./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3891583140 <...> Warning: Permanently added '10.128.1.68' (ECDSA) to the list of known hosts. execve("./syz-executor3891583140", ["./syz-executor3891583140"], 0x7ffe1d0cd5b0 /* 10 vars */) = 0 brk(NULL) = 0x555556596000 brk(0x555556596c40) = 0x555556596c40 arch_prctl(ARCH_SET_FS, 0x555556596300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555565965d0) = 3615 set_robust_list(0x5555565965e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f95d078a440, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f95d078ab10}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f95d078a4e0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f95d078ab10}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3891583140", 4096) = 28 brk(0x5555565b7c40) = 0x5555565b7c40 brk(0x5555565b8000) = 0x5555565b8000 mprotect(0x7f95d084b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached , child_tidptr=0x5555565965d0) = 3616 [pid 3616] set_robust_list(0x5555565965e0, 24) = 0 [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f95d075a000 [pid 3616] mprotect(0x7f95d075b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f95d077a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3617], tls=0x7f95d077a700, child_tidptr=0x7f95d077a9d0) = 3617 [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3617 attached [pid 3617] set_robust_list(0x7f95d077a9e0, 24) = 0 [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = 1 [pid 3617] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... socketpair resumed>[4, 5]) = 0 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] <... futex resumed>) = 0 [pid 3617] dup(4 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... dup resumed>) = 6 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] <... futex resumed>) = 0 [pid 3617] ioctl(3, NBD_SET_SOCK, 6 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3616] <... futex resumed>) = 0 [pid 3617] <... openat resumed>) = 7 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] <... futex resumed>) = 0 [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... openat resumed>) = 8 [pid 3617] write(8, "13", 2) = 2 [pid 3617] ioctl(7, NBD_DO_IT [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) syzkaller login: [ 41.015574][ T3617] Increasing nr_hw_queues to 2 fails, fallback to 1 [pid 3616] exit_group(0 [pid 3617] <... ioctl resumed>) = ? [pid 3616] <... exit_group resumed>) = ? [ 41.174045][ T3617] block nbd0: shutting down sockets [pid 3617] +++ exited with 0 +++ [pid 3616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3621 attached , child_tidptr=0x5555565965d0) = 3621 [pid 3621] set_robust_list(0x5555565965e0, 24) = 0 [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f95d075a000 [pid 3621] mprotect(0x7f95d075b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3621] clone(child_stack=0x7f95d077a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3622 attached [pid 3622] set_robust_list(0x7f95d077a9e0, 24) = 0 [pid 3621] <... clone resumed>, parent_tid=[3622], tls=0x7f95d077a700, child_tidptr=0x7f95d077a9d0) = 3622 [pid 3622] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 3622] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... openat resumed>) = 3 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 3622] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... socketpair resumed>[4, 5]) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3621] <... futex resumed>) = 1 [pid 3622] ioctl(3, NBD_SET_SOCK, 4 [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... ioctl resumed>) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] dup(4 [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... dup resumed>) = 6 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... futex resumed>) = 0 [pid 3621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] ioctl(3, NBD_SET_SOCK, 6 [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... ioctl resumed>) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... openat resumed>) = 7 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... futex resumed>) = 0 [pid 3621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] <... futex resumed>) = 0 [pid 3622] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... ioctl resumed>) = 0 [pid 3622] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] <... futex resumed>) = 0 [pid 3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3621] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... openat resumed>) = 8 [pid 3622] write(8, "13", 2) = 2 [pid 3622] ioctl(7, NBD_DO_IT [pid 3621] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3621] exit_group(0 [pid 3622] <... ioctl resumed>) = ? [pid 3621] <... exit_group resumed>) = ? [pid 3622] +++ exited with 0 +++ [ 41.527297][ T3622] block nbd0: shutting down sockets [pid 3621] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3621, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565965d0) = 3623 ./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x5555565965e0, 24) = 0 [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f95d075a000 [pid 