Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2023/11/06 12:46:18 ignoring optional flag "sandboxArg"="0" 2023/11/06 12:46:18 parsed 1 programs [ 40.826231][ T26] audit: type=1400 audit(1699274778.550:173): avc: denied { getattr } for pid=1948 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.850984][ T26] audit: type=1400 audit(1699274778.550:174): avc: denied { read } for pid=1948 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.873371][ T26] audit: type=1400 audit(1699274778.550:175): avc: denied { open } for pid=1948 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.897285][ T26] audit: type=1400 audit(1699274778.550:176): avc: denied { mounton } for pid=1953 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.923434][ T26] audit: type=1400 audit(1699274778.550:177): avc: denied { mount } for pid=1953 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 40.964649][ T26] audit: type=1400 audit(1699274778.690:178): avc: denied { unlink } for pid=1953 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/11/06 12:46:18 executed programs: 0 [ 41.072498][ T1953] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.091529][ T1444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.094140][ T26] audit: type=1400 audit(1699274778.810:179): avc: denied { ioctl } for pid=1959 comm="syz-executor.0" path="socket:[1898]" dev="sockfs" ino=1898 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.099385][ T1444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.134163][ T1444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.141741][ T1444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.148992][ T1444] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.156223][ T1444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.165585][ T26] audit: type=1400 audit(1699274778.890:180): avc: denied { mounton } for pid=1959 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.214891][ T1959] chnl_net:caif_netlink_parms(): no params data found [ 41.439631][ T26] audit: type=1400 audit(1699274779.160:181): avc: denied { write } for pid=1959 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.460647][ T26] audit: type=1400 audit(1699274779.160:182): avc: denied { read } for pid=1959 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.619153][ T1959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.860096][ T1959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.324697][ T2361] nbd0: detected capacity change from 0 to 2 [ 43.135584][ T1444] block nbd0: Receive control failed (result -104) [ 43.214287][ T1444] Bluetooth: hci0: command 0x0409 tx timeout [ 45.294146][ T1444] Bluetooth: hci0: command 0x041b tx timeout [ 47.374173][ T1444] Bluetooth: hci0: command 0x040f tx timeout [ 49.454170][ T1444] Bluetooth: hci0: command 0x0419 tx timeout [ 72.334256][ T427] block nbd0: Possible stuck request ffff888110278000: control (read@0,1024B). Runtime 30 seconds 2023/11/06 12:47:15 executed programs: 1 [ 98.310155][ T1294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.317312][ T1294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.324860][ T1294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.332185][ T1294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.339569][ T1294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.346747][ T1294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.396409][ T2364] chnl_net:caif_netlink_parms(): no params data found [ 98.781245][ T2364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.035770][ T2364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.414102][ T1294] Bluetooth: hci1: command 0x0409 tx timeout [ 102.414160][ T427] block