[ 435.143845][ T28] audit: type=1400 audit(434.530:158): avc: denied { transition } for pid=3369 comm="sshd" path="/bin/sh" dev="vda" ino=73 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 435.147311][ T28] audit: type=1400 audit(434.530:159): avc: denied { noatsecure } for pid=3369 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 435.181100][ T28] audit: type=1400 audit(434.580:160): avc: denied { rlimitinh } for pid=3369 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 435.183587][ T28] audit: type=1400 audit(434.580:161): avc: denied { siginh } for pid=3369 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:48045' (ED25519) to the list of known hosts. 1970/01/01 00:08:41 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:08:47 parsed 1 programs [ 528.800200][ T28] audit: type=1400 audit(528.200:162): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 528.809689][ T28] audit: type=1400 audit(528.210:163): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 528.916360][ T28] audit: type=1400 audit(528.320:164): avc: denied { unlink } for pid=3383 comm="syz-executor" name="swap-file" dev="vda" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 529.890333][ T3383] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:08:49 executed programs: 0 [ 530.543900][ T28] audit: type=1400 audit(529.940:165): avc: denied { mount } for pid=3390 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 530.565290][ T28] audit: type=1400 audit(529.970:166): avc: denied { read } for pid=3390 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 530.573748][ T28] audit: type=1400 audit(529.970:167): avc: denied { open } for pid=3390 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.244270][ T3390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.337671][ T3390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.285751][ T3390] hsr_slave_0: entered promiscuous mode [ 544.335819][ T3390] hsr_slave_1: entered promiscuous mode [ 549.323721][ T28] audit: type=1400 audit(548.720:168): avc: denied { write } for pid=3390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.343786][ T28] audit: type=1400 audit(548.740:169): avc: denied { read } for pid=3390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.378288][ T3390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.489293][ T3390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.599781][ T3390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.727122][ T3390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 553.693914][ T3390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.316905][ T3390] veth0_vlan: entered promiscuous mode [ 566.528198][ T3390] veth1_vlan: entered promiscuous mode [ 567.049037][ T3390] veth0_macvtap: entered promiscuous mode [ 567.127925][ T3390] veth1_macvtap: entered promiscuous mode [ 567.669414][ T3390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.670391][ T3390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.685225][ T3390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.686164][ T3390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.474601][ T28] audit: type=1400 audit(567.860:170): avc: denied { mounton } for pid=3390 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 570.334636][ T3510] nbd0: detected capacity change from 0 to 131072 [ 571.691941][ C0] hrtimer: interrupt took 1459488 ns [ 571.882573][ T850] block nbd0: Receive control failed (result -104) [ 600.784701][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 30 seconds [ 630.874077][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 60 seconds [ 631.839548][ T2954] udevd[2954]: worker [3508] /devices/virtual/block/nbd0 is taking a long time [ 660.923124][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 90 seconds [ 690.998247][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 120 seconds [ 721.085727][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 150 seconds 1970/01/01 00:12:03 executed programs: 1 [ 733.283123][ T3537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.319743][ T3537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.297563][ T3537] hsr_slave_0: entered promiscuous mode [ 737.347031][ T3537] hsr_slave_1: entered promiscuous mode [ 737.395648][ T3537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.398486][ T3537] Cannot create hsr debugfs directory [ 738.498434][ T3537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.730690][ T3537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.998792][ T3537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.262590][ T3537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.437365][ T3537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 740.527537][ T3537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 740.627898][ T3537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 740.713579][ T3537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 743.768695][ T3537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.174978][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 180 seconds [ 752.536687][ T2954] udevd[2954]: worker [3508] /devices/virtual/block/nbd0 timeout; kill it [ 752.557186][ T3508] nbd0: unable to read partition table [ 752.560547][ T3508] nbd0: partition table beyond EOD, [ 752.565552][ T2954] udevd[2954]: seq 5991 '/devices/virtual/block/nbd0' killed [ 752.586139][ T3508] truncated [ 755.867363][ T3537] veth0_vlan: entered promiscuous mode [ 755.996247][ T3537] veth1_vlan: entered promiscuous mode [ 756.482525][ T3537] veth0_macvtap: entered promiscuous mode [ 756.589967][ T3537] veth1_macvtap: entered promiscuous mode [ 757.070435][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.074456][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.076966][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.078516][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.252392][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 210 seconds [ 811.319770][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 240 seconds [ 841.399503][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 270 seconds [ 871.493270][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 300 seconds [ 901.564548][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 330 seconds 1970/01/01 00:15:12 executed programs: 2 [ 922.147753][ T3608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.199089][ T3608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.029278][ T3608] hsr_slave_0: entered promiscuous mode [ 926.077269][ T3608] hsr_slave_1: entered promiscuous mode [ 926.144236][ T3608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.145300][ T3608] Cannot create hsr debugfs directory [ 927.586255][ T3608] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.848418][ T3608] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.066931][ T3608] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.316492][ T3608] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.334975][ T3608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 929.419143][ T3608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 929.512781][ T3608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 929.628284][ T3608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 931.656670][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 360 seconds [ 932.807409][ T3608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.915899][ T3608] veth0_vlan: entered promiscuous mode [ 945.010321][ T3608] veth1_vlan: entered promiscuous mode [ 945.454982][ T3608] veth0_macvtap: entered promiscuous mode [ 945.535934][ T3608] veth1_macvtap: entered promiscuous mode [ 946.026184][ T3608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.027185][ T3608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.029799][ T3608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.035438][ T3608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.738100][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 390 seconds [ 991.822584][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 420 seconds [ 1021.879406][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 450 seconds [ 1051.968005][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 480 seconds [ 1082.038881][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 510 seconds 1970/01/01 00:18:21 executed programs: 3 [ 1110.697439][ T3684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.727107][ T3684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.144484][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 540 seconds [ 1114.134104][ T3684] hsr_slave_0: entered promiscuous mode [ 1114.176677][ T3684] hsr_slave_1: entered promiscuous mode [ 1114.224142][ T3684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.225123][ T3684] Cannot create hsr debugfs directory [ 1115.578530][ T3684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.848569][ T3684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.058734][ T3684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.316001][ T3684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.344018][ T3684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1117.423671][ T3684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1117.524815][ T3684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1117.684216][ T3684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1120.879186][ T3684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.126078][ T3684] veth0_vlan: entered promiscuous mode [ 1133.334198][ T3684] veth1_vlan: entered promiscuous mode [ 1133.809063][ T3684] veth0_macvtap: entered promiscuous mode [ 1133.944591][ T3684] veth1_macvtap: entered promiscuous mode [ 1134.414766][ T3684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.417843][ T3684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.420717][ T3684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.426149][ T3684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.210445][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 570 seconds [ 1172.324848][ T51] block nbd0: Possible stuck request 00000000543c2c0f: control (read@0,4096B). Runtime 600 seconds [ 1185.720236][ T29] INFO: task udevd:3508 blocked for more than 430 seconds. [ 1185.728973][ T29] Not tainted 6.7.0-rc6-syzkaller-g5414aea7b750 #0 [ 1185.734026][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1185.735920][ T29] task:udevd state:D stack:0 pid:3508 tgid:3508 ppid:2954 flags:0x0000000d [ 1185.737372][ T29] Call trace: [ 1185.737844][ T29] __switch_to+0x1c8/0x2a0 [ 1185.739351][ T29] __schedule+0xab0/0x2a8c [ 1185.739861][ T29] schedule+0xd0/0x24c [ 1185.740353][ T29] io_schedule+0xac/0x114 [ 1185.740741][ T29] folio_wait_bit_common+0x2ac/0x6dc [ 1185.742602][ T29] __filemap_get_folio+0x35c/0x798 [ 1185.743202][ T29] truncate_inode_pages_range+0x270/0xa7c [ 1185.743661][ T29] truncate_inode_pages+0x14/0x20 [ 1185.744044][ T29] blkdev_flush_mapping+0x100/0x250 [ 1185.744510][ T29] blkdev_put_whole+0xd4/0xf0 [ 1185.744893][ T29] blkdev_put+0x284/0x6a8 [ 1185.745290][ T29] bdev_release+0x50/0x78 [ 1185.745657][ T29] blkdev_release+0x2c/0x4c [ 1185.746028][ T29] __fput+0x1a4/0x92c [ 1185.746387][ T29] ____fput+0x10/0x1c [ 1185.746739][ T29] task_work_run+0x124/0x20c [ 1185.747114][ T29] do_exit+0x754/0x1f54 [ 1185.747474][ T29] do_group_exit+0xa4/0x208 [ 1185.747846][ T29] get_signal+0x199c/0x1ae0 [ 1185.748218][ T29] do_notify_resume+0x47c/0x3208 [ 1185.748595][ T29] el0_svc+0x11c/0x140 [ 1185.748950][ T29] el0t_64_sync_handler+0x100/0x12c [ 1185.749467][ T29] el0t_64_sync+0x190/0x194 [ 1185.750435][ T29] [ 1185.750435][ T29] Showing all locks held in the system: [ 1185.752097][ T29] 1 lock held by khungtaskd/29: [ 1185.753444][ T29] #0: ffff800086737c40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x44/0x2d4 [ 1185.757697][ T29] 2 locks held by getty/3073: [ 1185.758922][ T29] #0: ffff0000129ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1185.767209][ T29] #1: ffff80008951b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x93c/0xe9c [ 1185.768904][ T29] 1 lock held by udevd/3508: [ 1185.769489][ T29] #0: ffff0000100224c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x94/0x6a8 [ 1185.770911][ T29] 1 lock held by syz-executor.0/3605: [ 1185.773392][ T29] #0: ffff0000100224c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x3ec/0x810 [ 1185.774799][ T29] 1 lock held by syz-executor.0/3674: [ 1185.775269][ T29] #0: ffff0000100224c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x3ec/0x810 [ 1185.776652][ T29] 1 lock held by syz-executor.0/3751: [ 1185.777172][ T29] #0: ffff0000100224c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x3ec/0x810 [ 1185.778690][ T29] [ 1185.779185][ T29] ============================================= [ 1185.779185][ T29] [ 1185.780739][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1185.783245][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc6-syzkaller-g5414aea7b750 #0 [ 1185.784257][ T29] Hardware name: linux,dummy-virt (DT) [ 1185.785096][ T29] Call trace: [ 1185.785532][ T29] dump_backtrace+0x9c/0x11c [ 1185.786001][ T29] show_stack+0x18/0x24 [ 1185.786484][ T29] dump_stack_lvl+0x74/0xd4 [ 1185.786946][ T29] dump_stack+0x1c/0x28 [ 1185.787366][ T29] panic+0x5a8/0x630 [ 1185.787783][ T29] watchdog+0x628/0xdc8 [ 1185.788213][ T29] kthread+0x27c/0x300 [ 1185.788644][ T29] ret_from_fork+0x10/0x20 [ 1185.789928][ T29] SMP: stopping secondary CPUs [ 1185.792257][ T29] Kernel Offset: disabled [ 1185.793259][ T29] CPU features: 0x1,10000202,34020000,0100421b [ 1185.794782][ T29] Memory Limit: none [ 1185.797365][ T29] Rebooting in 86400 seconds..