Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. [ 491.534030][ T26] audit: type=1400 audit(1672612437.787:75): avc: denied { execmem } for pid=5095 comm="syz-executor165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 491.556234][ T26] audit: type=1400 audit(1672612437.807:76): avc: denied { mounton } for pid=5096 comm="syz-executor165" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 executing program [ 491.581001][ T26] audit: type=1400 audit(1672612437.807:77): avc: denied { mount } for pid=5096 comm="syz-executor165" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 491.604037][ T26] audit: type=1400 audit(1672612437.807:78): avc: denied { mounton } for pid=5096 comm="syz-executor165" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 491.626029][ T26] audit: type=1400 audit(1672612437.857:79): avc: denied { mounton } for pid=5096 comm="syz-executor165" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 491.649437][ T26] audit: type=1400 audit(1672612437.857:80): avc: denied { mount } for pid=5096 comm="syz-executor165" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 491.672254][ T26] audit: type=1400 audit(1672612437.877:81): avc: denied { read } for pid=5098 comm="syz-executor165" name="nbd0" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.696695][ T26] audit: type=1400 audit(1672612437.877:82): avc: denied { open } for pid=5098 comm="syz-executor165" path="/dev/nbd0" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.721287][ T26] audit: type=1400 audit(1672612437.877:83): avc: denied { ioctl } for pid=5098 comm="syz-executor165" path="/dev/nbd0" dev="devtmpfs" ino=664 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.747934][ T5099] nbd0: detected capacity change from 0 to 63 [ 491.866027][ T4376] block nbd0: Receive control failed (result -104) [ 522.381640][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 30 seconds [ 551.828532][ T4421] udevd[4421]: worker [5101] /devices/virtual/block/nbd0 is taking a long time [ 552.461070][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 60 seconds [ 582.541120][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 90 seconds [ 612.621063][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 120 seconds [ 642.701329][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 150 seconds executing program [ 671.994792][ T4421] udevd[4421]: worker [5101] /devices/virtual/block/nbd0 timeout; kill it [ 672.003614][ T4421] udevd[4421]: seq 7513 '/devices/virtual/block/nbd0' killed [ 672.003664][ T5101] ldm_validate_partition_table(): Disk read failed. [ 672.017802][ T5101] Dev nbd0: unable to read RDB block 0 [ 672.023332][ T5101] nbd0: unable to read partition table [ 672.028965][ T5101] nbd0: partition table beyond EOD, truncated [ 672.780990][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 180 seconds [ 702.861076][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 210 seconds [ 732.941025][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 240 seconds [ 763.021009][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 270 seconds [ 793.101242][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 300 seconds [ 823.180971][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 330 seconds [ 853.260975][ T51] block nbd0: Possible stuck request ffff88801ec28000: control (read@0,4096B). Runtime 360 seconds [ 859.660959][ T27] INFO: task udevd:5101 blocked for more than 143 seconds. [ 859.668313][ T27] Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 859.675995][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.684829][ T27] task:udevd state:D stack:26304 pid:5101 ppid:4421 flags:0x00004006 [ 859.694238][ T27] Call Trace: [ 859.697529][ T27] [ 859.700463][ T27] __schedule+0xb8a/0x5450 [ 