./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1017880212 <...> forked to background, child pid 3185 [ 25.371344][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.381669][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 25.679155][ T3275] sshd (3275) used greatest stack depth: 19312 bytes left OK syzkaller Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. execve("./syz-executor1017880212", ["./syz-executor1017880212"], 0x7fffd81ad350 /* 10 vars */) = 0 brk(NULL) = 0x555557066000 brk(0x555557066c40) = 0x555557066c40 arch_prctl(ARCH_SET_FS, 0x555557066300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1017880212", 4096) = 28 brk(0x555557087c40) = 0x555557087c40 brk(0x555557088000) = 0x555557088000 mprotect(0x7ff3240b5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3607 attached , child_tidptr=0x5555570665d0) = 3607 [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setpgid(0, 0) = 0 [pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1000", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_WRONLY) = 3 [pid 3607] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 3607] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 3607] ioctl(3, NBD_SET_SIZE_BLOCKS, 94) = 0 [pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 6 syzkaller login: [ 47.464941][ T3607] nbd0: detected capacity change from 0 to 188 [pid 3607] ioctl(6, NBD_DO_IT [pid 3606] kill(-3607, SIGKILL) = 0 [pid 3606] kill(3607, SIGKILL) = 0 [pid 3607] <... ioctl resumed>) = ? [ 52.402108][ T3607] block nbd0: shutting down sockets [pid 3606] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3606] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3606] getdents64(3, 0x555557067620 /* 2 entries */, 32768) = 48 [pid 3606] getdents64(3, 0x555557067620 /* 0 entries */, 32768) = 0 [pid 3606] close(3) = 0 [ 76.153641][ T14] cfg80211: failed to load regulatory.db [ 78.072100][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 30 seconds [ 107.957292][ T2972] udevd[2972]: worker [3609] /devices/virtual/block/nbd0 is taking a long time [ 108.152106][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 60 seconds [ 138.232068][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 90 seconds [ 168.312081][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 120 seconds [ 198.392057][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 150 seconds [ 228.303375][ T2972] udevd[2972]: worker [3609] /devices/virtual/block/nbd0 timeout; kill it [ 228.312621][ T2972] udevd[2972]: seq 7462 '/devices/virtual/block/nbd0' killed [ 228.471993][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 180 seconds [ 258.552026][ T52] block nbd0: Possible stuck request ffff88801e3e0000: control (read@0,4096B). Runtime 210 seconds [ 286.072026][ T28] INFO: task syz-executor101:3607 blocked for more than 143 seconds. [ 286.080169][ T28] Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 286.087992][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.096729][ T28] task:syz-executor101 state:D stack:25984 pid: 3607 ppid: 3606 flags:0x00004006 [ 286.106023][ T28] Call Trace: [ 286.109303][ T28] [ 286.112287][ T28] __schedule+0x957/0xe20 [ 286.116707][ T28] ? release_firmware_map_entry+0x184/0x184 [ 286.122636][ T28] ? __mutex_trylock_common+0x8e/0x2f0 [ 286.128150][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.133412][ T28] schedule+0xcb/0x190 [ 286.137494][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.142893][ T28] __mutex_lock_common+0xecf/0x26c0 [ 286.148123][ T28] ? blkdev_put+0x100/0x730 [ 286.152720][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 286.157925][ T28] ? __fsnotify_parent+0x4fd/0x710 [ 286.163126][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.167721][ T28] mutex_lock_nested+0x17/0x20 [ 286.172531][ T28] blkdev_put+0x100/0x730 [ 286.176882][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.182907][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.187516][ T28] blkdev_close+0x55/0x80 [ 286.191903][ T28] __fput+0x3b9/0x820 [ 286.195950][ T28] task_work_run+0x146/0x1c0 [ 286.200556][ T28] do_exit+0x55e/0x20a0 [ 286.204769][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 286.210160][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.216208][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.221688][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 