./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor360495493 <...> DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb forked to background, child pid 4646 [ 32.794920][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.806263][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.89' (ECDSA) to the list of known hosts. execve("./syz-executor360495493", ["./syz-executor360495493"], 0x7ffc18069bb0 /* 10 vars */) = 0 brk(NULL) = 0x5555571f3000 brk(0x5555571f3c40) = 0x5555571f3c40 arch_prctl(ARCH_SET_FS, 0x5555571f3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555571f35d0) = 5074 set_robust_list(0x5555571f35e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f8c269e75e0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f8c269e7cb0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f8c269e7680, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8c269e7cb0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor360495493", 4096) = 27 brk(0x555557214c40) = 0x555557214c40 brk(0x555557215000) = 0x555557215000 mprotect(0x7f8c26aa9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached , child_tidptr=0x5555571f35d0) = 5075 [pid 5075] set_robust_list(0x5555571f35e0, 24) = 0 [pid 5075] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setsid() = 1 [pid 5075] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5075] unshare(CLONE_NEWNS) = 0 [pid 5075] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5075] unshare(CLONE_NEWIPC) = 0 [pid 5075] unshare(CLONE_NEWCGROUP) = 0 [pid 5075] unshare(CLONE_NEWUTS) = 0 [pid 5075] unshare(CLONE_SYSVSEM) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "16777216", 8) = 8 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "536870912", 9) = 9 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "8192", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5075] close(3) = 0 [pid 5075] getpid() = 1 [pid 5075] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5078] set_robust_list(0x7f8c269d79e0, 24) = 0 [pid 5078] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 5078] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 1 [pid 5078] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 5078] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5078] ioctl(3, NBD_SET_SIZE_BLOCKS, 1 [pid 5077] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... ioctl resumed>) = 0 [pid 5078] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5077] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 6 [pid 5078] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5078] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5078] ioctl(3, NBD_SET_SOCK, 4 [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f8c26aaf4dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8c26996000 [pid 5077] mprotect(0x7f8c26997000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] clone(child_stack=0x7f8c269b63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5079 attached , parent_tid=[4], tls=0x7f8c269b6700, child_tidptr=0x7f8c269b69d0) = 4 [pid 5079] set_robust_list(0x7f8c269b69e0, 24) = 0 [pid 5079] futex(0x7f8c26aaf4d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f8c26aaf4d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... futex resumed>) = 1 [pid 5077] futex(0x7f8c26aaf4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] ioctl(6, NBD_DO_IT [pid 5078] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f8c26aaf4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 0 syzkaller login: [ 56.083763][ T5079] nbd0: detected capacity change from 0 to 2 [pid 5078] ioctl(3, BLKRRPART [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5077] close(3) = 0 [pid 5077] close(4) = 0 [pid 5077] close(5) = 0 [pid 5077] close(6) = 0 [pid 5077] close(7) = -1 EBADF (Bad file descriptor) [pid 5077] close(8) = -1 EBADF (Bad file descriptor) [pid 5077] close(9) = -1 EBADF (Bad file descriptor) [pid 5077] close(10) = -1 EBADF (Bad file descriptor) [pid 5077] close(11) = -1 EBADF (Bad file descriptor) [pid 5077] close(12) = -1 EBADF (Bad