./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor481380824 <...> Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. execve("./syz-executor481380824", ["./syz-executor481380824"], 0x7fff560e7840 /* 10 vars */) = 0 brk(NULL) = 0x555556d47000 brk(0x555556d47d00) = 0x555556d47d00 arch_prctl(ARCH_SET_FS, 0x555556d47380) = 0 set_tid_address(0x555556d47650) = 5032 set_robust_list(0x555556d47660, 24) = 0 rseq(0x555556d47ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor481380824", 4096) = 27 getrandom("\xc5\x3d\x1a\xfa\x36\xc9\x07\x75", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d47d00 brk(0x555556d68d00) = 0x555556d68d00 brk(0x555556d69000) = 0x555556d69000 mprotect(0x7f9ee9d09000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x555556d47660, 24) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] <... clone resumed>, child_tidptr=0x555556d47650) = 5033 [pid 5033] <... openat resumed>) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 5033] socket(AF_INET, SOCK_SEQPACKET, IPPROTO_IP) = 4 [pid 5033] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 5033] listen(4, 7757) = 0 [pid 5033] ioctl(3, NBD_DO_IT [pid 5032] kill(-5033, SIGKILL) = 0 [pid 5032] kill(5033, SIGKILL) = 0 [ 59.400933][ T5033] block nbd0: shutting down sockets [pid 5032] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5032] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5032] getdents64(3, 0x555556d486f0 /* 2 entries */, 32768) = 48 [pid 5032] getdents64(3, 0x555556d486f0 /* 0 entries */, 32768) = 0 [pid 5032] close(3) = 0 [ 76.195524][ T27] cfg80211: failed to load regulatory.db [ 286.113786][ T29] INFO: task syz-executor481:5033 blocked for more than 143 seconds. [ 286.121987][ T29] Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 286.129605][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.138541][ T29] task:syz-executor481 state:D stack:27392 pid:5033 ppid:5032 flags:0x00004006 [ 286.147909][ T29] Call Trace: [ 286.151212][ T29] [ 286.154202][ T29] __schedule+0xee1/0x5a10 [ 286.158710][ T29] ? __lock_acquire+0x182f/0x5de0 [ 286.163900][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.169224][ T29] schedule+0xe7/0x1b0 [ 286.173504][ T29] schedule_timeout+0x278/0x2c0 [ 286.178534][ T29] ? usleep_range_state+0x1a0/0x1a0 [ 286.183810][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.189036][ T29] __wait_for_common+0x3e0/0x5f0 [ 286.194197][ T29] ? usleep_range_state+0x1a0/0x1a0 [ 286.199438][ T29] ? bit_wait+0xe0/0xe0 [ 286.203677][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.208908][ T29] ? flush_workqueue_prep_pwqs+0x28f/0x4e0 [ 286.214798][ T29] ? check_flush_dependency+0x86/0x450 [ 286.220285][ T29] __flush_workqueue+0x3e0/0x1320 [ 286.225358][ T29] ? blk_mq_run_hw_queue+0x2b7/0x9a0 [ 286.230672][ T29] ? check_flush_dependency+0x450/0x450 [ 286.236324][ T29] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 286.242159][ T29] ? nbd_ioctl+0x308/0xd60 [ 286.246651][ T29] nbd_ioctl+0x308/0xd60 [ 286.250933][ T29] ? nbd_start_device+0xd70/0xd70 [ 286.256024][ T29] ? cpuacct_percpu_seq_show+0x10/0x10 [ 286.261558][ T29] ? nbd_start_device+0xd70/0xd70 [ 286.266679][ T29] blkdev_ioctl+0x2f9/0x770 [ 286.271220][ T29] ? blkdev_common_ioctl+0x1ce0/0x1ce0 [ 286.276787][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 286.281779][ T29] ? blkdev_common_ioctl+0x1ce0/0x1ce0 [ 286.287298][ T29] __x64_sys_ioctl+0x18f/0x210 [ 286.292086][ T29] do_syscall_64+0x38/0xb0 [ 286.296590][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.302518][ T29] RIP: 0033:0x7f9ee9c96879 [ 286.307007][ T29] RSP: 002b:00007fff48042fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.315473][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ee9c96879 [ 286.323444][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.332012][ T29] RBP: 00007f9ee9d095f0 R08: 0000000000000006 R09: 0000000000000006 [ 286.340055][ T29] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 286.348112][ T29] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 286.356126][ T29] [ 286.359170][ T29] [ 286.359170][ T29] Showing all locks held in the system: [ 286.366969][ T29] 2 locks held by kworker/u4:1/12: [ 286.372111][ T29] 1 lock held by khungtaskd/29: [ 286.377062][ T29] #0: ffffffff8cbab2e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 286.387084][ T29] 2 locks held by kworker/u5:1/4439: [ 286.392388][ T29] #0: ffff88801c699138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 [ 286.403081][ T29] #1: ffffc9000ddc7d80 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 [ 286.414296][ T29] 2 locks held by getty/4784: [ 286.418961][ T29] #0: ffff888025b0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.428769][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc5/0x1480 [ 286.438962][ T29] [ 286.441279][ T29] ============================================= [ 286.441279][ T29] [ 286.449804][ T29] NMI backtrace for cpu 0 [ 286.454154][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 286.463964][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 286.474041][ T29] Call Trace: [ 286.477320][ T29] [ 286.480250][ T29] dump_stack_lvl+0xd9/0x1b0 [ 286.484839][ T29] nmi_cpu_backtrace+0x277/0x380 [ 286.489809][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.495014][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 286.500997][ T29] watchdog+0xf87/0x1210 [ 286.505242][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.511212][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.516414][ T29] ? __kthread_parkme+0x14b/0x220 [ 286.521435][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.527419][ T29] kthread+0x33c/0x440 [ 286.531493][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.536688][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.542402][ T29] ret_from_fork+0x45/0x80 [ 286.546817][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.552484][ T29] ret_from_fork_asm+0x11/0x20 [ 286.557258][ T29] [ 286.560340][ T29] Sending NMI from CPU 0 to CPUs 1: [ 286.565598][ C1] NMI backtrace for cpu 1 [ 286.565607][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 286.565621][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 286.565629][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.565648][ C1] RIP: 0010:insn_get_modrm+0x1ab/0x730 [ 286.565665][ C1] Code: 6d 00 4c 89 7b 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 <0f> 85 18 04 00 00 48 8d 7b 25 44 89 6b 20 48 b8 00 00 00 00 00 fc [ 286.565676][ C1] RSP: 0018:ffffc90000117918 EFLAGS: 00000246 [ 286.565686][ C1] RAX: 0000000000000003 RBX: ffffc90000117a68 RCX: 0000000000000000 [ 286.565694][ C1] RDX: 0000000000000000 RSI: ffffffff8a354643 RDI: ffffc90000117a88 [ 286.565701][ C1] RBP: ffffc90000117a8c R08: 0000000000000005 R09: 0000000000000000 [ 286.565709][ C1] R10: 0000000000004000 R11: 0000000000000000 R12: ffffc90000117ab4 [ 286.565716][ C1] R13: 0000000000000044 R14: 0000000000004000 R15: ffffffff8a867c2d [ 286.565728][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 286.565740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.565749][ C1] CR2: 0000562a86698348 CR3: 000000000c976000 CR4: 0000000000350ee0 [ 286.565757][ C1] Call Trace: [ 286.565761][ C1] [ 286.565765][ C1] ? show_regs+0x8f/0xa0 [ 286.565780][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 286.565794][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.565811][ C1] ? nmi_handle+0x1a6/0x570 [ 286.565825][ C1] ? insn_get_modrm+0x1ab/0x730 [ 286.565838][ C1] ? default_do_nmi+0x69/0x160 [ 286.565854][ C1] ? exc_nmi+0x171/0x1e0 [ 286.565868][ C1] ? end_repeat_nmi+0x16/0x31 [ 286.565888][ C1] ? insn_get_modrm+0x153/0x730 [ 286.565901][ C1] ? insn_get_modrm+0x1ab/0x730 [ 286.565913][ C1] ? insn_get_modrm+0x1ab/0x730 [ 286.565926][ C1] ? insn_get_modrm+0x1ab/0x730 [ 286.565939][ C1] [ 286.565942][ C1] [ 286.565946][ C1] ? kmem_cache_alloc_lru+0x173/0x680 [ 286.565965][ C1] insn_get_sib+0x1ad/0x320 [ 286.565978][ C1] insn_get_displacement+0x23a/0x680 [ 286.565993][ C1] insn_get_immediate+0x550/0x1c50 [ 286.566006][ C1] ? kmem_cache_alloc_lru+0x173/0x680 [ 286.566024][ C1] insn_decode+0x2ae/0x340 [ 286.566037][ C1] text_poke_loc_init+0xdf/0x5d0 [ 286.566050][ C1] ? kmem_cache_alloc_lru+0x173/0x680 [ 286.566073][ C1] ? text_poke_memset+0x60/0x60 [ 286.566088][ C1] ? kmem_cache_alloc_lru+0x173/0x680 [ 286.566105][ C1] ? __jump_label_patch+0x1db/0x3f0 [ 286.566121][ C1] ? text_poke_queue+0xef/0x180 [ 286.566133][ C1] arch_jump_label_transform_queue+0xaf/0x110 [ 286.566152][ C1] __jump_label_update+0x125/0x420 [ 286.566173][ C1] jump_label_update+0x32e/0x410 [ 286.566191][ C1] static_key_disable_cpuslocked+0x154/0x1b0 [ 286.566211][ C1] static_key_disable+0x1a/0x20 [ 286.566228][ C1] toggle_allocation_gate+0x13f/0x250 [ 286.566244][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 286.566262][ C1] process_one_work+0x884/0x15c0 [ 286.566279][ C1] ? lock_sync+0x190/0x190 [ 286.566296][ C1] ? init_worker_pool+0x770/0x770 [ 286.566312][ C1] ? assign_work+0x1a0/0x240 [ 286.566327][ C1] worker_thread+0x8b9/0x1290 [ 286.566345][ C1] ? process_one_work+0x15c0/0x15c0 [ 286.566360][ C1] kthread+0x33c/0x440 [ 286.566372][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.566384][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.566398][ C1] ret_from_fork+0x45/0x80 [ 286.566412][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.566426][ C1] ret_from_fork_asm+0x11/0x20 [ 286.566447][ C1] [ 286.566600][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 286.927505][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 286.937328][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 286.947376][ T29] Call Trace: [ 286.950672][ T29] [ 286.953596][ T29] dump_stack_lvl+0xd9/0x1b0 [ 286.958497][ T29] panic+0x6a6/0x750 [ 286.962418][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 286.967533][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.972730][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 286.978101][ T29] ? watchdog+0xd3e/0x1210 [ 286.982514][ T29] watchdog+0xd4f/0x1210 [ 286.986750][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.992719][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.997917][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.002960][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.008934][ T29] kthread+0x33c/0x440 [ 287.012996][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.018197][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.023845][ T29] ret_from_fork+0x45/0x80 [ 287.028339][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.034057][ T29] ret_from_fork_asm+0x11/0x20 [ 287.038849][ T29] [ 287.042323][ T29] Kernel Offset: disabled [ 287.046632][ T29] Rebooting in 86400 seconds..