Warning: Permanently added '[localhost]:29666' (ED25519) to the list of known hosts. 1970/01/01 00:06:48 ignoring optional flag "type"="qemu" 1970/01/01 00:06:53 parsed 1 programs [ 414.923860][ T30] audit: type=1400 audit(414.380:78): avc: denied { mount } for pid=3496 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 415.111065][ T30] audit: type=1400 audit(414.560:79): avc: denied { unlink } for pid=3496 comm="syz-executor" name="swap-file" dev="vda" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 416.431605][ T3496] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:06:55 executed programs: 0 [ 416.760740][ T30] audit: type=1400 audit(416.210:80): avc: denied { mount } for pid=3501 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 423.461184][ T3501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.497736][ T3501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.656532][ T3501] hsr_slave_0: entered promiscuous mode [ 426.665822][ T3501] hsr_slave_1: entered promiscuous mode [ 430.944814][ T3501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.014546][ T3501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.105876][ T3501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.214249][ T3501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.713261][ T3501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.171418][ T3501] veth0_vlan: entered promiscuous mode [ 447.271368][ T3501] veth1_vlan: entered promiscuous mode [ 447.661125][ T3501] veth0_macvtap: entered promiscuous mode [ 447.727898][ T3501] veth1_macvtap: entered promiscuous mode [ 448.155760][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.161983][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.201104][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.202331][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.503667][ T3613] nbd0: detected capacity change from 0 to 262 [ 451.516116][ T49] block nbd0: Receive control failed (result -104) [ 480.402436][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 30 seconds [ 510.465992][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 60 seconds [ 511.005801][ T3133] udevd[3133]: worker [3617] /devices/virtual/block/nbd0 is taking a long time 1970/01/01 00:08:48 executed programs: 1 [ 538.681675][ T3653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.717362][ T3653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.544006][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 90 seconds [ 542.027436][ T3653] hsr_slave_0: entered promiscuous mode [ 542.035827][ T3653] hsr_slave_1: entered promiscuous mode [ 542.046635][ T3653] debugfs: 'hsr0' already exists in 'hsr' [ 542.051380][ T3653] Cannot create hsr debugfs directory [ 543.495712][ T3653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.782137][ T3653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.991413][ T3653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.276944][ T3653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.032958][ T3653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 545.075191][ T3653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 545.116523][ T3653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 545.167367][ T3653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.624882][ T3653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.527130][ T3653] veth0_vlan: entered promiscuous mode [ 557.613206][ T3653] veth1_vlan: entered promiscuous mode [ 557.894115][ T3653] veth0_macvtap: entered promiscuous mode [ 557.986226][ T3653] veth1_macvtap: entered promiscuous mode [ 558.385921][ T979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.390395][ T979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.390812][ T979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.391119][ T979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.635075][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 120 seconds [ 600.720867][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 150 seconds [ 630.799137][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 180 seconds [ 632.403814][ T3133] udevd[3133]: worker [3617] /devices/virtual/block/nbd0 timeout; kill it [ 632.411940][ T3133] udevd[3133]: seq 6521 '/devices/virtual/block/nbd0' killed 1970/01/01 00:10:38 executed programs: 2 [ 647.167602][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.223894][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.147565][ T3728] hsr_slave_0: entered promiscuous mode [ 651.155619][ T3728] hsr_slave_1: entered promiscuous mode [ 651.162284][ T3728] debugfs: 'hsr0' already exists in 'hsr' [ 651.162580][ T3728] Cannot create hsr debugfs directory [ 652.714228][ T3728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.966106][ T3728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.185694][ T3728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.427714][ T3728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.226325][ T3728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.274283][ T3728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.304222][ T3728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.334618][ T3728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 657.102922][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.873107][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 210 seconds [ 667.392306][ T3728] veth0_vlan: entered promiscuous mode [ 667.456257][ T3728] veth1_vlan: entered promiscuous mode [ 667.657412][ T3728] veth0_macvtap: entered promiscuous mode [ 667.687899][ T3728] veth1_macvtap: entered promiscuous mode [ 668.056498][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.062161][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.071824][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.074279][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.961697][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 240 seconds [ 721.030690][ T24] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 270 seconds 1970/01/01 00:12:28 executed programs: 3 [ 751.105665][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 300 seconds [ 757.396345][ T3805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.444194][ T3805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.995159][ T3805] hsr_slave_0: entered promiscuous mode [ 761.006070][ T3805] hsr_slave_1: entered