./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1953183555 <...> DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb forked to background, child pid 3183 [ 23.044068][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.054879][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.117' (ECDSA) to the list of known hosts. execve("./syz-executor1953183555", ["./syz-executor1953183555"], 0x7ffebdeb0070 /* 10 vars */) = 0 brk(NULL) = 0x5555565a5000 brk(0x5555565a5c40) = 0x5555565a5c40 arch_prctl(ARCH_SET_FS, 0x5555565a5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555565a55d0) = 3605 set_robust_list(0x5555565a55e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f9f54af9480, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f9f54af9b50}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f9f54af9520, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9f54af9b50}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1953183555", 4096) = 28 brk(0x5555565c6c40) = 0x5555565c6c40 brk(0x5555565c7000) = 0x5555565c7000 mprotect(0x7f9f54bbb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3606 attached , child_tidptr=0x5555565a55d0) = 3606 [pid 3606] set_robust_list(0x5555565a55e0, 24) = 0 [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3606] setpgid(0, 0) = 0 [pid 3606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1000", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54ac9000 [pid 3606] mprotect(0x7f9f54aca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3606] clone(child_stack=0x7f9f54ae93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3607 attached [pid 3607] set_robust_list(0x7f9f54ae99e0, 24 [pid 3606] <... clone resumed>, parent_tid=[3607], tls=0x7f9f54ae9700, child_tidptr=0x7f9f54ae99d0) = 3607 [pid 3607] <... set_robust_list resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] <... openat resumed>) = 3 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE) = 0 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] ioctl(4, NBD_SET_SOCK, 5) = 0 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 7 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] ioctl(7, NBD_SET_SOCK, 5) = 0 [pid 3607] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] <... futex resumed>) = 0 [pid 3607] futex(0x7f9f54bc14e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3606] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3606] <... futex resumed>) = 0 [pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3606] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] <... openat resumed>) = 8 [pid 3607] write(8, "14", 2) = 2 [pid 3607] ioctl(7, NBD_DO_IT [pid 3606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3606] exit_group(0 [pid 3607] <... ioctl resumed>) = ? [pid 3606] <... exit_group resumed>) = ? [pid 3607] +++ exited with 0 +++ [pid 3606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3606, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565a55d0) = 3611 ./strace-static-x86_64: Process 3611 attached [pid 3611] set_robust_list(0x5555565a55e0, 24) = 0 [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setpgid(0, 0) = 0 [pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1000", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54ac9000 [pid 3611] mprotect(0x7f9f54aca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3611] clone(child_stack=0x7f9f54ae93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3612], tls=0x7f9f54ae9700, child_tidptr=0x7f9f54ae99d0) = 3612 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3612 attached [pid 3612] set_robust_list(0x7f9f54ae99e0, 24) = 0 [pid 3612] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE) = 0 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 syzkaller login: [ 40.994736][ T3607] block nbd0: shutting down sockets [pid 3612] ioctl(4, NBD_SET_SOCK, 5) = 0 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 7 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] ioctl(7, NBD_SET_SOCK, 5) = 0 [pid 3612] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3611] <... futex resumed>) = 0 [pid 3612] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3611] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... openat resumed>) = 8 [pid 3611] <... futex resumed>) = 0 [pid 3612] write(8, "14", 2 [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... write resumed>) = 