[ 35.193170][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 42.682355][ T26] kauditd_printk_skb: 37 callbacks suppressed
[ 42.682409][ T26] audit: type=1400 audit(1640708138.710:73): avc: denied { transition } for pid=3392 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 42.711910][ T26] audit: type=1400 audit(1640708138.720:74): avc: denied { write } for pid=3392 comm="sh" path="pipe:[26387]" dev="pipefs" ino=26387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
[ 81.328938][ T5] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts.
executing program
[ 483.088404][ T26] audit: type=1400 audit(1640708579.120:75): avc: denied { execmem } for pid=3634 comm="syz-executor617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 483.108363][ T26] audit: type=1400 audit(1640708579.120:76): avc: denied { create } for pid=3635 comm="syz-executor617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 483.128440][ T26] audit: type=1400 audit(1640708579.130:77): avc: denied { connect } for pid=3635 comm="syz-executor617" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 483.149385][ T26] audit: type=1400 audit(1640708579.130:78): avc: denied { read } for pid=3635 comm="syz-executor617" path="socket:[27657]" dev="sockfs" ino=27657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 483.176136][ T26] audit: type=1400 audit(1640708579.180:79): avc: denied { mounton } for pid=3635 comm="syz-executor617" path="/root" dev="sda1" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[ 483.200651][ T26] audit: type=1400 audit(1640708579.230:80): avc: denied { write } for pid=3635 comm="syz-executor617" path="socket:[27657]" dev="sockfs" ino=27657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
executing program
executing program
executing program
executing program
executing program
executing program
[ 716.207664][ T27] INFO: task syz-executor617:3663 blocked for more than 143 seconds.
[ 716.216017][ T27] Not tainted 5.16.0-rc7-syzkaller #0
[ 716.222070][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.230812][ T27] task:syz-executor617 state:D stack:28424 pid: 3663 ppid: 3634 flags:0x00004004
[ 716.240136][ T27] Call Trace:
[ 716.243418][ T27] <TASK>
[ 716.246336][ T27] __schedule+0xa9a/0x4900
[ 716.250926][ T27] ? update_curr+0x46f/0x900
[ 716.255571][ T27] ? io_schedule_timeout+0x180/0x180
[ 716.260909][ T27] schedule+0xd2/0x260
[ 716.265020][ T27] schedule_timeout+0x1db/0x2a0
[ 716.269942][ T27] ? usleep_range_state+0x1b0/0x1b0
[ 716.275159][ T27] ? wait_for_completion+0x16c/0x270
[ 716.280482][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 716.285426][ T27] ? do_raw_spin_lock+0x120/0x2b0
[ 716.290510][ T27] ? rwlock_bug.part.0+0x90/0x90
[ 716.295456][ T27] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.300711][ T27] wait_for_completion+0x174/0x270
[ 716.305842][ T27] ? __flush_work+0x53e/0xb10
[ 716.310668][ T27] ? bit_wait_io_timeout+0x160/0x160
[ 716.315969][ T27] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.321221][ T27] __flush_work+0x56c/0xb10
[ 716.325737][ T27] ? queue_delayed_work_on+0x120/0x120
[ 716.331255][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 716.336114][ T27] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0
[ 716.342022][ T27] ? try_to_grab_pending+0xbd/0xd0
[ 716.347340][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.353644][ T27] __cancel_work_timer+0x3f9/0x570
[ 716.358862][ T27] ? try_to_grab_pending+0xd0/0xd0
[ 716.364036][ T27] ? p9_fd_close+0x280/0x520
[ 716.368837][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 716.373712][ T27] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 716.379579][ T27] p9_fd_close+0x29c/0x520
[ 716.384017][ T27] ? p9_client_create+0xa46/0x1110
[ 716.389205][ T27] p9_client_create+0x95a/0x1110
[ 716.394155][ T27] ? p9_client_flush+0x430/0x430
[ 716.399137][ T27] ? lockdep_init_map_type+0x2c3/0x7b0