286.226872][ T28] do_group_exit+0x23b/0x2f0 [ 286.231478][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.236747][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 286.242092][ T28] get_signal+0x172f/0x1780 [ 286.246621][ T28] ? ptrace_notify+0x340/0x340 [ 286.251371][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.256906][ T28] arch_do_signal_or_restart+0x8d/0x750 [ 286.262572][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.267759][ T28] ? ptrace_notify+0x245/0x340 [ 286.272567][ T28] ? get_sigframe_size+0x10/0x10 [ 286.277524][ T28] ? vtime_user_exit+0x2b2/0x3e0 [ 286.282534][ T28] ? exit_to_user_mode_loop+0x42/0x160 [ 286.288053][ T28] exit_to_user_mode_loop+0x74/0x160 [ 286.293410][ T28] exit_to_user_mode_prepare+0xad/0x110 [ 286.298998][ T28] syscall_exit_to_user_mode+0x2e/0x60 [ 286.304495][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.310446][ T28] RIP: 0033:0x7ff3240486b9 [ 286.314913][ T28] RSP: 002b:00007ffdc82eaae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.323351][ T28] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007ff3240486b9 [ 286.331322][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 286.339340][ T28] RBP: 0000000000000000 R08: 00007ffdc82eac88 R09: 00007ffdc82eac88 [ 286.347364][ T28] R10: 000000000000ffff R11: 0000000000000246 R12: 00007ff324007740 [ 286.355394][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 286.363513][ T28] [ 286.366550][ T28] [ 286.366550][ T28] Showing all locks held in the system: [ 286.374331][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.379615][ T28] #0: ffffffff8cd20970 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.390141][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.395484][ T28] #0: ffffffff8cd21170 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.406484][ T28] 1 lock held by khungtaskd/28: [ 286.411330][ T28] #0: ffffffff8cd207a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 286.420732][ T28] 2 locks held by getty/3284: [ 286.425434][ T28] #0: ffff88814b141098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.435268][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 286.445444][ T28] 1 lock held by syz-executor101/3607: [ 286.450896][ T28] #0: ffff88801e35b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 286.460682][ T28] 1 lock held by udevd/3609: [ 286.465304][ T28] #0: ffff88801e35b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 [ 286.475270][ T28] [ 286.477590][ T28] ============================================= [ 286.477590][ T28] [ 286.486042][ T28] NMI backtrace for cpu 0 [ 286.490366][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 286.500170][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.510218][ T28] Call Trace: [ 286.513489][ T28] [ 286.516411][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.521084][ T28] ? io_notif_register+0x5e7/0x5e7 [ 286.526193][ T28] ? panic+0x76b/0x76b [ 286.530315][ T28] ? console_unlock+0x6bd/0x6f0 [ 286.535172][ T28] ? console_trylock_spinning+0x450/0x450 [ 286.540884][ T28] ? nmi_cpu_backtrace+0x248/0x4b0 [ 286.546042][ T28] nmi_cpu_backtrace+0x47c/0x4b0 [ 286.550976][ T28] ? vprintk_emit+0x109/0x1e0 [ 286.555652][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 286.562235][ T28] ? _printk+0xcf/0x10f [ 286.566400][ T28] ? panic+0x76b/0x76b [ 286.570462][ T28] ? __wake_up_klogd+0xcd/0x100 [ 286.575321][ T28] ? panic+0x76b/0x76b [ 286.579389][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.585487][ T28] nmi_trigger_cpumask_backtrace+0x169/0x280 [ 286.591466][ T28] watchdog+0xcd5/0xd20 [ 286.595653][ T28] kthread+0x266/0x300 [ 286.599738][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.604755][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.609339][ T28] ret_from_fork+0x1f/0x30 [ 286.613787][ T28] [ 286.616930][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.622182][ C1] NMI backtrace for cpu 1 [ 286.622191][ C1] CPU: 1 PID: 41 Comm: kworker/u4:2 Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 286.622205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.622213][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.622269][ C1] RIP: 0010:__kasan_check_read+0x6/0x10 [ 286.622285][ C1] Code: 0c 31 db 48 c7 c7 8d 48 60 8c 4c 89 fe 31 c0 e8 07 79 59 08 eb d3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 89 f6 48 8b 0c 24 <31> d2 e9 03 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 [ 286.622296][ C1] RSP: 0018:ffffc90000b27670 EFLAGS: 00000046 [ 286.622307][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff813e0076 [ 286.622316][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e256e28 [ 286.622329][ C1] RBP: ffffc90000b27790 R08: ffffffff813dec1c R09: fffffbfff19bef49 [ 286.622339][ C1] R10: fffffbfff19bef49 R11: 1ffffffff19bef48 R12: 0000000000000000 [ 286.622348][ C1] R13: dffffc0000000000 R14: ffffffff8cdf7620 R15: 0000000000000000 [ 286.622357][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 286.622369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.622383][ C1] CR2: 00007ffd0999f028 CR3: 000000000ca8e000 CR4: 00000000003506e0 [ 286.622395][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.622403][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.622411][ C1] Call Trace: [ 286.622415][ C1] [ 286.622419][ C1] trace_tlb_flush+0x36/0x190 [ 286.622453][ C1] switch_mm_irqs_off+0x59d/0x8f0 [ 286.622469][ C1] ? switch_mm+0x190/0x190 [ 286.622481][ C1] ? text_poke_memcpy+0x5/0x10 [ 286.622513][ C1] ? text_poke_memcpy+0x5/0x10 [ 286.622526][ C1] ? __text_poke+0x9d0/0x9d0 [ 286.622536][ C1] ? __kmalloc+0xf7/0x370 [ 286.622549][ C1] __text_poke+0x749/0x9d0 [ 286.622562][ C1] ? __kmalloc+0xf7/0x370 [ 286.622575][ C1] ? __text_poke+0x9d0/0x9d0 [ 286.622588][ C1] ? text_poke+0x90/0x90 [ 286.622599][ C1] ? __kmalloc_node_track_caller+0xfd/0x3f0 [ 286.622613][ C1] ? perf_event_text_poke+0x24f/0x320 [ 286.622648][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.622664][ C1] ? perf_event_bpf_output+0x240/0x240 [ 286.622687][ C1] text_poke_bp_batch+0x6bc/0x970 [ 286.622703][ C1] ? __kmalloc_node_track_caller+0xfe/0x3f0 [ 286.622718][ C1] ? text_poke_loc_init+0x510/0x510 [ 286.622734][ C1] ? __jump_label_update+0x38e/0x3b0 [ 286.622767][ C1] text_poke_finish+0x16/0x30 [ 286.622778][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 286.622793][ C1] static_key_disable_cpuslocked+0xc8/0x1b0 [ 286.622809][ C1] static_key_disable+0x16/0x20 [ 286.622823][ C1] toggle_allocation_gate+0x3d8/0x470 [ 286.622837][ C1] ? virt_to_slab+0x2c0/0x2c0 [ 286.622853][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.622867][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.622880][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.622902][ C1] process_one_work+0x81c/0xd10 [ 286.622926][ C1] ? worker_detach_from_pool+0x260/0x260 [ 286.622942][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.622955][ C1] ? kthread_data+0x4d/0xc0 [ 286.622971][ C1] ? wq_worker_running+0x95/0x190 [ 286.622986][ C1] worker_thread+0xb14/0x1330 [ 286.623007][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.623028][ C1] kthread+0x266/0x300 [ 286.623040][ C1] ? rcu_lock_release+0x20/0x20 [ 286.623054][ C1] ? kthread_blkcg+0xd0/0xd0 [ 286.623068][ C1] ret_from_fork+0x1f/0x30 [ 286.623090][ C1] [ 286.623230][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.976638][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 286.986436][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.996483][ T28] Call Trace: [ 286.999766][ T28] [ 287.002707][ T28] dump_stack_lvl+0x1e3/0x2cb [ 287.007384][ T28] ? io_notif_register+0x5e7/0x5e7 [ 287.012499][ T28] ? panic+0x76b/0x76b [ 287.016568][ T28] ? vscnprintf+0x59/0x80 [ 287.020916][ T28] panic+0x316/0x76b [ 287.024806][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 287.030430][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 287.036581][ T28] ? fb_is_primary_device+0xcc/0xcc [ 287.041772][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.047854][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 287.053998][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 287.060413][ T28] watchdog+0xd16/0xd20 [ 287.064572][ T28] kthread+0x266/0x300 [ 287.068634][ T28] ? hungtask_pm_notify+0x50/0x50 [ 287.073650][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.078235][ T28] ret_from_fork+0x1f/0x30 [ 287.082663][ T28] [ 287.086032][ T28] Kernel Offset: disabled [ 287.090379][ T28] Rebooting in 86400 seconds..