./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4101860439 <...> Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. execve("./syz-executor4101860439", ["./syz-executor4101860439"], 0x7fff9addfc60 /* 10 vars */) = 0 brk(NULL) = 0x5555560b6000 brk(0x5555560b6c40) = 0x5555560b6c40 arch_prctl(ARCH_SET_FS, 0x5555560b6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4101860439", 4096) = 28 brk(0x5555560d7c40) = 0x5555560d7c40 brk(0x5555560d8000) = 0x5555560d8000 mprotect(0x7f81e6b91000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached , child_tidptr=0x5555560b65d0) = 3612 [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3612] setpgid(0, 0) = 0 [pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1000", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY|O_APPEND|O_DIRECT|O_NOATIME) = 3 [pid 3612] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4 [pid 3612] socketpair(AF_UNIX, SOCK_STREAM, 0, [5, 6]) = 0 [pid 3612] ioctl(4, NBD_SET_SOCK, 5) = 0 [pid 3612] ioctl(3, NBD_SET_SIZE_BLOCKS, 2047) = 0 syzkaller login: [ 40.996385][ T3612] nbd0: detected capacity change from 0 to 4094 [pid 3612] ioctl(3, NBD_DO_IT [pid 3611] kill(-3612, SIGKILL) = 0 [pid 3611] kill(3612, SIGKILL) = 0 [pid 3612] <... ioctl resumed>) = ? [ 45.949529][ T3612] block nbd0: shutting down sockets [pid 3611] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3611] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3611] getdents64(3, 0x5555560b7620 /* 2 entries */, 32768) = 48 [pid 3611] getdents64(3, 0x5555560b7620 /* 0 entries */, 32768) = 0 [pid 3611] close(3) = 0 [ 71.063211][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 30 seconds [ 76.184579][ T141] cfg80211: failed to load regulatory.db [ 101.143445][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 60 seconds [ 101.588624][ T2973] udevd[2973]: worker [3614] /devices/virtual/block/nbd0 is taking a long time [ 131.223182][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 90 seconds [ 161.303208][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 120 seconds [ 191.383207][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 150 seconds [ 221.463212][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 180 seconds [ 222.326200][ T2973] udevd[2973]: worker [3614] /devices/virtual/block/nbd0 timeout; kill it [ 222.335437][ T2973] udevd[2973]: seq 7461 '/devices/virtual/block/nbd0' killed [ 251.543295][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 210 seconds [ 281.623193][ T753] block nbd0: Possible stuck request ffff88801eeb8000: control (read@0,4096B). Runtime 240 seconds [ 286.103196][ T28] INFO: task syz-executor410:3612 blocked for more than 143 seconds. [ 286.111411][ T28] Not tainted 6.0.0-rc4-syzkaller-00126-g26b1224903b3 #0 [ 286.119898][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.128726][ T28] task:syz-executor410 state:D stack:25984 pid: 3612 ppid: 3611 flags:0x00004006 [ 286.138005][ T28] Call Trace: [ 286.141351][ T28] [ 286.144404][ T28] __schedule+0x957/0xe20 [ 286.148853][ T28] ? release_firmware_map_entry+0x184/0x184 [ 286.154808][ T28] ? __mutex_trylock_common+0x8e/0x2f0 [ 286.160321][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.165635][ T28] schedule+0xcb/0x190 [ 286.169708][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.175124][ T28] __mutex_lock_common+0xecf/0x26c0 [ 286.180332][ T28] ? blkdev_put+0x100/0x730 [ 286.185016][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 286.190223][ T28] ? __fsnotify_parent+0x4fd/0x710 [ 286.195420][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.200010][ T28] mutex_lock_nested+0x17/0x20 [ 286.204940][ T28] blkdev_put+0x100/0x730 [ 286.209289][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.213931][ T28] blkdev_close+0x55/0x80 [ 286.218261][ T28] __fput+0x3b9/0x820 [ 286.222271][ T28] task_work_run+0x146/0x1c0 [ 286.226988][ T28] do_exit+0x55e/0x20a0 [ 286.231193][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 