./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1281109643 <...> Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. execve("./syz-executor1281109643", ["./syz-executor1281109643"], 0x7ffeafd1d840 /* 10 vars */) = 0 brk(NULL) = 0x55558b7fc000 brk(0x55558b7fcd40) = 0x55558b7fcd40 arch_prctl(ARCH_SET_FS, 0x55558b7fc3c0) = 0 set_tid_address(0x55558b7fc690) = 5089 set_robust_list(0x55558b7fc6a0, 24) = 0 rseq(0x55558b7fcce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1281109643", 4096) = 28 getrandom("\x07\x5c\x8c\x3f\x8e\x49\xad\xeb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558b7fcd40 brk(0x55558b81dd40) = 0x55558b81dd40 brk(0x55558b81e000) = 0x55558b81e000 mprotect(0x7f6e40105000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x55558b7fc690) = 5090 [pid 5090] set_robust_list(0x55558b7fc6a0, 24) = 0 [pid 5090] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setsid() = 1 [pid 5090] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5090] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5090] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5090] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5090] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5090] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5090] unshare(CLONE_NEWNS) = 0 [pid 5090] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5090] unshare(CLONE_NEWIPC) = 0 [pid 5090] unshare(CLONE_NEWCGROUP) = 0 [pid 5090] unshare(CLONE_NEWUTS) = 0 [pid 5090] unshare(CLONE_SYSVSEM) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "16777216", 8) = 8 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "536870912", 9) = 9 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1024", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "8192", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1024", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1024", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5090] close(3) = 0 [pid 5090] getpid() = 1 [pid 5090] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[3]}, 88) = 3 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] rseq(0x7f6e4003cfe0, 0x20, 0, 0x53053053 [pid 5093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] <... rseq resumed>) = 0 [pid 5093] futex(0x7f6e4010b328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] set_robust_list(0x7f6e4003c9a0, 24 [pid 5093] <... futex resumed>) = 0 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] futex(0x7f6e4010b32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5094] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 5094] futex(0x7f6e4010b32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] futex(0x7f6e4010b328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... futex resumed>) = 0 [pid 5093] futex(0x7f6e4010b328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 5093] <... futex resumed>) = 1 [pid 5094] <... socketpair resumed>[4, 5]) = 0 [pid 5093] futex(0x7f6e4010b32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] futex(0x7f6e4010b32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5093] futex(0x7f6e4010b328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] ioctl(3, NBD_SET_SOCK, 4 [pid 5093] <... futex resumed>) = 0 [pid 5093] futex(0x7f6e4010b32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... ioctl resumed>) = 0 [pid 5094] futex(0x7f6e4010b32c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5093] futex(0x7f6e4010b328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] ioctl(3, NBD_DO_IT [pid 5093] <... futex resumed>) = 0 [pid 5093] futex(0x7f6e4010b32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5093] futex(0x7f6e4010b33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6e3fffb000 [pid 5093] mprotect(0x7f6e3fffc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6e4001b990, parent_tid=0x7f6e4001b990, exit_signal=0, stack=0x7f6e3fffb000, stack_size=0x20300, tls=0x7f6e4001b6c0}./strace-static-x86_64: Process 5095 attached => {parent_tid=[4]}, 88) = 4 [pid 5095] rseq(0x7f6e4001bfe0, 0x20, 0, 0x53053053) = 0 [pid 5095] set_robust_list(0x7f6e4001b9a0, 24) = 0 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], [pid 5095] futex(0x7f6e4010b338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5093] futex(0x7f6e4010b338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 1 [pid 5095] ioctl(3, NBD_SET_SIZE_BLOCKS, 1 [pid 5093] futex(0x7f6e4010b33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... ioctl resumed>) = 0 [pid 5095] futex(0x7f6e4010b33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] <... futex resumed>) = 0 [ 74.172208][ T5095] nbd0: detected