859.705177][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 859.711316][ T27] ? lock_chain_count+0x20/0x20 [ 859.716205][ T27] ? io_schedule_timeout+0x150/0x150 [ 859.721667][ T27] ? mark_held_locks+0x9f/0xe0 [ 859.726462][ T27] schedule+0xde/0x1b0 [ 859.730525][ T27] io_schedule+0xbe/0x130 [ 859.735084][ T27] folio_wait_bit_common+0x394/0x9b0 [ 859.740446][ T27] ? filemap_range_has_writeback+0x650/0x650 [ 859.746695][ T27] ? __filemap_get_folio+0x254/0xd80 [ 859.752134][ T27] ? folio_unlock+0xd0/0xd0 [ 859.756684][ T27] __filemap_get_folio+0xb71/0xd80 [ 859.761978][ T27] ? filemap_add_folio+0x1e0/0x1e0 [ 859.767104][ T27] ? filemap_get_folios+0x700/0x700 [ 859.772459][ T27] truncate_inode_pages_range+0x350/0xec0 [ 859.778251][ T27] ? truncate_inode_partial_folio+0xb90/0xb90 [ 859.784491][ T27] ? _find_next_bit+0x11b/0x140 [ 859.789381][ T27] ? smp_call_function_many_cond+0x47f/0x10a0 [ 859.795779][ T27] ? __brelse+0xa0/0xa0 [ 859.800023][ T27] ? smp_call_on_cpu+0x250/0x250 [ 859.805016][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 859.810749][ T27] ? __brelse+0xa0/0xa0 [ 859.814927][ T27] blkdev_flush_mapping+0x140/0x2f0 [ 859.820158][ T27] blkdev_put_whole+0xd1/0xf0 [ 859.825109][ T27] blkdev_put+0x224/0x770 [ 859.829460][ T27] blkdev_close+0x68/0x80 [ 859.833944][ T27] __fput+0x27c/0xa90 [ 859.838000][ T27] ? blkdev_fsync+0xa0/0xa0 [ 859.842686][ T27] task_work_run+0x16f/0x270 [ 859.847306][ T27] ? task_work_cancel+0x30/0x30 [ 859.852313][ T27] ? do_raw_spin_unlock+0x175/0x230 [ 859.857527][ T27] do_exit+0xaa8/0x2950 [ 859.861859][ T27] ? find_held_lock+0x2d/0x110 [ 859.866649][ T27] ? get_signal+0x8a0/0x2450 [ 859.871390][ T27] ? mm_update_next_owner+0x7b0/0x7b0 [ 859.876786][ T27] do_group_exit+0xd4/0x2a0 [ 859.881481][ T27] get_signal+0x21c3/0x2450 [ 859.885998][ T27] ? exit_signals+0x8b0/0x8b0 [ 859.890825][ T27] ? do_sys_openat2+0xa1/0x4c0 [ 859.895630][ T27] arch_do_signal_or_restart+0x79/0x5c0 [ 859.901239][ T27] ? get_sigframe_size+0x10/0x10 [ 859.906187][ T27] ? up_write+0x520/0x520 [ 859.910508][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 859.915571][ T27] exit_to_user_mode_prepare+0x15f/0x250 [ 859.921309][ T27] syscall_exit_to_user_mode+0x1d/0x50 [ 859.926787][ T27] do_syscall_64+0x46/0xb0 [ 859.931352][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.937315][ T27] RIP: 0033:0x7fc7afd25697 [ 859.941783][ T27] RSP: 002b:00007ffc1484efc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.950209][ T27] RAX: 0000000000000008 RBX: 000055c24f0ff9d0 RCX: 00007fc7afd25697 [ 859.958291][ T27] RDX: 00000000000a0800 RSI: 000055c24f0e0b50 RDI: 00000000ffffff9c [ 859.966318][ T27] RBP: 000055c24f0e0b50 R08: 0000000000000001 R09: 00007ffc14908080 [ 859.974429][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 859.982441][ T27] R13: 000055c24f10fbf0 R14: 0000000000000001 R15: 000055c24f0c42c0 [ 859.990406][ T27] [ 859.993578][ T27] INFO: task syz-executor165:5109 blocked for more than 143 seconds. [ 860.001706][ T27] Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 860.009235][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.018011][ T27] task:syz-executor165 state:D stack:28488 pid:5109 ppid:5096 flags:0x00000004 [ 860.027262][ T27] Call Trace: [ 860.030533][ T27] [ 860.033618][ T27] __schedule+0xb8a/0x5450 [ 860.038051][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 860.044100][ T27] ? static_obj+0xb0/0xc0 [ 860.048447][ T27] ? io_schedule_timeout+0x150/0x150 [ 860.053816][ T27] ? __mutex_lock+0xa43/0x1360 [ 860.058613][ T27] schedule+0xde/0x1b0 [ 860.062761][ T27] schedule_preempt_disabled+0x13/0x20 [ 860.068228][ T27] __mutex_lock+0xa48/0x1360 [ 860.073030][ T27] ? blkdev_get_by_dev.part.0+0x9b/0xb80 [ 860.078681][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 860.084272][ T27] ? _atomic_dec_and_lock+0x96/0x100 [ 860.089600][ T27] ? disk_block_events+0x21/0x140 [ 860.094752][ T27] blkdev_get_by_dev.part.0+0x9b/0xb80 [ 860.100222][ T27] ? devcgroup_check_permission+0x1aa/0x440 [ 860.106230][ T27] blkdev_get_by_dev+0x6f/0x90 [ 860.111095][ T27] blkdev_open+0x140/0x2c0 [ 860.115523][ T27] do_dentry_open+0x6cc/0x13f0 [ 860.120277][ T27] ? blkdev_close+0x80/0x80 [ 860.124827][ T27] path_openat+0x1bbc/0x2a50 [ 860.129488][ T27] ? path_lookupat+0x840/0x840 [ 860.134323][ T27] do_filp_open+0x1ba/0x410 [ 860.138833][ T27] ? may_open_dev+0xf0/0xf0 [ 860.143382][ T27] ? find_held_lock+0x2d/0x110 [ 860.148170][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 860.153266][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 860.158215][ T27] ? _raw_spin_unlock+0x28/0x40 [ 860.163117][ T27] ? alloc_fd+0x2d8/0x6d0 [ 860.167487][ T27] do_sys_openat2+0x16d/0x4c0 [ 860.172233][ T27] ? build_open_flags+0x6f0/0x6f0 [ 860.177295][ T27] ? up_write+0x520/0x520 [ 860.181715][ T27] __x64_sys_openat+0x143/0x1f0 [ 860.186598][ T27] ? __ia32_sys_open+0x1c0/0x1c0 [ 860.191648][ T27] ? syscall_enter_from_user_mode+0x26/0xb0 [ 860.197562][ T27] do_syscall_64+0x39/0xb0 [ 860.202034][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 860.207948][ T27] RIP: 0033:0x7f45624f2c34 [ 860.212444][ T27] RSP: 002b:00007f45624e2e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 860.220928][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f45624f2c34 [ 860.228911][ T27] RDX: 0000000000000000 RSI: 00007f45624e2ef0 RDI: 00000000ffffff9c [ 860.237002][ T27] RBP: 00007f45624e2ef0 R08: 0000000000000000 R09: 00007f45624e3700 [ 860.245041][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 860.253095][ T27] R13: 00007f45625871a4 R14: 64626e2f7665642f R15: 0000000000022000 [ 860.261114][ T27] [ 860.264127][ T27] [ 860.264127][ T27] Showing all locks held in the system: [ 860.271938][ T27] 1 lock held by rcu_tasks_kthre/11: [ 860.277236][ T27] #0: ffffffff8c78df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 860.287797][ T27] 1 lock held by rcu_tasks_trace/12: [ 860.293128][ T27] #0: ffffffff8c78dc70 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 860.304150][ T27] 1 lock held by khungtaskd/27: [ 860.309000][ T27] #0: ffffffff8c78eac0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 [ 860.318951][ T27] 5 locks held by kworker/u4:4/55: [ 860.324242][ T27] 2 locks held by getty/4740: [ 860.328919][ T27] #0: ffff88814b502098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 860.338792][ T27] #1: ffffc900020482f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 860.348969][ T27] 1 lock held by udevd/5101: [ 860.353621][ T27] #0: ffff888146b5b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xc0/0x770 [ 860.362984][ T27] 1 lock held by syz-executor165/5109: [ 860.368464][ T27] #0: ffff888146b5b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb80 [ 860.379108][ T27] [ 860.381470][ T27] ============================================= [ 860.381470][ T27] [ 860.389866][ T27] NMI backtrace for cpu 1 [ 860.394179][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 860.403972][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.414014][ T27] Call Trace: [ 860.417280][ T27] [ 860.420199][ T27] dump_stack_lvl+0xd1/0x138 [ 860.424798][ T27] nmi_cpu_backtrace.cold+0x24/0x18a [ 860.430078][ T27] nmi_trigger_cpumask_backtrace+0x333/0x3c0 [ 860.436092][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 860.441303][ T27] watchdog+0xc75/0xfc0 [ 860.445542][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.451537][ T27] kthread+0x2e8/0x3a0 [ 860.455609][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 860.461243][ T27] ret_from_fork+0x1f/0x30 [ 860.465672][ T27] [ 860.468794][ T27] Sending