286.236644][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.242638][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.248197][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 286.253375][ T28] do_group_exit+0x23b/0x2f0 [ 286.257950][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.263225][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 286.268450][ T28] get_signal+0x172f/0x1780 [ 286.272983][ T28] ? ptrace_notify+0x340/0x340 [ 286.277806][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.283118][ T28] arch_do_signal_or_restart+0x8d/0x750 [ 286.288727][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.293951][ T28] ? ptrace_notify+0x245/0x340 [ 286.298722][ T28] ? get_sigframe_size+0x10/0x10 [ 286.303780][ T28] ? vtime_user_exit+0x2b2/0x3e0 [ 286.308767][ T28] ? exit_to_user_mode_loop+0x42/0x160 [ 286.314316][ T28] exit_to_user_mode_loop+0x74/0x160 [ 286.319608][ T28] exit_to_user_mode_prepare+0xad/0x110 [ 286.325251][ T28] syscall_exit_to_user_mode+0x2e/0x60 [ 286.330717][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.336644][ T28] RIP: 0033:0x7f81e6b246b9 [ 286.341060][ T28] RSP: 002b:00007ffefc72a0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.349593][ T28] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f81e6b246b9 [ 286.357616][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.365704][ T28] RBP: 0000000000000000 R08: 00007ffefc72a248 R09: 00007ffefc72a248 [ 286.373784][ T28] R10: 00007ffefc72a248 R11: 0000000000000246 R12: 00007f81e6ae3740 [ 286.381744][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 286.389826][ T28] [ 286.392883][ T28] [ 286.392883][ T28] Showing all locks held in the system: [ 286.400685][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.406027][ T28] #0: ffffffff8cd20a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.416654][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.421935][ T28] #0: ffffffff8cd21270 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.432954][ T28] 1 lock held by khungtaskd/28: [ 286.437825][ T28] #0: ffffffff8cd208a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 286.447213][ T28] 2 locks held by getty/3290: [ 286.451884][ T28] #0: ffff88814a865098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.461708][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 286.471900][ T28] 1 lock held by syz-executor410/3612: [ 286.477405][ T28] #0: ffff88801ee704c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 286.486900][ T28] 1 lock held by udevd/3614: [ 286.491485][ T28] #0: ffff88801ee704c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 [ 286.501450][ T28] [ 286.503838][ T28] ============================================= [ 286.503838][ T28] [ 286.512237][ T28] NMI backtrace for cpu 0 [ 286.516544][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00126-g26b1224903b3 #0 [ 286.526323][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.536361][ T28] Call Trace: [ 286.539624][ T28] [ 286.542539][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.547210][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.552476][ T28] ? panic+0x76b/0x76b [ 286.556572][ T28] ? console_unlock+0x6bd/0x6f0 [ 286.561417][ T28] ? console_trylock_spinning+0x450/0x450 [ 286.567135][ T28] ? nmi_cpu_backtrace+0x248/0x4b0 [ 286.572258][ T28] nmi_cpu_backtrace+0x47c/0x4b0 [ 286.577177][ T28] ? vprintk_emit+0x109/0x1e0 [ 286.581836][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 286.587971][ T28] ? _printk+0xcf/0x10f [ 286.592108][ T28] ? panic+0x76b/0x76b [ 286.596158][ T28] ? __wake_up_klogd+0xcd/0x100 [ 286.600991][ T28] ? panic+0x76b/0x76b [ 286.605042][ T28] ? __rcu_read_unlock+0x8f/0x100 [ 286.610048][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.616134][ T28] nmi_trigger_cpumask_backtrace+0x169/0x280 [ 286.622111][ T28] watchdog+0xcd5/0xd20 [ 286.626302][ T28] kthread+0x266/0x300 [ 286.630365][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.635378][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.639960][ T28] ret_from_fork+0x1f/0x30 [ 286.644387][ T28] [ 