Warning: Permanently added '[localhost]:63236' (ED25519) to the list of known hosts. 1970/01/01 00:07:42 ignoring optional flag "type"="qemu" 1970/01/01 00:07:48 parsed 1 programs [ 469.928132][ T30] audit: type=1400 audit(469.320:78): avc: denied { mount } for pid=3510 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 470.121957][ T30] audit: type=1400 audit(469.510:79): avc: denied { unlink } for pid=3510 comm="syz-executor" name="swap-file" dev="vda" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 471.061778][ T3510] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:07:50 executed programs: 0 [ 471.665213][ T30] audit: type=1400 audit(471.060:80): avc: denied { mount } for pid=3516 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 480.424961][ T3516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.484169][ T3516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.626729][ T3516] hsr_slave_0: entered promiscuous mode [ 484.643888][ T3516] hsr_slave_1: entered promiscuous mode [ 489.515556][ T3516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 489.571134][ T3516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.626776][ T3516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.678483][ T3516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.126134][ T3516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.375452][ T3516] veth0_vlan: entered promiscuous mode [ 507.511055][ T3516] veth1_vlan: entered promiscuous mode [ 507.886237][ T3516] veth0_macvtap: entered promiscuous mode [ 507.965129][ T3516] veth1_macvtap: entered promiscuous mode [ 508.670988][ T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.676635][ T996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.679350][ T996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.691903][ T996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.826695][ T3630] nbd0: detected capacity change from 0 to 262 [ 512.945126][ T50] block nbd0: Receive control failed (result -104) [ 541.884178][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 30 seconds [ 571.964225][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 60 seconds [ 572.833148][ T3138] udevd[3138]: worker [3633] /devices/virtual/block/nbd0 is taking a long time 1970/01/01 00:09:49 executed programs: 1 [ 600.374390][ T3663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.437876][ T3663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.045265][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 90 seconds [ 604.427156][ T3663] hsr_slave_0: entered promiscuous mode [ 604.437056][ T3663] hsr_slave_1: entered promiscuous mode [ 604.444945][ T3663] debugfs: 'hsr0' already exists in 'hsr' [ 604.446886][ T3663] Cannot create hsr debugfs directory [ 606.367489][ T3663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.668580][ T3663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.969157][ T3663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.325667][ T3663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.390008][ T3663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.451727][ T3663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.498414][ T3663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.536471][ T3663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.778710][ T3663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.007267][ T3663] veth0_vlan: entered promiscuous mode [ 623.089509][ T3663] veth1_vlan: entered promiscuous mode [ 623.429254][ T3663] veth0_macvtap: entered promiscuous mode [ 623.505913][ T3663] veth1_macvtap: entered promiscuous mode [ 624.003912][ T112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.006981][ T112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.013721][ T112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.016276][ T112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.123579][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 120 seconds [ 662.197685][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 150 seconds [ 692.276303][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 180 seconds [ 692.619464][ T3138] udevd[3138]: worker [3633] /devices/virtual/block/nbd0 timeout; kill it [ 692.624389][ T3138] udevd[3138]: seq 6534 '/devices/virtual/block/nbd0' killed 1970/01/01 00:11:44 executed programs: 2 [ 714.967655][ T3738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.018027][ T3738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.341885][ T3738] hsr_slave_0: entered promiscuous mode [ 719.350064][ T3738] hsr_slave_1: entered promiscuous mode [ 719.366835][ T3738] debugfs: 'hsr0' already exists in 'hsr' [ 719.367607][ T3738] Cannot create hsr debugfs directory [ 721.179046][ T3738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.418669][ T3738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.803739][ T3738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.154391][ T3738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.381543][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 210 seconds [ 723.648102][ T3738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.725738][ T3738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.846516][ T3738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 723.909524][ T3738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.223844][ T3738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.413267][ T3738] veth0_vlan: entered promiscuous mode [ 739.565886][ T3738] veth1_vlan: entered promiscuous mode [ 739.955734][ T3738] veth0_macvtap: entered promiscuous mode [ 740.004383][ T3738] veth1_macvtap: entered promiscuous mode [ 740.445749][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.446760][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.449777][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.450768][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.441785][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 