2 [pid 3612] ioctl(7, NBD_DO_IT [pid 3611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3611] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 41.111899][ T3612] debugfs: out of free dentries, can not create file 'timeout' [pid 3611] exit_group(0 [pid 3612] <... ioctl resumed>) = ? [pid 3611] <... exit_group resumed>) = ? [pid 3612] +++ exited with 0 +++ [pid 3611] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3611, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565a55d0) = 3613 ./strace-static-x86_64: Process 3613 attached [pid 3613] set_robust_list(0x5555565a55e0, 24) = 0 [pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3613] setpgid(0, 0) = 0 [pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1000", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54ac9000 [pid 3613] mprotect(0x7f9f54aca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3613] clone(child_stack=0x7f9f54ae93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3614 attached [pid 3614] set_robust_list(0x7f9f54ae99e0, 24 [pid 3613] <... clone resumed>, parent_tid=[3614], tls=0x7f9f54ae9700, child_tidptr=0x7f9f54ae99d0) = 3614 [pid 3614] <... set_robust_list resumed>) = 0 [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3614] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3613] <... futex resumed>) = 0 [pid 3614] ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3614] <... ioctl resumed>) = 0 [pid 3614] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] <... futex resumed>) = 0 [pid 3613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 41.303443][ T3612] block nbd0: shutting down sockets [pid 3614] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] <... openat resumed>) = 4 [pid 3613] <... futex resumed>) = 0 [pid 3614] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] <... futex resumed>) = 0 [pid 3613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3614] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] <... socketpair resumed>[5, 6]) = 0 [pid 3613] <... futex resumed>) = 0 [pid 3614] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] <... futex resumed>) = 0 [pid 3613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3614] ioctl(4, NBD_SET_SOCK, 5 [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3613] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54aa8000 [pid 3613] mprotect(0x7f9f54aa9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3613] clone(child_stack=0x7f9f54ac83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3615], tls=0x7f9f54ac8700, child_tidptr=0x7f9f54ac89d0) = 3615 [pid 3613] futex(0x7f9f54bc14f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] futex(0x7f9f54bc14fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3615 attached [pid 3615] set_robust_list(0x7f9f54ac89e0, 24) = 0 [pid 3615] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 7 [pid 3615] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3613] <... futex resumed>) = 0 [pid 3613] futex(0x7f9f54bc14f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3613] futex(0x7f9f54bc14fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3615] <... futex resumed>) = 1 [pid 3615] ioctl(7, NBD_SET_SOCK, 5 [pid 3614] <... ioctl resumed>) = 0 [pid 3614] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3614] futex(0x7f9f54bc14e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3615] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 3615] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3613] <... futex resumed>) = 0 [pid 3613] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] futex(0x7f9f54bc14f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3614] <... futex resumed>) = 0 [pid 3613] <... futex resumed>) = 1 [pid 3614] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3613] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] <... openat resumed>) = 8 [pid 3614] write(8, "14", 2) = 2 [ 41.440079][ T3615] block nbd0: Device being setup by another task [pid 3614] ioctl(7, NBD_DO_IT [pid 3613] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.491467][ T3614] kobject: can not set name properly! [pid 3613] exit_group(0) = ? [pid 3615] <... futex resumed>) = ? [pid 3614] <... ioctl resumed>) = ? [pid 3615] +++ exited with 0 +++ [pid 3614] +++ exited with 0 +++ [pid 3613] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3613, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565a55d0) = 