file descriptor) [pid 5077] close(13) = -1 EBADF (Bad file descriptor) [pid 5077] close(14) = -1 EBADF (Bad file descriptor) [pid 5077] close(15) = -1 EBADF (Bad file descriptor) [pid 5077] close(16) = -1 EBADF (Bad file descriptor) [pid 5077] close(17) = -1 EBADF (Bad file descriptor) [pid 5077] close(18) = -1 EBADF (Bad file descriptor) [pid 5077] close(19) = -1 EBADF (Bad file descriptor) [pid 5077] close(20) = -1 EBADF (Bad file descriptor) [pid 5077] close(21) = -1 EBADF (Bad file descriptor) [pid 5077] close(22) = -1 EBADF (Bad file descriptor) [pid 5077] close(23) = -1 EBADF (Bad file descriptor) [pid 5077] close(24) = -1 EBADF (Bad file descriptor) [pid 5077] close(25) = -1 EBADF (Bad file descriptor) [pid 5077] close(26) = -1 EBADF (Bad file descriptor) [pid 5077] close(27) = -1 EBADF (Bad file descriptor) [pid 5077] close(28) = -1 EBADF (Bad file descriptor) [pid 5077] close(29) = -1 EBADF (Bad file descriptor) [pid 5077] exit_group(0) = ? [ 56.313274][ T4389] block nbd0: Receive control failed (result -104) [ 56.319140][ T5079] block nbd0: shutting down sockets [ 56.349878][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.359090][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.367257][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.376561][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.385122][ T991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.394245][ T991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.402263][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.411799][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.419810][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.428872][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.436794][ T5080] ldm_validate_partition_table(): Disk read failed. [ 56.443709][ T991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.452830][ T991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.460768][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.469857][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.477762][ T991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.486905][ T991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.495061][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.504313][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.512334][ T5080] Dev nbd0: unable to read RDB block 0 [ 56.518201][ T991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.527341][ T991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 56.536185][ T5080] nbd0: unable to read partition table [ 56.542111][ T5080] nbd0: partition table beyond EOD, truncated [ 56.549825][ T5078] syz-executor360: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.567565][ T5078] CPU: 1 PID: 5078 Comm: syz-executor360 Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 56.577474][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.587526][ T5078] Call Trace: [ 56.590815][ T5078] [ 56.593768][ T5078] dump_stack_lvl+0xd1/0x138 [ 56.598406][ T5078] warn_alloc.cold+0x95/0x1a7 [ 56.603094][ T5078] ? zone_watermark_ok_safe+0x300/0x300 [ 56.608653][ T5078] __vmalloc_node_range+0xfc7/0x13c0 [ 56.613940][ T5078] ? bdev_disk_changed+0x368/0xfc0 [ 56.619058][ T5078] ? vfree_atomic+0xe0/0xe0 [ 56.623562][ T5078] ? bdev_disk_changed+0x368/0xfc0 [ 56.628683][ T5078] vzalloc+0x6b/0x80 [ 56.632666][ T5078] ? bdev_disk_changed+0x368/0xfc0 [ 56.637805][ T5078] bdev_disk_changed+0x368/0xfc0 [ 56.642780][ T5078] blkdev_get_whole+0x18a/0x2d0 [ 56.647669][ T5078] blkdev_get_by_dev.part.0+0x5e0/0xb80 [ 56.653227][ T5078] ? devcgroup_check_permission+0x1aa/0x440 [ 56.659129][ T5078] blkdev_get_by_dev+0x6f/0x90 [ 56.663911][ T5078] disk_scan_partitions+0x1dd/0x280 [ 56.669134][ T5078] blkdev_common_ioctl+0x649/0x1ba0 [ 56.674346][ T5078] ? blkdev_bszset+0x1f0/0x1f0 [ 56.679156][ T5078] ? trace_lock_acquire+0x1d1/0x290 [ 56.684380][ T5078] ? lock_acquire+0x32/0xc0 [ 56.688904][ T5078] blkdev_ioctl+0x2c6/0x800 [ 56.693430][ T5078] ? blkdev_common_ioctl+0x1ba0/0x1ba0 [ 56.698906][ T5078] ? bpf_lsm_file_ioctl+0x9/0x10 [ 56.703853][ T5078] ? blkdev_common_ioctl+0x1ba0/0x1ba0 [ 56.709332][ T5078] __x64_sys_ioctl+0x197/0x210 [ 56.714104][ T5078] do_syscall_64+0x39/0xb0 [ 56.718533][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.724602][ T5078] RIP: 0033:0x7f8c26a2a599 [ 56.729022][ T5078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.748727][ T5078] RSP: 002b:00007f8c269d7308 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.757143][ T5078] RAX: ffffffffffffffda RBX: 00007f8c26aaf4c8 RCX: 00007f8c26a2a599 [ 56.765135][ T5078] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 56.773126][ T5078] RBP: 00007f8c26aaf4c0 R08: 0000000000000000 R09: 0000000000000000 [ 56.781100][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c26aaf4cc [ 56.789072][ T5078] R13: 00007f8c26a7c1a4 R14: 64626e2f7665642f R15: 0000000000022000 [ 56.797061][ T5078] [ 56.800328][ T5078] Mem-Info: [ 56.803456][ T5078] active_anon:237 inactive_anon:2089 isolated_anon:0 [ 56.803456][ T5078] active_file:6715 inactive_file:7907 isolated_file:0 [ 56.803456][ T5078] unevictable:768 dirty:7086 writeback:0 [ 56.803456][ T5078] slab_reclaimable:18386 slab_unreclaimable:76190 [ 56.803456][ T5078] mapped:2499 shmem:1230 pagetables:219 [ 56.803456][ T5078] sec_pagetables:0 bounce:0 [ 56.803456][ T5078] kernel_misc_reclaimable:0 [ 56.803456][ T5078] free:1498202 free_pcp:10548 free_cma:0 [ 56.848814][ T5078] Node 0 active_anon:948kB inactive_anon:8356kB active_file:26788kB inactive_file:31628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:9996kB dirty:28332kB writeback:0kB shmem:3384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7792kB pagetables:876kB sec_pagetables:0kB all_unreclaimable? no [ 56.881285][ T5078] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 56.912287][ T5078] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.939370][ T5078] lowmem_reserve[]: 0 2619 2621 2621 2621 [ 56.945240][ T5078] Node 0 DMA32 free:2049756kB boost:0kB min:35456kB low:44320kB high:53184kB reserved_highatomic:0KB active_anon:948kB inactive_anon:8356kB active_file:26788kB inactive_file:31628kB unevictable:1536kB writepending:28332kB present:3129332kB managed:2686596kB mlocked:0kB bounce:0kB free_pcp:19968kB local_pcp:14916kB free_cma:0kB [ 56.975980][ T5078] lowmem_reserve[]: 0 0 1 1 1 [ 56.980771][ T5078] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1868kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.007634][ T5078] lowmem_reserve[]: 0 0 0 0 0 [ 57.012426][ T5078] Node 1 Normal free:3927692kB boost:0kB min:54424kB low:68028kB high:81632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117608kB mlocked:0kB bounce:0kB free_pcp:22176kB local_pcp:13440kB free_cma:0kB [ 57.042091][ T5078] lowmem_reserve[]: 0 0 0 0 0 [ 57.046843][ T5078] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.059528][ T5078] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 1*16kB (M) 184*32kB (UE) 51*64kB (UM) 16*128kB (UM) 3*256kB (UME) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 496*4096kB (M) = 2049756kB [ 57.076610][ T5078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 57.088195][ T5078] Node 1 Normal: 183*4kB (UME) 50*8kB (UE) 36*16kB (UE) 37*32kB (UME) 13*64kB (UME) 6*128kB (UE) 1*256kB (E) 0*512kB 3*1024kB (UME) 2*2048kB (UE) 956*4096kB (M) = 3927692kB [ 57.105629][ T5078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.115243][ T5078] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.124715][ T5078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.134341][ T5078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.143717][ T5078] 15852 total pagecache pages [ 57.148431][ T5078] 0 pages in swap cache [ 57.152668][ T5078] Free swap = 0kB [ 57.156393][ T5078] Total swap = 0kB [ 57.160176][ T5078] 2097051 pages RAM [pid 5079] <... ioctl resumed>) = ? [pid 5078] <... ioctl resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571f35d0) = 5 ./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x5555571f35e0, 24) = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8c269b7000 [pid 5081] mprotect(0x7f8c269b8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] clone(child_stack=0x7f8c269d73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6], tls=0x7f8c269d7700, child_tidptr=0x7f8c269d79d0) = 6 [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x7f8c269d79e0, 24) = 0 [pid 5082] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 5082] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5082] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... socketpair resumed>[4, 5]) = 0 [pid 5082] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5082] ioctl(3, NBD_SET_SIZE_BLOCKS, 1 [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... ioctl resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... futex resumed>) = 0 [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 6 [pid 5082] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] ioctl(3, NBD_SET_SOCK, 4 [pid 5081] <... futex resumed>) = 0 [ 57.163982][ T5078] 0 pages HighMem/MovableOnly [ 57.168642][ T5078] 391693 pages reserved [ 57.172838][ T5078] 0 pages cma reserved [ 57.177674][ T5080] ldm_validate_partition_table(): Disk read failed. [ 57.185524][ T5080] Dev nbd0: unable to read RDB block 0 [ 57.191613][ T5080] nbd0: unable to read partition table [ 57.197372][ T5080] nbd0: partition table beyond EOD, truncated [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... ioctl resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5082] futex(0x7f8c26aaf4c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7f8c26aaf4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5082] ioctl(6, NBD_DO_IT [pid 5081] futex(0x7f8c26aaf4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5081] futex(0x7f8c26aaf4dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8c26996000 [pid 5081] mprotect(0x7f8c26997000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] clone(child_stack=0x7f8c269b63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5083 attached , parent_tid=[7], tls=0x7f8c269b6700, child_tidptr=0x7f8c269b69d0) = 7 [pid 5081] futex(0x7f8c26aaf4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7f8c26aaf4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 57.282623][ T5082] nbd0: detected capacity change from 0 to 2 [pid 5083] set_robust_list(0x7f8c269b69e0, 24) = 0 [pid 5083] ioctl(3, BLKRRPART [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] close(3) = 0 [pid 5081] close(4) = 0 [pid 5081] close(5) = 0 [pid 5081] close(6) = 0 [pid 5081] close(7) = -1 EBADF (Bad file descriptor) [pid 5081] close(8) = -1 EBADF (Bad file descriptor) [pid 5081] close(9) = -1 EBADF (Bad file descriptor) [pid 5081] close(10) = -1 EBADF (Bad file descriptor) [pid 5081] close(11) = -1 EBADF (Bad file descriptor) [pid 5081] close(12) = -1 EBADF (Bad file descriptor) [pid 5081] close(13) = -1 EBADF (Bad file descriptor) [pid 5081] close(14) = -1 EBADF (Bad file descriptor) [pid 5081] close(15) = -1 EBADF (Bad file descriptor) [pid 5081] close(16) = -1 EBADF (Bad file descriptor) [pid 5081] close(17) = -1 EBADF (Bad file descriptor) [pid 5081] close(18) = -1 EBADF (Bad file descriptor) [pid 5081] close(19) = -1 EBADF (Bad file descriptor) [pid 5081] close(20) = -1 EBADF (Bad file descriptor) [pid 5081] close(21) = -1 EBADF (Bad file descriptor) [pid 5081] close(22) = -1 EBADF (Bad file descriptor) [pid 5081] close(23) = -1 EBADF (Bad file descriptor) [pid 5081] close(24) = -1 EBADF (Bad file descriptor) [pid 5081] close(25) = -1 EBADF (Bad file descriptor) [pid 5081] close(26) = -1 EBADF (Bad file descriptor) [pid 5081] close(27) = -1 EBADF (Bad file descriptor) [pid 5081] close(28) = -1 EBADF (Bad file descriptor) [pid 5081] close(29) = -1 EBADF (Bad file descriptor) [pid 5081] exit_group(0) = ? [ 57.534920][ T4389] block nbd0: Receive control failed (result -104) [pid 5075] kill(-5, SIGKILL) = 0 [pid 5075] kill(5, SIGKILL) = 0 [pid 5075] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5075] getdents64(3, 0x5555571f4620 