nbd0: Possible stuck request ffff888110278000: control (read@0,1024B). Runtime 60 seconds [ 102.494157][ T1334] udevd[1334]: worker [1960] /devices/virtual/block/nbd0 is taking a long time [ 102.494203][ T1294] Bluetooth: hci1: command 0x041b tx timeout [ 104.574167][ T1294] Bluetooth: hci1: command 0x040f tx timeout [ 106.654146][ T1294] Bluetooth: hci1: command 0x0419 tx timeout [ 132.494186][ T427] block nbd0: Possible stuck request ffff888110278000: control (read@0,1024B). Runtime 90 seconds 2023/11/06 12:48:12 executed programs: 2 [ 155.498596][ T1444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.505710][ T1444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.513086][ T1444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.520416][ T1444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.527608][ T1444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.534620][ T1444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.585021][ T2768] chnl_net:caif_netlink_parms(): no params data found [ 155.956032][ T2768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.202873][ T2768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.614078][ T1444] Bluetooth: hci2: command 0x0409 tx timeout [ 159.694107][ T1444] Bluetooth: hci2: command 0x041b tx timeout [ 161.774111][ T1444] Bluetooth: hci2: command 0x040f tx timeout [ 162.574406][ T427] block nbd0: Possible stuck request ffff888110278000: control (read@0,1024B). Runtime 120 seconds [ 163.854118][ T1444] Bluetooth: hci2: command 0x0419 tx timeout [ 164.654255][ T1444] Bluetooth: hci0: command 0x0406 tx timeout [ 192.654153][ T427] block nbd0: Possible stuck request ffff888110278000: control (read@0,1024B). Runtime 150 seconds [ 205.454125][ T28] INFO: task syz-executor.0:2361 blocked for more than 143 seconds. [ 205.462383][ T28] Not tainted 6.6.0-syzkaller #0 [ 205.468046][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.476825][ T28] task:syz-executor.0 state:D stack:14416 pid:2361 tgid:2360 ppid:1959 flags:0x00004006 [ 205.487243][ T28] Call Trace: [ 205.490512][ T28] [ 205.493423][ T28] __schedule+0x3a5/0x9d0 [ 205.497744][ T28] schedule+0x30/0xf0 [ 205.501717][ T28] schedule_preempt_disabled+0x1b/0xa0 [ 205.507544][ T28] __mutex_lock+0x53b/0x9e0 [ 205.512112][ T28] ? blkdev_put+0x38/0x1c0 [ 205.516626][ T28] ? blkdev_put+0x38/0x1c0 [ 205.521100][ T28] blkdev_put+0x38/0x1c0 [ 205.525330][ T28] bdev_release+0x14/0x20 [ 205.529662][ T28] blkdev_release+0x10/0x20 [ 205.534243][ T28] __fput+0x8d/0x2e0 [ 205.538894][ T28] task_work_run+0x55/0x80 [ 205.543274][ T28] get_signal+0x8b/0xb20 [ 205.547539][ T28] ? __mutex_unlock_slowpath+0x35/0x1e0 [ 205.553058][ T28] arch_do_signal_or_restart+0x39/0x290 [ 205.558590][ T28] exit_to_user_mode_prepare+0xc3/0x150 [ 205.564324][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 205.569845][ T28] do_syscall_64+0x4b/0x110 [ 205.574341][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 205.580216][ T28] RIP: 0033:0x7efc3fe7cae9 [ 205.584803][ T28] RSP: 002b:00007efc40b200c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.593186][ T28] RAX: 0000000000000000 RBX: 00007efc3ff9bf80 RCX: 00007efc3fe7cae9 [ 205.601326][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 205.609466][ T28] RBP: 00007efc3fec847a R08: 0000000000000000 R09: 0000000000000000 [ 205.617440][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.625409][ T28] R13: 0000000000000006 R14: 00007efc3ff9bf80 R15: 00007ffdad740138 [ 205.633369][ T28] [ 205.636440][ T28] INFO: task syz-executor.0:2362 blocked for more than 143 seconds. [ 205.644404][ T28] Not tainted 6.6.0-syzkaller #0 [ 