[ 33.106728][ T26] audit: type=1400 audit(1654946853.070:81): avc: denied { setattr } for pid=2637 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.141568][ T26] audit: type=1400 audit(1654946853.100:82): avc: denied { execmem } for pid=2638 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 33.158388][ T26] audit: type=1400 audit(1654946853.120:83): avc: denied { mounton } for pid=2639 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 33.908506][ T2643] can: request_module (can-proto-0) failed. [ 33.967596][ T2643] can: request_module (can-proto-0) failed. [ 33.975181][ T2643] can: request_module (can-proto-0) failed. [ 44.855010][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 44.855016][ T26] audit: type=1400 audit(1654946864.810:165): avc: denied { append } for pid=2135 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.855094][ T26] audit: type=1400 audit(1654946864.810:166): avc: denied { open } for pid=2135 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.855354][ T26] audit: type=1400 audit(1654946864.820:167): avc: denied { getattr } for pid=2135 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.122' (ECDSA) to the list of known hosts. 2022/06/11 11:27:51 parsed 1 programs 2022/06/11 11:27:51 executed programs: 0 [ 51.397484][ T26] audit: type=1400 audit(1654946871.360:168): avc: denied { mounton } for pid=2708 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.398234][ T26] audit: type=1400 audit(1654946871.360:169): avc: denied { mount } for pid=2708 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.410808][ T26] audit: type=1400 audit(1654946871.370:170): avc: denied { mount } for pid=2711 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.412042][ T26] audit: type=1400 audit(1654946871.370:171): avc: denied { mounton } for pid=2711 comm="syz-executor.0" path="/syzcgroup/unified" dev="sda1" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.413408][ T26] audit: type=1400 audit(1654946871.370:172): avc: denied { mount } for pid=2711 comm="syz-executor.0" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.639720][ T26] audit: type=1400 audit(1654946872.600:173): avc: denied { ioctl } for pid=2711 comm="syz-executor.0" path="socket:[28423]" dev="sockfs" ino=28423 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.641819][ T2715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.642306][ T2715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.642566][ T2715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.643258][ T2715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.643566][ T2715] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.643720][ T2715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.714175][ T2711] chnl_net:caif_netlink_parms(): no params data found [ 52.746785][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.747013][ T2711] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.747491][ T2711] device bridge_slave_0 entered promiscuous mode [ 52.748887][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.748920][ T2711] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.749304][ T2711] device bridge_slave_1 entered promiscuous mode [ 52.772675][ T2711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.773995][ T2711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.807973][ T2711] team0: Port device team_slave_0 added [ 52.809195][ T2711] team0: Port device team_slave_1 added [ 52.827199][ T2711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.827204][ T2711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.827207][ T2711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.828395][ T2711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.828398][ T2711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.828402][ T2711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.936762][ T2711] device hsr_slave_0 entered promiscuous mode [ 52.985459][ T2711] device hsr_slave_1 entered promiscuous mode [ 53.081030][ T2711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.081215][ T26] audit: type=1400 audit(1654946873.040:174): avc: denied { create } for pid=2711 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.081232][ T26] audit: type=1400 audit(1654946873.040:175): avc: denied { write } for pid=2711 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.081244][ T26] audit: type=1400 audit(1654946873.040:176): avc: denied { read } for pid=2711 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.137834][ T2711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.177046][ T2711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.226738][ T2711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.284950][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.284967][ T2711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.285334][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.285359][ T2711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.327123][ T2711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.330516][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.331849][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.332553][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.332881][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.336368][ T2711] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.349643][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.349917][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.349938][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.350153][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.350997][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.351024][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.351506][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.351932][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.359218][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.359494][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.360645][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.362591][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.370796][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.370857][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.374770][ T2711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.396717][ T26] audit: type=1400 audit(1654946873.360:177): avc: denied { sys_module } for pid=2711 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.475704][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.488836][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.489211][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.489412][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.490995][ T2711] device veth0_vlan entered promiscuous mode [ 53.493812][ T2711] device veth1_vlan entered promiscuous mode [ 53.518220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.518464][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.518744][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.520308][ T2711] device veth0_macvtap entered promiscuous mode [ 53.521979][ T2711] device veth1_macvtap entered promiscuous mode [ 53.552477][ T2711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.552563][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.553001][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.555580][ T2711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.555716][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.558004][ T2711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.558012][ T2711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.558016][ T2711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.558020][ T2711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.598287][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.598294][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.599469][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.618064][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.618072][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.619337][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.797800][ T2731] nbd0: detected capacity change from 0 to 5092 [ 54.716528][ T22] Bluetooth: hci0: command 0x0409 tx timeout [ 56.744072][ T2731] block nbd0: shutting down sockets [ 56.795173][ T27] Bluetooth: hci0: command 0x041b tx timeout [ 58.885425][ T1754] Bluetooth: hci0: command 0x040f tx timeout [ 60.955350][ T1754] Bluetooth: hci0: command 0x0419 tx timeout [ 84.076333][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 30 seconds [ 113.897050][ T2153] udevd[2153]: worker [2716] /devices/virtual/block/nbd0 is taking a long time [ 114.155784][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 60 seconds [ 144.245217][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 90 seconds [ 174.315231][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 120 seconds [ 175.125567][ T22] Bluetooth: hci0: command 0x0406 tx timeout [ 204.405177][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 150 seconds [ 234.107944][ T2153] udevd[2153]: worker [2716] /devices/virtual/block/nbd0 timeout; kill it [ 234.108608][ T2153] udevd[2153]: seq 5806 '/devices/virtual/block/nbd0' killed [ 234.485137][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 180 seconds [ 264.565225][ T9] block nbd0: Possible stuck request 0000000071913eb6: control (read@0,4096B). Runtime 210 seconds [ 285.675430][ T28] INFO: task udevd:2716 blocked for more than 143 seconds. [ 285.682690][ T28] Not tainted 5.19.0-rc1-syzkaller #0 [ 285.688646][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.697454][ T28] task:udevd state:D stack:26640 pid: 2716 ppid: 2153 flags:0x00004004 [ 285.706809][ T28] Call Trace: [ 285.710074][ T28] [ 285.712981][ T28] __schedule+0xd95/0x27f0 [ 285.717580][ T28] ? io_schedule_timeout+0x140/0x140 [ 285.722845][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 285.728260][ T28] ? preempt_schedule_common+0x59/0xc0 [ 285.733704][ T28] schedule+0xd2/0x1f0 [ 285.737832][ T28] io_schedule+0xba/0x130 [ 285.742168][ T28] folio_wait_bit_common+0x387/0x7d0 [ 285.747496][ T28] ? filemap_range_has_page+0x220/0x220 [ 285.753030][ T28] ? end_buffer_async_read_io+0x2f0/0x2f0 [ 285.758946][ T28] ? folio_unlock+0x80/0x80 [ 285.763440][ T28] ? __zone_watermark_ok+0x450/0x450 [ 285.768771][ T28] do_read_cache_folio+0x3be/0x5b0 [ 285.773873][ T28] ? blkdev_writepages+0x10/0x10 [ 285.778897][ T28] read_cache_page+0x48/0x1f0 [ 285.783566][ T28] read_part_sector+0xe0/0x690 [ 285.788396][ T28] adfspart_check_ICS+0x96/0x610 [ 285.793323][ T28] ? pointer+0x750/0x750 [ 285.797603][ T28] ? bdev_disk_changed+0x26e/0xd20 [ 285.802692][ T28] ? adfspart_check_ADFS+0x3c0/0x3c0 [ 285.808010][ T28] ? snprintf+0x9e/0xd0 [ 285.812152][ T28] ? vsprintf+0x10/0x10 [ 285.816390][ T28] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 285.822005][ T28] ? bdev_disk_changed+0x26e/0xd20 [ 285.827174][ T28] ? adfspart_check_ADFS+0x3c0/0x3c0 [ 285.832443][ T28] bdev_disk_changed+0x497/0xd20 [ 285.837462][ T28] blkdev_get_whole+0x141/0x270 [ 285.842292][ T28] blkdev_get_by_dev.part.0+0x4fa/0xa50 [ 285.847879][ T28] blkdev_open+0xde/0x240 [ 285.852278][ T28] do_dentry_open+0x414/0xfe0 [ 285.856988][ T28] ? blkdev_close+0x90/0x90 [ 285.861468][ T28] ? may_open+0xce/0x330 [ 285.865732][ T28] path_openat+0x9cf/0x2360 [ 285.870221][ T28] ? lookup_open.isra.0+0x1760/0x1760 [ 285.875693][ T28] ? lockdep_hardirqs_on_prepare+0x440/0x440 [ 285.881663][ T28] ? lockdep_hardirqs_on_prepare+0x440/0x440 [ 285.887681][ T28] ? lock_is_held_type+0xfc/0x170 [ 285.892702][ T28] do_filp_open+0x199/0x3d0 [ 285.897249][ T28] ? may_open_dev+0xd0/0xd0 [ 285.901739][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 285.906999][ T28] ? _raw_spin_unlock+0x24/0x40 [ 285.912555][ T28] ? alloc_fd+0x1fe/0x560 [ 285.916933][ T28] ? getname_flags.part.0+0x89/0x440 [ 285.922376][ T28] do_sys_openat2+0x11e/0x3f0 [ 285.927099][ T28] ? __fget_light+0x4c/0x210 [ 285.931671][ T28] ? build_open_flags+0x490/0x490 [ 285.936761][ T28] ? __sys_recvmsg+0xb6/0x140 [ 285.941517][ T28] ? __sys_recvmsg_sock+0x10/0x10 [ 285.946588][ T28] __x64_sys_openat+0x11b/0x1d0 [ 285.951621][ T28] ? __ia32_sys_open+0x190/0x190 [ 285.956634][ T28] ? lock_is_held_type+0xfc/0x170 [ 285.961642][ T28] ? lockdep_hardirqs_on_prepare+0x23e/0x440 [ 285.967647][ T28] ? syscall_enter_from_user_mode+0x1d/0x60 [ 285.973522][ T28] ? lockdep_hardirqs_on+0x8b/0x110 [ 285.978811][ T28] do_syscall_64+0x35/0x80 [ 285.983219][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 285.989164][ T28] RIP: 0033:0x7f0338525697 [ 285.993595][ T28] RSP: 002b:00007ffd3602d340 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.002080][ T28] RAX: ffffffffffffffda RBX: 0000564266451850 RCX: 00007f0338525697 [ 286.010059][ T28] RDX: 00000000000a0800 RSI: 000056426645fa90 RDI: 00000000ffffff9c [ 286.018125][ T28] RBP: 000056426645fa90 R08: 0000000000000001 R09: 00007ffd3608d080 [ 286.026242][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 286.034202][ T28] R13: 0000564266449850 R14: 0000000000000001 R15: 00005642664332c0 [ 286.042438][ T28] [ 286.045487][ T28] INFO: task syz-executor.0:2730 blocked for more than 143 seconds. [ 286.053468][ T28] Not tainted 5.19.0-rc1-syzkaller #0 [ 286.059396][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.068115][ T28] task:syz-executor.0 state:D stack:27224 pid: 2730 ppid: 2711 flags:0x00000004 [ 286.077344][ T28] Call Trace: [ 286.080605][ T28] [ 286.083511][ T28] __schedule+0xd95/0x27f0 [ 286.087978][ T28] ? io_schedule_timeout+0x140/0x140 [ 286.093250][ T28] ? lock_is_held_type+0xfc/0x170 [ 286.098306][ T28] schedule+0xd2/0x1f0 [ 286.102360][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.107753][ T28] __mutex_lock+0xa70/0x1350 [ 286.112330][ T28] ? blkdev_put+0x9a/0x670 [ 286.116785][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 286.122321][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 286.127698][ T28] ? _raw_spin_unlock+0x24/0x40 [ 286.132542][ T28] ? locks_remove_file+0x2fc/0x4a0 [ 286.137666][ T28] blkdev_put+0x9a/0x670 [ 286.141887][ T28] blkdev_close+0x5f/0x90 [ 286.146236][ T28] __fput+0x1f5/0x8c0 [ 286.150205][ T28] task_work_run+0xc0/0x160 [ 286.154705][ T28] exit_to_user_mode_prepare+0x1e0/0x1f0 [ 286.160457][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 286.165936][ T28] do_syscall_64+0x42/0x80 [ 286.170343][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.176273][ T28] RIP: 0033:0x418c1b [ 286.180143][ T28] RSP: 002b:00007fff83db8c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.188678][ T28] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000418c1b [ 286.196652][ T28] RDX: 00000000000003e7 RSI: 