240 seconds [ 782.524069][ T54] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 270 seconds [ 812.597366][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 300 seconds 1970/01/01 00:13:40 executed programs: 3 [ 830.787014][ T3819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.821095][ T3819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.738585][ T3819] hsr_slave_0: entered promiscuous mode [ 834.755099][ T3819] hsr_slave_1: entered promiscuous mode [ 834.764056][ T3819] debugfs: 'hsr0' already exists in 'hsr' [ 834.765313][ T3819] Cannot create hsr debugfs directory [ 836.262740][ T3819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.546210][ T3819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.777980][ T3819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.088495][ T3819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.157227][ T3819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.219020][ T3819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.261243][ T3819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.298413][ T3819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 840.961413][ T3819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.678166][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 330 seconds [ 853.819201][ T3819] veth0_vlan: entered promiscuous mode [ 853.918364][ T3819] veth1_vlan: entered promiscuous mode [ 854.254517][ T3819] veth0_macvtap: entered promiscuous mode [ 854.313774][ T3819] veth1_macvtap: entered promiscuous mode [ 854.734790][ T3863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.742390][ T3863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.766930][ T3863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.769836][ T3863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.760087][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 360 seconds [ 902.844226][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 390 seconds [ 932.925324][ T11] block nbd0: Possible stuck request 00000000b98a11ab: control (read@0,4096B). Runtime 420 seconds 1970/01/01 00:15:34 executed programs: 4 [ 945.354972][ T3897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.379445][ T3897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.634304][ T32] INFO: task syz-executor.0:3630 blocked for more than 430 seconds. [ 947.635761][ T32] Not tainted syzkaller #0 [ 947.636345][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.636939][ T32] task:syz-executor.0 state:D stack:0 pid:3630 tgid:3627 ppid:3516 task_flags:0x400140 flags:0x00000019 [ 947.638196][ T32] Call trace: [ 947.638864][ T32] __switch_to+0x208/0x4f0 (T) [ 947.654103][ T32] __schedule+0xd58/0x3180 [ 947.655081][ T32] schedule+0xd0/0x344 [ 947.655234][ T32] schedule_preempt_disabled+0x18/0x2c [ 947.655356][ T32] __mutex_lock+0x72c/0xffc [ 947.655470][ T32] mutex_lock_nested+0x24/0x30 [ 947.655593][ T32] bdev_release+0x104/0x510 [ 947.655770][ T32] blkdev_release+0x14/0x24 [ 947.655907][ T32] __fput+0x2c8/0x954 [ 947.656180][ T32] ____fput+0x14/0x20 [ 947.656307][ T32] task_work_run+0x128/0x210 [ 947.656427][ T32] exit_to_user_mode_loop+0x17c/0x1a0 [ 947.656552][ T32] el0_svc+0x244/0x288 [ 947.656672][ T32] el0t_64_sync_handler+0xa0/0xe4 [ 947.656835][ T32] el0t_64_sync+0x198/0x19c [ 947.657725][ T32] [ 947.657725][ T32] Showing all locks held in the system: [ 947.658062][ T32] 2 locks held by pr/ttyAMA-1/31: [ 947.658456][ T32] 1 lock held by khungtaskd/32: [ 947.658626][ T32] #0: ffff8000874435a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 947.660081][ T32] 2 locks held by getty/3261: [ 947.679123][ T32] #0: ffff0000132160a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 947.703056][ T32] #1: ffff80008d7cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e8/0xdc0 [ 947.703737][ T32] 1 lock held by syz-executor.0/3630: [ 947.703861][ T32] #0: ffff000014556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x104/0x510 [ 947.704396][ T32] 1 lock held by udevd/3633: [ 947.704526][ T32] #0: ffff000014556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 947.705039][ T32] 1 lock held by syz-executor.0/3735: [ 947.705139][ T32] #0: ffff000014556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 947.705623][ T32] 1 lock held by syz-executor.0/3810: [ 947.705720][ T32] #0: ffff000014556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 947.706345][ T32] 2 locks held by kworker/u8:1/3863: [ 947.706446][ T32] #0: ffff00000dc31148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 [ 947.707097][ T32] #1: ffff8000a1da7c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 [ 947.707690][ T32] 1 lock held by syz-executor.0/3893: [ 947.707795][ T32] #0: ffff000014556358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 947.708290][ T32] 1 lock held by modprobe/3923: [ 947.715252][ T32] [ 947.715439][ T32] ============================================= [ 947.715439][ T32] [ 947.716523][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 947.723874][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 947.724615][ T32] Hardware name: linux,dummy-virt (DT) [ 947.725077][ T32] Call trace: [ 947.725509][ T32] show_stack+0x18/0x24 (C) [ 947.726082][ T32] dump_stack_lvl+0x38/0xf4 [ 947.726559][ T32] dump_stack+0x1c/0x28 [ 947.726922][ T32] vpanic+0x49c/0x50c [ 947.727404][ T32] nmi_panic+0x0/0x64 [ 947.727753][ T32] watchdog+0x538/0xcd8 [ 947.728155][ T32] kthread+0x348/0x5fc [ 947.728534][ T32] ret_from_fork+0x10/0x20 [ 947.729595][ T32] SMP: stopping secondary CPUs [ 947.731412][ T32] Kernel Offset: disabled [ 947.732134][ T32] CPU features: 0x082000,04006800,40004000,0400421b [ 947.733171][ T32] Memory Limit: none [ 947.735550][ T32] Rebooting in 86400 seconds..