Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. 2025/04/28 03:30:40 ignoring optional flag "sandboxArg"="0" 2025/04/28 03:30:40 parsed 1 programs [ 50.736910][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 50.736915][ T27] audit: type=1400 audit(1745811040.912:121): avc: denied { unlink } for pid=2617 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.535707][ T2617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.935238][ T27] audit: type=1400 audit(1745811042.102:122): avc: denied { read } for pid=2622 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.956555][ T27] audit: type=1400 audit(1745811042.102:123): avc: denied { open } for pid=2622 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.112118][ T27] audit: type=1401 audit(1745811043.282:124): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/28 03:30:43 executed programs: 0 [ 54.256750][ T27] audit: type=1400 audit(1745811044.432:125): avc: denied { mounton } for pid=3508 comm="syz.3.16" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.278855][ T27] audit: type=1400 audit(1745811044.432:126): avc: denied { mount } for pid=3508 comm="syz.3.16" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.300564][ T27] audit: type=1400 audit(1745811044.432:127): avc: denied { read write } for pid=3508 comm="syz.3.16" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.321387][ T27] audit: type=1400 audit(1745811044.432:128): avc: denied { open } for pid=3508 comm="syz.3.16" path="/0/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.343081][ T27] audit: type=1400 audit(1745811044.432:129): avc: denied { map } for pid=3508 comm="syz.3.16" path="/0/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 2025/04/28 03:31:00 executed programs: 3 2025/04/28 03:31:16 executed programs: 4 2025/04/28 03:31:32 executed programs: 5 2025/04/28 03:31:48 executed programs: 6 2025/04/28 03:32:04 executed programs: 7 2025/04/28 03:32:20 executed programs: 8 2025/04/28 03:32:36 executed programs: 9 2025/04/28 03:32:52 executed programs: 10 2025/04/28 03:33:08 executed programs: 11 [ 212.296760][ T28] INFO: task kworker/1:2:488 blocked for more than 143 seconds. [ 212.304394][ T28] Not tainted 6.9.0-rc6-syzkaller #0 [ 212.310182][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.318823][ T28] task:kworker/1:2 state:D stack:14176 pid:488 tgid:488 ppid:2 flags:0x00004000 [ 212.328990][ T28] Workqueue: events p9_write_work [ 212.334001][ T28] Call Trace: [ 212.337264][ T28] [ 212.340165][ T28] __schedule+0x416/0xab0 [ 212.344463][ T28] schedule+0x25/0x110 [ 212.348512][ T28] schedule_preempt_disabled+0x13/0x30 [ 212.353931][ T28] __mutex_lock+0x51d/0x9c0 [ 212.358410][ T28] ? find_held_lock+0x2b/0x80 [ 212.363087][ T28] ? pipe_write+0x4c/0x730 [ 212.367571][ T28] ? pipe_write+0x4c/0x730 [ 212.371949][ T28] pipe_write+0x4c/0x730 [ 212.376147][ T28] ? avc_has_perm+0x5a/0xe0 [ 212.380623][ T28] __kernel_write_iter+0x135/0x2a0 [ 212.385696][ T28] kernel_write+0xf8/0x220 [ 212.390084][ T28] p9_write_work+0x82/0x2c0 [ 212.394552][ T28] process_one_work+0x22d/0x6c0 [ 212.399369][ T28] worker_thread+0x1c2/0x380 [ 212.403917][ T28] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 212.409695][ T28] ? __pfx_worker_thread+0x10/0x10 [ 212.414765][ T28] kthread+0xd6/0x100 [ 212.418718][ T28] ? __pfx_kthread+0x10/0x10 [ 212.423268][ T28] ret_from_fork+0x2c/0x50 [ 212.427659][ T28] ? __pfx_kthread+0x10/0x10 [ 212.432210][ T28] ret_from_fork_asm+0x1a/0x30 [ 212.436950][ T28] [ 212.439947][ T28] [ 212.439947][ T28] Showing all locks held in the system: [ 212.447634][ T28] 3 locks held by kworker/0:1/9: [ 212.452541][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.462779][ T28] #1: ffffc90000053e58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.473345][ T28] #2: ffff88810537e868 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.482179][ T28] 1 lock held by khungtaskd/28: [ 212.486997][ T28] #0: ffffffff833ded40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 212.496767][ T28] 3 locks held by kworker/1:1/35: [ 212.501744][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.511957][ T28] #1: ffffc9000012fe58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.522514][ T28] #2: ffff888108fb1468 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.531338][ T28] 3 locks held by kworker/0:2/206: [ 212.536410][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.546717][ T28] #1: ffffc90000f3be58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.557301][ T28] #2: ffff888102b24268 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.566120][ T28] 3 locks held by kworker/1:2/488: [ 212.571207][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.581440][ T28] #1: ffffc900018b3e58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.592018][ T28] #2: ffff888103f4aa68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.600853][ T28] 2 locks held by getty/1614: [ 212.605487][ T28] #0: ffff888100ede8a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60 [ 212.615186][ T28] #1: ffffc900035272f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x52a/0x680 [ 212.625176][ T28] 2 locks held by syz.3.16/3509: [ 212.630078][ T28] #0: ffff888103f4aa68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.638911][ T28] #1: ffff88817d2382f0 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.649217][ T28] 2 locks held by syz.4.17/3928: [ 212.654121][ T28] #0: ffff88810537e868 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.662949][ T28] #1: ffff88817d3d82f0 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.673261][ T28] 2 locks held by syz.5.18/4347: [ 212.678172][ T28] #0: ffff888102b24268 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.686997][ T28] #1: ffff88817d3d8848 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.697343][ T28] 3 locks held by kworker/0:3/4349: [ 212.702500][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.712733][ T28] #1: ffffc90002dfbe58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.723300][ T28] #2: ffff888103b25668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.732133][ T28] 2 locks held by syz.6.19/4768: [ 212.737040][ T28] #0: ffff888103b25668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.745855][ T28] #1: ffff88817d3d8da0 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.756156][ T28] 3 locks held by kworker/0:4/4769: [ 212.761327][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.771553][ T28] #1: ffffc9000361fe58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.782114][ T28] #2: ffff8881791cf668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.790943][ T28] 2 locks held by syz.7.20/5188: [ 212.795846][ T28] #0: ffff888108fb1468 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.804664][ T28] #1: ffff88817d238848 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.814966][ T28] 3 locks held by kworker/1:3/5189: [ 212.820141][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.830455][ T28] #1: ffffc90003dcfe58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.841018][ T28] #2: ffff8881791c0e68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.849849][ T28] 3 locks held by kworker/0:5/5190: [ 212.855007][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.865252][ T28] #1: ffffc90003e07e58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.875817][ T28] #2: ffff888108fb1e68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.884816][ T28] 2 locks held by syz.8.21/5609: [ 212.889728][ T28] #0: ffff888108fb1e68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.898554][ T28] #1: ffff88817d238da0 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.908875][ T28] 2 locks held by syz.9.22/6028: [ 212.913770][ T28] #0: ffff8881791c0e68 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.922610][ T28] #1: ffff88817d3d92f8 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.933019][ T28] 3 locks held by kworker/1:4/6030: [ 212.938206][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 212.948463][ T28] #1: ffffc90004dc7e58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 212.959090][ T28] #2: ffff888104b9c468 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.967937][ T28] 2 locks held by syz.0.23/6449: [ 212.972850][ T28] #0: ffff8881791cf668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 212.981709][ T28] #1: ffff88817d3d9850 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 212.992029][ T28] 3 locks held by kworker/0:6/6450: [ 212.997219][ T28] #0: ffff888100072548 ((wq_completion)events){....}-{0:0}, at: process_one_work+0x440/0x6c0 [ 213.007617][ T28] #1: ffffc9000560fe58 ((work_completion)(&m->wq)){....}-{0:0}, at: process_one_work+0x1ea/0x6c0 [ 213.018215][ T28] #2: ffff8881791ec668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 213.027077][ T28] 2 locks held by syz.1.24/6869: [ 213.032001][ T28] #0: ffff888104b9c468 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 213.040858][ T28] #1: ffff88817d2392f8 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 213.051185][ T28] 2 locks held by syz.2.25/7290: [ 213.056092][ T28] #0: ffff8881791ec668 (&pipe->mutex){....}-{3:3}, at: pipe_write+0x4c/0x730 [ 213.064956][ T28] #1: ffff88817d3d9da8 (mapping.invalidate_lock#3){....}-{3:3}, at: filemap_fault+0x1e7/0xe20 [ 213.075273][ T28] 6 locks held by modprobe/7336: [ 213.080200][ T28] #0: ffff888237d2fe98 (&rq->__lock){....}-{2:2}, at: __schedule+0xd3/0xab0 [ 213.088960][ T28] #1: ffff888101afe058 (&sighand->siglock){....