0x140 [ 241.444816][ T29] schedule+0xd2/0x1f0 [ 241.449004][ T29] schedule_timeout+0x19d/0x250 [ 241.454103][ T29] ? usleep_range_state+0x180/0x180 [ 241.459381][ T29] ? __wait_for_common+0x36f/0x530 [ 241.464496][ T29] ? mark_held_locks+0x9f/0xe0 [ 241.469423][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 241.474365][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 241.479663][ T29] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 241.485726][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 241.491035][ T29] __wait_for_common+0x378/0x530 [ 241.495975][ T29] ? usleep_range_state+0x180/0x180 [ 241.501259][ T29] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 241.507866][ T29] ? __xfs_buf_submit+0x389/0x660 [ 241.513103][ T29] xfs_buf_iowait+0x8e/0x420 [ 241.517723][ T29] __xfs_buf_submit+0x389/0x660 [ 241.523293][ T29] xfs_buf_read_uncached+0x1bd/0x320 [ 241.529017][ T29] ? wait_for_completion_io_timeout+0x20/0x20 [ 241.535333][ T29] ? xfs_buf_readahead_map+0x90/0x90 [ 241.540758][ T29] ? mark_held_locks+0x9f/0xe0 [ 241.545534][ T29] ? pcpu_alloc_area+0x371/0x6a0 [ 241.550583][ T29] xfs_readsb+0x2a9/0x560 [ 241.555011][ T29] ? xfs_sb_validate_fsb_count+0xf0/0xf0 [ 241.560723][ T29] xfs_fs_fill_super+0x65b/0x1940 [ 241.565751][ T29] get_tree_bdev+0x398/0x680 [ 241.570506][ T29] ? xfs_fs_destroy_inode+0x590/0x590 [ 241.575869][ T29] vfs_get_tree+0x7f/0x2c0 [ 241.580367][ T29] path_mount+0x7e8/0x1a40 [ 241.584796][ T29] ? finish_automount+0x900/0x900 [ 241.589913][ T29] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 241.595896][ T29] ? kmem_cache_free.part.0+0x11e/0x240 [ 241.601673][ T29] ? lockdep_hardirqs_on+0x79/0x100 [ 241.606881][ T29] __x64_sys_mount+0x1f5/0x260 [ 241.611759][ T29] ? copy_mnt_ns+0xd20/0xd20 [ 241.616351][ T29] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 241.622613][ T29] ? syscall_enter_from_user_mode+0x21/0x70 [ 241.628516][ T29] do_syscall_64+0x35/0xb0 [ 241.633834][ T29] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 241.642297][ T29] RIP: 0033:0x7ff6006890e9 [ 241.646725][ T29] RSP: 002b:00007ff60179a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.655399][ T29] RAX: ffffffffffffffda RBX: 00007ff60079bf60 RCX: 00007ff6006890e9 [ 241.663519][ T29] RDX: 0000000020000140 RSI: 0000000020000000 RDI: 00000000200000c0 [ 241.671605][ T29] RBP: 00007ff6006e308d R08: 0000000000000000 R09: 0000000000000000 [ 241.679790][ T29] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000000 [ 241.687855][ T29] R13: 00007ffcf36409df R14: 00007ff60179a300 R15: 0000000000022000 [ 241.695943][ T29] [ 241.699069][ T29] [ 241.699069][ T29] Showing all locks held in the system: [ 241.706985][ T29] 1 lock held by khungtaskd/29: [ 241.712240][ T29] #0: ffffffff8b17a3a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 241.722270][ T29] 2 locks held by getty/3286: [ 241.727037][ T29] #0: ffff88802518f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 [ 241.736872][ T29] #1: ffffc90001c282e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb14/0x1040 [ 241.747538][ T29] 1 lock held by syz-executor.0/4099: [ 241.752986][ T29] #0: ffff88801c6200e0 (&type->s_umount_key#67/1){+.+.}-{3:3}, at: alloc_super+0x192/0x9e0 [ 241.763175][ T29] [ 241.765774][ T29] ============================================= [ 241.765774][ T29] [ 241.774260][ T29] NMI backtrace for cpu 0 [ 241.778577][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc2-syzkaller #0 [ 241.786709][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.796831][ T29] Call Trace: [ 241.800105][ T29] [ 241.803016][ T29] dump_stack_lvl+0x57/0x7d [ 241.807663][ T29] nmi_cpu_backtrace.cold+0x30/0xc0 [ 241.812835][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 241.818110][ T29] nmi_trigger_cpumask_backtrace+0x140/0x170 [ 241.824115][ T29] watchdog+0x891/0xc20 [ 241.828301][ T29] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 241.834268][ T29] kthread+0x299/0x340 [ 241.838362][ T29] ? kthread_complete_and_exit+0x20/0x20 [ 241.843966][ T29] ret_from_fork+0x1f/0x30 [ 241.848373][ T29] [ 241.851575][ T29] Sending NMI from CPU 0 to CPUs 1: [ 241.856784][ C1] NMI backtrace for cpu 1 [ 241.856789][ C1] CPU: 1 PID: 2430 Comm: kworker/u4:6 Not tainted 5.19.0-rc2-syzkaller #0 [ 241.856789][ C1] CPU: 1 PID: 2430 Comm: kworker/u4:6 Not tainted 5.19.0-rc2-syzkaller #0 [ 241.856795][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.856799][ C1] Workqueue: events_unbound