./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2524580262 <...> Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. execve("./syz-executor2524580262", ["./syz-executor2524580262"], 0x7ffef92b4230 /* 10 vars */) = 0 brk(NULL) = 0x5555561ac000 brk(0x5555561acc40) = 0x5555561acc40 arch_prctl(ARCH_SET_FS, 0x5555561ac300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2524580262", 4096) = 28 brk(0x5555561cdc40) = 0x5555561cdc40 brk(0x5555561ce000) = 0x5555561ce000 mprotect(0x7f9da55d3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3614 attached , child_tidptr=0x5555561ac5d0) = 3614 [pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3614] setpgid(0, 0) = 0 [pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3614] write(3, "1000", 4) = 4 [pid 3614] close(3) = 0 [pid 3614] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3614] ioctl(3, NBD_SET_SIZE_BLOCKS, 1) = 0 [pid 3614] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 3614] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 3614] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 6 [ 43.164420][ T3614] nbd0: detected capacity change from 0 to 2 [pid 3614] ioctl(6, NBD_DO_IT [pid 3613] kill(-3614, SIGKILL) = 0 [pid 3614] <... ioctl resumed>) = ? [pid 3613] kill(3614, SIGKILL) = 0 [ 48.107087][ T3614] block nbd0: shutting down sockets [pid 3613] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3613] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3613] getdents64(3, 0x5555561ad620 /* 2 entries */, 32768) = 48 [pid 3613] getdents64(3, 0x5555561ad620 /* 0 entries */, 32768) = 0 [pid 3613] close(3) = 0 [ 73.741517][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 30 seconds [ 76.303027][ T14] cfg80211: failed to load regulatory.db [ 103.821494][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 60 seconds [ 104.907351][ T2973] udevd[2973]: worker [3616] /devices/virtual/block/nbd0 is taking a long time [ 133.901510][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 90 seconds [ 163.981485][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 120 seconds [ 194.063180][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 150 seconds [ 224.141420][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 180 seconds [ 225.446652][ T2973] udevd[2973]: worker [3616] /devices/virtual/block/nbd0 timeout; kill it [ 225.455974][ T2973] udevd[2973]: seq 7461 '/devices/virtual/block/nbd0' killed [ 254.221406][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 210 seconds [ 284.301414][ T9] block nbd0: Possible stuck request ffff88801eab8000: control (read@0,1024B). Runtime 240 seconds [ 286.221468][ T28] INFO: task syz-executor252:3614 blocked for more than 143 seconds. [ 286.229672][ T28] Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0 [ 286.237271][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.245986][ T28] task:syz-executor252 state:D stack:25856 pid: 3614 ppid: 3613 flags:0x00004006 [ 286.255251][ T28] Call Trace: [ 286.258533][ T28] [ 286.261502][ T28] __schedule+0x957/0xe20 [ 286.265923][ T28] ? release_firmware_map_entry+0x184/0x184 [ 286.271861][ T28] ? __mutex_trylock_common+0x8e/0x2f0 [ 286.277386][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.282670][ T28] schedule+0xcb/0x190 [ 286.286746][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.292153][ T28] __mutex_lock_common+0xecf/0x26c0 [ 286.297375][ T28] ? blkdev_put+0x100/0x730 [ 286.301968][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 286.307188][ T28] ? __fsnotify_parent+0x4fd/0x710 [ 286.312423][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.317043][ T28] mutex_lock_nested+0x17/0x20 [ 286.321866][ T28] blkdev_put+0x100/0x730 [ 286.326204][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.332243][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.336836][ T28] blkdev_close+0x55/0x80 [ 286.341167][ T28] __fput+0x3b9/0x820 [ 286.345282][ T28] task_work_run+0x146/0x1c0 [ 286.349905][ T28] do_exit+0x55e/0x20a0 [ 286.354136][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 286.359519][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.365568][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.371048][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 286.376256][ T28] do_group_exit+0x23b/0x2f0 [ 286.380858][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.386201][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 286.391453][ T28] get_signal+0x172f/0x1780 [ 286.395996][ T28] ? ptrace_notify+0x340/0x340 [ 