}-{2:2}, at: do_notify_parent+0x23e/0x330 [ 213.098850][ T28] #2: ffff888101e84b38 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_sync_key+0x1c/0x50 [ 213.108922][ T28] #3: ffff8881046d0990 (&p->pi_lock){....}-{2:2}, at: try_to_wake_up+0x51/0x730 [ 213.118028][ T28] #4: ffff88810ceff818 (ptlock_ptr(ptdesc)#2){....}-{2:2}, at: __pte_offset_map_lock+0x68/0x110 [ 213.128543][ T28] #5: ffffffff833ded40 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x1f/0xd0 [ 213.137565][ T28] [ 213.139867][ T28] ============================================= [ 213.139867][ T28] [ 213.148288][ T28] NMI backtrace for cpu 0 [ 213.152600][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.9.0-rc6-syzkaller #0 [ 213.160639][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.170669][ T28] Call Trace: [ 213.173924][ T28] [ 213.176828][ T28] dump_stack_lvl+0x5a/0x90 [ 213.181309][ T28] nmi_cpu_backtrace+0xd4/0x110 [ 213.186135][ T28] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 213.192208][ T28] nmi_trigger_cpumask_backtrace+0xd5/0x140 [ 213.198072][ T28] watchdog+0x61d/0x650 [ 213.202197][ T28] ? watchdog+0x205/0x650 [ 213.206496][ T28] ? __pfx_watchdog+0x10/0x10 [ 213.211140][ T28] kthread+0xd6/0x100 [ 213.215082][ T28] ? __pfx_kthread+0x10/0x10 [ 213.219629][ T28] ret_from_fork+0x2c/0x50 [ 213.224010][ T28] ? __pfx_kthread+0x10/0x10 [ 213.228555][ T28] ret_from_fork_asm+0x1a/0x30 [ 213.233294][ T28] [ 213.236317][ T28] Sending NMI from CPU 0 to CPUs 1: [ 213.241591][ C1] NMI backtrace for cpu 1 [ 213.241594][ C1] CPU: 1 PID: 7375 Comm: modprobe Not tainted 6.9.0-rc6-syzkaller #0 [ 213.241597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.241599][ C1] RIP: 0010:rcu_is_watching+0x24/0x50 [ 213.241606][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 53 65 ff 05 8c e2 ef 7e e8 7f 1f 42 01 48 c7 c3 28 9b 02 00 89 c0 48 03 1c c5 20 8a 05 83 8b 03 e8 02 83 e0 01 65 ff 0d 67 e2 ef 7e 74 06 5b c3 cc cc cc cc 0f [ 213.241608][ C1] RSP: 0018:ffffc90006597ba0 EFLAGS: 00000286 [ 213.241611][ C1] RAX: 00000000000735e4 RBX: ffff888237d29b28 RCX: 0000000000000000 [ 213.241613][ C1] RDX: 0000000000000001 RSI: ffffffff82ec0424 RDI: ffffffff82eca136 [ 213.241614][ C1] RBP: ffff888104e80000 R08: 0000000000020020 R09: ffff88816866cd48 [ 213.241615][ C1] R10: 0000000000000000 R11: fefefefefefefeff R12: 000000023fe21025 [ 213.241616][ C1] R13: ffffea0008ff8840 R14: 00007f247e8d4000 R15: ffffc90006597dc0 [ 213.241621][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 213.241623][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.241624][ C1] CR2: 00007f247e7ad440 CR3: 000000011163e000 CR4: 00000000003506f0 [ 213.241625][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.241626][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.241628][ C1] Call Trace: [ 213.241629][ C1] [ 213.241630][ C1] ? nmi_cpu_backtrace+0x8f/0x110 [ 213.241634][ C1] ? rcu_is_watching+0x24/0x50 [ 213.241636][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 213.241640][ C1] ? nmi_handle+0xb8/0x1a0 [ 213.241643][ C1] ? rcu_is_watching+0x24/0x50 [ 213.241645][ C1] ? default_do_nmi+0x69/0x2f0 [ 213.241650][ C1] ? exc_nmi+0x152/0x190 [ 213.241652][ C1] ? end_repeat_nmi+0xf/0x53 [ 213.241657][ C1] ? rcu_is_watching+0x24/0x50 [ 213.241659][ C1] ? rcu_is_watching+0x24/0x50 [ 213.241661][ C1] ? rcu_is_watching+0x24/0x50 [ 213.241663][ C1] [ 213.241664][ C1] [ 213.241665][ C1] rcu_read_lock_held+0x1e/0x40 [ 213.241667][ C1] page_ext_get+0x82/0xd0 [ 213.241672][ C1] page_table_check_clear.part.0+0x1f/0x1e0 [ 213.241675][ C1] unmap_page_range+0xc8a/0x13f0 [ 213.241681][ C1] ? mas_next_node+0x2e/0x2a0 [ 213.241684][ C1] unmap_vmas+0xe7/0x1c0 [ 213.241687][ C1] exit_mmap+0x100/0x470 [ 213.241690][ C1] __mmput+0x3a/0x120 [ 213.241693][ C1] do_exit+0x2a7/0xb70 [ 213.241696][ C1] do_group_exit+0x31/0x90 [ 213.241698][ C1] __x64_sys_exit_group+0x13/0x20 [ 213.241701][ C1] do_syscall_64+0x6f/0x180 [ 213.241703][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.241706][ C1] RIP: 0033:0x7f247e86ba90 [ 213.241718][ C1] Code: Unable to access opcode bytes at 0x7f247e86ba66. [ 213.241719][ C1] RSP: 002b:00007ffeb941eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 213.241721][ C1] RAX: ffffffffffffffda RBX: 00007f247e95c860 RCX: 00007f247e86ba90 [ 213.241723][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001 [ 213.241724][ C1] RBP: 00007f247e95c860 R08: 0000000000000000 R09: d7596182f7d9c979 [ 213.241725][ C1] R10: 00007ffeb941edb0 R11: 0000000000000246 R12: 0000000000000000 [ 213.241727][ C1] R13: 0000000000000001 R14: 00007f247e960658 R15: 0000000000000001 [ 213.241729][ C1] [ 213.242588][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 213.568405][ T28] Kernel Offset: disabled [ 213.572691][ T28] Rebooting in 86400 seconds..