205.649865][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.658735][ T28] task:syz-executor.0 state:D stack:14592 pid:2362 tgid:2360 ppid:1959 flags:0x00000006 [ 205.669871][ T28] Call Trace: [ 205.673754][ T28] [ 205.676791][ T28] __schedule+0x3a5/0x9d0 [ 205.681106][ T28] schedule+0x30/0xf0 [ 205.685211][ T28] schedule_preempt_disabled+0x1b/0xa0 [ 205.690764][ T28] __mutex_lock+0x53b/0x9e0 [ 205.695347][ T28] ? blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.700975][ T28] ? blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.706595][ T28] blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.712034][ T28] bdev_open_by_dev+0x99/0xc0 [ 205.716838][ T28] disk_scan_partitions+0x64/0xe0 [ 205.722024][ T28] blkdev_ioctl+0x104/0x270 [ 205.726925][ T28] __x64_sys_ioctl+0x8b/0xc0 [ 205.731509][ T28] do_syscall_64+0x3f/0x110 [ 205.736009][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 205.741875][ T28] RIP: 0033:0x7efc3fe7cae9 [ 205.746386][ T28] RSP: 002b:00007efc40aff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.754969][ T28] RAX: ffffffffffffffda RBX: 00007efc3ff9c050 RCX: 00007efc3fe7cae9 [ 205.762911][ T28] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 205.770965][ T28] RBP: 00007efc3fec847a R08: 0000000000000000 R09: 0000000000000000 [ 205.779008][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.786984][ T28] R13: 000000000000006e R14: 00007efc3ff9c050 R15: 00007ffdad740138 [ 205.795124][ T28] [ 205.798204][ T28] [ 205.798204][ T28] Showing all locks held in the system: [ 205.805919][ T28] 1 lock held by khungtaskd/28: [ 205.810834][ T28] #0: ffffffff83582980 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 205.820666][ T28] 2 locks held by getty/1395: [ 205.825506][ T28] #0: ffff8881096440a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x50 [ 205.835328][ T28] #1: ffffc900003fb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x54b/0x6a0 [ 205.845997][ T28] 1 lock held by udevd/1960: [ 205.850559][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.861058][ T28] 1 lock held by syz-executor.0/2361: [ 205.866499][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_put+0x38/0x1c0 [ 205.875983][ T28] 1 lock held by syz-executor.0/2362: [ 205.881333][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.892244][ T28] 1 lock held by syz-executor.0/2764: [ 205.898132][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.908833][ T28] 1 lock held by syz-executor.0/2765: [ 205.916474][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.927140][ T28] 1 lock held by syz-executor.0/3169: [ 205.932478][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.943590][ T28] 1 lock held by syz-executor.0/3170: [ 205.948949][ T28] #0: ffff88810f265cc8 (&disk->open_mutex){....}-{3:3}, at: blkdev_get_by_dev.part.0+0xfb/0x330 [ 205.959719][ T28] [ 205.962026][ T28] ============================================= [ 205.962026][ T28] [ 205.970422][ T28] NMI backtrace for cpu 1 [ 205.974904][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.0-syzkaller #0 [ 205.982863][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 205.992973][ T28] Call Trace: [ 205.996322][ T28] [ 205.999328][ T28] dump_stack_lvl+0x3d/0x60 [ 206.004343][ T28] nmi_cpu_backtrace+0xcc/0x110 [ 206.009176][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 206.014341][ T28] nmi_trigger_cpumask_backtrace+0xd1/0x130 [ 206.020282][ T28] watchdog+0x615/0x640 [ 206.024508][ T28] ? watchdog+0x1f9/0x640 [ 206.028813][ T28] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 206.034759][ T28] kthread+0xde/0x110 [ 206.038712][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 206.044488][ T28] ret_from_fork+0x2c/0x40 [ 