[ 403.260036][ T28] audit: type=1400 audit(402.810:157): avc: denied { transition } for pid=3394 comm="sshd" path="/bin/sh" dev="vda" ino=73 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 403.275071][ T28] audit: type=1400 audit(402.820:158): avc: denied { noatsecure } for pid=3394 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 403.357593][ T28] audit: type=1400 audit(402.910:159): avc: denied { rlimitinh } for pid=3394 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 403.372911][ T28] audit: type=1400 audit(402.910:160): avc: denied { siginh } for pid=3394 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:44699' (ED25519) to the list of known hosts. 1970/01/01 00:08:12 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:08:18 parsed 1 programs [ 500.084829][ T28] audit: type=1400 audit(499.630:161): avc: denied { mounton } for pid=3408 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 500.093445][ T28] audit: type=1400 audit(499.640:162): avc: denied { mount } for pid=3408 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 500.227478][ T28] audit: type=1400 audit(499.780:163): avc: denied { unlink } for pid=3408 comm="syz-executor" name="swap-file" dev="vda" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 501.179841][ T3408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:08:20 executed programs: 0 [ 501.812266][ T28] audit: type=1400 audit(501.360:164): avc: denied { mount } for pid=3415 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 509.419439][ T3415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.476406][ T3415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.234335][ T3415] hsr_slave_0: entered promiscuous mode [ 513.286444][ T3415] hsr_slave_1: entered promiscuous mode [ 517.394276][ T28] audit: type=1400 audit(516.930:165): avc: denied { write } for pid=3415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.395775][ T28] audit: type=1400 audit(516.940:166): avc: denied { read } for pid=3415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.424930][ T3415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 517.526737][ T3415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.618208][ T3415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 517.723343][ T3415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.940318][ T3415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.606551][ T3415] veth0_vlan: entered promiscuous mode [ 537.846822][ T3415] veth1_vlan: entered promiscuous mode [ 538.399289][ T3415] veth0_macvtap: entered promiscuous mode [ 538.538941][ T3415] veth1_macvtap: entered promiscuous mode [ 539.194587][ T3415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.195607][ T3415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.196242][ T3415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.196828][ T3415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.853762][ T28] audit: type=1400 audit(539.390:167): avc: denied { mounton } for pid=3415 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 541.963881][ T3529] nbd0: detected capacity change from 0 to 131072 [ 543.453874][ T47] block nbd0: Receive control failed (result -104) [ 572.454809][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 30 seconds [ 602.528390][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 60 seconds [ 603.324905][ T2974] udevd[2974]: worker [3528] /devices/virtual/block/nbd0 is taking a long time [ 632.616598][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 90 seconds [ 662.699699][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 120 seconds [ 692.768339][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 150 seconds 1970/01/01 00:11:34 executed programs: 1 [ 696.994743][ T28] audit: type=1400 audit(696.550:168): avc: denied { read } for pid=3556 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 696.996878][ T28] audit: type=1400 audit(696.550:169): avc: denied { open } for pid=3556 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 697.015661][ T28] audit: type=1400 audit(696.570:170): avc: denied { mounton } for pid=3556 comm="syz-executor.0" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 705.388064][ T3556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.428812][ T3556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.594691][ T3556] hsr_slave_0: entered promiscuous mode [ 709.638890][ T3556] hsr_slave_1: entered promiscuous mode [ 709.704988][ T3556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.707876][ T3556] Cannot create hsr debugfs directory [ 711.436699][ T3556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.719420][ T3556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.966875][ T3556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.276741][ T3556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.340044][ T3556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 713.515390][ T3556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.608590][ T3556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.698838][ T3556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 716.780140][ T3556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.547262][ T2974] udevd[2974]: worker [3528] /devices/virtual/block/nbd0 timeout; kill it [ 722.565941][ T3528] nbd0: unable to read partition table [ 722.569959][ T3528] nbd0: partition table beyond EOD, truncated [ 722.590999][ T2974] udevd[2974]: seq 6028 '/devices/virtual/block/nbd0' killed [ 722.865041][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 180 seconds [ 730.004780][ T3556] veth0_vlan: entered promiscuous mode [ 730.179228][ T3556] veth1_vlan: entered promiscuous mode [ 730.724728][ T3556] veth0_macvtap: entered promiscuous mode [ 730.810324][ T3556] veth1_macvtap: entered promiscuous mode [ 731.327278][ T3556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.328381][ T3556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.329054][ T3556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.329761][ T3556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.941011][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 210 seconds [ 783.015534][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 240 seconds [ 813.089631][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 270 seconds [ 843.183248][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 300 seconds [ 873.253505][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 330 seconds 1970/01/01 00:14:47 executed programs: 2 [ 897.736408][ T3631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.786977][ T3631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.759303][ T3631] hsr_slave_0: entered promiscuous mode [ 901.808103][ T3631] hsr_slave_1: entered promiscuous mode [ 901.854028][ T3631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.854969][ T3631] Cannot create hsr debugfs directory [ 903.328281][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 360 seconds [ 903.353761][ T3631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.607530][ T3631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.925294][ T3631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.176497][ T3631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.139236][ T3631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 905.232740][ T3631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 905.308895][ T3631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 905.377381][ T3631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.094915][ T3631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.418406][ T3631] veth0_vlan: entered promiscuous mode [ 925.621159][ T3631] veth1_vlan: entered promiscuous mode [ 926.178256][ T3631] veth0_macvtap: entered promiscuous mode [ 926.288808][ T3631] veth1_macvtap: entered promiscuous mode [ 927.078321][ T3631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.079752][ T3631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.080419][ T3631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.098054][ T3631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.423833][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 390 seconds [ 963.492871][ T1300] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 420 seconds [ 993.589462][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 450 seconds [ 1023.646328][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 480 seconds [ 1053.725039][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 510 seconds 1970/01/01 00:18:02 executed programs: 3 [ 1083.807002][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 540 seconds [ 1091.457665][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.505805][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.026708][ T3702] hsr_slave_0: entered promiscuous mode [ 1095.104630][ T3702] hsr_slave_1: entered promiscuous mode [ 1095.145192][ T3702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.146642][ T3702] Cannot create hsr debugfs directory [ 1096.620029][ T3702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.877437][ T3702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.056087][ T3702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.209862][ T3702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.050576][ T3702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1098.148820][ T3702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1098.238099][ T3702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1098.320864][ T3702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1101.232380][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.959515][ T3702] veth0_vlan: entered promiscuous mode [ 1112.118309][ T3702] veth1_vlan: entered promiscuous mode [ 1112.417435][ T3702] veth0_macvtap: entered promiscuous mode [ 1112.496516][ T3702] veth1_macvtap: entered promiscuous mode [ 1112.946789][ T3702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.947726][ T3702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.948355][ T3702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.948933][ T3702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.892196][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 570 seconds [ 1143.975186][ T8] block nbd0: Possible stuck request 00000000d4ddb361: control (read@0,4096B). Runtime 600 seconds [ 1155.500099][ T30] INFO: task udevd:3528 blocked for more than 430 seconds. [ 1155.502190][ T30] Not tainted 6.8.0-syzkaller-g1f440397665f #0 [ 1155.513091][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1155.513989][ T30] task:udevd state:D stack:0 pid:3528 tgid:3528 ppid:2974 flags:0x0000000d [ 1155.515111][ T30] Call trace: [ 1155.515546][ T30] __switch_to+0x1c8/0x2a0 [ 1155.516838][ T30] __schedule+0xad8/0x2ae8 [ 1155.517388][ T30] schedule+0xd0/0x304 [ 1155.517898][ T30] io_schedule+0xac/0x114 [ 1155.518302][ T30] folio_wait_bit_common+0x2ac/0x6dc [ 1155.518763][ T30] __filemap_get_folio+0x358/0x794 [ 1155.519128][ T30] truncate_inode_pages_range+0x270/0xa7c [ 1155.519538][ T30] truncate_inode_pages+0x14/0x20 [ 1155.520036][ T30] blkdev_flush_mapping+0xfc/0x24c [ 1155.520478][ T30] blkdev_put_whole+0xd4/0xf0 [ 1155.523141][ T30] bdev_release+0x378/0x7d4 [ 1155.524020][ T30] blkdev_release+0x14/0x24 [ 1155.524569][ T30] __fput+0x1a4/0x92c [ 1155.525117][ T30] ____fput+0x10/0x1c [ 1155.525621][ T30] task_work_run+0x124/0x20c [ 1155.526217][ T30] do_exit+0x754/0x2000 [ 1155.526750][ T30] do_group_exit+0xa4/0x208 [ 1155.527243][ T30] get_signal+0x199c/0x1ae0 [ 1155.527770][ T30] do_notify_resume+0x47c/0x3208 [ 1155.528290][ T30] el0_svc+0x11c/0x140 [ 1155.528797][ T30] el0t_64_sync_handler+0x100/0x12c [ 1155.529335][ T30] el0t_64_sync+0x190/0x194 [ 1155.530833][ T30] [ 1155.530833][ T30] Showing all locks held in the system: [ 1155.535717][ T30] 1 lock held by khungtaskd/30: [ 1155.536411][ T30] #0: ffff800086838ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x44/0x2d4 [ 1155.539400][ T30] 2 locks held by syslogd/2959: [ 1155.540171][ T30] #0: ffff00006a892198 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x268/0x2ae8 [ 1155.543420][ T30] #1: ffff00006a87dcc8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x258/0x74c [ 1155.544821][ T30] 1 lock held by klogd/2963: [ 1155.545441][ T30] 2 locks held by getty/3092: [ 1155.546002][ T30] #0: ffff000013e6f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1155.547538][ T30] #1: ffff80008960b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x93c/0xe9c [ 1155.549298][ T30] 1 lock held by udevd/3528: [ 1155.549886][ T30] #0: ffff0000105944c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0xf8/0x7d4 [ 1155.555251][ T30] 1 lock held by syz-executor.0/3623: [ 1155.557360][ T30] #0: ffff0000105944c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2b0/0xa28 [ 1155.558861][ T30] 1 lock held by syz-executor.0/3697: [ 1155.559368][ T30] #0: ffff0000105944c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2b0/0xa28 [ 1155.560841][ T30] 1 lock held by syz-executor.0/3769: [ 1155.564642][ T30] #0: ffff0000105944c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2b0/0xa28 [ 1155.566159][ T30] [ 1155.566613][ T30] ============================================= [ 1155.566613][ T30] [ 1155.567686][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1155.568607][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.8.0-syzkaller-g1f440397665f #0 [ 1155.569156][ T30] Hardware name: linux,dummy-virt (DT) [ 1155.569586][ T30] Call trace: [ 1155.569951][ T30] dump_backtrace+0x9c/0x11c [ 1155.570499][ T30] show_stack+0x18/0x24 [ 1155.570887][ T30] dump_stack_lvl+0x74/0xd4 [ 1155.571384][ T30] dump_stack+0x1c/0x28 [ 1155.571861][ T30] panic+0x5a8/0x630 [ 1155.572338][ T30] watchdog+0x628/0xdc8 [ 1155.572739][ T30] kthread+0x27c/0x300 [ 1155.573103][ T30] ret_from_fork+0x10/0x20 [ 1155.574242][ T30] SMP: stopping secondary CPUs [ 1155.576805][ T30] Kernel Offset: disabled [ 1155.577783][ T30] CPU features: 0x0,88000202,34020000,0100421b [ 1155.579976][ T30] Memory Limit: none [ 1155.582518][ T30] Rebooting in 86400 seconds..