Warning: Permanently added '[localhost]:55606' (ED25519) to the list of known hosts. 1970/01/01 00:07:15 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:07:15 ignoring optional flag "type"="qemu" 1970/01/01 00:07:21 parsed 1 programs [ 442.802007][ T30] audit: type=1400 audit(442.200:78): avc: denied { mount } for pid=3482 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 442.923893][ T30] audit: type=1400 audit(442.320:79): avc: denied { unlink } for pid=3482 comm="syz-executor" name="swap-file" dev="vda" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 443.745695][ T3482] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:07:23 executed programs: 0 [ 444.215518][ T30] audit: type=1400 audit(443.610:80): avc: denied { mount } for pid=3488 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 451.519675][ T3488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.563542][ T3488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.379052][ T3488] hsr_slave_0: entered promiscuous mode [ 455.387837][ T3488] hsr_slave_1: entered promiscuous mode [ 459.362001][ T3488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.458942][ T3488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.548555][ T3488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.598296][ T3488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.887433][ T3488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.273874][ T3488] veth0_vlan: entered promiscuous mode [ 480.450685][ T3488] veth1_vlan: entered promiscuous mode [ 481.012062][ T3488] veth0_macvtap: entered promiscuous mode [ 481.109090][ T3488] veth1_macvtap: entered promiscuous mode [ 481.676048][ T3488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.677108][ T3488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.677448][ T3488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.677777][ T3488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.107726][ T3607] nbd0: detected capacity change from 0 to 131072 [ 485.718641][ T891] block nbd0: Receive control failed (result -104) [ 515.007539][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 30 seconds [ 545.078637][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 60 seconds [ 575.167965][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 90 seconds [ 605.240507][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 120 seconds [ 635.322538][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 150 seconds 1970/01/01 00:10:37 executed programs: 1 [ 647.706409][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.743633][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.147822][ T3642] hsr_slave_0: entered promiscuous mode [ 651.161949][ T3642] hsr_slave_1: entered promiscuous mode [ 651.178676][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.180712][ T3642] Cannot create hsr debugfs directory [ 652.975540][ T3642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.312302][ T3642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.569182][ T3642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.793041][ T3642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.668665][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.733735][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.787793][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.830509][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 657.527773][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.401588][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 180 seconds [ 668.373226][ T3642] veth0_vlan: entered promiscuous mode [ 668.466356][ T3642] veth1_vlan: entered promiscuous mode [ 668.777446][ T3642] veth0_macvtap: entered promiscuous mode [ 668.820707][ T3642] veth1_macvtap: entered promiscuous mode [ 669.123316][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.124166][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.131283][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.133310][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.489285][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 210 seconds [ 725.566127][ T52] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 240 seconds [ 755.640232][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 270 seconds [ 785.721538][ T52] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 300 seconds [ 815.800569][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 330 seconds 1970/01/01 00:13:44 executed programs: 2 [ 834.710363][ T3718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.747321][ T3718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.390809][ T3718] hsr_slave_0: entered promiscuous mode [ 838.420342][ T3718] hsr_slave_1: entered promiscuous mode [ 838.453263][ T3718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.457098][ T3718] Cannot create hsr debugfs directory [ 840.283961][ T3718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.547935][ T3718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.799746][ T3718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.147415][ T3718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.977186][ T3718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.022189][ T3718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.069272][ T3718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.111457][ T3718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.672325][ T3718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.918961][ T52] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 360 seconds [ 858.328727][ T3718] veth0_vlan: entered promiscuous mode [ 858.407230][ T3718] veth1_vlan: entered promiscuous mode [ 858.755283][ T3718] veth0_macvtap: entered promiscuous mode [ 858.802732][ T3718] veth1_macvtap: entered promiscuous mode [ 859.091942][ T3718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.093440][ T3718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.097681][ T3718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.099382][ T3718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.963946][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 390 seconds [ 906.057316][ T11] block nbd0: Possible stuck request 000000006a615cab: control (read@0,4096B). Runtime 420 seconds [ 929.078362][ T33] INFO: task udevd:3116 blocked for more than 430 seconds. [ 929.080442][ T33] Not tainted 6.16.0-rc6-syzkaller-g155a3c003e55 #0 [ 929.081077][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 929.081725][ T33] task:udevd state:D stack:0 pid:3116 tgid:3116 ppid:1 task_flags:0x400140 flags:0x00000008 [ 929.084446][ T33] Call trace: [ 929.098171][ T33] __switch_to+0x208/0x4f4 (T) [ 929.102001][ T33] __schedule+0xd34/0x3184 [ 929.103695][ T33] schedule+0xd0/0x344 [ 929.106227][ T33] schedule_preempt_disabled+0x18/0x2c [ 929.107886][ T33] __mutex_lock+0x5d8/0x9d8 [ 929.109439][ T33] mutex_lock_nested+0x24/0x30 [ 929.110964][ T33] bdev_open+0x2c4/0xa84 [ 929.112440][ T33] blkdev_open+0x1d8/0x31c [ 929.113995][ T33] do_dentry_open+0x6f8/0x153c [ 929.116375][ T33] vfs_open+0x5c/0x2fc [ 929.117924][ T33] path_openat+0x148c/0x24b0 [ 929.119386][ T33] do_filp_open+0x184/0x360 [ 929.120914][ T33] do_sys_openat2+0xe0/0x160 [ 929.123869][ T33] __arm64_sys_openat+0x12c/0x1bc [ 929.126388][ T33] invoke_syscall+0x6c/0x258 [ 929.127973][ T33] el0_svc_common.constprop.0+0xac/0x230 [ 929.129560][ T33] do_el0_svc+0x40/0x58 [ 929.130976][ T33] el0_svc+0x50/0x198 [ 929.132382][ T33] el0t_64_sync_handler+0x10c/0x138 [ 929.134122][ T33] el0t_64_sync+0x198/0x19c [ 929.137168][ T33] INFO: task syz-executor.0:3604 blocked for more than 430 seconds. [ 929.138984][ T33] Not tainted 6.16.0-rc6-syzkaller-g155a3c003e55 #0 [ 929.140765][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 929.142594][ T33] task:syz-executor.0 state:D stack:0 pid:3604 tgid:3602 ppid:3488 task_flags:0x400140 flags:0x00000019 [ 929.148023][ T33] Call trace: [ 929.149570][ T33] __switch_to+0x208/0x4f4 (T) [ 929.151056][ T33] __schedule+0xd34/0x3184 [ 929.152662][ T33] schedule+0xd0/0x344 [ 929.160813][ T33] schedule_preempt_disabled+0x18/0x2c [ 929.162995][ T33] __mutex_lock+0x5d8/0x9d8 [ 929.166237][ T33] mutex_lock_nested+0x24/0x30 [ 929.169214][ T33] bdev_release+0x104/0x510 [ 929.171294][ T33] blkdev_release+0x14/0x24 [ 929.172993][ T33] __fput+0x2c8/0x954 [ 929.175406][ T33] ____fput+0x14/0x20 [ 929.176935][ T33] task_work_run+0x128/0x210 [ 929.178480][ T33] get_signal+0x174/0x1bac [ 929.179934][ T33] do_signal+0x1f4/0x6a8 [ 929.181527][ T33] do_notify_resume+0x198/0x264 [ 929.183128][ T33] el0_svc+0x118/0x198 [ 929.184679][ T33] el0t_64_sync_handler+0x10c/0x138 [ 929.187134][ T33] el0t_64_sync+0x198/0x19c [ 929.189622][ T33] [ 929.189622][ T33] Showing all locks held in the system: [ 929.191813][ T33] 1 lock held by khungtaskd/33: [ 929.193683][ T33] #0: ffff8000872c05e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 929.201560][ T33] 4 locks held by klogd/3105: [ 929.203247][ T33] 1 lock held by udevd/3116: [ 929.205599][ T33] #0: ffff000014935358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 929.211427][ T33] 2 locks held by getty/3241: [ 929.213189][ T33] #0: ffff0000129b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 929.220814][ T33] #1: ffff80008d58b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e8/0xdc0 [ 929.228317][ T33] 1 lock held by syz-executor.0/3604: [ 929.229994][ T33] #0: ffff000014935358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x104/0x510 [ 929.236903][ T33] 1 lock held by udevd/3608: [ 929.238701][ T33] #0: ffff000014935358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 929.247203][ T33] 1 lock held by syz-executor.0/3715: [ 929.250707][ T33] #0: ffff000014935358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 929.252619][ T33] 1 lock held by syz-executor.0/3792: [ 929.253039][ T33] #0: ffff000014935358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 929.277692][ T33] [ 929.278000][ T33] ============================================= [ 929.278000][ T33] [ 929.279523][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 929.281535][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-g155a3c003e55 #0 PREEMPT [ 929.282207][ T33] Hardware name: linux,dummy-virt (DT) [ 929.282659][ T33] Call trace: [ 929.283082][ T33] show_stack+0x18/0x24 (C) [ 929.283495][ T33] dump_stack_lvl+0x38/0xf4 [ 929.283867][ T33] dump_stack+0x1c/0x28 [ 929.284315][ T33] panic+0x5b0/0x664 [ 929.284708][ T33] watchdog+0x4d8/0xdf8 [ 929.285185][ T33] kthread+0x348/0x5fc [ 929.285536][ T33] ret_from_fork+0x10/0x20 [ 929.286492][ T33] SMP: stopping secondary CPUs [ 929.289629][ T33] Kernel Offset: disabled [ 929.290155][ T33] CPU features: 0x1040,000800d0,02000800,0400421b [ 929.290762][ T33] Memory Limit: none [ 929.292605][ T33] Rebooting in 86400 seconds..