promiscuous mode [ 761.017016][ T3805] debugfs: 'hsr0' already exists in 'hsr' [ 761.021252][ T3805] Cannot create hsr debugfs directory [ 762.286956][ T3805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.563380][ T3805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.821777][ T3805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.083611][ T3805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.731974][ T3805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 763.773657][ T3805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 763.804164][ T3805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 763.837728][ T3805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 766.386091][ T3805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.100371][ T3805] veth0_vlan: entered promiscuous mode [ 777.204478][ T3805] veth1_vlan: entered promiscuous mode [ 777.564882][ T3805] veth0_macvtap: entered promiscuous mode [ 777.685499][ T3805] veth1_macvtap: entered promiscuous mode [ 778.145560][ T3876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.146803][ T3876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.147143][ T3876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.147475][ T3876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.183137][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 330 seconds [ 811.262773][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 360 seconds [ 841.345197][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 390 seconds 1970/01/01 00:14:18 executed programs: 4 [ 867.240236][ T3887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.284361][ T3887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.779558][ T3887] hsr_slave_0: entered promiscuous mode [ 870.791915][ T3887] hsr_slave_1: entered promiscuous mode [ 870.797933][ T3887] debugfs: 'hsr0' already exists in 'hsr' [ 870.799267][ T3887] Cannot create hsr debugfs directory [ 871.424045][ T53] block nbd0: Possible stuck request 000000004d7247a8: control (read@0,4096B). Runtime 420 seconds [ 872.075667][ T3887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.280903][ T3887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.476154][ T3887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.702174][ T3887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.483643][ T3887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 873.516805][ T3887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 873.549606][ T3887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 873.575053][ T3887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 876.057130][ T3887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.707639][ T3887] veth0_vlan: entered promiscuous mode [ 886.803188][ T3887] veth1_vlan: entered promiscuous mode [ 887.156548][ T3887] veth0_macvtap: entered promiscuous mode [ 887.219212][ T3887] veth1_macvtap: entered promiscuous mode [ 887.563753][ T979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.564687][ T979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.565488][ T979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.565887][ T979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.902487][ T32] INFO: task syz-executor.0:3613 blocked for more than 430 seconds. [ 891.905826][ T32] Not tainted syzkaller #0 [ 891.916594][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.919636][ T32] task:syz-executor.0 state:D stack:0 pid:3613 tgid:3612 ppid:3501 task_flags:0x400140 flags:0x00000019 [ 891.926942][ T32] Call trace: [ 891.929355][ T32] __switch_to+0x208/0x4ec (T) [ 891.933238][ T32] __schedule+0xd58/0x3180 [ 891.937252][ T32] schedule+0xd0/0x344 [ 891.938871][ T32] schedule_preempt_disabled+0x18/0x2c [ 891.940038][ T32] __mutex_lock+0x72c/0xffc [ 891.941229][ T32] mutex_lock_nested+0x24/0x30 [ 891.943120][ T32] bdev_release+0x104/0x510 [ 891.947414][ T32] blkdev_release+0x14/0x24 [ 891.953282][ T32] __fput+0x2c8/0x954 [ 891.957030][ T32] ____fput+0x14/0x20 [ 891.963033][ T32] task_work_run+0x128/0x210 [ 891.967272][ T32] do_notify_resume+0x1d8/0x260 [ 891.967965][ T32] el0_svc+0x120/0x1a0 [ 891.973837][ T32] el0t_64_sync_handler+0xa0/0xe4 [ 891.979871][ T32] el0t_64_sync+0x198/0x19c [ 891.990241][ T32] [ 891.990241][ T32] Showing all locks held in the system: [ 891.997199][ T32] 1 lock held by khungtaskd/32: [ 891.997872][ T32] #0: ffff8000873101a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 892.003741][ T32] 2 locks held by getty/3257: [ 892.004072][ T32] #0: ffff00001303b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 892.005243][ T32] #1: ffff80008d5eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e8/0xdc0 [ 892.006350][ T32] 1 lock held by syz-executor.0/3613: [ 892.006601][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x104/0x510 [ 892.007709][ T32] 1 lock held by udevd/3617: [ 892.007912][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 892.020309][ T32] 1 lock held by syz-executor.0/3725: [ 892.026071][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 892.034054][ T32] 1 lock held by syz-executor.0/3801: [ 892.036860][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 892.044218][ T32] 2 locks held by kworker/u8:2/3876: [ 892.046979][ T32] 1 lock held by syz-executor.0/3878: [ 892.049261][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 892.054137][ T32] 1 lock held by syz-executor.0/3959: [ 892.056045][ T32] #0: ffff000014c7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 892.061694][ T32] [ 892.062614][ T32] ============================================= [ 892.062614][ T32] [ 892.064550][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 892.066572][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 892.067082][ T32] Hardware name: linux,dummy-virt (DT) [ 892.067482][ T32] Call trace: [ 892.067863][ T32] show_stack+0x18/0x24 (C) [ 892.068123][ T32] dump_stack_lvl+0x38/0xf4 [ 892.068451][ T32] dump_stack+0x1c/0x28 [ 892.069101][ T32] vpanic+0x550/0x5e0 [ 892.069456][ T32] nmi_panic+0x0/0x18c [ 892.069687][ T32] watchdog+0x4d8/0xd98 [ 892.069906][ T32] kthread+0x348/0x5fc [ 892.070120][ T32] ret_from_fork+0x10/0x20 [ 892.071047][ T32] SMP: stopping secondary CPUs [ 892.072787][ T32] Kernel Offset: disabled [ 892.073186][ T32] CPU features: 0x041000,02003400,20002000,0400421b [ 892.073669][ T32] Memory Limit: none [ 892.075596][ T32] Rebooting in 86400 seconds..