3616 ./strace-static-x86_64: Process 3616 attached [pid 3616] set_robust_list(0x5555565a55e0, 24) = 0 [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54ac9000 [pid 3616] mprotect(0x7f9f54aca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f9f54ae93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3617 attached [pid 3617] set_robust_list(0x7f9f54ae99e0, 24 [pid 3616] <... clone resumed>, parent_tid=[3617], tls=0x7f9f54ae9700, child_tidptr=0x7f9f54ae99d0) = 3617 [pid 3617] <... set_robust_list resumed>) = 0 [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] <... ioctl resumed>) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 41.621864][ T3614] block nbd0: shutting down sockets [pid 3617] ioctl(4, NBD_SET_SOCK, 5) = 0 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... openat resumed>) = 7 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] ioctl(7, NBD_SET_SOCK, 5 [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f9f54bc14e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] <... futex resumed>) = 0 [pid 3617] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3616] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... openat resumed>) = 8 [pid 3617] write(8, "14", 2) = 2 [pid 3617] ioctl(7, NBD_DO_IT [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.761376][ T3617] kobject_add_internal failed for 0 (error: -12 parent: mq) [pid 3616] exit_group(0 [pid 3617] <... ioctl resumed>) = ? [pid 3616] <... exit_group resumed>) = ? [pid 3617] +++ exited with 0 +++ [pid 3616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached , child_tidptr=0x5555565a55d0) = 3618 [pid 3618] set_robust_list(0x5555565a55e0, 24) = 0 [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3618] setpgid(0, 0) = 0 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1000", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54ac9000 [pid 3618] mprotect(0x7f9f54aca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3618] clone(child_stack=0x7f9f54ae93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3619], tls=0x7f9f54ae9700, child_tidptr=0x7f9f54ae99d0) = 3619 [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3619 attached [pid 3619] set_robust_list(0x7f9f54ae99e0, 24) = 0 [pid 3619] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3619] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... futex resumed>) = 0 [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... futex resumed>) = 1 [pid 3619] ioctl(3, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE) = 0 [pid 3619] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... futex resumed>) = 0 [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... futex resumed>) = 1 [pid 3619] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4 [pid 3619] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... futex resumed>) = 0 [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... futex resumed>) = 1 [pid 3619] socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0 [pid 3619] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... futex resumed>) = 0 [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... futex resumed>) = 1 [ 41.890486][ T3617] block nbd0: shutting down sockets [pid 3619] ioctl(4, NBD_SET_SOCK, 5 [pid 3618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3618] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9f54aa8000 [pid 3618] mprotect(0x7f9f54aa9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3618] clone(child_stack=0x7f9f54ac83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3620], tls=0x7f9f54ac8700, child_tidptr=0x7f9f54ac89d0) = 3620 [pid 3618] futex(0x7f9f54bc14f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3620 attached [pid 3620] set_robust_list(0x7f9f54ac89e0, 24) = 0 [pid 3620] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 7 [pid 3620] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... futex resumed>) = 0 [pid 3618] futex(0x7f9f54bc14f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f9f54bc14fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] ioctl(7, NBD_SET_SOCK, 5 [pid 3619] <... ioctl resumed>) = 0 [pid 3619] futex(0x7f9f54bc14ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7f9f54bc14e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3618] futex(0x7f9f54bc14fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 