Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. 2025/04/12 08:21:00 ignoring optional flag "sandboxArg"="0" 2025/04/12 08:21:00 ignoring optional flag "type"="gce" 2025/04/12 08:21:00 parsed 1 programs [ 54.465677][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 54.465681][ T30] audit: type=1400 audit(1744446060.731:116): avc: denied { unlink } for pid=1866 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/04/12 08:21:00 executed programs: 0 [ 54.521301][ T1866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.537132][ T1449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.544164][ T1449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.551165][ T1449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.558389][ T1449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.565771][ T1449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.608781][ T1871] chnl_net:caif_netlink_parms(): no params data found [ 54.796581][ T30] audit: type=1400 audit(1744446061.061:117): avc: denied { create } for pid=1871 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.817309][ T30] audit: type=1400 audit(1744446061.061:118): avc: denied { write } for pid=1871 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.837887][ T30] audit: type=1400 audit(1744446061.071:119): avc: denied { read } for pid=1871 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.963380][ T1871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.171266][ T1871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.615126][ T2273] nbd0: detected capacity change from 0 to 2 [ 56.379324][ T1287] block nbd0: Receive control failed (result -104) [ 56.575210][ T1287] Bluetooth: hci0: command tx timeout [ 58.665150][ T1287] Bluetooth: hci0: command tx timeout [ 60.735156][ T1287] Bluetooth: hci0: command tx timeout [ 62.815148][ T1287] Bluetooth: hci0: command tx timeout [ 86.175330][ T44] block nbd0: Possible stuck request ffff88810ba85080: control (read@0,1024B). Runtime 30 seconds 2025/04/12 08:21:56 executed programs: 1 [ 110.545771][ T30] audit: type=1400 audit(1744446116.811:120): avc: denied { write } for pid=1861 comm="syz-execprog" path="pipe:[3187]" dev="pipefs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 111.549803][ T30] audit: type=1400 audit(1744446117.811:121): avc: denied { create } for pid=2276 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.551474][ T1449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.569946][ T30] audit: type=1400 audit(1744446117.811:122): avc: denied { ioctl } for pid=2276 comm="syz-executor.0" path="socket:[3382]" dev="sockfs" ino=3382 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.576927][ T1449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.609039][ T1449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.616204][ T1449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.623226][ T1449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.664934][ T2276] chnl_net:caif_netlink_parms(): no params data found [ 111.975996][ T2276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.181558][ T2276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.695122][ T1449] Bluetooth: hci1: command tx timeout [ 115.775129][ T1449] Bluetooth: hci1: command tx timeout [ 116.255272][ T44] block nbd0: Possible stuck request ffff88810ba85080: control (read@0,1024B). Runtime 60 seconds [ 117.655162][ T1332] udevd[1332]: worker [1875] /devices/virtual/block/nbd0 is taking a long time [ 117.855139][ T1449] Bluetooth: hci1: command tx timeout [ 119.935116][ T1449] Bluetooth: hci1: command tx timeout [ 146.335246][ T590] block nbd0: Possible stuck request ffff88810ba85080: control (read@0,1024B). Runtime 90 seconds 2025/04/12 08:22:53 executed programs: 2 [ 168.566304][ T1287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.573315][ T1287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.580279][ T1287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.587473][ T1287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.594507][ T1287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.636595][ T2681] chnl_net:caif_netlink_parms(): no params data found [ 168.957909][ T2681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.171765][ T2681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.655131][ T1287] Bluetooth: hci2: command tx timeout [ 172.735108][ T1287] Bluetooth: hci2: command tx timeout [ 174.815119][ T1287] Bluetooth: hci2: command tx timeout [ 176.415231][ T590] block nbd0: Possible stuck request ffff88810ba85080: control (read@0,1024B). Runtime 120 seconds [ 176.895127][ T1287] Bluetooth: hci2: command tx timeout [ 179.775186][ T1449] Bluetooth: hci0: command 0x0406 tx timeout [ 198.815183][ T31] INFO: task udevd:1875 blocked for more than 143 seconds. [ 198.822400][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 198.828279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 198.836987][ T31] task:udevd state:D stack:13848 pid:1875 tgid:1875 ppid:1332 task_flags:0x400140 flags:0x00000002 [ 198.848880][ T31] Call Trace: [ 198.852129][ T31] [ 198.855024][ T31] __schedule+0x593/0xd20 [ 198.859358][ T31] schedule+0x25/0x110 [ 198.863407][ T31] schedule_preempt_disabled+0x13/0x30 [ 198.868840][ T31] __mutex_lock+0x617/0xb10 [ 198.873304][ T31] ? bdev_open+0x286/0x3f0 [ 198.877694][ T31] ? bdev_open+0x286/0x3f0 [ 198.882087][ T31] bdev_open+0x286/0x3f0 [ 198.886299][ T31] ? iput+0x49/0x230 [ 198.890157][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 198.895047][ T31] blkdev_open+0x9b/0xf0 [ 198.899267][ T31] do_dentry_open+0x158/0x450 [ 198.903930][ T31] vfs_open+0x2f/0xf0 [ 198.907886][ T31] path_openat+0x68c/0xc50 [ 198.912284][ T31] do_filp_open+0xd2/0x180 [ 198.916676][ T31] do_sys_openat2+0x85/0xe0 [ 198.921149][ T31] __x64_sys_openat+0x68/0xa0 [ 198.925804][ T31] do_syscall_64+0x6d/0x1a0 [ 198.930270][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.936143][ T31] RIP: 0033:0x7fab09b169a4 [ 198.940551][ T31] RSP: 002b:00007fff1c114390 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.948939][ T31] RAX: ffffffffffffffda RBX: 000055cbf163e100 RCX: 00007fab09b169a4 [ 198.957098][ T31] RDX: 00000000000a0800 RSI: 000055cbf160d900 RDI: 00000000ffffff9c [ 198.965031][ T31] RBP: 000055cbf160d900 R08: 0000000000000001 R09: 00007fab0a056000 [ 198.972995][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 198.980940][ T31] R13: 000055cbf160fc30 R14: 0000000000000001 R15: 000055cbf16012c0 [ 198.988891][ T31] [ 198.991880][ T31] [ 198.991880][ T31] Showing all locks held in the system: [ 198.999567][ T31] 1 lock held by khungtaskd/31: [ 199.004379][ T31] #0: ffffffff8398bd40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 199.014178][ T31] 2 locks held by getty/1393: [ 199.018847][ T31] #0: ffff8881092f10a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60 [ 199.028547][ T31] #1: ffffc900027ca2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x17a/0x660 [ 199.038509][ T31] 1 lock held by udevd/1875: [ 199.043060][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.052313][ T31] 1 lock held by syz-executor.0/2273: [ 199.057662][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_release+0x61/0x1e0 [ 199.067096][ T31] 1 lock held by syz-executor.0/2274: [ 199.072427][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.081678][ T31] 1 lock held by syz-executor.0/2677: [ 199.087016][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.096274][ T31] 1 lock held by syz-executor.0/2678: [ 199.101604][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.110856][ T31] 1 lock held by