Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2025/02/26 14:43:28 ignoring optional flag "sandboxArg"="0" 2025/02/26 14:43:28 ignoring optional flag "type"="gce" 2025/02/26 14:43:28 parsed 1 programs [ 46.767363][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 46.767367][ T29] audit: type=1400 audit(1740581008.120:105): avc: denied { create } for pid=2103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.793925][ T29] audit: type=1400 audit(1740581008.120:106): avc: denied { write } for pid=2103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.814371][ T29] audit: type=1400 audit(1740581008.120:107): avc: denied { read } for pid=2103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.842430][ T29] audit: type=1400 audit(1740581008.200:108): avc: denied { unlink } for pid=2103 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/02/26 14:43:28 executed programs: 0 [ 47.619685][ T2103] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.629752][ T29] audit: type=1400 audit(1740581008.990:109): avc: denied { write } for pid=2098 comm="syz-execprog" path="pipe:[1830]" dev="pipefs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 48.603608][ T2525] loop0: detected capacity change from 0 to 64 [ 48.610261][ T29] audit: type=1400 audit(1740581009.960:110): avc: denied { mounton } for pid=2524 comm="syz-executor.0" path="/root/syzkaller-testdir2207827634/syzkaller.EuNqQ0/0/bus" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.636935][ T29] audit: type=1400 audit(1740581009.960:111): avc: denied { mount } for pid=2524 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 2025/02/26 14:43:59 executed programs: 1 [ 78.852424][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.852424][ T52] loop0: rw=1048577, sector=95, nr_sectors = 1 limit=64 [ 78.866191][ T52] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 78.874617][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.874617][ T52] loop0: rw=1048577, sector=96, nr_sectors = 1 limit=64 [ 78.888216][ T52] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 78.896873][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.896873][ T52] loop0: rw=1048577, sector=98, nr_sectors = 1 limit=64 [ 78.910477][ T52] Buffer I/O error on dev loop0, logical block 98, lost async page write [ 78.918884][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.918884][ T52] loop0: rw=1048577, sector=100, nr_sectors = 1 limit=64 [ 78.932570][ T52] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 78.941034][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.941034][ T52] loop0: rw=1048577, sector=101, nr_sectors = 1 limit=64 [ 78.954734][ T52] Buffer I/O error on dev loop0, logical block 101, lost async page write [ 78.963211][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.963211][ T52] loop0: rw=1048577, sector=102, nr_sectors = 1 limit=64 [ 78.976906][ T52] Buffer I/O error on dev loop0, logical block 102, lost async page write [ 78.985383][ T52] kworker/u8:3: attempt to access beyond end of device [ 78.985383][ T52] loop0: rw=1048577, sector=103, nr_sectors = 1 limit=64 [ 78.999073][ T52] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 79.007567][ T52] kworker/u8:3: attempt to access beyond end of device [ 79.007567][ T52] loop0: rw=1048577, sector=104, nr_sectors = 1 limit=64 [ 79.021246][ T52] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 79.030457][ T52] kworker/u8:3: attempt to access beyond end of device [ 79.030457][ T52] loop0: rw=1048577, sector=105, nr_sectors = 4064 limit=64 2025/02/26 14:44:04 executed programs: 76 2025/02/26 14:44:10 executed programs: 198 2025/02/26 14:44:15 executed programs: 319 2025/02/26 14:44:20 executed programs: 441 2025/02/26 14:44:25 executed programs: 563 2025/02/26 14:44:30 executed programs: 685 2025/02/26 14:44:35 executed programs: 807 2025/02/26 14:44:40 executed programs: 929 2025/02/26 14:44:45 executed programs: 1052 2025/02/26 14:44:50 executed programs: 1175 2025/02/26 14:44:55 executed programs: 1299 2025/02/26 14:45:00 executed programs: 1422 2025/02/26 14:45:05 executed programs: 1545 2025/02/26 14:45:10 executed programs: 1668 2025/02/26 14:45:15 executed programs: 1791 2025/02/26 14:45:20 executed programs: 1914 2025/02/26 14:45:25 executed programs: 2038 2025/02/26 14:45:30 executed programs: 2161 2025/02/26 14:45:35 executed programs: 2284 2025/02/26 14:45:40 executed programs: 2406 2025/02/26 14:45:45 executed programs: 2529 2025/02/26 14:45:50 executed programs: 2651 2025/02/26 14:45:55 executed programs: 2774 2025/02/26 14:46:00 executed programs: 2897 2025/02/26 14:46:05 executed programs: 3020 2025/02/26 14:46:10 executed programs: 3142 [ 211.012291][ T30] INFO: task syz-executor.0:2525 blocked for more than 143 seconds. [ 211.020295][ T30] Not tainted 6.14.0-rc4-syzkaller #0 [ 211.026187][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.034834][ T30] task:syz-executor.0 state:D stack:13664 pid:2525 tgid:2524 ppid:2108 task_flags:0x400140 flags:0x00004006 [ 211.046722][ T30] Call Trace: [ 211.049978][ T30] [ 211.052909][ T30] __schedule+0x525/0xb40 [ 211.057263][ T30] schedule+0x25/0x110 [ 211.061340][ T30] schedule_preempt_disabled+0x13/0x30 [ 211.066879][ T30] __mutex_lock+0x5e3/0xa90 [ 211.071351][ T30] ? __kmalloc_noprof+0xac/0x540 [ 211.076300][ T30] ? hfs_find_init+0x7e/0xa0 [ 211.080861][ T30] ? hfs_find_init+0x7e/0xa0 [ 211.085487][ T30] hfs_find_init+0x7e/0xa0 [ 211.089873][ T30] hfs_ext_read_extent+0x5d/0x1a0 [ 211.094907][ T30] hfs_extend_file+0x181/0x280 [ 211.099646][ T30] hfs_bmap_reserve+0x74/0x90 [ 211.104331][ T30] __hfs_ext_write_extent+0x8c/0xb0 [ 211.109509][ T30] hfs_ext_read_extent+0x162/0x1a0 [ 211.114653][ T30] hfs_extend_file+0x181/0x280 [ 211.119391][ T30] hfs_get_block+0x62/0x1e0 [ 211.123914][ T30] __block_write_begin_int+0x171/0x520 [ 211.129348][ T30] ? __pfx_hfs_get_block+0x10/0x10 [ 211.134564][ T30] ? __pfx_hfs_get_block+0x10/0x10 [ 211.139650][ T30] block_write_begin+0x4f/0xb0 [ 211.144410][ T30] hfs_write_begin+0x28/0x70 [ 211.148972][ T30] ? __pfx_hfs_get_block+0x10/0x10 [ 211.154053][ T30] generic_perform_write+0xdc/0x2f0 [ 211.159265][ T30] generic_file_write_iter+0x5d/0xe0 [ 211.164540][ T30] vfs_write+0x2ad/0x4b0 [ 211.168753][ T30] ksys_write+0x6f/0xf0 [ 211.172900][ T30] do_syscall_64+0x6d/0x170 [ 211.177374][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.183267][ T30] RIP: 0033:0x7fb136e7cda9 [ 211.187653][ T30] RSP: 002b:00007fb137bf80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.196070][ T30] RAX: ffffffffffffffda RBX: 00007fb136fabf80 RCX: 00007fb136e7cda9 [ 211.204026][ T30] RDX: 000000000208e24b RSI: 0000000020000180 RDI: 0000000000000004 [ 211.211969][ T30] RBP: 00007fb136ec947a R08: 0000000000000000 R09: 0000000000000000 [ 211.219943][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.227898][ T30] R13: 0000000000000006 R14: 00007fb136fabf80 R15: 00007ffd8e7adb18 [ 211.235870][ T30] [ 211.238874][ T30] [ 211.238874][ T30] Showing all locks held in the system: [ 211.246588][ T30] no locks held by rcu_preempt/17. [ 211.251675][ T30] 1 lock held by khungtaskd/30: [ 211.256519][ T30] #0: ffffffff835e2700 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 211.266312][ T30] 4 locks held by kworker/u8:3/52: [ 211.271392][ T30] #0: ffff888100eadd48 ((wq_completion)writeback){....}-{0:0}, at: process_one_work+0x43e/0x6b0 [ 211.281892][ T30] #1: ffffc900001cbe40 ((work_completion)(&(&wb->dwork)->work)){....}-{0:0}, at: process_one_work+0x1ec/0x6b0 [ 211.293602][ T30] #2: ffff88810a2dc0e0 (&type->s_umount_key#62){....}-{3:3}, at: super_trylock_shared+0x15/0x50 [ 211.304107][ T30] #3: ffff88810fe820b0 (&tree->tree_lock/1){....}-{3:3}, at: hfs_find_init+0x7e/0xa0 [ 211.313658][ T30] 2 locks held by getty/1574: [ 211.318310][ T30] #0: ffff888109aa78a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60 [ 211.328028][ T30] #1: ffffc9000313f2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x54b/0x6a0 [ 211.338007][ T30] 7 locks held by syz-executor.0/2525: [ 211.343478][ T30] #0: ffff8881096aa278 (&f->f_pos_lock){....}-{3:3}, at: fdget_pos+0xb2/0x1b0 [ 211.352402][ T30] #1: ffff88810a2dc410 (sb_writers#14){....}-{0:0}, at: ksys_write+0x6f/0xf0 [ 211.361228][ T30] #2: ffff888104fe94a0 (&sb->s_type->i_mutex_key#20){....}-{3:3}, at: generic_file_write_iter+0x29/0xe0 [ 211.372515][ T30] #3: ffff888104fe92f8 (&HFS_I(inode)->extents_lock){....}-{3:3}, at: hfs_extend_file+0x40/0x280 [ 211.383343][ T30] #4: ffff88810fe820b0 (&tree->tree_lock/1){....}-{3:3}, at: hfs_find_init+0x7e/0xa0 [ 211.392879][ T30] #5: ffff888104fe80f8 (&HFS_I(tree->inode)->extents_lock){....}-{3:3}, at: hfs_extend_file+0x40/0x280 [ 211.404081][ T30] #6: ffff88810fe820b0 (&tree->tree_lock/1){....}-{3:3}, at: hfs_find_init+0x7e/0xa0 [ 211.413634][ T30] 4 locks held by syz-executor.0/9324: [ 211.419068][ T30] [ 211.421369][ T30] ============================================= [ 211.421369][ T30] [ 211.429790][ T30] NMI backtrace for cpu 1 [ 211.429795][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller #0 [ 211.429799][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.429801][ T30] Call Trace: [ 211.429802][ T30] [ 211.429803][ T30] dump_stack_lvl+0x5a/0x90 [ 211.429809][ T30] nmi_cpu_backtrace+0xd4/0x110 [ 211.429814][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 211.429820][ T30] nmi_trigger_cpumask_backtrace+0xd5/0x140 [ 211.429823][ T30] watchdog+0x645/0x680 [ 211.429826][ T30] ? watchdog+0x1e8/0x680 [ 211.429829][ T30] ? __pfx_watchdog+0x10/0x10 [ 211.429831][ T30] kthread+0xf7/0x200 [ 211.429835][ T30] ? __pfx_kthread+0x10/0x10 [ 211.429837][ T30] ret_from_fork+0x2c/0x50 [ 211.429841][ T30] ? __pfx_kthread+0x10/0x10 [ 211.429844][ T30] ret_from_fork_asm+0x1a/0x30 [ 211.429849][ T30] [ 211.429850][ T30] Sending NMI from CPU 1 to CPUs 0: [ 211.524254][ C0] NMI backtrace for cpu 0 [ 211.524257][ C0] CPU: 0 UID: 0 PID: 9328 Comm: syz-executor.0 Not tainted 6.14.0-rc4-syzkaller #0 [ 211.524261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.524263][ C0] RIP: 0010:__orc_find+0x4b/0x80 [ 211.524270][ C0] Code: 48 8d 72 04 49 89 d2 48 39 f7 72 2f 48 89 fa 48 29 f2 48 89 d1 48 c1 ea 3f 48 c1 f9 02 48 01 ca 48 d1 fa 48 8d 14 96 48 63 0a <48> 01 d1 49 39 c8 73 ce 48 8d 7a fc 48 39 f7 73 d1 4d 29 ca 49 c1 [ 211.524275][ C0] RSP: 0018:ffffc90004653758 EFLAGS: 00000206 [ 211.524278][ C0] RAX: ffffffff83cfd85a RBX: ffffc90004653798 RCX: fffffffffdfe8220 [ 211.524279][ C0] RDX: ffffffff839b556c RSI: ffffffff839b5548 RDI: ffffffff839b5590 [ 211.524281][ C0] RBP: ffffffff8199d7b9 R08: ffffffff8199d7b9 R09: ffffffff839b5548 [ 211.524282][ C0] R10: ffffffff839b5548 R11: 0000000080000000 R12: 0000000000000001 [ 211.524283][ C0] R13: ffffffff8199d7ba R14: ffffc90004653d88 R15: ffff88810dfec380 [ 211.524285][ C0] FS: 00007fc8f068f6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 211.524290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.524291][ C0] CR2: 0000000020200000 CR3: 0000000104f5e000 CR4: 00000000003506f0 [ 211.524292][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.524294][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.524295][ C0] Call Trace: [ 211.524296][ C0] [ 211.524297][ C0] ? nmi_cpu_backtrace+0x8f/0x110 [ 211.524303][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 211.524308][ C0] ? nmi_handle+0xb8/0x1a0 [ 211.524311][ C0] ? __orc_find+0x4b/0x80 [ 211.524313][ C0] ? default_do_nmi+0x69/0x2f0 [ 211.524317][ C0] ? exc_nmi+0x152/0x190 [ 211.524319][ C0] ? end_repeat_nmi+0xf/0x53 [ 211.524323][ C0] ? fault_in_iov_iter_readable+0x4a/0xd0 [ 211.524326][ C0] ? fault_in_iov_iter_readable+0x49/0xd0 [ 211.524329][ C0] ? fault_in_iov_iter_readable+0x49/0xd0 [ 211.524331][ C0] ? __orc_find+0x4b/0x80 [ 211.524334][ C0] ? __orc_find+0x4b/0x80 [ 211.524337][ C0] ? __orc_find+0x4b/0x80 [ 211.524340][ C0] [ 211.524341][ C0] [ 211.524341][ C0] unwind_next_frame+0x104/0x940 [ 211.524345][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.524349][ C0] arch_stack_walk+0x95/0x100 [ 211.524353][ C0] ? fault_in_iov_iter_readable+0x4a/0xd0 [ 211.524355][ C0] stack_trace_save+0x4f/0x80 [ 211.524358][ C0] save_stack+0x86/0xb0 [ 211.524362][ C0] ? post_alloc_hook+0xd0/0xf0 [ 211.524367][ C0] ? get_page_from_freelist+0x8cb/0x1ae0 [ 211.524370][ C0] ? __alloc_frozen_pages_noprof+0xf2/0x270 [ 211.524373][ C0] ? alloc_pages_mpol+0x76/0x1b0 [ 211.524376][ C0] ? alloc_pages_noprof+0x4b/0xf0 [ 211.524378][ C0] ? pte_alloc_one+0x19/0x100 [ 211.524382][ C0] ? do_huge_pmd_anonymous_page+0x195/0x620 [ 211.524387][ C0] ? __handle_mm_fault+0x9fd/0x1880 [ 211.524392][ C0] ? handle_mm_fault+0x1db/0x360 [ 211.524395][ C0] ? exc_page_fault+0x161/0x6e0 [ 211.524399][ C0] ? asm_exc_page_fault+0x26/0x30 [ 211.524401][ C0] ? fault_in_readable+0x86/0xf0 [ 211.524405][ C0] ? fault_in_iov_iter_readable+0x4a/0xd0 [ 211.524407][ C0] __set_page_owner+0x24/0x180 [ 211.524410][ C0] post_alloc_hook+0xd0/0xf0 [ 211.524412][ C0] get_page_from_freelist+0x8cb/0x1ae0 [ 211.524415][ C0] ? find_held_lock+0x2b/0x80 [ 211.524420][ C0] __alloc_frozen_pages_noprof+0xf2/0x270 [ 211.524423][ C0] alloc_pages_mpol+0x76/0x1b0 [ 211.524426][ C0] alloc_pages_noprof+0x4b/0xf0 [ 211.524428][ C0] pte_alloc_one+0x19/0x100 [ 211.524431][ C0] do_huge_pmd_anonymous_page+0x195/0x620 [ 211.524434][ C0] __handle_mm_fault+0x9fd/0x1880 [ 211.524438][ C0] handle_mm_fault+0x1db/0x360 [ 211.524441][ C0] exc_page_fault+0x161/0x6e0 [ 211.524444][ C0] asm_exc_page_fault+0x26/0x30 [ 211.524446][ C0] RIP: 0010:fault_in_readable+0x86/0xf0 [ 211.524449][ C0] Code: 00 31 c0 48 81 e6 00 f0 ff ff 4c 39 ce 48 0f 42 f0 45 31 c0 48 39 f2 75 0e eb 19 48 81 c2 00 10 00 00 48 39 f2 74 0d 44 89 c1 <8a> 02 85 c9 88 44 24 07 74 e7 4c 29 ca 0f 01 ca 48 39 fa 0f b6 44 [ 211.524450][ C0] RSP: 0018:ffffc90004653d78 EFLAGS: 00050287 [ 211.524452][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 211.524453][ C0] RDX: 0000000020200000 RSI: 0000000020201000 RDI: 0000000000001000 [ 211.524454][ C0] RBP: 0000000000001000 R08: 0000000000000000 R09: 00000000201ff180 [ 211.524455][ C0] R10: 0000000000000001 R11: 0000000000001000 R12: ffff88817ce50e38 [ 211.524456][ C0] R13: 00000000001ff000 R14: ffffffff82a426c0 R15: ffffc90004653e58 [ 211.524459][ C0] ? balance_dirty_pages_ratelimited_flags+0xf0/0x550 [ 211.524463][ C0] fault_in_iov_iter_readable+0x4a/0xd0 [ 211.524465][ C0] generic_perform_write+0xa0/0x2f0 [ 211.524469][ C0] ext4_buffered_write_iter+0x63/0x110 [ 211.524473][ C0] vfs_write+0x2ad/0x4b0 [ 211.524477][ C0] ksys_write+0x6f/0xf0 [ 211.524480][ C0] do_syscall_64+0x6d/0x170 [ 211.524482][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.524485][ C0] RIP: 0033:0x7fc8ef87cda9 [ 211.524487][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 211.524488][ C0] RSP: 002b:00007fc8f068f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.524490][ C0] RAX: ffffffffffffffda RBX: 00007fc8ef9abf80 RCX: 00007fc8ef87cda9 [ 211.524491][ C0] RDX: 000000000208e24b RSI: 0000000020000180 RDI: 0000000000000003 [ 211.524493][ C0] RBP: 00007fc8ef8c947a R08: 0000000000000000 R09: 0000000000000000 [ 211.524494][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.524495][ C0] R13: 0000000000000010 R14: 00007fc8ef9abf80 R15: 00007ffc437d56a8 [ 211.524497][ C0] [ 211.525250][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 212.089152][ T30] Kernel Offset: disabled [ 212.093447][ T30] Rebooting in 86400 seconds..