3620] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 3618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3618] futex(0x7f9f54bc14e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3618] <... futex resumed>) = 1 [pid 3619] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 8 [pid 3618] futex(0x7f9f54bc14ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] write(8, "14", 2) = 2 [pid 3619] ioctl(7, NBD_DO_IT [pid 3620] futex(0x7f9f54bc14fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.010321][ T3620] block nbd0: Device being setup by another task [pid 3620] futex(0x7f9f54bc14f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 42.051318][ T3619] ------------[ cut here ]------------ [ 42.056787][ T3619] kernfs: can not remove 'nr_tags', no directory [ 42.063485][ T3619] WARNING: CPU: 0 PID: 3619 at fs/kernfs/dir.c:1579 kernfs_remove_by_name_ns+0xed/0x110 [ 42.073374][ T3619] Modules linked in: [ 42.077258][ T3619] CPU: 0 PID: 3619 Comm: syz-executor195 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 [ 42.087814][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 42.097998][ T3619] RIP: 0010:kernfs_remove_by_name_ns+0xed/0x110 [ 42.104372][ T3619] Code: c3 e8 f7 b3 7d ff 4c 89 e7 41 bc fe ff ff ff e8 09 08 60 ff eb da e8 e2 b3 7d ff 4c 89 ee 48 c7 c7 20 97 ff 89 e8 57 fc 3e 07 <0f> 0b 41 bc fe ff ff ff eb bc e8 64 77 ca ff e9 71 ff ff ff e8 5a [ 42.124149][ T3619] RSP: 0018:ffffc90003dffa38 EFLAGS: 00010286 [ 42.130541][ T3619] RAX: 0000000000000000 RBX: ffffffff8c880848 RCX: 0000000000000000 [ 42.138536][ T3619] RDX: ffff888024ac0000 RSI: ffffffff81620448 RDI: fffff520007bff39 [pid 3618] exit_group(0) = ? [pid 3620] <... futex resumed>) = ? [pid 3620] +++ exited with 0 +++ [ 42.146682][ T3619] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 42.154814][ T3619] R10: 0000000080000000 R11: 203a73666e72656b R12: 0000000000000000 [ 42.162967][ T3619] R13: ffffffff8a470600 R14: 0000000000000000 R15: 0000000000000001 [ 42.171054][ T3619] FS: 00007f9f54ae9700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.179992][ T3619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.186830][ T3619] CR2: 00007f9f54ba3004 CR3: 000000001ed1b000 CR4: 00000000003506f0 [ 42.195056][ T3619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.203158][ T3619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.211250][ T3619] Call Trace: [ 42.214531][ T3619] [ 42.217480][ T3619] remove_files+0x96/0x1c0 [ 42.222125][ T3619] sysfs_remove_group+0x87/0x170 [ 42.227060][ T3619] sysfs_remove_groups+0x5c/0xa0 [ 42.232152][ T3619] __kobject_del+0x89/0x1f0 [ 42.236653][ T3619] kobject_del+0x3c/0x60 [ 42.241103][ T3619] blk_mq_sysfs_unregister_hctxs+0x247/0x2c0 [ 42.247113][ T3619] ? blk_mq_sysfs_unregister+0x3f0/0x3f0 [ 42.253133][ T3619] ? blk_mq_debugfs_register_hctxs+0x140/0x140 [ 42.259290][ T3619] blk_mq_update_nr_hw_queues+0x489/0xdf0 [ 42.265157][ T3619] ? blk_mq_init_queue+0x140/0x140 [ 42.270390][ T3619] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 42.276210][ T3619] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.281788][ T3619] nbd_start_device+0x153/0xc30 [ 42.286657][ T3619] ? bpf_lsm_capable+0x5/0x10 [ 42.291463][ T3619] ? security_capable+0x8f/0xc0 [ 42.296346][ T3619] nbd_ioctl+0x5a1/0xbd0 [ 42.300692][ T3619] ? blkdev_bszset+0x1f0/0x1f0 [ 42.305480][ T3619] ? nbd_start_device+0xc30/0xc30 [ 42.310617][ T3619] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.316097][ T3619] ? lock_release+0x560/0x780 [ 42.320886][ T3619] ? ptrace_notify+0xfa/0x140 [ 42.325582][ T3619] ? nbd_start_device+0xc30/0xc30 [ 42.330703][ T3619] blkdev_ioctl+0x36e/0x800 [ 42.335228][ T3619] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 42.340728][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10 [ 42.345693][ T3619] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 42.351178][ T3619] __x64_sys_ioctl+0x193/0x200 [ 42.355963][ T3619] do_syscall_64+0x35/0xb0 [ 42.360408][ T3619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.366327][ T3619] RIP: 0033:0x7f9f54b3c369 [ 42.370781][ T3619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.390437][ T3619] RSP: 002b:00007f9f54ae92e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.398875][ T3619] RAX: ffffffffffffffda RBX: 00007f9f54bc14e0 RCX: 00007f9f54b3c369 [ 42.407101][ T3619] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 42.415230][ T3619] RBP: 00007f9f54b8e194 R08: 0000000000000002 R09: 0000000000003431 [ 42.423378][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f54bc14ec [ 42.431476][ T3619] R13: 00007f9f54ae92f0 R14: 00007f9f54bc14e8 R15: 0000000000000002 [ 42.439446][ T3619] [ 42.442630][ T3619] Kernel panic - not syncing: panic_on_warn set ... [ 42.449202][ T3619] CPU: 0 PID: 3619 Comm: syz-executor195 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 [ 42.459077][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 42.469115][ T3619] Call Trace: [ 42.472382][ T3619] [ 42.475299][ T3619] dump_stack_lvl+0xcd/0x134 [ 42.479881][ T3619] panic+0x2c8/0x622 [ 42.483771][ T3619] ? panic_print_sys_info.part.0+0x110/0x110 [ 42.489746][ T3619] ? __warn.cold+0x248/0x2c4 [ 42.494345][ T3619] ? kernfs_remove_by_name_ns+0xed/0x110 [ 42.499985][ T3619] __warn.cold+0x259/0x2c4 [ 42.504404][ T3619] ? kernfs_remove_by_name_ns+0xed/0x110 [ 42.510215][ T3619] report_bug+0x1bc/0x210 [ 42.514557][ T3619] handle_bug+0x3c/0x60 [ 42.518723][ T3619] exc_invalid_op+0x14/0x40 [ 42.523246][ T3619] asm_exc_invalid_op+0x16/0x20 [ 42.528103][ T3619] RIP: 0010:kernfs_remove_by_name_ns+0xed/0x110 [ 42.534354][ T3619] Code: c3 e8 f7 b3 7d ff 4c 89 e7 41 bc fe ff ff ff e8 09 08 60 ff eb da e8 e2 b3 7d ff 4c 89 ee 48 c7 c7 20 97 ff 89 e8 57 fc 3e 07 <0f> 0b 41 bc fe ff ff ff eb bc e8 64 77 ca ff e9 71 ff ff ff e8 5a [ 42.553969][ T3619] RSP: 0018:ffffc90003dffa38 EFLAGS: 00010286 [ 42.560042][ T3619] RAX: 0000000000000000 RBX: ffffffff8c880848 RCX: 0000000000000000 [ 42.568011][ T3619] RDX: ffff888024ac0000 RSI: ffffffff81620448 RDI: fffff520007bff39 [ 42.575988][ T3619] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 42.583963][ T3619] R10: 0000000080000000 R11: 203a73666e72656b R12: 0000000000000000 [ 42.591935][ T3619] R13: ffffffff8a470600 R14: 0000000000000000 R15: 0000000000000001 [ 42.599910][ T3619] ? vprintk+0x88/0x90 [ 42.603988][ T3619] ? kernfs_remove_by_name_ns+0xed/0x110 [ 42.609625][ T3619] remove_files+0x96/0x1c0 [ 42.614050][ T3619] sysfs_remove_group+0x87/0x170 [ 42.618997][ T3619] sysfs_remove_groups+0x5c/0xa0 [ 42.623946][ T3619] __kobject_del+0x89/0x1f0 [ 42.628465][ T3619] kobject_del+0x3c/0x60 [ 42.632722][ T3619] blk_mq_sysfs_unregister_hctxs+0x247/0x2c0 [ 42.638723][ T3619] ? blk_mq_sysfs_unregister+0x3f0/0x3f0 [ 42.644373][ T3619] ? blk_mq_debugfs_register_hctxs+0x140/0x140 [ 42.650544][ T3619] blk_mq_update_nr_hw_queues+0x489/0xdf0 [ 42.656279][ T3619] ? blk_mq_init_queue+0x140/0x140 [ 42.661401][ T3619] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 42.667234][ T3619] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.672712][ T3619] nbd_start_device+0x153/0xc30 [ 42.677577][ T3619] ? bpf_lsm_capable+0x5/0x10 [ 42.682261][ T3619] ? security_capable+0x8f/0xc0 [ 42.687122][ T3619] nbd_ioctl+0x5a1/0xbd0 [ 42.691374][ T3619] ? blkdev_bszset+0x1f0/0x1f0 [ 42.696153][ T3619] ? nbd_start_device+0xc30/0xc30 [ 42.701189][ T3619] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.706657][ T3619] ? lock_release+0x560/0x780 [ 42.711350][ T3619] ? ptrace_notify+0xfa/0x140 [ 42.716038][ T3619] ? nbd_start_device+0xc30/0xc30 [ 42.721074][ T3619] blkdev_ioctl+0x36e/0x800 [ 42.725685][ T3619] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 42.731159][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10 [ 42.736114][ T3619] ? blkdev_common_ioctl+0x1a30/0x1a30 [ 42.741589][ T3619] __x64_sys_ioctl+0x193/0x200 [ 42.746365][ T3619] do_syscall_64+0x35/0xb0 [ 42.750788][ T3619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.756684][ T3619] RIP: 0033:0x7f9f54b3c369 [ 42.761104][ T3619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.780719][ T3619] RSP: 002b:00007f9f54ae92e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.789134][ T3619] RAX: ffffffffffffffda RBX: 00007f9f54bc14e0 RCX: 00007f9f54b3c369 [ 42.797101][ T3619] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 42.805080][ T3619] RBP: 00007f9f54b8e194 R08: 0000000000000002 R09: 0000000000003431 [ 42.813052][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f54bc14ec [ 42.821026][ T3619] R13: 00007f9f54ae92f0 R14: 00007f9f54bc14e8 R15: 0000000000000002 [ 42.829016][ T3619] [ 42.832203][ T3619] Kernel Offset: disabled [ 42.836533][ T3619] Rebooting in 86400 seconds..