Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. executing program [ 487.889021][ T27] audit: type=1400 audit(1663480696.126:75): avc: denied { execmem } for pid=3635 comm="syz-executor326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 487.908664][ T27] audit: type=1400 audit(1663480696.136:76): avc: denied { read } for pid=3636 comm="syz-executor326" name="nbd0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.933116][ T27] audit: type=1400 audit(1663480696.136:77): avc: denied { open } for pid=3636 comm="syz-executor326" path="/dev/nbd0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.957878][ T27] audit: type=1400 audit(1663480696.136:78): avc: denied { ioctl } for pid=3636 comm="syz-executor326" path="/dev/nbd0" dev="devtmpfs" ino=660 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.984304][ T3636] nbd0: detected capacity change from 0 to 354 [ 492.890651][ T3636] block nbd0: shutting down sockets [ 518.571912][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 30 seconds [ 548.072069][ T2972] udevd[2972]: worker [3638] /devices/virtual/block/nbd0 is taking a long time [ 548.651924][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 60 seconds [ 578.731982][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 90 seconds [ 608.811923][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 120 seconds [ 638.891940][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 150 seconds executing program [ 668.242129][ T2972] udevd[2972]: worker [3638] /devices/virtual/block/nbd0 timeout; kill it [ 668.250910][ T2972] udevd[2972]: seq 7473 '/devices/virtual/block/nbd0' killed [ 668.250989][ T3638] ldm_validate_partition_table(): Disk read failed. [ 668.265103][ T3638] Dev nbd0: unable to read RDB block 0 [ 668.270565][ T3638] nbd0: unable to read partition table [ 668.276308][ T3638] nbd0: partition table beyond EOD, truncated [ 668.288514][ T2972] udevd[2972]: worker [3638] terminated by signal 9 (Killed) [ 668.296035][ T2972] udevd[2972]: worker [3638] failed while handling '/devices/virtual/block/nbd0' [ 668.971872][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 180 seconds [ 699.051941][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 210 seconds [ 729.131904][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 240 seconds [ 759.211952][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 270 seconds [ 789.291894][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 300 seconds [ 819.371985][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 330 seconds [ 849.451916][ T9] block nbd0: Possible stuck request ffff88801e738000: control (read@0,4096B). Runtime 360 seconds [ 859.691981][ T28] INFO: task syz-executor326:3645 blocked for more than 143 seconds. [ 859.700213][ T28] Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 859.707889][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.716640][ T28] task:syz-executor326 state:D stack:28176 pid: 3645 ppid: 3635 flags:0x00000004 [ 859.725902][ T28] Call Trace: [ 859.729189][ T28] [ 859.732160][ T28] __schedule+0xadf/0x52b0 [ 859.736694][ T28] ? io_schedule_timeout+0x140/0x140 [ 859.742020][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 859.747840][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 859.753686][ T28] schedule+0xda/0x1b0 [ 859.757769][ T28] blk_mq_freeze_queue_wait+0x112/0x160 [ 859.763412][ T28] ? blk_mq_queue_inflight+0xa0/0xa0 [ 859.768711][ T28] ? blk_mq_run_hw_queue+0x490/0x490 [ 859.774056][ T28] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 859.779940][ T28] nbd_add_socket+0x166/0x810 [ 859.784704][ T28] ? cap_capable+0x1f1/0x280 [ 859.789351][ T28] ? status_cb+0x20/0x20 [ 859.793647][ T28] ? security_capable+0x8f/0xc0 [ 859.798596][ T28] nbd_ioctl+0x4ab/0xbd0 [ 859.802881][ T28] ? blkdev_bszset+0x1f0/0x1f0 [ 859.807703][ T28] ? nbd_start_device+0xc30/0xc30 [ 859.812790][ T28] ? __ct_user_exit+0xff/0x150 [ 859.817564][ T28] ? lock_downgrade+0x6cb/0x6e0 [ 859.822456][ T28] ? nbd_start_device+0xc30/0xc30 [ 859.827492][ T28] blkdev_ioctl+0x36e/0x800 [ 859.832058][ T28] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 859.837535][ T28] ? selinux_file_ioctl+0xb1/0x270 [ 859.842768][ T28] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 859.848243][ T28] __x64_sys_ioctl+0x193/0x200 [ 859.853050][ T28] do_syscall_64+0x35/0xb0 [ 859.857519][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.863454][ T28] RIP: 0033:0x7fa9b8376399 [ 859.867874][ T28] RSP: 002b:00007ffc31bc5218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.876328][ T28] RAX: ffffffffffffffda RBX: 00000000000771ae RCX: 00007fa9b8376399 [ 859.884337][ T28] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 859.892353][ T28] RBP: 0000000000000000 R08: 00007ffc31bc53b8 R09: 00007ffc31bc53b8 [ 859.900510][ T28] R10: 00007ffc31bc4c90 R11: 0000000000000246 R12: 00007ffc31bc522c [ 859.908548][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 859.916658][ T28] [ 859.919681][ T28] [ 859.919681][ T28] Showing all locks held in the system: [ 859.927432][ T28] 1 lock held by rcu_tasks_kthre/12: [ 859.932769][ T28] #0: ffffffff8bf85db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 859.943250][ T28] 1 lock held by rcu_tasks_trace/13: [ 859.948535][ T28] #0: ffffffff8bf85ab0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 