206.048959][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 206.054558][ T28] ret_from_fork_asm+0x11/0x20 [ 206.059292][ T28] [ 206.062589][ T28] Sending NMI from CPU 1 to CPUs 0: [ 206.067783][ C0] NMI backtrace for cpu 0 [ 206.067786][ C0] CPU: 0 PID: 1271 Comm: kworker/u4:12 Not tainted 6.6.0-syzkaller #0 [ 206.067789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 206.067791][ C0] Workqueue: events_unbound toggle_allocation_gate [ 206.067799][ C0] RIP: 0010:__default_send_IPI_dest_field+0x3a/0x80 [ 206.067805][ C0] Code: 53 89 d3 75 04 eb 28 f3 90 8b 04 25 00 c3 5f ff f6 c4 10 75 f2 44 89 e0 89 04 25 10 c3 5f ff 89 f0 09 d8 89 04 25 00 c3 5f ff <5b> 5d 41 5c c3 bd e8 03 00 00 eb 16 65 ff 05 1f a5 fd 7e bf bc 8d [ 206.067807][ C0] RSP: 0018:ffffc900026cbc78 EFLAGS: 00000002 [ 206.067810][ C0] RAX: 00000000000008fb RBX: 0000000000000800 RCX: 0000000000000002 [ 206.067811][ C0] RDX: 0000000000000800 RSI: 00000000000000fb RDI: 0000000002000000 [ 206.067813][ C0] RBP: 0000000000000001 R08: ffff888237d33ac0 R09: ffff88810a6f0040 [ 206.067815][ C0] R10: 0000000000000000 R11: 0000000000000006 R12: 0000000002000000 [ 206.067816][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 206.067817][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 206.067823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.067824][ C0] CR2: 00007f33cf740140 CR3: 0000000003447000 CR4: 00000000003506f0 [ 206.067826][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.067827][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.067829][ C0] Call Trace: [ 206.067830][ C0] [ 206.067831][ C0] ? nmi_cpu_backtrace+0x8b/0x110 [ 206.067837][ C0] ? __default_send_IPI_dest_field+0x3a/0x80 [ 206.067841][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 206.067844][ C0] ? nmi_handle+0xb5/0x1a0 [ 206.067850][ C0] ? __default_send_IPI_dest_field+0x3a/0x80 [ 206.067853][ C0] ? default_do_nmi+0x6b/0x2b0 [ 206.067856][ C0] ? exc_nmi+0x160/0x190 [ 206.067858][ C0] ? end_repeat_nmi+0xf/0x2a [ 206.067864][ C0] ? __default_send_IPI_dest_field+0x3a/0x80 [ 206.067867][ C0] ? __default_send_IPI_dest_field+0x3a/0x80 [ 206.067870][ C0] ? __default_send_IPI_dest_field+0x3a/0x80 [ 206.067873][ C0] [ 206.067874][ C0] [ 206.067875][ C0] flat_send_IPI_mask+0x15/0x30 [ 206.067878][ C0] smp_call_function_many_cond+0x5ff/0x670 [ 206.067884][ C0] ? __text_poke+0x4a0/0x4a0 [ 206.067887][ C0] ? setup_data_read+0xe0/0xe0 [ 206.067890][ C0] ? __text_poke+0x4a0/0x4a0 [ 206.067893][ C0] on_each_cpu_cond_mask+0x3b/0x70 [ 206.067895][ C0] ? __kmem_cache_alloc_node+0xaf/0x310 [ 206.067899][ C0] ? __kmem_cache_alloc_node+0xb0/0x310 [ 206.067902][ C0] text_poke_bp_batch+0x2e8/0x310 [ 206.067906][ C0] ? process_one_work+0x1a2/0x4c0 [ 206.067908][ C0] text_poke_finish+0x1a/0x30 [ 206.067911][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 206.067914][ C0] static_key_disable_cpuslocked+0x4a/0x60 [ 206.067918][ C0] static_key_disable+0x15/0x20 [ 206.067920][ C0] toggle_allocation_gate+0x6d/0x120 [ 206.067923][ C0] ? cpuacct_percpu_seq_show+0x10/0x10 [ 206.067928][ C0] process_one_work+0x208/0x4c0 [ 206.067931][ C0] worker_thread+0x1c3/0x380 [ 206.067933][ C0] ? _raw_spin_unlock_irqrestore+0x3c/0x60 [ 206.067938][ C0] ? rescuer_thread+0x380/0x380 [ 206.067940][ C0] kthread+0xde/0x110 [ 206.067944][ C0] ? kthread_complete_and_exit+0x20/0x20 [ 206.067947][ C0] ret_from_fork+0x2c/0x40 [ 206.067951][ C0] ? kthread_complete_and_exit+0x20/0x20 [ 206.067954][ C0] ret_from_fork_asm+0x11/0x20 [ 206.067958][ C0] [ 206.068781][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 206.427531][ T28] Kernel Offset: disabled [ 206.431835][ T28] Rebooting in 86400 seconds..