3623] mprotect(0x7f95d075b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3623] clone(child_stack=0x7f95d077a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3624 attached [pid 3624] set_robust_list(0x7f95d077a9e0, 24) = 0 [pid 3624] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... clone resumed>, parent_tid=[3624], tls=0x7f95d077a700, child_tidptr=0x7f95d077a9d0) = 3624 [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3624] <... futex resumed>) = 0 [pid 3624] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... openat resumed>) = 3 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3624] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = 1 [pid 3624] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... socketpair resumed>[4, 5]) = 0 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = 1 [pid 3624] ioctl(3, NBD_SET_SOCK, 4 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] dup(4 [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... dup resumed>) = 6 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3623] <... futex resumed>) = 0 [pid 3624] <... futex resumed>) = 0 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] ioctl(3, NBD_SET_SOCK, 6 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3623] <... futex resumed>) = 0 [pid 3624] <... openat resumed>) = 7 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... ioctl resumed>) = 0 [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3623] <... futex resumed>) = 0 [pid 3624] <... openat resumed>) = 8 [pid 3623] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] write(8, "13", 2) = 2 [pid 3624] ioctl(7, NBD_DO_IT [pid 3623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3623] exit_group(0) = ? [pid 3624] <... ioctl resumed>) = ? [ 41.890456][ T3624] block nbd0: shutting down sockets [pid 3624] +++ exited with 0 +++ [pid 3623] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3623, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565965d0) = 3625 ./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x5555565965e0, 24) = 0 [pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3625] setpgid(0, 0) = 0 [pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3625] write(3, "1000", 4) = 4 [pid 3625] close(3) = 0 [pid 3625] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f95d075a000 [pid 3625] mprotect(0x7f95d075b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3625] clone(child_stack=0x7f95d077a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3626 attached [pid 3626] set_robust_list(0x7f95d077a9e0, 24 [pid 3625] <... clone resumed>, parent_tid=[3626], tls=0x7f95d077a700, child_tidptr=0x7f95d077a9d0) = 3626 [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... set_robust_list resumed>) = 0 [pid 3626] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3626] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 3626] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] ioctl(3, NBD_SET_SOCK, 4 [pid 3625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3625] futex(0x7f95d08514fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f95d0739000 [pid 3625] mprotect(0x7f95d073a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3625] clone(child_stack=0x7f95d07593f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3627], tls=0x7f95d0759700, child_tidptr=0x7f95d07599d0) = 3627 ./strace-static-x86_64: Process 3627 attached [pid 3627] set_robust_list(0x7f95d07599e0, 24) = 0 [pid 3627] futex(0x7f95d08514f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3625] futex(0x7f95d08514f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] futex(0x7f95d08514fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3627] <... futex resumed>) = 0 [pid 3627] dup(4) = 6 [pid 3627] futex(0x7f95d08514fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7f95d08514f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f95d08514fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3627] <... futex resumed>) = 1 [pid 3627] ioctl(3, NBD_SET_SOCK, 6 [pid 3626] <... ioctl resumed>) = 0 [pid 3626] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3626] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... futex resumed>) = 0 [pid 3625] <... futex resumed>) = 1 [pid 3626] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... openat resumed>) = 7 [pid 3626] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] <... futex resumed>) = 0 [pid 3626] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... ioctl resumed>) = 0 [pid 3626] futex(0x7f95d08514ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] <... futex resumed>) = 0 [pid 3626] futex(0x7f95d08514e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3625] futex(0x7f95d08514e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3625] <... futex resumed>) = 0 [pid 3626] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3625] futex(0x7f95d08514ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3627] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 3626] <... openat resumed>) = 8 [pid 3626] write(8, "13", 2) = 2 [pid 3626] ioctl(7, NBD_DO_IT [pid 3627] futex(0x7f95d08514fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.061556][ T3627] block nbd0: Device being setup by another task [pid 3627] futex(0x7f95d08514f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 42.111847][ T3626] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 42.123588][ T3626] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 42.132002][ T3626] CPU: 1 PID: 3626 Comm: syz-executor389 Not tainted 5.19.0-rc3-syzkaller-00271-g6a0a17e6c6d1 #0 [ 42.142493][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.152536][ T3626] RIP: 0010:blk_mq_free_rqs+0x3ef/0x830 [ 42.158088][ T3626] Code: 89 de e8 34 63 6a fd 83 fb 3f 48 89 6c 24 18 0f 87 2e 02 00 00 e8 01 5f 6a fd bb 00 10 00 00 44 89 e1 48 d3 e3 48 8b 44 24 28 <42> 8a 04 30 84 c0 0f 85 ed 01 00 00 48 8b 04 24 8b 28 31 ff 89 ee [ 42.177687][ T3626] RSP: 0018:ffffc9000314f9e0 EFLAGS: 00010206 [ 42.183774][ T3626] RAX: 0000000000000000 RBX: 0000000000010000 RCX: 0000000000000004 [ 42.191732][ T3626] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000040 [ 42.199693][ T3626] RBP: ffffea0001c5bc08 R08: ffffffff841d1f0c R09: fffffbfff1c0709e [ 42.207651][ T3626] R10: fffffbfff1c0709e R11: 1ffffffff1c0709d R12: 0000000000000004 [ 42.215605][ T3626] R13: 1ffff11003c25452 R14: dffffc0000000000 R15: 0000000000000080 [ 42.223578][ T3626] FS: 00007f95d077a700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 42.232489][ T3626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.239055][ T3626] CR2: 00007f95d0759718 CR3: 00000000798d6000 CR4: 00000000003506e0 [ 42.247013][ T3626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.254965][ T3626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.262920][ T3626] Call Trace: [ 42.266185][ T3626] [ 42.269107][ T3626] blk_mq_sched_free_rqs+0x1b0/0x2a0 [ 42.274385][ T3626] ? kernfs_put+0x481/0x490 [ 42.278872][ T3626] ? blk_mq_init_sched+0x8e0/0x8e0 [ 42.283973][ T3626] ? __kobject_del+0x1e0/0x300 [ 42.288722][ T3626] elevator_switch_mq+0x1db/0x6d0 [ 42.293745][ T3626] blk_mq_update_nr_hw_queues+0x5c8/0x12d0 [ 42.299547][ T3626] ? blk_mq_update_nr_requests+0x500/0x500 [ 42.305338][ T3626] ? blkdev_common_ioctl+0x6d6/0x2390 [ 42.310694][ T3626] ? mutex_lock_io_nested+0x60/0x60 [ 42.315889][ T3626] nbd_start_device+0x15d/0xb70 [ 42.320739][ T3626] ? bpf_lsm_capable+0x5/0x10 [ 42.325401][ T3626] ? security_capable+0xb1/0xd0 [ 42.330237][ T3626] nbd_ioctl+0x3b3/0xa40 [ 42.334474][ T3626] ? nbd_release+0x130/0x130 [ 42.339069][ T3626] ? memset+0x1f/0x40 [ 42.343053][ T3626] ? smack_file_ioctl+0x298/0x3a0 [ 42.348070][ T3626] ? smack_file_alloc_security+0xd0/0xd0 [ 42.353698][ T3626] ? nbd_release+0x130/0x130 [ 42.358295][ T3626] blkdev_ioctl+0x3a6/0x760 [ 42.362797][ T3626] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 42.368256][ T3626] ? bpf_lsm_file_ioctl+0x5/0x10 [ 42.373186][ T3626] ? security_file_ioctl+0x9d/0xb0 [ 42.378342][ T3626] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 42.383795][ T3626] __se_sys_ioctl+0xfb/0x170 [ 42.388375][ T3626] do_syscall_64+0x2b/0x70 [ 42.392782][ T3626] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 42.398671][ T3626] RIP: 0033:0x7f95d07cd329 [ 42.403072][ T3626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.422671][ T3626] RSP: 002b:00007f95d077a2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.431078][ T3626] RAX: ffffffffffffffda RBX: 00007f95d08514e0 RCX: 00007f95d07cd329 [ 42.439038][ T3626] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 42.447000][ T3626] RBP: 00007f95d081e194 R08: 0000000000000002 R09: 0000000000003331 [ 42.454958][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95d08514ec [ 42.462914][ T3626] R13: 00007f95d077a2f0 R14: 00007f95d08514e8 R15: 0000000000000002 [ 42.470881][ T3626] [ 42.473883][ T3626] Modules linked in: [ 42.478018][ T3626] ---[ end trace 0000000000000000 ]--- [ 42.483705][ T3626] RIP: 0010:blk_mq_free_rqs+0x3ef/0x830 [ 42.489517][ T3626] Code: 89 de e8 34 63 6a fd 83 fb 3f 48 89 6c 24 18 0f 87 2e 02 00 00 e8 01 5f 6a fd bb 00 10 00 00 44 89 e1 48 d3 e3 48 8b 44 24 28 <42> 8a 04 30 84 c0 0f 85 ed 01 00 00 48 8b 04 24 8b 28 31 ff 89 ee [ 42.509233][ T3626] RSP: 0018:ffffc9000314f9e0 EFLAGS: 00010206 [ 42.515350][ T3626] RAX: 0000000000000000 RBX: 0000000000010000 RCX: 0000000000000004 [ 42.523359][ T3626] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000040 [ 42.531346][ T3626] RBP: ffffea0001c5bc08 R08: ffffffff841d1f0c R09: fffffbfff1c0709e [ 42.539346][ T3626] R10: fffffbfff1c0709e R11: 1ffffffff1c0709d R12: 0000000000000004 [ 42.547400][ T3626] R13: 1ffff11003c25452 R14: dffffc0000000000 R15: 0000000000000080 [ 42.555400][ T3626] FS: 00007f95d077a700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.564347][ T3626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.570918][ T3626] CR2: 00007f95d080e4d0 CR3: 00000000798d6000 CR4: 00000000003506f0 [ 42.578971][ T3626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.586970][ T3626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.594957][ T3626] Kernel panic - not syncing: Fatal exception [ 42.601168][ T3626] Kernel Offset: disabled [ 42.605488][ T3626] Rebooting in 86400 seconds..