Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. [ 491.891434][ T26] audit: type=1400 audit(1671881407.984:75): avc: denied { execmem } for pid=5088 comm="syz-executor354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 491.915720][ T26] audit: type=1400 audit(1671881408.014:76): avc: denied { mounton } for pid=5089 comm="syz-executor354" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 491.939941][ T26] audit: type=1400 audit(1671881408.014:77): avc: denied { mount } for pid=5089 comm="syz-executor354" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 491.962987][ T26] audit: type=1400 audit(1671881408.014:78): avc: denied { mounton } for pid=5089 comm="syz-executor354" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 executing program [ 491.985009][ T26] audit: type=1400 audit(1671881408.064:79): avc: denied { mounton } for pid=5089 comm="syz-executor354" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 492.008610][ T26] audit: type=1400 audit(1671881408.064:80): avc: denied { mount } for pid=5089 comm="syz-executor354" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 492.031638][ T26] audit: type=1400 audit(1671881408.084:81): avc: denied { read } for pid=5091 comm="syz-executor354" name="nbd0" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.055407][ T26] audit: type=1400 audit(1671881408.084:82): avc: denied { open } for pid=5091 comm="syz-executor354" path="/dev/nbd0" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.079639][ T26] audit: type=1400 audit(1671881408.084:83): avc: denied { ioctl } for pid=5091 comm="syz-executor354" path="/dev/nbd0" dev="devtmpfs" ino=664 ioctlcmd=0xab07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.081171][ T5093] nbd0: detected capacity change from 0 to 502 [ 492.217020][ T4376] block nbd0: Receive control failed (result -104) [ 522.294493][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 30 seconds [ 552.186754][ T4421] udevd[4421]: worker [5094] /devices/virtual/block/nbd0 is taking a long time [ 552.373907][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 60 seconds [ 582.453986][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 90 seconds [ 612.533927][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 120 seconds [ 642.614037][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 150 seconds executing program [ 672.348412][ T4421] udevd[4421]: worker [5094] /devices/virtual/block/nbd0 timeout; kill it [ 672.357536][ T5094] ldm_validate_partition_table(): Disk read failed. [ 672.364353][ T4421] udevd[4421]: seq 7513 '/devices/virtual/block/nbd0' killed [ 672.365042][ T5094] Dev nbd0: unable to read RDB block 0 [ 672.377613][ T5094] nbd0: unable to read partition table [ 672.383235][ T5094] nbd0: partition table beyond EOD, truncated [ 672.693933][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 180 seconds [ 702.773887][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 210 seconds [ 732.853890][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 240 seconds [ 762.933957][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 270 seconds [ 793.013873][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 300 seconds [ 823.093859][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 330 seconds [ 853.173850][ T92] block nbd0: Possible stuck request ffff88801f280000: control (read@0,4096B). Runtime 360 seconds [ 859.573850][ T27] INFO: task udevd:5094 blocked for more than 143 seconds. [ 859.581184][ T27] Not tainted 6.1.0-syzkaller-14565-ga27405b2ed9c #0 [ 859.588909][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.597755][ T27] task:udevd state:D stack:26304 pid:5094 ppid:4421 flags:0x00004006 [ 859.607112][ T27] Call Trace: [ 859.610395][ T27] [ 859.613315][ T27] __schedule+0xb8a/0x5450 [ 859.617964][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 859.624153][ T27] ? lock_chain_count+0x20/0x20 [ 859.629030][ T27] ? io_schedule_timeout+0x150/0x150 [ 859.634520][ T27] ? mark_held_locks+0x9f/0xe0 [ 859.639322][ T27] schedule+0xde/0x1b0 [ 859.643386][ T27] io_schedule+0xbe/0x130 [ 859.647939][ T27] folio_wait_bit_common+0x394/0x9b0 [ 859.653316][ T27] ? filemap_range_has_writeback+0x650/0x650 [ 859.659554][ T27] ? __filemap_get_folio+0x254/0xd80 [ 859.664989][ T27] ? folio_unlock+0xd0/0xd0 [ 859.669572][ T27] __filemap_get_folio+0xb71/0xd80 [ 859.674866][ T27] ? filemap_add_folio+0x1e0/0x1e0 [ 859.679996][ T27] ? filemap_get_folios+0x700/0x700 [ 859.685343][ T27] truncate_inode_pages_range+0x350/0xec0 [ 859.691123][ T27] ? truncate_inode_partial_folio+0xb90/0xb90 [ 859.697488][ T27] ? _find_next_bit+0x11b/0x140 [ 859.702441][ T27] ? smp_call_function_many_cond+0x47f/0x10a0 [ 859.708623][ T27] ? __brelse+0xa0/0xa0 [ 859.712918][ T27] ? smp_call_on_cpu+0x250/0x250 [ 859.718014][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 859.723574][ T27] ? __brelse+0xa0/0xa0 [ 859.727790][ T27] blkdev_flush_mapping+0x140/0x2f0 [ 859.733023][ T27] blkdev_put_whole+0xd1/0xf0 [ 859.737796][ T27] blkdev_put+0x224/0x770 [ 859.742175][ T27] blkdev_close+0x68/0x80 [ 859.746536][ T27] __fput+0x27c/0xa90 [ 859.750600][ T27] ? blkdev_fsync+0xa0/0xa0 [ 859.755136][ T27] task_work_run+0x16f/0x270 [ 859.759756][ T27] ? task_work_cancel+0x30/0x30 [ 859.764670][ T27] ? do_raw_spin_unlock+0x175/0x230 [ 859.769881][ T27] do_exit+0xaa8/0x2950 [ 859.774087][ T27] ? find_held_lock+0x2d/0x110 [ 859.778873][ T27] ? get_signal+0x8a0/0x2450 [ 859.783453][ T27] ? mm_update_next_owner+0x7b0/0x7b0 [ 859.788862][ T27] do_group_exit+0xd4/0x2a0 [ 859.793383][ T27] get_signal+0x21c3/0x2450 [ 859.797985][ T27] ? exit_signals+0x8b0/0x8b0 [ 859.802677][ T27] ? do_sys_openat2+0xa1/0x4c0 [ 859.807488][ T27] arch_do_signal_or_restart+0x79/0x5c0 [ 859.813048][ T27] ? get_sigframe_size+0x10/0x10 [ 859.818195][ T27] ? up_write+0x520/0x520 [ 859.822561][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 859.827560][ T27] exit_to_user_mode_prepare+0x15f/0x250 [ 859.833420][ T27] syscall_exit_to_user_mode+0x1d/0x50 [ 859.838943][ T27] do_syscall_64+0x46/0xb0 [ 859.843403][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.849440][ T27] RIP: 0033:0x7f1622f25697 [ 859.853903][ T27] RSP: 002b:00007fff2b8222a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.862310][ T27] RAX: 0000000000000008 RBX: 00005621178463a0 RCX: 00007f1622f25697 [ 859.870338][ T27] RDX: 00000000000a0800 RSI: 000056211783ed40 RDI: 00000000ffffff9c [ 859.878341][ T27] RBP: 000056211783ed40 R08: 0000000000000001 R09: 00007fff2b9b3080 [ 859.886340][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 859.894343][ T27] R13: 0000562117841a20 R14: 00007fff2b82234c R15: 000056211780e2c0 [ 859.902322][ T27] [ 859.905409][ T27] INFO: task syz-executor354:5102 blocked for more than 143 seconds. [ 859.913481][ T27] Not tainted 6.1.0-syzkaller-14565-ga27405b2ed9c #0 [ 859.920709][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.929416][ T27] task:syz-executor354 state:D stack:28968 pid:5102 ppid:5089 flags:0x00000004 [ 859.938928][ T27] Call Trace: [ 859.942218][ T27] [ 859.946227][ T27] __schedule+0xb8a/0x5450 [ 859.950657][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 859.956697][ T27] ? static_obj+0xb0/0xc0 [ 859.961043][ T27] ? io_schedule_timeout+0x150/0x150 [ 859.966366][ T27] ? __mutex_lock+0xa43/0x1360 [ 859.971143][ T27] schedule+0xde/0x1b0 [ 859.975244][ T27] schedule_preempt_disabled+0x13/0x20 [ 859.980716][ T27] __mutex_lock+0xa48/0x1360 [ 859.985338][ T27] ? blkdev_get_by_dev.part.0+0x9b/0xb80 [ 