[ 716.404609][ T27] ? trace_kmalloc+0x32/0xf0
[ 716.409387][ T27] ? __kmalloc_track_caller+0x21e/0x4d0
[ 716.414947][ T27] ? __raw_spin_lock_init+0x36/0x110
[ 716.420286][ T27] v9fs_session_init+0x1dd/0x1780
[ 716.425413][ T27] ? find_held_lock+0x2d/0x110
[ 716.430243][ T27] ? v9fs_show_options+0x780/0x780
[ 716.435395][ T27] ? rcu_read_lock_sched_held+0x3a/0x70
[ 716.441166][ T27] ? trace_kmalloc+0x32/0xf0
[ 716.445780][ T27] ? kmem_cache_alloc_trace+0x203/0x4a0
[ 716.451409][ T27] v9fs_mount+0x73/0xa80
[ 716.455662][ T27] ? v9fs_write_inode+0x60/0x60
[ 716.460570][ T27] legacy_get_tree+0x105/0x220
[ 716.465444][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.471761][ T27] vfs_get_tree+0x89/0x2f0
[ 716.476291][ T27] path_mount+0x1320/0x1fa0
[ 716.480895][ T27] ? kmem_cache_free.part.0+0xe1/0x200
[ 716.486373][ T27] ? finish_automount+0xaf0/0xaf0
[ 716.491489][ T27] ? lockdep_hardirqs_on+0x79/0x100
[ 716.496869][ T27] ? putname+0xfe/0x140
[ 716.501041][ T27] __x64_sys_mount+0x27f/0x300
[ 716.505793][ T27] ? copy_mnt_ns+0xae0/0xae0
[ 716.510725][ T27] ? syscall_enter_from_user_mode+0x21/0x70
[ 716.516711][ T27] do_syscall_64+0x35/0xb0
[ 716.521155][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.527337][ T27] RIP: 0033:0x7f5b42a5fcf9
[ 716.531761][ T27] RSP: 002b:00007f5b429f0308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 716.540324][ T27] RAX: ffffffffffffffda RBX: 00007f5b42ae74f8 RCX: 00007f5b42a5fcf9
[ 716.548403][ T27] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[ 716.556457][ T27] RBP: 00007f5b42ae74f0 R08: 00000000200001c0 R09: 0000000000000000
[ 716.564526][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b42ae74fc
[ 716.572536][ T27] R13: 00007f5b42ab507c R14: 64663d736e617274 R15: 0000000000022000
[ 716.580603][ T27] </TASK>
[ 716.583674][ T27]
[ 716.583674][ T27] Showing all locks held in the system:
[ 716.591441][ T27] 2 locks held by kworker/1:0/20:
[ 716.596471][ T27] #0: ffff888010c67d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x896/0x1660
[ 716.606957][ T27] #1: ffffc90000fbfdb0 ((work_completion)(&m->rq)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1660
[ 716.617719][ T27] 1 lock held by khungtaskd/27:
[ 716.622577][ T27] #0: ffffffff8bb812a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[ 716.632626][ T27] 2 locks held by getty/3285:
[ 716.637354][ T27] #0: ffff88807f315098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80
[ 716.647257][ T27] #1: ffffc90002b8e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230
[ 716.657412][ T27]
[ 716.659721][ T27] =============================================
[ 716.659721][ T27]
[ 716.668195][ T27] NMI backtrace for cpu 1
[ 716.672515][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc7-syzkaller #0
[ 716.680652][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.690693][ T27] Call Trace:
[ 716.693969][ T27] <TASK>
[ 716.696886][ T27] dump_stack_lvl+0xcd/0x134
[ 716.701536][ T27] nmi_cpu_backtrace.cold+0x47/0x144
[ 716.706806][ T27] ? lapic_can_unplug_cpu+0x80/0x80
[ 716.712015][ T27] nmi_trigger_cpumask_backtrace+0x1b3/0x230
[ 716.718024][ T27] watchdog+0xc1d/0xf50
[ 716.722165][ T27] ? reset_hung_task_detector+0x30/0x30
[ 716.727698][ T27] kthread+0x405/0x4f0
[ 716.731810][ T27] ? set_kthread_struct+0x130/0x130
[ 716.737007][ T27] ret_from_fork+0x1f/0x30
[ 716.741437][ T27] </TASK>
[ 716.744567][ T27] Sending NMI from CPU 1 to CPUs 0:
[ 716.749820][ C0] NMI backtrace for cpu 0
[ 716.749831][ C0] CPU: 0 PID: 1058 Comm: kworker/u4:5 Not tainted 5.16.0-rc7-syzkaller #0
[ 716.749854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.749867][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 716.749951][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0xc/0x12
[ 716.749990][ C0] Code: 56 57 41 50 41 51 41 52 41 53 e8 af 15 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 02 5a c3 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 48 b8