NMI from CPU 1 to CPUs 0: [ 860.474057][ C0] NMI backtrace for cpu 0 [ 860.474066][ C0] CPU: 0 PID: 55 Comm: kworker/u4:4 Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 860.474085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.474096][ C0] Workqueue: events_unbound toggle_allocation_gate [ 860.474188][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x70 [ 860.474219][ C0] Code: 82 48 15 00 00 83 f8 02 75 20 48 8b 8a 50 15 00 00 8b 92 4c 15 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 01 48 89 34 c1 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 55 41 54 49 89 [ 860.474234][ C0] RSP: 0018:ffffc9000201f9c0 EFLAGS: 00000293 [ 860.474247][ C0] RAX: 0000000000000000 RBX: 0000000012468007 RCX: 0000000000000000 [ 860.474258][ C0] RDX: ffff88801871c040 RSI: ffffffff81ba7db5 RDI: 0000000000000007 [ 860.474269][ C0] RBP: 00002aaaaaaab000 R08: 0000000000000007 R09: 0000000000000000 [ 860.474279][ C0] R10: 0000000012468007 R11: 0000000000000000 R12: 0000000012468067 [ 860.474290][ C0] R13: ffffc9000201fa68 R14: ffff888012466aa8 R15: ffff888012462040 [ 860.474302][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 860.474319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.474331][ C0] CR2: 000055a0ed95a680 CR3: 000000000c48e000 CR4: 00000000003506f0 [ 860.474342][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.474352][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 860.474362][ C0] Call Trace: [ 860.474367][ C0] [ 860.474371][ C0] __get_locked_pte+0x75/0x270 [ 860.474427][ C0] ? kmem_cache_alloc_node+0x127/0x590 [ 860.474453][ C0] ? kmem_cache_alloc_node+0x127/0x590 [ 860.474474][ C0] __text_poke+0x1b3/0x8e0 [ 860.474494][ C0] ? setup_data_read+0x230/0x230 [ 860.474514][ C0] ? text_poke_memset+0x60/0x60 [ 860.474535][ C0] ? kmem_cache_alloc_node+0x127/0x590 [ 860.474555][ C0] text_poke_bp_batch+0x37d/0x6b0 [ 860.474576][ C0] ? do_sync_core+0x30/0x30 [ 860.474596][ C0] ? __jump_label_update+0x296/0x410 [ 860.474619][ C0] text_poke_finish+0x1a/0x30 [ 860.474649][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 860.474668][ C0] jump_label_update+0x32f/0x410 [ 860.474690][ C0] static_key_disable_cpuslocked+0x156/0x1b0 [ 860.474714][ C0] static_key_disable+0x1a/0x20 [ 860.474737][ C0] toggle_allocation_gate+0x143/0x230 [ 860.474754][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 860.474772][ C0] process_one_work+0x9bf/0x1710 [ 860.474793][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 860.474818][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 860.474835][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 860.474859][ C0] worker_thread+0x669/0x1090 [ 860.474879][ C0] ? process_one_work+0x1710/0x1710 [ 860.474898][ C0] kthread+0x2e8/0x3a0 [ 860.474913][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 860.474930][ C0] ret_from_fork+0x1f/0x30 [ 860.474954][ C0] [ 860.475053][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 860.763470][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 860.773283][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.783342][ T27] Call Trace: [ 860.786622][ T27] [ 860.789555][ T27] dump_stack_lvl+0xd1/0x138 [ 860.794159][ T27] panic+0x2cc/0x626 [ 860.798090][ T27] ? panic_print_sys_info.part.0+0x110/0x110 [ 860.804085][ T27] ? irq_work_claim+0x76/0x90 [ 860.808811][ T27] ? irq_work_queue+0x2d/0x80 [ 860.813493][ T27] ? watchdog.cold+0x130/0x158 [ 860.818283][ T27] watchdog.cold+0x141/0x158 [ 860.822886][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.828876][ T27] kthread+0x2e8/0x3a0 [ 860.832949][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 860.838581][ T27] ret_from_fork+0x1f/0x30 [ 860.843008][ T27] [ 860.846285][ T27] Kernel Offset: disabled [ 860.850617][ T27] Rebooting in 86400 seconds..