859.990983][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 859.996562][ T27] ? _atomic_dec_and_lock+0x96/0x100 [ 860.001889][ T27] ? disk_block_events+0x21/0x140 [ 860.006961][ T27] blkdev_get_by_dev.part.0+0x9b/0xb80 [ 860.012442][ T27] ? devcgroup_check_permission+0x1aa/0x440 [ 860.018626][ T27] blkdev_get_by_dev+0x6f/0x90 [ 860.023405][ T27] blkdev_open+0x140/0x2c0 [ 860.027855][ T27] do_dentry_open+0x6cc/0x13f0 [ 860.032626][ T27] ? blkdev_close+0x80/0x80 [ 860.037166][ T27] path_openat+0x1bbc/0x2a50 [ 860.041791][ T27] ? path_lookupat+0x840/0x840 [ 860.046771][ T27] do_filp_open+0x1ba/0x410 [ 860.051283][ T27] ? may_open_dev+0xf0/0xf0 [ 860.056034][ T27] ? find_held_lock+0x2d/0x110 [ 860.060828][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 860.065879][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 860.070825][ T27] ? _raw_spin_unlock+0x28/0x40 [ 860.075770][ T27] ? alloc_fd+0x2d8/0x6d0 [ 860.080127][ T27] do_sys_openat2+0x16d/0x4c0 [ 860.084852][ T27] ? build_open_flags+0x6f0/0x6f0 [ 860.089893][ T27] ? up_write+0x520/0x520 [ 860.094259][ T27] __x64_sys_openat+0x143/0x1f0 [ 860.099124][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 860.104100][ T27] ? syscall_enter_from_user_mode+0x26/0xb0 [ 860.110009][ T27] do_syscall_64+0x39/0xb0 [ 860.114467][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 860.120372][ T27] RIP: 0033:0x7f5648191c24 [ 860.124817][ T27] RSP: 002b:00007f5648181e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 860.133240][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5648191c24 [ 860.141267][ T27] RDX: 0000000000000000 RSI: 00007f5648181ef0 RDI: 00000000ffffff9c [ 860.149265][ T27] RBP: 00007f5648181ef0 R08: 0000000000000000 R09: 00007f5648182700 [ 860.157267][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 860.165433][ T27] R13: 00007f56482261a4 R14: 64626e2f7665642f R15: 0000000000022000 [ 860.173403][ T27] [ 860.176470][ T27] [ 860.176470][ T27] Showing all locks held in the system: [ 860.184235][ T27] 1 lock held by rcu_tasks_kthre/11: [ 860.189519][ T27] #0: ffffffff8c78dcb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 860.200014][ T27] 1 lock held by rcu_tasks_trace/12: [ 860.205343][ T27] #0: ffffffff8c78d9b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 860.216358][ T27] 1 lock held by khungtaskd/27: [ 860.221206][ T27] #0: ffffffff8c78e800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 [ 860.231140][ T27] 2 locks held by getty/4737: [ 860.235839][ T27] #0: ffff88814b3c4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 860.246020][ T27] #1: ffffc900020482f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 860.256186][ T27] 1 lock held by udevd/5094: [ 860.260761][ T27] #0: ffff888146f7b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xc0/0x770 [ 860.270114][ T27] 1 lock held by syz-executor354/5102: [ 860.275606][ T27] #0: ffff888146f7b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb80 [ 860.286178][ T27] [ 860.288501][ T27] ============================================= [ 860.288501][ T27] [ 860.296936][ T27] NMI backtrace for cpu 0 [ 860.301261][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.0-syzkaller-14565-ga27405b2ed9c #0 [ 860.310703][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.320841][ T27] Call Trace: [ 860.324116][ T27] [ 860.327044][ T27] dump_stack_lvl+0xd1/0x138 [ 860.331647][ T27] nmi_cpu_backtrace.cold+0x24/0x18a [ 860.336944][ T27] nmi_trigger_cpumask_backtrace+0x333/0x3c0 [ 860.342953][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 860.348151][ T27] watchdog+0xc75/0xfc0 [ 860.352321][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.358312][ T27] kthread+0x2e8/0x3a0 [ 860.362382][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 860.368012][ T27] ret_from_fork+0x1f/0x30 [ 860.372438][ T27] [ 860.375557][ T27] Sending NMI from CPU 0 to CPUs 1: [ 860.380783][ C1] NMI backtrace for cpu 1 [ 860.380792][ C1] CPU: 1 PID: 1131 Comm: kworker/u4:5 Not tainted 6.1.0-syzkaller-14565-ga27405b2ed9c #0 [ 860.380811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.380823][ C1] Workqueue: events_unbound toggle_allocation_gate [ 860.380907][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 860.380937][ C1] Code: 81 e1 00 01 00 00 65 48 8b 14 25 40 ac 03 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 6c 15 00 00 85 c0 74 2b 8b 82 48 15 00 00 <83> f8 02 75 20 48 8b 8a 50 15 00 00 8b 92 4c 15 00 00 48 8b 01 48 [ 860.380953][ C1] RSP: 0018:ffffc90005797a10 EFLAGS: 00000246 [ 860.380966][ C1] RAX: 0000000000000000 RBX: ffffc90005797a80 RCX: 0000000000000000 [ 860.380977][ C1] RDX: ffff8880212dc000 RSI: ffffffff89bd18ef RDI: 0000000000000001 [ 860.380988][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 860.380998][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 860.381008][ C1] R13: 000000000000000f R14: 1ffff92000af2f4a R15: ffffffff8a4659ea [ 860.381019][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 860.381036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.381054][ C1] CR2: 0000561b00f8c450 CR3: 000000000c48e000 CR4: 00000000003506e0 [ 860.381065][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.381075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 860.381086][ C1] Call Trace: [ 860.381090][ C1] [ 860.381095][ C1] insn_decode+0x1cf/0x3b0 [ 860.381119][ C1] ? kmem_cache_alloc_node+0x126/0x590 [ 860.381141][ C1] text_poke_loc_init+0xa6/0x450 [ 860.381163][ C1] ? arch_jump_label_transform_queue+0x5c/0x100 [ 860.381181][ C1] ? cpumask_weight+0x50/0x50 [ 860.381202][ C1] ? kmem_cache_alloc_node+0x126/0x590 [ 860.381224][ C1] ? __jump_label_patch+0x173/0x330 [ 860.381241][ C1] arch_jump_label_transform_queue+0x98/0x100 [ 860.381259][ C1] __jump_label_update+0x12e/0x410 [ 860.381284][ C1] jump_label_update+0x32f/0x410 [ 860.381307][ C1] static_key_disable_cpuslocked+0x156/0x1b0 [ 860.381332][ C1] static_key_disable+0x1a/0x20 [ 860.381354][ C1] toggle_allocation_gate+0x143/0x230 [ 860.381371][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 860.381390][ C1] process_one_work+0x9bf/0x1710 [ 860.381411][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 860.381432][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 860.381449][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 860.381480][ C1] worker_thread+0x669/0x1090 [ 860.381500][ C1] ? __kthread_parkme+0x163/0x220 [ 860.381527][ C1] ? process_one_work+0x1710/0x1710 [ 860.381546][ C1] kthread+0x2e8/0x3a0 [ 860.381561][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 860.381578][ C1] ret_from_fork+0x1f/0x30 [ 860.381604][ C1] [ 860.381776][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 860.663750][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.0-syzkaller-14565-ga27405b2ed9c #0 [ 860.673205][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.683256][ T27] Call Trace: [ 860.686534][ T27] [ 860.689467][ T27] dump_stack_lvl+0xd1/0x138 [ 860.694070][ T27] panic+0x2cc/0x626 [ 860.697997][ T27] ? panic_print_sys_info.part.0+0x110/0x110 [ 860.703985][ T27] ? irq_work_claim+0x76/0x90 [ 860.708711][ T27] ? irq_work_queue+0x2d/0x80 [ 860.713389][ T27] ? watchdog.cold+0x130/0x158 [ 860.718165][ T27] watchdog.cold+0x141/0x158 [ 860.722760][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.728756][ T27] kthread+0x2e8/0x3a0 [ 860.732822][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 860.738456][ T27] ret_from_fork+0x1f/0x30 [ 860.742887][ T27] [ 860.746045][ T27] Kernel Offset: disabled [ 860.750370][ T27] Rebooting in 86400 seconds..