286.400745][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.405990][ T28] arch_do_signal_or_restart+0x8d/0x750 [ 286.411775][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.416975][ T28] ? ptrace_notify+0x245/0x340 [ 286.421774][ T28] ? get_sigframe_size+0x10/0x10 [ 286.426723][ T28] ? vtime_user_exit+0x2b2/0x3e0 [ 286.431850][ T28] ? exit_to_user_mode_loop+0x42/0x160 [ 286.437394][ T28] exit_to_user_mode_loop+0x74/0x160 [ 286.442744][ T28] exit_to_user_mode_prepare+0xad/0x110 [ 286.448295][ T28] syscall_exit_to_user_mode+0x2e/0x60 [ 286.453827][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.459737][ T28] RIP: 0033:0x7f9da55666a9 [ 286.464197][ T28] RSP: 002b:00007ffc9fcc0948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.472677][ T28] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f9da55666a9 [ 286.480640][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 286.488697][ T28] RBP: 0000000000000000 R08: 00007ffc9fcc0ae8 R09: 00007ffc9fcc0ae8 [ 286.496727][ T28] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f9da5525730 [ 286.504744][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 286.512782][ T28] [ 286.515818][ T28] [ 286.515818][ T28] Showing all locks held in the system: [ 286.523610][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.528949][ T28] #0: ffffffff8cd20a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.539475][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.544774][ T28] #0: ffffffff8cd21270 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.555817][ T28] 1 lock held by khungtaskd/28: [ 286.560665][ T28] #0: ffffffff8cd208a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 286.570050][ T28] 2 locks held by getty/3285: [ 286.574744][ T28] #0: ffff8880278a9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.584572][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 286.594740][ T28] 1 lock held by syz-executor252/3614: [ 286.600179][ T28] #0: ffff8881474fd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 286.609650][ T28] 1 lock held by udevd/3616: [ 286.614270][ T28] #0: ffff8881474fd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 [ 286.624229][ T28] [ 286.626552][ T28] ============================================= [ 286.626552][ T28] [ 286.635012][ T28] NMI backtrace for cpu 1 [ 286.639338][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0 [ 286.649130][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.659178][ T28] Call Trace: [ 286.662448][ T28] [ 286.665372][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.670061][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.675337][ T28] ? panic+0x76b/0x76b [ 286.679473][ T28] ? console_unlock+0x6bd/0x6f0 [ 286.684360][ T28] ? console_trylock_spinning+0x450/0x450 [ 286.690089][ T28] ? nmi_cpu_backtrace+0x248/0x4b0 [ 286.695270][ T28] nmi_cpu_backtrace+0x47c/0x4b0 [ 286.700205][ T28] ? vprintk_emit+0x109/0x1e0 [ 286.704877][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 286.711022][ T28] ? _printk+0xcf/0x10f [ 286.715169][ T28] ? panic+0x76b/0x76b [ 286.719227][ T28] ? __wake_up_klogd+0xcd/0x100 [ 286.724077][ T28] ? panic+0x76b/0x76b [ 286.728141][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.734243][ T28] nmi_trigger_cpumask_backtrace+0x169/0x280 [ 286.740332][ T28] watchdog+0xcd5/0xd20 [ 286.744516][ T28] kthread+0x266/0x300 [ 286.748575][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.753594][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.758179][ T28] ret_from_fork+0x1f/0x30 [ 286.762606][ T28] [ 286.765709][ T28] Sending NMI from CPU 1 to CPUs 0: [ 286.770924][ C0] NMI backtrace for cpu 0 [ 286.770933][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0 [ 286.770948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.770957][ C0] Workqueue: events_unbound toggle_allocation_gate [ 286.771037][ C0] RIP: 0010:validate_chain+0x12e/0x6600 [ 286.771057][ C0] Code: 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 20 fa 8f be 08 00 00 00 e8 fa 39 73 00 48 0f a3 1d 42 14 90 0e <72> 24 48 c7 c0 40 9f 79 91 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 8c [ 286.771068][ C0] RSP: 0018:ffffc900001071c0 EFLAGS: 00000057 [ 286.771079][ C0] RAX: 0000000000000001 RBX: 0000000000000091 RCX: ffffffff816a0bf6 [ 286.771089][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffa2050 [ 286.771098][ C0] RBP: ffffc900001074f8 R08: dffffc0000000000 R09: fffffbfff1ff440b [ 286.771108][ C0] R10: fffffbfff1ff440b R11: 1ffffffff1ff440a R12: dffffc0000000000 [ 286.771118][ C0] R13: ffff88801224bb00 R14: 4995a43c3fc7b31e R15: 0000000000000000 [ 286.771127][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 286.771139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.771154][ C0] CR2: 000055bf1b372600 CR3: 000000000ca8e000 CR4: 00000000003506f0 [ 286.771166][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.771173][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.771182][ C0] Call Trace: [ 286.771187][ C0] [ 286.771194][ C0] ? reacquire_held_locks+0x680/0x680 [ 286.771214][ C0] ? reacquire_held_locks+0x680/0x680 [ 286.771232][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.771248][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.771264][ C0] ? reacquire_held_locks+0x680/0x680 [ 286.771279][ C0] ? update_group_capacity+0x46a/0x7b0 [ 286.771296][ C0] ? validate_chain+0x126/0x6600 [ 286.771314][ C0] ? validate_chain+0x126/0x6600 [ 286.771329][ C0] ? validate_chain+0x126/0x6600 [ 286.771348][ C0] ? reacquire_held_locks+0x680/0x680 [ 286.771363][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.771380][ C0] ? mark_lock+0x9a/0x350 [ 286.771395][ C0] __lock_acquire+0x1292/0x1f60 [ 286.771416][ C0] lock_acquire+0x1a7/0x400 [ 286.771430][ C0] ? __get_locked_pte+0x169/0x1c0 [ 286.771462][ C0] ? read_lock_is_recursive+0x10/0x10 [ 286.771480][ C0] ? __text_poke+0x83f/0x9d0 [ 286.771508][ C0] ? __lock_acquire+0x1f60/0x1f60 [ 286.771523][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.771541][ C0] _raw_spin_lock+0x2a/0x40 [ 286.771557][ C0] ? __get_locked_pte+0x169/0x1c0 [ 286.771569][ C0] __get_locked_pte+0x169/0x1c0 [ 286.771583][ C0] __text_poke+0x272/0x9d0 [ 286.771596][ C0] ? kmem_cache_alloc_bulk+0x164/0x580 [ 286.771626][ C0] ? __text_poke+0x9d0/0x9d0 [ 286.771639][ C0] ? text_poke+0x90/0x90 [ 286.771649][ C0] ? kmem_cache_alloc_node_trace+0xe5/0x360 [ 286.771664][ C0] ? perf_event_text_poke+0x24f/0x320 [ 286.771694][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.771710][ C0] ? perf_event_bpf_output+0x240/0x240 [ 286.771732][ C0] text_poke_bp_batch+0x49e/0x970 [ 286.771748][ C0] ? kmem_cache_alloc_bulk+0x164/0x580 [ 286.771763][ C0] ? text_poke_loc_init+0x510/0x510 [ 286.771778][ C0] ? __jump_label_update+0x38e/0x3b0 [ 286.771810][ C0] text_poke_finish+0x16/0x30 [ 286.771822][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 286.771838][ C0] static_key_disable_cpuslocked+0xc8/0x1b0 [ 286.771856][ C0] static_key_disable+0x16/0x20 [ 286.771870][ C0] toggle_allocation_gate+0x3d8/0x470 [ 286.771886][ C0] ? virt_to_slab+0x2c0/0x2c0 [ 286.771902][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.771917][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.771931][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.771952][ C0] process_one_work+0x81c/0xd10 [ 286.771990][ C0] ? worker_detach_from_pool+0x260/0x260 [ 286.772007][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.772021][ C0] ? kthread_data+0x4d/0xc0 [ 286.772036][ C0] ? wq_worker_running+0x95/0x190 [ 286.772051][ C0] worker_thread+0xb14/0x1330 [ 286.772078][ C0] kthread+0x266/0x300 [ 286.772091][ C0] ? rcu_lock_release+0x20/0x20 [ 286.772106][ C0] ? kthread_blkcg+0xd0/0xd0 [ 286.772120][ C0] ret_from_fork+0x1f/0x30 [ 286.772141][ C0] [ 286.772151][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.222 msecs [ 286.773539][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.773549][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0 [ 286.773566][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.773574][ T28] Call Trace: [ 286.773579][ T28] [ 286.773585][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.773607][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.773623][ T28] ? panic+0x76b/0x76b [ 286.773652][ T28] ? vscnprintf+0x59/0x80 [ 286.773670][ T28] panic+0x316/0x76b [ 286.773687][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 286.773704][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.773724][ T28] ? fb_is_primary_device+0xcc/0xcc [ 286.773742][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.773763][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.773780][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 286.773803][ T28] watchdog+0xd16/0xd20 [ 286.773831][ T28] kthread+0x266/0x300 [ 286.773846][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.773862][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.773880][ T28] ret_from_fork+0x1f/0x30 [ 286.773909][ T28] [ 286.776723][ T28] Kernel Offset: disabled [ 287.325337][ T28] Rebooting in 86400 seconds..