[ 716.750011][ C0] RSP: 0018:ffffc90004b2f9c0 EFLAGS: 00000246
[ 716.750027][ C0] RAX: 0000000000000001 RBX: 0000000000000007 RCX: ffffffff815c51a0
[ 716.750041][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888010dec540
[ 716.750054][ C0] RBP: ffff888010dec540 R08: 0000000000000000 R09: ffff888010dec543
[ 716.750068][ C0] R10: ffffed10021bd8a8 R11: 000000000000003f R12: ffff888010dec548
[ 716.750082][ C0] R13: ffff888010dec550 R14: 0000000000000204 R15: ffffffff8bcab900
[ 716.750097][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 716.750117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.750132][ C0] CR2: 0000563396607fe8 CR3: 000000000b88e000 CR4: 00000000003506f0
[ 716.750146][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.750158][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.750171][ C0] Call Trace:
[ 716.750176][ C0] <TASK>
[ 716.750182][ C0] do_raw_spin_unlock+0x171/0x230
[ 716.750208][ C0] ? __kmalloc_track_caller+0x133/0x4d0
[ 716.750228][ C0] _raw_spin_unlock+0x1a/0x40
[ 716.750255][ C0] __text_poke+0x5d4/0x8c0
[ 716.750306][ C0] ? text_poke_loc_init+0x340/0x340
[ 716.750330][ C0] ? __kmalloc_track_caller+0x133/0x4d0
[ 716.750351][ C0] ? __kmalloc_track_caller+0x133/0x4d0
[ 716.750371][ C0] text_poke_bp_batch+0x187/0x560
[ 716.750396][ C0] ? mutex_lock_io_nested+0x1150/0x1150
[ 716.750420][ C0] ? alternatives_enable_smp+0xf0/0xf0
[ 716.750446][ C0] ? __jump_label_patch+0xdf/0x1b0
[ 716.750468][ C0] ? arch_jump_label_transform_queue+0xa0/0x100
[ 716.750492][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.750520][ C0] ? __jump_label_update+0x351/0x400
[ 716.750619][ C0] text_poke_finish+0x16/0x30
[ 716.750643][ C0] arch_jump_label_transform_apply+0x13/0x20
[ 716.750667][ C0] jump_label_update+0x1da/0x400
[ 716.750692][ C0] static_key_disable_cpuslocked+0x152/0x1b0
[ 716.750720][ C0] static_key_disable+0x16/0x20
[ 716.750744][ C0] toggle_allocation_gate+0x183/0x390
[ 716.750770][ C0] ? lock_release+0x720/0x720
[ 716.750793][ C0] ? wake_up_kfence_timer+0x20/0x20
[ 716.750818][ C0] ? lockdep_hardirqs_on+0x79/0x100
[ 716.750844][ C0] process_one_work+0x9b2/0x1660
[ 716.750865][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 716.750885][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 716.750909][ C0] ? _raw_spin_lock_irq+0x41/0x50
[ 716.750935][ C0] worker_thread+0x65d/0x1130
[ 716.750955][ C0] ? process_one_work+0x1660/0x1660
[ 716.750975][ C0] kthread+0x405/0x4f0
[ 716.751003][ C0] ? set_kthread_struct+0x130/0x130
[ 716.751029][ C0] ret_from_fork+0x1f/0x30
[ 716.751054][ C0] </TASK>
[ 716.751061][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.240 msecs
[ 716.751815][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 717.084533][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc7-syzkaller #0
[ 717.092688][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 717.102745][ T27] Call Trace:
[ 717.106017][ T27] <TASK>
[ 717.108939][ T27] dump_stack_lvl+0xcd/0x134
[ 717.113709][ T27] panic+0x2b0/0x6dd
[ 717.117628][ T27] ? __warn_printk+0xf3/0xf3
[ 717.122298][ T27] ? nmi_trigger_cpumask_backtrace+0x154/0x230
[ 717.128457][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 717.134705][ T27] ? irq_work_claim+0x76/0x90
[ 717.139441][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 717.145682][ T27] ? irq_work_queue+0x29/0x80
[ 717.150354][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 717.156594][ T27] ? watchdog.cold+0x130/0x158
[ 717.161381][ T27] watchdog.cold+0x141/0x158
[ 717.165971][ T27] ? reset_hung_task_detector+0x30/0x30
[ 717.171524][ T27] kthread+0x405/0x4f0
[ 717.175603][ T27] ? set_kthread_struct+0x130/0x130
[ 717.180802][ T27] ret_from_fork+0x1f/0x30
[ 717.185220][ T27] </TASK>
[ 717.188649][ T27] Kernel Offset: disabled
[ 717.192972][ T27] Rebooting in 86400 seconds..