syz-executor.0/3081: [ 199.116196][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.125461][ T31] 1 lock held by syz-executor.0/3082: [ 199.130792][ T31] #0: ffff888106a99358 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x286/0x3f0 [ 199.140051][ T31] [ 199.142355][ T31] ============================================= [ 199.142355][ T31] [ 199.150747][ T31] NMI backtrace for cpu 0 [ 199.150756][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(undef) [ 199.150759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.150761][ T31] Call Trace: [ 199.150763][ T31] [ 199.150765][ T31] dump_stack_lvl+0x5a/0x90 [ 199.150771][ T31] nmi_cpu_backtrace+0xd4/0x110 [ 199.150777][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 199.150783][ T31] nmi_trigger_cpumask_backtrace+0xd5/0x140 [ 199.150787][ T31] watchdog+0x652/0x690 [ 199.150791][ T31] ? watchdog+0x1f5/0x690 [ 199.150793][ T31] ? __pfx_watchdog+0x10/0x10 [ 199.150795][ T31] kthread+0x104/0x200 [ 199.150800][ T31] ? __pfx_kthread+0x10/0x10 [ 199.150803][ T31] ret_from_fork+0x2c/0x50 [ 199.150808][ T31] ? __pfx_kthread+0x10/0x10 [ 199.150810][ T31] ret_from_fork_asm+0x1a/0x30 [ 199.150818][ T31] [ 199.150819][ T31] Sending NMI from CPU 0 to CPUs 1: [ 199.245785][ C1] NMI backtrace for cpu 1 [ 199.245788][ C1] CPU: 1 UID: 0 PID: 42 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(undef) [ 199.245792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.245794][ C1] Workqueue: events_unbound toggle_allocation_gate [ 199.245802][ C1] RIP: 0010:switch_mm_irqs_off+0x254/0x4a0 [ 199.245806][ C1] Code: 4c 89 2a 4c 8b ab b8 00 00 00 e8 f7 fb ff ff 4c 89 ef e8 5f f5 ff ff eb 0e cc cc cc 41 83 c4 01 45 0f b7 e4 4c 09 e0 0f 22 d8 <0f> 1f 44 00 00 e9 23 ff ff ff e8 ed d4 f8 ff 31 f6 bf 00 01 00 00 [ 199.245808][ C1] RSP: 0018:ffffc90000167c90 EFLAGS: 00000046 [ 199.245810][ C1] RAX: 0000000100064000 RBX: ffff888100068000 RCX: 000000000000002e [ 199.245812][ C1] RDX: 0000000000000000 RSI: ffffc90000167c9e RDI: ffff888100064000 [ 199.245813][ C1] RBP: ffffffff839c81c0 R08: 0000000000009085 R09: 0000000000000001 [ 199.245815][ C1] R10: 0000000000000000 R11: ffffffff84835e3a R12: 0000000000000000 [ 199.245816][ C1] R13: ffff888100064000 R14: 0000000000000000 R15: 0000000000000000 [ 199.245820][ C1] FS: 0000000000000000(0000) GS:ffff8882b3516000(0000) knlGS:0000000000000000 [ 199.245822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.245823][ C1] CR2: 00007f37335780d8 CR3: 0000000100064000 CR4: 00000000003506f0 [ 199.245825][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.245826][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.245827][ C1] Call Trace: [ 199.245830][ C1] [ 199.245831][ C1] ? __kmalloc_node_noprof+0xe2/0x510 [ 199.245835][ C1] __text_poke+0x19a/0x490 [ 199.245838][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 199.245841][ C1] ? __kmalloc_node_noprof+0xe2/0x510 [ 199.245843][ C1] text_poke_bp_batch+0x2bd/0x3a0 [ 199.245845][ C1] ? __kmalloc_node_track_caller_noprof+0xe0/0x530 [ 199.245848][ C1] text_poke_finish+0x1a/0x30 [ 199.245850][ C1] arch_jump_label_transform_apply+0x17/0x30 [ 199.245853][ C1] static_key_enable+0x54/0x60 [ 199.245857][ C1] toggle_allocation_gate+0x58/0x130 [ 199.245860][ C1] ? rcu_is_watching+0x11/0x50 [ 199.245863][ C1] process_one_work+0x22b/0x660 [ 199.245867][ C1] worker_thread+0x1c7/0x370 [ 199.245870][ C1] ? __pfx_worker_thread+0x10/0x10 [ 199.245871][ C1] kthread+0x104/0x200 [ 199.245875][ C1] ? __pfx_kthread+0x10/0x10 [ 199.245878][ C1] ret_from_fork+0x2c/0x50 [ 199.245881][ C1] ? __pfx_kthread+0x10/0x10 [ 199.245884][ C1] ret_from_fork_asm+0x1a/0x30 [ 199.245889][ C1] [ 199.246788][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 199.498207][ T31] Kernel Offset: disabled [ 199.502496][ T31] Rebooting in 86400 seconds..