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, 0x5555571f4620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [ 76.321031][ T7] cfg80211: failed to load regulatory.db [ 87.840246][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 30 seconds [ 117.333950][ T4434] udevd[4434]: worker [5080] /devices/virtual/block/nbd0 is taking a long time [ 117.919696][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 60 seconds [ 147.999709][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 90 seconds [ 178.079756][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 120 seconds [ 208.159667][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 150 seconds [ 237.490419][ T4434] udevd[4434]: worker [5080] /devices/virtual/block/nbd0 timeout; kill it [ 237.500324][ T4434] udevd[4434]: seq 7516 '/devices/virtual/block/nbd0' killed [ 238.239841][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 180 seconds [ 268.319668][ T52] block nbd0: Possible stuck request ffff88801f62d400: control (read@0,1024B). Runtime 210 seconds [ 286.239552][ T28] INFO: task syz-executor360:5082 blocked for more than 143 seconds. [ 286.247734][ T28] Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 286.254888][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.263671][ T28] task:syz-executor360 state:D stack:27864 pid:5082 ppid:5075 flags:0x00004006 [ 286.273104][ T28] Call Trace: [ 286.276400][ T28] [ 286.279411][ T28] __schedule+0x2544/0x53f0 [ 286.283996][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.290041][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.296035][ T28] ? mark_lock.part.0+0xee/0x1910 [ 286.301136][ T28] ? static_obj+0xc0/0xc0 [ 286.305559][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.310963][ T28] ? __mutex_lock+0xa43/0x1360 [ 286.315749][ T28] schedule+0xde/0x1b0 [ 286.319892][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.325380][ T28] __mutex_lock+0xa48/0x1360 [ 286.330091][ T28] ? blkdev_put+0xc0/0x770 [ 286.334604][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.340216][ T28] ? locks_check_ctx_file_list+0x1d/0x110 [ 286.346023][ T28] ? lock_acquire+0x32/0xc0 [ 286.350601][ T28] ? do_raw_spin_unlock+0x175/0x230 [ 286.355814][ T28] ? _raw_spin_unlock+0x28/0x40 [ 286.360779][ T28] ? locks_remove_file+0x2fb/0x570 [ 286.365929][ T28] blkdev_put+0xc0/0x770 [ 286.370495][ T28] blkdev_close+0x68/0x80 [ 286.374847][ T28] __fput+0x27c/0xa90 [ 286.378883][ T28] ? blkdev_fsync+0xa0/0xa0 [ 286.383464][ T28] task_work_run+0x16f/0x270 [ 286.388080][ T28] ? task_work_cancel+0x30/0x30 [ 286.392998][ T28] ? blkdev_common_ioctl+0x1ba0/0x1ba0 [ 286.398577][ T28] ptrace_notify+0x118/0x140 [ 286.403238][ T28] syscall_exit_to_user_mode_prepare+0x129/0x280 [ 286.409665][ T28] syscall_exit_to_user_mode+0xd/0x50 [ 286.415036][ T28] do_syscall_64+0x46/0xb0 [ 286.419542][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.425499][ T28] RIP: 0033:0x7f8c26a2a599 [ 286.429980][ T28] RSP: 002b:00007f8c269d7308 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.438404][ T28] RAX: 0000000000000000 RBX: 00007f8c26aaf4c8 RCX: 00007f8c26a2a599 [ 286.446452][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 286.454555][ T28] RBP: 00007f8c26aaf4c0 R08: 0000000000000000 R09: 0000000000000000 [ 286.462636][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c26aaf4cc [ 286.470676][ T28] R13: 00007f8c26a7c1a4 R14: 64626e2f7665642f R15: 0000000000022000 [ 286.478666][ T28] [ 286.482062][ T28] INFO: task syz-executor360:5083 blocked for more than 143 seconds. [ 286.490195][ T28] Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 286.497215][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.505954][ T28] task:syz-executor360 state:D stack:29536 pid:5083 ppid:5075 flags:0x00004004 [ 286.515282][ T28] Call Trace: [ 286.518558][ T28] [ 286.521566][ T28] __schedule+0x2544/0x53f0 [ 286.526111][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.532151][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.538155][ T28] ? static_obj+0xc0/0xc0 [ 