859.959588][ T28] 1 lock held by khungtaskd/28: [ 859.964492][ T28] #0: ffffffff8bf86900 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 859.974455][ T28] 2 locks held by getty/3293: [ 859.979140][ T28] #0: ffff88814ab0c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 859.989089][ T28] #1: ffffc90001c282f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef0/0x13e0 [ 859.999259][ T28] 1 lock held by syz-executor326/3645: [ 860.004751][ T28] #0: ffff8881472a0198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x151/0xbd0 [ 860.014208][ T28] [ 860.016520][ T28] ============================================= [ 860.016520][ T28] [ 860.024979][ T28] NMI backtrace for cpu 1 [ 860.029321][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 860.039110][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 860.049151][ T28] Call Trace: [ 860.052419][ T28] [ 860.055352][ T28] dump_stack_lvl+0xcd/0x134 [ 860.059983][ T28] nmi_cpu_backtrace.cold+0x46/0x14f [ 860.065265][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 860.070452][ T28] nmi_trigger_cpumask_backtrace+0x206/0x250 [ 860.076458][ T28] watchdog+0xc18/0xf50 [ 860.080608][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.086603][ T28] kthread+0x2e4/0x3a0 [ 860.090713][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 860.096434][ T28] ret_from_fork+0x1f/0x30 [ 860.100855][ T28] [ 860.103953][ T28] Sending NMI from CPU 1 to CPUs 0: [ 860.109192][ C0] NMI backtrace for cpu 0 [ 860.109202][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 860.109223][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 860.109235][ C0] Workqueue: events_unbound toggle_allocation_gate [ 860.109259][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 860.109284][ C0] Code: 01 00 00 49 89 f8 65 48 8b 14 25 80 6f 02 00 a9 00 01 ff 00 74 0e 85 f6 74 59 8b 82 bc 15 00 00 85 c0 74 4f 8b 82 98 15 00 00 <83> f8 03 75 44 48 8b 82 a0 15 00 00 8b 92 9c 15 00 00 48 8b 38 48 [ 860.109301][ C0] RSP: 0018:ffffc9000031f9c0 EFLAGS: 00000246 [ 860.109315][ C0] RAX: 0000000000000000 RBX: ffffc9000031fa78 RCX: ffffffff8425994c [ 860.109327][ C0] RDX: ffff8880121da040 RSI: 0000000000000000 RDI: 0000000000000005 [ 860.109339][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000003 [ 860.109350][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000044 [ 860.109361][ C0] R13: 000000000000000f R14: 1ffff92000063f49 R15: ffffffff89e6ac8a [ 860.109373][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 860.109389][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.109401][ C0] CR2: 00005593ad02d600 CR3: 000000000bc8e000 CR4: 00000000003506f0 [ 860.109413][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.109423][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 860.109435][ C0] Call Trace: [ 860.109439][ C0] [ 860.109444][ C0] insn_get_sib+0x17c/0x330 [ 860.109499][ C0] insn_get_displacement+0x346/0x6c0 [ 860.109523][ C0] insn_decode+0x35b/0x3b0 [ 860.109544][ C0] ? kmem_cache_alloc+0x11b/0x520 [ 860.109566][ C0] text_poke_loc_init+0xa6/0x450 [ 860.109585][ C0] ? arch_jump_label_transform_queue+0x58/0x100 [ 860.109609][ C0] ? text_poke_memcpy+0x10/0x10 [ 860.109627][ C0] ? kmem_cache_alloc+0x11b/0x520 [ 860.109648][ C0] ? __jump_label_patch+0x173/0x330 [ 860.109671][ C0] arch_jump_label_transform_queue+0x94/0x100 [ 860.109695][ C0] __jump_label_update+0x12e/0x410 [ 860.109715][ C0] jump_label_update+0x32f/0x410 [ 860.109734][ C0] static_key_disable_cpuslocked+0x152/0x1b0 [ 860.109754][ C0] static_key_disable+0x16/0x20 [ 860.109772][ C0] toggle_allocation_gate+0x183/0x390 [ 860.109792][ C0] ? lock_release+0x780/0x780 [ 860.109810][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 860.109830][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 860.109848][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 860.109868][ C0] process_one_work+0x991/0x1610 [ 860.109897][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 860.109918][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 860.109936][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 860.109955][ C0] worker_thread+0x665/0x1080 [ 860.109977][ C0] ? process_one_work+0x1610/0x1610 [ 860.109997][ C0] kthread+0x2e4/0x3a0 [ 860.110015][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 860.110034][ C0] ret_from_fork+0x1f/0x30 [ 860.110058][ C0] [ 860.110184][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 860.410235][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 860.420038][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 860.430087][ T28] Call Trace: [ 860.433370][ T28] [ 860.436299][ T28] dump_stack_lvl+0xcd/0x134 [ 860.440893][ T28] panic+0x2c8/0x627 [ 860.444816][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 860.450801][ T28] ? irq_work_claim+0x76/0x90 [ 860.455477][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 860.460681][ T28] ? irq_work_queue+0x29/0x80 [ 860.465357][ T28] ? watchdog.cold+0x130/0x158 [ 860.470140][ T28] watchdog.cold+0x141/0x158 [ 860.474749][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 860.480771][ T28] kthread+0x2e4/0x3a0 [ 860.484856][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 860.490522][ T28] ret_from_fork+0x1f/0x30 [ 860.494968][ T28] [ 860.498168][ T28] Kernel Offset: disabled [ 860.502521][ T28] Rebooting in 86400 seconds..