./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor5191993 <...> Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. execve("./syz-executor5191993", ["./syz-executor5191993"], 0x7ffc5d783090 /* 10 vars */) = 0 brk(NULL) = 0x55558556b000 brk(0x55558556bd40) = 0x55558556bd40 arch_prctl(ARCH_SET_FS, 0x55558556b3c0) = 0 set_tid_address(0x55558556b690) = 5840 set_robust_list(0x55558556b6a0, 24) = 0 rseq(0x55558556bce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor5191993", 4096) = 25 getrandom("\xc3\x53\xac\x34\x33\xee\x55\x3a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558556bd40 brk(0x55558558cd40) = 0x55558558cd40 brk(0x55558558d000) = 0x55558558d000 mprotect(0x7fc1afb90000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558556b690) = 5841 ./strace-static-x86_64: Process 5841 attached [pid 5841] set_robust_list(0x55558556b6a0, 24) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] getppid() = 0 [pid 5841] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5841] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5841] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5841] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5841] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5841] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5841] unshare(CLONE_NEWNS) = 0 [pid 5841] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5841] unshare(CLONE_NEWIPC) = 0 [pid 5841] unshare(CLONE_NEWCGROUP) = 0 [pid 5841] unshare(CLONE_NEWUTS) = 0 [pid 5841] unshare(CLONE_SYSVSEM) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "16777216", 8) = 8 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "536870912", 9) = 9 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1024", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "8192", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1024", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1024", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5841] close(3) = 0 [pid 5841] getpid() = 1 [pid 5841] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5846] rseq(0x7fc1afac6fe0, 0x20, 0, 0x53053053) = 0 [pid 5845] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5846] set_robust_list(0x7fc1afac69a0, 24 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] <... set_robust_list resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5846] futex(0x7fc1afb96328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] futex(0x7fc1afb96328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = 1 [pid 5846] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 5845] futex(0x7fc1afb9632c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... socketpair resumed>[3, 4]) = 0 [pid 5846] futex(0x7fc1afb9632c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5845] futex(0x7fc1afb96328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 5845] futex(0x7fc1afb9632c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... openat resumed>) = 5 [pid 5846] futex(0x7fc1afb9632c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5846] futex(0x7fc1afb96328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] futex(0x7fc1afb96328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] <... futex resumed>) = 0 [pid 5846] ioctl(5, NBD_SET_SOCK, 3 [pid 5845] futex(0x7fc1afb9632c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... ioctl resumed>) = 0 [pid 5846] futex(0x7fc1afb9632c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5846] futex(0x7fc1afb96328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] futex(0x7fc1afb96328, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] futex(0x7fc1afb9632c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] ioctl(5, NBD_DO_IT [pid 5845] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5845] futex(0x7fc1afb9633c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1afa85000 [pid 5845] mprotect(0x7fc1afa86000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1afaa5990, parent_tid=0x7fc1afaa5990, exit_signal=0, stack=0x7fc1afa85000, stack_size=0x20300, tls=0x7fc1afaa56c0}./strace-static-x86_64: Process 5847 attached => {parent_tid=[4]}, 88) = 4 [pid 5847] rseq(0x7fc1afaa5fe0, 0x20, 0, 0x53053053 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] <... rseq resumed>) = 0 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5847] set_robust_list(0x7fc1afaa59a0, 24 [pid 5845] futex(0x7fc1afb96338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] <... futex resumed>) = 0 [pid 5847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] futex(0x7fc1afb9633c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] ioctl(5, NBD_SET_SIZE_BLOCKS, 63) = 0 [pid 5845] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5847] futex(0x7fc1afb9633c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.056138][ T5847] nbd0: detected capacity change from 0 to 126 [pid 5847] futex(0x7fc1afb96338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] close(5 [pid 5846] <... ioctl resumed>) = 0 [pid 5846] futex(0x7fc1afb9632c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.243379][ T54] block nbd0: Receive control failed (result -104) [pid 5846] futex(0x7fc1afb96328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] kill(-2, SIGKILL [pid 5847] <... futex resumed>) = ? [pid 5846] <... futex resumed>) = ? [pid 5847] +++ killed by SIGKILL +++ [pid 5841] <... kill resumed>) = 0 [pid 5846] +++ killed by SIGKILL +++ [pid 5841] kill(2, SIGKILL) = 0 [pid 5841] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5841] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5841] getdents64(3, 0x55558556c730 /* 2 entries */, 32768) = 48 [pid 5841] getdents64(3, 0x55558556c730 /* 0 entries */, 32768) = 0 [pid 5841] close(3) = 0 [ 200.377704][ T58] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 30 seconds [ 230.140280][ T5198] udevd[5198]: worker [5842] /devices/virtual/block/nbd0 is taking a long time [ 230.456425][ T58] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 60 seconds [ 260.536472][ T58] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 90 seconds [ 290.616834][ T39] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 120 seconds [ 320.696231][ T39] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 150 seconds [ 350.304559][ T5198] udevd[5198]: worker [5842] /devices/virtual/block/nbd0 timeout; kill it [ 350.313331][ T5198] udevd[5198]: seq 8744 '/devices/virtual/block/nbd0' killed [ 350.776231][ T39] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 180 seconds [ 380.856243][ T39] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 210 seconds [ 410.936905][ T58] block nbd0: Possible stuck request ffff888025a57000: control (read@0,4096B). Runtime 240 seconds [ 430.136229][ T30] INFO: task syz-executor519:5845 blocked for more than 143 seconds. [ 430.144472][ T30] Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 430.152446][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.161228][ T30] task:syz-executor519 state:D stack:25912 pid:5845 tgid:5845 ppid:5841 task_flags:0x400040 flags:0x00004006 [ 430.173306][ T30] Call Trace: [ 430.176636][ T30] [ 430.179574][ T30] __schedule+0x18bc/0x4c40 [ 430.184124][ T30] ? __pfx___schedule+0x10/0x10 [ 430.189088][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.194150][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 430.200228][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.206239][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.212613][ T30] ? schedule+0x90/0x320 [ 430.217066][ T30] schedule+0x14b/0x320 [ 430.221265][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.226815][ T30] __mutex_lock+0x817/0x1010 [ 430.231448][ T30] ? mark_lock+0x9a/0x360 [ 430.235800][ T30] ? __mutex_lock+0x602/0x1010 [ 430.240699][ T30] ? bdev_release+0x17e/0x700 [ 430.245437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.250570][ T30] ? __asan_memset+0x23/0x50 [ 430.255209][ T30] bdev_release+0x17e/0x700 [ 430.259824][ T30] blkdev_release+0x15/0x20 [ 430.264364][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 430.269655][ T30] __fput+0x3e9/0x9f0 [ 430.273678][ T30] __x64_sys_close+0x7f/0x110 [ 430.278428][ T30] do_syscall_64+0xf3/0x230 [ 430.282970][ T30] ? clear_bhb_loop+0x35/0x90 [ 430.287737][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.293661][ T30] RIP: 0033:0x7fc1afb0da9a [ 430.298140][ T30] RSP: 002b:00007fff50a56d50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 430.306651][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc1afb0da9a [ 430.314631][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 430.322692][ T30] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fff50a56da0 [ 430.330783][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000297fe [ 430.338831][ T30] R13: 0000000000029830 R14: 00007fc1afb9633c R15: 00007fc1afb96320 [ 430.346901][ T30] [ 430.349975][ T30] [ 430.349975][ T30] Showing all locks held in the system: [ 430.357775][ T30] 1 lock held by khungtaskd/30: [ 430.362644][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 430.372647][ T30] 2 locks held by getty/5578: [ 430.377524][ T30] #0: ffff8880353c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.387412][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 430.397613][ T30] 1 lock held by udevd/5842: [ 430.402201][ T30] #0: ffff888144bf94c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 430.411525][ T30] 1 lock held by syz-executor519/5845: [ 430.417042][ T30] #0: ffff888144bf94c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 430.426710][ T30] [ 430.429074][ T30] ============================================= [ 430.429074][ T30] [ 430.437563][ T30] NMI backtrace for cpu 1 [ 430.437584][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 430.437606][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.437618][ T30] Call Trace: [ 430.437624][ T30] [ 430.437641][ T30] dump_stack_lvl+0x241/0x360 [ 430.437680][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.437712][ T30] ? __pfx__printk+0x10/0x10 [ 430.437752][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.437779][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.437799][ T30] ? _printk+0xd5/0x120 [ 430.437827][ T30] ? __pfx__printk+0x10/0x10 [ 430.437855][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.437879][ T30] ? __pfx__printk+0x10/0x10 [ 430.437910][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 430.437936][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.437961][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.437988][ T30] watchdog+0x1058/0x10a0 [ 430.438016][ T30] ? watchdog+0x1ea/0x10a0 [ 430.438046][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.438070][ T30] kthread+0x7a9/0x920 [ 430.438096][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438124][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.438150][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438175][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438204][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438230][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.438253][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 430.438278][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438305][ T30] ret_from_fork+0x4b/0x80 [ 430.438329][ T30] ? __pfx_kthread+0x10/0x10 [ 430.438356][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.438403][ T30] [ 430.438411][ T30] Sending NMI from CPU 1 to CPUs 0: [ 430.607803][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 430.608795][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.608813][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 430.608838][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.608853][ T30] Call Trace: [ 430.608862][ T30] [ 430.608872][ T30] dump_stack_lvl+0x241/0x360 [ 430.608911][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 430.608946][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.608981][ T30] ? __pfx__printk+0x10/0x10 [ 430.609011][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.609048][ T30] ? vscnprintf+0x5d/0x90 [ 430.609074][ T30] panic+0x349/0x880 [ 430.609107][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.609134][ T30] ? __pfx_panic+0x10/0x10 [ 430.609171][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 430.609200][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.609224][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 430.609252][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 430.609281][ T30] watchdog+0x1097/0x10a0 [ 430.609310][ T30] ? watchdog+0x1ea/0x10a0 [ 430.609342][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.609370][ T30] kthread+0x7a9/0x920 [ 430.609398][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609442][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.609470][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609497][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609529][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609556][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.609581][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 430.609608][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609638][ T30] ret_from_fork+0x4b/0x80 [ 430.609664][ T30] ? __pfx_kthread+0x10/0x10 [ 430.609694][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.609732][ T30] [ 430.790436][ T30] Kernel Offset: disabled [ 430.794782][ T30] Rebooting in 86400 seconds..