286.647581][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.652801][ C1] NMI backtrace for cpu 1 [ 286.652811][ C1] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 6.0.0-rc4-syzkaller-00126-g26b1224903b3 #0 [ 286.652825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.652834][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.652897][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0xa0 [ 286.652917][ C1] Code: f0 48 83 c8 08 48 c7 04 01 03 00 00 00 48 89 f0 48 83 c8 10 48 89 14 01 48 83 ce 18 4c 89 0c 31 4c 89 44 f9 20 c3 4c 8b 04 24 <65> 48 8b 14 25 00 6f 02 00 65 8b 0d f4 d1 78 7e f7 c1 00 01 ff 00 [ 286.652928][ C1] RSP: 0018:ffffc900000d78c8 EFLAGS: 00000293 [ 286.652939][ C1] RAX: ffffffff846d9b43 RBX: 000000000000000f RCX: ffff8880122ed880 [ 286.652949][ C1] RDX: 0000000000000000 RSI: 000000000000000f RDI: 000000000000000f [ 286.652957][ C1] RBP: 000000000000000f R08: ffffffff846d9b54 R09: fffffbfff1f30fac [ 286.652966][ C1] R10: fffffbfff1f30fac R11: 1ffffffff1f30fab R12: ffffffff8aa7352a [ 286.652976][ C1] R13: ffffc900000d7960 R14: 0000000000000005 R15: ffffffff8aa7352a [ 286.652988][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 286.652999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.653007][ C1] CR2: 0000558fe7a44b48 CR3: 000000000ca8e000 CR4: 00000000003506e0 [ 286.653019][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.653026][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.653034][ C1] Call Trace: [ 286.653038][ C1] [ 286.653042][ C1] insn_decode+0x44/0x510 [ 286.653083][ C1] ? text_poke_loc_init+0xa2/0x510 [ 286.653118][ C1] ? kmem_cache_alloc_node+0xdb/0x350 [ 286.653149][ C1] text_poke_loc_init+0xc5/0x510 [ 286.653164][ C1] ? text_poke_finish+0x30/0x30 [ 286.653182][ C1] ? static_key_disable_cpuslocked+0x95/0x1b0 [ 286.653217][ C1] arch_jump_label_transform_queue+0x70/0xd0 [ 286.653234][ C1] __jump_label_update+0x19b/0x3b0 [ 286.653254][ C1] static_key_disable_cpuslocked+0xc8/0x1b0 [ 286.653272][ C1] static_key_disable+0x16/0x20 [ 286.653286][ C1] toggle_allocation_gate+0x3d8/0x470 [ 286.653307][ C1] ? virt_to_slab+0x2c0/0x2c0 [ 286.653323][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.653339][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.653354][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.653377][ C1] process_one_work+0x81c/0xd10 [ 286.653421][ C1] ? worker_detach_from_pool+0x260/0x260 [ 286.653438][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.653452][ C1] ? kthread_data+0x4d/0xc0 [ 286.653469][ C1] ? wq_worker_running+0x95/0x190 [ 286.653484][ C1] worker_thread+0xb14/0x1330 [ 286.653514][ C1] kthread+0x266/0x300 [ 286.653527][ C1] ? rcu_lock_release+0x20/0x20 [ 286.653541][ C1] ? kthread_blkcg+0xd0/0xd0 [ 286.653556][ C1] ret_from_fork+0x1f/0x30 [ 286.653579][ C1] [ 286.653888][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.653898][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00126-g26b1224903b3 #0 [ 286.653915][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.653922][ T28] Call Trace: [ 286.653928][ T28] [ 286.653934][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.653955][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.653972][ T28] ? panic+0x76b/0x76b [ 286.653995][ T28] ? vscnprintf+0x59/0x80 [ 286.654013][ T28] panic+0x316/0x76b [ 286.654028][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 286.654045][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.654063][ T28] ? fb_is_primary_device+0xcc/0xcc [ 286.654081][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.654102][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.654118][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 286.654142][ T28] watchdog+0xd16/0xd20 [ 286.654169][ T28] kthread+0x266/0x300 [ 286.654184][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.654200][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.654217][ T28] ret_from_fork+0x1f/0x30 [ 286.654246][ T28] [ 286.658128][ T28] Kernel Offset: disabled [ 287.052320][ T28] Rebooting in 86400 seconds..