capacity change from 0 to 2 [pid 5095] futex(0x7f6e4010b338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] close(3) = 0 [pid 5093] close(4) = 0 [pid 5093] close(5) = 0 [pid 5093] close(6) = -1 EBADF (Bad file descriptor) [pid 5093] close(7) = -1 EBADF (Bad file descriptor) [pid 5093] close(8) = -1 EBADF (Bad file descriptor) [pid 5093] close(9) = -1 EBADF (Bad file descriptor) [pid 5093] close(10) = -1 EBADF (Bad file descriptor) [pid 5093] close(11) = -1 EBADF (Bad file descriptor) [pid 5093] close(12) = -1 EBADF (Bad file descriptor) [pid 5093] close(13) = -1 EBADF (Bad file descriptor) [pid 5093] close(14) = -1 EBADF (Bad file descriptor) [pid 5093] close(15) = -1 EBADF (Bad file descriptor) [pid 5093] close(16) = -1 EBADF (Bad file descriptor) [ 74.379204][ T4489] block nbd0: Receive control failed (result -104) [pid 5093] close(17) = -1 EBADF (Bad file descriptor) [pid 5093] close(18) = -1 EBADF (Bad file descriptor) [pid 5093] close(19) = -1 EBADF (Bad file descriptor) [pid 5093] close(20) = -1 EBADF (Bad file descriptor) [pid 5093] close(21) = -1 EBADF (Bad file descriptor) [pid 5093] close(22) = -1 EBADF (Bad file descriptor) [pid 5093] close(23) = -1 EBADF (Bad file descriptor) [pid 5093] close(24) = -1 EBADF (Bad file descriptor) [pid 5093] close(25) = -1 EBADF (Bad file descriptor) [pid 5093] close(26) = -1 EBADF (Bad file descriptor) [pid 5093] close(27) = -1 EBADF (Bad file descriptor) [pid 5093] close(28) = -1 EBADF (Bad file descriptor) [pid 5093] close(29) = -1 EBADF (Bad file descriptor) [pid 5093] exit_group(0) = ? [pid 5095] <... futex resumed>) = ? [pid 5095] +++ exited with 0 +++ [pid 5090] kill(-2, SIGKILL) = 0 [pid 5090] kill(2, SIGKILL) = 0 [pid 5090] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5090] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5090] getdents64(3, 0x55558b7fd730 /* 2 entries */, 32768) = 48 [pid 5090] getdents64(3, 0x55558b7fd730 /* 0 entries */, 32768) = 0 [pid 5090] close(3) = 0 [ 87.259045][ T9] cfg80211: failed to load regulatory.db [ 104.533323][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 30 seconds [ 134.272343][ T4545] udevd[4545]: worker [5091] /devices/virtual/block/nbd0 is taking a long time [ 134.612552][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 60 seconds [ 164.692561][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 90 seconds [ 194.776116][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 120 seconds [ 224.852620][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 150 seconds [ 254.440910][ T4545] udevd[4545]: worker [5091] /devices/virtual/block/nbd0 timeout; kill it [ 254.450366][ T4545] udevd[4545]: seq 7647 '/devices/virtual/block/nbd0' killed [ 254.932605][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 180 seconds [ 285.012613][ T58] block nbd0: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 210 seconds [ 286.932377][ T30] INFO: task syz-executor128:5094 blocked for more than 143 seconds. [ 286.940892][ T30] Not tainted 6.9.0-next-20240514-syzkaller #0 [ 286.947743][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.956971][ T30] task:syz-executor128 state:D stack:26040 pid:5094 tgid:5093 ppid:5090 flags:0x00004006 [ 286.967290][ T30] Call Trace: [ 286.970605][ T30] [ 286.973649][ T30] __schedule+0x17e8/0x4a50 [ 286.978381][ T30] ? __pfx___schedule+0x10/0x10 [ 286.983417][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.988573][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 286.994196][ T30] ? schedule+0x90/0x320 [ 286.998484][ T30] schedule+0x14b/0x320 [ 287.002786][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.008315][ T30] __mutex_lock+0x6a4/0xd70 [ 287.013001][ T30] ? __mutex_lock+0x527/0xd70 [ 287.017729][ T30] ? bdev_release+0x184/0x700 [ 287.022596][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.027672][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 287.033635][ T30] bdev_release+0x184/0x700 [ 287.038191][ T30] blkdev_release+0x15/0x20 [ 287.042786][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 287.048062][ T30] __fput+0x406/0x8b0 [ 287.052249][ T30] task_work_run+0x24f/0x310 [ 287.056941][ T30] ? __pfx_task_work_run+0x10/0x10 [ 287.062187][ T30] ptrace_notify+0x2d2/0x380 [ 287.066851][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 287.072117][ T30] ? __pfx_task_work_add+0x10/0x10 [ 287.077284][ T30] ? blkdev_ioctl+0x580/0x6b0 [ 287.082159][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 287.087271][ T30] syscall_exit_work+0xc6/0x190 [ 287.092293][ T30] syscall_exit_to_user_mode+0x273/0x370 [ 287.098066][ T30] do_syscall_64+0x102/0x240 [ 