toggle_allocation_gate [ 241.856869][ C1] RIP: 0010:kasan_check_range+0x9/0x180 [ 241.856876][ C1] Code: b6 f5 bf 00 08 00 00 89 43 0c e8 b2 e4 ff ff 89 43 08 5b 5d c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 85 f6 0f 84 3c 01 00 00 <49> 89 f9 41 54 44 0f b6 c2 49 01 f1 55 53 0f 82 18 01 00 00 48 b8 [ 241.856881][ C1] RSP: 0018:ffffc9000c377780 EFLAGS: 00000002 [ 241.856885][ C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: ffffffff8154b5e6 [ 241.856889][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f39b900 [ 241.856892][ C1] RBP: ffff88802535ab8a R08: 0000000000000000 R09: 0000000000000005 [ 241.856895][ C1] R10: fffffbfff1e73722 R11: 0000000000000001 R12: ffff88802535ab68 [ 241.856898][ C1] R13: ffff88802535a040 R14: 0000000000000000 R15: b85289586e3e3734 [ 241.856901][ C1] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 241.856907][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.856910][ C1] CR2: 00007f4696903990 CR3: 000000000ae8e000 CR4: 00000000003506e0 [ 241.856913][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.856915][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.856918][ C1] Call Trace: [ 241.856920][ C1] [ 241.856922][ C1] __lock_acquire+0x1416/0x55d0 [ 241.856933][ C1] ? lock_chain_count+0x20/0x20 [ 241.856938][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 241.856944][ C1] ? mark_lock.part.0+0xee/0x19a0 [ 241.856950][ C1] lock_acquire+0x1ab/0x570 [ 241.856955][ C1] ? __get_locked_pte+0x105/0x210 [ 241.857055][ C1] ? lock_release+0x780/0x780 [ 241.857060][ C1] ? find_held_lock+0x2d/0x110 [ 241.857065][ C1] ? __text_poke+0x5d2/0x8e0 [ 241.857091][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 241.857096][ C1] _raw_spin_lock+0x2a/0x40 [ 241.857103][ C1] ? __get_locked_pte+0x105/0x210 [ 241.857107][ C1] __get_locked_pte+0x105/0x210 [ 241.857111][ C1] ? kmem_cache_alloc_trace+0x119/0x4a0 [ 241.857116][ C1] __text_poke+0x1b3/0x8e0 [ 241.857122][ C1] ? cpumask_weight+0x40/0x40 [ 241.857127][ C1] ? optimize_nops+0x2d0/0x2d0 [ 241.857132][ C1] ? text_poke_memset+0x60/0x60 [ 241.857138][ C1] text_poke_bp_batch+0x44c/0x6d0 [ 241.857144][ C1] ? kmem_cache_alloc_trace+0x119/0x4a0 [ 241.857148][ C1] ? mutex_lock_io_nested+0x1190/0x1190 [ 241.857155][ C1] ? do_sync_core+0x20/0x20 [ 241.857160][ C1] ? __jump_label_patch+0x281/0x330 [ 241.857165][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 241.857171][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 241.857177][ C1] text_poke_finish+0x16/0x30 [ 241.857181][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 241.857187][ C1] static_key_enable_cpuslocked+0x15f/0x220 [ 241.857197][ C1] static_key_enable+0x11/0x20 [ 241.857202][ C1] toggle_allocation_gate+0xe3/0x310 [ 241.857208][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 241.857213][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 241.857217][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 241.857224][ C1] process_one_work+0x865/0x13d0 [ 241.857254][ C1] ? lock_release+0x780/0x780 [ 241.857259][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 241.857264][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 241.857268][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 241.857273][ C1] worker_thread+0x598/0xec0 [ 241.857277][ C1] ? __kthread_parkme+0xc1/0x1f0 [ 241.857283][ C1] ? process_one_work+0x13d0/0x13d0 [ 241.857288][ C1] kthread+0x299/0x340 [ 241.857291][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 241.857295][ C1] ret_from_fork+0x1f/0x30 [ 241.857303][ C1] [ 241.863127][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 241.863135][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc2-syzkaller #0 [ 241.863143][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.863148][ T29] Call Trace: [ 241.863153][ T29] [ 241.863157][ T29] dump_stack_lvl+0x57/0x7d [ 241.863170][ T29] panic+0x227/0x466 [ 241.863178][ T29] ? panic_print_sys_info.part.0+0x69/0x69 [ 241.863185][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 241.863193][ T29] ? preempt_schedule_thunk+0x16/0x18 [ 241.863203][ T29] ? printk_prefer_direct_exit+0x11/0x30 [ 241.863233][ T29] watchdog.cold+0x11/0x160 [ 241.863248][ T29] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 241.863255][ T29] kthread+0x299/0x340 [ 241.863261][ T29] ? kthread_complete_and_exit+0x20/0x20 [ 241.863267][ T29] ret_from_fork+0x1f/0x30 [ 241.863275][ T29] [ 241.871644][ T29] Kernel Offset: disabled