286.542566][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.547875][ T28] ? __mutex_lock+0xa43/0x1360 [ 286.552708][ T28] schedule+0xde/0x1b0 [ 286.556830][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.562380][ T28] __mutex_lock+0xa48/0x1360 [ 286.566991][ T28] ? blkdev_get_by_dev.part.0+0x9b/0xb80 [ 286.572707][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.578275][ T28] ? iput+0xd2/0x8c0 [ 286.582285][ T28] ? disk_block_events+0x21/0x140 [ 286.587385][ T28] blkdev_get_by_dev.part.0+0x9b/0xb80 [ 286.593157][ T28] ? devcgroup_check_permission+0x1aa/0x440 [ 286.599122][ T28] blkdev_get_by_dev+0x6f/0x90 [ 286.603968][ T28] disk_scan_partitions+0x1dd/0x280 [ 286.609184][ T28] blkdev_common_ioctl+0x649/0x1ba0 [ 286.614439][ T28] ? blkdev_bszset+0x1f0/0x1f0 [ 286.619230][ T28] ? trace_lock_acquire+0x1d1/0x290 [ 286.624503][ T28] ? lock_acquire+0x32/0xc0 [ 286.629042][ T28] blkdev_ioctl+0x2c6/0x800 [ 286.633639][ T28] ? blkdev_common_ioctl+0x1ba0/0x1ba0 [ 286.639129][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 286.644221][ T28] ? blkdev_common_ioctl+0x1ba0/0x1ba0 [ 286.649744][ T28] __x64_sys_ioctl+0x197/0x210 [ 286.654518][ T28] do_syscall_64+0x39/0xb0 [ 286.658933][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.664931][ T28] RIP: 0033:0x7f8c26a2a599 [ 286.669403][ T28] RSP: 002b:00007f8c269b6308 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.677818][ T28] RAX: ffffffffffffffda RBX: 00007f8c26aaf4d8 RCX: 00007f8c26a2a599 [ 286.685866][ T28] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 286.693889][ T28] RBP: 00007f8c26aaf4d0 R08: 00007f8c269b6700 R09: 0000000000000000 [ 286.702192][ T28] R10: 00007f8c269b6700 R11: 0000000000000246 R12: 00007f8c26aaf4dc [ 286.710347][ T28] R13: 00007f8c26a7c1a4 R14: 64626e2f7665642f R15: 0000000000022000 [ 286.718362][ T28] [ 286.721642][ T28] [ 286.721642][ T28] Showing all locks held in the system: [ 286.729401][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.734673][ T28] #0: ffffffff8c791c30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 286.745280][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.750611][ T28] #0: ffffffff8c791930 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 286.761700][ T28] 1 lock held by khungtaskd/28: [ 286.766566][ T28] #0: ffffffff8c792780 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x2c2 [ 286.776538][ T28] 1 lock held by klogd/4423: [ 286.781183][ T28] #0: ffff8880b993b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 [ 286.791219][ T28] 2 locks held by getty/4746: [ 286.795903][ T28] #0: ffff88802a200098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 286.805814][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 286.816190][ T28] 1 lock held by udevd/5080: [ 286.821137][ T28] #0: ffff88801f5064c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb80 [ 286.831800][ T28] 1 lock held by syz-executor360/5082: [ 286.837262][ T28] #0: ffff88801f5064c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xc0/0x770 [ 286.846721][ T28] 1 lock held by syz-executor360/5083: [ 286.852267][ T28] #0: ffff88801f5064c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb80 [ 286.862883][ T28] [ 286.865214][ T28] ============================================= [ 286.865214][ T28] [ 286.873662][ T28] NMI backtrace for cpu 0 [ 286.877990][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 286.887259][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 286.897301][ T28] Call Trace: [ 286.900568][ T28] [ 286.903487][ T28] dump_stack_lvl+0xd1/0x138 [ 286.908076][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 286.913360][ T28] nmi_trigger_cpumask_backtrace+0x32f/0x3c0 [ 286.919359][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 286.924549][ T28] watchdog+0xc75/0xfc0 [ 286.928843][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.934823][ T28] kthread+0x2e8/0x3a0 [ 286.938883][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.944506][ T28] ret_from_fork+0x1f/0x30 [ 286.948920][ T28] [ 286.952044][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.957278][ C1] NMI backtrace for cpu 1 [ 286.957288][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 286.957308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 286.957319][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.957393][ C1] RIP: 0010:mark_lock.part.0+0x15/0x1910 [ 286.957414][ C1] Code: c7 a0 c7 1f 90 e8 3b d3 a3 02 89 c0 c3 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 89 d5 48 ba 00 00 00 00 00 fc ff df 41 54 <49> 89 f4 55 53 48 81 ec 38 01 00 00 48 8d 5c 24 38 48 89 3c 24 48 [ 286.957430][ C1] RSP: 0018:ffffc90000107968 EFLAGS: 00000002 [ 286.957443][ C1] RAX: 0000000000000004 RBX: 0000000000000003 RCX: 1ffffffff2268a76 [ 286.957454][ C1] RDX: dffffc0000000000 RSI: ffff88813fe54530 RDI: ffff88813fe53a80 [ 286.957466][ C1] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffff91344ac7 [ 286.957477][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88813fe53a80 [ 286.957487][ C1] R13: 0000000000000006 R14: ffff88813fe544b8 R15: ffffffff8c8de480 [ 286.957499][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 286.957516][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.957528][ C1] CR2: 000056433bf4b600 CR3: 000000000c48e000 CR4: 00000000003506e0 [ 286.957539][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.957548][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.957559][ C1] Call Trace: [ 286.957564][ C1] [ 286.957571][ C1] mark_held_locks+0x9f/0xe0 [ 286.957588][ C1] ? kmem_cache_alloc_lru+0x1c0/0x760 [ 286.957606][ C1] lockdep_hardirqs_on_prepare+0x28f/0x410 [ 286.957623][ C1] ? __text_poke+0x64e/0x8e0 [ 286.957644][ C1] trace_hardirqs_on+0x31/0x180 [ 286.957685][ C1] ? kmem_cache_alloc_lru+0x1c0/0x760 [ 286.957702][ C1] __text_poke+0x64e/0x8e0 [ 286.957722][ C1] ? setup_data_read+0x230/0x230 [ 286.957746][ C1] ? text_poke_memset+0x60/0x60 [ 286.957770][ C1] text_poke_bp_batch+0x445/0x6b0 [ 286.957791][ C1] ? kmem_cache_alloc_lru+0x1c0/0x760 [ 286.957810][ C1] ? do_sync_core+0x30/0x30 [ 286.957833][ C1] ? __jump_label_update+0x296/0x410 [ 286.957883][ C1] text_poke_finish+0x1a/0x30 [ 286.957905][ C1] arch_jump_label_transform_apply+0x17/0x30 [ 286.957924][ C1] jump_label_update+0x32f/0x410 [ 286.957953][ C1] static_key_enable_cpuslocked+0x1b5/0x270 [ 286.957982][ C1] static_key_enable+0x1a/0x20 [ 286.958009][ C1] toggle_allocation_gate+0xf8/0x230 [ 286.958035][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 286.958059][ C1] ? trace_lock_acquire+0x1d1/0x290 [ 286.958080][ C1] process_one_work+0x9bf/0x1710 [ 286.958105][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.958126][ C1] ? rcu_read_lock_sched_held+0x3e/0x70 [ 286.958157][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.958176][ C1] ? lock_acquire+0x32/0xc0 [ 286.958192][ C1] ? worker_thread+0x16d/0x1090 [ 286.958222][ C1] worker_thread+0x669/0x1090 [ 286.958247][ C1] ? process_one_work+0x1710/0x1710 [ 286.958269][ C1] kthread+0x2e8/0x3a0 [ 286.958286][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.958306][ C1] ret_from_fork+0x1f/0x30 [ 286.958335][ C1] [ 286.958342][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.064 msecs [ 286.959276][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.285470][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-next-20221226-syzkaller #0 [ 287.294750][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 287.304802][ T28] Call Trace: [ 287.308088][ T28] [ 287.311019][ T28] dump_stack_lvl+0xd1/0x138 [ 287.315622][ T28] panic+0x2cc/0x626 [ 287.319568][ T28] ? panic_print_sys_info.part.0+0x110/0x110 [ 287.325561][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 287.330947][ T28] ? watchdog.cold+0x130/0x158 [ 287.335731][ T28] watchdog.cold+0x141/0x158 [ 287.340328][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 287.346327][ T28] kthread+0x2e8/0x3a0 [ 287.350398][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.356036][ T28] ret_from_fork+0x1f/0x30 [ 287.360474][ T28] [ 287.363562][ T28] Kernel Offset: disabled [ 287.367900][ T28] Rebooting in 86400 seconds..