287.102742][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.107535][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.113635][ T30] RIP: 0033:0x7f6e40084479 [ 287.118084][ T30] RSP: 002b:00007f6e4003c228 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.126598][ T30] RAX: 0000000000000000 RBX: 00007f6e4010b328 RCX: 00007f6e40084479 [ 287.134701][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 287.142785][ T30] RBP: 00007f6e4010b320 R08: 00007f6e4003c6c0 R09: 00007f6e4003c6c0 [ 287.150802][ T30] R10: 00007f6e4003c6c0 R11: 0000000000000246 R12: 00007f6e4010b32c [ 287.158902][ T30] R13: 00007f6e400d818c R14: 64626e2f7665642f R15: 00007ffd7e135ba8 [ 287.167088][ T30] [ 287.170144][ T30] [ 287.170144][ T30] Showing all locks held in the system: [ 287.178015][ T30] 1 lock held by khungtaskd/30: [ 287.182951][ T30] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.193060][ T30] 2 locks held by getty/4841: [ 287.197790][ T30] #0: ffff88802aabb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.207897][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.218178][ T30] 1 lock held by udevd/5091: [ 287.222910][ T30] #0: ffff8880206c64c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc70 [ 287.232324][ T30] 1 lock held by syz-executor128/5094: [ 287.237814][ T30] #0: ffff8880206c64c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 287.247527][ T30] [ 287.249881][ T30] ============================================= [ 287.249881][ T30] [ 287.258401][ T30] NMI backtrace for cpu 1 [ 287.262756][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.9.0-next-20240514-syzkaller #0 [ 287.271729][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.281793][ T30] Call Trace: [ 287.285098][ T30] [ 287.288046][ T30] dump_stack_lvl+0x241/0x360 [ 287.292754][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.297985][ T30] ? __pfx__printk+0x10/0x10 [ 287.302672][ T30] ? vprintk_emit+0x631/0x770 [ 287.307378][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.312459][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.317469][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.323654][ T30] ? _printk+0xd5/0x120 [ 287.327832][ T30] ? __pfx__printk+0x10/0x10 [ 287.332441][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.337312][ T30] ? __pfx__printk+0x10/0x10 [ 287.341923][ T30] ? wq_watchdog_touch+0x72/0x110 [ 287.347048][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.353080][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.359096][ T30] watchdog+0xfde/0x1020 [ 287.363396][ T30] ? watchdog+0x1ea/0x1020 [ 287.367855][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.372571][ T30] kthread+0x2f0/0x390 [ 287.376682][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.381374][ T30] ? __pfx_kthread+0x10/0x10 [ 287.385986][ T30] ret_from_fork+0x4b/0x80 [ 287.390460][ T30] ? __pfx_kthread+0x10/0x10 [ 287.395093][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.399927][ T30] [ 287.403202][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.408492][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 287.409461][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.424469][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.9.0-next-20240514-syzkaller #0 [ 287.433426][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.443513][ T30] Call Trace: [ 287.446997][ T30] [ 287.449958][ T30] dump_stack_lvl+0x241/0x360 [ 287.454678][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.459916][ T30] ? __pfx__printk+0x10/0x10 [ 287.464562][ T30] ? vscnprintf+0x5d/0x90 [ 287.468959][ T30] panic+0x349/0x860 [ 287.472919][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.479111][ T30] ? __pfx_panic+0x10/0x10 [ 287.483572][ T30] ? nmi_backtrace_stall_check+0x431/0x440 [ 287.489426][ T30] ? irq_work_queue+0xd1/0x150 [ 287.494230][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.500234][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.506332][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.512340][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.518545][ T30] watchdog+0x101d/0x1020 [ 287.522909][ T30] ? watchdog+0x1ea/0x1020 [ 287.527369][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.532067][ T30] kthread+0x2f0/0x390 [ 287.536163][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.540857][ T30] ? __pfx_kthread+0x10/0x10 [ 287.545467][ T30] ret_from_fork+0x4b/0x80 [ 287.549910][ T30] ? __pfx_kthread+0x10/0x10 [ 287.554526][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.559333][ T30] [ 287.562463][ T30] Kernel Offset: disabled [ 287.566800][ T30] Rebooting in 86400 seconds..