0000001b2d2200bc RDI: 0000000000000004 [ 286.204588][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000001b2d2200c4 [ 286.212594][ T28] R10: 00007fff83df6090 R11: 0000000000000293 R12: 000000000055d9a0 [ 286.220605][ T28] R13: 000000000055d9a0 R14: 000000000055cf20 R15: 000000000055cf20 [ 286.228640][ T28] [ 286.231846][ T28] INFO: task syz-executor.0:2731 blocked for more than 143 seconds. [ 286.239944][ T28] Not tainted 5.19.0-rc1-syzkaller #0 [ 286.245834][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.254469][ T28] task:syz-executor.0 state:D stack:27512 pid: 2731 ppid: 2711 flags:0x00004006 [ 286.263703][ T28] Call Trace: [ 286.267026][ T28] [ 286.269945][ T28] __schedule+0xd95/0x27f0 [ 286.274332][ T28] ? io_schedule_timeout+0x140/0x140 [ 286.279654][ T28] ? lock_is_held_type+0xfc/0x170 [ 286.284660][ T28] schedule+0xd2/0x1f0 [ 286.288756][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.294120][ T28] __mutex_lock+0xa70/0x1350 [ 286.300745][ T28] ? blkdev_put+0x9a/0x670 [ 286.305328][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 286.310931][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 286.316608][ T28] ? _raw_spin_unlock+0x24/0x40 [ 286.321440][ T28] ? locks_remove_file+0x2fc/0x4a0 [ 286.326589][ T28] blkdev_put+0x9a/0x670 [ 286.330823][ T28] blkdev_close+0x5f/0x90 [ 286.335453][ T28] __fput+0x1f5/0x8c0 [ 286.339449][ T28] task_work_run+0xc0/0x160 [ 286.343922][ T28] get_signal+0x19b/0x2060 [ 286.348387][ T28] ? kasan_save_stack+0x2e/0x40 [ 286.353229][ T28] ? task_work_add+0x36/0x160 [ 286.357937][ T28] ? fput+0xa0/0x120 [ 286.361810][ T28] ? __x64_sys_ioctl+0x13e/0x190 [ 286.366785][ T28] ? do_syscall_64+0x35/0x80 [ 286.371361][ T28] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.377716][ T28] ? exit_signals+0x720/0x720 [ 286.382379][ T28] ? sock_shutdown+0x138/0x1b0 [ 286.387204][ T28] arch_do_signal_or_restart+0x88/0x1b90 [ 286.392832][ T28] ? nbd_start_device+0xac0/0xac0 [ 286.397887][ T28] ? get_sigframe_size+0x10/0x10 [ 286.402804][ T28] ? selinux_bprm_creds_for_exec+0xad0/0xad0 [ 286.408833][ T28] ? xfd_validate_state+0x1f/0x120 [ 286.413935][ T28] ? blkdev_ioctl+0x2ff/0x6c0 [ 286.418640][ T28] ? kick_process+0xf2/0x190 [ 286.423223][ T28] exit_to_user_mode_prepare+0x14a/0x1f0 [ 286.428894][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 286.434605][ T28] do_syscall_64+0x42/0x80 [ 286.439159][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.445079][ T28] RIP: 0033:0x465ad9 [ 286.448949][ T28] RSP: 002b:00007f0e5b82c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.457389][ T28] RAX: fffffffffffffe00 RBX: 000000000055cf20 RCX: 0000000000465ad9 [ 286.465412][ T28] RDX: ffffffffffffffff RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.473369][ T28] RBP: 00000000004af756 R08: 0000000000000000 R09: 0000000000000000 [ 286.481379][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055cf20 [ 286.489554][ T28] R13: 00007fff83db8b9f R14: 00007f0e5b82c300 R15: 0000000000022000 [ 286.497606][ T28] [ 286.500712][ T28] [ 286.500712][ T28] Showing all locks held in the system: [ 286.508484][ T28] 1 lock held by khungtaskd/28: [ 286.513322][ T28] #0: ffffffff8a1bbfe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x28c [ 286.523245][ T28] 2 locks held by getty/2313: [ 286.527931][ T28] #0: ffff88810d1ff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 [ 286.537798][ T28] #1: ffffc900016c32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb21/0x1050 [ 286.547978][ T28] 1 lock held by udevd/2716: [ 286.552749][ T28] #0: ffff888109821918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x78/0xa50 [ 286.563815][ T28] 1 lock held by syz-executor.0/2730: [ 286.569198][ T28] #0: ffff888109821918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x9a/0x670 [ 286.578518][ T28] 1 lock held by syz-executor.0/2731: [ 286.583876][ T28] #0: ffff888109821918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x9a/0x670 [ 286.593413][ T28] [ 286.595802][ T28] ============================================= [ 286.595802][ T28] [ 286.605153][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.612002][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc1-syzkaller #0 [ 286.620120][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.630142][ T28] Call Trace: [ 286.633391][ T28] [ 286.636308][ T28] dump_stack_lvl+0xe9/0x139 [ 286.640871][ T28] panic+0x2b7/0x52b [ 286.644731][ T28] ? panic_print_sys_info.part.0+0x69/0x69 [ 286.650504][ T28] ? printk_prefer_direct_exit+0x11/0x30 [ 286.656118][ T28] watchdog.cold+0x1d5/0x239 [ 286.660688][ T28] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 286.666632][ T28] kthread+0x299/0x340 [ 286.670667][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 286.676264][ T28] ret_from_fork+0x1f/0x30 [ 286.680915][ T28] [ 286.684085][ T28] Kernel Offset: disabled [ 286.688384][ T28] Rebooting in 86400 seconds..